last executing test programs: 3m50.847030879s ago: executing program 2 (id=5058): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, 0x0, 0x0) 3m50.699957466s ago: executing program 2 (id=5062): r0 = syz_ublk_setup_io_uring(0x11e, &(0x7f00000000c0)={0x0, 0xcae, 0x80, 0x103, 0x32}, &(0x7f0000000380), &(0x7f0000000480), &(0x7f0000000340)) syz_io_uring_setup(0x16b8, &(0x7f0000000500)={0x0, 0x1000001c, 0x27, 0x2, 0x166, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000)) 3m50.502418495s ago: executing program 2 (id=5066): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x2, 0x7ffffff7, 0x51424752, 0x2, 0x8, [{0x1000000, 0x40}, {0xc, 0x8}, {0xe, 0xa0}, {0x10000, 0xfffffff0}, {0x9, 0x3}, {0x7fffffff, 0x8}, {0xfb60, 0x7}, {0x7, 0x10001}], 0x6, 0x78, 0x2, 0x1, 0x6}}) 3m50.262418556s ago: executing program 2 (id=5070): syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x5fb, &(0x7f0000001380)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xc090, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3m49.856414465s ago: executing program 2 (id=5077): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 3m49.279027982s ago: executing program 2 (id=5085): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xcb, 0x0, 0x57) 3m48.814058484s ago: executing program 32 (id=5085): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xcb, 0x0, 0x57) 3.422922011s ago: executing program 1 (id=8641): r0 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x0, &(0x7f0000000280)={[{@grpid}, {@nolazytime}, {@inode32}]}, 0x0, 0x9747, &(0x7f000001c440)="$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") ioctl$FITRIM(r0, 0x80405880, &(0x7f0000000040)={0xffffffff, 0x8000000000000000, 0x3}) 2.970890902s ago: executing program 4 (id=8647): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) 2.855264957s ago: executing program 4 (id=8649): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000004d80)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdc00, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) 2.751082122s ago: executing program 5 (id=8650): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x35, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141436e000030594029f03030180b7060000000000000081005d", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.715796063s ago: executing program 3 (id=8652): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0) 2.471036255s ago: executing program 3 (id=8654): r0 = syz_usb_connect$uac2(0x3, 0x83, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401efff01022000090401010101022000090501"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.281879014s ago: executing program 4 (id=8656): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="178d048604bf0bfb1945d7430008", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.034922986s ago: executing program 1 (id=8660): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x48902) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000300)={0x0, 0x0, {0x0, 0x9, 0x9, 0x10000007}}) 1.660669893s ago: executing program 5 (id=8664): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.49603582s ago: executing program 5 (id=8666): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)={0x20, 0x5e, 0x1, 0x2, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @typed={0x5, 0xf7, 0x0, 0x0, @binary="b6"}]}, 0x20}], 0x1}, 0x0) 1.495735691s ago: executing program 4 (id=8667): r0 = socket(0x28, 0x5, 0x0) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) 1.28542956s ago: executing program 5 (id=8670): r0 = syz_open_dev$usbmon(&(0x7f00000008c0), 0x8, 0x8100) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) 1.236620262s ago: executing program 4 (id=8671): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x82, &(0x7f0000000040)=ANY=[], 0x13, 0x6371, &(0x7f0000007000)="$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") lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0) 1.050943171s ago: executing program 5 (id=8673): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a20021000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db15000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3a5ff", 0xb8) 984.500504ms ago: executing program 0 (id=8674): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0x2e1a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x4}, @IFLA_AF_SPEC={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x4000) 892.503008ms ago: executing program 0 (id=8675): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0xf000, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 892.111848ms ago: executing program 5 (id=8676): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nossd}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 884.771149ms ago: executing program 1 (id=8677): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x541b, 0x0) 754.211605ms ago: executing program 3 (id=8678): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) 715.594087ms ago: executing program 0 (id=8679): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x0, 0x2, 0x0) 614.958461ms ago: executing program 1 (id=8680): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8000000000000004, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x10000006, 0x55595659, 0x0, @stepwise={0xfffffffe, 0x3, 0xec, 0x5b3, 0x1000a, 0x9}}) 585.590143ms ago: executing program 3 (id=8681): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/consoles\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001e80)=[{&(0x7f00000023c0)=""/4107, 0x100b}], 0x1, 0x33, 0x0) 537.696764ms ago: executing program 0 (id=8682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001f300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd9d}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) 463.592238ms ago: executing program 1 (id=8683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010601"], 0x1c}}, 0x0) 387.673922ms ago: executing program 3 (id=8684): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x52, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x5}]}}}]}, 0x96}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 290.909147ms ago: executing program 1 (id=8685): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905010000060000000905021008"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 261.284928ms ago: executing program 0 (id=8686): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000180)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c5805000000451697efe42811ee1df0fa9264f7d866b19705487b00", 0xb2, 0xfffffff7, 0x4, 0xe}, 0x3c) 197.425281ms ago: executing program 3 (id=8687): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x29, 0x2}], 0x10}, 0x0) 154.723053ms ago: executing program 4 (id=8688): r0 = socket$inet6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x7, 0x0, 0xfffffffffffffffe) 0s ago: executing program 0 (id=8689): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x270, 0x20a, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [], [0x0, 0x0, 0x0, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e23], [0x4e20, 0x4e22], 0x3, 0x8, 0x80, 0x7}}, @common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@ipv6header={{0x28}, {0x4, 0x11, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8ba4, 0x0, 0x80000001, '\x00', {0x10000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) kernel console output (not intermixed with test programs): 28 [ 494.941502][T20237] netlink: 'syz.4.7146': attribute type 21 has an invalid length. [ 494.944620][T20238] 9p: Unknown access argument z: -22 [ 494.987506][T20237] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7146'. [ 495.039251][T20237] netlink: 'syz.4.7146': attribute type 4 has an invalid length. [ 495.068313][T20237] netlink: 'syz.4.7146': attribute type 3 has an invalid length. [ 495.088607][T20237] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7146'. [ 495.327094][T20248] loop3: detected capacity change from 0 to 64 [ 495.402198][T20248] Bad inode number on dev loop3: 2 is out of range [ 496.190494][T20287] netlink: 272 bytes leftover after parsing attributes in process `syz.3.7171'. [ 496.500595][T20302] loop5: detected capacity change from 0 to 512 [ 496.564561][T20302] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.7181: bg 0: block 4: invalid block bitmap [ 496.737224][T20302] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 496.787511][T20302] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.7181: invalid indirect mapped block 1 (level 1) [ 496.848795][T20302] EXT4-fs (loop5): 1 truncate cleaned up [ 496.854536][T20302] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 497.017275][T10867] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 497.232453][T10867] usb 5-1: Using ep0 maxpacket: 8 [ 497.244197][T10867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.265501][T10867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 497.277209][T15442] EXT4-fs (loop5): unmounting filesystem. [ 497.321240][T10867] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 497.352599][T10867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.381646][T10867] usb 5-1: Product: syz [ 497.385893][T10867] usb 5-1: Manufacturer: syz [ 497.412367][T10867] usb 5-1: SerialNumber: syz [ 497.441105][T10867] usb 5-1: config 0 descriptor?? [ 497.488415][T10867] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 497.673491][T10867] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 497.692077][T10867] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 497.711990][T10867] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 497.823284][T20358] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7204'. [ 497.877015][ T7] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 497.908567][T10867] usb 5-1: USB disconnect, device number 46 [ 498.062959][T20366] loop3: detected capacity change from 0 to 2048 [ 498.076893][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 498.083767][ T7] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 498.110522][ T7] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 498.135530][T20370] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 498.138487][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.187836][T20366] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '..' [ 498.195772][ T7] usb 6-1: Product: syz [ 498.215389][ T7] usb 6-1: Manufacturer: syz [ 498.226766][T20366] Remounting filesystem read-only [ 498.231493][ T7] usb 6-1: SerialNumber: syz [ 498.262278][ T7] r8152-cfgselector 6-1: config 0 descriptor?? [ 498.400624][T20373] loop0: detected capacity change from 0 to 4096 [ 498.444720][T20373] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 498.519033][T20373] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 498.527624][T20373] ntfs3: loop0: Inode r=b is not in use! [ 498.536315][T20373] ntfs3: loop0: Failed to load $Extend. [ 498.647016][ T7310] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 498.663797][T20371] loop1: detected capacity change from 0 to 32768 [ 498.698564][ T7] r8152-cfgselector 6-1: Unknown version 0x0000 [ 498.700868][T20371] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.7211 (20371) [ 498.724655][ T7] r8152-cfgselector 6-1: USB disconnect, device number 12 [ 498.796303][T20371] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 498.842044][T20371] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 498.851193][ T7310] usb 4-1: Using ep0 maxpacket: 32 [ 498.858986][ T7310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 498.894269][ T7310] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.907502][T20371] BTRFS info (device loop1): using free space tree [ 498.929847][T20384] loop0: detected capacity change from 0 to 64 [ 498.940541][ T7310] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 498.995712][ T7310] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 499.025919][ T7310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.044997][ T7310] usb 4-1: Product: syz [ 499.058798][ T7310] usb 4-1: Manufacturer: syz [ 499.063437][ T7310] usb 4-1: SerialNumber: syz [ 499.089508][ T7310] usb 4-1: selecting invalid altsetting 1 [ 499.179147][T20371] BTRFS info (device loop1): enabling ssd optimizations [ 499.256951][ T7] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 499.260587][ T4272] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 499.439376][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 499.459657][ T7] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 499.474945][ T7] usb 5-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 499.485495][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.500111][ T7310] usb 4-1: 6:0: failed to get current value for ch 0 (-71) [ 499.523723][ T7] usb-storage 5-1:1.0: USB Mass Storage device detected [ 499.581410][ T7310] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 499.603110][ T7310] usb 4-1: USB disconnect, device number 46 [ 499.706939][ T128] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 499.750951][ T7] scsi host1: usb-storage 5-1:1.0 [ 499.821068][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.851734][T20420] netlink: 'syz.1.7221': attribute type 2 has an invalid length. [ 499.898043][ T128] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.916753][ T128] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 499.928601][ T128] usb 6-1: string descriptor 0 read error: -22 [ 499.930901][ T14] usb 5-1: USB disconnect, device number 47 [ 499.934841][ T128] usb 6-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 499.934866][ T128] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.011423][ T128] usb 6-1: 0:1 : does not exist [ 500.035239][ T128] usb 6-1: 0:2 : does not exist [ 500.437190][ T128] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 500.457126][ T128] usb 6-1: USB disconnect, device number 13 [ 500.702052][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.892656][ T7310] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 501.088749][ T7310] usb 1-1: config 255 has an invalid interface number: 97 but max is 1 [ 501.107021][T20465] __nla_validate_parse: 1 callbacks suppressed [ 501.107038][T20465] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7247'. [ 501.108688][ T7310] usb 1-1: config 255 has an invalid interface number: 227 but max is 1 [ 501.176684][ T7310] usb 1-1: config 255 has no interface number 0 [ 501.196804][ T7310] usb 1-1: config 255 has no interface number 1 [ 501.213587][ T7310] usb 1-1: config 255 interface 97 has no altsetting 0 [ 501.223132][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.235361][T20471] netlink: 'syz.4.7248': attribute type 21 has an invalid length. [ 501.263953][ T7310] usb 1-1: config 255 interface 227 has no altsetting 0 [ 501.268928][T20471] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7248'. [ 501.290748][ T7310] usb 1-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 501.305908][ T7310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.319035][ T7310] usb 1-1: Product: syz [ 501.325487][ T7310] usb 1-1: Manufacturer: syz [ 501.333579][ T7310] usb 1-1: SerialNumber: syz [ 501.575845][ T7310] usb 1-1: bad CDC descriptors [ 501.582142][ T7310] usb 1-1: bad CDC descriptors [ 501.631569][ T7310] usb 1-1: USB disconnect, device number 39 [ 501.756762][ T128] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 501.971136][ T128] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 501.990609][ T128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.056749][ T128] usb 2-1: Product: syz [ 502.061038][ T128] usb 2-1: Manufacturer: syz [ 502.065656][ T128] usb 2-1: SerialNumber: syz [ 502.166176][ T128] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 502.240342][T20505] netlink: 'syz.3.7266': attribute type 32 has an invalid length. [ 502.287901][T20508] loop4: detected capacity change from 0 to 256 [ 502.314564][T20505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7266'. [ 502.379495][T20508] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 502.409462][T20505] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 502.418919][T20508] FAT-fs (loop4): Filesystem has been set read-only [ 502.658354][ T4350] usb 2-1: USB disconnect, device number 41 [ 503.216625][ T128] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 503.226726][ T128] ath9k_htc: Failed to initialize the device [ 503.237214][ T4350] usb 2-1: ath9k_htc: USB layer deinitialized [ 503.478949][T20553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7288'. [ 503.510399][T20556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7291'. [ 503.533448][T20556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7291'. [ 503.707377][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 503.707392][ T27] audit: type=1326 audit(1789391644.288:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20564 comm="syz.4.7296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78a99e159 code=0x7ffc0000 [ 503.819339][ T27] audit: type=1326 audit(1789391644.288:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20564 comm="syz.4.7296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78a99e159 code=0x7ffc0000 [ 503.899534][T20571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7298'. [ 503.965162][ T27] audit: type=1326 audit(1789391644.288:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20564 comm="syz.4.7296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78a99e159 code=0x7ffc0000 [ 503.978170][T20576] loop4: detected capacity change from 0 to 8 [ 504.077271][ T27] audit: type=1326 audit(1789391644.288:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20564 comm="syz.4.7296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fc78a99e159 code=0x7ffc0000 [ 504.087037][T20576] SQUASHFS error: Unable to read directory block [1d0:0] [ 504.122583][ T27] audit: type=1326 audit(1789391644.288:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20564 comm="syz.4.7296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78a99e159 code=0x7ffc0000 [ 504.172121][ T27] audit: type=1326 audit(1789391644.288:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20564 comm="syz.4.7296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78a99e159 code=0x7ffc0000 [ 504.226652][ T4350] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 504.281491][ T27] audit: type=1326 audit(1789391644.288:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20564 comm="syz.4.7296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc78a99e159 code=0x7ffc0000 [ 504.356622][ T27] audit: type=1326 audit(1789391644.288:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20564 comm="syz.4.7296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc78a99e159 code=0x7ffc0000 [ 504.428143][ T4350] usb 6-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 504.451977][ T4350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.532139][T20595] netlink: 'syz.4.7311': attribute type 32 has an invalid length. [ 504.555462][T20595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7311'. [ 504.567181][T20595] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 504.691827][T20605] netlink: 'syz.4.7315': attribute type 29 has an invalid length. [ 504.700328][T20605] netlink: 'syz.4.7315': attribute type 29 has an invalid length. [ 504.707024][ T4350] dln2 6-1:1.0: USB write failed: -110 [ 504.714438][ T4350] dln2 6-1:1.0: failed to initialize hardware [ 504.777875][ T4350] dln2: probe of 6-1:1.0 failed with error -110 [ 504.806579][ T14] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 504.904266][ T4350] usb 6-1: USB disconnect, device number 14 [ 505.018607][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.050099][ T14] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 505.075553][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.091882][ T14] usb 2-1: Product: syz [ 505.097027][ T14] usb 2-1: Manufacturer: syz [ 505.110523][ T14] usb 2-1: SerialNumber: syz [ 505.292328][T20628] netlink: 'syz.0.7335': attribute type 1 has an invalid length. [ 505.309912][T20628] netlink: 'syz.0.7335': attribute type 2 has an invalid length. [ 505.335423][ T14] usb 2-1: Limiting number of CPorts to U8_MAX [ 505.347130][ T14] usb 2-1: Not enough endpoints found in device, aborting! [ 505.486503][ T4314] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 505.543870][T10867] usb 2-1: USB disconnect, device number 42 [ 505.668420][T20640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7331'. [ 505.688855][ T4314] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 505.701908][T20644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7333'. [ 505.711263][ T4314] usb 4-1: config 0 interface 0 has no altsetting 0 [ 505.744416][ T4314] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 505.776452][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 505.784672][ T4314] usb 4-1: Product: syz [ 505.813172][ T4314] usb 4-1: Manufacturer: syz [ 505.824800][ T4314] usb 4-1: SerialNumber: syz [ 505.844643][ T4314] usb 4-1: config 0 descriptor?? [ 505.873209][ T4314] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 505.905638][ T4314] pctv452e: pctv452e_power_ctrl: 1 [ 505.905638][ T4314] [ 506.074481][ T4314] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -71 [ 506.074481][ T4314] [ 506.105335][ T4314] dvb-usb: bulk message failed: -22 (5/0) [ 506.133112][ T4314] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 506.146716][ T5890] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 506.162134][ T4314] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 506.193091][ T4314] usb 4-1: USB disconnect, device number 47 [ 506.337279][ T5890] usb 6-1: Using ep0 maxpacket: 32 [ 506.344635][ T5890] usb 6-1: unable to get BOS descriptor or descriptor too short [ 506.367448][ T5890] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.403517][ T5890] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.424995][ T5890] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 506.455557][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.471899][ T5890] usb 6-1: Product: syz [ 506.476106][ T5890] usb 6-1: Manufacturer: syz [ 506.486512][ T5890] usb 6-1: SerialNumber: syz [ 506.501115][ T5890] usb 6-1: selecting invalid altsetting 1 [ 506.761776][T20664] loop0: detected capacity change from 0 to 32768 [ 506.869317][T20664] JBD2: Ignoring recovery information on journal [ 506.907275][ T5890] usb 6-1: 6:0: failed to get current value for ch 0 (-71) [ 506.955279][ T5890] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 507.036728][ T5890] usb 6-1: USB disconnect, device number 15 [ 507.122646][T20664] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 507.308994][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 507.390902][ T4280] ocfs2: Unmounting device (7,0) on (node local) [ 507.768597][T20703] netlink: 'syz.0.7358': attribute type 3 has an invalid length. [ 507.984810][T20716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7364'. [ 508.220036][T20724] loop1: detected capacity change from 0 to 512 [ 508.355361][T20724] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 508.382674][T20724] ext4 filesystem being mounted at /1470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.451211][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 508.523466][T20739] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 508.554383][T20741] netlink: 'syz.1.7379': attribute type 10 has an invalid length. [ 508.582890][T20739] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 508.634866][T20741] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 508.643902][T20739] overlayfs: missing 'lowerdir' [ 508.684378][ T4314] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 508.868842][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 508.881891][T20751] loop1: detected capacity change from 0 to 512 [ 508.900204][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 508.929681][ T4314] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 508.951754][T20751] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.7385: bad orphan inode 11862016 [ 508.962510][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.971759][ T4314] usb 5-1: Product: syz [ 508.976029][T20751] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 508.985477][T20751] ext4 filesystem being mounted at /1472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.996433][ T4314] usb 5-1: Manufacturer: syz [ 509.001224][ T4314] usb 5-1: SerialNumber: syz [ 509.014153][ T4314] usb 5-1: config 0 descriptor?? [ 509.026545][T20735] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 509.035023][ T4314] usb 5-1: ucan: probing device on interface #0 [ 509.044036][ T4314] usb 5-1: ucan: invalid endpoint configuration [ 509.050968][ T4314] usb 5-1: ucan: probe failed; try to update the device firmware [ 509.116857][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 509.240009][ T14] usb 5-1: USB disconnect, device number 48 [ 509.651099][ T5890] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 509.658217][T20787] loop3: detected capacity change from 0 to 512 [ 509.686323][T20787] EXT4-fs: Ignoring removed nomblk_io_submit option [ 509.725010][T20787] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 509.741990][T20787] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 509.750405][T20787] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 509.760221][T20787] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 509.770459][T20787] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 509.779732][T20787] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 509.839941][T20787] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.7402: dx entry: limit 65535 != root limit 120 [ 509.854034][T20787] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.7402: Corrupt directory, running e2fsck is recommended [ 509.869810][ T5890] usb 6-1: unable to get BOS descriptor or descriptor too short [ 509.881990][ T5890] usb 6-1: not running at top speed; connect to a high speed hub [ 509.911703][ T5890] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 509.926052][ T5890] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 509.946245][ T5890] usb 6-1: config 4 has no interface number 0 [ 509.954697][ T5890] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 509.974352][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.016471][ T5890] usb 6-1: Product: syz [ 510.020687][ T5890] usb 6-1: Manufacturer: syz [ 510.025468][ T5890] usb 6-1: SerialNumber: syz [ 510.090369][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 510.257657][ T5890] usb 6-1: Found UVC 0.00 device syz (04f2:b746) [ 510.264169][ T5890] usb 6-1: No valid video chain found. [ 510.316353][ T5890] usb 6-1: USB disconnect, device number 16 [ 510.422353][ T14] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 510.618258][ T14] usb 5-1: unable to get BOS descriptor or descriptor too short [ 510.633422][ T14] usb 5-1: not running at top speed; connect to a high speed hub [ 510.652904][ T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.684730][ T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 510.710251][ T14] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 510.733749][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.750326][T20806] loop3: detected capacity change from 0 to 32768 [ 510.757067][ T14] usb 5-1: Product: syz [ 510.761257][ T14] usb 5-1: Manufacturer: syz [ 510.765877][ T14] usb 5-1: SerialNumber: syz [ 510.773687][T20806] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.7408 (20806) [ 510.832747][T20806] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 510.844996][T20806] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 510.880630][T20806] BTRFS info (device loop3): using free space tree [ 511.002757][ T14] usb 5-1: 3:0: failed to get current value for ch 1 (-71) [ 511.041015][ T14] usb 5-1: 3:0: cannot get min/max values for control 2 (id 3) [ 511.087125][ T14] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 511.180465][ T14] usb 5-1: USB disconnect, device number 49 [ 511.307537][T20806] BTRFS info (device loop3): enabling ssd optimizations [ 511.479009][ T4349] udevd[4349]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.509537][ T4279] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 511.821735][T20874] netlink: 'syz.4.7437': attribute type 3 has an invalid length. [ 511.856866][T20874] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7437'. [ 512.553634][ T4350] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 512.629853][T20907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7451'. [ 512.757710][ T4350] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 512.762551][T20911] loop4: detected capacity change from 0 to 1024 [ 512.787331][ T4350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.809982][ T4350] usb 1-1: config 0 descriptor?? [ 513.024237][ T4350] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 513.040152][ T4350] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 513.234637][ T4350] [drm:udl_init] *ERROR* Selecting channel failed [ 513.268212][ T4350] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 513.276153][ T14] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 513.300271][ T4350] [drm] Initialized udl on minor 2 [ 513.316387][ T4350] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 513.334217][T20926] netlink: 88 bytes leftover after parsing attributes in process `syz.5.7460'. [ 513.346604][T20928] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 4294915582 out of range (51000000..2150000000) [ 513.352975][ T4350] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 513.377878][ T4350] usb 1-1: USB disconnect, device number 40 [ 513.395622][ T5890] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 513.430660][ T5890] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 513.445695][ T5890] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 513.469463][ T14] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 513.498743][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.526912][ T14] usb 5-1: config 0 descriptor?? [ 513.563719][T20932] loop3: detected capacity change from 0 to 1024 [ 513.659834][T20932] syz.3.7462: attempt to access beyond end of device [ 513.659834][T20932] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 513.743340][ T14] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 513.755961][ T14] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 513.955998][ T14] [drm:udl_init] *ERROR* Selecting channel failed [ 513.998597][ T14] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 514.040273][ T14] [drm] Initialized udl on minor 2 [ 514.050543][T20950] loop0: detected capacity change from 0 to 64 [ 514.063905][ T14] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 514.109650][ T14] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 514.138652][T20950] syz.0.7471: attempt to access beyond end of device [ 514.138652][T20950] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 514.164651][ T14] usb 5-1: USB disconnect, device number 50 [ 514.183859][ T4314] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 514.200531][ T4314] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 514.213858][ T4314] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 514.224437][T20950] Buffer I/O error on dev loop0, logical block 512, async page read [ 514.266851][T20950] syz.0.7471: attempt to access beyond end of device [ 514.266851][T20950] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 514.304355][T20950] Buffer I/O error on dev loop0, logical block 56576, async page read [ 514.368879][T20958] loop1: detected capacity change from 0 to 128 [ 514.388289][T20960] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7476'. [ 514.448577][T20958] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 514.556187][T20962] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7477'. [ 514.661097][T20966] loop0: detected capacity change from 0 to 1024 [ 515.412535][T20999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.682724][T21009] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7499'. [ 515.698265][T21011] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7501'. [ 515.725883][T21009] netlink: 2 bytes leftover after parsing attributes in process `syz.5.7499'. [ 515.748426][T21011] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7501'. [ 515.958614][T21021] x_tables: unsorted entry at hook 2 [ 516.184922][T21031] CIFS mount error: No usable UNC path provided in device string! [ 516.184922][T21031] [ 516.215998][T21031] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 516.465852][ T14] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 516.685879][T10867] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 516.693604][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 516.701304][ T14] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 516.720267][ T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.745815][ T14] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 516.758523][ T14] usb 5-1: config 1 has no interface number 1 [ 516.764657][ T14] usb 5-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 516.806173][ T14] usb 5-1: config 1 interface 105 has no altsetting 0 [ 516.851518][ T14] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 516.872047][ T14] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 516.895829][ T14] usb 5-1: Product: syz [ 516.900210][ T14] usb 5-1: Manufacturer: syz [ 516.911160][ T14] usb 5-1: SerialNumber: syz [ 516.920026][T10867] usb 4-1: too many configurations: 36, using maximum allowed: 8 [ 516.940888][T10867] usb 4-1: config index 0 descriptor too short (expected 87, got 72) [ 517.016371][T10867] usb 4-1: config index 1 descriptor too short (expected 87, got 72) [ 517.027553][T10867] usb 4-1: config index 2 descriptor too short (expected 87, got 72) [ 517.042477][T10867] usb 4-1: config index 3 descriptor too short (expected 87, got 72) [ 517.078691][T10867] usb 4-1: config index 4 descriptor too short (expected 87, got 72) [ 517.115088][T10867] usb 4-1: config index 5 descriptor too short (expected 87, got 72) [ 517.134028][T10867] usb 4-1: config index 6 descriptor too short (expected 87, got 72) [ 517.155501][T10867] usb 4-1: config index 7 descriptor too short (expected 87, got 72) [ 517.176290][ T14] aqc111: probe of 5-1:1.105 failed with error -22 [ 517.202678][T21066] loop5: detected capacity change from 0 to 4096 [ 517.206439][T10867] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 517.227363][T10867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.240753][T10867] usb 4-1: Product: syz [ 517.240812][T21066] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 517.247013][T10867] usb 4-1: Manufacturer: syz [ 517.289961][T10867] usb 4-1: SerialNumber: syz [ 517.317973][T21066] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 517.332614][T10867] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 517.390549][ T4320] usb 5-1: USB disconnect, device number 51 [ 517.505020][T21073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7531'. [ 517.895809][ T4320] usb 4-1: USB disconnect, device number 48 [ 518.167258][T21095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7542'. [ 518.415828][T10867] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 518.422991][T10867] ath9k_htc: Failed to initialize the device [ 518.460093][ T4320] usb 4-1: ath9k_htc: USB layer deinitialized [ 518.800591][T21116] loop5: detected capacity change from 0 to 4096 [ 518.836542][ T27] audit: type=1326 audit(1789391659.419:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21120 comm="syz.3.7555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74c39e159 code=0x7ffc0000 [ 518.938238][ T27] audit: type=1326 audit(1789391659.449:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21120 comm="syz.3.7555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74c39e159 code=0x7ffc0000 [ 519.076331][ T27] audit: type=1326 audit(1789391659.449:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21120 comm="syz.3.7555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fa74c39e159 code=0x7ffc0000 [ 519.118188][T21129] loop3: detected capacity change from 0 to 256 [ 519.224126][ T27] audit: type=1326 audit(1789391659.449:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21120 comm="syz.3.7555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74c39e159 code=0x7ffc0000 [ 519.335838][ T27] audit: type=1326 audit(1789391659.449:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21120 comm="syz.3.7555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74c39e159 code=0x7ffc0000 [ 519.664722][T21147] unsupported nla_type 35 [ 519.837714][T21154] loop5: detected capacity change from 0 to 64 [ 520.052633][T21157] loop3: detected capacity change from 0 to 4096 [ 520.169233][T21157] ntfs: volume version 3.1. [ 520.258194][T21157] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 520.315910][T21157] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 520.349915][T21157] ntfs: (device loop3): __ntfs_bitmap_set_bits_in_run(): Failed to map first page (error -5), aborting. [ 520.375650][ T5890] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 520.402960][T21157] ntfs: (device loop3): __ntfs_cluster_free(): Failed to clear first run (error -5), aborting. [ 520.425904][T21157] ntfs: (device loop3): ntfs_truncate(): Failed to release cluster(s) (error code -5). Unmount and run chkdsk to recover the lost cluster(s). [ 520.578007][ T5890] usb 2-1: config 32 has an invalid interface number: 255 but max is 0 [ 520.605782][ T5890] usb 2-1: config 32 has no interface number 0 [ 520.622218][ T5890] usb 2-1: too many endpoints for config 32 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 520.674297][ T5890] usb 2-1: config 32 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 520.703723][ T5890] usb 2-1: config 32 interface 255 has no altsetting 0 [ 520.711310][ T5890] usb 2-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 520.730267][T21177] loop0: detected capacity change from 0 to 1764 [ 520.748185][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.771045][ T5890] usb-storage 2-1:32.255: USB Mass Storage device detected [ 520.805007][ T5890] usb-storage 2-1:32.255: Quirks match for vid 057b pid 0000: 1 [ 520.835910][T21177] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 520.860294][T21187] netlink: 'syz.4.7587': attribute type 2 has an invalid length. [ 520.868415][T21187] netlink: 'syz.4.7587': attribute type 1 has an invalid length. [ 520.953220][T21189] trusted_key: encrypted_key: keylen parameter is missing [ 520.986402][ T5890] usb 2-1: USB disconnect, device number 43 [ 521.167575][T21195] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 521.261813][T21197] netlink: 'syz.5.7592': attribute type 10 has an invalid length. [ 521.473825][T21180] loop3: detected capacity change from 0 to 32768 [ 521.506821][T21180] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.7584 (21180) [ 521.593145][T21180] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 521.650572][T21180] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 521.688811][T21180] BTRFS info (device loop3): enabling ssd optimizations [ 521.705645][T21180] BTRFS info (device loop3): not using ssd optimizations [ 521.722978][T21180] BTRFS info (device loop3): turning off barriers [ 521.743213][T21180] BTRFS info (device loop3): use no compression [ 521.760006][T21180] BTRFS info (device loop3): using free space tree [ 522.005593][ T4350] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 522.201697][ T4350] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 522.217801][ T4350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.237925][ T4350] usb 2-1: config 0 descriptor?? [ 522.343589][T21248] loop4: detected capacity change from 0 to 4096 [ 522.356343][ T4279] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 522.370601][T21248] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 522.385619][ T128] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 522.441661][T21248] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 522.459012][ T4350] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 522.491076][ T4350] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 522.585867][ T128] usb 1-1: Using ep0 maxpacket: 16 [ 522.604781][ T128] usb 1-1: unable to get BOS descriptor or descriptor too short [ 522.646537][ T128] usb 1-1: config 4 has an invalid interface number: 127 but max is 0 [ 522.665680][ T4350] [drm:udl_init] *ERROR* Selecting channel failed [ 522.687126][ T4350] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 522.694642][ T4350] [drm] Initialized udl on minor 2 [ 522.700357][ T128] usb 1-1: config 4 has no interface number 0 [ 522.720419][ T128] usb 1-1: config 4 interface 127 has no altsetting 0 [ 522.729920][ T4349] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop3 scanned by udevd (4349) [ 522.752681][ T4350] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 522.763020][ T128] usb 1-1: string descriptor 0 read error: -22 [ 522.775702][ T128] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 522.785133][ T4350] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 522.814177][ T128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.824902][ T4350] usb 2-1: USB disconnect, device number 44 [ 523.016646][ T6722] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 523.037338][ T6722] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 523.051567][T21262] random: crng reseeded on system resumption [ 523.053300][ T6722] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 523.118305][ T6722] usb 1-1: USB disconnect, device number 41 [ 523.423434][T21271] loop5: detected capacity change from 0 to 1024 [ 524.341018][T21302] loop4: detected capacity change from 0 to 256 [ 524.358535][T21306] netlink: 'syz.3.7635': attribute type 1 has an invalid length. [ 524.379386][T21307] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7634'. [ 524.821783][T21320] loop0: detected capacity change from 0 to 4096 [ 524.858771][T21320] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 524.923992][T21320] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 525.069945][T21334] loop1: detected capacity change from 0 to 256 [ 525.107614][T21336] MPI: mpi too large (107144 bits) [ 525.120617][T21334] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0x174015ec, utbl_chksum : 0xe619d30d) [ 525.208419][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 525.208432][ T27] audit: type=1326 audit(1789391665.789:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21337 comm="syz.0.7649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb524b9e159 code=0x7ffc0000 [ 525.346230][ T27] audit: type=1326 audit(1789391665.829:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21337 comm="syz.0.7649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb524b9e159 code=0x7ffc0000 [ 525.370337][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.503189][ T27] audit: type=1326 audit(1789391665.829:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21337 comm="syz.0.7649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb524b9e159 code=0x7ffc0000 [ 525.537678][T21349] netlink: 'syz.0.7652': attribute type 29 has an invalid length. [ 525.573440][T21349] netlink: 'syz.0.7652': attribute type 29 has an invalid length. [ 525.638464][ T27] audit: type=1326 audit(1789391665.829:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21337 comm="syz.0.7649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fb524b9e159 code=0x7ffc0000 [ 525.758902][ T27] audit: type=1326 audit(1789391665.829:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21337 comm="syz.0.7649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb524b9e159 code=0x7ffc0000 [ 525.839812][ T27] audit: type=1326 audit(1789391665.829:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21337 comm="syz.0.7649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb524b9e159 code=0x7ffc0000 [ 525.902297][T21363] loop3: detected capacity change from 0 to 512 [ 525.946545][ T27] audit: type=1326 audit(1789391665.829:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21337 comm="syz.0.7649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb524b9e159 code=0x7ffc0000 [ 526.024864][ T27] audit: type=1326 audit(1789391665.829:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21337 comm="syz.0.7649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb524b9e159 code=0x7ffc0000 [ 526.066784][T21363] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.7660: inode has both inline data and extents flags [ 526.136294][T21363] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.7660: couldn't read orphan inode 15 (err -117) [ 526.191579][T21363] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 526.197354][ T4350] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 526.289215][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 526.395450][ T14] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 526.425497][ T4350] usb 2-1: Using ep0 maxpacket: 16 [ 526.441740][ T4350] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 526.456919][ T4350] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 526.473640][ T4350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.482232][ T4350] usb 2-1: Product: syz [ 526.486688][ T4350] usb 2-1: Manufacturer: syz [ 526.491305][ T4350] usb 2-1: SerialNumber: syz [ 526.497451][ T4350] r8152-cfgselector 2-1: config 0 descriptor?? [ 526.526899][T10867] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 526.612762][ T14] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 526.634588][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.644700][T21397] loop5: detected capacity change from 0 to 256 [ 526.648882][ T14] usb 1-1: Product: syz [ 526.665972][ T14] usb 1-1: Manufacturer: syz [ 526.670641][ T14] usb 1-1: SerialNumber: syz [ 526.709059][ T14] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 526.726684][T21397] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 526.727134][T10867] usb 5-1: config 255 has an invalid interface number: 97 but max is 1 [ 526.773867][T21397] FAT-fs (loop5): Filesystem has been set read-only [ 526.780829][T10867] usb 5-1: config 255 has an invalid interface number: 227 but max is 1 [ 526.806031][T10867] usb 5-1: config 255 has no interface number 0 [ 526.822665][T10867] usb 5-1: config 255 has no interface number 1 [ 526.843003][T10867] usb 5-1: config 255 interface 97 has no altsetting 0 [ 526.852921][T10867] usb 5-1: config 255 interface 227 has no altsetting 0 [ 526.928853][ T4350] r8152-cfgselector 2-1: Unknown version 0x0000 [ 526.931172][T10867] usb 5-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 526.954757][ T4350] r8152-cfgselector 2-1: USB disconnect, device number 45 [ 526.976550][T21377] random: crng reseeded on system resumption [ 526.980944][T10867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.013072][T10867] usb 5-1: Product: syz [ 527.026373][T10867] usb 5-1: Manufacturer: syz [ 527.031065][T10867] usb 5-1: SerialNumber: syz [ 527.272105][T10867] usb 5-1: bad CDC descriptors [ 527.280248][T10867] usb 5-1: bad CDC descriptors [ 527.346840][T10867] usb 5-1: USB disconnect, device number 52 [ 527.377648][T21412] netlink: 'syz.5.7684': attribute type 1 has an invalid length. [ 527.403261][T21412] netlink: 'syz.5.7684': attribute type 2 has an invalid length. [ 527.679748][T10867] usb 1-1: USB disconnect, device number 42 [ 527.775216][ T14] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 527.788191][ T14] ath9k_htc: Failed to initialize the device [ 527.804321][T10867] usb 1-1: ath9k_htc: USB layer deinitialized [ 528.069525][T21435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7694'. [ 528.125492][T21435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7694'. [ 528.155361][T21435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7694'. [ 528.184849][T21435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7694'. [ 528.240074][T21435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7694'. [ 528.262794][T21435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7694'. [ 528.296104][T21435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7694'. [ 528.324354][T21435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7694'. [ 528.355286][T21435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7694'. [ 528.639385][T21457] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 528.672424][T21457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 528.794611][T21465] loop1: detected capacity change from 0 to 1024 [ 528.836061][T21465] EXT4-fs: Ignoring removed bh option [ 528.897863][T21465] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 529.114621][T21480] loop4: detected capacity change from 0 to 512 [ 529.142431][T21483] netlink: 'syz.5.7717': attribute type 10 has an invalid length. [ 529.170305][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 529.177222][T21483] bridge0: port 3(team0) entered disabled state [ 529.183769][T21483] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.191205][T21483] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.226056][T21480] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.7716: bad orphan inode 11862016 [ 529.288669][T21483] bridge0: port 3(team0) entered blocking state [ 529.295120][T21483] bridge0: port 3(team0) entered forwarding state [ 529.301785][T21483] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.308957][T21483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.316382][T21483] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.323537][T21483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.347997][T21483] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 529.358965][T21480] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 529.394776][T21480] ext4 filesystem being mounted at /1588/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.777381][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 530.217561][T21515] netlink: 'syz.3.7733': attribute type 10 has an invalid length. [ 530.296641][T21515] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 530.358768][T21521] __nla_validate_parse: 39 callbacks suppressed [ 530.358784][T21521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7735'. [ 530.618150][T21505] loop4: detected capacity change from 0 to 32768 [ 530.845115][ T7310] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 531.037118][ T7310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 531.056107][ T7310] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1056, setting to 1024 [ 531.098080][ T7310] usb 1-1: string descriptor 0 read error: -22 [ 531.104360][ T7310] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 531.182553][ T7310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.308294][T21549] netlink: 'syz.4.7750': attribute type 10 has an invalid length. [ 531.346238][T21549] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.353394][T21549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.360908][T21549] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.368058][T21549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.423721][ T7310] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 531.444518][T21549] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 531.635301][ T7310] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 531.705233][ T7310] usb 1-1: USB disconnect, device number 43 [ 531.973531][T21567] netlink: 'syz.5.7759': attribute type 7 has an invalid length. [ 532.317160][T21583] netlink: 'syz.0.7765': attribute type 10 has an invalid length. [ 532.378529][T21583] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 532.450874][T21588] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7768'. [ 533.462388][T21602] loop4: detected capacity change from 0 to 32768 [ 533.495262][T21602] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 533.545484][T10867] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 533.588090][ T6722] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 533.736573][ T4369] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 533.766618][T10867] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 533.785259][T10867] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 533.796849][ T6722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 533.814977][T10867] usb 6-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 533.833622][ T6722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 533.848614][T10867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.873539][ T6722] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 533.904234][ T6722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.907870][T10867] usb-storage 6-1:1.0: USB Mass Storage device detected [ 533.933522][ T6722] usb 4-1: Product: syz [ 533.943649][ T6722] usb 4-1: Manufacturer: syz [ 533.963523][ T6722] usb 4-1: SerialNumber: syz [ 533.979616][ T6722] usb 4-1: config 0 descriptor?? [ 533.998422][T21618] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 534.046097][ T6722] usb 4-1: ucan: probing device on interface #0 [ 534.072968][ T6722] usb 4-1: ucan: invalid endpoint configuration [ 534.113467][ T6722] usb 4-1: ucan: probe failed; try to update the device firmware [ 534.114089][T10867] scsi host1: usb-storage 6-1:1.0 [ 534.287330][ T6722] usb 4-1: USB disconnect, device number 49 [ 534.391769][ T7310] usb 6-1: USB disconnect, device number 17 [ 534.888183][T21660] loop1: detected capacity change from 0 to 2048 [ 534.987619][T21664] netlink: 'syz.4.7804': attribute type 4 has an invalid length. [ 534.990797][T21665] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 535.043951][T21660] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 535.111788][T21671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7808'. [ 535.146563][T21671] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7808'. [ 535.156134][T21660] Remounting filesystem read-only [ 535.201268][T21673] loop4: detected capacity change from 0 to 164 [ 535.375316][ T7310] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 535.487514][T21683] program syz.0.7823 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 535.515228][T21683] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 535.576817][ T7310] usb 6-1: unable to get BOS descriptor or descriptor too short [ 535.595605][ T7310] usb 6-1: not running at top speed; connect to a high speed hub [ 535.611797][ T7310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.615414][T21689] loop4: detected capacity change from 0 to 16 [ 535.642610][ T7310] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 535.689188][ T7310] usb 6-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 535.690358][T21689] erofs: (device loop4): mounted with root inode @ nid 36. [ 535.720740][ T4286] Bluetooth: hci0: unexpected event for opcode 0x2012 [ 535.738985][ T7310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.759221][ T7310] usb 6-1: Product: syz [ 535.769355][ T7310] usb 6-1: Manufacturer: syz [ 535.779179][ T7310] usb 6-1: SerialNumber: syz [ 535.865374][T21695] cgroup: subsys name conflicts with all [ 536.017340][T21699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7821'. [ 536.023447][ T7310] usb 6-1: 3:0: failed to get current value for ch 1 (-71) [ 536.064525][ T7310] usb 6-1: 3:0: cannot get min/max values for control 2 (id 3) [ 536.085961][ T7310] usb 6-1: 3:0: failed to get current value for ch 0 (-71) [ 536.121669][ T7310] usb 6-1: USB disconnect, device number 18 [ 536.383670][T21714] overlayfs: option "workdir=./file0:/" is useless in a non-upper mount, ignore [ 536.404747][T21714] overlayfs: missing 'lowerdir' [ 536.520066][T21716] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 536.791326][ T27] audit: type=1326 audit(1789391677.370:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21730 comm="syz.5.7836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02fd9e159 code=0x7ffc0000 [ 536.816696][T21729] netlink: 'syz.1.7835': attribute type 41 has an invalid length. [ 536.896281][ T27] audit: type=1326 audit(1789391677.390:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21730 comm="syz.5.7836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02fd9e159 code=0x7ffc0000 [ 536.909896][T21734] loop3: detected capacity change from 0 to 256 [ 537.002894][ T27] audit: type=1326 audit(1789391677.390:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21730 comm="syz.5.7836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02fd9e159 code=0x7ffc0000 [ 537.082714][ T27] audit: type=1326 audit(1789391677.390:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21730 comm="syz.5.7836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fd02fd9e159 code=0x7ffc0000 [ 537.199449][ T27] audit: type=1326 audit(1789391677.390:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21730 comm="syz.5.7836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02fd9e159 code=0x7ffc0000 [ 537.311141][ T27] audit: type=1326 audit(1789391677.390:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21730 comm="syz.5.7836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02fd9e159 code=0x7ffc0000 [ 537.457025][ T27] audit: type=1326 audit(1789391677.390:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21730 comm="syz.5.7836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd02fd9e159 code=0x7ffc0000 [ 537.551646][ T27] audit: type=1326 audit(1789391677.390:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21730 comm="syz.5.7836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd02fd9e159 code=0x7ffc0000 [ 538.124775][ T7310] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 538.316894][ T7310] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 538.346327][ T7310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.364778][ T6722] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 538.566845][ T6722] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 538.587741][T21797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 538.604757][ T7310] dln2 4-1:1.0: USB write failed: -110 [ 538.611569][ T7310] dln2 4-1:1.0: failed to initialize hardware [ 538.617908][ T6722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.626288][T21798] netlink: 'syz.0.7870': attribute type 10 has an invalid length. [ 538.634937][ T6722] usb 2-1: Product: syz [ 538.639311][ T6722] usb 2-1: Manufacturer: syz [ 538.644480][ T6722] usb 2-1: SerialNumber: syz [ 538.656714][ T7310] dln2: probe of 4-1:1.0 failed with error -110 [ 538.801531][ T7310] usb 4-1: USB disconnect, device number 50 [ 538.898315][ T6722] kalmia 2-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 538.950744][ T6722] kalmia 2-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71 [ 538.970713][ T6722] kalmia: probe of 2-1:1.0 failed with error -71 [ 539.014907][ T6722] usb 2-1: USB disconnect, device number 46 [ 539.165669][T21814] dlm: non-version read from control device 0 [ 539.295373][T21800] loop5: detected capacity change from 0 to 32768 [ 539.422309][T21800] XFS (loop5): Mounting V5 Filesystem [ 539.627174][T21800] XFS (loop5): Ending clean mount [ 539.711296][T21842] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7888'. [ 539.787799][T21846] netlink: 'syz.1.7891': attribute type 1 has an invalid length. [ 539.800319][T15442] XFS (loop5): Unmounting Filesystem [ 539.954702][T10867] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 540.180239][T10867] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 540.200081][T10867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.227868][T10867] usb 5-1: Product: syz [ 540.232251][T10867] usb 5-1: Manufacturer: syz [ 540.253892][T10867] usb 5-1: SerialNumber: syz [ 540.306529][T10867] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 540.553930][T21840] random: crng reseeded on system resumption [ 540.847099][T21879] loop3: detected capacity change from 0 to 2048 [ 540.920575][T21884] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 540.935912][T21879] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 541.022479][T21879] Remounting filesystem read-only [ 541.247368][T21892] netlink: 'syz.1.7913': attribute type 1 has an invalid length. [ 541.294010][T21892] netlink: 'syz.1.7913': attribute type 2 has an invalid length. [ 541.384624][T10867] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 541.391655][T10867] ath9k_htc: Failed to initialize the device [ 541.495037][T10867] usb 5-1: ath9k_htc: USB layer deinitialized [ 541.520262][T10867] usb 5-1: USB disconnect, device number 53 [ 541.566268][T21901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7918'. [ 542.084659][T21927] netlink: 'syz.1.7930': attribute type 10 has an invalid length. [ 542.189767][T21931] random: crng reseeded on system resumption [ 543.042805][T21961] netlink: 'syz.3.7945': attribute type 1 has an invalid length. [ 543.421884][T21979] loop0: detected capacity change from 0 to 512 [ 543.466777][T21979] EXT4-fs (loop0): Test dummy encryption mode enabled [ 543.573670][T21979] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.7954: inode has both inline data and extents flags [ 543.714871][T21979] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.7954: couldn't read orphan inode 15 (err -117) [ 543.774656][T21979] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 543.984453][ T4320] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 544.110605][T21979] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 544.136731][T21967] loop5: detected capacity change from 0 to 32768 [ 544.184893][ T4320] usb 5-1: Using ep0 maxpacket: 16 [ 544.191987][ T4320] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 544.202064][ T4320] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.213633][ T4320] usb 5-1: config 0 has no interface number 0 [ 544.253793][ T4320] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 544.276612][T21972] loop3: detected capacity change from 0 to 32768 [ 544.281033][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.292310][ T4320] usb 5-1: Product: syz [ 544.305216][ T4320] usb 5-1: Manufacturer: syz [ 544.309855][ T4320] usb 5-1: SerialNumber: syz [ 544.325662][ T4320] usb 5-1: config 0 descriptor?? [ 544.338498][T21967] XFS (loop5): Mounting V5 Filesystem [ 544.349630][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 544.475937][T21967] XFS (loop5): Ending clean mount [ 544.491846][T21967] XFS (loop5): Quotacheck needed: Please wait. [ 544.541855][ T4320] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 544.551237][ T4320] usb 5-1: No valid video chain found. [ 544.674428][T21967] XFS (loop5): Quotacheck: Done. [ 544.762268][ T14] usb 5-1: USB disconnect, device number 54 [ 544.857557][T15442] XFS (loop5): Unmounting Filesystem [ 545.266931][T22036] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7977'. [ 546.544762][T22054] loop1: detected capacity change from 0 to 32768 [ 546.597173][T22054] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.7982 (22054) [ 546.674175][T22054] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 546.720690][T22054] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 546.751153][ T14] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 546.765073][T22054] BTRFS info (device loop1): using free space tree [ 546.784838][T22090] loop0: detected capacity change from 0 to 8 [ 546.804311][T22064] loop5: detected capacity change from 0 to 32768 [ 546.851471][T22064] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.7985 (22064) [ 546.875902][T22090] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 546.947752][ T14] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 546.969721][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.005103][ T14] usb 4-1: Product: syz [ 547.035851][ T14] usb 4-1: Manufacturer: syz [ 547.040497][ T14] usb 4-1: SerialNumber: syz [ 547.075911][ T14] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 547.085252][T22054] BTRFS info (device loop1): enabling ssd optimizations [ 547.239906][ T4272] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 547.310483][T22082] random: crng reseeded on system resumption [ 547.480094][T22121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8003'. [ 547.514312][T22121] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8003'. [ 547.805038][T22126] syz.0.8005: attempt to access beyond end of device [ 547.805038][T22126] loop0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 547.864281][T22126] F2FS-fs (loop0): Unable to read 1th superblock [ 547.891696][T22126] syz.0.8005: attempt to access beyond end of device [ 547.891696][T22126] loop0: rw=0, sector=8, nr_sectors = 8 limit=0 [ 547.939005][T22126] F2FS-fs (loop0): Unable to read 2th superblock [ 548.075323][T22114] loop4: detected capacity change from 0 to 40427 [ 548.096552][T22114] F2FS-fs (loop4): Corrupted extension count (33554469 + 1 > 64) [ 548.114210][T22114] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 548.145459][ T4349] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (4349) [ 548.162449][T22114] F2FS-fs (loop4): invalid crc value [ 548.184358][ T14] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 548.191408][ T14] ath9k_htc: Failed to initialize the device [ 548.223917][T22114] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 548.261202][ T14] usb 4-1: ath9k_htc: USB layer deinitialized [ 548.314931][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 548.333606][ T7310] usb 4-1: USB disconnect, device number 51 [ 548.449277][T22114] F2FS-fs (loop4): recover fsync data on readonly fs [ 548.466903][T22139] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8009'. [ 548.501784][T22114] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30 [ 548.529640][T22114] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 548.594583][T22114] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix. [ 549.099617][T22131] loop1: detected capacity change from 0 to 32768 [ 549.198164][T22159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8013'. [ 549.228439][T22131] XFS (loop1): Mounting V5 Filesystem [ 549.394634][T22131] XFS (loop1): Ending clean mount [ 549.582066][ T4272] XFS (loop1): Unmounting Filesystem [ 550.234096][T18041] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 550.445657][T18041] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 550.470086][T18041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.495790][T18041] usb 2-1: config 0 descriptor?? [ 550.642444][T22210] xt_ecn: cannot match TCP bits for non-tcp packets [ 550.719231][T18041] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 550.734089][T18041] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 550.844263][ T7310] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 550.930505][T18041] [drm:udl_init] *ERROR* Selecting channel failed [ 550.970349][T18041] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 550.989906][T18041] [drm] Initialized udl on minor 2 [ 551.011906][T18041] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 551.034138][T18041] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 551.045771][ T7310] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.057852][T18041] usb 2-1: USB disconnect, device number 47 [ 551.079626][ T7310] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 551.085211][T22200] loop4: detected capacity change from 0 to 32768 [ 551.104274][ T14] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 551.122853][ T14] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 551.137237][ T7310] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 551.161462][ T7310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.175360][ T14] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 551.191809][ T7310] usb 4-1: Product: syz [ 551.202006][ T7310] usb 4-1: Manufacturer: syz [ 551.233304][ T7310] usb 4-1: SerialNumber: syz [ 551.235083][T22200] XFS (loop4): Mounting V5 Filesystem [ 551.265229][ T7310] cdc_ncm 4-1:1.0: skipping garbage [ 551.270485][ T7310] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 551.318803][ T7310] cdc_ncm 4-1:1.0: bind() failure [ 551.336126][T22200] XFS (loop4): Ending clean mount [ 551.344476][ T7310] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 551.358885][ T7310] cdc_ncm 4-1:1.1: bind() failure [ 551.464260][T18041] usb 4-1: USB disconnect, device number 52 [ 551.564521][ T4276] XFS (loop4): Unmounting Filesystem [ 551.805643][T22216] loop5: detected capacity change from 0 to 40427 [ 551.838769][T22216] F2FS-fs (loop5): invalid crc value [ 551.879363][T22216] F2FS-fs (loop5): Found nat_bits in checkpoint [ 551.991141][T22216] F2FS-fs (loop5): Start checkpoint disabled! [ 552.097160][T22216] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 552.487073][ T27] audit: type=1326 audit(1789391693.071:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.4.8058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78a99e159 code=0x7ffc0000 [ 552.593461][ T27] audit: type=1326 audit(1789391693.071:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.4.8058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78a99e159 code=0x7ffc0000 [ 552.680323][ T27] audit: type=1326 audit(1789391693.071:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.4.8058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78a99e159 code=0x7ffc0000 [ 552.803821][ T27] audit: type=1326 audit(1789391693.071:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.4.8058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fc78a99e159 code=0x7ffc0000 [ 552.851022][T22264] loop4: detected capacity change from 0 to 4096 [ 552.873332][T22264] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 552.906176][ T27] audit: type=1326 audit(1789391693.071:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.4.8058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78a99e159 code=0x7ffc0000 [ 552.931460][T22264] ntfs: volume version 3.1. [ 552.981085][ T27] audit: type=1326 audit(1789391693.071:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.4.8058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78a99e159 code=0x7ffc0000 [ 553.149245][ T27] audit: type=1326 audit(1789391693.071:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.4.8058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc78a99e159 code=0x7ffc0000 [ 553.288671][ T27] audit: type=1326 audit(1789391693.071:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.4.8058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc78a99e159 code=0x7ffc0000 [ 553.497797][T22291] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 553.609837][T22290] loop0: detected capacity change from 0 to 4096 [ 553.685633][T22290] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 554.083812][ T6722] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 554.107369][T22309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8084'. [ 554.122719][T22286] loop5: detected capacity change from 0 to 32768 [ 554.219210][T22286] JBD2: Ignoring recovery information on journal [ 554.275385][ T6722] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 554.283591][ T6722] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.321844][T22314] loop4: detected capacity change from 0 to 4096 [ 554.383876][T22314] ntfs: volume version 3.1. [ 554.389570][ T6722] usb 2-1: config 0 has no interface number 0 [ 554.425922][ T6722] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 554.447275][T22286] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 554.449174][T22314] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 554.472602][ T6722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.476304][ C0] vkms_vblank_simulate: vblank timer overrun [ 554.543789][ T6722] usb 2-1: Product: syz [ 554.561347][ T6722] usb 2-1: Manufacturer: syz [ 554.575696][ T6722] usb 2-1: SerialNumber: syz [ 554.592184][ T6722] usb 2-1: config 0 descriptor?? [ 554.779517][T15442] ocfs2: Unmounting device (7,5) on (node local) [ 554.832045][ T5894] usb 2-1: USB disconnect, device number 48 [ 555.107814][T22332] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 555.270728][T22335] xt_addrtype: ipv6 does not support BROADCAST matching [ 555.513277][T22342] loop0: detected capacity change from 0 to 256 [ 555.524640][T22327] loop3: detected capacity change from 0 to 32768 [ 555.533812][ T5894] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 555.626853][T22327] XFS (loop3): Mounting V5 Filesystem [ 555.723845][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 555.734655][ T5894] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.763689][ T5894] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.773483][ T5894] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 555.782698][T22327] XFS (loop3): Ending clean mount [ 555.805053][T22327] XFS (loop3): Quotacheck needed: Please wait. [ 555.852387][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.876909][ T5894] hub 6-1:4.0: USB hub found [ 555.938781][T22327] XFS (loop3): Quotacheck: Done. [ 556.080014][ T5894] hub 6-1:4.0: 2 ports detected [ 556.085337][ T5894] usb 6-1: selecting invalid altsetting 1 [ 556.091078][ T5894] hub 6-1:4.0: Using single TT (err -22) [ 556.148095][ T4279] XFS (loop3): Unmounting Filesystem [ 556.233773][T18041] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 556.293850][ T5894] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 556.300268][ T5894] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 556.361827][ T5894] usb 6-1: USB disconnect, device number 19 [ 556.455556][T18041] usb 5-1: Using ep0 maxpacket: 32 [ 556.462439][T18041] usb 5-1: config 0 interface 0 has no altsetting 0 [ 556.483192][T18041] usb 5-1: New USB device found, idVendor=1199, idProduct=9005, bcdDevice=c5.b6 [ 556.502746][T18041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.512864][T18041] usb 5-1: Product: syz [ 556.522978][T18041] usb 5-1: Manufacturer: syz [ 556.533100][T18041] usb 5-1: SerialNumber: syz [ 556.546850][T18041] usb 5-1: config 0 descriptor?? [ 556.601663][T22360] loop0: detected capacity change from 0 to 32768 [ 556.641544][T22360] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 556.674277][T22360] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 556.683705][ T4320] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 556.691664][T22360] BTRFS info (device loop0): using free space tree [ 556.778842][T18041] usb 5-1: USB disconnect, device number 55 [ 556.831768][T22360] BTRFS info (device loop0): enabling ssd optimizations [ 556.885640][ T4320] usb 2-1: unable to get BOS descriptor or descriptor too short [ 556.894943][ T4320] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 556.917931][ T4320] usb 2-1: string descriptor 0 read error: -22 [ 556.924599][ T4320] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 556.934156][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.954155][T22362] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 556.964232][ T4320] usb 2-1: MIDIStreaming interface descriptor not found [ 557.017121][ T4280] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 557.217620][T18041] usb 2-1: USB disconnect, device number 49 [ 557.308388][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.321548][T22394] netlink: 128 bytes leftover after parsing attributes in process `syz.5.8113'. [ 557.567014][T22398] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8110'. [ 557.589158][T22402] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8115'. [ 557.784550][T22408] Timeout policy `syz1' can only be used by L3 protocol number 33024 [ 558.056313][T22418] ieee802154 phy1 wpan1: encryption failed: -22 [ 558.385984][T22431] netlink: zone id is out of range [ 558.463605][ T128] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 558.658285][ T128] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 558.673515][ T128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.689551][ T128] usb 1-1: Product: syz [ 558.714225][ T128] usb 1-1: Manufacturer: syz [ 558.718878][ T128] usb 1-1: SerialNumber: syz [ 558.747204][ T128] ums-karma 1-1:1.0: USB Mass Storage device detected [ 558.765922][ T128] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 558.765922][ T128] Please send a copy of this message to and [ 558.840652][T22442] loop1: detected capacity change from 0 to 4096 [ 558.848140][T22442] __ntfs_warning: 5 callbacks suppressed [ 558.848153][T22442] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 558.907754][T22442] ntfs: volume version 3.1. [ 558.986215][T22447] netlink: 180 bytes leftover after parsing attributes in process `syz.5.8135'. [ 559.016961][T22449] netlink: 'syz.4.8136': attribute type 9 has an invalid length. [ 559.047576][ T128] ums-karma: probe of 1-1:1.0 failed with error -5 [ 559.073654][ T128] usb 1-1: USB disconnect, device number 44 [ 559.625055][ T27] audit: type=1326 audit(559.616:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22467 comm="syz.0.8145" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb524b9e159 code=0x7ffc0000 [ 559.683475][ T27] audit: type=1326 audit(559.616:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22467 comm="syz.0.8145" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb524b9e159 code=0x7ffc0000 [ 559.788323][ T27] audit: type=1326 audit(559.646:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22467 comm="syz.0.8145" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fb524b9e159 code=0x7ffc0000 [ 559.872097][ T27] audit: type=1326 audit(559.646:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22467 comm="syz.0.8145" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb524b9e159 code=0x7ffc0000 [ 559.986171][ T27] audit: type=1326 audit(559.646:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22467 comm="syz.0.8145" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb524b9e159 code=0x7ffc0000 [ 560.534665][T22478] loop0: detected capacity change from 0 to 32768 [ 560.641215][T22478] XFS (loop0): Mounting V5 Filesystem [ 560.663402][T18041] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 560.772527][T22478] XFS (loop0): Ending clean mount [ 560.873548][T18041] usb 5-1: Using ep0 maxpacket: 8 [ 560.880702][T18041] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.923106][ T4280] XFS (loop0): Unmounting Filesystem [ 560.924226][T18041] usb 5-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 560.974942][T18041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.003358][T18041] usb 5-1: Product: syz [ 561.007565][T18041] usb 5-1: Manufacturer: syz [ 561.012171][T18041] usb 5-1: SerialNumber: syz [ 561.074052][T18041] usb 5-1: config 0 descriptor?? [ 561.085247][T18041] cdc_phonet 5-1:0.0: skipping garbage [ 561.090745][T18041] cdc_phonet 5-1:0.0: invalid descriptor buffer length [ 561.133492][T18041] cdc_phonet: probe of 5-1:0.0 failed with error -22 [ 561.192732][T22504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8160'. [ 561.354768][ T4320] usb 5-1: USB disconnect, device number 56 [ 561.408451][T22392] syz.3.8112 (22392): drop_caches: 3 [ 561.545079][T22510] loop1: detected capacity change from 0 to 256 [ 561.571210][T22510] exfat: Deprecated parameter 'utf8' [ 561.585006][T22510] exfat: Deprecated parameter 'namecase' [ 561.600954][T22510] exfat: Deprecated parameter 'namecase' [ 561.620261][T22510] exfat: Deprecated parameter 'namecase' [ 561.660277][T22510] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 561.678885][T22494] loop5: detected capacity change from 0 to 32768 [ 561.848525][T22494] XFS (loop5): Mounting V5 Filesystem [ 561.895124][T22523] loop1: detected capacity change from 0 to 512 [ 561.934140][T22494] XFS (loop5): Ending clean mount [ 561.953669][ T6722] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 562.021077][T22523] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 562.058880][T15442] XFS (loop5): Unmounting Filesystem [ 562.085519][T22523] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.8166: corrupted inode contents [ 562.132238][T22523] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #16: comm syz.1.8166: mark_inode_dirty error [ 562.145201][T22528] loop3: detected capacity change from 0 to 4096 [ 562.163052][T22528] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 562.183320][ T6722] usb 1-1: Using ep0 maxpacket: 16 [ 562.191007][T22523] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.8166: corrupted inode contents [ 562.207122][ T6722] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 562.221298][T22523] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.8166: mark_inode_dirty error [ 562.237252][ T6722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.245735][ T6722] usb 1-1: Product: syz [ 562.250002][ T6722] usb 1-1: Manufacturer: syz [ 562.255321][ T6722] usb 1-1: SerialNumber: syz [ 562.262541][ T6722] usb 1-1: config 0 descriptor?? [ 562.268701][T22523] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.8166: corrupted inode contents [ 562.305977][T22528] ntfs: volume version 3.1. [ 562.312384][ T6722] gspca_main: spca508-2.14.0 probing 041e:4018 [ 562.351497][T22523] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 562.385586][T22523] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.8166: corrupted inode contents [ 562.439176][T22523] EXT4-fs error (device loop1): ext4_truncate:4325: inode #16: comm syz.1.8166: mark_inode_dirty error [ 562.484056][T22523] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 562.517136][T22523] EXT4-fs (loop1): 1 truncate cleaned up [ 562.522903][T22523] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 562.525374][T22539] netlink: 'syz.4.8172': attribute type 1 has an invalid length. [ 562.540853][ T4327] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 562.561335][ T4327] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 1 [ 562.655379][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.711487][ T6722] gspca_spca508: reg_read err -71 [ 562.723801][ T6722] gspca_spca508: reg_read err -71 [ 562.743432][ T6722] gspca_spca508: reg_read err -71 [ 562.749220][ T6722] gspca_spca508: reg_read err -71 [ 562.789702][ T6722] gspca_spca508: reg write: error -71 [ 562.798523][T22543] netlink: 'syz.4.8175': attribute type 10 has an invalid length. [ 562.808519][ T6722] spca508: probe of 1-1:0.0 failed with error -71 [ 562.825548][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 562.829086][ T6722] usb 1-1: USB disconnect, device number 45 [ 562.854375][T22543] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8175'. [ 562.888911][T22543] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 562.937593][T22547] loop5: detected capacity change from 0 to 2048 [ 562.971450][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 562.991370][T22549] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 563.018753][T22547] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 563.094561][T22552] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 563.384764][T22561] netlink: 'syz.4.8181': attribute type 3 has an invalid length. [ 563.425068][T22565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8182'. [ 563.430780][T22561] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8181'. [ 563.503461][T22565] openvswitch: netlink: EtherType 300 is less than min 600 [ 563.792467][T22576] loop5: detected capacity change from 0 to 512 [ 563.871688][T22576] EXT4-fs (loop5): orphan cleanup on readonly fs [ 563.944994][T22576] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 564.050277][T22576] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 564.105897][T22576] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.8188: attempt to clear invalid blocks 33619980 len 1 [ 564.155765][T22576] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.8188: invalid indirect mapped block 1819239214 (level 0) [ 564.240066][T22576] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.8188: invalid indirect mapped block 1819239214 (level 1) [ 564.299998][T22576] EXT4-fs (loop5): 1 truncate cleaned up [ 564.336731][T22576] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 564.364681][T22576] EXT4-fs (loop5): unmounting filesystem. [ 564.671039][T22601] loop1: detected capacity change from 0 to 4096 [ 564.691037][T22601] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 564.732081][T22601] ntfs: volume version 3.1. [ 564.773143][ T4320] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 564.854354][T18041] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 564.985617][ T4320] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 565.005530][ T4320] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.053345][ T4320] usb 1-1: config 0 has no interface number 0 [ 565.064837][T18041] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.095322][T18041] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 565.107474][ T4320] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 565.124886][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.137941][T18041] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 32768, setting to 1024 [ 565.163499][ T4320] usb 1-1: Product: syz [ 565.167701][ T4320] usb 1-1: Manufacturer: syz [ 565.192453][T18041] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 565.205958][ T4320] usb 1-1: SerialNumber: syz [ 565.217236][ T4320] usb 1-1: config 0 descriptor?? [ 565.243116][T18041] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 565.274653][T18041] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.303910][T18041] usb 4-1: config 0 descriptor?? [ 565.453207][ T6722] usb 1-1: USB disconnect, device number 46 [ 565.514690][ T128] usb 4-1: USB disconnect, device number 53 [ 565.554585][T22607] loop1: detected capacity change from 0 to 32768 [ 565.672204][T22607] XFS (loop1): Mounting V5 Filesystem [ 565.750707][T22607] XFS (loop1): Ending clean mount [ 565.804323][T22607] XFS (loop1): Quotacheck needed: Please wait. [ 565.839559][T22639] loop5: detected capacity change from 0 to 256 [ 565.869380][T22639] exfat: Deprecated parameter 'utf8' [ 565.901695][T22607] XFS (loop1): Quotacheck: Done. [ 565.917773][T22639] exfat: Deprecated parameter 'namecase' [ 565.948175][T22639] exfat: Deprecated parameter 'utf8' [ 565.982938][T22639] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 566.062555][T22639] syz.5.8215: attempt to access beyond end of device [ 566.062555][T22639] loop5: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 566.149423][ T4272] XFS (loop1): Unmounting Filesystem [ 566.205291][T22639] syz.5.8215: attempt to access beyond end of device [ 566.205291][T22639] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 566.234410][ T27] audit: type=1326 audit(566.226:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22642 comm="syz.3.8217" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74c39e159 code=0x7ffc0000 [ 566.267601][T22639] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 566.297265][ T27] audit: type=1800 audit(566.256:400): pid=22639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8215" name="file1" dev="loop5" ino=1048700 res=0 errno=0 [ 566.388597][ T27] audit: type=1326 audit(566.266:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22642 comm="syz.3.8217" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fa74c39e159 code=0x7ffc0000 [ 566.503085][ T27] audit: type=1326 audit(566.266:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22642 comm="syz.3.8217" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74c39e159 code=0x7ffc0000 [ 566.558738][T22637] loop4: detected capacity change from 0 to 32768 [ 566.620641][ T27] audit: type=1326 audit(566.266:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22642 comm="syz.3.8217" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74c39e159 code=0x7ffc0000 [ 566.648216][T22654] netlink: 'syz.0.8222': attribute type 1 has an invalid length. [ 566.678558][T22637] XFS (loop4): Mounting V5 Filesystem [ 566.936377][T22669] IPv6: NLM_F_CREATE should be specified when creating new route [ 566.977747][T22637] XFS (loop4): Ending clean mount [ 567.008664][T22671] loop3: detected capacity change from 0 to 512 [ 567.145467][T22671] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 567.236739][T22671] Quota error (device loop3): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 567.239911][T22680] loop0: detected capacity change from 0 to 256 [ 567.249364][T22671] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 567.295246][ T4276] XFS (loop4): Unmounting Filesystem [ 567.324461][T22680] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 567.350844][T22671] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.8227: Failed to acquire dquot type 0 [ 567.490110][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 568.060087][T22706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8241'. [ 568.071341][T22708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8243'. [ 568.079618][T22706] device vxcan3 entered promiscuous mode [ 568.098426][T22708] openvswitch: netlink: EtherType 300 is less than min 600 [ 568.286342][T22715] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8246'. [ 568.342919][T22715] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8246'. [ 568.371346][T22715] netlink: 'syz.0.8246': attribute type 3 has an invalid length. [ 568.381457][T22715] netlink: 11 bytes leftover after parsing attributes in process `syz.0.8246'. [ 568.801738][T22737] xt_connbytes: Forcing CT accounting to be enabled [ 568.823490][T22737] xt_NFQUEUE: number of total queues is 0 [ 568.855247][T22741] netlink: 'syz.5.8259': attribute type 10 has an invalid length. [ 568.872301][T22741] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8259'. [ 568.885562][T22741] batman_adv: batadv0: Adding interface: vlan1 [ 568.891747][T22741] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.950200][T22741] batman_adv: batadv0: Interface activated: vlan1 [ 568.962153][T22745] loop4: detected capacity change from 0 to 64 [ 569.480964][T22769] loop3: detected capacity change from 0 to 512 [ 569.500371][T22769] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 569.528101][T22773] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 569.642937][ T4314] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 569.858548][ T4314] usb 5-1: Using ep0 maxpacket: 32 [ 569.869663][ T4314] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.899726][ T4314] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 569.919997][ T27] audit: type=1326 audit(569.906:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22784 comm="syz.1.8282" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff506d9e159 code=0x7ffc0000 [ 569.929333][ T4314] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 570.016089][ T4314] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 570.022597][ T27] audit: type=1326 audit(569.906:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22784 comm="syz.1.8282" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7ff506d9e159 code=0x7ffc0000 [ 570.056593][ T4314] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 570.080007][ T27] audit: type=1326 audit(569.906:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22784 comm="syz.1.8282" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff506d9e159 code=0x7ffc0000 [ 570.096986][ T4314] usb 5-1: config 1 interface 1 has no altsetting 0 [ 570.145998][ T4314] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 570.173665][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.193536][ T27] audit: type=1326 audit(569.906:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22784 comm="syz.1.8282" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff506d9e159 code=0x7ffc0000 [ 570.201094][ T4314] usb 5-1: Product: syz [ 570.253056][ T4314] usb 5-1: Manufacturer: syz [ 570.274984][ T4314] usb 5-1: SerialNumber: syz [ 570.463033][ T4320] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 570.519121][ T4314] usb 5-1: selecting invalid altsetting 0 [ 570.533202][ T4314] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 570.557560][ T4314] usb 5-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 570.606386][ T4314] usb 5-1: USB disconnect, device number 57 [ 570.664753][ T4320] usb 1-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 570.682627][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.693719][ T4320] usb 1-1: Product: syz [ 570.699315][ T4320] usb 1-1: Manufacturer: syz [ 570.727066][ T4320] usb 1-1: SerialNumber: syz [ 570.747204][ T4320] usb 1-1: config 0 descriptor?? [ 570.831205][T22819] loop1: detected capacity change from 0 to 1024 [ 570.845098][T22819] EXT4-fs: Ignoring removed nobh option [ 570.919253][T22819] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.8299: lblock 2 mapped to illegal pblock 2 (length 1) [ 570.934201][T22819] EXT4-fs (loop1): Remounting filesystem read-only [ 570.949056][T22819] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 570.966562][T22819] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.8299: lblock 0 mapped to illegal pblock 48 (length 1) [ 570.983511][ T4320] peak_usb 1-1:0.0: PEAK-System PCAN-USB FD v17 fw v101.0.0 (1 channels) [ 570.997360][T22819] EXT4-fs (loop1): Remounting filesystem read-only [ 571.007986][T22819] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 571.017690][T22819] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.8299: Failed to acquire dquot type 0 [ 571.030108][T22819] EXT4-fs (loop1): Remounting filesystem read-only [ 571.036995][T22819] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 571.047065][T22819] EXT4-fs (loop1): Remounting filesystem read-only [ 571.054056][T22819] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.8299: mark_inode_dirty error [ 571.074204][T22819] EXT4-fs (loop1): Remounting filesystem read-only [ 571.092922][T22819] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 571.135103][T22819] EXT4-fs (loop1): 1 orphan inode deleted [ 571.140931][T22819] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 571.164471][ T9] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 571.181366][ T4320] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 571.199005][ T4320] peak_usb 1-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 571.203672][T22828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8302'. [ 571.224869][ T9] EXT4-fs (loop1): Remounting filesystem read-only [ 571.231722][ T9] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 571.261884][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0 [ 571.293077][ T4320] peak_usb: probe of 1-1:0.0 failed with error -71 [ 571.320706][ T4320] usb 1-1: USB disconnect, device number 47 [ 571.352170][ T9] EXT4-fs (loop1): Remounting filesystem read-only [ 571.421891][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 571.467838][ T57] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 571.521596][ T27] audit: type=1326 audit(571.507:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22832 comm="syz.4.8307" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78a99e159 code=0x7ffc0000 [ 571.560929][ T57] EXT4-fs (loop1): Remounting filesystem read-only [ 571.572754][ T57] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 571.581222][ T57] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 0 [ 571.613253][ T27] audit: type=1326 audit(571.547:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22832 comm="syz.4.8307" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78a99e159 code=0x7ffc0000 [ 571.642840][ T57] EXT4-fs (loop1): Remounting filesystem read-only [ 571.653711][ T4272] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 571.718983][ T4272] EXT4-fs (loop1): Remounting filesystem read-only [ 571.752972][ T4272] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 571.793851][ T4272] EXT4-fs (loop1): Remounting filesystem read-only [ 571.800751][ T4272] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 571.863034][ T4272] EXT4-fs (loop1): Remounting filesystem read-only [ 571.989160][T22849] loop1: detected capacity change from 0 to 512 [ 572.051375][T22849] EXT4-fs (loop1): orphan cleanup on readonly fs [ 572.058425][T22849] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 572.083245][T22849] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 572.203699][T22849] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.8305: attempt to clear invalid blocks 33619980 len 1 [ 572.258188][T22849] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.8305: invalid indirect mapped block 1819239214 (level 0) [ 572.321481][T22849] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.8305: invalid indirect mapped block 1819239214 (level 1) [ 572.337420][T22844] loop4: detected capacity change from 0 to 32768 [ 572.392473][T22853] loop3: detected capacity change from 0 to 4096 [ 572.419521][T22849] EXT4-fs (loop1): 1 truncate cleaned up [ 572.426397][T22849] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 572.467237][T22844] XFS (loop4): Mounting V5 Filesystem [ 572.474488][T22849] EXT4-fs (loop1): unmounting filesystem. [ 572.543887][T22844] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 572.568924][T22844] XFS (loop4): Tail block (0x29) overwrite detected. Updated to 0x30 [ 572.628315][T22844] XFS (loop4): Ending clean mount [ 572.742529][ T4276] XFS (loop4): Unmounting Filesystem [ 573.205275][T22883] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8326'. [ 573.540041][T22897] loop4: detected capacity change from 0 to 512 [ 573.589616][T22903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8343'. [ 573.643920][T22897] EXT4-fs (loop4): orphan cleanup on readonly fs [ 573.650301][T22897] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 573.723285][T22897] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 573.789315][T22897] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.8332: attempt to clear invalid blocks 33619980 len 1 [ 573.823183][T22897] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.8332: invalid indirect mapped block 1819239214 (level 0) [ 573.847616][T22912] loop3: detected capacity change from 0 to 256 [ 573.879555][T22897] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.8332: invalid indirect mapped block 1819239214 (level 1) [ 573.909028][T22912] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 573.928835][T22897] EXT4-fs (loop4): 1 truncate cleaned up [ 573.973524][T22897] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 573.995663][T22897] EXT4-fs (loop4): unmounting filesystem. [ 574.043902][T22915] device bridge8 entered promiscuous mode [ 574.608295][T22937] device tunl0 entered promiscuous mode [ 574.645065][T22937] netlink: 'syz.0.8351': attribute type 4 has an invalid length. [ 574.672176][T22937] netlink: 9 bytes leftover after parsing attributes in process `syz.0.8351'. [ 574.869411][T22950] loop0: detected capacity change from 0 to 512 [ 574.927730][T22950] EXT4-fs (loop0): orphan cleanup on readonly fs [ 574.956790][T22950] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 574.982823][T22950] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 575.023268][T22950] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.8358: attempt to clear invalid blocks 33619980 len 1 [ 575.060313][T22963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8364'. [ 575.075008][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 575.075022][ T27] audit: type=1326 audit(575.067:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22956 comm="syz.3.8361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74c39e159 code=0x7ffc0000 [ 575.136282][T22950] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.8358: invalid indirect mapped block 1819239214 (level 0) [ 575.193035][T22950] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.8358: invalid indirect mapped block 1819239214 (level 1) [ 575.205219][ T27] audit: type=1326 audit(575.067:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22956 comm="syz.3.8361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fa74c35a5ac code=0x7ffc0000 [ 575.281981][T22950] EXT4-fs (loop0): 1 truncate cleaned up [ 575.322880][ T27] audit: type=1326 audit(575.067:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22956 comm="syz.3.8361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa74c35a60e code=0x7ffc0000 [ 575.342582][T22950] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 575.391117][ T27] audit: type=1326 audit(575.067:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22956 comm="syz.3.8361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa74c39ddeb code=0x7ffc0000 [ 575.403497][T22950] EXT4-fs (loop0): unmounting filesystem. [ 575.509596][ T27] audit: type=1326 audit(575.067:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22956 comm="syz.3.8361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fa74c39e159 code=0x7ffc0000 [ 575.611317][ T27] audit: type=1326 audit(575.067:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22956 comm="syz.3.8361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74c39e159 code=0x7ffc0000 [ 575.717430][ T27] audit: type=1326 audit(575.067:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22956 comm="syz.3.8361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74c39e159 code=0x7ffc0000 [ 575.801347][ T27] audit: type=1326 audit(575.067:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22956 comm="syz.3.8361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa74c39e159 code=0x7ffc0000 [ 575.901639][ T27] audit: type=1326 audit(575.067:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22956 comm="syz.3.8361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa74c39e159 code=0x7ffc0000 [ 575.936407][T22982] nvme_rdma: malformed address passed: 1:4420 [ 576.003742][T22958] loop1: detected capacity change from 0 to 32768 [ 576.020734][T22958] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 576.122527][ T6720] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 576.198343][T22995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8379'. [ 576.232823][T22995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8379'. [ 576.298465][ T4369] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 576.316372][ T6720] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 576.332813][ T6720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.361306][ T6720] usb 1-1: Product: syz [ 576.371412][ T6720] usb 1-1: Manufacturer: syz [ 576.381533][ T6720] usb 1-1: SerialNumber: syz [ 576.416560][ T6720] usb 1-1: USB2VGA dongle found at address 48 [ 576.430972][T22997] loop4: detected capacity change from 0 to 4096 [ 576.470176][ T6720] usb 1-1: Allocated 8 output buffers [ 576.473464][T22997] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 576.557421][T22997] ntfs: volume version 3.1. [ 576.628661][ T6720] usb 1-1: Failed to early initialize device [ 576.649046][T23005] loop1: detected capacity change from 0 to 512 [ 576.657810][ T6720] usb 1-1: USB disconnect, device number 48 [ 576.808895][T23005] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 576.880443][T23005] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.8384: Failed to acquire dquot type 0 [ 576.906939][T23014] loop3: detected capacity change from 0 to 128 [ 577.015798][T23014] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 577.104786][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 577.253471][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 578.344851][T23073] device bridge9 entered promiscuous mode [ 578.368960][T23075] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8417'. [ 578.652255][T23087] loop4: detected capacity change from 0 to 4096 [ 578.713338][T23092] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 578.754927][T23087] NILFS error (device loop4): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 578.811858][T23087] Remounting filesystem read-only [ 578.826222][T23095] loop5: detected capacity change from 0 to 4096 [ 579.053619][T23107] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (13) [ 579.164398][T23095] Cannot load nls cp857¬ [ 579.396964][T23115] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8436'. [ 579.532334][ T4314] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 579.746199][ T4314] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 579.775822][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.802320][ T4314] usb 5-1: Product: syz [ 579.812916][ T4314] usb 5-1: Manufacturer: syz [ 579.843456][ T4314] usb 5-1: SerialNumber: syz [ 579.948833][ T4314] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 580.394053][ T14] usb 5-1: USB disconnect, device number 58 [ 580.414898][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 580.414912][ T27] audit: type=1326 audit(580.407:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23159 comm="syz.1.8458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff506d9e159 code=0x7ffc0000 [ 580.451678][T23151] nvme_fabrics: missing parameter 'transport=%s' [ 580.451980][ T27] audit: type=1326 audit(580.437:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23159 comm="syz.1.8458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff506d9e159 code=0x7ffc0000 [ 580.463431][T23151] nvme_fabrics: missing parameter 'nqn=%s' [ 580.494682][ T27] audit: type=1326 audit(580.457:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23159 comm="syz.1.8458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff506d9e159 code=0x7ffc0000 [ 580.524202][ T27] audit: type=1326 audit(580.457:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23159 comm="syz.1.8458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff506d9e159 code=0x7ffc0000 [ 580.549130][ T27] audit: type=1326 audit(580.487:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23159 comm="syz.1.8458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7ff506d9e159 code=0x7ffc0000 [ 580.581927][ T27] audit: type=1326 audit(580.487:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23159 comm="syz.1.8458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff506d9e159 code=0x7ffc0000 [ 580.660965][ T27] audit: type=1326 audit(580.487:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23159 comm="syz.1.8458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff506d9e159 code=0x7ffc0000 [ 580.738566][ T27] audit: type=1326 audit(580.487:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23159 comm="syz.1.8458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff506d9e159 code=0x7ffc0000 [ 580.812243][ T27] audit: type=1326 audit(580.487:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23159 comm="syz.1.8458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff506d9e159 code=0x7ffc0000 [ 581.068940][ T4314] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 581.079984][ T4314] ath9k_htc: Failed to initialize the device [ 581.104437][ T14] usb 5-1: ath9k_htc: USB layer deinitialized [ 581.420845][T23158] syz.0.8456 (23158): drop_caches: 3 [ 581.455128][T23191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8472'. [ 581.755848][T23203] loop3: detected capacity change from 0 to 512 [ 581.804060][T23203] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 581.861827][T23203] EXT4-fs (loop3): orphan cleanup on readonly fs [ 581.867239][T23184] nvme_rdma: malformed address passed: 1:4420 [ 581.949679][T23203] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 581.964747][T23203] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 581.971368][T23203] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.8478: bad orphan inode 768 [ 582.002268][T23203] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 582.070942][T23212] loop0: detected capacity change from 0 to 256 [ 582.248827][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 582.334889][T23223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8488'. [ 582.782952][T23238] loop3: detected capacity change from 0 to 64 [ 583.347729][ T27] audit: type=1326 audit(583.337:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23259 comm="syz.5.8506" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02fd9e159 code=0x7ffc0000 [ 583.619938][T23270] loop0: detected capacity change from 0 to 64 [ 583.658208][T23220] syz.1.8486 (23220): drop_caches: 3 [ 583.675069][T23238] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 583.742195][ T14] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 583.752802][T23272] netlink: 'syz.5.8512': attribute type 32 has an invalid length. [ 583.972107][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 583.993767][ T14] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 584.041223][ T14] usb 5-1: config 0 interface 0 has no altsetting 0 [ 584.065175][ T14] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 584.102243][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.122980][ T14] usb 5-1: Product: syz [ 584.127482][ T14] usb 5-1: Manufacturer: syz [ 584.152084][ T14] usb 5-1: SerialNumber: syz [ 584.164610][ T14] usb 5-1: config 0 descriptor?? [ 584.192103][ T14] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 584.394479][ T14] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 584.443400][ T14] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 584.606066][ T14] usb 5-1: USB disconnect, device number 59 [ 584.641423][T23300] loop3: detected capacity change from 0 to 2048 [ 584.696555][T23300] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 584.793001][T23300] UDF-fs: unknown compression code (0) [ 586.109859][T23368] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8570'. [ 586.142710][T23368] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8570'. [ 586.158033][T23370] loop4: detected capacity change from 0 to 256 [ 586.180798][T23370] exfat: Deprecated parameter 'utf8' [ 586.230455][T23374] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8562'. [ 586.250895][T23370] exfat: Deprecated parameter 'namecase' [ 586.302143][T23370] exfat: Deprecated parameter 'utf8' [ 586.358755][T23370] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 586.438838][T23370] syz.4.8560: attempt to access beyond end of device [ 586.438838][T23370] loop4: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 586.552740][T23370] syz.4.8560: attempt to access beyond end of device [ 586.552740][T23370] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 586.574736][T23386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8568'. [ 586.592741][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 586.592755][ T27] audit: type=1800 audit(586.577:447): pid=23370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8560" name="file1" dev="loop4" ino=1048704 res=0 errno=0 [ 586.604794][T23370] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 586.644087][T23388] loop5: detected capacity change from 0 to 512 [ 586.646935][T23386] device vxcan3 entered promiscuous mode [ 586.710369][T23388] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 586.783769][T23388] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 586.941722][T15442] EXT4-fs (loop5): unmounting filesystem. [ 587.457423][T23421] bond0: (slave macvtap0): Error: Device is in use and cannot be enslaved [ 587.624392][T23427] loop5: detected capacity change from 0 to 512 [ 587.711009][T23427] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 587.763142][T23427] EXT4-fs (loop5): orphan cleanup on readonly fs [ 587.774916][T23427] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 587.791508][T23427] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 587.798400][T23427] EXT4-fs error (device loop5): ext4_orphan_get:1435: comm syz.5.8587: bad orphan inode 768 [ 587.831965][T23427] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 587.936905][T23440] libceph: resolve '0.0.0.0.[' (ret=-3): failed [ 587.945791][T15442] EXT4-fs (loop5): unmounting filesystem. [ 588.411044][T23461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8600'. [ 588.802121][T23480] netlink: 'syz.1.8610': attribute type 1 has an invalid length. [ 588.972844][T23485] loop0: detected capacity change from 0 to 512 [ 589.633229][T23513] loop1: detected capacity change from 0 to 256 [ 589.640286][T23513] exfat: Deprecated parameter 'utf8' [ 589.731934][T23513] exfat: Deprecated parameter 'namecase' [ 589.737707][T23513] exfat: Deprecated parameter 'utf8' [ 589.775686][T23490] loop5: detected capacity change from 0 to 32768 [ 589.785679][T23513] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 589.850583][T23490] JBD2: Ignoring recovery information on journal [ 589.896905][T23513] syz.1.8635: attempt to access beyond end of device [ 589.896905][T23513] loop1: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 589.928907][T23513] syz.1.8635: attempt to access beyond end of device [ 589.928907][T23513] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 589.945478][ T27] audit: type=1800 audit(589.938:448): pid=23513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8635" name="file1" dev="loop1" ino=1048706 res=0 errno=0 [ 589.945684][T23513] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 590.015756][T23490] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 590.674038][T23543] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8639'. [ 590.770432][T23511] syz.4.8625 (23511): drop_caches: 3 [ 590.773573][T15442] ocfs2: Unmounting device (7,5) on (node local) [ 591.237112][T23562] wg2 speed is unknown, defaulting to 1000 [ 591.260740][T23562] wg2 speed is unknown, defaulting to 1000 [ 591.288154][T23562] wg2 speed is unknown, defaulting to 1000 [ 591.325634][T23562] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 591.368846][T23562] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 591.478019][T23562] wg2 speed is unknown, defaulting to 1000 [ 591.518261][T23562] wg2 speed is unknown, defaulting to 1000 [ 591.540035][T23562] wg2 speed is unknown, defaulting to 1000 [ 591.560437][T23562] wg2 speed is unknown, defaulting to 1000 [ 591.597689][T23562] wg2 speed is unknown, defaulting to 1000 [ 591.607698][T23544] loop1: detected capacity change from 0 to 32768 [ 591.702613][T23544] XFS (loop1): Mounting V5 Filesystem [ 591.882238][ T6720] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 591.890996][T23544] XFS (loop1): Ending clean mount [ 592.093930][ T6720] usb 4-1: Using ep0 maxpacket: 32 [ 592.101069][ T6720] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.121668][ T6720] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 592.140944][ T6720] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 592.180972][ T6720] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 592.204994][ T4272] XFS (loop1): Unmounting Filesystem [ 592.210465][ T6720] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 592.250202][ T6720] usb 4-1: config 1 interface 1 has no altsetting 0 [ 592.291453][ T6720] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 592.306513][ T6720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.340886][ T6720] usb 4-1: Product: syz [ 592.361627][ T6720] usb 4-1: Manufacturer: syz [ 592.366263][ T6720] usb 4-1: SerialNumber: syz [ 592.620401][T23605] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8666'. [ 592.640241][ T6720] usb 4-1: selecting invalid altsetting 0 [ 592.650534][ T6720] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 592.681988][ T6720] usb 4-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 592.713399][ T6720] usb 4-1: USB disconnect, device number 54 [ 592.980721][ T5089] udevd[5089]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 593.579030][T23613] loop4: detected capacity change from 0 to 32768 [ 593.593538][T23639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8683'. [ 593.702976][T23613] [ 593.702976][T23613] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 593.702976][T23613] [ 593.722040][T23641] device bridge6 entered promiscuous mode [ 593.869639][ T57] [ 593.869639][ T57] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 593.869639][ T57] [ 593.902425][ T57] [ 593.902425][ T57] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 593.902425][ T57] [ 593.907370][T23623] loop5: detected capacity change from 0 to 32768 [ 593.941864][ T4276] [ 593.941864][ T4276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 593.941864][ T4276] [ 593.973833][ T4276] [ 593.973833][ T4276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 593.973833][ T4276] [ 593.973936][T23623] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.8676 (23623) [ 594.006671][ T108] [ 594.006671][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 594.006671][ T108] [ 594.048143][ T108] ================================================================== [ 594.056241][ T108] BUG: KASAN: use-after-free in txEnd+0x329/0x520 [ 594.062752][ T108] Write of size 8 at addr ffff8880745a1840 by task jfsCommit/108 [ 594.070478][ T108] [ 594.072882][ T108] CPU: 0 PID: 108 Comm: jfsCommit Not tainted syzkaller #0 [ 594.080087][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 594.090168][ T108] Call Trace: [ 594.093454][ T108] [ 594.096490][ T108] dump_stack_lvl+0x188/0x24e [ 594.101273][ T108] ? read_lock_is_recursive+0x10/0x10 [ 594.106756][ T108] ? show_regs_print_info+0x12/0x12 [ 594.111965][ T108] ? load_image+0x410/0x410 [ 594.116499][ T108] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 594.122049][ T108] ? __virt_addr_valid+0x188/0x540 [ 594.127231][ T108] ? __virt_addr_valid+0x467/0x540 [ 594.132352][ T108] ? txEnd+0x329/0x520 [ 594.136431][ T108] print_report+0xa8/0x210 [ 594.140857][ T108] kasan_report+0x10b/0x140 [ 594.141521][T23623] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 594.145442][ T108] ? mutex_unlock+0x10/0x10 [ 594.159996][ T108] ? txEnd+0x329/0x520 [ 594.164076][ T108] kasan_check_range+0x235/0x290 [ 594.169019][ T108] txEnd+0x329/0x520 [ 594.172908][ T108] jfs_lazycommit+0x5bf/0xa90 [ 594.177578][ T108] ? txFreelock+0x5a0/0x5a0 [ 594.182071][ T108] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 594.187957][ T108] ? do_task_dead+0xd0/0xd0 [ 594.192510][ T108] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 594.198392][ T108] ? __kthread_parkme+0x71/0x1c0 [ 594.203388][ T108] ? __kthread_parkme+0x15b/0x1c0 [ 594.208406][ T108] kthread+0x29d/0x330 [ 594.212460][ T108] ? txFreelock+0x5a0/0x5a0 [ 594.216950][ T108] ? kthread_blkcg+0xd0/0xd0 [ 594.221524][ T108] ret_from_fork+0x1f/0x30 [ 594.225990][ T108] [ 594.229027][ T108] [ 594.231332][ T108] Allocated by task 23613: [ 594.235732][ T108] kasan_set_track+0x4b/0x70 [ 594.240310][ T108] __kasan_kmalloc+0x8e/0xa0 [ 594.244891][ T108] lmLogOpen+0x2c0/0xf90 [ 594.249119][ T108] jfs_mount_rw+0xfb/0x5a0 [ 594.253520][ T108] jfs_fill_super+0x57d/0xab0 [ 594.258235][ T108] mount_bdev+0x28a/0x3c0 [ 594.262586][ T108] legacy_get_tree+0xe6/0x180 [ 594.267281][ T108] vfs_get_tree+0x88/0x270 [ 594.271697][ T108] do_new_mount+0x247/0xa40 [ 594.276218][ T108] __se_sys_mount+0x2e3/0x3d0 [ 594.280887][ T108] do_syscall_64+0x4c/0xa0 [ 594.285300][ T108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 594.291187][ T108] [ 594.293500][ T108] Freed by task 4276: [ 594.297464][ T108] kasan_set_track+0x4b/0x70 [ 594.302047][ T108] kasan_save_free_info+0x27/0x40 [ 594.307056][ T108] ____kasan_slab_free+0x126/0x1f0 [ 594.312156][ T108] slab_free_freelist_hook+0x133/0x1b0 [ 594.317604][ T108] __kmem_cache_free+0xb6/0x200 [ 594.322440][ T108] lmLogClose+0x292/0x530 [ 594.326754][ T108] jfs_umount+0x288/0x360 [ 594.331154][ T108] jfs_put_super+0x88/0x190 [ 594.335669][ T108] generic_shutdown_super+0x130/0x340 [ 594.341040][ T108] kill_block_super+0x7c/0xe0 [ 594.345702][ T108] deactivate_locked_super+0x93/0xf0 [ 594.350975][ T108] cleanup_mnt+0x471/0x4f0 [ 594.355374][ T108] task_work_run+0x1d0/0x260 [ 594.359952][ T108] exit_to_user_mode_loop+0xe6/0x110 [ 594.365313][ T108] exit_to_user_mode_prepare+0xee/0x180 [ 594.370844][ T108] syscall_exit_to_user_mode+0x16/0x40 [ 594.376292][ T108] do_syscall_64+0x58/0xa0 [ 594.380695][ T108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 594.386576][ T108] [ 594.388883][ T108] The buggy address belongs to the object at ffff8880745a1800 [ 594.388883][ T108] which belongs to the cache kmalloc-1k of size 1024 [ 594.402969][ T108] The buggy address is located 64 bytes inside of [ 594.402969][ T108] 1024-byte region [ffff8880745a1800, ffff8880745a1c00) [ 594.416225][ T108] [ 594.418536][ T108] The buggy address belongs to the physical page: [ 594.424929][ T108] page:ffffea0001d16800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x745a0 [ 594.435061][ T108] head:ffffea0001d16800 order:3 compound_mapcount:0 compound_pincount:0 [ 594.443365][ T108] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 594.451328][ T108] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017441dc0 [ 594.459893][ T108] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 594.468460][ T108] page dumped because: kasan: bad access detected [ 594.474851][ T108] page_owner tracks the page as allocated [ 594.480545][ T108] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3639, tgid 3639 (udevd), ts 18268679660, free_ts 12359840012 [ 594.501291][ T108] post_alloc_hook+0x173/0x1a0 [ 594.506113][ T108] get_page_from_freelist+0x206b/0x2180 [ 594.511648][ T108] __alloc_pages+0x1ec/0x4f0 [ 594.516227][ T108] alloc_slab_page+0x5d/0x180 [ 594.520892][ T108] new_slab+0x87/0x2d0 [ 594.524953][ T108] ___slab_alloc+0xbc5/0x1240 [ 594.529617][ T108] __kmem_cache_alloc_node+0x126/0x270 [ 594.535059][ T108] __kmalloc_node_track_caller+0xa0/0x240 [ 594.540870][ T108] __alloc_skb+0x226/0x7d0 [ 594.545307][ T108] netlink_sendmsg+0x654/0xbd0 [ 594.550097][ T108] ____sys_sendmsg+0x5ed/0x9a0 [ 594.554844][ T108] ___sys_sendmsg+0x2a2/0x360 [ 594.559503][ T108] __se_sys_sendmsg+0x1c3/0x2b0 [ 594.564338][ T108] do_syscall_64+0x4c/0xa0 [ 594.568741][ T108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 594.574625][ T108] page last free stack trace: [ 594.579286][ T108] free_unref_page_prepare+0x8e5/0x9e0 [ 594.584737][ T108] free_unref_page+0x2e/0x3f0 [ 594.589402][ T108] free_contig_range+0x9d/0x150 [ 594.594235][ T108] destroy_args+0xef/0xa0e [ 594.598700][ T108] debug_vm_pgtable+0x33c/0x38e [ 594.603535][ T108] do_one_initcall+0x257/0x800 [ 594.608291][ T108] do_initcall_level+0x13d/0x1ed [ 594.613222][ T108] do_initcalls+0x4b/0x8a [ 594.617536][ T108] kernel_init_freeable+0x401/0x5ab [ 594.622717][ T108] kernel_init+0x19/0x1b0 [ 594.627035][ T108] ret_from_fork+0x1f/0x30 [ 594.631455][ T108] [ 594.633761][ T108] Memory state around the buggy address: [ 594.639372][ T108] ffff8880745a1700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 594.647417][ T108] ffff8880745a1780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 594.655462][ T108] >ffff8880745a1800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 594.663516][ T108] ^ [ 594.669648][ T108] ffff8880745a1880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 594.677689][ T108] ffff8880745a1900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 594.685728][ T108] ================================================================== [ 594.717773][T23623] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 594.736862][T23649] xt_TCPMSS: Only works on TCP SYN packets [ 594.751149][T23623] BTRFS info (device loop5): setting nodatasum [ 594.771617][ T14] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 594.774917][T23623] BTRFS info (device loop5): force zlib compression, level 3 [ 594.815002][T23623] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 594.844573][T23623] BTRFS info (device loop5): use lzo compression, level 0 [ 594.859080][T23623] BTRFS info (device loop5): turning on flush-on-commit [ 594.868136][T23623] BTRFS info (device loop5): enabling auto defrag [ 594.892100][T23623] BTRFS info (device loop5): max_inline at 4096 [ 594.898403][T23623] BTRFS info (device loop5): using free space tree [ 594.953215][ T108] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 594.960449][ T108] CPU: 1 PID: 108 Comm: jfsCommit Not tainted syzkaller #0 [ 594.967660][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 594.977748][ T108] Call Trace: [ 594.981033][ T108] [ 594.983972][ T108] dump_stack_lvl+0x188/0x24e [ 594.988671][ T108] ? memcpy+0x3c/0x60 [ 594.992667][ T108] ? show_regs_print_info+0x12/0x12 [ 594.997877][ T108] ? load_image+0x410/0x410 [ 595.002391][ T108] panic+0x2d3/0x710 [ 595.006294][ T108] ? bpf_jit_dump+0xd0/0xd0 [ 595.010801][ T108] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 595.012632][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 595.016962][ T14] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 595.016988][ T14] usb 2-1: config 0 interface 0 has no altsetting 0 [ 595.018888][ T14] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 595.018909][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.018925][ T14] usb 2-1: Product: syz [ 595.018937][ T14] usb 2-1: Manufacturer: syz [ 595.018948][ T14] usb 2-1: SerialNumber: syz [ 595.037330][ T14] usb 2-1: config 0 descriptor?? [ 595.040421][ T14] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 595.080989][ T108] ? _raw_spin_unlock+0x40/0x40 [ 595.085847][ T108] check_panic_on_warn+0x80/0xa0 [ 595.090799][ T108] ? txEnd+0x329/0x520 [ 595.094862][ T108] end_report+0x66/0x110 [ 595.099099][ T108] kasan_report+0x118/0x140 [ 595.103602][ T108] ? mutex_unlock+0x10/0x10 [ 595.108106][ T108] ? txEnd+0x329/0x520 [ 595.112173][ T108] kasan_check_range+0x235/0x290 [ 595.117109][ T108] txEnd+0x329/0x520 [ 595.121000][ T108] jfs_lazycommit+0x5bf/0xa90 [ 595.125671][ T108] ? txFreelock+0x5a0/0x5a0 [ 595.130163][ T108] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 595.136048][ T108] ? do_task_dead+0xd0/0xd0 [ 595.140545][ T108] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 595.146428][ T108] ? __kthread_parkme+0x71/0x1c0 [ 595.151360][ T108] ? __kthread_parkme+0x15b/0x1c0 [ 595.156376][ T108] kthread+0x29d/0x330 [ 595.160426][ T108] ? txFreelock+0x5a0/0x5a0 [ 595.164915][ T108] ? kthread_blkcg+0xd0/0xd0 [ 595.169488][ T108] ret_from_fork+0x1f/0x30 [ 595.173895][ T108] [ 595.177029][ T108] Kernel Offset: disabled [ 595.181341][ T108] Rebooting in 86400 seconds..