last executing test programs: 1.441619521s ago: executing program 2 (id=6118): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3f, {0x1, 0x7, 0x7, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xb4}}, 0x980) 1.271444909s ago: executing program 2 (id=6120): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x202100, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 1.090132207s ago: executing program 3 (id=6124): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) 1.089533828s ago: executing program 2 (id=6125): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x14001) 950.014562ms ago: executing program 3 (id=6128): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000900)=@broute={'broute\x00', 0x20, 0x1, 0x168, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000001c0], 0x700, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x1, 0xeeb263aa66f41dcc, 'syz_tun\x00', 'dummy0\x00', 'nr0\x00', 'wlan0\x00', @multicast, [0xff, 0x0, 0x0, 0x0, 0xff], @random="a68146ce6ba5", [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0xa0, 0xd8, [], [@common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}], @common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xfffffffffffffffe}}}}]}]}, 0x1e0) 877.773759ms ago: executing program 2 (id=6130): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305fcfffffffedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="11110200719400001c0012800b0001006d616373656300000c000280050003000f"], 0x44}}, 0x0) 799.968178ms ago: executing program 3 (id=6133): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[&(0x7f0000000040)='\x00\x01\x00\x00\x00\x00\x00\x00\x00VP\x15\xfdUj\x8aB\xd1\xa9\xf3']}) 670.999521ms ago: executing program 0 (id=6134): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x8000) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000140)={0x0, 0x0, 0x101, 0x0, {0x6, 0xaf7, 0xc0e, 0xa}}) 669.439661ms ago: executing program 2 (id=6135): r0 = syz_mount_image$hfs(&(0x7f0000001d00), &(0x7f0000001d40)='127.0.0.1:/\x00', 0x2000000, &(0x7f0000001d80)={[{@codepage={'codepage', 0x3d, 'iso8859-5'}}, {@type={'type', 0x3d, "ff11f61e"}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {}, {@uid}]}, 0x4, 0x307, &(0x7f0000001e00)="$eJzs3T9vE0kYx/HfrO3EuUS5vSSnk665U+4i3TXR5aBANEbILT0VAmJHirCCSIIENJgIUSFeAD1vgRdBA+INAA0VLyDdopkdr9f2eGNLdpyE70dKNJ6d2Xk2+++ZleIVgB/W9fqnN5e+2h8jlVSSdFWKJFWlsqRf9Vv14d7h7mGr2ShaUcn1sD9GaU8z0GZ7rxnqavu5Hl5sP5W1lK/DdCRJcu3zrIPAzLmzPyCS5v156JZXTzmuSenfuLb0x4xCmZn838Ac61iPtDzDcAAAZ4C//0f+NrHkqoyiSNrwt/1zff/vdzzrACbrcmugKinskLv/u+wuMXb//uwWded7bgpnl0edWeIowVT6Ps8pPbJ6cjATnlV+SVI+lmhhZ7esze1nakQ6Us3LdVhzvxvpodtxQrTrgblpgeFrq+jGT+nW2IxyoX9xJ6Sd3VZz3hYC8a+ON+K4BmKSeWc+mFsm1ms1svyvnBi7m9yeivv2VFSx8f83fIxF18u2kp/212q1qKfJL26Q3/0I3glbWQ3PSPLr7DwgaGcRBOI86hTc2CvqfayQbt1WaADTXflqqFecfRrs68Za6+lV8kfC5vb9VuGjlOnobKJ5ZW6adX3TW9Vz+X9k49tQ7swsutQb19IfGen2zIVbll3LeODO0c5Kf2YRePNjbxukMZ+WvdRdXdHyweMn90qtVnPfFu4ECg+W9o2vqTyXgm2mXyipoI3a3Rp383iaJKOuOcnXmAkH/+9E/wj2+pHV2NMn1NieZVlNdNq76eIVygotqr9X0QE5vULuIjqRFdpEa8iiyV+gcPYcmM5O9xWDCSMuNpt3mXT+5zJ5n9W57Nf+igvy9OJJpnrWuJXN4HpTwZVQ7lI8N6gupsn5i+IR/x8yZ3Rzrr/+kf7OVRoVzkZiF+eFYer6qNs8/wcAAAAAAAAAAAAAAAAAADhvTuNfF8Ij8+U+AAAAAAAAAAAAAAAAAAAAAACMavT3/y5039QU+o549/7f+MT3//a8ANi/KIr3/wKz8T0AAP//fcx8Qg==") fspick(r0, &(0x7f0000000000)='127.0.0.1://file0\x00', 0x1) 643.365624ms ago: executing program 1 (id=6136): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0xfffffffe}}) 615.043657ms ago: executing program 3 (id=6137): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) 536.365635ms ago: executing program 0 (id=6138): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000400, 0x0, 0x0, 0x20000430, 0x20000460], 0x84, 0x0, &(0x7f0000001580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 532.549105ms ago: executing program 1 (id=6139): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x3}, 0x1a) 480.43674ms ago: executing program 3 (id=6140): r0 = syz_io_uring_setup(0x2152, &(0x7f0000000200)={0x0, 0xcfca, 0x40, 0xfffffffd, 0x16b}, &(0x7f0000000100), &(0x7f0000001040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, 0x0, 0x0) 411.536617ms ago: executing program 1 (id=6141): r0 = syz_open_dev$sg(&(0x7f0000000fc0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2205, 0x0) 356.808673ms ago: executing program 2 (id=6142): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 351.578504ms ago: executing program 0 (id=6143): r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2080, 0x9}) 270.421122ms ago: executing program 3 (id=6144): ptrace(0x10, 0x0) syz_usb_connect$uac1(0x2, 0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010102000000206307032040000102030109027200030109103f0904000000010100000a2401d2000a000201020904010000010200000904010101010200000905010000014200000904020101010200000b240201fc030801371fc8072401080500000905820920"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 233.016166ms ago: executing program 1 (id=6145): r0 = syz_open_dev$video(&(0x7f00000006c0), 0xa7, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000880)={0x0, "836d11f8a2f7337496bff2b4d43d0f0ebf870e7cf92542da0cbdf188dede83ee", 0x1, 0x80, 0x7ffffffb, 0x7, 0x1, 0x4, 0x0, 0x3}) 166.883073ms ago: executing program 0 (id=6146): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2b, 0x3c, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) 117.668928ms ago: executing program 1 (id=6147): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="180100002b0001000000000000000000081c00800d0002000021233a254c3a2c00000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 94.08317ms ago: executing program 0 (id=6148): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 10.861179ms ago: executing program 1 (id=6149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) 0s ago: executing program 0 (id=6150): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d16080600000000000000f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): 994] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 299.132945][ T5785] ocfs2: Unmounting device (7,3) on (node local) [ 299.191656][ T8] r8152-cfgselector 2-1: Unknown version 0x0000 [ 299.222538][ T8] r8152-cfgselector 2-1: USB disconnect, device number 20 [ 299.367631][T14017] netlink: 'syz.0.3752': attribute type 21 has an invalid length. [ 299.377328][T14017] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3752'. [ 299.387921][T14017] netlink: 'syz.0.3752': attribute type 5 has an invalid length. [ 299.396694][T14017] netlink: 'syz.0.3752': attribute type 6 has an invalid length. [ 299.405529][T14017] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3752'. [ 299.444328][T14021] netlink: 'syz.3.3750': attribute type 1 has an invalid length. [ 299.455171][T14021] netlink: 'syz.3.3750': attribute type 3 has an invalid length. [ 299.808349][T14037] loop2: detected capacity change from 0 to 64 [ 300.664980][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 300.864942][ T5875] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 300.887625][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.911390][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 300.934946][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.943093][ T9] usb 3-1: Product: syz [ 300.957310][ T9] usb 3-1: Manufacturer: syz [ 300.972628][ T9] usb 3-1: SerialNumber: syz [ 301.025158][ T27] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 301.044940][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 301.057521][ T5875] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 301.072259][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.081406][ T5875] usb 2-1: Product: syz [ 301.091353][ T5875] usb 2-1: Manufacturer: syz [ 301.097481][ T5875] usb 2-1: SerialNumber: syz [ 301.111910][ T5875] usb 2-1: config 0 descriptor?? [ 301.130572][ T5875] gspca_main: sq930x-2.14.0 probing 2770:930c [ 301.194920][ T9] snd-usb-6fire 3-1:1.0: unknown device firmware state received from device: [ 301.204582][ T9] eb aa 55 00 00 00 00 00 [ 301.223630][ T27] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 301.225368][ T9] snd-usb-6fire: probe of 3-1:1.0 failed with error -5 [ 301.239770][ T27] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 301.251395][ T27] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 301.278004][ T27] usb 1-1: config 8 has no interface number 0 [ 301.284485][ T27] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 301.303932][ T27] usb 1-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.343964][ T27] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 301.365659][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.373902][ T27] usb 1-1: Product: syz [ 301.385451][ T27] usb 1-1: Manufacturer: syz [ 301.390771][ T27] usb 1-1: SerialNumber: syz [ 301.411238][ T8] usb 3-1: USB disconnect, device number 24 [ 301.566230][ T5875] gspca_sq930x: ucbus_write failed -71 [ 301.572260][ T5875] sq930x: probe of 2-1:0.0 failed with error -71 [ 301.602133][ T5875] usb 2-1: USB disconnect, device number 21 [ 301.662133][ T27] usb 1-1: USB disconnect, device number 14 [ 301.899003][T14120] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode 802.3ad(4) [ 301.912221][T14120] bond3 (unregistering): Released all slaves [ 302.181181][T14131] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.3804'. [ 302.234532][T14133] netlink: 'syz.3.3805': attribute type 1 has an invalid length. [ 302.316047][T14135] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3806'. [ 302.515486][T14145] loop1: detected capacity change from 0 to 64 [ 302.671779][T14149] nvme nvme0: failed to connect socket: -111 [ 302.752967][T14154] netlink: 'syz.2.3815': attribute type 2 has an invalid length. [ 302.930095][T14160] xt_cgroup: invalid path, errno=-2 [ 303.538446][T14186] CIFS: VFS: bad security option: kr!qÌ [ 303.894656][T14201] netlink: 'syz.2.3838': attribute type 2 has an invalid length. [ 304.106302][T14211] loop1: detected capacity change from 0 to 256 [ 304.118506][T14213] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3843'. [ 304.263266][T14215] @ÿ: renamed from veth0_vlan (while UP) [ 304.503421][T14227] kAFS: unable to lookup cell '.' [ 304.607291][T14232] loop3: detected capacity change from 0 to 512 [ 304.707090][T14232] EXT4-fs (loop3): 1 orphan inode deleted [ 304.718959][T14232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.734396][T14232] ext4 filesystem being mounted at /1067/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.736282][ T3475] __quota_error: 3 callbacks suppressed [ 304.736297][ T3475] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 304.812191][ T3475] EXT4-fs error (device loop3): ext4_release_dquot:6994: comm kworker/u4:9: Failed to release dquot type 1 [ 304.912541][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.941697][ T3475] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 304.965044][ T3475] EXT4-fs error (device loop3): ext4_release_dquot:6994: comm kworker/u4:9: Failed to release dquot type 1 [ 305.026251][T14250] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3862'. [ 305.070307][T14250] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3862'. [ 305.783549][T14288] loop3: detected capacity change from 0 to 512 [ 305.863301][T14288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.905222][T14288] ext4 filesystem being mounted at /1073/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.098388][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.627556][T14334] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 306.968968][T14347] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3906'. [ 307.128972][T14356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3911'. [ 307.155215][T14355] bond0: entered allmulticast mode [ 307.165288][T14355] bond_slave_1: entered allmulticast mode [ 307.291347][T14362] netlink: 'syz.1.3914': attribute type 2 has an invalid length. [ 307.304974][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 307.309325][T14362] netlink: 'syz.1.3914': attribute type 3 has an invalid length. [ 307.324275][T14362] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3914'. [ 307.513582][T14374] libceph: resolve '27.030.1' (ret=-3): failed [ 307.523374][T14370] ipip0: entered promiscuous mode [ 307.795292][T14389] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 308.113246][T14404] loop0: detected capacity change from 0 to 2048 [ 308.166371][T14404] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 308.171508][T14407] mmap: syz.1.3944 (14407) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 308.228487][T14410] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 308.239614][T14404] syz.0.3935: attempt to access beyond end of device [ 308.239614][T14404] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 308.334969][T14404] syz.0.3935: attempt to access beyond end of device [ 308.334969][T14404] loop0: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 308.368748][T14404] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=3) [ 309.057546][T14429] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3947'. [ 309.078029][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3947'. [ 309.122163][T14412] loop2: detected capacity change from 0 to 32768 [ 309.170279][T14412] ERROR: (device loop2): diNewExt: no free extents [ 309.170279][T14412] [ 309.205730][T14434] netlink: 'syz.3.3948': attribute type 10 has an invalid length. [ 309.213621][T14434] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.3948'. [ 309.220652][T14412] ERROR: (device loop2): remounting filesystem as read-only [ 309.236293][T14412] ialloc: diAlloc returned -5! [ 309.676322][T14450] bond2: entered promiscuous mode [ 309.682212][T14450] 8021q: adding VLAN 0 to HW filter on device bond2 [ 309.764863][ T5875] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 309.944937][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 309.961121][ T5875] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 309.981763][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.005050][ T5875] usb 1-1: Product: syz [ 310.009414][ T5875] usb 1-1: Manufacturer: syz [ 310.014284][ T5875] usb 1-1: SerialNumber: syz [ 310.025703][ T5875] usb 1-1: config 0 descriptor?? [ 310.035556][ T5875] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 310.133978][T14472] loop2: detected capacity change from 0 to 2048 [ 310.221282][T14472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 310.240494][T14479] loop3: detected capacity change from 0 to 256 [ 310.417491][T14472] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.3966: inline data xattr refers to an external xattr inode [ 310.455340][T14485] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 310.478695][T14472] EXT4-fs (loop2): Remounting filesystem read-only [ 310.499213][ T5875] ssu100: probe of 1-1:0.0 failed with error -71 [ 310.527794][ T5875] usb 1-1: USB disconnect, device number 15 [ 310.580192][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 311.545140][T14534] netlink: 'syz.3.3995': attribute type 8 has an invalid length. [ 311.784429][T14546] netlink: 'syz.2.3999': attribute type 4 has an invalid length. [ 312.034062][T14558] loop3: detected capacity change from 0 to 164 [ 312.428407][T14575] netlink: 'syz.1.4012': attribute type 1 has an invalid length. [ 312.449486][T14575] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4012'. [ 312.455700][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4011'. [ 312.474389][T14575] NCSI netlink: No device for ifindex 0 [ 312.480238][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4011'. [ 312.480266][T14577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4011'. [ 312.680207][T14586] veth0_macvtap: entered allmulticast mode [ 312.719573][T14586] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 312.770917][T14591] loop3: detected capacity change from 0 to 512 [ 312.819518][T14594] netlink: 'syz.1.4020': attribute type 1 has an invalid length. [ 312.842580][T14591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.887577][T14591] ext4 filesystem being mounted at /1114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.122351][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.189446][T14613] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4028'. [ 313.463520][T14626] loop3: detected capacity change from 0 to 1024 [ 313.768565][T14638] loop1: detected capacity change from 0 to 64 [ 313.802357][T14638] hfs: gid requires an argument [ 313.845116][T14638] hfs: unable to parse mount options [ 314.471924][T14669] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 314.504873][ T5774] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 314.697161][ T5774] usb 4-1: unable to get BOS descriptor or descriptor too short [ 314.717636][ T5774] usb 4-1: not running at top speed; connect to a high speed hub [ 314.743187][ T5774] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.766810][ T5774] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 314.781421][ T5774] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 314.798959][ T5774] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 314.814217][ T5774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 314.828335][ T5774] usb 4-1: Product: syz [ 314.832564][ T5774] usb 4-1: Manufacturer: syz [ 314.870545][ T5774] usb 4-1: Found UVC 1.00 device syz (8086:0ad2) [ 314.885082][ T5774] usb 4-1: No streaming interface found for terminal 2. [ 315.124864][ T5875] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 315.127953][ T5774] usb 4-1: USB disconnect, device number 15 [ 315.307202][ T5875] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 315.330907][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.351902][ T5875] usb 1-1: config 0 descriptor?? [ 315.373151][ T5875] cp210x 1-1:0.0: cp210x converter detected [ 315.591148][ T5875] usb 1-1: cp210x converter now attached to ttyUSB0 [ 315.655198][ T23] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 315.743561][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4082'. [ 315.801058][ T28] audit: type=1326 audit(1793368772.618:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14727 comm="syz.1.4083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538479f559 code=0x7ffc0000 [ 315.807609][ T5875] usb 1-1: USB disconnect, device number 16 [ 315.849753][ T5875] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 315.857700][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 315.873170][ T28] audit: type=1326 audit(1793368772.618:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14727 comm="syz.1.4083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538479f559 code=0x7ffc0000 [ 315.885356][ T23] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 315.907665][ T5875] cp210x 1-1:0.0: device disconnected [ 315.931721][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.938667][ T28] audit: type=1326 audit(1793368772.678:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14727 comm="syz.1.4083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f538479f559 code=0x7ffc0000 [ 315.950288][ T23] usb 3-1: Product: syz [ 315.984930][ T23] usb 3-1: Manufacturer: syz [ 315.989863][ T23] usb 3-1: SerialNumber: syz [ 316.010975][ T23] usb 3-1: config 0 descriptor?? [ 316.011150][ T28] audit: type=1326 audit(1793368772.678:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14727 comm="syz.1.4083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538479f559 code=0x7ffc0000 [ 316.082480][ T28] audit: type=1326 audit(1793368772.678:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14727 comm="syz.1.4083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538479f559 code=0x7ffc0000 [ 316.251532][ T23] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 316.455416][ T23] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 316.488657][ T23] usb 3-1: USB disconnect, device number 25 [ 317.470741][T14799] netlink: 'syz.3.4117': attribute type 1 has an invalid length. [ 317.486395][T14799] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4117'. [ 317.548770][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.555524][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.966926][T14818] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 72 [ 318.450523][T14849] x_tables: unsorted underflow at hook 2 [ 318.454667][T14848] netlink: 'syz.3.4143': attribute type 1 has an invalid length. [ 318.860143][T14868] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4153'. [ 319.503804][T14900] nvme_fabrics: unknown parameter or missing value ']' in ctrl creation request [ 319.692004][T14906] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 319.723825][T14908] autofs4:pid:14908:autofs_fill_super: called with bogus options [ 319.910746][T14916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4176'. [ 320.015455][T14922] xt_l2tp: v2 doesn't support IP mode [ 320.290493][T14936] netlink: 'syz.3.4186': attribute type 3 has an invalid length. [ 320.310970][T14936] netlink: 'syz.3.4186': attribute type 1 has an invalid length. [ 320.335176][T14936] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4186'. [ 320.463875][T14944] netlink: 'syz.3.4190': attribute type 10 has an invalid length. [ 321.225148][ T791] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 321.282464][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4210'. [ 321.297138][T14985] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4210'. [ 321.427050][ T791] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.444336][ T791] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 321.454654][ T791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 321.470859][ T791] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 321.487468][ T791] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 321.503895][ T791] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 321.518664][ T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.539341][T14970] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 321.575841][ T791] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 321.594329][ T791] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 321.604491][ T791] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 321.620399][ T791] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 321.640034][ T791] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 321.658551][ T791] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 321.681185][ T791] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 321.860409][ T5875] usb 1-1: USB disconnect, device number 17 [ 321.882251][ T5875] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 321.895029][T15007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4217'. [ 321.907138][ T5875] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 321.933658][ T5875] keyspan 1-1:1.0: device disconnected [ 322.044949][ T791] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 322.227141][ T791] usb 2-1: config 253 has an invalid interface number: 23 but max is 0 [ 322.236379][ T791] usb 2-1: config 253 has no interface number 0 [ 322.247793][ T791] usb 2-1: config 253 interface 23 has no altsetting 0 [ 322.267770][ T791] usb 2-1: New USB device found, idVendor=0e8d, idProduct=7106, bcdDevice=24.22 [ 322.277578][ T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.294985][ T791] usb 2-1: Product: syz [ 322.302936][ T791] usb 2-1: Manufacturer: syz [ 322.309485][ T791] usb 2-1: SerialNumber: syz [ 322.465563][T15013] loop3: detected capacity change from 0 to 32768 [ 322.695451][T15003] rxe_eth0 speed is unknown, defaulting to 1000 [ 322.762560][ T28] audit: type=1326 audit(1793368779.568:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15027 comm="syz.3.4229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53059f559 code=0x7ffc0000 [ 322.845932][ T28] audit: type=1326 audit(1793368779.568:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15027 comm="syz.3.4229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53059f559 code=0x7ffc0000 [ 322.934819][ T28] audit: type=1326 audit(1793368779.608:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15027 comm="syz.3.4229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53059f559 code=0x7ffc0000 [ 323.036136][ T28] audit: type=1326 audit(1793368779.608:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15027 comm="syz.3.4229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53059f559 code=0x7ffc0000 [ 323.114895][ T28] audit: type=1326 audit(1793368779.608:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15027 comm="syz.3.4229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fc53059f559 code=0x7ffc0000 [ 323.199633][ T28] audit: type=1326 audit(1793368779.608:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15027 comm="syz.3.4229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53059f559 code=0x7ffc0000 [ 323.278703][ T28] audit: type=1326 audit(1793368779.618:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15027 comm="syz.3.4229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc53059f559 code=0x7ffc0000 [ 323.355767][ T28] audit: type=1326 audit(1793368779.618:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15027 comm="syz.3.4229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc53059f559 code=0x7ffc0000 [ 323.415839][T15045] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4238'. [ 323.435511][ T28] audit: type=1326 audit(1793368780.008:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15038 comm="syz.3.4235" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53059f559 code=0x7ffc0000 [ 323.524950][ T28] audit: type=1326 audit(1793368780.008:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15038 comm="syz.3.4235" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53059f559 code=0x7ffc0000 [ 324.366822][ T791] option 2-1:253.23: GSM modem (1-port) converter detected [ 324.414974][ T791] usb 2-1: USB disconnect, device number 22 [ 324.422385][ T791] option 2-1:253.23: device disconnected [ 324.982933][T15100] netlink: 'syz.2.4261': attribute type 1 has an invalid length. [ 325.271219][T15116] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4271'. [ 325.335869][ T791] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 325.543421][ T791] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 325.593317][ T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.631936][ T791] usb 1-1: Product: syz [ 325.653648][ T791] usb 1-1: Manufacturer: syz [ 325.659017][ T791] usb 1-1: SerialNumber: syz [ 325.696562][ T5875] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 326.232445][ T791] usb 1-1: USB disconnect, device number 18 [ 326.300841][T15143] loop2: detected capacity change from 0 to 4096 [ 326.352130][T15147] loop1: detected capacity change from 0 to 256 [ 326.376875][T15147] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 326.395242][ T9] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 326.445798][T15143] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 326.507290][T15143] ntfs3: loop2: Failed to load $Extend (-22). [ 326.513486][T15143] ntfs3: loop2: Failed to initialize $Extend. [ 326.596246][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 326.628050][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.644081][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 326.658979][ T9] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 326.678647][ T9] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 326.689817][ T9] usb 4-1: Product: syz [ 326.699322][ T9] usb 4-1: Manufacturer: syz [ 326.711376][ T9] usb 4-1: Found UVC 1.00 device syz (225a:e1d4) [ 326.724155][ T9] usb 4-1: No valid video chain found. [ 326.754604][ T5875] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 326.794106][ T5875] ath9k_htc: Failed to initialize the device [ 326.826380][ T791] usb 1-1: ath9k_htc: USB layer deinitialized [ 326.884258][T15155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4289'. [ 326.977465][ T9] usb 4-1: USB disconnect, device number 16 [ 327.032621][T15161] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 327.073259][T15157] loop0: detected capacity change from 0 to 4096 [ 327.105199][T15157] ntfs3: loop0: Primary boot: invalid bytes per sector 0. [ 327.132238][T15157] ntfs3: loop0: try to read out of volume at offset 0x1ffe00 [ 327.169402][T15167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4294'. [ 327.330055][T15171] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4296'. [ 327.354992][T15171] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 327.376633][T15171] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 327.747197][T15189] autofs4:pid:15189:autofs_fill_super: called with bogus options [ 328.115203][T15206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4315'. [ 328.657372][T15224] loop3: detected capacity change from 0 to 4096 [ 328.680467][T15226] x_tables: unsorted entry at hook 3 [ 328.742759][T15224] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 328.810401][T15224] ntfs3: loop3: Failed to load $Extend (-22). [ 328.822507][T15224] ntfs3: loop3: Failed to initialize $Extend. [ 328.942224][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 328.942241][ T28] audit: type=1800 audit(1793368785.758:618): pid=15224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4323" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 329.281764][T15215] loop0: detected capacity change from 0 to 32768 [ 329.355980][T15215] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 329.457068][T15215] XFS (loop0): Ending clean mount [ 330.175500][ T5784] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 330.510073][T15265] loop2: detected capacity change from 0 to 2048 [ 330.598203][T15265] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 330.664688][T15271] netlink: 'syz.3.4342': attribute type 6 has an invalid length. [ 330.689320][T15271] netlink: 'syz.3.4342': attribute type 7 has an invalid length. [ 330.711538][T15271] netlink: 'syz.3.4342': attribute type 8 has an invalid length. [ 330.961326][T15279] loop2: detected capacity change from 0 to 2048 [ 331.024894][T15279] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 331.071395][T15279] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 331.100217][T15287] veth0: mtu less than device minimum [ 331.129516][T15279] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.328172][T15293] loop0: detected capacity change from 0 to 8192 [ 331.364829][T15293] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 331.367793][T15298] netlink: 308 bytes leftover after parsing attributes in process `syz.1.4355'. [ 331.458881][T15293] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 331.508876][T15293] REISERFS (device loop0): using ordered data mode [ 331.560492][T15293] reiserfs: using flush barriers [ 331.585955][T15293] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 331.627128][T15293] REISERFS (device loop0): checking transaction log (loop0) [ 331.844276][T15293] REISERFS (device loop0): Using tea hash to sort names [ 331.864589][T15293] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 332.732695][T15322] loop3: detected capacity change from 0 to 32768 [ 332.774033][T15322] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.4367 (15322) [ 332.809876][T15347] netlink: 'syz.1.4379': attribute type 9 has an invalid length. [ 332.820429][T15322] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 332.833310][T15347] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4379'. [ 332.849408][T15322] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 332.908149][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.934958][T15322] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 332.944470][T15322] BTRFS info (device loop3): use zstd compression, level 3 [ 333.005065][T15322] BTRFS info (device loop3): using free space tree [ 333.072940][ T28] audit: type=1326 audit(1793368789.888:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15354 comm="syz.0.4382" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4af19f559 code=0x0 [ 333.096619][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.253765][T15322] BTRFS info (device loop3): enabling ssd optimizations [ 333.274816][T15322] BTRFS info (device loop3): auto enabling async discard [ 333.544160][T15380] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4388'. [ 333.595248][T15380] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4388'. [ 333.678266][ T5785] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 334.743330][T15386] loop1: detected capacity change from 0 to 32768 [ 334.783703][T15386] JBD2: Ignoring recovery information on journal [ 334.880424][T15386] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 335.105934][T15423] netlink: 'syz.3.4408': attribute type 2 has an invalid length. [ 335.124932][T15423] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4408'. [ 335.282364][ T5786] ocfs2: Unmounting device (7,1) on (node local) [ 335.606308][ T27] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 335.816992][ T27] usb 1-1: config 253 has an invalid interface number: 23 but max is 0 [ 335.844067][ T27] usb 1-1: config 253 has no interface number 0 [ 335.864900][ T27] usb 1-1: config 253 interface 23 has no altsetting 0 [ 335.885475][ T27] usb 1-1: New USB device found, idVendor=0e8d, idProduct=7106, bcdDevice=24.22 [ 335.896552][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.908987][ T27] usb 1-1: Product: syz [ 335.913697][ T27] usb 1-1: Manufacturer: syz [ 335.928730][ T27] usb 1-1: SerialNumber: syz [ 336.156675][T15465] netlink: 'syz.2.4427': attribute type 32 has an invalid length. [ 336.297072][T15433] rxe_eth0 speed is unknown, defaulting to 1000 [ 336.802196][T15485] netlink: 'syz.2.4437': attribute type 1 has an invalid length. [ 336.824983][T15485] netlink: 'syz.2.4437': attribute type 1 has an invalid length. [ 336.960983][T15491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4440'. [ 337.418291][T15503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4446'. [ 337.427695][T15503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4446'. [ 337.668624][ T27] option 1-1:253.23: GSM modem (1-port) converter detected [ 337.718932][ T27] usb 1-1: USB disconnect, device number 19 [ 337.750698][ T27] option 1-1:253.23: device disconnected [ 338.081118][T15511] loop3: detected capacity change from 0 to 32768 [ 338.136909][T15511] JBD2: Ignoring recovery information on journal [ 338.187926][T15511] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 338.315296][T15530] Unsupported ieee802154 address type: 0 [ 338.413484][ T5785] ocfs2: Unmounting device (7,3) on (node local) [ 339.460584][T15571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4477'. [ 339.682456][T15582] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 339.690814][T15585] loop2: detected capacity change from 0 to 256 [ 339.711311][T15585] exFAT-fs (loop2): error, no upcase table entry. Please run fsck [ 339.730159][T15585] exFAT-fs (loop2): Filesystem has been set read-only [ 339.835832][T15587] binder: 15586:15587 ioctl 40089413 0 returned -22 [ 339.960795][T15593] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 340.038149][T15596] ALSA: mixer_oss: invalid OSS volume '*ÛÃÈ0iàN*„' [ 340.304502][ T28] audit: type=1326 audit(1793368797.118:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15607 comm="syz.0.4494" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4af19f559 code=0x7ffc0000 [ 340.345078][T15610] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 340.354839][ T28] audit: type=1326 audit(1793368797.118:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15607 comm="syz.0.4494" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4af19f559 code=0x7ffc0000 [ 340.445237][ T28] audit: type=1326 audit(1793368797.118:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15607 comm="syz.0.4494" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4af19f559 code=0x7ffc0000 [ 340.480023][T15612] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4497'. [ 340.500125][T15614] SET target dimension over the limit! [ 340.521023][ T28] audit: type=1326 audit(1793368797.118:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15607 comm="syz.0.4494" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4af19f559 code=0x7ffc0000 [ 340.573081][T15616] dlm: non-version read from control device 155 [ 340.594837][ T28] audit: type=1326 audit(1793368797.158:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15607 comm="syz.0.4494" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7ff4af19f559 code=0x7ffc0000 [ 340.684807][ T28] audit: type=1326 audit(1793368797.158:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15607 comm="syz.0.4494" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4af19f559 code=0x7ffc0000 [ 340.727064][T15589] loop3: detected capacity change from 0 to 32768 [ 340.755015][ T28] audit: type=1326 audit(1793368797.158:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15607 comm="syz.0.4494" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4af19f559 code=0x7ffc0000 [ 340.813545][T15589] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 340.866821][ T28] audit: type=1326 audit(1793368797.158:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15607 comm="syz.0.4494" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff4af19f559 code=0x7ffc0000 [ 340.900389][T15589] XFS (loop3): Ending clean mount [ 340.954248][ T28] audit: type=1326 audit(1793368797.158:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15607 comm="syz.0.4494" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff4af19f559 code=0x7ffc0000 [ 341.052683][ T28] audit: type=1326 audit(1793368797.548:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15618 comm="syz.0.4500" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4af19f559 code=0x7ffc0000 [ 341.085624][ T5785] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 341.558377][T15655] loop3: detected capacity change from 0 to 64 [ 341.648053][T15655] syz.3.4513: attempt to access beyond end of device [ 341.648053][T15655] loop3: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 341.696159][T15655] Buffer I/O error on dev loop3, logical block 117440531, async page read [ 341.719044][T15655] syz.3.4513: attempt to access beyond end of device [ 341.719044][T15655] loop3: rw=0, sector=8548515840, nr_sectors = 2 limit=64 [ 341.754987][T15655] Buffer I/O error on dev loop3, logical block 4274257920, async page read [ 341.784138][T15655] syz.3.4513: attempt to access beyond end of device [ 341.784138][T15655] loop3: rw=0, sector=301989888, nr_sectors = 2 limit=64 [ 341.814852][T15655] Buffer I/O error on dev loop3, logical block 150994944, async page read [ 341.843747][T15655] syz.3.4513: attempt to access beyond end of device [ 341.843747][T15655] loop3: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 341.886481][T15655] Buffer I/O error on dev loop3, logical block 117440531, async page read [ 342.328352][T15685] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.4527'. [ 342.853761][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4540'. [ 343.639096][T15743] loop3: detected capacity change from 0 to 8192 [ 343.648512][T15743] REISERFS warning (device loop3): jmacd-7 reiserfs_fill_super: resize option for remount only [ 343.725040][ T5898] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 343.759106][T15750] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 343.768476][T15750] overlayfs: missing 'lowerdir' [ 343.927861][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 343.953332][ T5898] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 343.987207][ T5898] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 344.003068][ T5898] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 344.027771][ T5898] usb 1-1: Product: syz [ 344.032019][ T5898] usb 1-1: Manufacturer: syz [ 344.055194][ T5898] usb 1-1: SerialNumber: syz [ 344.308713][ T5898] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 344.333137][T15770] cgroup: name respecified [ 344.334787][ T5898] usb 1-1: Handspring Visor / Palm OS: port 128, is for Debugger use [ 344.356132][ T5898] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 344.364025][ T5898] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 344.434951][ T5774] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 344.452080][T15774] loop2: detected capacity change from 0 to 64 [ 344.492441][T15776] loop3: detected capacity change from 0 to 128 [ 344.508936][ T5898] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 344.521595][T15774] syz.2.4571: attempt to access beyond end of device [ 344.521595][T15774] loop2: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 344.536802][ T5898] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 344.585775][ T5898] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 344.605553][T15774] Buffer I/O error on dev loop2, logical block 117440531, async page read [ 344.616098][ T5898] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 344.645416][T15774] syz.2.4571: attempt to access beyond end of device [ 344.645416][T15774] loop2: rw=0, sector=8548515840, nr_sectors = 2 limit=64 [ 344.665197][ T5898] usb 1-1: USB disconnect, device number 20 [ 344.677078][ T5774] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 344.685055][T15774] Buffer I/O error on dev loop2, logical block 4274257920, async page read [ 344.700630][T15774] syz.2.4571: attempt to access beyond end of device [ 344.700630][T15774] loop2: rw=0, sector=301989888, nr_sectors = 2 limit=64 [ 344.701810][ T5898] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 344.718278][T15774] Buffer I/O error on dev loop2, logical block 150994944, async page read [ 344.743337][T15774] syz.2.4571: attempt to access beyond end of device [ 344.743337][T15774] loop2: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 344.754561][ T5774] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 344.772339][T15774] Buffer I/O error on dev loop2, logical block 117440531, async page read [ 344.791918][ T5774] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 344.822468][ T5898] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 344.832674][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 344.851112][ T5774] usb 2-1: SerialNumber: syz [ 344.857386][ T5898] visor 1-1:1.0: device disconnected [ 344.887185][ T5774] usb 2-1: bad CDC descriptors [ 344.894261][ T5774] usb-storage 2-1:1.0: USB Mass Storage device detected [ 344.920434][ T5774] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 344.975143][ T5774] scsi host1: usb-storage 2-1:1.0 [ 345.067452][T15785] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 345.081291][T15785] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 345.114965][T15785] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 345.139917][T15785] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 345.169132][T15785] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 345.185727][T15785] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 345.195559][T15785] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 345.206747][T15785] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 345.913672][T15819] nvme_fabrics: missing parameter 'nqn=%s' [ 346.245702][ T5898] usb 2-1: USB disconnect, device number 23 [ 346.366368][T15840] netlink: 'syz.0.4602': attribute type 21 has an invalid length. [ 346.386374][T15840] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4602'. [ 346.395996][T15840] netlink: 'syz.0.4602': attribute type 5 has an invalid length. [ 346.403974][T15840] netlink: 'syz.0.4602': attribute type 6 has an invalid length. [ 346.422372][T15840] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4602'. [ 346.524126][T15844] loop3: detected capacity change from 0 to 512 [ 346.562674][T15844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.600730][T15844] ext4 filesystem being mounted at /1269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.767064][T15857] loop2: detected capacity change from 0 to 128 [ 346.788446][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.482683][T15875] netlink: 'syz.3.4618': attribute type 1 has an invalid length. [ 347.498913][T15875] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4618'. [ 348.183168][T15899] loop0: detected capacity change from 0 to 4096 [ 348.306626][T15911] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 348.628172][ T5784] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 348.673754][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 348.673770][ T28] audit: type=1326 audit(1793368805.488:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15923 comm="syz.2.4637" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 348.705743][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.722426][ T28] audit: type=1326 audit(1793368805.488:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15923 comm="syz.2.4637" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 348.879622][ T28] audit: type=1326 audit(1793368805.488:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15923 comm="syz.2.4637" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 348.980711][ T28] audit: type=1326 audit(1793368805.488:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15923 comm="syz.2.4637" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 349.094474][ T28] audit: type=1326 audit(1793368805.508:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15923 comm="syz.2.4637" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 349.155019][T15942] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4644'. [ 349.173582][T15942] vlan0: entered promiscuous mode [ 349.183638][ T28] audit: type=1326 audit(1793368805.508:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15923 comm="syz.2.4637" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 349.254865][ T28] audit: type=1326 audit(1793368805.508:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15923 comm="syz.2.4637" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 349.323101][ T28] audit: type=1326 audit(1793368805.508:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15923 comm="syz.2.4637" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 349.400801][ T28] audit: type=1326 audit(1793368805.508:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15923 comm="syz.2.4637" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 349.425169][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.655009][ T23] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 349.675044][ T5774] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 349.822233][T15974] loop0: detected capacity change from 0 to 512 [ 349.880936][ T23] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 349.886812][ T5774] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 349.903617][ T23] usb 3-1: config 0 has no interface number 0 [ 349.904152][ T5774] usb 4-1: config 0 has no interface number 0 [ 349.934247][ T23] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 349.934554][ T5774] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 349.955111][T15974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.955859][ T5774] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 349.985454][T15974] ext4 filesystem being mounted at /1095/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.005185][ T23] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 350.007705][ T5774] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 350.035696][ T5774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.054310][ T5774] usb 4-1: Product: syz [ 350.057690][ T23] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 350.059277][ T5774] usb 4-1: Manufacturer: syz [ 350.088866][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.089277][ T5774] usb 4-1: SerialNumber: syz [ 350.110558][ T23] usb 3-1: Product: syz [ 350.120707][ T23] usb 3-1: Manufacturer: syz [ 350.129251][ T23] usb 3-1: SerialNumber: syz [ 350.136519][ T5774] usb 4-1: config 0 descriptor?? [ 350.155838][ T23] usb 3-1: config 0 descriptor?? [ 350.162872][T15954] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 350.164343][T15953] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 350.199341][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.217475][ T23] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 350.224941][ T5774] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 350.272171][ T23] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 350.272454][ T5774] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB1 [ 350.564661][T15991] binder: 15990:15991 ioctl c00c620f 0 returned -14 [ 350.588181][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 350.796836][ T5774] usb 3-1: USB disconnect, device number 26 [ 350.852574][ T5774] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 350.881824][ T5774] cyberjack 3-1:0.69: device disconnected [ 350.902843][ T8] usb 4-1: USB disconnect, device number 17 [ 350.916534][ T8] cyberjack ttyUSB1: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB1 [ 350.945672][ T8] cyberjack 4-1:0.69: device disconnected [ 350.987273][T16002] C: renamed from lo (while UP) [ 350.998496][T16002] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 351.060581][T16004] netlink: 'syz.0.4666': attribute type 10 has an invalid length. [ 351.073055][T16004] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 351.340804][T16006] loop1: detected capacity change from 0 to 32768 [ 351.413567][T16010] loop2: detected capacity change from 0 to 512 [ 351.460289][T16010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.473228][T16009] loop0: detected capacity change from 0 to 4096 [ 351.501947][T16010] ext4 filesystem being mounted at /1126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 351.611449][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.655313][T16016] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 351.740692][T16014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.096464][T16025] tmpfs: Bad value for 'mpol' [ 352.101717][T16026] netlink: 'syz.3.4674': attribute type 21 has an invalid length. [ 352.121722][T16026] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4674'. [ 352.409982][T16042] dlm: plock device version mismatch: kernel (1.2.0), user (64.6.0) [ 352.673038][T16057] Cannot find set identified by id 4 to match [ 352.845730][ T791] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 353.046074][ T791] usb 3-1: Using ep0 maxpacket: 8 [ 353.076868][ T791] usb 3-1: unable to get BOS descriptor or descriptor too short [ 353.106501][ T791] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 353.127618][ T791] usb 3-1: config 1 interface 0 has no altsetting 0 [ 353.146560][ T791] usb 3-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.40 [ 353.164848][ T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.181479][ T791] usb 3-1: Product: syz [ 353.194926][ T791] usb 3-1: Manufacturer: syz [ 353.199583][ T791] usb 3-1: SerialNumber: syz [ 353.336783][T16083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4703'. [ 353.478923][ T791] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input17 [ 353.497290][T16072] loop3: detected capacity change from 0 to 32768 [ 353.510025][ T5136] bcm5974 3-1:1.0: could not read from device [ 353.547525][T16072] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 353.551860][ T791] usb 3-1: USB disconnect, device number 27 [ 353.687782][T16072] XFS (loop3): Ending clean mount [ 353.861733][ T5785] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 354.001972][T16106] loop0: detected capacity change from 0 to 256 [ 354.449927][T16120] ieee802154 phy0 wpan0: encryption failed: -22 [ 354.659394][T16130] (syz.3.4722,16130,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 354.684965][T16130] (syz.3.4722,16130,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 354.736475][ T27] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 354.813071][T16136] bridge4: entered promiscuous mode [ 354.818526][T16136] bridge4: entered allmulticast mode [ 354.925202][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 354.932802][ T27] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 354.950699][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.954624][T16144] netlink: 'syz.3.4730': attribute type 4 has an invalid length. [ 354.974007][ T27] usb 3-1: config 0 descriptor?? [ 354.984992][ T791] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 355.094316][T16146] loop3: detected capacity change from 0 to 2048 [ 355.112723][T16146] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 355.184911][ T791] usb 1-1: Using ep0 maxpacket: 32 [ 355.195877][ T791] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.218332][ T27] usb 3-1: string descriptor 0 read error: -71 [ 355.235022][ T791] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.255028][ T27] uvcvideo 3-1:0.0: Found multiple Units with ID 1 [ 355.261816][ T27] usb 3-1: Found UVC 0.00 device (2833:0201) [ 355.298178][ T791] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 355.308063][ T27] usb 3-1: No valid video chain found. [ 355.315237][ T791] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 355.323936][ T791] usb 1-1: Product: syz [ 355.335124][ T27] usb 3-1: USB disconnect, device number 28 [ 355.348042][ T791] usb 1-1: Manufacturer: syz [ 355.370559][ T791] hub 1-1:4.0: USB hub found [ 355.575618][ T791] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 355.657437][T16143] loop1: detected capacity change from 0 to 32768 [ 355.699737][T16143] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 355.870949][T16143] XFS (loop1): Ending clean mount [ 355.906284][ T8] usb 1-1: USB disconnect, device number 21 [ 356.000079][ T5786] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 356.305488][T16180] program syz.2.4745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.345248][T16180] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 356.474394][T16188] netlink: 556 bytes leftover after parsing attributes in process `syz.3.4748'. [ 356.909357][T16209] netlink: 3672 bytes leftover after parsing attributes in process `syz.2.4757'. [ 356.950305][T16209] netlink: 3672 bytes leftover after parsing attributes in process `syz.2.4757'. [ 356.961651][T16212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4760'. [ 357.169641][T16221] loop1: detected capacity change from 0 to 512 [ 357.853747][T16248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4778'. [ 358.393063][T16272] sctp: [Deprecated]: syz.2.4790 (pid 16272) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.393063][T16272] Use struct sctp_sack_info instead [ 358.528378][T16274] loop1: detected capacity change from 0 to 4096 [ 358.535319][T16276] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 358.576727][T16274] ntfs3: loop1: ino=3, mi_enum_attr [ 358.630930][T16281] loop2: detected capacity change from 0 to 256 [ 358.740639][T16274] ntfs3: loop1: ino=19, mi_enum_attr [ 358.759314][T16274] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 358.935751][T16274] ntfs3: loop1: ino=9, attr_set_size [ 359.591253][T16316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4811'. [ 359.600683][T16316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4811'. [ 359.704055][T16296] loop3: detected capacity change from 0 to 32768 [ 359.729424][T16296] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 359.742645][T16296] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 359.755196][ T23] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 359.846612][T16296] XFS (loop3): Ending clean mount [ 359.870467][T16296] XFS (loop3): Quotacheck needed: Please wait. [ 359.970283][ T23] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 359.981936][T16296] XFS (loop3): Quotacheck: Done. [ 360.005306][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.045221][ T23] usb 2-1: Product: syz [ 360.049554][ T23] usb 2-1: Manufacturer: syz [ 360.054182][ T23] usb 2-1: SerialNumber: syz [ 360.066652][ T5785] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 360.117030][ T23] usb 2-1: config 0 descriptor?? [ 360.147814][ T23] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 360.563846][ T23] gspca_sunplus: reg_w_riv err -71 [ 360.584528][ T23] sunplus: probe of 2-1:0.0 failed with error -71 [ 360.610389][ T23] usb 2-1: USB disconnect, device number 24 [ 360.821556][T16348] batadv1: entered promiscuous mode [ 360.831414][T16348] batadv1: entered allmulticast mode [ 361.347846][T16354] 8021q: adding VLAN 0 to HW filter on device bond2 [ 361.832927][ T28] audit: type=1326 audit(1793368818.638:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16376 comm="syz.1.4835" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538479f559 code=0x7ffc0000 [ 361.885739][ T28] audit: type=1326 audit(1793368818.638:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16376 comm="syz.1.4835" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538479f559 code=0x7ffc0000 [ 361.944010][ T28] audit: type=1326 audit(1793368818.678:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16376 comm="syz.1.4835" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f538479f559 code=0x7ffc0000 [ 361.978892][ T28] audit: type=1326 audit(1793368818.678:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16376 comm="syz.1.4835" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538479f559 code=0x7ffc0000 [ 362.009753][ T28] audit: type=1326 audit(1793368818.678:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16376 comm="syz.1.4835" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538479f559 code=0x7ffc0000 [ 362.195930][T16391] dlm: no locking on control device [ 362.227096][T16395] netlink: 'syz.1.4844': attribute type 12 has an invalid length. [ 363.113539][T16408] loop2: detected capacity change from 0 to 32768 [ 363.154955][ T8] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 363.167064][T16408] (syz.2.4851,16408,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 363.232442][T16408] (syz.2.4851,16408,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 363.291674][T16408] JBD2: Ignoring recovery information on journal [ 363.355091][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 363.391824][ T8] usb 2-1: config 6 has an invalid interface number: 105 but max is 0 [ 363.420078][ T8] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 363.452624][ T8] usb 2-1: config 6 has no interface number 0 [ 363.462921][T16408] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 363.485132][ T8] usb 2-1: config 6 interface 105 has no altsetting 0 [ 363.517305][ T8] usb 2-1: New USB device found, idVendor=12d1, idProduct=e155, bcdDevice=ce.aa [ 363.541438][T16425] cgroup: Bad value for 'name' [ 363.546509][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.565180][ T8] usb 2-1: Product: syz [ 363.569574][ T8] usb 2-1: Manufacturer: syz [ 363.574254][ T8] usb 2-1: SerialNumber: syz [ 363.719067][T16421] loop0: detected capacity change from 0 to 32768 [ 363.732250][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 363.881853][ T8] usb 2-1: USB disconnect, device number 25 [ 363.928605][T16421] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 364.064037][T16421] XFS (loop0): Ending clean mount [ 364.236426][ T5784] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 364.542367][T16456] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4869'. [ 364.927992][T16472] loop3: detected capacity change from 0 to 256 [ 365.916669][T16506] 8021q: adding VLAN 0 to HW filter on device bond3 [ 365.974916][T16512] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 366.524891][T16536] netlink: 'syz.3.4904': attribute type 2 has an invalid length. [ 366.641717][T16539] binfmt_misc: register: failed to install interpreter file ./file0 [ 366.865562][T16551] program syz.0.4913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.895670][T16556] openvswitch: netlink: Actions may not be safe on all matching packets [ 367.298246][T16572] netlink: 'syz.1.4922': attribute type 2 has an invalid length. [ 367.381698][T16577] loop2: detected capacity change from 0 to 64 [ 367.675063][T16586] netlink: 'syz.1.4930': attribute type 7 has an invalid length. [ 368.567565][T16631] netlink: 'syz.3.4952': attribute type 6 has an invalid length. [ 368.575119][T16627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.830097][T16636] xt_CT: No such helper "netbios-ns" [ 369.017077][T16626] loop1: detected capacity change from 0 to 32768 [ 369.059268][T16626] JBD2: Ignoring recovery information on journal [ 369.230281][T16626] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 369.332822][T16649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4960'. [ 369.363926][T16649] vlan0: entered promiscuous mode [ 369.452697][T16632] loop0: detected capacity change from 0 to 32768 [ 369.602968][ T5786] ocfs2: Unmounting device (7,1) on (node local) [ 370.805148][T16708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4989'. [ 370.835064][T16710] SET target dimension over the limit! [ 371.009219][T16720] futex_wake_op: syz.0.4995 tries to shift op by -1; fix this program [ 371.150013][T16725] netlink: 'syz.0.4997': attribute type 5 has an invalid length. [ 371.210298][T16728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4999'. [ 371.322214][T16734] xt_CONNSECMARK: invalid mode: 0 [ 371.347192][T16736] netlink: 'syz.3.5003': attribute type 21 has an invalid length. [ 371.835148][T16759] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 372.446357][T16791] x_tables: unsorted underflow at hook 2 [ 372.975199][ T23] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 373.160923][ T23] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 373.175002][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.214500][ T23] usb 2-1: config 0 descriptor?? [ 373.262775][T16829] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 373.500174][ T23] usb 2-1: Cannot read MAC address [ 373.522844][ T23] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 373.556451][ T23] usb 2-1: USB disconnect, device number 26 [ 374.207345][T16840] loop2: detected capacity change from 0 to 32768 [ 374.228522][T16840] (syz.2.5053,16840,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 374.273516][T16840] (syz.2.5053,16840,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 374.300614][T16840] (syz.2.5053,16840,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 374.339384][T16840] JBD2: Ignoring recovery information on journal [ 374.446519][T16840] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 374.609501][T16864] ieee802154 phy0 wpan0: encryption failed: -22 [ 374.672223][T16840] (syz.2.5053,16840,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x6db03cd7, computed 0xe423803c. Applying ECC. [ 374.724998][T16840] (syz.2.5053,16840,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x6db03cd7, computed 0xa5e8ec9c [ 374.766988][T16868] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 374.766988][T16868] program syz.0.5073 not setting count and/or reply_len properly [ 374.771565][T16840] (syz.2.5053,16840,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 374.826135][T16840] (syz.2.5053,16840,1):ocfs2_quota_read:201 ERROR: status = -5 [ 374.865383][T16840] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 1 [ 374.915469][T16840] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 374.928726][T16840] (syz.2.5053,16840,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 374.949206][T16840] (syz.2.5053,16840,1):ocfs2_mknod:315 ERROR: status = -5 [ 374.962402][T16840] (syz.2.5053,16840,1):ocfs2_mknod:504 ERROR: status = -5 [ 374.974084][T16840] (syz.2.5053,16840,1):ocfs2_mkdir:661 ERROR: status = -5 [ 375.057340][T16856] loop3: detected capacity change from 0 to 32768 [ 375.143637][T16856] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 375.143637][T16856] [ 375.163834][T16856] ERROR: (device loop3): remounting filesystem as read-only [ 375.253063][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 375.929535][T16888] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5077'. [ 376.484861][T16915] netlink: 'syz.1.5089': attribute type 2 has an invalid length. [ 376.496916][T16915] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5089'. [ 376.650256][T16921] netlink: 'syz.3.5092': attribute type 3 has an invalid length. [ 376.823051][T16930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5096'. [ 376.998200][T16934] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5098'. [ 377.175238][T16940] cgroup: name respecified [ 377.318778][T16942] netlink: 'syz.1.5102': attribute type 3 has an invalid length. [ 377.339833][T16942] netlink: 'syz.1.5102': attribute type 1 has an invalid length. [ 377.379707][T16942] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5102'. [ 377.405030][T16942] NCSI netlink: No device for ifindex 33022 [ 378.995290][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.001758][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.298518][T16990] sock: sock_timestamping_bind_phc: sock not bind to device [ 379.538314][T16975] loop2: detected capacity change from 0 to 32768 [ 379.601003][T16975] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 379.601003][T16975] [ 379.622843][T16975] ERROR: (device loop2): remounting filesystem as read-only [ 379.732830][ T28] audit: type=1326 audit(1793368836.548:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17002 comm="syz.1.5132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538479f559 code=0x7ffc0000 [ 379.810286][ T28] audit: type=1326 audit(1793368836.548:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17002 comm="syz.1.5132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538479f559 code=0x7ffc0000 [ 379.886492][ T28] audit: type=1326 audit(1793368836.548:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17002 comm="syz.1.5132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538479f559 code=0x7ffc0000 [ 379.974422][T17010] openvswitch: netlink: Actions may not be safe on all matching packets [ 379.994900][ T28] audit: type=1326 audit(1793368836.548:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17002 comm="syz.1.5132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f538479f559 code=0x7ffc0000 [ 380.084536][ T28] audit: type=1326 audit(1793368836.548:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17002 comm="syz.1.5132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538479f559 code=0x7ffc0000 [ 380.175037][ T28] audit: type=1326 audit(1793368836.548:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17002 comm="syz.1.5132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538479f559 code=0x7ffc0000 [ 380.254913][ T28] audit: type=1326 audit(1793368836.548:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17002 comm="syz.1.5132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538479f559 code=0x7ffc0000 [ 380.316398][ T28] audit: type=1326 audit(1793368836.548:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17002 comm="syz.1.5132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f538479f559 code=0x7ffc0000 [ 380.369603][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.396336][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.424447][ T28] audit: type=1326 audit(1793368836.548:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17002 comm="syz.1.5132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f538479f559 code=0x7ffc0000 [ 380.425633][T17027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.514181][T17026] bond4: Removing last ns target with arp_interval on [ 380.606522][T17032] netlink: 'syz.0.5145': attribute type 3 has an invalid length. [ 381.065757][ T23] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 381.259994][ T23] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 381.284804][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.325014][ T23] usb 2-1: config 0 descriptor?? [ 381.576487][ T23] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 381.602010][ T23] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 381.631205][ T23] [drm:udl_init] *ERROR* Selecting channel failed [ 381.663471][ T23] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 381.671693][ T23] [drm] Initialized udl on minor 2 [ 381.695357][ T23] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 381.717763][ T23] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 381.742926][ T27] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 381.755284][ T791] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 381.764121][ T23] usb 2-1: USB disconnect, device number 27 [ 381.785290][ T27] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 381.966824][ T791] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.980878][ T791] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 381.994141][ T791] usb 3-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 382.004383][ T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.174994][ T5774] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 382.333315][T17095] netlink: 'syz.1.5175': attribute type 3 has an invalid length. [ 382.382962][ T5774] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 382.397149][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.415505][ T5774] usb 1-1: Product: syz [ 382.424486][ T5774] usb 1-1: Manufacturer: syz [ 382.435056][ T5774] usb 1-1: SerialNumber: syz [ 382.451478][ T5774] usb 1-1: config 0 descriptor?? [ 382.469251][ T5774] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 382.738483][ T791] rtsx_usb: probe of 3-1:1.0 failed with error -110 [ 382.760328][ T791] usb 3-1: USB disconnect, device number 29 [ 382.781384][T17099] xt_recent: hitcount (262143) is larger than allowed maximum (255) [ 382.894503][ T5774] gspca_stk1135: reg_w 0x0 err -71 [ 382.911272][ T5774] gspca_stk1135: serial bus timeout: status=0x00 [ 382.925458][ T5774] gspca_stk1135: Sensor write failed [ 382.930842][ T5774] gspca_stk1135: serial bus timeout: status=0x00 [ 382.955305][ T5774] gspca_stk1135: Sensor write failed [ 382.965154][ T5774] gspca_stk1135: serial bus timeout: status=0x00 [ 382.980120][ T5774] gspca_stk1135: Sensor read failed [ 383.002184][ T5774] gspca_stk1135: serial bus timeout: status=0x00 [ 383.014779][ T5774] gspca_stk1135: Sensor read failed [ 383.025010][ T5774] gspca_stk1135: Detected sensor type unknown (0x0) [ 383.042055][ T5774] gspca_stk1135: serial bus timeout: status=0x00 [ 383.052184][ T5774] gspca_stk1135: Sensor read failed [ 383.062332][ T5774] gspca_stk1135: serial bus timeout: status=0x00 [ 383.079120][ T5774] gspca_stk1135: Sensor read failed [ 383.086190][ T5774] gspca_stk1135: serial bus timeout: status=0x00 [ 383.092622][ T5774] gspca_stk1135: Sensor write failed [ 383.114994][ T5774] gspca_stk1135: serial bus timeout: status=0x00 [ 383.124831][ T5774] gspca_stk1135: Sensor write failed [ 383.135101][ T5774] stk1135: probe of 1-1:0.0 failed with error -71 [ 383.155610][ T5774] usb 1-1: USB disconnect, device number 22 [ 383.728282][T17122] loop2: detected capacity change from 0 to 512 [ 383.792701][T17122] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 384.044094][ T23] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 384.100651][T17131] netlink: 'syz.1.5192': attribute type 2 has an invalid length. [ 384.116216][T17131] netlink: 'syz.1.5192': attribute type 4 has an invalid length. [ 384.116287][T17132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5193'. [ 384.125838][T17131] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5192'. [ 384.196392][T17093] syz.3.5174 (17093): drop_caches: 3 [ 384.225698][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 384.233605][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 384.265106][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 384.298265][ T23] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 384.321193][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.342940][ T23] usb 1-1: Product: syz [ 384.347977][ T23] usb 1-1: Manufacturer: syz [ 384.352736][ T23] usb 1-1: SerialNumber: syz [ 384.375688][ T23] usb 1-1: config 0 descriptor?? [ 384.809352][T17154] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 384.812605][T17152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.834960][T17152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.846256][T17152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.874801][T17152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.887393][ T23] usb 1-1: USB disconnect, device number 23 [ 384.900782][T17152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.938013][T17152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.059152][T17162] netlink: 'syz.1.5207': attribute type 30 has an invalid length. [ 385.674592][T17193] loop0: detected capacity change from 0 to 256 [ 386.126357][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.134532][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.190432][T17211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.154656][T17259] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5254'. [ 387.164074][T17259] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5254'. [ 387.184171][T17259] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5254'. [ 387.240655][ T23] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 387.424976][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 387.433232][ T23] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 387.447516][ T23] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 387.465284][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.493939][ T23] usb 3-1: Product: syz [ 387.504080][ T23] usb 3-1: Manufacturer: syz [ 387.509558][ T23] usb 3-1: SerialNumber: syz [ 387.531999][ T23] r8152-cfgselector 3-1: config 0 descriptor?? [ 387.683216][T17271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5260'. [ 387.822408][T17261] loop0: detected capacity change from 0 to 32768 [ 387.857754][T17261] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 387.858478][T17265] loop3: detected capacity change from 0 to 32768 [ 387.906403][T17265] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 387.978325][ T23] r8152-cfgselector 3-1: Unknown version 0x0000 [ 387.989105][ T23] r8152-cfgselector 3-1: USB disconnect, device number 30 [ 387.993619][T17265] XFS (loop3): Ending clean mount [ 388.058721][T17261] XFS (loop0): Ending clean mount [ 388.159119][ T27] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 [ 388.174598][ T27] XFS (loop0): Unmount and run xfs_repair [ 388.180482][ T27] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 388.189061][ T27] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 388.198749][ T27] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 388.209756][ T27] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 388.229988][ T27] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 388.243191][ T27] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 388.252815][ T27] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 388.270148][ T5785] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 388.271489][ T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 388.328767][ T27] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 388.358443][T17261] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x14 len 4 error 74 [ 388.390824][T17261] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0xc7d/0x1230 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 388.417305][T17261] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 388.516265][ T5784] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 388.572030][T17292] loop1: detected capacity change from 0 to 2048 [ 388.709022][T17292] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 389.104910][ T5774] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 389.254244][T17308] loop0: detected capacity change from 0 to 4096 [ 389.270536][T17308] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 389.307500][ T5774] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 389.321756][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.333826][ T5774] usb 4-1: config 0 descriptor?? [ 389.595540][ T5774] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 389.622244][ T5774] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 389.646126][ T5774] [drm:udl_init] *ERROR* Selecting channel failed [ 389.693895][ T5774] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 389.723877][ T5774] [drm] Initialized udl on minor 2 [ 389.740248][ T5774] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 389.767715][ T5774] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 389.793154][ T5898] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 389.812449][ T5774] usb 4-1: USB disconnect, device number 18 [ 389.818899][ T5898] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 390.337947][T17345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5288'. [ 390.767169][T17368] ip6gretap0: entered promiscuous mode [ 390.772878][T17368] ip6gretap0: entered allmulticast mode [ 392.074215][T17437] loop2: detected capacity change from 0 to 256 [ 392.147286][T17437] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 392.188286][T17437] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 392.215056][T17437] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 392.255245][ T28] audit: type=1800 audit(1793368849.058:674): pid=17437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5332" name="file1" dev="loop2" ino=1048665 res=0 errno=0 [ 392.418460][T17451] loop2: detected capacity change from 0 to 64 [ 392.454898][T17451] hfs: unable to locate alternate MDB [ 392.461959][T17451] hfs: continuing without an alternate MDB [ 392.559502][T17453] loop0: detected capacity change from 0 to 4096 [ 392.736397][T17461] xt_hashlimit: max too large, truncated to 1048576 [ 392.765253][T17461] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 393.002260][T17468] Mount JFS Failure: -22 [ 393.007594][T17468] jfs_mount failed w/return code = -22 [ 393.280456][T17484] loop0: detected capacity change from 0 to 256 [ 393.322137][T17484] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 393.331911][T17487] loop1: detected capacity change from 0 to 512 [ 393.358572][T17484] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 393.390073][T17487] EXT4-fs (loop1): Test dummy encryption mode enabled [ 393.395962][T17484] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 393.414912][ T28] audit: type=1800 audit(1793368850.238:675): pid=17484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5355" name="file1" dev="loop0" ino=1048666 res=0 errno=0 [ 393.422898][T17487] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 393.469926][T17487] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e01c, mo2=0002] [ 393.484252][T17487] System zones: 1-12 [ 393.494880][T17487] EXT4-fs (loop1): orphan cleanup on readonly fs [ 393.502934][T17487] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.5358: invalid indirect mapped block 12 (level 1) [ 393.539266][T17487] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.5358: invalid indirect mapped block 2 (level 2) [ 393.621329][T17487] EXT4-fs (loop1): 1 truncate cleaned up [ 393.672605][T17487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 393.886671][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 395.460459][T17579] netlink: 'syz.1.5403': attribute type 4 has an invalid length. [ 395.468854][T17579] netlink: 'syz.1.5403': attribute type 10 has an invalid length. [ 395.477406][T17579] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5403'. [ 395.576512][T17579] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 395.802067][T17589] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 395.810402][T17589] IPv6: NLM_F_CREATE should be set when creating new route [ 395.817774][T17589] IPv6: NLM_F_CREATE should be set when creating new route [ 396.553297][T17629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5427'. [ 396.594786][T17629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5427'. [ 396.612267][T17627] loop2: detected capacity change from 0 to 2048 [ 396.638342][T17627] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 396.779746][T17635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5430'. [ 397.195121][T17654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5439'. [ 397.216110][T17654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5439'. [ 397.243522][T17654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5439'. [ 397.423898][T17666] qnx6: wrong signature (magic) in superblock #1. [ 397.616006][T17668] xt_CT: No such helper "snmp" [ 397.646874][T17677] netlink: 'syz.3.5450': attribute type 15 has an invalid length. [ 397.655468][T17677] IPv6: NLM_F_CREATE should be specified when creating new route [ 398.052373][T17697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5459'. [ 398.083271][T17697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5459'. [ 398.268590][T17708] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5464'. [ 398.626360][T17728] loop2: detected capacity change from 0 to 16 [ 398.667848][T17728] erofs: (device loop2): mounted with root inode @ nid 36. [ 399.043794][T17748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 399.065373][ T5774] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 399.225792][T17754] block device autoloading is deprecated and will be removed. [ 399.255337][ T5774] usb 1-1: Using ep0 maxpacket: 8 [ 399.268904][ T5774] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 399.287175][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 399.305969][ T5774] usb 1-1: Product: syz [ 399.315164][ T5774] usb 1-1: Manufacturer: syz [ 399.326538][ T5774] usb 1-1: SerialNumber: syz [ 399.343837][ T5774] usb 1-1: config 0 descriptor?? [ 399.364198][ T5774] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 399.381796][T17758] loop2: detected capacity change from 0 to 1024 [ 399.471646][ T39] hfsplus: b-tree write err: -5, ino 25 [ 399.479330][ T39] hfsplus: b-tree write err: -5, ino 4 [ 399.504461][ T39] hfsplus: b-tree write err: -5, ino 2 [ 399.662336][T17766] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 399.774960][ T5774] gspca_sn9c2028: read1 error -71 [ 399.801839][ T5774] gspca_sn9c2028: read1 error -71 [ 399.815126][ T5774] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 399.840400][ T5774] usb 1-1: USB disconnect, device number 24 [ 399.980295][T17780] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryp–fs_sig=syz] [ 400.006617][T17780] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 400.028457][T17780] Error parsing options; rc = [-22] [ 400.196382][ T28] audit: type=1326 audit(1793368857.018:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17789 comm="syz.2.5505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 400.221367][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.249020][ T28] audit: type=1326 audit(1793368857.048:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17789 comm="syz.2.5505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 400.295671][ T28] audit: type=1326 audit(1793368857.058:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17789 comm="syz.2.5505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 400.321132][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.388554][ T28] audit: type=1326 audit(1793368857.058:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17789 comm="syz.2.5505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 400.471139][ T28] audit: type=1326 audit(1793368857.058:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17789 comm="syz.2.5505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 400.518199][ T28] audit: type=1326 audit(1793368857.058:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17789 comm="syz.2.5505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 400.574884][ T28] audit: type=1326 audit(1793368857.058:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17789 comm="syz.2.5505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 400.641057][ T28] audit: type=1326 audit(1793368857.058:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17789 comm="syz.2.5505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 400.704857][ T28] audit: type=1326 audit(1793368857.058:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17789 comm="syz.2.5505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 400.908717][T17822] netlink: 'syz.1.5521': attribute type 1 has an invalid length. [ 401.063560][T17826] __nla_validate_parse: 1 callbacks suppressed [ 401.063614][T17826] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.5522'. [ 401.098208][T17826] openvswitch: netlink: Key 0 has unexpected len 7424 expected 0 [ 401.558322][T17856] netlink: 'syz.3.5537': attribute type 2 has an invalid length. [ 401.812069][T17866] ip6gre1: entered allmulticast mode [ 402.180303][T17884] loop3: detected capacity change from 0 to 1024 [ 402.395818][ T1147] hfsplus: b-tree write err: -5, ino 25 [ 402.412074][ T1147] hfsplus: b-tree write err: -5, ino 4 [ 402.425273][ T1147] hfsplus: b-tree write err: -5, ino 2 [ 402.600028][T17900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5560'. [ 402.615343][T17901] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5558'. [ 402.626245][T17900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5560'. [ 402.642892][T17900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5560'. [ 402.726471][T17905] xt_hashlimit: max too large, truncated to 1048576 [ 402.734661][T17905] xt_hashlimit: overflow, try lower: 0/0 [ 403.043420][T17921] CIFS: Invalid mount helper version specified [ 403.276748][T17925] loop0: detected capacity change from 0 to 4096 [ 403.333698][T17925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.500055][T17919] loop3: detected capacity change from 0 to 32768 [ 403.645285][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.699951][T17939] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5578'. [ 403.709493][T17939] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5578'. [ 403.860700][T17944] netlink: 'syz.0.5577': attribute type 1 has an invalid length. [ 403.870042][T17942] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5580'. [ 404.226211][T17957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5587'. [ 404.345972][T17964] loop0: detected capacity change from 0 to 256 [ 404.401039][T17964] exfat: Deprecated parameter 'utf8' [ 404.407456][T17964] exfat: Deprecated parameter 'utf8' [ 404.432629][T17964] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 404.535843][ T791] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 404.725001][ T791] usb 2-1: Using ep0 maxpacket: 32 [ 404.734617][T17978] loop3: detected capacity change from 0 to 2048 [ 404.749690][ T791] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.789804][T17978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.791834][ T791] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 404.885189][T17978] EXT4-fs error (device loop3): __ext4_remount:6761: comm syz.3.5596: Abort forced by user [ 404.889352][ T791] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 404.909400][T17978] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 404.924422][ T791] usb 2-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 404.947679][ T791] usb 2-1: Product: syz [ 404.965347][ T791] usb 2-1: Manufacturer: syz [ 404.970777][ T791] usb 2-1: SerialNumber: syz [ 404.983173][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.000414][ T791] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input21 [ 405.163891][T17990] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5602'. [ 405.324262][T17996] loop2: detected capacity change from 0 to 1764 [ 405.404300][ T791] usb 2-1: USB disconnect, device number 28 [ 405.410743][ C1] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 405.504070][ T791] appletouch 2-1:1.0: input: appletouch disconnected [ 405.843175][T18016] netlink: 'syz.2.5614': attribute type 1 has an invalid length. [ 406.095950][T18026] loop1: detected capacity change from 0 to 512 [ 406.143249][T18026] EXT4-fs: Ignoring removed nomblk_io_submit option [ 406.160225][T18026] EXT4-fs: Ignoring removed orlov option [ 406.171785][T18028] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 406.179624][T18028] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 406.217712][T18028] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 406.239921][T18026] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 406.249826][T18026] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 406.260780][T18026] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 406.270951][T18026] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 406.287568][T18026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0008-0000-000000000000 ro without journal. Quota mode: none. [ 406.404784][T18026] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 406.512735][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0008-0000-000000000000. [ 406.752536][T18055] __nla_validate_parse: 1 callbacks suppressed [ 406.752557][T18055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5633'. [ 406.786416][T18055] batadv1: entered promiscuous mode [ 406.793529][T18055] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 407.365738][T18084] loop0: detected capacity change from 0 to 512 [ 407.411413][T18084] EXT4-fs (loop0): 1 truncate cleaned up [ 407.437697][T18084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.622090][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.685194][T18097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5652'. [ 407.945177][T18109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5659'. [ 408.754952][ T5774] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 408.859700][T18153] xt_nfacct: accounting object `' does not exist [ 408.935458][ T791] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 408.945261][ T5774] usb 4-1: Using ep0 maxpacket: 32 [ 408.952985][ T5774] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.971472][ T5774] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 409.016383][ T5774] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 409.030282][ T5774] usb 4-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 409.045795][ T5774] usb 4-1: Product: syz [ 409.055170][ T5774] usb 4-1: Manufacturer: syz [ 409.059980][ T5774] usb 4-1: SerialNumber: syz [ 409.074493][ T5774] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input22 [ 409.133218][ T791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 409.156091][ T791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 52, changing to 7 [ 409.209762][ T791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 9272, setting to 1024 [ 409.238073][ T791] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 409.256138][ T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.275093][ T791] usb 1-1: Product: syz [ 409.279335][ T791] usb 1-1: Manufacturer: syz [ 409.283968][ T791] usb 1-1: SerialNumber: syz [ 409.320882][ T791] usb 1-1: config 0 descriptor?? [ 409.349835][ T791] usb 1-1: 0:0 : invalid sync pipe. bmAttributes 31, bLength 9, bSynchAddress 37 [ 409.371065][ T8] usb 4-1: USB disconnect, device number 19 [ 409.390114][ T8] appletouch 4-1:1.0: input: appletouch disconnected [ 409.621314][ T791] usb 1-1: USB disconnect, device number 25 [ 409.701186][T17043] udevd[17043]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.553347][T18212] loop3: detected capacity change from 0 to 512 [ 410.901533][ T28] audit: type=1326 audit(1793368867.698:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18224 comm="syz.2.5711" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 411.004988][ T28] audit: type=1326 audit(1793368867.698:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18224 comm="syz.2.5711" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 411.104770][ T28] audit: type=1326 audit(1793368867.708:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18224 comm="syz.2.5711" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 411.172799][ T28] audit: type=1326 audit(1793368867.708:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18224 comm="syz.2.5711" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 411.263601][ T28] audit: type=1326 audit(1793369123.724:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18224 comm="syz.2.5711" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 411.354959][ T28] audit: type=1326 audit(1793369123.724:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18224 comm="syz.2.5711" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 411.444789][ T28] audit: type=1326 audit(1793369123.724:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18224 comm="syz.2.5711" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 411.530184][ T28] audit: type=1326 audit(1793369123.724:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18224 comm="syz.2.5711" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 411.575230][T18256] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 411.582537][T18256] IPv6: NLM_F_CREATE should be set when creating new route [ 411.625619][ T28] audit: type=1326 audit(1793369123.724:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18224 comm="syz.2.5711" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 412.570842][T18295] loop0: detected capacity change from 0 to 4096 [ 412.654257][T18306] loop3: detected capacity change from 0 to 64 [ 412.761150][T18306] Bad inode number on dev loop3: 6 is out of range [ 412.885182][T18312] loop2: detected capacity change from 0 to 64 [ 413.579674][T18335] netlink: 'syz.1.5748': attribute type 3 has an invalid length. [ 413.595168][ T791] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 413.618568][T18335] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5748'. [ 413.763168][T18345] netlink: 'syz.1.5753': attribute type 5 has an invalid length. [ 413.816428][ T791] usb 3-1: unable to get BOS descriptor or descriptor too short [ 413.836831][ T791] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.860554][ T791] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 413.891023][ T791] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 413.920960][ T791] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 413.942332][ T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.959924][ T791] usb 3-1: Product: syz [ 413.964261][ T791] usb 3-1: Manufacturer: syz [ 413.980744][ T791] usb 3-1: SerialNumber: syz [ 414.265991][ T791] usb 3-1: USB disconnect, device number 31 [ 414.367568][T17157] udevd[17157]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.200669][T18372] loop0: detected capacity change from 0 to 32768 [ 415.328114][T18372] find_entry called with index >= next_index [ 415.343581][T18372] find_entry called with index >= next_index [ 415.359169][T18372] find_entry called with index >= next_index [ 415.373196][T18372] read_mapping_page failed! [ 415.387832][T18372] ERROR: (device loop0): txCommit: [ 415.387832][T18372] [ 415.412992][T18372] ERROR: (device loop0): remounting filesystem as read-only [ 415.512514][T18406] x_tables: unsorted entry at hook 3 [ 415.975567][T18422] netlink: 'syz.2.5790': attribute type 39 has an invalid length. [ 416.031071][T18422] macvlan0: entered promiscuous mode [ 416.044883][T18422] macvlan0: entered allmulticast mode [ 416.103895][T18428] x_tables: duplicate entry at hook 2 [ 416.654900][ T23] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 416.679403][T18455] netlink: 'syz.3.5806': attribute type 1 has an invalid length. [ 416.847236][ T23] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 29399, setting to 8 [ 416.870709][ T23] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 416.894179][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.916777][T18441] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 417.153361][ T23] usb 1-1: string descriptor 0 read error: -71 [ 417.176054][ T23] hub 1-1:32.0: USB hub found [ 417.187174][ T23] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 417.297005][ T23] usb 1-1: USB disconnect, device number 26 [ 417.416718][T18482] loop2: detected capacity change from 0 to 16 [ 417.456422][T18482] erofs: (device loop2): mounted with root inode @ nid 36. [ 417.583149][T18488] x_tables: duplicate underflow at hook 2 [ 417.703280][T18494] netlink: 'syz.2.5823': attribute type 21 has an invalid length. [ 417.797028][T18496] loop3: detected capacity change from 0 to 512 [ 417.840017][T18496] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 417.881513][T18496] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 417.938003][T18496] System zones: 1-12 [ 417.942308][T18496] EXT4-fs (loop3): orphan cleanup on readonly fs [ 417.986628][T18496] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.5826: attempt to clear invalid blocks 1024 len 1 [ 418.041780][T18496] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.5826: bg 0: block 361: padding at end of block bitmap is not set [ 418.093404][T18496] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6660: Corrupt filesystem [ 418.121035][T18496] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5826: invalid indirect mapped block 1811939328 (level 0) [ 418.171404][T18496] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5826: invalid indirect mapped block 2 (level 2) [ 418.210416][T18493] loop1: detected capacity change from 0 to 32768 [ 418.220769][T18496] EXT4-fs (loop3): 1 truncate cleaned up [ 418.230381][T18493] XFS: noikeep mount option is deprecated. [ 418.236143][T18496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 418.267547][T18507] netlink: 'syz.0.5831': attribute type 4 has an invalid length. [ 418.276978][T18493] XFS: ikeep mount option is deprecated. [ 418.337220][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 418.359678][T18493] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 418.589024][T18523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5835'. [ 418.741236][T18493] XFS (loop1): Ending clean mount [ 418.846363][ T5786] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 419.521388][ T28] audit: type=1326 audit(1793369132.344:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18552 comm="syz.2.5850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 419.590769][ T28] audit: type=1326 audit(1793369132.374:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18552 comm="syz.2.5850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 419.650690][ T28] audit: type=1326 audit(1793369132.384:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18552 comm="syz.2.5850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 419.693785][ T28] audit: type=1326 audit(1793369132.384:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18552 comm="syz.2.5850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 419.762864][ T28] audit: type=1326 audit(1793369132.384:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18552 comm="syz.2.5850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 419.814635][T18567] loop1: detected capacity change from 0 to 256 [ 419.863533][ T28] audit: type=1326 audit(1793369132.394:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18552 comm="syz.2.5850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 419.892985][T18565] tmpfs: Unknown parameter 'shortname' [ 419.955062][ T28] audit: type=1326 audit(1793369132.394:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18552 comm="syz.2.5850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 420.035105][ T28] audit: type=1326 audit(1793369132.394:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18552 comm="syz.2.5850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 420.115224][ T28] audit: type=1326 audit(1793369132.394:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18552 comm="syz.2.5850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 420.697518][ T28] audit: type=1326 audit(1793369133.524:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18603 comm="syz.0.5876" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4af19f559 code=0x0 [ 420.767367][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5878'. [ 420.814911][ T27] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 420.914596][T18614] geneve3: entered promiscuous mode [ 420.995364][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 421.013494][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 421.037551][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.066104][ T27] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 421.087904][ T27] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 421.112602][ T27] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 421.124857][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.144530][ T27] usb 3-1: Product: syz [ 421.154416][ T27] usb 3-1: Manufacturer: syz [ 421.164544][ T27] usb 3-1: SerialNumber: syz [ 421.290916][T18629] netlink: 'syz.0.5888': attribute type 1 has an invalid length. [ 421.445743][T18635] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5891'. [ 421.475677][ T27] usb 3-1: USB disconnect, device number 32 [ 421.493652][T18635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.533081][T18639] netlink: 'syz.0.5892': attribute type 21 has an invalid length. [ 421.578105][T18639] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5892'. [ 421.649062][T18640] udevd[18640]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.215600][T18668] loop1: detected capacity change from 0 to 512 [ 422.255884][ T27] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 422.312268][T18668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.341550][T18668] ext4 filesystem being mounted at /1460/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.458065][ T27] usb 1-1: not running at top speed; connect to a high speed hub [ 422.473443][ T27] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 422.475550][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.487831][ T27] usb 1-1: New USB device found, idVendor=249c, idProduct=931c, bcdDevice= 0.40 [ 422.503471][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.524023][ T27] usb 1-1: Product: syz [ 422.529169][ T27] usb 1-1: Manufacturer: syz [ 422.534190][ T27] usb 1-1: SerialNumber: syz [ 422.787319][ T27] usb 1-1: Unsupported UAC3 BADD profile [ 422.828162][ T27] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 422.845510][ T27] usb 1-1: can't set first interface for hiFace device. [ 422.862754][ T27] snd-usb-hiface: probe of 1-1:1.0 failed with error -5 [ 422.892706][ T27] usb 1-1: can't set first interface for hiFace device. [ 422.904000][ T27] snd-usb-hiface: probe of 1-1:1.1 failed with error -5 [ 422.933238][ T27] usb 1-1: can't set first interface for hiFace device. [ 422.944989][ T27] snd-usb-hiface: probe of 1-1:1.2 failed with error -5 [ 422.971429][ T27] usb 1-1: USB disconnect, device number 27 [ 423.024546][T18641] udevd[18641]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.034941][T18699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5919'. [ 423.277136][T18708] netlink: 'syz.3.5924': attribute type 10 has an invalid length. [ 423.294774][T18708] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5924'. [ 423.314399][T18708] bond0: entered allmulticast mode [ 423.324521][T18708] bond_slave_0: entered allmulticast mode [ 423.337765][T18708] bond_slave_1: entered allmulticast mode [ 423.346933][T18708] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 423.762269][T18728] comedi comedi3: board detection failed [ 424.103856][T18742] IPv6: NLM_F_CREATE should be specified when creating new route [ 424.775071][ T28] audit: type=1326 audit(1793369137.594:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18768 comm="syz.2.5954" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 424.795229][T18771] autofs4:pid:18771:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 424.843041][ T28] audit: type=1326 audit(1793369137.594:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18768 comm="syz.2.5954" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 424.916552][ T28] audit: type=1326 audit(1793369137.594:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18768 comm="syz.2.5954" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 424.969635][ T28] audit: type=1326 audit(1793369137.594:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18768 comm="syz.2.5954" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 425.062823][ T28] audit: type=1326 audit(1793369137.604:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18768 comm="syz.2.5954" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 425.125023][ T28] audit: type=1326 audit(1793369137.604:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18768 comm="syz.2.5954" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 425.225063][ T28] audit: type=1326 audit(1793369137.604:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18768 comm="syz.2.5954" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 425.272548][T18788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5964'. [ 425.294857][ T28] audit: type=1326 audit(1793369137.604:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18768 comm="syz.2.5954" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb92919f559 code=0x7ffc0000 [ 425.731403][T18807] qrtr: Invalid version 15 [ 426.184997][ T27] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 426.284936][ T8] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 426.383284][ T27] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 426.399599][ T27] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 426.401982][T18841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5989'. [ 426.410839][ T27] usb 2-1: Product: syz [ 426.429918][ T27] usb 2-1: SerialNumber: syz [ 426.439060][ T27] usb 2-1: config 0 descriptor?? [ 426.485738][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 426.503181][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 426.511666][ T5898] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 426.526132][ T8] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 7 [ 426.557544][ T8] usb 1-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 426.574769][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.582809][ T8] usb 1-1: Product: syz [ 426.599874][ T8] usb 1-1: Manufacturer: syz [ 426.614765][ T8] usb 1-1: SerialNumber: syz [ 426.682781][ T27] hso 2-1:0.0: Failed to find INT IN ep [ 426.756242][ T5898] usb 3-1: config 1 has an invalid interface number: 209 but max is 0 [ 426.764502][ T5898] usb 3-1: config 1 has no interface number 0 [ 426.792893][ T5898] usb 3-1: config 1 interface 209 has no altsetting 0 [ 426.804814][ T5898] usb 3-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=3d.41 [ 426.813936][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.856691][ T5898] cytherm 3-1:1.209: Cypress thermometer device now attached [ 426.888698][ T8] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 426.898489][ T8] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 426.939634][ T27] usb 2-1: USB disconnect, device number 29 [ 426.946522][ T8] usb 1-1: USB disconnect, device number 28 [ 427.034234][T18641] udevd[18641]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.109348][ T23] usb 3-1: USB disconnect, device number 33 [ 427.120244][ T23] cytherm 3-1:1.209: Cypress thermometer now disconnected [ 427.190551][T18857] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5997'. [ 427.409768][T18865] netlink: 'syz.3.6001': attribute type 5 has an invalid length. [ 428.012215][T18890] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 428.166844][T18898] bond0: (slave bond_slave_0): Releasing backup interface [ 428.212006][T18898] bond_slave_0: left allmulticast mode [ 428.363879][T18907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6022'. [ 428.436358][T18910] loop3: detected capacity change from 0 to 1764 [ 428.502813][T18910] syz.3.6023: attempt to access beyond end of device [ 428.502813][T18910] loop3: rw=0, sector=7180648572, nr_sectors = 4 limit=1764 [ 428.575576][T18910] Buffer I/O error on dev loop3, logical block 1795162143, async page read [ 428.590042][T18910] syz.3.6023: attempt to access beyond end of device [ 428.590042][T18910] loop3: rw=0, sector=7180648572, nr_sectors = 4 limit=1764 [ 428.618434][T18910] Buffer I/O error on dev loop3, logical block 1795162143, async page read [ 429.236965][T18945] netlink: 'syz.0.6039': attribute type 7 has an invalid length. [ 429.246023][ T8] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 429.256131][T18945] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6039'. [ 429.404868][ T5898] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 429.436940][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.454356][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 429.472996][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 429.483370][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 429.498798][ T8] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 429.509057][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.594897][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 429.603706][ T5898] usb 4-1: unable to get BOS descriptor or descriptor too short [ 429.617427][ T5898] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.638988][ T5898] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 429.665002][ T5898] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 429.698010][ T5898] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 429.708047][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.717796][ T5898] usb 4-1: Product: syz [ 429.732318][ T5898] usb 4-1: Manufacturer: syz [ 429.749689][ T5898] usb 4-1: SerialNumber: syz [ 430.008494][ T791] usb 2-1: USB disconnect, device number 30 [ 430.113783][ T5898] usb 4-1: USB disconnect, device number 20 [ 430.149691][T18975] veth1_vlan: left promiscuous mode [ 430.184989][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 430.206160][T18640] udevd[18640]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.952121][T19003] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6068'. [ 430.979560][T19003] tc_dump_action: action bad kind [ 431.005496][T19009] netlink: 'syz.3.6071': attribute type 1 has an invalid length. [ 431.015033][T19009] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6071'. [ 431.420176][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6080'. [ 431.439670][T19029] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6080'. [ 431.454887][ T791] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 431.645165][ T791] usb 1-1: Using ep0 maxpacket: 8 [ 431.663151][ T791] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.689335][ T791] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 431.701729][ T791] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 431.711577][ T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.720901][ T791] usb 1-1: Product: syz [ 431.731549][ T791] usb 1-1: Manufacturer: syz [ 431.737383][ T791] usb 1-1: SerialNumber: syz [ 431.793282][T19045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6088'. [ 431.802910][T19045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6088'. [ 431.998713][T19053] ieee802154 phy0 wpan0: encryption failed: -22 [ 432.002165][ T791] usb 1-1: unit 5 not found! [ 432.022289][ T791] usb 1-1: unit 0 not found! [ 432.064454][ T791] usb 1-1: USB disconnect, device number 29 [ 432.128163][T18641] udevd[18641]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 432.249674][T19064] openvswitch: netlink: Message has 4 unknown bytes. [ 432.259786][T19059] bond3: option xmit_hash_policy: invalid value (14) [ 432.288228][T19059] bond3 (unregistering): Released all slaves [ 432.793589][ T28] audit: type=1326 audit(1793369145.614:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19083 comm="syz.3.6106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc53059f559 code=0x0 [ 433.256129][T19102] exfat: Deprecated parameter 'debug' [ 433.271339][T19102] exFAT-fs (nullb0): invalid boot record signature [ 433.289044][T19102] exFAT-fs (nullb0): failed to read boot sector [ 433.304509][T19102] exFAT-fs (nullb0): failed to recognize exfat type [ 434.077362][T19132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6130'. [ 434.303189][T19141] loop2: detected capacity change from 0 to 64 [ 434.772691][T19165] netlink: 'syz.1.6147': attribute type 1 has an invalid length. [ 434.781162][T19165] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6147'. [ 434.791633][T19165] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6147'. [ 434.875885][ T9] ------------[ cut here ]------------ [ 434.882397][ T9] WARNING: CPU: 0 PID: 9 at net/netfilter/nft_set_pipapo.c:2389 nft_pipapo_destroy+0x84b/0x8b0 [ 434.893771][ T9] Modules linked in: [ 434.899091][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted syzkaller #0 [ 434.905028][ T23] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 434.906572][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 434.924263][ T9] Workqueue: events nf_tables_trans_destroy_work [ 434.930748][ T9] RIP: 0010:nft_pipapo_destroy+0x84b/0x8b0 [ 434.936896][ T9] Code: 00 00 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f9 c6 a5 f8 e9 d3 f9 ff ff e8 ef c6 a5 f8 e9 6c fe ff ff e8 e5 c6 a5 f8 <0f> 0b e9 16 f8 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 [ 434.950586][T19171] netlink: 'syz.0.6150': attribute type 1 has an invalid length. [ 434.956884][ T9] RSP: 0000:ffffc900000e79d8 EFLAGS: 00010293 [ 434.956917][ T9] RAX: ffffffff88e217bb RBX: ffff8880777a04f0 RCX: ffff88801d660000 [ 434.956933][ T9] RDX: 0000000000000000 RSI: ffff8880777a0400 RDI: ffff888027465928 [ 434.956948][ T9] RBP: ffffc900000e7bb0 R08: ffff88801d660000 R09: 000000000000000f [ 434.956963][ T9] R10: 0000000000000020 R11: 0000000000000000 R12: ffff8880777a04c0 [ 434.956977][ T9] R13: dffffc0000000000 R14: ffff8880777a0510 R15: dffffc0000000000 [ 434.956992][ T9] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 434.957012][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.957028][ T9] CR2: 0000001b2e721ff8 CR3: 000000003311a000 CR4: 00000000003506f0 [ 434.957050][ T9] Call Trace: [ 434.957060][ T9] [ 434.957084][ T9] nft_set_destroy+0x489/0xa20 [ 434.957120][ T9] ? __kmem_cache_free+0xba/0x1f0 [ 434.957254][ T9] nf_tables_trans_destroy_work+0xb2d/0x10a0 [ 434.972249][T19171] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6150'. [ 434.979293][ T9] ? nft_object_dump+0x1e0/0x1e0 [ 435.074544][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 435.080042][ T9] ? process_scheduled_works+0x975/0x1600 [ 435.085939][ T9] ? process_scheduled_works+0x975/0x1600 [ 435.091807][ T9] process_scheduled_works+0xa60/0x1600 [ 435.096635][ T23] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 435.097819][ T9] ? worker_attach_to_pool+0x370/0x370 [ 435.112296][ T9] ? assign_work+0x3cc/0x5d0 [ 435.117112][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.117122][ T9] worker_thread+0xa5e/0xfe0 [ 435.128602][ T23] usb 3-1: config 0 descriptor?? [ 435.130286][ T9] ? _raw_spin_unlock+0x40/0x40 [ 435.141277][ T9] ? __kthread_parkme+0x71/0x1c0 [ 435.146651][ T9] kthread+0x2fa/0x390 [ 435.151222][ T9] ? pr_cont_work+0x550/0x550 [ 435.156069][ T9] ? kthread_blkcg+0xd0/0xd0 [ 435.160893][ T9] ret_from_fork+0x48/0x80 [ 435.165493][ T9] ? kthread_blkcg+0xd0/0xd0 [ 435.170136][ T9] ret_from_fork_asm+0x11/0x20 [ 435.175119][ T9] [ 435.178197][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 435.185608][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted syzkaller #0 [ 435.193002][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 435.203333][ T9] Workqueue: events nf_tables_trans_destroy_work [ 435.209791][ T9] Call Trace: [ 435.213183][ T9] [ 435.216208][ T9] dump_stack_lvl+0x18c/0x250 [ 435.220945][ T9] ? show_regs_print_info+0x20/0x20 [ 435.226448][ T9] ? load_image+0x420/0x420 [ 435.231006][ T9] panic+0x2ca/0x720 [ 435.235008][ T9] ? bpf_jit_dump+0xd0/0xd0 [ 435.239702][ T9] ? ret_from_fork_asm+0x11/0x20 [ 435.244662][ T9] __warn+0x2e0/0x470 [ 435.248663][ T9] ? nft_pipapo_destroy+0x84b/0x8b0 [ 435.254202][ T9] ? nft_pipapo_destroy+0x84b/0x8b0 [ 435.259617][ T9] report_bug+0x2be/0x4f0 [ 435.264025][ T9] ? nft_pipapo_destroy+0x84b/0x8b0 [ 435.269346][ T9] ? nft_pipapo_destroy+0x84b/0x8b0 [ 435.274643][ T9] ? nft_pipapo_destroy+0x84d/0x8b0 [ 435.279949][ T9] handle_bug+0xcf/0x120 [ 435.284264][ T9] exc_invalid_op+0x1a/0x50 [ 435.288818][ T9] asm_exc_invalid_op+0x1a/0x20 [ 435.293733][ T9] RIP: 0010:nft_pipapo_destroy+0x84b/0x8b0 [ 435.299580][ T9] Code: 00 00 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f9 c6 a5 f8 e9 d3 f9 ff ff e8 ef c6 a5 f8 e9 6c fe ff ff e8 e5 c6 a5 f8 <0f> 0b e9 16 f8 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 [ 435.319213][ T9] RSP: 0000:ffffc900000e79d8 EFLAGS: 00010293 [ 435.325384][ T9] RAX: ffffffff88e217bb RBX: ffff8880777a04f0 RCX: ffff88801d660000 [ 435.333366][ T9] RDX: 0000000000000000 RSI: ffff8880777a0400 RDI: ffff888027465928 [ 435.341530][ T9] RBP: ffffc900000e7bb0 R08: ffff88801d660000 R09: 000000000000000f [ 435.349699][ T9] R10: 0000000000000020 R11: 0000000000000000 R12: ffff8880777a04c0 [ 435.357879][ T9] R13: dffffc0000000000 R14: ffff8880777a0510 R15: dffffc0000000000 [ 435.366321][ T9] ? nft_pipapo_destroy+0x84b/0x8b0 [ 435.371727][ T9] ? nft_pipapo_destroy+0x84b/0x8b0 [ 435.377127][ T9] nft_set_destroy+0x489/0xa20 [ 435.382338][ T9] ? __kmem_cache_free+0xba/0x1f0 [ 435.387379][ T9] nf_tables_trans_destroy_work+0xb2d/0x10a0 [ 435.393383][ T9] ? nft_object_dump+0x1e0/0x1e0 [ 435.398431][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 435.403645][ T9] ? process_scheduled_works+0x975/0x1600 [ 435.409381][ T9] ? process_scheduled_works+0x975/0x1600 [ 435.415170][ T9] process_scheduled_works+0xa60/0x1600 [ 435.420752][ T9] ? worker_attach_to_pool+0x370/0x370 [ 435.426230][ T9] ? assign_work+0x3cc/0x5d0 [ 435.430839][ T9] worker_thread+0xa5e/0xfe0 [ 435.435462][ T9] ? _raw_spin_unlock+0x40/0x40 [ 435.440328][ T9] ? __kthread_parkme+0x71/0x1c0 [ 435.445559][ T9] kthread+0x2fa/0x390 [ 435.449655][ T9] ? pr_cont_work+0x550/0x550 [ 435.454429][ T9] ? kthread_blkcg+0xd0/0xd0 [ 435.459043][ T9] ret_from_fork+0x48/0x80 [ 435.463565][ T9] ? kthread_blkcg+0xd0/0xd0 [ 435.468202][ T9] ret_from_fork_asm+0x11/0x20 [ 435.473035][ T9] [ 435.476438][ T9] Kernel Offset: disabled [ 435.480888][ T9] Rebooting in 86400 seconds..