last executing test programs: 8m38.049170194s ago: executing program 1 (id=8507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) 8m37.601402495s ago: executing program 1 (id=8514): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newsa={0x154, 0x10, 0x633, 0x10000000, 0x0, {{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@dev, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x4000000, 0xffffffffffffffff}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e23, 0x4e24, @in6=@local}}]}, 0x154}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) 8m37.387350801s ago: executing program 1 (id=8518): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lseek(r0, 0xfffffffffffffff5, 0x1) 8m37.118871958s ago: executing program 1 (id=8523): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1008804, &(0x7f0000000280)={[{@keep_last_dots}, {@errors_continue}, {@errors_remount}, {@errors_continue}, {@errors_remount}, {@umask={'umask', 0x3d, 0x26a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@namecase}, {@time_offset={'time_offset', 0x3d, 0x9}}]}, 0x1, 0x1530, &(0x7f0000006800)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) 8m36.699204098s ago: executing program 1 (id=8529): syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000700000000000019078ac1e0101ac1414aa0306907800060319452c00000067008007040001ac14"], 0x0) io_uring_setup(0x69eb, &(0x7f0000000040)={0x0, 0x59d1, 0xc000, 0x3, 0xce}) 8m36.344707257s ago: executing program 1 (id=8534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000b0000070000000900010073797a300000000014000000020a01010000000000000000000000002c000000180a05000000000000000000070000010900010073797a30000000000c0005400000000000000002580000000b0a01010000000000000000070000090800034000000008090001"], 0x392c}}, 0x0) 8m35.85815405s ago: executing program 32 (id=8534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000b0000070000000900010073797a300000000014000000020a01010000000000000000000000002c000000180a05000000000000000000070000010900010073797a30000000000c0005400000000000000002580000000b0a01010000000000000000070000090800034000000008090001"], 0x392c}}, 0x0) 2.078738937s ago: executing program 4 (id=13133): r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000100)={0x1, 0x0, 0x7fffffff}) 2.040606108s ago: executing program 3 (id=13134): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000}, 0x0) 1.893766382s ago: executing program 2 (id=13135): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000100)={0x88, 0x18, '\x00', [@generic={0x0, 0xbf, "3fcd12ae2d9c9963ffb743e2dc2590debefb8792a8a8a7a9100c141fbc325fdc59ccddb656c92b648d84372e3af700d668a0884914b47dc9b771533934535b72f4bc03f7505fc9d443698785659827a9d7af52a2b4b91ecb98478515108dd6c6e425b6e82ef1a8b3a619e4add83e6cf3e1d84b02b2877b09db81a458473c0e842e3500b5d133d83d3724bce1fee3ea4d4f1ed85f2a2ea4cdeb6f95b864d7d2a288465fccf155b11f0264e3142b72a2d0165f7daa384e2b3542b495f4bf0615"}]}, 0xd0) 1.738315886s ago: executing program 4 (id=13136): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000140)=0x14dd) 1.685552187s ago: executing program 0 (id=13137): r0 = getpid() kcmp(r0, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 1.56880676s ago: executing program 3 (id=13138): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10) 1.496384072s ago: executing program 2 (id=13139): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000200)="1c0000001a009b8a070000003b9b701f400004000000eb3f7a7f1de2", 0x1c) 1.408922804s ago: executing program 0 (id=13140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000050000000090a01040000000000000000070000000900010073797a30000000000c0009801900014000000009080005400000000408000a4000000001090002"], 0x98}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) 1.357900355s ago: executing program 4 (id=13141): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) 1.304507107s ago: executing program 3 (id=13142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="3400000010000104000000000000000000000000000000000000000000000000140012000c000100626172657564700004000200", 0x34}], 0x1}, 0x0) 1.201767849s ago: executing program 2 (id=13143): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="1800000014006b05c84e21000ab16d6e230675f811000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.093312262s ago: executing program 4 (id=13144): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2000, 0x200da5d85240a79d, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x68, 0x0, 0x80, 0x29, 0x0, @multicast1, @empty}}}}) 1.029771184s ago: executing program 0 (id=13145): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x2, 0x4000) 949.475966ms ago: executing program 3 (id=13146): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x1, 0x3, 0x2, 0xff, "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", 0x0, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x3, 0x9, 0xf5, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "57fea939ad8c8b8f"}, 0x2}}]}, 0x154}}, 0x200448cc) 948.894296ms ago: executing program 2 (id=13147): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0xfffffe6f, 0x8ead789f32ce13a0}}, 0x20) 828.357009ms ago: executing program 4 (id=13148): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 717.901672ms ago: executing program 0 (id=13149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240410500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) 681.976393ms ago: executing program 3 (id=13150): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x14, 0x14, 0x1, 0xd6, 0x25dfdbfd, {0x10, 0x8d}}, 0x14}, 0x1, 0x0, 0x0, 0x24008085}, 0xc040) 622.083564ms ago: executing program 2 (id=13151): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x7, 0x7ffc0001}]}) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) 412.075509ms ago: executing program 3 (id=13152): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r0, &(0x7f0000001840)={&(0x7f00000000c0)={0xa, 0x2, 0x9, @empty, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdr_2292={{0x18, 0x29, 0x32, {0x11, 0x0, 0x2, 0x5}}}], 0x18}, 0x20040810) 292.493812ms ago: executing program 2 (id=13153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfff5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x1a, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc71"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x98}}, 0x0) 291.667923ms ago: executing program 0 (id=13161): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x541b, 0x0) 36.574029ms ago: executing program 4 (id=13154): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) 0s ago: executing program 0 (id=13155): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000500)={0x65, "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"}) kernel console output (not intermixed with test programs): 991][T29715] loop3: rw=0, sector=3120, nr_sectors = 2 limit=2048 [ 1370.869611][T29715] Buffer I/O error on dev loop3, logical block 1560, async page read [ 1370.900364][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 1370.900380][ T28] audit: type=1800 audit(1787908468.755:1226): pid=29715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10769" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 1371.033045][T29727] netlink: 'syz.0.10788': attribute type 30 has an invalid length. [ 1371.135490][T29727] bond3: option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 1371.241529][T29732] loop4: detected capacity change from 0 to 64 [ 1371.279975][T29732] syz.4.10791: attempt to access beyond end of device [ 1371.279975][T29732] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1371.352137][T29727] bond3 (unregistering): Released all slaves [ 1371.383345][T29732] Buffer I/O error on dev loop4, logical block 512, async page read [ 1371.397368][T29732] syz.4.10791: attempt to access beyond end of device [ 1371.397368][T29732] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1371.427650][T29732] Buffer I/O error on dev loop4, logical block 56576, async page read [ 1371.660917][T29736] netlink: 'syz.3.10792': attribute type 21 has an invalid length. [ 1371.741993][T29736] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10792'. [ 1371.796266][T29736] netlink: 'syz.3.10792': attribute type 4 has an invalid length. [ 1371.804202][T29736] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10792'. [ 1373.775392][T29781] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10814'. [ 1377.392408][T29859] loop3: detected capacity change from 0 to 1024 [ 1377.420391][T29859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1377.442751][ T6207] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1377.472565][T29859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1377.498633][T29859] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1377.529684][T29859] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1377.575896][T29859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1377.683761][ T6207] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.823744][ T6314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1378.092945][ T6207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1378.125421][ T6207] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1378.157969][ T6207] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1378.159552][T29886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10850'. [ 1378.167079][ T6207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.188117][ T6207] usb 3-1: config 0 descriptor?? [ 1378.388146][T29893] loop3: detected capacity change from 0 to 128 [ 1378.471993][ T9] usb 3-1: USB disconnect, device number 99 [ 1379.609280][T29938] loop4: detected capacity change from 0 to 16 [ 1379.634678][T29938] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1379.781067][T29899] loop0: detected capacity change from 0 to 32768 [ 1381.293464][T29975] loop0: detected capacity change from 0 to 4096 [ 1381.358513][T29975] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1381.475251][T29987] tmpfs: Bad value for 'mpol' [ 1381.518556][T29975] ntfs: volume version 3.1. [ 1382.891479][T30024] (null): rxe_set_mtu: Set mtu to 256 [ 1382.908705][T30024] vcan0 speed is unknown, defaulting to 1000 [ 1382.951627][T30024] vcan0 speed is unknown, defaulting to 1000 [ 1382.994809][T30024] vcan0 speed is unknown, defaulting to 1000 [ 1383.136119][T30029] bridge3: entered promiscuous mode [ 1383.156446][T30029] bridge3: entered allmulticast mode [ 1384.037843][T30024] infiniband syz0: set active [ 1384.045144][ T6207] vcan0 speed is unknown, defaulting to 1000 [ 1384.079259][T30024] infiniband syz0: added vcan0 [ 1384.196517][T30024] syz0: rxe_create_cq: returned err = -12 [ 1384.227634][T30024] infiniband syz0: Couldn't create ib_mad CQ [ 1384.234164][T30024] infiniband syz0: Couldn't open port 1 [ 1384.473972][T30024] RDS/IB: syz0: added [ 1384.488386][T30024] smc: adding ib device syz0 with port count 1 [ 1384.507012][T30024] smc: ib device syz0 port 1 has pnetid [ 1384.526946][ T6207] vcan0 speed is unknown, defaulting to 1000 [ 1384.551819][T30024] vcan0 speed is unknown, defaulting to 1000 [ 1384.726122][T30081] loop3: detected capacity change from 0 to 1024 [ 1384.865419][T30081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1385.028277][T30081] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz.3.10904: directory missing '.' [ 1385.237330][ T6314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1385.678911][T30024] vcan0 speed is unknown, defaulting to 1000 [ 1386.324661][T30117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1386.769440][T30024] vcan0 speed is unknown, defaulting to 1000 [ 1386.843033][T30131] loop0: detected capacity change from 0 to 164 [ 1386.971209][T30131] Unsupported NM flag settings (240) [ 1387.490575][T30144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10920'. [ 1387.811584][T30024] vcan0 speed is unknown, defaulting to 1000 [ 1387.987973][ T9] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1388.206929][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1388.209881][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.209910][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1388.212682][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1388.212714][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.212747][ T9] usb 3-1: Product: syz [ 1388.212765][ T9] usb 3-1: Manufacturer: syz [ 1388.212784][ T9] usb 3-1: SerialNumber: syz [ 1388.689887][ T9] usb 3-1: cannot find UAC_HEADER [ 1388.805955][ T9] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1388.838941][ T9] usb 3-1: USB disconnect, device number 100 [ 1388.939125][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1389.259925][T30175] loop4: detected capacity change from 0 to 8192 [ 1389.276625][T30175] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1389.514489][T30156] loop0: detected capacity change from 0 to 32768 [ 1389.529832][T30156] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.10923 (30156) [ 1389.653517][T30156] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1389.653609][T30156] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1389.653674][T30156] BTRFS info (device loop0): using free space tree [ 1389.923691][T30156] BTRFS info (device loop0): enabling ssd optimizations [ 1389.923722][T30156] BTRFS info (device loop0): auto enabling async discard [ 1390.426752][ T6318] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1390.974676][T30220] loop4: detected capacity change from 0 to 256 [ 1391.230380][T30220] syz.4.10934: attempt to access beyond end of device [ 1391.230380][T30220] loop4: rw=0, sector=272, nr_sectors = 4 limit=256 [ 1391.303727][T30220] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198) [ 1391.348582][T30220] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198) [ 1391.637428][T30239] netlink: 'syz.2.10938': attribute type 2 has an invalid length. [ 1391.727788][T30236] loop0: detected capacity change from 0 to 4096 [ 1391.833223][T30236] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 1391.865873][T30239] Process accounting paused [ 1391.934882][T30236] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1392.093240][T30236] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 1392.129863][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1392.218837][T30236] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 1392.328165][T30236] ntfs: (device loop0): check_mft_mirror(): Failed to read $MFTMirr. [ 1392.367512][T30236] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1392.469180][T30236] ntfs: volume version 3.1. [ 1392.495870][T30236] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1392.531145][T30236] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1392.595190][T30236] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1392.653556][T30236] ntfs: (device loop0): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 1393.136170][T30268] comedi comedi0: 8255: I/O port conflict (0x20,4) [ 1393.387159][T30278] netlink: 'syz.0.10947': attribute type 63 has an invalid length. [ 1393.420493][T30278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10947'. [ 1393.460970][T30278] netlink: 'syz.0.10947': attribute type 63 has an invalid length. [ 1393.494887][T30278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10947'. [ 1393.768998][T30289] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1395.532068][T30341] netlink: 'syz.3.10966': attribute type 10 has an invalid length. [ 1395.541323][T30341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10966'. [ 1395.559840][T30341] ipvlan1: entered promiscuous mode [ 1395.567185][T30341] ipvlan1: entered allmulticast mode [ 1395.572855][T30341] veth0_vlan: entered allmulticast mode [ 1395.612053][T30341] bridge0: port 3(ipvlan1) entered blocking state [ 1395.640059][T30341] bridge0: port 3(ipvlan1) entered disabled state [ 1395.683093][T30341] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1395.955143][T30349] tmpfs: Bad value for 'mpol' [ 1396.793985][T30367] netlink: 'syz.2.10976': attribute type 7 has an invalid length. [ 1396.858356][T30338] loop0: detected capacity change from 0 to 32768 [ 1396.878061][T30369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10977'. [ 1397.786735][T30352] loop3: detected capacity change from 0 to 32768 [ 1398.698151][T30408] netlink: 92 bytes leftover after parsing attributes in process `syz.4.10988'. [ 1398.743706][T30408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10988'. [ 1398.791755][T30408] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10988'. [ 1399.438364][T30385] loop0: detected capacity change from 0 to 32768 [ 1399.533642][T30385] JBD2: Ignoring recovery information on journal [ 1399.576209][T30385] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 1399.674148][T30385] JBD2: bad block at offset 32 [ 1399.711485][T30424] loop3: detected capacity change from 0 to 4096 [ 1399.737494][T30385] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1399.814276][T30424] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 1399.901765][T30385] ocfs2: Unmounting device (7,0) on (node local) [ 1400.128665][T30424] ntfs3: loop3: Failed to load $Extend (-22). [ 1400.134854][T30424] ntfs3: loop3: Failed to initialize $Extend. [ 1400.709735][T30453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11000'. [ 1401.043023][T30464] loop3: detected capacity change from 0 to 512 [ 1401.189459][T30464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1401.278434][T30464] ext4 filesystem being mounted at /2619/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1401.314274][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1401.314291][ T28] audit: type=1326 audit(1787908496.814:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30472 comm="syz.0.11003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1401.426782][ T28] audit: type=1326 audit(1787908496.814:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30472 comm="syz.0.11003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1401.543426][ T28] audit: type=1326 audit(1787908496.851:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30472 comm="syz.0.11003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1401.604490][ T6314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1401.686754][ T28] audit: type=1326 audit(1787908496.861:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30472 comm="syz.0.11003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1401.762620][ T28] audit: type=1326 audit(1787908496.861:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30472 comm="syz.0.11003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1401.881874][ T28] audit: type=1326 audit(1787908496.861:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30472 comm="syz.0.11003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1402.001029][ T28] audit: type=1326 audit(1787908496.861:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30472 comm="syz.0.11003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1402.119630][ T28] audit: type=1326 audit(1787908496.861:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30472 comm="syz.0.11003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1402.259365][ T28] audit: type=1326 audit(1787908496.861:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30472 comm="syz.0.11003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1403.703352][T30543] xt_TCPMSS: Only works on TCP SYN packets [ 1404.321776][T30559] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1404.665280][T30535] loop4: detected capacity change from 0 to 32768 [ 1404.777320][T30535] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1405.106287][T30535] XFS (loop4): Ending clean mount [ 1405.168088][T30535] XFS (loop4): Quotacheck needed: Please wait. [ 1405.393443][ T28] audit: type=1400 audit(1787908500.570:1237): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=30584 comm="syz.3.11035" [ 1405.458069][T30535] XFS (loop4): Quotacheck: Done. [ 1405.656391][T30547] loop0: detected capacity change from 0 to 32768 [ 1405.755508][T30547] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1405.932486][T30547] XFS (loop0): Ending clean mount [ 1405.963486][T30547] XFS (loop0): Quotacheck needed: Please wait. [ 1406.057193][T24652] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1406.284277][T30547] XFS (loop0): Quotacheck: Done. [ 1406.642978][ T6318] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1407.896232][T30595] loop3: detected capacity change from 0 to 32768 [ 1408.012855][T30595] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.11036 (30595) [ 1408.145455][T30595] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1408.246332][T30595] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1408.301190][T30595] BTRFS info (device loop3): setting nodatasum [ 1408.335686][T30595] BTRFS info (device loop3): force zlib compression, level 3 [ 1408.382279][T30595] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1408.443819][T30595] BTRFS info (device loop3): use lzo compression, level 0 [ 1408.471632][T30595] BTRFS info (device loop3): turning on flush-on-commit [ 1408.514601][T30595] BTRFS info (device loop3): enabling auto defrag [ 1408.521168][T30595] BTRFS info (device loop3): max_inline at 4096 [ 1408.579518][T30595] BTRFS info (device loop3): using free space tree [ 1408.688125][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1408.833761][T30595] BTRFS info (device loop3): enabling ssd optimizations [ 1408.948290][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1408.975404][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.024100][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1409.056446][T15575] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1409.076594][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1409.134183][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1409.187244][ T9] usb 5-1: SerialNumber: syz [ 1409.224164][ T6314] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1409.267260][ T9] usb 5-1: 0:2 : does not exist [ 1409.320944][T15575] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1409.353415][T15575] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1409.412418][T15575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.782898][ T9] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1409.839907][ T9] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1409.948530][T15575] qmi_wwan: probe of 1-1:1.0 failed with error -22 [ 1410.013502][ T9] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1410.022825][ T5765] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (5765) [ 1410.053368][T15575] usb 1-1: USB disconnect, device number 97 [ 1410.101140][ T9] usb 5-1: USB disconnect, device number 12 [ 1412.089904][T30754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11066'. [ 1412.348310][T30761] i2c i2c-0: Invalid block write size 252 [ 1412.996496][T30778] netlink: 6 bytes leftover after parsing attributes in process `syz.2.11076'. [ 1413.025591][T30781] nbd: must specify an index to disconnect [ 1413.269216][T30784] xt_limit: Overflow, try lower: 0/0 [ 1413.443741][T30753] loop4: detected capacity change from 0 to 32768 [ 1413.523801][T30753] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.11067 (30753) [ 1413.654431][T30753] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1413.727864][T30753] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1413.797909][T30753] BTRFS info (device loop4): using free space tree [ 1414.207322][T30753] BTRFS info (device loop4): enabling ssd optimizations [ 1414.256486][T30753] BTRFS info (device loop4): auto enabling async discard [ 1414.493691][T30819] loop0: detected capacity change from 0 to 4096 [ 1414.579838][T30819] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1414.737346][T24652] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1414.907962][T30835] (null): rxe_set_mtu: Set mtu to 256 [ 1414.953685][T30835] rdma_rxe: rxe_newlink: failed to add vcan0 [ 1416.417789][T30881] (null): rxe_set_mtu: Set mtu to 256 [ 1416.423556][T30881] rdma_rxe: rxe_newlink: failed to add vcan0 [ 1417.164295][T30903] loop3: detected capacity change from 0 to 512 [ 1417.190919][T30915] No such timeout policy "syz0" [ 1417.204889][T30902] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1417.382512][T30903] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1417.411754][T30903] EXT4-fs (loop3): Remounting filesystem read-only [ 1417.422421][T30949] loop0: detected capacity change from 0 to 164 [ 1417.440585][T30902] bond1 (unregistering): Released all slaves [ 1417.464652][T30903] EXT4-fs (loop3): 1 truncate cleaned up [ 1417.479228][T30949] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1417.570936][T30903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1417.643566][T30949] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1417.892445][ T6314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1418.109236][T30993] (null): rxe_set_mtu: Set mtu to 256 [ 1418.150851][T30993] rdma_rxe: rxe_newlink: failed to add vcan0 [ 1418.414943][T31001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11115'. [ 1418.589112][T31007] netlink: 'syz.3.11116': attribute type 1 has an invalid length. [ 1418.900236][T31016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11119'. [ 1418.958171][T31016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11119'. [ 1419.072525][T18368] kworker/dying (18368) used greatest stack depth: 18312 bytes left [ 1419.384038][T31027] gtp0: entered promiscuous mode [ 1419.428402][T31027] gtp0: entered allmulticast mode [ 1419.992920][T31047] loop0: detected capacity change from 0 to 16 [ 1420.049481][T31047] erofs: (device loop0): mounted with root inode @ nid 36. [ 1420.452609][T31066] netlink: 'syz.3.11136': attribute type 1 has an invalid length. [ 1420.849784][T31080] delete_channel: no stack [ 1421.183466][T31089] devtmpfs: Cannot enable quota on remount [ 1421.514562][T31106] loop0: detected capacity change from 0 to 256 [ 1421.580585][T31106] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1422.299489][T31137] xt_bpf: check failed: parse error [ 1422.558537][T31148] loop0: detected capacity change from 0 to 8 [ 1422.593365][T31149] netlink: 'syz.2.11161': attribute type 1 has an invalid length. [ 1423.189126][T31173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11169'. [ 1423.886677][T31195] loop3: detected capacity change from 0 to 512 [ 1424.009286][T31195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1424.132074][T31195] ext4 filesystem being mounted at /2669/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1424.455510][ T6314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1424.723405][T31221] Process accounting resumed [ 1425.715133][T31267] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1426.015081][T31280] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1426.286389][T31284] loop3: detected capacity change from 0 to 256 [ 1426.414661][T31292] loop0: detected capacity change from 0 to 512 [ 1426.475881][T31292] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1426.503820][T31292] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1426.523912][T31292] System zones: 0-1, 15-15, 18-18, 34-34 [ 1426.533757][T31292] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1426.540701][T31292] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 1426.550572][T31292] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1426.595497][T31298] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11205'. [ 1426.635406][T31292] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1426.669854][T31292] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.11203: bad orphan inode 16 [ 1426.758226][T31292] ext4_test_bit(bit=15, block=18) = 1 [ 1426.763740][T31292] is_bad_inode(inode)=0 [ 1426.803907][T31292] NEXT_ORPHAN(inode)=0 [ 1426.811375][T31292] max_ino=32 [ 1426.814658][T31292] i_nlink=2 [ 1426.842010][T31292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1426.926163][T31307] netlink: 'syz.2.11207': attribute type 3 has an invalid length. [ 1426.948654][T31292] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 1427.152787][ T6318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1428.121871][ T28] audit: type=1326 audit(1787908521.552:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31349 comm="syz.3.11221" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1428.239230][ T28] audit: type=1326 audit(1787908521.552:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31349 comm="syz.3.11221" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1428.380138][ T28] audit: type=1326 audit(1787908521.580:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31349 comm="syz.3.11221" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1428.515595][ T28] audit: type=1326 audit(1787908521.580:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31349 comm="syz.3.11221" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1428.600130][ T28] audit: type=1326 audit(1787908521.580:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31349 comm="syz.3.11221" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1428.610385][T31366] netlink: 'syz.2.11227': attribute type 1 has an invalid length. [ 1428.669956][T31366] netlink: 232 bytes leftover after parsing attributes in process `syz.2.11227'. [ 1428.695029][ T28] audit: type=1326 audit(1787908521.580:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31349 comm="syz.3.11221" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1428.821869][ T28] audit: type=1326 audit(1787908521.580:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31349 comm="syz.3.11221" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1428.928540][ T28] audit: type=1326 audit(1787908521.580:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31349 comm="syz.3.11221" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1429.041241][ T28] audit: type=1326 audit(1787908521.580:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31349 comm="syz.3.11221" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1430.335501][T31422] loop4: detected capacity change from 0 to 256 [ 1430.345389][T31424] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11244'. [ 1431.416321][T31461] loop0: detected capacity change from 0 to 64 [ 1431.644278][T31469] loop4: detected capacity change from 0 to 512 [ 1431.693844][T31469] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1431.860723][T31469] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.11259: Failed to acquire dquot type 1 [ 1431.888058][T31469] EXT4-fs (loop4): 1 truncate cleaned up [ 1431.910885][T31469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1432.539762][T24652] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1432.934894][T31497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11265'. [ 1433.553934][T31523] loop0: detected capacity change from 0 to 256 [ 1433.566081][T31524] bridge0: entered allmulticast mode [ 1433.691459][T31524] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1433.889751][T31523] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1434.657497][T31564] netlink: 'syz.4.11285': attribute type 1 has an invalid length. [ 1435.186945][T31580] netlink: 'syz.0.11290': attribute type 10 has an invalid length. [ 1435.394477][T31586] netlink: 'syz.4.11292': attribute type 1 has an invalid length. [ 1435.406212][T31587] program syz.2.11291 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1435.417452][T31580] team0: Port device wlan1 added [ 1435.864606][T31595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11294'. [ 1435.922731][T31595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11294'. [ 1436.198291][T31605] loop4: detected capacity change from 0 to 256 [ 1437.008129][T31628] netlink: 'syz.3.11306': attribute type 10 has an invalid length. [ 1437.393329][T31639] loop3: detected capacity change from 0 to 24 [ 1437.436578][T31639] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1437.571847][T31639] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1437.744452][T31639] VFS: Lookup of 'file0' in romfs loop3 would have caused loop [ 1438.746184][T31681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11320'. [ 1438.793177][T31681] IPv6: Can't replace route, no match found [ 1439.520269][T31699] netlink: 'syz.0.11326': attribute type 15 has an invalid length. [ 1439.574264][T31699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11326'. [ 1441.226294][T31755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11345'. [ 1441.293069][T31761] netlink: 88 bytes leftover after parsing attributes in process `syz.2.11346'. [ 1441.317570][T31761] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11346'. [ 1443.382038][T31842] loop4: detected capacity change from 0 to 16 [ 1443.443630][T31842] erofs: (device loop4): mounted with root inode @ nid 36. [ 1443.618205][T15575] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1443.852276][T15575] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1443.872738][T15575] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.921186][T15575] usb 3-1: config 0 descriptor?? [ 1443.974493][T15575] cp210x 3-1:0.0: cp210x converter detected [ 1444.431079][T15575] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1444.493893][T15575] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 1444.532626][T15575] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1444.609966][T15575] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1444.638356][T31878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11380'. [ 1444.669606][T31875] bridge6: entered promiscuous mode [ 1444.685156][T15575] usb 3-1: USB disconnect, device number 101 [ 1444.736264][T15575] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1444.801342][T15575] cp210x 3-1:0.0: device disconnected [ 1445.093000][T31898] netlink: 'syz.0.11382': attribute type 11 has an invalid length. [ 1445.127906][T31898] netlink: 'syz.0.11382': attribute type 11 has an invalid length. [ 1445.161834][T31898] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11382'. [ 1445.786029][T31907] loop4: detected capacity change from 0 to 4096 [ 1447.816710][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1447.816726][ T28] audit: type=1326 audit(1787908539.720:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31981 comm="syz.3.11408" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1448.032390][ T28] audit: type=1326 audit(1787908539.757:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31981 comm="syz.3.11408" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1448.151328][ T28] audit: type=1326 audit(1787908539.757:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31981 comm="syz.3.11408" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1448.175736][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.289096][ T28] audit: type=1326 audit(1787908539.766:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31981 comm="syz.3.11408" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1448.397474][ T28] audit: type=1326 audit(1787908539.766:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31981 comm="syz.3.11408" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1448.527812][ T28] audit: type=1326 audit(1787908539.766:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31981 comm="syz.3.11408" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1448.696233][ T28] audit: type=1326 audit(1787908539.766:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31981 comm="syz.3.11408" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1448.696291][ T28] audit: type=1326 audit(1787908539.766:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31981 comm="syz.3.11408" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1448.696340][ T28] audit: type=1326 audit(1787908539.766:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31981 comm="syz.3.11408" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1448.755881][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.898723][ C1] vkms_vblank_simulate: vblank timer overrun [ 1449.016560][T32024] loop4: detected capacity change from 0 to 8 [ 1449.092753][T32024] SQUASHFS error: Unable to read inode 0x9 [ 1450.060138][T32064] netlink: 'syz.4.11433': attribute type 10 has an invalid length. [ 1450.121404][T32064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11433'. [ 1450.400415][T32078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.411404][T32078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.431622][T32110] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11448'. [ 1451.784609][T32126] tmpfs: Bad value for 'mpol' [ 1452.422365][T32150] netlink: 80 bytes leftover after parsing attributes in process `syz.4.11462'. [ 1452.888669][T32169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11467'. [ 1453.507747][T32189] xt_hashlimit: max too large, truncated to 1048576 [ 1453.917711][T32201] netlink: 72 bytes leftover after parsing attributes in process `syz.3.11478'. [ 1453.939231][T32201] netlink: 72 bytes leftover after parsing attributes in process `syz.3.11478'. [ 1455.114760][T32228] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1455.471261][T32271] loop4: detected capacity change from 0 to 512 [ 1455.667930][T32271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1455.756677][T32271] ext4 filesystem being mounted at /713/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1455.932571][T24652] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1456.573352][ T9] nvmet: connect request for invalid subsystem testsubsys! [ 1456.608566][T32306] loop3: detected capacity change from 0 to 4096 [ 1456.627504][T32301] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1456.873634][T32306] ntfs3: loop3: ino=5, "/" directory corrupted [ 1457.219766][T32320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11502'. [ 1457.621604][T32330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11505'. [ 1458.578997][T32295] Process accounting paused [ 1458.591582][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1458.981098][T32371] ip_tables: iptables: counters copy to user failed while replacing table [ 1458.998040][T32370] loop4: detected capacity change from 0 to 256 [ 1459.459550][T32383] loop3: detected capacity change from 0 to 256 [ 1460.849463][T32424] netlink: 'syz.4.11534': attribute type 3 has an invalid length. [ 1460.890196][T32424] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11534'. [ 1461.418988][T32437] Unsupported ieee802154 address type: 0 [ 1461.730613][T32447] loop3: detected capacity change from 0 to 256 [ 1461.819625][T32447] exfat: Deprecated parameter 'namecase' [ 1461.844266][T32447] exfat: Deprecated parameter 'utf8' [ 1461.901286][T32447] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe5fd08b, utbl_chksum : 0xe619d30d) [ 1461.913625][T32457] XFS (nbd0): no-recovery mounts must be read-only. [ 1462.430756][T32475] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11549'. [ 1462.473744][T32478] binfmt_misc: register: failed to install interpreter file ./file0 [ 1463.471263][T32513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11561'. [ 1463.670404][T32518] futex_wake_op: syz.3.11564 tries to shift op by 144; fix this program [ 1463.716596][T32518] futex_wake_op: syz.3.11564 tries to shift op by 144; fix this program [ 1464.784466][T32542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11572'. [ 1464.837904][T32546] loop0: detected capacity change from 0 to 128 [ 1464.867618][T32548] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11573'. [ 1464.880977][T32546] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1464.939229][T32546] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1465.239546][T22744] IPVS: starting estimator thread 0... [ 1465.352623][T32557] IPVS: using max 17 ests per chain, 40800 per kthread [ 1467.068328][T32612] trusted_key: encrypted_key: master key parameter is missing [ 1468.053797][T32643] trusted_key: encrypted_key: keyword 'Iew' not recognized [ 1468.663021][T32668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11613'. [ 1468.735792][T32671] netlink: 'syz.2.11614': attribute type 10 has an invalid length. [ 1468.816364][T32671] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11614'. [ 1468.839862][T32671] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1469.086308][T32683] loop4: detected capacity change from 0 to 764 [ 1469.149644][T32683] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1469.504344][T32700] netlink: 'syz.2.11625': attribute type 64 has an invalid length. [ 1469.563062][T32705] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1469.790793][T32709] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 1469.807667][T32709] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 1469.872545][T32709] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 1469.890089][T32720] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11627'. [ 1469.923539][T32720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11627'. [ 1469.929498][T32709] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 1470.148863][T22744] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1471.060288][T22744] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1471.655518][T22744] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 1471.663792][T22744] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.796148][T22744] usb 3-1: config 63 has no interface number 0 [ 1471.802431][T22744] usb 3-1: config 63 interface 66 has no altsetting 0 [ 1471.902944][T22744] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1471.940960][T22744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.054332][T22744] usb 3-1: Product: syz [ 1472.067075][T22744] usb 3-1: Manufacturer: syz [ 1472.071760][T22744] usb 3-1: SerialNumber: syz [ 1472.347555][T22744] usb 3-1: Found UVC 0.07 device syz (174f:8acf) [ 1472.384483][T22744] usb 3-1: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 1472.403741][T22744] usb 3-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 1472.435338][T22744] usb 3-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1472.473290][T22744] usb 3-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1472.510763][T22744] usb 3-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 1472.554868][T22744] usb 3-1: No streaming interface found for terminal 29. [ 1472.587318][T22744] uvcvideo 3-1:63.66: Entity type for entity Output 5 was not initialized! [ 1472.631032][T22744] usb 3-1: USB disconnect, device number 102 [ 1472.714313][T32764] loop0: detected capacity change from 0 to 32768 [ 1472.844102][T32764] ialloc: diAlloc returned -5! [ 1473.871170][ T381] program syz.3.11665 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1473.880963][T15575] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1474.118134][T15575] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1474.159308][T15575] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1474.208481][T15575] usb 3-1: config 0 has no interface number 0 [ 1474.244046][T15575] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1474.275466][T15575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.340811][T15575] usb 3-1: Product: syz [ 1474.354197][T15575] usb 3-1: Manufacturer: syz [ 1474.362798][T15575] usb 3-1: SerialNumber: syz [ 1474.379397][T15575] usb 3-1: config 0 descriptor?? [ 1474.452511][ T392] netlink: 'syz.4.11668': attribute type 12 has an invalid length. [ 1474.860984][T15575] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 1474.912786][T15575] usb 3-1: No valid video chain found. [ 1474.952397][T15575] usb 3-1: USB disconnect, device number 103 [ 1475.340652][ T6227] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1475.578892][ T6227] usb 1-1: Using ep0 maxpacket: 16 [ 1475.605465][ T6227] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 1475.631917][ T6227] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1475.690565][ T6227] usb 1-1: config 1 has no interface number 1 [ 1475.740732][ T6227] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1475.777758][ T6227] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1475.859411][ T6227] usb 1-1: config 1 interface 105 has no altsetting 0 [ 1475.912772][ T6227] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1475.950055][ T6227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.999724][ T6227] usb 1-1: Product: syz [ 1476.028305][ T6227] usb 1-1: Manufacturer: syz [ 1476.054517][ T6227] usb 1-1: SerialNumber: syz [ 1476.122868][ T416] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1476.428515][ T6227] aqc111: probe of 1-1:1.105 failed with error -22 [ 1476.649997][T22744] usb 1-1: USB disconnect, device number 98 [ 1477.995639][T15575] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1478.046119][ T502] loop3: detected capacity change from 0 to 512 [ 1478.071270][ T502] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 1478.098952][ T502] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #13: comm syz.3.11696: iget: bad i_size value: 12154757448730 [ 1478.152544][ T502] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.11696: couldn't read orphan inode 13 (err -117) [ 1478.250790][T15575] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1478.264397][ T502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1478.289122][T15575] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1478.297191][T15575] usb 3-1: Product: syz [ 1478.363494][T15575] usb 3-1: SerialNumber: syz [ 1478.390722][T15575] usb 3-1: config 0 descriptor?? [ 1478.435170][ T502] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 1478.663063][ T6314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1478.711367][T15575] hso 3-1:0.0: Failed to find BULK IN ep [ 1478.938461][T15575] usb 3-1: USB disconnect, device number 104 [ 1480.016014][ T514] loop4: detected capacity change from 0 to 32768 [ 1480.217314][ T514] ERROR: (device loop4): diWrite: ixpxd invalid [ 1480.217314][ T514] [ 1480.277099][ T514] ERROR: (device loop4): remounting filesystem as read-only [ 1480.288260][ T563] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1480.343492][ T514] ERROR: (device loop4): txCommit: [ 1480.343492][ T514] [ 1480.808885][ T576] Cannot find del_set index 4 as target [ 1480.885369][ T580] loop3: detected capacity change from 0 to 2048 [ 1480.929339][ T580] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1482.201296][ T6227] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1482.439164][ T6227] usb 1-1: Using ep0 maxpacket: 32 [ 1482.446896][ T6227] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.473670][ T6227] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1482.518151][ T6227] usb 1-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 1482.553708][ T6227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.591817][ T6227] usb 1-1: config 0 descriptor?? [ 1482.634014][ T6227] rndis_wlan 1-1:0.0: skipping garbage [ 1482.639576][ T6227] rndis_wlan 1-1:0.0: invalid descriptor buffer length [ 1482.683682][ T6227] usb 1-1: bad CDC descriptors [ 1482.714747][ T6227] rndis_host 1-1:0.0: skipping garbage [ 1482.720324][ T6227] rndis_host 1-1:0.0: invalid descriptor buffer length [ 1482.756469][ T6227] usb 1-1: bad CDC descriptors [ 1482.805282][ T6227] cdc_acm 1-1:0.0: skipping garbage [ 1482.829917][ T6227] cdc_acm 1-1:0.0: invalid descriptor buffer length [ 1482.913979][ T6227] usb 1-1: USB disconnect, device number 99 [ 1483.207873][ T668] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11739'. [ 1483.253579][ T668] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 1486.996913][ T823] loop0: detected capacity change from 0 to 256 [ 1487.038851][ T823] exfat: Deprecated parameter 'namecase' [ 1487.044632][ T823] exfat: Deprecated parameter 'namecase' [ 1487.097843][ T823] exfat: Deprecated parameter 'utf8' [ 1487.157689][ T830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11780'. [ 1487.168567][ T823] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 1487.526362][ T842] loop0: detected capacity change from 0 to 64 [ 1488.573376][ T914] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 1489.886899][ T963] ip6t_srh: unknown srh match flags 4000 [ 1490.648032][ T990] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11813'. [ 1490.885046][ T998] loop4: detected capacity change from 0 to 16 [ 1490.921569][ T998] erofs: (device loop4): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 1491.345249][ T1010] Process accounting resumed [ 1491.748699][ T1033] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11825'. [ 1491.897696][ T1044] netlink: 'syz.2.11826': attribute type 21 has an invalid length. [ 1492.136173][ T1052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11828'. [ 1493.270508][ T1030] loop4: detected capacity change from 0 to 32768 [ 1493.334397][ T1030] [ 1493.334397][ T1030] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1493.334397][ T1030] [ 1493.493160][ T1030] JFS: metapage_get_blocks failed [ 1493.503660][ T1030] ERROR: (device loop4): release_metapage: metapage_write_one() failed [ 1493.503660][ T1030] [ 1493.605619][ T1030] ERROR: (device loop4): diWrite: ixpxd invalid [ 1493.605619][ T1030] [ 1493.623508][ T1030] ERROR: (device loop4): txCommit: [ 1493.623508][ T1030] [ 1493.727485][ T1102] xt_recent: hitcount (262144) is larger than allowed maximum (255) [ 1493.906184][T24652] [ 1493.906184][T24652] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1493.906184][T24652] [ 1493.981339][T24652] [ 1493.981339][T24652] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1493.981339][T24652] [ 1493.999594][ T1104] loop0: detected capacity change from 0 to 4096 [ 1494.157868][ T1111] sctp: [Deprecated]: syz.3.11847 (pid 1111) Use of int in max_burst socket option. [ 1494.157868][ T1111] Use struct sctp_assoc_value instead [ 1494.241311][ T1115] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1494.252866][ T1104] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1494.310653][ T1104] NILFS (loop0): mounting fs with errors [ 1494.435713][ T1119] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.11848'. [ 1494.446656][ T1104] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 1494.556068][ T1104] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 1494.600535][ T1104] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 1494.663905][ T28] audit: type=1800 audit(1787908582.939:1256): pid=1104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.11844" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1496.918369][ T1179] netlink: 'syz.0.11865': attribute type 1 has an invalid length. [ 1496.983290][ T1179] netlink: 'syz.0.11865': attribute type 1 has an invalid length. [ 1497.077431][ T1145] loop3: detected capacity change from 0 to 32768 [ 1498.061840][ T1203] loop4: detected capacity change from 0 to 4096 [ 1498.193815][ T1211] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1498.999777][ T1230] netlink: 'syz.0.11877': attribute type 28 has an invalid length. [ 1499.045099][ T1230] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11877'. [ 1500.431917][ T1285] netlink: 'syz.4.11894': attribute type 19 has an invalid length. [ 1500.486935][ T1285] netlink: 'syz.4.11894': attribute type 28 has an invalid length. [ 1500.883207][ T1300] loop4: detected capacity change from 0 to 764 [ 1503.545789][ T1335] loop0: detected capacity change from 0 to 32768 [ 1503.727172][ T1335] XFS (loop0): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 1504.032436][ T1335] XFS (loop0): Ending clean mount [ 1504.603737][ T6318] XFS (loop0): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 1505.861937][ T1428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11934'. [ 1505.958350][ T28] audit: type=1326 audit(1787908593.375:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1429 comm="syz.2.11935" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1506.171581][ T28] audit: type=1326 audit(1787908593.403:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1429 comm="syz.2.11935" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1506.344108][ T28] audit: type=1326 audit(1787908593.412:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1429 comm="syz.2.11935" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1506.481992][ T28] audit: type=1326 audit(1787908593.412:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1429 comm="syz.2.11935" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1506.617899][ T28] audit: type=1326 audit(1787908593.412:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1429 comm="syz.2.11935" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1508.056186][ T1502] batadv0: entered promiscuous mode [ 1508.086256][ T1502] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1509.572742][ T1554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11972'. [ 1509.631885][ T1554] netlink: 108 bytes leftover after parsing attributes in process `syz.0.11972'. [ 1509.641411][ T1554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11972'. [ 1509.695987][ T1554] netlink: 108 bytes leftover after parsing attributes in process `syz.0.11972'. [ 1509.727443][ T1554] netlink: 84 bytes leftover after parsing attributes in process `syz.0.11972'. [ 1510.372547][ T1590] overlayfs: disabling nfs_export due to verity=require [ 1510.411190][ T1590] overlayfs: conflicting options: userxattr,verity=require [ 1510.497929][ T27] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1510.920463][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 1511.161798][ T27] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1511.364907][ T27] usb 5-1: config 0 has no interface number 0 [ 1511.388416][ T27] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1511.397792][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.405851][ T27] usb 5-1: Product: syz [ 1511.494892][ T27] usb 5-1: Manufacturer: syz [ 1511.499593][ T27] usb 5-1: SerialNumber: syz [ 1512.265490][ T27] usb 5-1: config 0 descriptor?? [ 1512.277939][ T27] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1512.503901][ T1650] loop0: detected capacity change from 0 to 4096 [ 1512.532638][ T1656] dlm: no local IP address has been set [ 1512.556194][ T1656] dlm: cannot start dlm midcomms -107 [ 1512.674582][ T1650] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1512.740612][ T27] gspca_spca1528: reg_w err -71 [ 1512.838903][ T27] spca1528: probe of 5-1:0.1 failed with error -71 [ 1512.890671][ T27] usb 5-1: USB disconnect, device number 13 [ 1512.927845][ T1669] tmpfs: Bad value for 'mpol' [ 1513.011579][ T1675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12008'. [ 1513.251134][ T1684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12011'. [ 1515.715528][ T1752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12034'. [ 1516.220699][ T1771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12040'. [ 1516.910079][ T1801] netlink: 'syz.0.12050': attribute type 10 has an invalid length. [ 1517.054852][ T1801] geneve0: entered promiscuous mode [ 1517.134198][ T1801] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1518.138833][ T1837] binder: BC_ACQUIRE_RESULT not supported [ 1518.161054][ T1837] binder: 1836:1837 ioctl c0306201 200000004a40 returned -22 [ 1518.511865][ T1847] binder: 1846:1847 ioctl c018620c 200000000100 returned -22 [ 1518.619520][ T1849] netlink: 'syz.0.12065': attribute type 12 has an invalid length. [ 1519.169673][ T1871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12072'. [ 1519.189673][ T1871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12072'. [ 1519.428282][ T28] audit: type=1326 audit(1787908605.795:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1879 comm="syz.2.12076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1519.570323][ T28] audit: type=1326 audit(1787908605.795:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1879 comm="syz.2.12076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1519.677362][ T28] audit: type=1326 audit(1787908605.804:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1879 comm="syz.2.12076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1519.784949][ T28] audit: type=1326 audit(1787908605.804:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1879 comm="syz.2.12076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1519.910620][ T28] audit: type=1326 audit(1787908605.813:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1879 comm="syz.2.12076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1520.011420][ T28] audit: type=1326 audit(1787908605.813:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1879 comm="syz.2.12076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1520.109595][ T28] audit: type=1326 audit(1787908605.822:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1879 comm="syz.2.12076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1520.200627][ T28] audit: type=1326 audit(1787908605.822:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1879 comm="syz.2.12076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1520.387487][ T9] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 1520.656779][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1520.688306][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1520.727144][ T1929] loop0: detected capacity change from 0 to 512 [ 1520.733757][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 1520.748074][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.781396][ T9] usb 4-1: config 0 descriptor?? [ 1520.838647][ T9] xbox_remote_probe: endpoint_in message size==0? [ 1520.855967][ T1929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1520.892983][ T1929] ext4 filesystem being mounted at /2846/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1521.015039][ T6318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1521.164025][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 1521.170384][ T9] usbhid: probe of 4-1:0.0 failed with error -71 [ 1521.205300][ T9] usb 4-1: USB disconnect, device number 80 [ 1521.431190][ T1954] loop0: detected capacity change from 0 to 2048 [ 1522.043231][ T1973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12100'. [ 1523.866683][ T2030] loop4: detected capacity change from 0 to 2048 [ 1524.030500][ T2034] loop0: detected capacity change from 0 to 2048 [ 1524.081304][ T2034] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=301129, location=301129 [ 1524.130381][ T2036] Process accounting paused [ 1524.221042][ T2034] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1524.436375][ T28] audit: type=1800 audit(1787908610.417:1270): pid=2034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12120" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 1524.875706][ T2058] loop0: detected capacity change from 0 to 512 [ 1524.989499][ T2065] loop4: detected capacity change from 0 to 1024 [ 1525.189022][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1525.412500][ T2079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12131'. [ 1525.448453][ T2080] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.12130'. [ 1525.464918][ T2079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12131'. [ 1525.532665][ T2079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12131'. [ 1526.031966][ T2090] loop4: detected capacity change from 0 to 4096 [ 1526.079340][ T28] audit: type=1326 audit(1787908611.931:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2097 comm="syz.3.12136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1526.188096][ T2090] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1526.254524][ T28] audit: type=1326 audit(1787908611.949:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2097 comm="syz.3.12136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1526.333106][ T2090] ntfs3: loop4: Failed to load $Extend (-22). [ 1526.339309][ T2090] ntfs3: loop4: Failed to initialize $Extend. [ 1526.459828][ T28] audit: type=1326 audit(1787908611.977:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2097 comm="syz.3.12136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1526.690616][ T28] audit: type=1326 audit(1787908611.977:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2097 comm="syz.3.12136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1526.825710][ T2115] netlink: 'syz.0.12140': attribute type 3 has an invalid length. [ 1526.857846][ T2115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12140'. [ 1527.193137][ T2125] loop4: detected capacity change from 0 to 128 [ 1527.221824][ T2125] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1527.329341][ T2125] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1527.460961][ T2137] CIFS mount error: No usable UNC path provided in device string! [ 1527.460961][ T2137] [ 1527.480791][ T2134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12147'. [ 1527.500250][ T2138] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1527.547910][ T2137] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1527.990754][ T2156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12153'. [ 1528.169209][ T2160] loop4: detected capacity change from 0 to 128 [ 1528.215921][ T9] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1528.247852][ T2160] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1528.287508][ T2160] ext4 filesystem being mounted at /882/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1528.453797][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1528.491877][ T9] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1528.518473][ T2171] netlink: 'syz.3.12156': attribute type 10 has an invalid length. [ 1528.526888][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.547758][T24652] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1528.557246][ T2171] geneve0: entered promiscuous mode [ 1528.563813][ T9] usb 3-1: Product: syz [ 1528.574437][ T9] usb 3-1: Manufacturer: syz [ 1528.580888][ T2171] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1528.605294][ T9] usb 3-1: SerialNumber: syz [ 1528.639301][ T2171] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1528.677265][ T9] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1528.705635][ T2171] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1528.749631][ T2171] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1528.809171][ T2171] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1529.281862][ T9] gspca_mr97310a: reg write [21] error -110 [ 1529.304056][ T9] mr97310a: probe of 3-1:1.0 failed with error -110 [ 1529.639256][ T9] usb 3-1: USB disconnect, device number 105 [ 1530.065134][ T2218] netlink: 'syz.4.12168': attribute type 10 has an invalid length. [ 1530.128139][ T2218] geneve0: entered promiscuous mode [ 1530.233592][ T2218] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1530.255950][ T9] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1530.486902][ T9] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 1.00 [ 1530.523692][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.583437][ T9] usb 4-1: Product: syz [ 1530.620711][ T9] usb 4-1: Manufacturer: syz [ 1530.635156][ T9] usb 4-1: SerialNumber: syz [ 1530.692725][ T9] ums_eneub6250 4-1:1.0: USB Mass Storage device detected [ 1530.768575][ T9] scsi host1: usb-storage 4-1:1.0 [ 1530.978823][ T2244] loop0: detected capacity change from 0 to 1764 [ 1531.128570][ T2253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12177'. [ 1531.234155][ T2244] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1531.337444][ T9] ums_eneub6250: probe of 4-1:1.0 failed with error 3 [ 1531.421835][ T9] usb 4-1: USB disconnect, device number 81 [ 1532.240120][ T28] audit: type=1326 audit(1787908617.624:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2289 comm="syz.0.12185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1532.391272][ T28] audit: type=1326 audit(1787908617.624:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2289 comm="syz.0.12185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1532.632269][ T28] audit: type=1326 audit(1787908617.642:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2289 comm="syz.0.12185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1532.726022][ T28] audit: type=1326 audit(1787908617.642:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2289 comm="syz.0.12185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1532.813423][ T28] audit: type=1326 audit(1787908617.670:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2289 comm="syz.0.12185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1532.942795][ T28] audit: type=1326 audit(1787908617.670:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2289 comm="syz.0.12185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1533.029496][ T28] audit: type=1326 audit(1787908617.670:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2289 comm="syz.0.12185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1533.137875][ T28] audit: type=1326 audit(1787908617.670:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2289 comm="syz.0.12185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1533.223553][ T28] audit: type=1326 audit(1787908617.670:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2289 comm="syz.0.12185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1533.666679][ T2319] loop3: detected capacity change from 0 to 4096 [ 1533.712481][ T2319] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1533.825040][ T2293] loop4: detected capacity change from 0 to 32768 [ 1533.917765][ T2319] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1533.951926][ T2319] ntfs3: loop3: Failed to load $Extend (-22). [ 1533.977696][ T2319] ntfs3: loop3: Failed to initialize $Extend. [ 1534.264182][ T2333] netlink: 'syz.0.12197': attribute type 5 has an invalid length. [ 1534.807013][ T27] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1534.959926][ T2351] loop4: detected capacity change from 0 to 4096 [ 1535.013002][ T2351] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1535.121253][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 1535.290382][ T27] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1535.306699][ T27] usb 4-1: config 1 has an invalid interface number: 6 but max is 2 [ 1535.314861][ T27] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1535.348738][ T27] usb 4-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 1535.357776][ T27] usb 4-1: config 1 has no interface number 3 [ 1535.392854][ T27] usb 4-1: too many endpoints for config 1 interface 6 altsetting 29: 147, using maximum allowed: 30 [ 1535.435449][ T27] usb 4-1: config 1 interface 6 altsetting 29 has an invalid endpoint descriptor of length 4, skipping [ 1535.467968][ T27] usb 4-1: config 1 interface 6 altsetting 29 has 1 endpoint descriptor, different from the interface descriptor's value: 147 [ 1535.522162][ T27] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 202, changing to 7 [ 1535.551557][ T2366] loop0: detected capacity change from 0 to 512 [ 1535.558289][ T27] usb 4-1: config 1 interface 6 has no altsetting 0 [ 1535.565231][ T27] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1535.628477][ T27] usb 4-1: string descriptor 0 read error: -22 [ 1535.644170][ T27] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1535.648304][ T2369] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.12204'. [ 1535.790307][ T2385] sock: sock_timestamping_bind_phc: sock not bind to device [ 1535.798210][ T2366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1536.012722][ T2366] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 1536.075067][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.109581][ T27] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1536.117855][ T27] usb 4-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 1536.177216][ T27] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1536.295577][ T6318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1536.768535][ T27] usb 4-1: USB disconnect, device number 82 [ 1537.524269][ T2473] netlink: 5 bytes leftover after parsing attributes in process `syz.3.12222'. [ 1537.566734][ T2473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1538.016082][ T2496] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12229'. [ 1538.069451][ T2496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1538.604682][ T2515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12234'. [ 1539.283018][ T9] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1539.353204][ T2484] loop4: detected capacity change from 0 to 32768 [ 1539.486476][ T2484] XFS (loop4): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 1539.552270][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1539.598505][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.609022][ T9] usb 1-1: Product: syz [ 1539.613279][ T9] usb 1-1: Manufacturer: syz [ 1539.618073][ T9] usb 1-1: SerialNumber: syz [ 1539.652412][T15575] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1539.931813][ T2484] XFS (loop4): Ending clean mount [ 1540.247918][T24652] XFS (loop4): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 1540.258651][ T9] usb 1-1: USB disconnect, device number 100 [ 1540.693158][ T2528] loop3: detected capacity change from 0 to 32768 [ 1540.857963][ T28] audit: type=1326 audit(1787908625.550:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2575 comm="syz.2.12244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1540.930942][ T2528] [ 1540.930942][ T2528] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1540.930942][ T2528] [ 1541.060459][T15575] usb 1-1: Service connection timeout for: 256 [ 1541.066724][T15575] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1541.081924][ T28] audit: type=1326 audit(1787908625.550:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2575 comm="syz.2.12244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1541.132808][ T2528] [ 1541.132808][ T2528] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1541.132808][ T2528] [ 1541.193724][T15575] ath9k_htc: Failed to initialize the device [ 1541.199521][ T2584] netlink: 'syz.0.12245': attribute type 1 has an invalid length. [ 1541.207760][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 1541.229687][ T28] audit: type=1326 audit(1787908625.614:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2575 comm="syz.2.12244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1541.244978][ T2528] [ 1541.244978][ T2528] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1541.244978][ T2528] [ 1541.269420][ T28] audit: type=1326 audit(1787908625.614:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2575 comm="syz.2.12244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1541.331246][ T28] audit: type=1326 audit(1787908625.614:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2575 comm="syz.2.12244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1541.385828][ T2528] [ 1541.385828][ T2528] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1541.385828][ T2528] [ 1541.440889][ T2528] [ 1541.440889][ T2528] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1541.440889][ T2528] [ 1541.515055][ T2528] [ 1541.515055][ T2528] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1541.515055][ T2528] [ 1541.608834][ T2528] [ 1541.608834][ T2528] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1541.608834][ T2528] [ 1541.722180][ T113] [ 1541.722180][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1541.722180][ T113] [ 1542.004338][ T6314] [ 1542.004338][ T6314] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1542.004338][ T6314] [ 1542.051433][ T6314] [ 1542.051433][ T6314] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1542.051433][ T6314] [ 1542.111827][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1542.386646][ T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1542.413904][ T9] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1542.436628][ T9] usb 5-1: Product: syz [ 1542.466266][ T9] usb 5-1: SerialNumber: syz [ 1542.502773][ T9] usb 5-1: config 0 descriptor?? [ 1542.653847][ T2626] netlink: 'syz.2.12254': attribute type 1 has an invalid length. [ 1542.727865][ T2626] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12254'. [ 1542.781098][ T9] hso 5-1:0.0: Failed to find INT IN ep [ 1543.076539][ T6227] usb 5-1: USB disconnect, device number 14 [ 1544.561228][ T2717] bond4: entered allmulticast mode [ 1544.884645][ T2761] batadv0: entered promiscuous mode [ 1544.916494][ T2761] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1545.901076][ T2804] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12287'. [ 1545.975749][ T2804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1546.332922][ T2816] batadv0: entered promiscuous mode [ 1546.386299][ T2816] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1546.497293][ T28] audit: type=1326 audit(1787908630.772:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2820 comm="syz.0.12292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1546.552651][ T2827] netlink: del zone limit has 8 unknown bytes [ 1546.598679][ T28] audit: type=1326 audit(1787908630.772:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2820 comm="syz.0.12292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1546.701682][ T28] audit: type=1326 audit(1787908630.800:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2820 comm="syz.0.12292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1546.813618][ T28] audit: type=1326 audit(1787908630.800:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2820 comm="syz.0.12292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1546.888892][ T28] audit: type=1326 audit(1787908630.800:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2820 comm="syz.0.12292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1547.000028][ T28] audit: type=1326 audit(1787908630.800:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2820 comm="syz.0.12292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1547.096908][ T28] audit: type=1326 audit(1787908630.800:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2820 comm="syz.0.12292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1547.218584][ T28] audit: type=1326 audit(1787908630.800:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2820 comm="syz.0.12292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1547.246217][ T27] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1547.319899][ T28] audit: type=1326 audit(1787908631.529:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2859 comm="syz.4.12301" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875ab9e0d9 code=0x7ffc0000 [ 1547.476198][ T28] audit: type=1326 audit(1787908631.529:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2859 comm="syz.4.12301" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875ab9e0d9 code=0x7ffc0000 [ 1547.626863][ T2870] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 1547.695093][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1547.715300][ T27] usb 1-1: config 255 has an invalid interface number: 199 but max is 0 [ 1547.723735][ T27] usb 1-1: config 255 has no interface number 0 [ 1547.747208][ T27] usb 1-1: config 255 interface 199 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8 [ 1547.757591][ T27] usb 1-1: config 255 interface 199 has no altsetting 0 [ 1547.868240][ T2872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1548.020627][ T27] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0108, bcdDevice=a1.2e [ 1548.030052][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.038099][ T27] usb 1-1: Product: syz [ 1548.061435][ T27] usb 1-1: Manufacturer: syz [ 1548.066130][ T27] usb 1-1: SerialNumber: syz [ 1548.117878][ T2845] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1548.422061][ T27] kvaser_usb 1-1:255.199: Cannot get usb endpoint(s) [ 1548.446146][ T27] usb 1-1: USB disconnect, device number 101 [ 1548.651305][ T2902] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12311'. [ 1548.810230][ T2907] Cannot find del_set index 286 as target [ 1548.839753][ T2908] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12314'. [ 1548.923347][ T2908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1549.245867][ T2914] smc: removing ib device syz0 [ 1549.838678][ T2935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12322'. [ 1550.142956][ T2940] netlink: 'syz.3.12323': attribute type 1 has an invalid length. [ 1551.615030][ T2960] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12327'. [ 1551.698570][ T2960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1551.803273][ T2965] loop3: detected capacity change from 0 to 256 [ 1551.950760][ T2965] FAT-fs (loop3): Directory bread(block 64) failed [ 1551.995672][ T2965] FAT-fs (loop3): Directory bread(block 65) failed [ 1552.002430][ T2965] FAT-fs (loop3): Directory bread(block 66) failed [ 1552.050865][ T2965] FAT-fs (loop3): Directory bread(block 67) failed [ 1552.057660][ T2965] FAT-fs (loop3): Directory bread(block 68) failed [ 1552.084109][ T2975] loop0: detected capacity change from 0 to 8 [ 1552.125594][ T2965] FAT-fs (loop3): Directory bread(block 69) failed [ 1552.132339][ T2965] FAT-fs (loop3): Directory bread(block 70) failed [ 1552.185851][ T2975] SQUASHFS error: Failed to read block 0x10e000000008f: -5 [ 1552.201475][ T2965] FAT-fs (loop3): Directory bread(block 71) failed [ 1552.242424][ T2975] SQUASHFS error: Failed to read block 0x10e0000c00090: -5 [ 1552.249911][ T2965] FAT-fs (loop3): Directory bread(block 72) failed [ 1552.249953][ T2965] FAT-fs (loop3): Directory bread(block 73) failed [ 1552.290114][ T2975] SQUASHFS error: Failed to read block 0x10e000000008f: -5 [ 1552.297492][ T2975] SQUASHFS error: Failed to read block 0x10e000000008f: -5 [ 1552.351238][ T2975] SQUASHFS error: Failed to read block 0x10e000000008f: -5 [ 1552.418522][ T2975] SQUASHFS error: Failed to read block 0x10e000000008f: -5 [ 1552.451828][ T2975] SQUASHFS error: Failed to read block 0x10e000000008f: -5 [ 1552.489679][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1552.489694][ T28] audit: type=1800 audit(1787908636.299:1302): pid=2975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12334" name="file2" dev="loop0" ino=6 res=0 errno=0 [ 1552.636778][ T2988] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1553.611431][ T28] audit: type=1326 audit(1787908637.323:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3021 comm="syz.3.12347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1553.752417][ T28] audit: type=1326 audit(1787908637.323:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3021 comm="syz.3.12347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1553.914071][ T28] audit: type=1326 audit(1787908637.360:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3021 comm="syz.3.12347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1554.109385][ T28] audit: type=1326 audit(1787908637.360:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3021 comm="syz.3.12347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1554.843467][ T3057] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12359'. [ 1555.150932][ T3063] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1555.264088][ T3071] loop0: detected capacity change from 0 to 512 [ 1555.368396][ T3071] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.12363: corrupted in-inode xattr: invalid ea_ino [ 1555.423906][ T3071] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.12363: couldn't read orphan inode 15 (err -117) [ 1555.524721][ T3071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1555.952440][ T6318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1556.291210][ T3106] overlayfs: missing 'lowerdir' [ 1556.416191][ T3114] loop3: detected capacity change from 0 to 256 [ 1556.471090][ T3111] loop4: detected capacity change from 0 to 2048 [ 1556.667180][ T3111] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1556.857233][ T3125] Process accounting resumed [ 1557.170642][ T3139] delete_channel: no stack [ 1557.437700][ T3152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12385'. [ 1558.431644][ T3184] loop4: detected capacity change from 0 to 4096 [ 1558.617178][ T3196] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1558.711215][ T3184] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=32, inode=11, rec_len=24, name_len=77 [ 1558.852912][ T3194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1558.888458][ T3184] Remounting filesystem read-only [ 1558.914759][ T3194] 8021q: adding VLAN 0 to HW filter on device team0 [ 1558.973423][ T3194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1559.656715][ T3219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1560.458314][ T3248] netlink: 'syz.3.12415': attribute type 17 has an invalid length. [ 1560.477353][ T3249] loop4: detected capacity change from 0 to 512 [ 1560.486234][ T3248] netlink: 148 bytes leftover after parsing attributes in process `syz.3.12415'. [ 1560.602031][ T3249] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.12416: corrupted in-inode xattr: invalid ea_ino [ 1560.665150][ T3249] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.12416: couldn't read orphan inode 15 (err -117) [ 1560.737771][ T3249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1560.822640][ T3255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1561.149313][T24652] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1562.113495][ T3315] delete_channel: no stack [ 1562.302339][ T3318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1563.138240][ T3351] loop0: detected capacity change from 0 to 16 [ 1563.196985][ T3351] erofs: (device loop0): mounted with root inode @ nid 36. [ 1563.602052][ T3382] ip6t_rpfilter: unknown options [ 1564.188896][ T3402] bridge0: port 3(hsr0) entered blocking state [ 1564.195869][ T3402] bridge0: port 3(hsr0) entered disabled state [ 1564.242670][ T3402] hsr0: entered allmulticast mode [ 1564.287370][ T3402] hsr_slave_0: entered allmulticast mode [ 1564.318076][ T3402] hsr_slave_1: entered allmulticast mode [ 1564.363618][ T3402] hsr0: entered promiscuous mode [ 1564.395566][ T3402] bridge0: port 3(hsr0) entered blocking state [ 1564.402054][ T3402] bridge0: port 3(hsr0) entered forwarding state [ 1566.447388][ T3435] loop0: detected capacity change from 0 to 32768 [ 1566.565736][ T3435] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1567.001931][ T6318] ocfs2: Unmounting device (7,0) on (node local) [ 1567.096521][ T3479] SET target dimension over the limit! [ 1568.405305][ T3517] loop3: detected capacity change from 0 to 256 [ 1568.818546][ T3537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12497'. [ 1568.854747][ T3537] netlink: 540 bytes leftover after parsing attributes in process `syz.4.12497'. [ 1569.282399][ T3549] bridge0: port 3(hsr0) entered blocking state [ 1569.289262][ T3549] bridge0: port 3(hsr0) entered disabled state [ 1569.369632][ T3549] hsr0: entered allmulticast mode [ 1569.407612][ T3549] hsr_slave_0: entered allmulticast mode [ 1569.455046][ T3549] hsr_slave_1: entered allmulticast mode [ 1569.494027][ T3549] hsr0: entered promiscuous mode [ 1570.005757][ T3572] loop3: detected capacity change from 0 to 512 [ 1570.080949][ T3572] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1570.141555][ T3572] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 1570.203426][ T3572] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1570.209948][ T3572] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #13: comm syz.3.12508: iget: bad i_size value: 12154761577498 [ 1570.351866][ T3572] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.12508: couldn't read orphan inode 13 (err -117) [ 1570.421943][ T3572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1570.512882][ T3572] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.12508: dx entry: limit 65535 != root limit 120 [ 1570.587673][ T3572] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.12508: Corrupt directory, running e2fsck is recommended [ 1570.846432][ T6314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1571.167727][ T3606] netlink: 'syz.2.12518': attribute type 3 has an invalid length. [ 1571.197983][ T3606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12518'. [ 1571.606780][T22744] nvmet: connect request for invalid subsystem testsubsys! [ 1571.676999][ T3613] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1572.165114][ T3633] tc_dump_action: action bad kind [ 1572.590363][ T3650] trusted_key: encrypted_key: insufficient parameters specified [ 1572.624383][ T3651] loop4: detected capacity change from 0 to 256 [ 1573.451464][ T3675] loop0: detected capacity change from 0 to 256 [ 1574.809470][ T9] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1575.073004][ T9] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1575.125574][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.133692][ T9] usb 1-1: Product: syz [ 1575.147773][ T28] audit: type=1326 audit(1787908657.207:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3738 comm="syz.2.12557" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1575.166735][ T9] usb 1-1: Manufacturer: syz [ 1575.194407][ T9] usb 1-1: SerialNumber: syz [ 1575.229135][ T9] ums-karma 1-1:1.0: USB Mass Storage device detected [ 1575.268666][ T9] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 1575.268666][ T9] Please send a copy of this message to and [ 1575.485635][ T28] audit: type=1326 audit(1787908657.207:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3738 comm="syz.2.12557" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1575.539353][ T9] ums-karma: probe of 1-1:1.0 failed with error -5 [ 1575.627029][ T9] usb 1-1: USB disconnect, device number 102 [ 1575.669510][ T28] audit: type=1326 audit(1787908657.254:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3738 comm="syz.2.12557" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1575.864794][ T3764] vti0: entered promiscuous mode [ 1575.881996][ T28] audit: type=1326 audit(1787908657.254:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3738 comm="syz.2.12557" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1576.865503][ T3800] loop4: detected capacity change from 0 to 128 [ 1576.904608][ T3800] ufs: ufstype=nextstep-cd is supported read-only [ 1577.683173][ T3832] netlink: 22 bytes leftover after parsing attributes in process `syz.3.12580'. [ 1577.920716][ T28] audit: type=1326 audit(1787908659.773:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3838 comm="syz.0.12582" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1577.965105][ T28] audit: type=1326 audit(1787908659.773:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3838 comm="syz.0.12582" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1577.995093][ T28] audit: type=1326 audit(1787908659.782:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3838 comm="syz.0.12582" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1578.111268][ T28] audit: type=1326 audit(1787908659.782:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3838 comm="syz.0.12582" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1578.647930][ T3871] loop4: detected capacity change from 0 to 16 [ 1578.702808][ T3871] erofs: (device loop4): mounted with root inode @ nid 36. [ 1578.774176][ T3871] syz.4.12593: attempt to access beyond end of device [ 1578.774176][ T3871] loop4: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 1579.126680][ T28] audit: type=1326 audit(1787908660.880:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3885 comm="syz.3.12595" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1579.211396][ T28] audit: type=1326 audit(1787908660.880:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3885 comm="syz.3.12595" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd3b9e0d9 code=0x7ffc0000 [ 1579.525959][ T3897] comedi: No check for data length of config insn id 6025 is implemented [ 1579.565035][ T3897] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1579.625351][ T3897] comedi: Assuming n=15 is correct [ 1580.751823][ T3939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12615'. [ 1581.135839][ T3954] comedi comedi2: mpc624: a I/O base address must be specified [ 1581.396102][ T3961] kAFS: unable to lookup cell '' [ 1581.833410][ T3981] netlink: 'syz.4.12629': attribute type 5 has an invalid length. [ 1582.593790][ T3998] bond2: entered promiscuous mode [ 1582.611877][ T4015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12636'. [ 1584.125274][ T4081] AppArmor: change_hat: Invalid input '0' [ 1584.219103][ T4086] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12653'. [ 1584.474412][ T4045] loop4: detected capacity change from 0 to 32768 [ 1584.968825][ T4104] netlink: 'syz.0.12659': attribute type 16 has an invalid length. [ 1585.029770][ T4104] netlink: 'syz.0.12659': attribute type 3 has an invalid length. [ 1585.067166][ T4104] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12659'. [ 1586.504737][ T4148] netlink: 'syz.3.12670': attribute type 1 has an invalid length. [ 1586.529972][ T4148] netlink: 'syz.3.12670': attribute type 3 has an invalid length. [ 1586.560131][ T4148] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12670'. [ 1586.719835][T15575] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1586.979824][T15575] usb 5-1: Using ep0 maxpacket: 8 [ 1587.010495][T15575] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1587.058772][T15575] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1587.129522][T15575] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1587.168932][T15575] usb 5-1: Product: syz [ 1587.206149][T15575] usb 5-1: Manufacturer: syz [ 1587.221957][T15575] usb 5-1: SerialNumber: syz [ 1587.476190][T15575] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 1587.511072][T15575] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1587.518970][T15575] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1587.572950][T15575] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1587.694559][T15575] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 1587.721881][T15575] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 1587.763252][T15575] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1587.798425][T15575] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1587.865005][T15575] usb 5-1: USB disconnect, device number 15 [ 1587.909927][T15575] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1588.021790][T15575] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1588.086027][T15575] visor 5-1:1.0: device disconnected [ 1588.155853][ T4209] loop0: detected capacity change from 0 to 764 [ 1588.616598][ T4226] loop3: detected capacity change from 0 to 164 [ 1589.803878][ T4259] Process accounting paused [ 1591.251550][ T4314] xt_bpf: check failed: parse error [ 1591.597135][ T4322] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000 [ 1591.696608][ T4327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12717'. [ 1591.768034][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1592.093326][ T4339] netlink: 'syz.0.12722': attribute type 5 has an invalid length. [ 1592.637187][ T4355] kernel profiling enabled (shift: 9) [ 1593.579592][ T4398] loop3: detected capacity change from 0 to 512 [ 1593.635822][ T4398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1594.278655][ T6314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1594.316987][ T4421] __vm_enough_memory: pid: 4421, comm: syz.4.12749, not enough memory for the allocation [ 1594.967710][ T4444] securityfs: Unknown parameter 'username' [ 1595.202774][ T4449] loop4: detected capacity change from 0 to 1024 [ 1595.322074][ T4449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1595.621775][T24652] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1596.792639][ T4500] loop4: detected capacity change from 0 to 4096 [ 1596.830511][ T4500] __ntfs_error: 3 callbacks suppressed [ 1596.830529][ T4500] ntfs: (device loop4): parse_options(): Unrecognized mount option disable_sèÖrparse. [ 1596.961050][ T4500] ntfs: (device loop4): parse_options(): The gid option requires an argument. [ 1597.612888][ T28] audit: type=1326 audit(1787908677.931:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4529 comm="syz.4.12780" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875ab9e0d9 code=0x7ffc0000 [ 1597.830424][ T28] audit: type=1326 audit(1787908677.931:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4529 comm="syz.4.12780" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875ab9e0d9 code=0x7ffc0000 [ 1597.986595][ T28] audit: type=1326 audit(1787908677.987:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4529 comm="syz.4.12780" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f875ab9e0d9 code=0x7ffc0000 [ 1598.080723][ T28] audit: type=1326 audit(1787908677.987:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4529 comm="syz.4.12780" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875ab9e0d9 code=0x7ffc0000 [ 1598.332992][ T4554] loop4: detected capacity change from 0 to 256 [ 1598.368967][ T4554] exfat: Deprecated parameter 'utf8' [ 1598.401945][ T4554] exfat: Deprecated parameter 'utf8' [ 1598.424566][ T4554] exfat: Deprecated parameter 'utf8' [ 1598.429961][ T4554] exfat: Deprecated parameter 'namecase' [ 1598.573136][ T4554] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1599.038868][ T4581] loop4: detected capacity change from 0 to 1024 [ 1599.105503][ T4581] hfsplus: extend alloc file! (16384,256,150995124) [ 1599.488131][ T4601] dlm: plock device version mismatch: kernel (1.2.0), user (64.6.0) [ 1600.321145][ T27] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1600.776318][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 1600.871689][ T27] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1600.893111][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.928052][ T27] usb 1-1: Product: syz [ 1600.932313][ T27] usb 1-1: Manufacturer: syz [ 1600.936986][ T27] usb 1-1: SerialNumber: syz [ 1600.952840][ T4650] ±ÿ: renamed from lo (while UP) [ 1600.984847][ T27] usb 1-1: config 0 descriptor?? [ 1601.257045][ T27] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 1601.339826][ T27] eb 9a 47 80 9b f8 7a f0 [ 1601.344777][ T27] snd-usb-6fire: probe of 1-1:0.0 failed with error -5 [ 1601.537657][ T27] usb 1-1: USB disconnect, device number 103 [ 1601.845237][ T4644] loop4: detected capacity change from 0 to 32768 [ 1601.863722][ T4644] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.12815 (4644) [ 1602.038255][ T4644] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1602.088243][ T4644] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1602.148210][ T4644] BTRFS info (device loop4): using free space tree [ 1602.241129][T15575] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1602.306218][ T4696] netlink: 'syz.2.12825': attribute type 11 has an invalid length. [ 1602.402122][ T4644] BTRFS info (device loop4): enabling ssd optimizations [ 1602.438432][ T4644] BTRFS info (device loop4): auto enabling async discard [ 1602.491091][T15575] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1602.544306][T15575] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1602.619352][T15575] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 1602.660105][T15575] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.695010][T15575] usb 4-1: Product: syz [ 1602.715094][T15575] usb 4-1: Manufacturer: syz [ 1602.753995][T15575] usb 4-1: SerialNumber: syz [ 1602.782244][T24652] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1602.803372][ T4713] netlink: 'syz.2.12827': attribute type 29 has an invalid length. [ 1602.837838][T15575] etas_es58x 4-1:1.0: Starting syz syz (Serial Number syz) [ 1602.859431][ T4713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12827'. [ 1603.106540][T15575] etas_es58x 4-1:1.0: could not retrieve the product info string [ 1603.325878][T15575] usb 4-1: USB disconnect, device number 83 [ 1603.397273][T15575] etas_es58x 4-1:1.0: Disconnecting syz syz [ 1604.729730][ T4776] loop0: detected capacity change from 0 to 164 [ 1605.700135][ T4793] loop3: detected capacity change from 0 to 4096 [ 1605.742931][ T4793] ntfs: (device loop3): parse_options(): Unrecognized mount option disable_sèÖrparse. [ 1605.846969][ T4793] ntfs: (device loop3): parse_options(): The gid option requires an argument. [ 1606.292271][ T4812] ±ÿ: renamed from lo (while UP) [ 1606.530375][ T4821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12851'. [ 1606.882213][ T4831] loop4: detected capacity change from 0 to 256 [ 1606.974918][ T4831] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1607.031845][ T4831] FAT-fs (loop4): Filesystem has been set read-only [ 1607.700289][ T4850] loop0: detected capacity change from 0 to 4096 [ 1607.780621][ T4850] ntfs: (device loop0): parse_options(): Unrecognized mount option disable_sèÖrparse. [ 1607.840254][ T4850] ntfs: (device loop0): parse_options(): The gid option requires an argument. [ 1608.725405][ T4840] loop3: detected capacity change from 0 to 32768 [ 1608.807510][ T4840] [ 1608.807510][ T4840] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1608.807510][ T4840] [ 1609.079404][ T6314] [ 1609.079404][ T6314] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1609.079404][ T6314] [ 1609.289783][ T6314] [ 1609.289783][ T6314] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1609.289783][ T6314] [ 1609.356776][ T4899] Non-string source [ 1609.891804][ T4912] netlink: 'syz.0.12880': attribute type 39 has an invalid length. [ 1612.152283][ T4989] JFS: discard option not supported on device [ 1612.182250][ T4989] Mount JFS Failure: -22 [ 1612.186581][ T4989] jfs_mount failed w/return code = -22 [ 1612.253729][ T4992] netlink: 'syz.3.12906': attribute type 1 has an invalid length. [ 1612.959660][ T5020] loop0: detected capacity change from 0 to 164 [ 1613.130363][ T5020] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1613.178579][ T5020] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1613.247363][ T5020] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1614.912524][ T5094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12935'. [ 1614.933323][ T5094] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12935'. [ 1615.402916][ T5111] loop0: detected capacity change from 0 to 256 [ 1615.538032][ T5111] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1615.624507][ T5111] FAT-fs (loop0): Filesystem has been set read-only [ 1615.631359][ T5111] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1615.736227][ T5111] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1615.812640][ T28] audit: type=1800 audit(1787908694.724:1324): pid=5111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12940" name="file1" dev="loop0" ino=1048724 res=0 errno=0 [ 1615.841879][ T5111] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 1616.717958][ T5075] loop4: detected capacity change from 0 to 40427 [ 1616.780437][ T5075] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1616.790715][ T5149] loop3: detected capacity change from 0 to 16 [ 1616.830783][ T5075] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1616.870798][ T5149] erofs: (device loop3): mounted with root inode @ nid 36. [ 1616.936881][ T5075] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1617.302501][ T5075] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1617.321329][ T5075] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1617.585765][T22744] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1617.781936][ T6227] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1618.001591][T22744] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1618.019454][ T6227] usb 3-1: Using ep0 maxpacket: 32 [ 1618.025533][T22744] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1618.037991][ T6227] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1618.058644][T22744] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1618.062837][ T6227] usb 3-1: config 0 has no interface number 0 [ 1618.094993][T22744] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1618.115121][ T6227] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1618.145735][ T6227] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1618.149322][T22744] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice= 0.00 [ 1618.165493][ T6227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.179754][ T5143] loop0: detected capacity change from 0 to 32768 [ 1618.188236][ T6227] usb 3-1: Product: syz [ 1618.198354][T22744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.225423][ T6227] usb 3-1: Manufacturer: syz [ 1618.251790][ T6227] usb 3-1: SerialNumber: syz [ 1618.273609][ T6227] usb 3-1: config 0 descriptor?? [ 1618.288425][ T5168] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1618.428129][ T5143] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1618.590498][ T5168] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1618.691317][ T5143] XFS (loop0): Ending clean mount [ 1618.799569][T22744] peak_usb 4-1:1.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1618.807924][T22744] peak_usb 4-1:1.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1618.853423][ T6227] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1618.894467][ T6227] asix: probe of 3-1:0.188 failed with error -71 [ 1618.956729][ T6227] usb 3-1: USB disconnect, device number 106 [ 1618.984097][T22744] peak_usb: probe of 4-1:1.0 failed with error -71 [ 1619.031700][T22744] usb 4-1: USB disconnect, device number 84 [ 1619.071056][ T6318] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1621.350920][ T5286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12975'. [ 1621.403543][ T5288] loop4: detected capacity change from 0 to 256 [ 1621.632298][ T5298] netlink: 'syz.2.12977': attribute type 9 has an invalid length. [ 1621.712425][ T5298] openvswitch: : Dropping previously announced user features [ 1622.256774][ T5316] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1623.061684][ T5343] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1624.105998][ T5373] loop4: detected capacity change from 0 to 512 [ 1624.179004][ T5373] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1624.310484][ T5373] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 1625.054166][ T5404] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1625.061492][ T5404] IPv6: NLM_F_CREATE should be set when creating new route [ 1625.068832][ T5404] IPv6: NLM_F_CREATE should be set when creating new route [ 1625.104435][ T5403] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13006'. [ 1625.126252][ T5314] Process accounting resumed [ 1626.119690][ T28] audit: type=1326 audit(1787908704.247:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5447 comm="syz.0.13019" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1626.345766][ T28] audit: type=1326 audit(1787908704.247:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5447 comm="syz.0.13019" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1626.455726][ T5459] binder: 5457:5459 ioctl 400c620e 200000000040 returned -22 [ 1626.472582][ T28] audit: type=1326 audit(1787908704.265:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5447 comm="syz.0.13019" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1626.562863][ T28] audit: type=1326 audit(1787908704.265:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5447 comm="syz.0.13019" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1626.591415][ T5461] loop0: detected capacity change from 0 to 2048 [ 1626.664083][ T28] audit: type=1326 audit(1787908704.265:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5447 comm="syz.0.13019" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef799e0d9 code=0x7ffc0000 [ 1626.899243][ T5461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1627.299655][ T6318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1628.448675][ T5519] netlink: 'syz.4.13037': attribute type 9 has an invalid length. [ 1628.530512][ T5522] loop0: detected capacity change from 0 to 256 [ 1628.644823][ T5522] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1628.922936][ T5539] loop4: detected capacity change from 0 to 512 [ 1629.052191][T22744] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1629.079764][ T5539] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1629.114881][ T5539] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1629.171228][ T5539] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.13050: Failed to acquire dquot type 1 [ 1629.217139][ T5539] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1629.249580][T22744] usb 3-1: Using ep0 maxpacket: 8 [ 1629.257300][T22744] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1629.262210][ T5539] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1629.321882][ T5539] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.13050: Failed to acquire dquot type 1 [ 1629.378385][ T5539] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.13050: bg 0: block 248: padding at end of block bitmap is not set [ 1629.409629][T22744] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1629.430113][T22744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.483574][T22744] usb 3-1: config 0 descriptor?? [ 1629.508885][ T5539] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1629.520623][T22744] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1629.538884][ T5539] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1629.561557][ T5539] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.13050: Failed to acquire dquot type 1 [ 1629.615311][ T5539] EXT4-fs (loop4): 1 orphan inode deleted [ 1629.628420][ T5539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1629.661653][ T5539] ext4 filesystem being mounted at /1090/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1629.813906][ T5539] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.13050: Failed to acquire dquot type 1 [ 1629.895331][T24652] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1629.985201][T22744] gspca_vc032x: reg_w err -71 [ 1629.990051][T22744] vc032x: probe of 3-1:0.0 failed with error -71 [ 1630.179640][T22744] usb 3-1: USB disconnect, device number 107 [ 1630.255189][ T27] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1630.561238][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1630.581345][ T27] usb 1-1: config index 0 descriptor too short (expected 26766, got 142) [ 1630.589846][ T27] usb 1-1: config 1 has too many interfaces: 173, using maximum allowed: 32 [ 1630.634265][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1630.644771][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 173 [ 1630.681365][ T27] usb 1-1: string descriptor 0 read error: -22 [ 1630.688022][ T27] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1630.741910][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.860738][ T27] usb 1-1: selecting invalid altsetting 1 [ 1630.876880][ T27] usb 1-1: unit 6 not found! [ 1631.547317][ T27] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1631.622210][ T27] usb 1-1: USB disconnect, device number 104 [ 1632.053855][ T5663] netlink: 3 bytes leftover after parsing attributes in process `syz.3.13065'. [ 1632.325243][ T6227] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1632.552745][ T6227] usb 5-1: Using ep0 maxpacket: 16 [ 1632.569147][ T6227] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1632.606881][ T6227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.647810][ T6227] usb 5-1: Product: syz [ 1632.661239][ T6227] usb 5-1: Manufacturer: syz [ 1632.691498][ T6227] usb 5-1: SerialNumber: syz [ 1632.713141][ T6227] usb 5-1: config 0 descriptor?? [ 1632.765177][ T6227] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 1632.939560][ T5690] jffs2: notice: (5690) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1633.103506][ T5692] loop0: detected capacity change from 0 to 2048 [ 1633.227168][ T5692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1633.263783][ T6227] usb 5-1: clie_3_5_startup: get interface number failed: -71 [ 1633.313780][ T6227] visor: probe of 5-1:0.0 failed with error -71 [ 1633.337059][ T5692] ext4 filesystem being mounted at /3091/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1633.398463][ T6227] usb 5-1: USB disconnect, device number 16 [ 1633.894283][ T6318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1633.995343][ T5722] ipvlan1: left promiscuous mode [ 1634.000648][ T5722] ipvlan1: left allmulticast mode [ 1634.058985][ T5722] veth0_vlan: left allmulticast mode [ 1634.486430][ T5743] netlink: 'syz.2.13084': attribute type 1 has an invalid length. [ 1634.614960][ T5750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13087'. [ 1635.321786][ T5782] loop0: detected capacity change from 0 to 512 [ 1635.410769][ T5782] __quota_error: 3 callbacks suppressed [ 1635.410787][ T5782] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1635.527812][ T5782] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1635.608258][ T5782] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.13093: Failed to acquire dquot type 1 [ 1635.686078][ T5782] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1635.711127][ T5782] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1635.761088][ T5782] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.13093: Failed to acquire dquot type 1 [ 1635.847621][ T5782] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.13093: bg 0: block 248: padding at end of block bitmap is not set [ 1635.916963][ T5782] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1635.951307][ T5752] loop3: detected capacity change from 0 to 32768 [ 1635.967263][ T5782] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1635.999227][ T5782] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1636.029466][ T5782] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.13093: Failed to acquire dquot type 1 [ 1636.101527][ T5782] EXT4-fs (loop0): 1 orphan inode deleted [ 1636.125251][ T5782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1636.211569][ T5782] ext4 filesystem being mounted at /3096/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1636.392497][ T5782] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1636.421875][ T5782] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1636.497177][ T5782] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.13093: Failed to acquire dquot type 1 [ 1636.600691][ T27] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1636.735470][ T6318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1636.931942][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 1637.013841][ T27] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1637.013875][ T27] usb 3-1: config 0 has an invalid descriptor of length 5, skipping remainder of the config [ 1637.013899][ T27] usb 3-1: config 0 has no interface number 0 [ 1637.028005][ T27] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1637.028041][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.028065][ T27] usb 3-1: Product: syz [ 1637.028083][ T27] usb 3-1: Manufacturer: syz [ 1637.028101][ T27] usb 3-1: SerialNumber: syz [ 1637.073412][ T27] usb 3-1: config 0 descriptor?? [ 1637.076949][ T5831] sctp: [Deprecated]: syz.0.13106 (pid 5831) Use of int in max_burst socket option deprecated. [ 1637.076949][ T5831] Use struct sctp_assoc_value instead [ 1637.460087][ T27] usb 3-1: USB disconnect, device number 108 [ 1638.122933][ T5826] loop3: detected capacity change from 0 to 32768 [ 1638.176355][ T5826] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.13105 (5826) [ 1638.257491][ T5826] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1638.296756][ T5826] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1638.305499][ T5826] BTRFS info (device loop3): using free space tree [ 1638.563674][ T5826] BTRFS info (device loop3): enabling ssd optimizations [ 1638.601671][ T5826] BTRFS info (device loop3): auto enabling async discard [ 1638.968963][ T6314] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1639.640860][ T5923] IPv6: NLM_F_CREATE should be specified when creating new route [ 1641.006984][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13140'. [ 1641.033385][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13140'. [ 1641.753648][ T28] audit: type=1326 audit(1787908718.659:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.13151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1641.777904][ C0] vkms_vblank_simulate: vblank timer overrun [ 1641.840538][ T28] audit: type=1326 audit(1787908718.659:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.13151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1641.928710][ T28] audit: type=1326 audit(1787908718.715:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.13151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1642.035617][ T28] audit: type=1326 audit(1787908718.715:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.13151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1642.250854][ T28] audit: type=1326 audit(1787908718.715:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.13151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1642.312959][T15575] ------------[ cut here ]------------ [ 1642.319237][T15575] WARNING: CPU: 0 PID: 15575 at net/netfilter/nft_set_pipapo.c:2389 nft_pipapo_destroy+0x84b/0x8b0 [ 1642.330367][T15575] Modules linked in: [ 1642.334310][T15575] CPU: 0 PID: 15575 Comm: kworker/0:0 Not tainted syzkaller #0 [ 1642.341956][T15575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1642.352228][T15575] Workqueue: events nf_tables_trans_destroy_work [ 1642.358735][T15575] RIP: 0010:nft_pipapo_destroy+0x84b/0x8b0 [ 1642.364662][T15575] Code: 00 00 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b9 7a ab f8 e9 d3 f9 ff ff e8 af 7a ab f8 e9 6c fe ff ff e8 a5 7a ab f8 <0f> 0b e9 16 f8 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 [ 1642.384520][T15575] RSP: 0018:ffffc9000c74f9d8 EFLAGS: 00010293 [ 1642.390678][T15575] RAX: ffffffff88dbf7cb RBX: ffff88805e48e0f0 RCX: ffff8880276dda00 [ 1642.398976][T15575] RDX: 0000000000000000 RSI: ffff88805e48e000 RDI: ffff88804e7d9b28 [ 1642.407078][T15575] RBP: ffffc9000c74fbb0 R08: ffff8880276dda00 R09: 000000000000000f [ 1642.415356][T15575] R10: 0000000000000020 R11: 0000000000000000 R12: ffff88805e48e0c0 [ 1642.423381][T15575] R13: dffffc0000000000 R14: ffff88805e48e110 R15: dffffc0000000000 [ 1642.431867][T15575] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1642.441547][T15575] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1642.448585][T15575] CR2: 0000001b2fa1fff8 CR3: 0000000065ed9000 CR4: 00000000003506f0 [ 1642.456607][T15575] Call Trace: [ 1642.460145][T15575] [ 1642.463152][T15575] ? lockdep_hardirqs_on+0x98/0x150 [ 1642.468463][T15575] nft_set_destroy+0x489/0xa20 [ 1642.473318][T15575] ? __kmem_cache_free+0xba/0x1f0 [ 1642.478438][T15575] nf_tables_trans_destroy_work+0xb2d/0x11b0 [ 1642.484531][T15575] ? __lock_acquire+0x7d80/0x7d80 [ 1642.489669][T15575] ? nft_object_dump+0x1e0/0x1e0 [ 1642.494717][T15575] ? _raw_spin_unlock_irq+0x23/0x50 [ 1642.500011][T15575] ? process_scheduled_works+0x975/0x1600 [ 1642.505850][T15575] ? process_scheduled_works+0x975/0x1600 [ 1642.511627][T15575] process_scheduled_works+0xa60/0x1600 [ 1642.517339][T15575] ? worker_attach_to_pool+0x370/0x370 [ 1642.522870][T15575] ? assign_work+0x3cc/0x5d0 [ 1642.527569][T15575] worker_thread+0xa5e/0xfe0 [ 1642.532238][T15575] ? _raw_spin_unlock+0x40/0x40 [ 1642.537195][T15575] ? __kthread_parkme+0x71/0x1c0 [ 1642.542200][T15575] kthread+0x2fa/0x390 [ 1642.546371][T15575] ? pr_cont_work+0x550/0x550 [ 1642.551296][T15575] ? kthread_blkcg+0xd0/0xd0 [ 1642.556003][T15575] ret_from_fork+0x48/0x80 [ 1642.560824][T15575] ? kthread_blkcg+0xd0/0xd0 [ 1642.565501][T15575] ret_from_fork_asm+0x11/0x20 [ 1642.570448][T15575] [ 1642.573701][T15575] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1642.581017][T15575] CPU: 0 PID: 15575 Comm: kworker/0:0 Not tainted syzkaller #0 [ 1642.588598][T15575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1642.598685][T15575] Workqueue: events nf_tables_trans_destroy_work [ 1642.605077][T15575] Call Trace: [ 1642.608392][T15575] [ 1642.611363][T15575] dump_stack_lvl+0x18c/0x250 [ 1642.616099][T15575] ? show_regs_print_info+0x20/0x20 [ 1642.621347][T15575] ? load_image+0x420/0x420 [ 1642.625931][T15575] panic+0x2ca/0x720 [ 1642.629892][T15575] ? bpf_jit_dump+0xd0/0xd0 [ 1642.634469][T15575] ? ret_from_fork_asm+0x11/0x20 [ 1642.639469][T15575] __warn+0x2e0/0x470 [ 1642.643500][T15575] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1642.648756][T15575] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1642.654011][T15575] report_bug+0x2be/0x4f0 [ 1642.658396][T15575] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1642.663645][T15575] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1642.668898][T15575] ? nft_pipapo_destroy+0x84d/0x8b0 [ 1642.674170][T15575] handle_bug+0xcf/0x120 [ 1642.678471][T15575] exc_invalid_op+0x1a/0x50 [ 1642.683026][T15575] asm_exc_invalid_op+0x1a/0x20 [ 1642.687954][T15575] RIP: 0010:nft_pipapo_destroy+0x84b/0x8b0 [ 1642.693820][T15575] Code: 00 00 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b9 7a ab f8 e9 d3 f9 ff ff e8 af 7a ab f8 e9 6c fe ff ff e8 a5 7a ab f8 <0f> 0b e9 16 f8 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 [ 1642.713473][T15575] RSP: 0018:ffffc9000c74f9d8 EFLAGS: 00010293 [ 1642.719586][T15575] RAX: ffffffff88dbf7cb RBX: ffff88805e48e0f0 RCX: ffff8880276dda00 [ 1642.721562][ T28] audit: type=1326 audit(1787908718.715:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.13151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1642.721686][ T28] audit: type=1326 audit(1787908718.715:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.13151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1642.721801][ T28] audit: type=1326 audit(1787908718.715:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.13151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1642.721919][ T28] audit: type=1326 audit(1787908718.715:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.13151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb88a79e0d9 code=0x7ffc0000 [ 1642.824161][T15575] RDX: 0000000000000000 RSI: ffff88805e48e000 RDI: ffff88804e7d9b28 [ 1642.832174][T15575] RBP: ffffc9000c74fbb0 R08: ffff8880276dda00 R09: 000000000000000f [ 1642.840186][T15575] R10: 0000000000000020 R11: 0000000000000000 R12: ffff88805e48e0c0 [ 1642.848196][T15575] R13: dffffc0000000000 R14: ffff88805e48e110 R15: dffffc0000000000 [ 1642.856230][T15575] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1642.861493][T15575] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1642.866739][T15575] ? lockdep_hardirqs_on+0x98/0x150 [ 1642.872003][T15575] nft_set_destroy+0x489/0xa20 [ 1642.876822][T15575] ? __kmem_cache_free+0xba/0x1f0 [ 1642.881910][T15575] nf_tables_trans_destroy_work+0xb2d/0x11b0 [ 1642.887958][T15575] ? __lock_acquire+0x7d80/0x7d80 [ 1642.893044][T15575] ? nft_object_dump+0x1e0/0x1e0 [ 1642.898032][T15575] ? _raw_spin_unlock_irq+0x23/0x50 [ 1642.903273][T15575] ? process_scheduled_works+0x975/0x1600 [ 1642.909043][T15575] ? process_scheduled_works+0x975/0x1600 [ 1642.914819][T15575] process_scheduled_works+0xa60/0x1600 [ 1642.920444][T15575] ? worker_attach_to_pool+0x370/0x370 [ 1642.925953][T15575] ? assign_work+0x3cc/0x5d0 [ 1642.930606][T15575] worker_thread+0xa5e/0xfe0 [ 1642.935261][T15575] ? _raw_spin_unlock+0x40/0x40 [ 1642.940152][T15575] ? __kthread_parkme+0x71/0x1c0 [ 1642.945148][T15575] kthread+0x2fa/0x390 [ 1642.949267][T15575] ? pr_cont_work+0x550/0x550 [ 1642.953998][T15575] ? kthread_blkcg+0xd0/0xd0 [ 1642.958629][T15575] ret_from_fork+0x48/0x80 [ 1642.963090][T15575] ? kthread_blkcg+0xd0/0xd0 [ 1642.967728][T15575] ret_from_fork_asm+0x11/0x20 [ 1642.972554][T15575] [ 1642.976187][T15575] Kernel Offset: disabled [ 1642.980717][T15575] Rebooting in 86400 seconds..