last executing test programs: 5m16.206911801s ago: executing program 4 (id=9048): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x30, 0x19, 0x1, 0x70bd2a, 0x25dfdbfd, {0xa, 0x14, 0x1c, 0x0, 0xff, 0x1, 0xc8, 0x7, 0x3400}, [@RTA_OIF={0x8, 0x1e}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x10}}]}, 0x30}, 0x1, 0x0, 0x0, 0x30000000}, 0x20000880) 5m15.996096934s ago: executing program 4 (id=9052): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2c, 0x0, {{@in6=@private0, @in6=@mcast2, 0x0, 0x5, 0x2, 0x0, 0x2, 0x120}, {0xffffffffffffffff, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x10000, 0x0, 0xa8d2b20a1b04074a}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000844}, 0x0) 5m15.749718618s ago: executing program 4 (id=9059): r0 = socket(0x11, 0xa, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000080)) 5m15.540050551s ago: executing program 4 (id=9064): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000023c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@resgid}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5m15.100543464s ago: executing program 4 (id=9073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5m14.376105829s ago: executing program 4 (id=9088): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x8946, 0x0) 5m14.098810651s ago: executing program 32 (id=9088): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x8946, 0x0) 5m10.262992072s ago: executing program 1 (id=9157): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 5m10.118359669s ago: executing program 1 (id=9160): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000300000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="196a348fbba6e75ce3e37fd3d3fc", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m9.151825677s ago: executing program 1 (id=9164): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000200)={0x409a090a, 0x101, "eb380400f6f2e156f59e5c708b40ddb9000000009a8afaea3096d9061a2df0c1", 0x2, 0x1, 0x5, 0x8, 0x1000, 0xc, 0x400008, 0x8, [0x2, 0x2, 0x4, 0xe]}) 5m9.103176599s ago: executing program 1 (id=9165): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000023c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@resgid}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5m8.854066173s ago: executing program 1 (id=9166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x2a8, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) 5m7.770001071s ago: executing program 1 (id=9170): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x2, 0x1, 0x7fffffffffffffff, 0x800}) 5m7.293230593s ago: executing program 33 (id=9170): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x2, 0x1, 0x7fffffffffffffff, 0x800}) 3.112103353s ago: executing program 6 (id=14127): unshare(0x400) readv(0xffffffffffffffff, 0x0, 0x0) 2.982423316s ago: executing program 6 (id=14128): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) pipe(&(0x7f0000000500)) 2.620191449s ago: executing program 6 (id=14133): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000080)={0x7, @capture={0x1000, 0x1, {0x401, 0x8}, 0x0, 0x1}}) 2.30486261s ago: executing program 6 (id=14138): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x1411, 0x9, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x28}}, 0x4000004) 1.921770058s ago: executing program 6 (id=14144): r0 = io_uring_setup(0x68ef, &(0x7f0000000100)={0x0, 0x3474, 0x80, 0x2, 0x38b}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) 1.690303697s ago: executing program 5 (id=14147): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000100)) 1.491021128s ago: executing program 5 (id=14150): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x40080) 1.466323865s ago: executing program 6 (id=14153): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x76, 0xe9, 0xe4, 0x10, 0x45e, 0x445, 0x87ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x4, "", [{{0x9, 0x4, 0xed, 0x5d, 0x2, 0x7d, 0xd8, 0xce, 0x2, [], [{{0x9, 0x5, 0xe, 0x2, 0x200, 0x8, 0x1}}, {{0x9, 0x5, 0x83, 0x2, 0x200, 0x9, 0x1, 0x6}}]}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x15555555555557e1}) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.235767464s ago: executing program 5 (id=14156): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x3}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x48080) 1.200316233s ago: executing program 0 (id=14157): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x70bd2d, 0x800, {0x0, 0x0, 0x0, 0x0, 0x10040}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.145017587s ago: executing program 3 (id=14158): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x20, 0x963736eddaafc3f5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x24}}, 0x0) 1.034403505s ago: executing program 2 (id=14159): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000800)={0x2, 0x4e21, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xf, 0x1, 0x4, [{@remote, 0xfffff412}, {@private=0xa010100, 0x807}]}]}}}], 0x28}, 0x4044040) 1.021182968s ago: executing program 0 (id=14160): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) vmsplice(r0, &(0x7f0000001240)=[{&(0x7f0000000100)='p', 0x1}], 0x1, 0x4) 1.01428381s ago: executing program 3 (id=14161): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'wlan1\x00', &(0x7f0000000000)=@ethtool_cmd={0x14, 0x0, 0x1, 0xd, 0x5, 0xf5, 0x8, 0x0, 0xdc, 0x8, 0xff, 0x7fffffff, 0x9, 0xd, 0x8, 0xaed, [0x81, 0x7]}}) 857.90449ms ago: executing program 2 (id=14162): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0x298, 0xd0, 0x1c8, 0xd0, 0xd0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x599c, 0x6}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0xb0, 0xb7}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0xfe}, [0xff000000, 0x2e4b960a45e9d6ef, 0xff, 0xd4c23c2f582b290a], [0xffffffff, 0xff000000, 0xff], 'batadv_slave_0\x00', 'pimreg0\x00', {}, {}, 0x21, 0x4, 0x2, 0x56}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x23}, @ipv6=@remote, 0x3a, 0x22, 0x6}}}, {{@ipv6={@local, @empty, [0x0, 0xff000000, 0xff000000], [0x0, 0x0, 0xffffff00], 'tunl0\x00', '\x00', {0xff}, {0xf7d589580f149d60}, 0x0, 0x4a, 0x3}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x1, 0x0, [0x9, 0xfff2, 0x4, 0x2, 0x5, 0xe, 0x2, 0xc7b, 0x5, 0x1ff, 0x3, 0x8, 0xf25, 0x7, 0x0, 0xfd6b], 0x5}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010101, @ipv4=@loopback, 0x26, 0x40, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) 828.468298ms ago: executing program 0 (id=14163): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000100)="e6") 812.305912ms ago: executing program 3 (id=14164): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 670.487138ms ago: executing program 2 (id=14165): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x20, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0x8c}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) 641.428076ms ago: executing program 0 (id=14166): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x8}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) 636.151697ms ago: executing program 5 (id=14167): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x200880, &(0x7f00000000c0)={[{@file_umask={'file_umask', 0x3d, 0x8}}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@codepage={'codepage', 0x3d, 'macromanian'}}, {@umask={'umask', 0x3d, 0x5}}]}, 0x4, 0x349, &(0x7f0000000980)="$eJzs3U1r1E4cB/DvJNlt9r+l/9hWCp6kWvBU2npQPGiR4sU34EGKtd1CaaygFbQgrZ5FvAmCR2+eRd+CXsQ3oHgoKJ70UjwYmclzmNlNtw/put8PdDebzMNvdmaymZZuQER96/Lc51dnt+WPqAGwAVwALAAu4AA4jjH33tp6x4LsZEsgCG0W0yyutXRZXfngpK89+crBYHYfHQzZT1/Mh79eVE8/Dy8gqoTIzuAMCxiApWaiOu4eemQHY0u2q99keljsYAf3MVRlOEREVL3o89+KPiUGw12wLGAiug7v9c//3PXNTnVxHAnJ578Vvg6EfH/+V4fkem9l3W8tqSGget+KV4m6srRjIrBRjzbVswXYzcwlV6YWPRWL1Vhe8VuTW6qAx7gUySQbVY9LiBsik8IUbRTReNiwstq1vb2makNNtmHGEP9Iuxq1C+B33/FcX938hxIxiffio5gXHl5gKbn+cwIh3xz1/niFqRLGP2UuUbXSC1PlWpmGf0xVciLugbev01Y2TO+rC1vGoiNLEcXrdy+O81ndnAvDyP9aIWzdtLl1KtcI4IhocKW5ZpJEv7W5Rot1NZZrfmty8bZvGvT7S7uiE0/FNTGOH3iDucz1vyVTT8A8M3OzXKiU0cho2x5HpTT0Y46awLfKz8xa6ZT/uivaji74ln/5BDdxHkN3H2ysLvh+6071G/FU6TL7yX2OJxyI0XCUe+RzJg1cuSEH4b5V+icIAu0hByXLkZO06zDCCXXuZdrkjdUFEZ3z9tZAeeYsHJo1JwYwCyDaE58Ruql9M8k1kBZYKvsv2dtqj35AxlEdwgSJq8odsjFQaqY0uqj06sPVBb/rsxH1kLTTMXa96mCoCvK6S4Trv8x6ZUqddeSD12b9E3QqPFPitGEFNKwe/0tWcEqHNVfTvIJrxhsd1lynzgCn6/kaLcQ1PioW60Vx4ij+VXL3f8oQc/iEG7386xwiIiIiIiIiIiIiIiIiIiIiIiIiov602/9G6ObfCfI1bvfhF28QEREREREREREREREREREREREREREREe1Nev/f5Kug67r7/7a7U5Nih3eIccPvDHfSW2dklL3/r13i/r9iq1wDicjobwAAAP//QO1nSQ==") mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) 552.110168ms ago: executing program 3 (id=14168): r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$AUDIT_SET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x3e9, 0xc84, 0x70bd2d, 0x25dfdbff, {0x10, 0xffffffff, 0x0, 0x0, 0xffff, 0xfffffffa, 0x4, 0x9, 0x0, 0x4, 0x1}}, 0x3c}}, 0x4004000) 455.269553ms ago: executing program 2 (id=14169): r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280), 0x0) 411.851255ms ago: executing program 0 (id=14170): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40012042, 0x0) 335.047964ms ago: executing program 5 (id=14171): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 283.177057ms ago: executing program 3 (id=14172): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000800)={'security\x00', 0x4, "38b15cb0"}, &(0x7f00000008c0)=0x2c) 203.974948ms ago: executing program 2 (id=14173): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x300, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x268, 0x206, 0x240, 0x268, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0xf0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@addrtype={{0x30}, {0xb07, 0x302, 0x20, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffffff, 'macvlan0\x00', 'dvmrp0\x00', {0xff}, {}, 0x6, 0x2, 0x4a}, 0x0, 0x110, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bridge_slave_1\x00', {0x21, 0xfffffffe, 0x0, 0xc, 0x0, 0x531aeecb, 0xc07, 0x0, 0x18}, {0xfff}}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@private0, [0xff, 0xffffff00], 0x4e22, 0x2b, 0x2, 0x4e20, 0x8, 0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x3, 0x3, 0xd, '\x00', 'syz0\x00', {0x54}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 173.534986ms ago: executing program 0 (id=14174): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 58.405015ms ago: executing program 5 (id=14175): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x260, 0x328, 0x0, 0x98, 0x130, 0x1c8, 0x328, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f0) 155.45µs ago: executing program 3 (id=14176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 0s ago: executing program 2 (id=14177): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000240)) kernel console output (not intermixed with test programs): nux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 886.428796][ T26] audit: type=1326 audit(1700004009.599:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29714 comm="syz.6.11503" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 886.528349][ T26] audit: type=1326 audit(1700004009.599:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29714 comm="syz.6.11503" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 886.528787][ T4335] usb 3-1: Can't get UAC3 power state for id 10 [ 886.651102][ T26] audit: type=1326 audit(1700004009.599:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29714 comm="syz.6.11503" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 886.680051][ T4335] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 886.694157][T29694] loop3: detected capacity change from 0 to 40427 [ 886.736340][ T4335] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 886.842564][ T4335] usb 3-1: USB disconnect, device number 90 [ 887.171612][T29733] loop5: detected capacity change from 0 to 256 [ 887.220840][T29733] exfat: Deprecated parameter 'namecase' [ 887.226538][T29733] exfat: Deprecated parameter 'namecase' [ 887.314987][T29733] exfat: Deprecated parameter 'namecase' [ 887.382591][T29733] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 887.497817][T29740] IPVS: Error joining to the multicast group [ 887.750089][T29721] loop6: detected capacity change from 0 to 32768 [ 887.943174][T29721] XFS (loop6): Mounting V5 Filesystem [ 888.089206][T29721] XFS (loop6): Ending clean mount [ 888.177568][T24346] XFS (loop6): Unmounting Filesystem [ 888.477028][T29777] SET target dimension over the limit! [ 888.628318][T29783] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11532'. [ 888.677463][T29783] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11532'. [ 889.786682][T29822] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11549'. [ 890.235508][T29839] ecryptfs_parse_options: eCryptfs: unrecognized option [ecrypt456789abcdef] [ 890.266588][T29839] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 890.303451][T29839] Error parsing options; rc = [-22] [ 892.143615][T29909] loop3: detected capacity change from 0 to 64 [ 892.143807][T29908] loop0: detected capacity change from 0 to 512 [ 892.220691][ T4263] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 892.259182][T29908] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 892.322474][T29908] ext4 filesystem being mounted at /2349/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 892.485834][T29908] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.11586: corrupted inode contents [ 892.577902][T29908] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #2: comm syz.0.11586: mark_inode_dirty error [ 892.621179][T29908] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.11586: bg 0: block 401: padding at end of block bitmap is not set [ 892.883549][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 893.856121][T29957] loop3: detected capacity change from 0 to 256 [ 893.965958][ T4263] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 894.000168][T29934] loop6: detected capacity change from 0 to 32768 [ 894.087501][T29934] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 894.513056][ T4262] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 895.417322][T29970] loop5: detected capacity change from 0 to 32768 [ 895.486513][T29970] [ 895.486513][T29970] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 895.486513][T29970] [ 895.543029][T29970] ERROR: (device loop5): xtTruncate: XT_GETPAGE: xtree page corrupt [ 895.543029][T29970] [ 895.662360][T29970] ERROR: (device loop5): remounting filesystem as read-only [ 896.298459][T30030] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 896.491894][T30037] netlink: 'syz.2.11647': attribute type 21 has an invalid length. [ 897.200154][ T153] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 897.435047][ T153] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 897.456043][ T153] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 897.496737][ T153] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.545746][ T153] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.586895][ T153] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 897.617593][ T153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.662139][ T153] ims_pcu: probe of 3-1:1.0 failed with error -22 [ 897.756496][T30057] loop3: detected capacity change from 0 to 32768 [ 897.814502][ T4263] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 897.891992][ T153] usb 3-1: USB disconnect, device number 91 [ 898.876938][ T153] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 898.969106][T30107] x_tables: unsorted underflow at hook 3 [ 899.098673][ T153] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 899.118681][ T153] usb 4-1: config 0 has no interface number 0 [ 899.146002][ T153] usb 4-1: config 0 interface 41 has no altsetting 0 [ 899.170317][ T153] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 899.204413][ T153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.230898][ T153] usb 4-1: Product: syz [ 899.243059][ T153] usb 4-1: Manufacturer: syz [ 899.258463][ T153] usb 4-1: SerialNumber: syz [ 899.278983][ T153] usb 4-1: config 0 descriptor?? [ 899.513497][ T153] CoreChips: probe of 4-1:0.41 failed with error -71 [ 899.538244][ T153] usb 4-1: USB disconnect, device number 59 [ 899.877044][T30140] openvswitch: netlink: Message has 4 unknown bytes. [ 900.007833][ T41] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 900.215446][ T41] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 900.252447][ T41] usb 6-1: config 1 interface 1 has no altsetting 0 [ 900.276768][T30153] 0x000000000000-0x000000020000 : "" [ 900.278820][T30155] loop3: detected capacity change from 0 to 512 [ 900.294198][ T41] usb 6-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 900.320048][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.336084][T30153] ftl_cs: FTL header not found. [ 900.342167][ T41] usb 6-1: Product: syz [ 900.355855][T30155] /dev/loop3: Can't open blockdev [ 900.365419][ T41] usb 6-1: Manufacturer: syz [ 900.379582][ T41] usb 6-1: SerialNumber: syz [ 900.464222][ T4260] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 900.633820][ T41] usb 6-1: selecting invalid altsetting 0 [ 900.661785][ T41] usb 6-1: Can't get UAC3 power state for id 10 [ 900.700696][ T41] usb 6-1: selecting invalid altsetting 0 [ 900.725971][ T41] usb 6-1: selecting invalid altsetting 0 [ 900.805038][ T41] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 900.864753][ T41] usb 6-1: USB disconnect, device number 8 [ 900.889673][ T6302] udevd[6302]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 901.310335][T30184] netlink: 'syz.2.11719': attribute type 10 has an invalid length. [ 901.318296][T30184] team0: Device bridge0 is already an upper device of the team interface [ 901.988986][T30202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11728'. [ 902.045757][T30182] loop6: detected capacity change from 0 to 32768 [ 902.164517][ T153] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 902.181375][T30188] loop5: detected capacity change from 0 to 40427 [ 902.193079][T30182] XFS (loop6): Mounting V5 Filesystem [ 902.256774][T30188] F2FS-fs (loop5): build fault injection attr: rate: 14, type: 0x3ffff [ 902.278152][T30188] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x30e4 [ 902.334019][T30188] F2FS-fs (loop5): invalid crc value [ 902.396167][ T153] usb 3-1: not running at top speed; connect to a high speed hub [ 902.417074][T30182] XFS (loop6): Ending clean mount [ 902.431676][T30188] F2FS-fs (loop5): Found nat_bits in checkpoint [ 902.442421][ T153] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 902.467180][T30182] XFS (loop6): Quotacheck needed: Please wait. [ 902.483521][ T153] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 902.519803][ T153] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 902.559644][ T153] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 902.580020][T30188] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00 [ 902.583464][T30182] XFS (loop6): Quotacheck: Done. [ 902.638762][ T153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.672353][T30188] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 902.698862][ T153] gspca_main: spca501-2.14.0 probing 0000:0000 [ 902.731274][T24346] XFS (loop6): Unmounting Filesystem [ 902.841444][T30188] F2FS-fs (loop5) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20 [ 902.858866][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 902.915181][ T153] gspca_spca501: reg write: error -71 [ 902.920591][ T153] spca501 3-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 902.941131][ T153] spca501: probe of 3-1:1.0 failed with error -22 [ 902.979059][ T153] usb 3-1: USB disconnect, device number 92 [ 903.419474][T30236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11739'. [ 904.107144][T30262] loop6: detected capacity change from 0 to 16 [ 904.196196][T30262] erofs: (device loop6): mounted with root inode @ nid 36. [ 904.302728][T30262] syz.6.11751: attempt to access beyond end of device [ 904.302728][T30262] loop6: rw=0, sector=15300821024, nr_sectors = 8 limit=16 [ 904.436425][T30262] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 904.539861][T30274] netlink: 'syz.5.11758': attribute type 11 has an invalid length. [ 904.551513][T30276] CacheFiles: No cache directory specified [ 904.587237][T30274] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11758'. [ 904.768521][T30284] netlink: 'syz.3.11762': attribute type 2 has an invalid length. [ 905.179781][T30302] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 905.914725][ T153] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 906.134635][T30306] loop5: detected capacity change from 0 to 32768 [ 906.140686][ T153] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 906.157934][T30306] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.11773 (30306) [ 906.171148][ T153] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 906.200807][ T153] usb 3-1: Product: syz [ 906.211522][ T153] usb 3-1: SerialNumber: syz [ 906.235638][ T153] usb 3-1: config 0 descriptor?? [ 906.284657][T30306] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 906.318630][T30306] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 906.343792][T30306] BTRFS info (device loop5): using free space tree [ 906.621940][ T153] hso 3-1:0.0: Failed to find BULK IN ep [ 906.702412][ T153] usb 3-1: USB disconnect, device number 93 [ 906.898883][T30306] BTRFS info (device loop5): enabling ssd optimizations [ 907.069158][T30373] bridge0: port 4(batadv0) entered blocking state [ 907.075629][T24163] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 907.088237][T30373] bridge0: port 4(batadv0) entered disabled state [ 907.114723][T30373] device batadv0 entered promiscuous mode [ 907.155626][T30373] bridge0: port 4(batadv0) entered blocking state [ 907.162181][T30373] bridge0: port 4(batadv0) entered forwarding state [ 907.174015][ T9] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 907.184352][ T9] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 907.850327][T30394] netlink: 'syz.5.11798': attribute type 10 has an invalid length. [ 907.888934][T30394] team0: Device bridge0 is already an upper device of the team interface [ 907.958369][T30398] libceph: resolve 'c' (ret=-3): failed [ 908.070785][T30402] netlink: 132 bytes leftover after parsing attributes in process `syz.6.11812'. [ 908.095383][T30402] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11812'. [ 908.137840][T30402] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11812'. [ 908.168702][T30402] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11812'. [ 908.302992][ T26] audit: type=1326 audit(1700004030.415:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30410 comm="syz.0.11816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d8b9e159 code=0x7ffc0000 [ 908.363957][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 908.394784][ T26] audit: type=1326 audit(1700004030.415:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30410 comm="syz.0.11816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fd8d8b9e159 code=0x7ffc0000 [ 908.522514][ T26] audit: type=1326 audit(1700004030.415:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30410 comm="syz.0.11816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d8b9e159 code=0x7ffc0000 [ 908.638133][ T26] audit: type=1326 audit(1700004030.415:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30410 comm="syz.0.11816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d8b9e159 code=0x7ffc0000 [ 908.796918][T30431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11825'. [ 909.366962][ T4311] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 909.568186][T30420] loop0: detected capacity change from 0 to 40427 [ 909.576737][ T4311] usb 6-1: Using ep0 maxpacket: 32 [ 909.586452][ T4311] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 909.634287][T30420] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x3ffff [ 909.642670][ T4311] usb 6-1: config 0 has no interface number 0 [ 909.668305][ T4311] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 909.698734][T30420] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x30e4 [ 909.706927][ T4311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.729804][T30420] F2FS-fs (loop0): invalid crc value [ 909.739273][ T4311] usb 6-1: Product: syz [ 909.750047][ T4311] usb 6-1: Manufacturer: syz [ 909.760821][ T4311] usb 6-1: SerialNumber: syz [ 909.797398][ T4311] usb 6-1: config 0 descriptor?? [ 909.807883][ T4311] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 909.831224][T30420] F2FS-fs (loop0): Found nat_bits in checkpoint [ 909.871630][ T4311] usb 6-1: selecting invalid altsetting 1 [ 909.877401][ T4311] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 909.910318][T30420] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00 [ 909.936673][ T4311] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 909.995456][ T4311] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 910.056222][ T4311] usb 6-1: media controller created [ 910.093837][T30420] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 910.150445][ T4311] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 910.261030][T30420] F2FS-fs (loop0) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20 [ 910.282436][ T4311] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 910.308105][ T4311] zl10353_read_register: readreg error (reg=127, ret==-71) [ 910.340829][ T4311] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 910.450033][ T4311] usb 6-1: USB disconnect, device number 9 [ 910.582324][T30472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11845'. [ 910.839318][T30457] loop3: detected capacity change from 0 to 32768 [ 910.926295][ T4263] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 910.936943][T30480] netlink: 'syz.5.11848': attribute type 3 has an invalid length. [ 911.996207][T30513] loop0: detected capacity change from 0 to 2048 [ 912.073530][T30513] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 912.111380][T30519] Scaler: ================= START STATUS ================= [ 912.148339][T30519] Scaler: ================== END STATUS ================== [ 912.366107][T30529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11870'. [ 912.760964][T30547] cgroup: none used incorrectly [ 912.848519][T30550] bridge0: port 4(batadv0) entered blocking state [ 912.930388][T30550] bridge0: port 4(batadv0) entered disabled state [ 912.981293][T30550] device batadv0 entered promiscuous mode [ 913.283066][ T9] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 913.292641][ T9] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 913.574406][T30581] netlink: 'syz.2.11897': attribute type 21 has an invalid length. [ 914.560480][T30620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11916'. [ 915.160893][ T6760] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 915.403490][ T6760] usb 6-1: unable to get BOS descriptor or descriptor too short [ 915.425874][ T6760] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 915.486074][ T6760] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 915.528364][ T6760] usb 6-1: config 1 interface 1 altsetting 2 endpoint 0x1 has invalid maxpacket 9325, setting to 1024 [ 915.581652][ T6760] usb 6-1: config 1 interface 1 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 915.601473][T30642] netlink: 'syz.2.11928': attribute type 1 has an invalid length. [ 915.632711][ T6760] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 915.695658][ T6760] usb 6-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 915.726501][ T6760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.743241][ T6760] usb 6-1: Product: syz [ 915.747433][ T6760] usb 6-1: Manufacturer: syz [ 915.773689][ T6760] usb 6-1: SerialNumber: syz [ 915.792457][T30644] sock: sock_timestamping_bind_phc: sock not bind to device [ 915.967677][T30638] loop6: detected capacity change from 0 to 32768 [ 916.004789][T30638] JBD2: Ignoring recovery information on journal [ 916.008097][ T6760] usb 6-1: 1:2 : no or invalid class specific endpoint descriptor [ 916.048078][ T6760] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 916.085296][ T6760] usb 6-1: unit 2 not found! [ 916.097694][ T6760] usb 6-1: unit 8 not found! [ 916.154693][ T6760] usb 6-1: USB disconnect, device number 10 [ 916.213194][T30638] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 916.449267][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 916.478039][T24346] ocfs2: Unmounting device (7,6) on (node local) [ 917.396550][T30693] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 917.676281][ T26] audit: type=1326 audit(1700004039.190:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30706 comm="syz.6.11959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc01799e159 code=0x0 [ 918.606324][T30747] (unnamed net_device) (uninitialized): up delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 918.687756][T30747] (unnamed net_device) (uninitialized): down delay (128) is not a multiple of miimon (100), value rounded to 100 ms [ 918.978103][T30762] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11986'. [ 918.987179][T30762] : renamed from virt_wifi0 [ 919.882481][T30801] loop0: detected capacity change from 0 to 1024 [ 920.470902][T30822] loop0: detected capacity change from 0 to 64 [ 921.206161][T30848] loop0: detected capacity change from 0 to 4096 [ 921.350265][T30848] NILFS (loop0): the device already has a read-only mount. [ 921.508831][T30862] loop6: detected capacity change from 0 to 1024 [ 921.927424][T30877] loop3: detected capacity change from 0 to 256 [ 922.062775][ T4262] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 922.296684][T30893] loop3: detected capacity change from 0 to 512 [ 922.318199][ T4262] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 922.356345][T30893] EXT4-fs: Ignoring removed i_version option [ 922.362481][T30893] /dev/loop3: Can't open blockdev [ 922.971415][T30917] netlink: 'syz.0.12063': attribute type 49 has an invalid length. [ 923.029467][T30917] bridge0: port 2(ip6gretap0) entered disabled state [ 923.142874][T30917] device ip6gretap0 left promiscuous mode [ 923.173754][T30917] bridge0: port 2(ip6gretap0) entered disabled state [ 923.732647][T30943] netlink: 'syz.6.12075': attribute type 1 has an invalid length. [ 923.789175][T30943] netlink: 216 bytes leftover after parsing attributes in process `syz.6.12075'. [ 923.831873][T30943] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12075'. [ 924.079288][T30957] MTD: Couldn't look up 'mtd0/file0': -2 [ 924.522184][T30975] overlayfs: failed to resolve './file0': -2 [ 925.322299][T31009] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 925.445192][T31011] netlink: 36 bytes leftover after parsing attributes in process `syz.6.12103'. [ 925.696648][T31022] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 925.890291][T31026] loop5: detected capacity change from 0 to 512 [ 925.933656][T31026] EXT4-fs: Ignoring removed i_version option [ 925.980291][T31026] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003e01c, mo2=0002] [ 926.001815][T31026] System zones: 1-12 [ 926.032270][T31026] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 33261: comm syz.5.12110: invalid block [ 926.104639][T31026] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.12110: invalid indirect mapped block 8 (level 2) [ 926.148041][T31026] EXT4-fs (loop5): 1 truncate cleaned up [ 926.173432][T31026] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 926.431267][T24163] EXT4-fs (loop5): unmounting filesystem. [ 927.381386][T31077] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 927.968917][T31100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12138'. [ 928.069640][T31100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12138'. [ 928.594319][T31085] loop6: detected capacity change from 0 to 32768 [ 928.614672][T31120] netlink: 'syz.5.12147': attribute type 49 has an invalid length. [ 928.684632][T31085] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.12132 (31085) [ 928.786524][T31127] xt_TPROXY: Can be used only with -p tcp or -p udp [ 928.793499][T31085] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 928.838294][T31085] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 928.887518][T31085] BTRFS info (device loop6): force zlib compression, level 3 [ 928.912625][T31085] BTRFS info (device loop6): turning on flush-on-commit [ 928.970035][T31085] BTRFS info (device loop6): max_inline at 4096 [ 929.051735][T31085] BTRFS info (device loop6): using free space tree [ 929.469542][T31085] BTRFS info (device loop6): enabling ssd optimizations [ 929.622275][T24346] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 930.586330][T31206] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12180'. [ 931.033230][T31222] loop3: detected capacity change from 0 to 512 [ 931.063413][T31222] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 931.079180][T31222] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 931.125723][T31222] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 931.175243][T31222] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 931.244816][T31222] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 931.266703][T31222] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e042e01c, mo2=0000] [ 931.309926][T31222] EXT4-fs (loop3): failed to initialize system zone (-117) [ 931.368547][T31222] EXT4-fs (loop3): mount failed [ 932.116125][ T4311] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 932.180284][T31268] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.340651][ T4311] usb 4-1: Using ep0 maxpacket: 8 [ 932.378539][ T4311] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 932.394295][ T4311] usb 4-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 932.430743][ T4311] usb 4-1: config 0 has no interface number 0 [ 932.469528][ T4311] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 102, changing to 10 [ 932.526060][ T4311] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24624, setting to 1024 [ 932.564015][ T4311] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 932.593564][T31284] netlink: 'syz.5.12219': attribute type 1 has an invalid length. [ 932.621609][ T4311] usb 4-1: config 0 interface 52 has no altsetting 0 [ 932.688426][ T4311] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 932.720224][ T4311] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 932.757730][ T4311] usb 4-1: Manufacturer: syz [ 932.799581][ T4311] usb 4-1: config 0 descriptor?? [ 932.813280][ T4311] hub 4-1:0.52: bad descriptor, ignoring hub [ 932.830181][ T4311] hub: probe of 4-1:0.52 failed with error -5 [ 933.035470][T31301] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.12227'. [ 933.042102][ T4311] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input75 [ 933.044732][T31301] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.12227'. [ 933.473989][ T4311] usb 4-1: USB disconnect, device number 60 [ 933.699724][T31323] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 934.029330][T31337] xt_hashlimit: max too large, truncated to 1048576 [ 935.098195][T31380] program syz.0.12265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 935.120146][T31386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12266'. [ 935.519687][T31397] netlink: 'syz.2.12274': attribute type 30 has an invalid length. [ 935.588063][T31401] loop0: detected capacity change from 0 to 1024 [ 935.680760][T31401] EXT4-fs: Ignoring removed bh option [ 935.783697][T31401] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 935.987080][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 936.074053][T31423] SET target dimension over the limit! [ 936.550947][T31445] netlink: 'syz.5.12295': attribute type 30 has an invalid length. [ 936.713186][ T4311] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 936.966973][ T4311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 936.991460][ T4311] usb 4-1: not running at top speed; connect to a high speed hub [ 937.043384][ T4311] usb 4-1: config 1 interface 0 altsetting 248 endpoint 0x81 has invalid maxpacket 6821, setting to 64 [ 937.108524][ T4311] usb 4-1: config 1 interface 0 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 937.154211][ T4311] usb 4-1: config 1 interface 0 has no altsetting 0 [ 937.196299][ T4311] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 937.215938][ T4311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.253733][ T4311] usb 4-1: Product: syz [ 937.257949][ T4311] usb 4-1: Manufacturer: syz [ 937.275301][T31470] loop6: detected capacity change from 0 to 16 [ 937.304730][ T4311] usb 4-1: SerialNumber: syz [ 937.343351][T31440] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 937.540368][T31479] netlink: 'syz.6.12310': attribute type 8 has an invalid length. [ 937.572233][T31479] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12310'. [ 937.596175][ T4311] usbhid 4-1:1.0: can't add hid device: -71 [ 937.615202][ T4311] usbhid: probe of 4-1:1.0 failed with error -71 [ 937.643197][ T4311] usb 4-1: USB disconnect, device number 61 [ 938.564648][T31521] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551613) [ 938.716101][T31521] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 938.906807][T31533] netlink: 76 bytes leftover after parsing attributes in process `syz.6.12332'. [ 939.480830][T31564] loop0: detected capacity change from 0 to 512 [ 939.588531][T31564] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.12345: bad orphan inode 15 [ 939.624358][T31564] ext4_test_bit(bit=14, block=5) = 0 [ 939.666133][T31564] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 939.758256][T31564] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 939.821844][T31564] EXT4-fs error (device loop0): ext4_free_inode:355: comm syz.0.12345: bit already cleared for inode 13 [ 940.048534][T31583] netlink: 'syz.6.12352': attribute type 30 has an invalid length. [ 940.063503][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 940.218409][T31589] loop3: detected capacity change from 0 to 1024 [ 940.477444][ T4263] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 940.667209][T31605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12361'. [ 940.884962][T31613] loop6: detected capacity change from 0 to 1024 [ 940.956212][ T26] audit: type=1800 audit(1700004060.957:353): pid=31613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.12365" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 941.482959][T31635] loop6: detected capacity change from 0 to 1764 [ 941.566620][T31641] xt_hashlimit: max too large, truncated to 1048576 [ 941.573254][T31641] xt_hashlimit: overflow, try lower: 2/0 [ 941.590384][T31635] syz.6.12376: attempt to access beyond end of device [ 941.590384][T31635] loop6: rw=0, sector=7180648572, nr_sectors = 4 limit=1764 [ 941.653296][T31635] Buffer I/O error on dev loop6, logical block 1795162143, async page read [ 941.698993][T31646] netlink: 'syz.0.12381': attribute type 8 has an invalid length. [ 941.716493][T31635] syz.6.12376: attempt to access beyond end of device [ 941.716493][T31635] loop6: rw=0, sector=7180648572, nr_sectors = 4 limit=1764 [ 941.725823][T31646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12381'. [ 941.820660][T31635] Buffer I/O error on dev loop6, logical block 1795162143, async page read [ 941.877600][ T26] audit: type=1800 audit(1700004061.827:354): pid=31635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.12376" name="file0" dev="loop6" ino=1923 res=0 errno=0 [ 942.024061][T31659] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12387'. [ 942.573867][T31678] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12395'. [ 943.004936][T31657] loop3: detected capacity change from 0 to 32768 [ 943.029949][T31657] /dev/loop3: Can't open blockdev [ 943.740515][T31718] device macsec0 entered promiscuous mode [ 944.032309][T31725] Cannot find add_set index 65532 as target [ 944.645300][T31719] loop3: detected capacity change from 0 to 32768 [ 945.025099][ T4263] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by udevd (4263) [ 945.096189][T31760] ieee802154 phy1 wpan1: encryption failed: -90 [ 945.226687][ T26] audit: type=1326 audit(1700004064.960:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31765 comm="syz.5.12430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e46d9e159 code=0x0 [ 945.738248][T31784] ipt_ECN: cannot use operation on non-tcp rule [ 946.409253][T31802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12448'. [ 947.201391][ T26] audit: type=1326 audit(1700004066.803:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31831 comm="syz.6.12464" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 947.289771][ T26] audit: type=1326 audit(1700004066.831:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31831 comm="syz.6.12464" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 947.403719][ T26] audit: type=1326 audit(1700004066.840:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31831 comm="syz.6.12464" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 947.489363][ T26] audit: type=1326 audit(1700004066.840:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31831 comm="syz.6.12464" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 947.598830][ T26] audit: type=1326 audit(1700004066.840:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31831 comm="syz.6.12464" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 949.114596][ T153] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 949.350959][T31922] xt_connbytes: Forcing CT accounting to be enabled [ 949.357907][T31922] set match dimension is over the limit! [ 949.372751][ T153] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 949.381038][ T153] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 949.445489][ T153] usb 6-1: config 220 has no interface number 2 [ 949.452191][ T153] usb 6-1: config 220 interface 1 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 56 [ 949.492296][ T153] usb 6-1: config 220 interface 1 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 949.523775][ T153] usb 6-1: config 220 interface 1 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 949.568746][ T153] usb 6-1: config 220 interface 0 has no altsetting 0 [ 949.593900][ T153] usb 6-1: config 220 interface 76 has no altsetting 0 [ 949.638432][ T153] usb 6-1: config 220 interface 1 has no altsetting 0 [ 949.685030][ T153] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 949.702265][T31932] device macsec0 entered promiscuous mode [ 949.720500][ T153] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.745771][ T153] usb 6-1: Product: syz [ 949.752831][ T153] usb 6-1: Manufacturer: syz [ 949.774365][ T153] usb 6-1: SerialNumber: syz [ 949.975083][T31942] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12517'. [ 949.984279][T31942] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12517'. [ 950.029084][ T153] usb 6-1: selecting invalid altsetting 0 [ 950.053900][ T153] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 950.088365][ T153] usb 6-1: No valid video chain found. [ 950.152091][ T153] usb 6-1: selecting invalid altsetting 0 [ 950.157867][ T153] usbtest: probe of 6-1:220.1 failed with error -22 [ 950.243089][ T153] usb 6-1: USB disconnect, device number 11 [ 950.706954][ T6760] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 950.736421][T31968] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12531'. [ 950.760502][T31968] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12531'. [ 950.795849][T31968] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12531'. [ 950.947839][ T6760] usb 3-1: Using ep0 maxpacket: 16 [ 950.955100][ T6760] usb 3-1: unable to get BOS descriptor or descriptor too short [ 950.982528][T31976] nvme_rdma: malformed address passed: 1:4420 [ 950.985460][ T6760] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 951.031149][ T6760] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 951.049653][ T6760] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 951.087100][ T6760] usb 3-1: string descriptor 0 read error: -22 [ 951.102771][ T6760] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 951.122653][ T6760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.416296][ T6760] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 951.463780][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 951.593078][T31999] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.625000][T31999] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.643499][T31999] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.672069][ T6760] usb 3-1: USB disconnect, device number 94 [ 951.707407][T31999] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.722665][T31999] device geneve2 entered promiscuous mode [ 951.755404][ T4335] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 952.140146][ T6757] kworker/dying (6757) used greatest stack depth: 16304 bytes left [ 952.365259][ T26] audit: type=1326 audit(1700004071.639:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32025 comm="syz.6.12559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 952.460231][ T26] audit: type=1326 audit(1700004071.658:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32025 comm="syz.6.12559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 952.577832][ T26] audit: type=1326 audit(1700004071.658:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32025 comm="syz.6.12559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 952.684847][ T26] audit: type=1326 audit(1700004071.658:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32025 comm="syz.6.12559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 952.807998][ T26] audit: type=1326 audit(1700004071.658:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32025 comm="syz.6.12559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 952.973365][ T26] audit: type=1326 audit(1700004071.658:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32025 comm="syz.6.12559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 953.029275][T32050] loop6: detected capacity change from 0 to 256 [ 953.057118][ T26] audit: type=1326 audit(1700004071.658:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32025 comm="syz.6.12559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 953.109062][T32050] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 953.180267][ T26] audit: type=1326 audit(1700004071.658:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32025 comm="syz.6.12559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 953.204429][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.256271][ T6760] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 953.307166][ T26] audit: type=1326 audit(1700004071.658:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32025 comm="syz.6.12559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 953.353922][T32058] loop5: detected capacity change from 0 to 128 [ 953.487423][ T6760] usb 3-1: Using ep0 maxpacket: 8 [ 953.494235][ T6760] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 953.525368][ T6760] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.557871][ T6760] usb 3-1: config 0 has no interface number 0 [ 953.564155][T32064] netlink: 'syz.3.12577': attribute type 15 has an invalid length. [ 953.582752][ T6760] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 953.608897][T32064] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 6081 - 0 [ 953.618440][T32064] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 6081 - 0 [ 953.627167][T32064] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 6081 - 0 [ 953.635873][T32064] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 6081 - 0 [ 953.644763][ T6760] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 953.650407][T15545] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 953.666244][ T6760] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 953.700313][ T6760] usb 3-1: config 0 interface 52 has no altsetting 0 [ 953.719433][ T6760] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 953.739916][ T6760] usb 3-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 953.761413][ T6760] usb 3-1: Product: syz [ 953.772158][ T6760] usb 3-1: SerialNumber: syz [ 953.805206][ T6760] usb 3-1: config 0 descriptor?? [ 953.862289][T15545] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 953.883427][T15545] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 953.899429][ T26] audit: type=1400 audit(1700004073.070:370): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=32071 comm="syz.5.12582" [ 953.928829][T15545] usb 7-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 953.957706][T15545] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.976681][T15545] usb 7-1: Product: syz [ 953.987274][T15545] usb 7-1: Manufacturer: syz [ 953.997010][T15545] usb 7-1: SerialNumber: syz [ 954.030300][ T6760] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 954.043629][T15545] usb-storage 7-1:1.0: USB Mass Storage device detected [ 954.061379][ T6760] synaptics_usb: probe of 3-1:0.52 failed with error -5 [ 954.106916][T15545] usb-storage 7-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 954.149599][T15545] scsi host1: usb-storage 7-1:1.0 [ 954.257234][T15545] usb 7-1: USB disconnect, device number 9 [ 954.289286][T32087] netlink: 44 bytes leftover after parsing attributes in process `syz.5.12588'. [ 954.298427][T32087] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12588'. [ 954.314963][ T6760] usb 3-1: USB disconnect, device number 95 [ 954.352648][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 955.691814][T32139] program syz.2.12614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 955.832524][T32142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12615'. [ 956.352325][T32163] UBIFS error (pid: 32163): cannot open "(null)", error -22 [ 956.418305][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 956.598181][T32173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 956.618896][T15545] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 956.843460][T15545] usb 7-1: Using ep0 maxpacket: 32 [ 956.850469][T15545] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.901258][T15545] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.934638][T15545] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 956.999814][T15545] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 957.047084][T15545] usb 7-1: Product: syz [ 957.051287][T15545] usb 7-1: Manufacturer: syz [ 957.061822][T32189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12640'. [ 957.085443][T15545] hub 7-1:4.0: USB hub found [ 957.302661][T15545] hub 7-1:4.0: config failed, hub has too many ports! (err -19) [ 957.656073][T15545] usb 7-1: USB disconnect, device number 10 [ 958.427735][T32240] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 958.453145][T32240] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 958.506662][T32240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.541433][T32240] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.570807][T32240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 958.915028][T32252] loop5: detected capacity change from 0 to 4096 [ 958.925530][T32258] loop6: detected capacity change from 0 to 1764 [ 958.998106][T32258] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 959.283465][T32268] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12679'. [ 959.382441][T32270] cgroup: Name too long [ 959.539178][T32276] netlink: 'syz.6.12682': attribute type 10 has an invalid length. [ 959.585948][T32276] device veth1_macvtap left promiscuous mode [ 959.901025][ T6760] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 960.151972][ T6760] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 960.168142][ T6760] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 960.220327][ T6760] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.688586][T32311] netlink: 'syz.0.12699': attribute type 15 has an invalid length. [ 960.690038][ T6760] qmi_wwan: probe of 6-1:1.0 failed with error -22 [ 960.738602][ T6760] usb 6-1: USB disconnect, device number 12 [ 962.386729][T32376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12731'. [ 962.400514][T32373] ipt_REJECT: TCP_RESET invalid for non-tcp [ 962.945150][T32362] loop6: detected capacity change from 0 to 32768 [ 963.041982][T32395] loop3: detected capacity change from 0 to 2048 [ 963.101274][T32362] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 963.119054][ T4311] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 963.125880][T32362] (syz.6.12724,32362,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=0, rec_len=2, name_len=0 [ 963.161777][ T4263] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 963.200880][T32362] (syz.6.12724,32362,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 963.212105][T32403] loop0: detected capacity change from 0 to 64 [ 963.218915][T32362] (syz.6.12724,32362,1):ocfs2_symlink:1871 ERROR: status = -2 [ 963.232774][T32362] (syz.6.12724,32362,1):ocfs2_symlink:2072 ERROR: status = -2 [ 963.327267][ T4311] usb 6-1: config 2 has an invalid interface number: 79 but max is 0 [ 963.357397][ T4311] usb 6-1: config 2 has no interface number 0 [ 963.363518][ T4311] usb 6-1: config 2 interface 79 has no altsetting 0 [ 963.408537][ T4311] usb 6-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 963.473681][T24346] ocfs2: Unmounting device (7,6) on (node local) [ 963.480283][ T4311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.523371][ T4311] usb 6-1: Product: syz [ 963.534195][ T4311] usb 6-1: Manufacturer: syz [ 963.547344][T32411] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.555770][ T4311] usb 6-1: SerialNumber: syz [ 963.805748][ T4311] esd_usb 6-1:2.79: sending version message failed [ 963.806287][T32418] loop0: detected capacity change from 0 to 16 [ 963.819466][ T4311] esd_usb: probe of 6-1:2.79 failed with error -22 [ 963.868808][ T4311] usb 6-1: USB disconnect, device number 13 [ 963.878560][T32418] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 964.258745][T32432] loop0: detected capacity change from 0 to 2048 [ 964.342878][T32432] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 964.817131][T32448] loop6: detected capacity change from 0 to 4096 [ 965.288793][T32464] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12775'. [ 965.340672][T32464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12775'. [ 965.753134][T32482] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 965.802366][T32482] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 965.810594][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 965.825710][T32482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.846376][T32482] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.888648][T32482] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 965.990777][T32493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12787'. [ 966.089421][T32498] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 966.700196][T32519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12799'. [ 966.709278][T32519] netlink: 'syz.0.12799': attribute type 3 has an invalid length. [ 966.739054][T32523] netlink: 'syz.3.12801': attribute type 2 has an invalid length. [ 966.988902][ T6760] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 967.194294][T32542] xt_bpf: check failed: parse error [ 967.221247][ T6760] usb 3-1: Using ep0 maxpacket: 16 [ 967.230065][ T6760] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 967.279022][ T6760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.287057][ T6760] usb 3-1: Product: syz [ 967.330842][ T6760] usb 3-1: Manufacturer: syz [ 967.354721][ T6760] usb 3-1: SerialNumber: syz [ 967.382355][ T6760] r8152-cfgselector 3-1: config 0 descriptor?? [ 967.528590][T32556] loop5: detected capacity change from 0 to 64 [ 967.555938][T32554] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.563094][T32554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 967.570565][T32554] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.577693][T32554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.684350][T32554] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 967.748499][T32554] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 967.818014][T32554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 967.846368][ T6760] r8152-cfgselector 3-1: Unknown version 0x0000 [ 967.871683][ T6760] r8152-cfgselector 3-1: USB disconnect, device number 96 [ 967.913868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 968.203045][T32575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12828'. [ 968.244706][T32578] program syz.3.12829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 968.266489][T32580] loop5: detected capacity change from 0 to 16 [ 968.316138][T32580] erofs: (device loop5): erofs_read_superblock: dirblkbits 1 isn't supported [ 968.761080][ T26] audit: type=1326 audit(1700004086.970:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32596 comm="syz.2.12838" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b0b9e159 code=0x7ffc0000 [ 968.839486][ T26] audit: type=1326 audit(1700004086.970:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32596 comm="syz.2.12838" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b0b9e159 code=0x7ffc0000 [ 968.870518][T32599] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 968.912273][T32599] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 968.945209][ T26] audit: type=1326 audit(1700004086.970:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32596 comm="syz.2.12838" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b0b9e159 code=0x7ffc0000 [ 968.956118][T32599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 969.010750][T32599] 8021q: adding VLAN 0 to HW filter on device team0 [ 969.052369][ T26] audit: type=1326 audit(1700004086.970:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32596 comm="syz.2.12838" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fd1b0b9e159 code=0x7ffc0000 [ 969.095334][T32599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 969.158974][ T26] audit: type=1326 audit(1700004086.970:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32596 comm="syz.2.12838" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b0b9e159 code=0x7ffc0000 [ 969.266197][ T26] audit: type=1326 audit(1700004086.970:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32596 comm="syz.2.12838" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b0b9e159 code=0x7ffc0000 [ 969.348723][ T26] audit: type=1326 audit(1700004086.970:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32596 comm="syz.2.12838" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd1b0b9e159 code=0x7ffc0000 [ 969.465232][ T26] audit: type=1326 audit(1700004086.970:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32596 comm="syz.2.12838" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd1b0b9e159 code=0x7ffc0000 [ 969.483434][T32593] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 969.506703][T32587] loop3: detected capacity change from 0 to 32768 [ 969.824557][T32622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12850'. [ 970.131526][T32628] tmpfs: Bad value for 'size' [ 970.311301][T32609] loop0: detected capacity change from 0 to 32768 [ 970.342143][T32609] ERROR: (device loop0): diAllocAG: numfree > numinos [ 970.342143][T32609] [ 970.373981][T32609] ERROR: (device loop0): remounting filesystem as read-only [ 970.432610][T32609] ialloc: diAlloc returned -5! [ 970.728306][T32643] loop3: detected capacity change from 0 to 2048 [ 970.788021][T32649] netlink: 'syz.2.12863': attribute type 29 has an invalid length. [ 970.795959][T32643] /dev/loop3: Can't open blockdev [ 970.856997][T32649] netlink: 'syz.2.12863': attribute type 29 has an invalid length. [ 970.865453][ T4281] Bluetooth: hci0: command 0x080f tx timeout [ 970.940426][ T4263] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 971.460362][T32670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12873'. [ 971.610837][T32675] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12876'. [ 971.660647][T32675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12876'. [ 971.904153][T32689] netlink: 1033 bytes leftover after parsing attributes in process `syz.3.12884'. [ 971.982191][T32691] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 972.091461][T32696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12886'. [ 972.110937][T32696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12886'. [ 972.125358][T32696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12886'. [ 972.212732][T32697] netlink: 10 bytes leftover after parsing attributes in process `syz.3.12887'. [ 972.293142][T32701] device ip6tnl0 entered promiscuous mode [ 972.584485][T32711] tmpfs: Bad value for 'mpol' [ 973.244009][ T6760] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 973.305533][T32742] dlm: non-version read from control device 36 [ 973.459560][ T6760] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 973.491343][ T6760] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 973.544312][ T6760] usb 6-1: New USB device found, idVendor=2184, idProduct=001c, bcdDevice=e3.03 [ 973.585024][ T6760] usb 6-1: New USB device strings: Mfr=1, Product=22, SerialNumber=3 [ 973.632450][ T6760] usb 6-1: Product: syz [ 973.637023][ T6760] usb 6-1: Manufacturer: syz [ 973.655968][ T6760] usb 6-1: SerialNumber: syz [ 973.676542][ T6760] usb 6-1: config 0 descriptor?? [ 973.706436][ T6760] cdc_acm 6-1:0.0: skipping garbage [ 973.802052][ T26] audit: type=1400 audit(1700004091.684:379): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=32758 comm="syz.2.12917" [ 973.820781][T15545] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 973.973396][ T6760] usb 6-1: USB disconnect, device number 14 [ 974.020982][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 974.047885][T15545] usb 4-1: Using ep0 maxpacket: 16 [ 974.067770][T15545] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 974.108182][T15545] usb 4-1: config 0 has no interface number 0 [ 974.117173][T32767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12922'. [ 974.129829][T15545] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 974.141006][T32767] netlink: 108 bytes leftover after parsing attributes in process `syz.2.12922'. [ 974.141188][T32767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12922'. [ 974.165870][ T301] loop0: detected capacity change from 0 to 512 [ 974.175822][T15545] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 974.190569][T15545] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 974.200716][T15545] usb 4-1: Product: syz [ 974.205035][T15545] usb 4-1: SerialNumber: syz [ 974.209849][T32767] netlink: 108 bytes leftover after parsing attributes in process `syz.2.12922'. [ 974.211706][T15545] usb 4-1: config 0 descriptor?? [ 974.227011][ T7981] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 974.234658][ T301] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 974.245670][T32767] netlink: 84 bytes leftover after parsing attributes in process `syz.2.12922'. [ 974.273439][T15545] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input77 [ 974.317847][ T301] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 974.343412][ T301] ext4 filesystem being mounted at /2574/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 974.431338][ T7981] usb 7-1: config 1 has an invalid interface number: 82 but max is 1 [ 974.457322][ T7981] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 974.505334][ T7981] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 974.514349][ T7981] usb 7-1: config 1 has no interface number 2 [ 974.538437][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 974.539485][ T6760] usb 4-1: USB disconnect, device number 62 [ 974.545397][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 974.571178][ T7981] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.596597][ T7981] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 974.606917][ T7981] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 974.643323][ T7981] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 974.671642][ T7981] usb 7-1: config 1 interface 82 has no altsetting 0 [ 974.688441][ T308] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 974.698745][ T7981] usb 7-1: config 1 interface 1 has no altsetting 0 [ 974.705773][ T310] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 974.707921][ T7981] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 974.729487][ T6760] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 974.731927][ T7981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.738680][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 974.746399][ T7981] usb 7-1: Product: syz [ 974.756922][ T7981] usb 7-1: Manufacturer: syz [ 974.762164][ T7981] usb 7-1: SerialNumber: syz [ 974.806699][ T7981] cdc_ncm 7-1:1.0: NCM or ECM functional descriptors missing [ 974.833941][ T7981] cdc_ncm 7-1:1.0: bind() failure [ 975.247104][ T321] cgroup: Invalid name [ 975.286025][ T323] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12930'. [ 975.295204][ T323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12930'. [ 975.456471][ T6760] usb 7-1: USB disconnect, device number 11 [ 975.475329][ T332] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551489) [ 975.508024][ T332] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 975.529980][ T330] netlink: 1 bytes leftover after parsing attributes in process `syz.0.12935'. [ 976.376348][ T358] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12950'. [ 976.385462][ T358] netlink: 108 bytes leftover after parsing attributes in process `syz.5.12950'. [ 976.692762][ T372] loop5: detected capacity change from 0 to 164 [ 976.918466][ T345] loop0: detected capacity change from 0 to 32768 [ 976.987845][ T345] JBD2: Ignoring recovery information on journal [ 977.128240][ T345] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 977.255885][ T4311] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 977.415981][ T4276] ocfs2: Unmounting device (7,0) on (node local) [ 977.476447][ T4311] usb 4-1: Using ep0 maxpacket: 16 [ 977.484360][ T4311] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.532398][ T4311] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 977.594828][ T4311] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 977.625537][ T4311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.657877][ T4311] usb 4-1: Product: syz [ 977.686299][ T4311] usb 4-1: Manufacturer: syz [ 977.723732][ T4311] usb 4-1: SerialNumber: syz [ 977.745739][ T4311] r8152-cfgselector 4-1: config 0 descriptor?? [ 978.025183][ T4311] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 978.051138][ T276] usb 4-1: config 0 descriptor?? [ 978.056695][ T408] netlink: 'syz.6.12973': attribute type 4 has an invalid length. [ 978.196531][ T414] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 978.253593][ T276] usb 4-1: can't set config #0, error -71 [ 978.253703][ T4311] usb 4-1: USB disconnect, device number 63 [ 978.654246][ T7981] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 978.858592][ T7981] usb 7-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 978.900947][ T7981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 978.931949][ T7981] usb 7-1: Product: syz [ 978.946536][ T7981] usb 7-1: Manufacturer: syz [ 978.966727][ T438] netlink: 'syz.2.12988': attribute type 1 has an invalid length. [ 979.239006][ T7981] scsi host1: uas [ 979.438318][ C1] usb 7-1: stat urb: status -71 [ 979.444505][ C1] usb 7-1: cmd cmplt err -71 [ 979.451337][ T7981] usb 7-1: USB disconnect, device number 12 [ 979.468833][ T7981] scsi 1:0:0:0: tag#12 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 979.477465][ T7981] scsi 1:0:0:0: tag#12 CDB: Inquiry 12 00 00 00 24 00 [ 979.746466][ T436] loop5: detected capacity change from 0 to 32768 [ 979.791141][ T436] (syz.5.12987,436,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 979.840130][ T436] (syz.5.12987,436,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 979.966252][ T436] JBD2: Ignoring recovery information on journal [ 980.179900][ T436] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 980.676979][T24163] ocfs2: Unmounting device (7,5) on (node local) [ 980.897313][ T475] xt_CT: You must specify a L4 protocol and not use inversions on it [ 982.163837][ T6760] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 982.394072][ T6760] usb 4-1: Using ep0 maxpacket: 32 [ 982.400813][ T6760] usb 4-1: config 245 has an invalid interface number: 214 but max is 0 [ 982.433330][ T6760] usb 4-1: config 245 has no interface number 0 [ 982.457640][ T6760] usb 4-1: config 245 interface 214 has no altsetting 0 [ 982.488427][ T6760] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=1e.fa [ 982.530312][ T6760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.565011][ T6760] usb 4-1: Product: syz [ 982.569203][ T6760] usb 4-1: Manufacturer: syz [ 982.573810][ T6760] usb 4-1: SerialNumber: syz [ 982.650738][ T7971] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 982.803704][ T550] loop5: detected capacity change from 0 to 256 [ 982.853673][ T7971] usb 7-1: Using ep0 maxpacket: 32 [ 982.880620][ T7971] usb 7-1: unable to get BOS descriptor or descriptor too short [ 982.910384][ T550] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 982.937831][ T7971] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 982.960638][ T550] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 982.970060][ T7971] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 982.970753][ T550] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 983.001409][ T7971] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 983.028567][ T7971] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.064461][ T6760] f81534a_ctrl 4-1:245.214: failed to enable ports: -71 [ 983.075384][ T7971] usb 7-1: Product: syz [ 983.076219][ T6760] f81534a_ctrl: probe of 4-1:245.214 failed with error -71 [ 983.093226][ T7971] usb 7-1: Manufacturer: syz [ 983.112896][ T7971] usb 7-1: SerialNumber: syz [ 983.141405][ T7971] usb 7-1: selecting invalid altsetting 1 [ 983.142027][ T6760] usb 4-1: USB disconnect, device number 64 [ 983.153121][ T26] audit: type=1800 audit(1700004100.430:380): pid=550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.13040" name="file1" dev="loop5" ino=1048674 res=0 errno=0 [ 983.156822][ T550] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 983.190600][ T559] loop0: detected capacity change from 0 to 128 [ 983.269311][ T559] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 983.296313][ T559] FAT-fs (loop0): Filesystem has been set read-only [ 983.411978][ T563] loop5: detected capacity change from 0 to 128 [ 983.479030][ T563] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 983.503097][ T563] ext4 filesystem being mounted at /740/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 983.573542][ T7971] usb 7-1: 6:0: failed to get current value for ch 0 (-71) [ 983.596010][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 983.603173][ T7971] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 983.615604][ T7971] usb 7-1: USB disconnect, device number 13 [ 983.666831][ T569] IPv6: NLM_F_CREATE should be specified when creating new route [ 983.713362][T24163] EXT4-fs (loop5): unmounting filesystem. [ 983.850996][ T4260] udevd[4260]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 984.168669][ T6760] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 984.211862][ T588] loop5: detected capacity change from 0 to 256 [ 984.258222][ T26] audit: type=1400 audit(1700004101.459:381): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=590 comm="syz.3.13060" [ 984.334633][ T588] FAT-fs (loop5): Directory bread(block 64) failed [ 984.353433][ T588] FAT-fs (loop5): Directory bread(block 65) failed [ 984.360056][ T588] FAT-fs (loop5): Directory bread(block 66) failed [ 984.393133][ T588] FAT-fs (loop5): Directory bread(block 67) failed [ 984.422016][ T6760] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 984.437859][ T6760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.456809][ T588] FAT-fs (loop5): Directory bread(block 68) failed [ 984.464187][ T588] FAT-fs (loop5): Directory bread(block 69) failed [ 984.478585][ T6760] usb 3-1: Product: syz [ 984.482839][ T6760] usb 3-1: Manufacturer: syz [ 984.487442][ T6760] usb 3-1: SerialNumber: syz [ 984.500101][ T588] FAT-fs (loop5): Directory bread(block 70) failed [ 984.513184][ T588] FAT-fs (loop5): Directory bread(block 71) failed [ 984.540364][ T6760] usb 3-1: config 0 descriptor?? [ 984.564193][ T588] FAT-fs (loop5): Directory bread(block 72) failed [ 984.581594][ T588] FAT-fs (loop5): Directory bread(block 73) failed [ 984.800924][ T6760] int51x1: probe of 3-1:0.0 failed with error -22 [ 984.868111][ T49] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 985.002513][ T153] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 985.032008][ T6760] usb 3-1: USB disconnect, device number 97 [ 985.253809][ T153] usb 6-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 985.274835][ T153] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 985.296358][ T153] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 103, changing to 7 [ 985.333044][ T153] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 24944, setting to 1024 [ 985.379211][ T153] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 985.397989][ T153] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.427540][ T153] usb 6-1: Product: syz [ 985.431773][ T153] usb 6-1: Manufacturer: syz [ 985.436370][ T153] usb 6-1: SerialNumber: syz [ 985.716983][ T153] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 985.739180][ T153] usb 6-1: 0:2 : does not exist [ 985.748987][ T637] __nla_validate_parse: 11 callbacks suppressed [ 985.749001][ T637] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.13082'. [ 985.835154][ T153] usb 6-1: USB disconnect, device number 15 [ 985.914902][ T637] netlink: zone id is out of range [ 985.954153][ T637] netlink: get zone limit has 8 unknown bytes [ 986.673495][ T668] loop3: detected capacity change from 0 to 512 [ 986.690476][ T670] netlink: 'syz.2.13098': attribute type 1 has an invalid length. [ 986.717275][ T668] /dev/loop3: Can't open blockdev [ 986.728623][ T670] netlink: 192 bytes leftover after parsing attributes in process `syz.2.13098'. [ 987.288888][ T694] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 987.847903][ T717] loop5: detected capacity change from 0 to 256 [ 987.926562][ T717] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 987.953625][ T717] FAT-fs (loop5): Filesystem has been set read-only [ 987.974049][ T717] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 988.029953][ T717] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 988.072686][ T26] audit: type=1800 audit(1700004105.033:382): pid=717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.13121" name="file1" dev="loop5" ino=1048676 res=0 errno=0 [ 988.178487][ T153] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 988.399209][ T153] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 988.424412][ T153] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 988.457722][ T153] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 988.494931][ T153] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 988.536642][ T153] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 988.578137][ T153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.613631][ T720] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 989.076923][ T742] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 989.091222][ T744] loop3: detected capacity change from 0 to 16 [ 989.103349][ T744] /dev/loop3: Can't open blockdev [ 989.103506][ T153] ims_pcu 3-1:1.0: Failed to set line state, error: -71 [ 989.132738][ T742] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 989.145469][ T153] ims_pcu: probe of 3-1:1.0 failed with error -71 [ 989.146321][ T742] bridge0: port 3(team0) entered disabled state [ 989.176849][ T742] device batadv0 left promiscuous mode [ 989.188241][ T4260] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 989.188380][ T153] usb 3-1: USB disconnect, device number 98 [ 989.230428][ T742] bridge0: port 4(batadv0) entered disabled state [ 989.271160][ T742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 989.311102][ T742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 989.351577][ T742] device hsr0 left promiscuous mode [ 989.385903][ T742] bridge0: port 1(hsr0) entered disabled state [ 989.442795][ T740] IPv6: NLM_F_CREATE should be specified when creating new route [ 989.481972][T15467] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 989.693551][ T757] loop5: detected capacity change from 0 to 512 [ 989.738616][T15467] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 989.848365][ T757] FAT-fs (loop5): Directory bread(block 2080) failed [ 989.884934][ T757] FAT-fs (loop5): Directory bread(block 2081) failed [ 989.902451][ T757] FAT-fs (loop5): Directory bread(block 2082) failed [ 989.930986][ T7971] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 989.947252][ T757] FAT-fs (loop5): Directory bread(block 2083) failed [ 989.959762][ T757] FAT-fs (loop5): Directory bread(block 2084) failed [ 989.973731][ T757] FAT-fs (loop5): Directory bread(block 2085) failed [ 989.984796][ T757] FAT-fs (loop5): Directory bread(block 2086) failed [ 990.049211][ T757] FAT-fs (loop5): Directory bread(block 2087) failed [ 990.097994][ T757] FAT-fs (loop5): Directory bread(block 2080) failed [ 990.136084][ T7971] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 990.155346][ T757] FAT-fs (loop5): Directory bread(block 2081) failed [ 990.167438][ T7971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.208561][ T7971] usb 4-1: config 0 descriptor?? [ 990.498855][ T780] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13152'. [ 990.686270][ T7971] usb 4-1: Cannot set MAC address [ 990.695853][ T7971] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 990.746999][ T7971] usb 4-1: USB disconnect, device number 65 [ 990.830842][ T790] loop6: detected capacity change from 0 to 512 [ 990.898552][ T790] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 990.928910][ T790] ext4 filesystem being mounted at /732/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 990.984825][ T790] EXT4-fs error (device loop6): ext4_empty_dir:3141: inode #12: comm syz.6.13156: Directory hole found for htree leaf block 0 [ 991.112002][ T790] EXT4-fs (loop6): Remounting filesystem read-only [ 991.324739][T24346] EXT4-fs (loop6): unmounting filesystem. [ 991.858245][ T829] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13175'. [ 992.289308][ T848] loop6: detected capacity change from 0 to 512 [ 992.360972][ T848] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 992.389775][ T848] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 992.397852][ T848] System zones: 0-1, 15-15, 18-18, 34-34 [ 992.407735][ T848] EXT4-fs (loop6): orphan cleanup on readonly fs [ 992.432442][ T848] Quota error (device loop6): v2_read_file_info: Number of blocks too big for quota file size (6144 > 1792). [ 992.474850][ T848] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 992.510982][ T848] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 992.550183][ T855] loop0: detected capacity change from 0 to 2048 [ 992.556720][ T848] EXT4-fs error (device loop6): ext4_orphan_get:1435: comm syz.6.13184: bad orphan inode 16 [ 992.632921][ T864] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 992.651388][ T848] ext4_test_bit(bit=15, block=18) = 1 [ 992.669921][ T848] is_bad_inode(inode)=0 [ 992.674257][ T848] NEXT_ORPHAN(inode)=0 [ 992.689398][ T848] max_ino=32 [ 992.692617][ T848] i_nlink=2 [ 992.695790][ T848] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 992.813917][ T848] fscrypt (loop6, inode 16): Error -61 getting encryption context [ 992.913780][ T870] netlink: 188 bytes leftover after parsing attributes in process `syz.2.13193'. [ 993.056005][T24346] EXT4-fs (loop6): unmounting filesystem. [ 993.343549][ T888] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13203'. [ 993.348264][ T890] openvswitch: netlink: Missing key (keys=40, expected=80) [ 993.382743][ T888] netlink: 9 bytes leftover after parsing attributes in process `syz.2.13203'. [ 993.414745][ T888] netlink: 9 bytes leftover after parsing attributes in process `syz.2.13203'. [ 993.458868][ T888] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 993.555164][ T153] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 993.790580][ T153] usb 7-1: Using ep0 maxpacket: 8 [ 993.797673][ T153] usb 7-1: unable to get BOS descriptor or descriptor too short [ 993.841546][ T153] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 993.875643][ T153] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 993.918394][ T153] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 993.961316][ T153] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 993.971277][ T153] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 994.046676][ T153] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 994.091034][ T931] netlink: 260 bytes leftover after parsing attributes in process `syz.5.13217'. [ 994.102408][ T153] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 994.112243][ T930] loop0: detected capacity change from 0 to 1024 [ 994.142906][ T153] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.173430][ T930] EXT4-fs: Ignoring removed bh option [ 994.182339][ T153] usb 7-1: Product: syz [ 994.196347][ T153] usb 7-1: Manufacturer: syz [ 994.200987][ T153] usb 7-1: SerialNumber: syz [ 994.272340][ T930] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 994.304059][ T153] usb 7-1: config 0 descriptor?? [ 994.376054][ T943] overlayfs: missing 'lowerdir' [ 994.391056][ T882] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 994.398278][ T882] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 994.413785][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 994.525089][ T945] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 994.617502][ T945] device team0 left promiscuous mode [ 994.660421][ T945] device team_slave_0 left promiscuous mode [ 994.666546][ T945] device team_slave_1 left promiscuous mode [ 994.713621][ T945] bridge0: port 3(team0) entered disabled state [ 994.728059][ T945] device batadv0 left promiscuous mode [ 994.734402][ T945] bridge0: port 4(batadv0) entered disabled state [ 994.747291][ T945] device bridge_slave_0 left promiscuous mode [ 994.753864][ T945] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.775450][ T945] device bridge_slave_1 left promiscuous mode [ 994.781737][ T945] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.805483][ T953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13226'. [ 994.828302][ T945] bond0: (slave bond_slave_0): Releasing backup interface [ 994.853144][ T945] bond0: (slave bond_slave_1): Releasing backup interface [ 994.932813][ T945] team0: Port device team_slave_0 removed [ 994.986530][ T945] team0: Port device team_slave_1 removed [ 995.008504][ T945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.028700][ T7981] usb 7-1: USB disconnect, device number 14 [ 995.039228][ T945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.089919][ T957] loop3: detected capacity change from 0 to 8192 [ 995.212201][ T4260] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 995.749244][ T981] overlayfs: conflicting options: nfs_export=on,index=off [ 995.978283][ T988] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 996.005490][ T26] audit: type=1326 audit(1700004112.460:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=992 comm="syz.6.13245" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 996.040775][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.083857][ T988] device bridge_slave_1 left promiscuous mode [ 996.110166][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.120947][ T153] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 996.142189][ T26] audit: type=1326 audit(1700004112.460:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=992 comm="syz.6.13245" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 996.168585][ T988] bond0: (slave bond_slave_0): Releasing backup interface [ 996.246806][ T26] audit: type=1326 audit(1700004112.460:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=992 comm="syz.6.13245" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 996.284241][ T988] bond0: (slave bond_slave_1): Releasing backup interface [ 996.326213][ T988] team0: Port device team_slave_0 removed [ 996.338366][ T26] audit: type=1326 audit(1700004112.460:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=992 comm="syz.6.13245" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 996.346847][ T153] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 996.373275][ T988] team0: Port device team_slave_1 removed [ 996.407110][ T153] usb 3-1: config 0 has no interface number 0 [ 996.409541][ T988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.430051][ T153] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 996.459484][ T153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.464138][ T988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.489061][ T153] usb 3-1: Product: syz [ 996.499995][ T153] usb 3-1: Manufacturer: syz [ 996.511444][ T153] usb 3-1: SerialNumber: syz [ 996.517006][ T988] bond0: (slave macvlan0): Releasing backup interface [ 996.532396][ T153] usb 3-1: config 0 descriptor?? [ 996.719460][ T6760] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 996.766091][ T153] asix: probe of 3-1:0.251 failed with error -71 [ 996.786722][ T153] usb 3-1: USB disconnect, device number 99 [ 996.947478][ T6760] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.968120][ T6760] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 996.997427][ T6760] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 997.021819][ T6760] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.041791][ T26] audit: type=1326 audit(1700004113.423:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1029 comm="syz.6.13259" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 997.047797][ T6760] idmouse 6-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 997.088722][ T1030] loop6: detected capacity change from 0 to 512 [ 997.124132][ T1030] EXT4-fs: Ignoring removed oldalloc option [ 997.125608][ T26] audit: type=1326 audit(1700004113.461:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1029 comm="syz.6.13259" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 997.217436][ T26] audit: type=1326 audit(1700004113.461:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1029 comm="syz.6.13259" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 997.227208][ T1030] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 1024: comm syz.6.13259: invalid block [ 997.267250][ T1030] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.13259: invalid indirect mapped block 1024 (level 0) [ 997.309694][ T1030] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.13259: bg 0: block 35: padding at end of block bitmap is not set [ 997.320964][ T26] audit: type=1326 audit(1700004113.461:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1029 comm="syz.6.13259" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc01799e159 code=0x7ffc0000 [ 997.348838][ T1030] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 997.375432][ T1030] EXT4-fs (loop6): 1 truncate cleaned up [ 997.391716][ T1030] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 997.423585][ T26] audit: type=1326 audit(1700004113.461:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1029 comm="syz.6.13259" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc01799dec2 code=0x7ffc0000 [ 997.693437][T24346] EXT4-fs (loop6): unmounting filesystem. [ 997.891229][ T1055] set match dimension is over the limit! [ 998.481530][ T6760] usb 6-1: USB disconnect, device number 16 [ 998.499160][ T6760] idmouse 6-1:1.0: disconnected [ 999.020852][ T1096] loop3: detected capacity change from 0 to 64 [ 1000.001518][ T7971] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1000.121534][ T1138] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13309'. [ 1000.208125][ T7971] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1000.223887][ T7971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.265131][ T7971] usb 4-1: Product: syz [ 1000.290794][ T7971] usb 4-1: Manufacturer: syz [ 1000.295423][ T7971] usb 4-1: SerialNumber: syz [ 1000.352839][ T7971] usb 4-1: config 0 descriptor?? [ 1000.374208][ T7971] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1000.525392][ T1150] netlink: 'syz.2.13316': attribute type 21 has an invalid length. [ 1000.603684][ T1153] netlink: 'syz.6.13317': attribute type 12 has an invalid length. [ 1000.778814][ T1151] loop5: detected capacity change from 0 to 8192 [ 1000.805181][ T7971] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1000.812328][ T7971] sq905c 4-1:0.0: Reading version command failed [ 1000.842706][ T7971] sq905c: probe of 4-1:0.0 failed with error -71 [ 1000.861493][ T7971] usb 4-1: USB disconnect, device number 66 [ 1000.871655][ T1151] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1001.386043][ T1143] loop0: detected capacity change from 0 to 32768 [ 1001.438930][ T1143] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.13313 (1143) [ 1001.512573][ T1143] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1001.551548][ T1143] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1001.573462][ T1143] BTRFS info (device loop0): using free space tree [ 1001.858555][ T1195] netlink: 'syz.2.13333': attribute type 1 has an invalid length. [ 1001.936499][ T1195] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.13333'. [ 1002.085782][ T1143] BTRFS info (device loop0): enabling ssd optimizations [ 1002.187475][ T1203] loop6: detected capacity change from 0 to 8192 [ 1002.276235][ T4276] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1002.282413][ T1203] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1002.308479][ T1221] netlink: 124 bytes leftover after parsing attributes in process `syz.2.13339'. [ 1002.496108][ T1224] loop3: detected capacity change from 0 to 256 [ 1002.547501][ T1224] exfat: Deprecated parameter 'namecase' [ 1002.583667][ T1224] exfat: Deprecated parameter 'utf8' [ 1002.630442][ T1224] exfat: Deprecated parameter 'namecase' [ 1002.674906][ T1224] exfat: Deprecated parameter 'namecase' [ 1002.680645][ T1224] /dev/loop3: Can't open blockdev [ 1003.564245][ T1269] netlink: 'syz.3.13356': attribute type 16 has an invalid length. [ 1003.593616][ T1269] netlink: 'syz.3.13356': attribute type 3 has an invalid length. [ 1003.601496][ T1269] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13356'. [ 1003.896659][ T1281] netlink: 56 bytes leftover after parsing attributes in process `syz.5.13360'. [ 1003.913873][ T1286] comedi comedi2: multiq3: I/O port conflict (0xe8,16) [ 1003.924724][ T1281] netlink: 56 bytes leftover after parsing attributes in process `syz.5.13360'. [ 1004.368524][ T1299] netlink: 56 bytes leftover after parsing attributes in process `syz.6.13369'. [ 1004.426388][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 1004.426402][ T26] audit: type=1326 audit(1700004120.326:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1301 comm="syz.5.13370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e46d9e159 code=0x7ffc0000 [ 1004.484459][ T1267] loop0: detected capacity change from 0 to 32768 [ 1004.600714][ T26] audit: type=1326 audit(1700004120.326:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1301 comm="syz.5.13370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e46d9e159 code=0x7ffc0000 [ 1004.626520][ T1267] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 1004.737311][ T26] audit: type=1326 audit(1700004120.364:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1301 comm="syz.5.13370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e46d9e159 code=0x7ffc0000 [ 1004.761171][ T1307] loop3: detected capacity change from 0 to 1024 [ 1004.870897][ T26] audit: type=1326 audit(1700004120.364:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1301 comm="syz.5.13370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e46d9e159 code=0x7ffc0000 [ 1004.896155][ T1307] EXT4-fs: Ignoring removed bh option [ 1004.993873][ T26] audit: type=1326 audit(1700004120.364:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1301 comm="syz.5.13370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f3e46d9e159 code=0x7ffc0000 [ 1005.021509][ T1307] /dev/loop3: Can't open blockdev [ 1005.026735][ T1318] delete_channel: no stack [ 1005.031258][ T1317] dlm: no locking on control device [ 1005.118420][ T26] audit: type=1326 audit(1700004120.364:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1301 comm="syz.5.13370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e46d9e159 code=0x7ffc0000 [ 1005.268907][ T26] audit: type=1326 audit(1700004120.364:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1301 comm="syz.5.13370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e46d9e159 code=0x7ffc0000 [ 1005.339192][ T1247] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1005.389441][ T26] audit: type=1326 audit(1700004120.373:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1301 comm="syz.5.13370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3e46d9e159 code=0x7ffc0000 [ 1005.549133][ T26] audit: type=1326 audit(1700004120.373:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1301 comm="syz.5.13370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3e46d9e159 code=0x7ffc0000 [ 1005.593854][ T1247] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.620162][ T1335] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13386'. [ 1005.629290][ T1247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 1005.688758][ T1247] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1005.745009][ T1247] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1005.774275][ T1247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1005.803899][ T1247] usb 6-1: Product: syz [ 1005.808648][ T1247] usb 6-1: Manufacturer: syz [ 1005.813268][ T1247] usb 6-1: SerialNumber: syz [ 1005.813463][ T1343] netlink: 'syz.3.13390': attribute type 12 has an invalid length. [ 1005.833776][ T1247] usb 6-1: config 0 descriptor?? [ 1005.864947][ T1247] usb 6-1: no audio or video endpoints found [ 1006.053223][ T1248] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1006.093099][ T1247] usb 6-1: USB disconnect, device number 17 [ 1006.211888][ T1353] loop0: detected capacity change from 0 to 1024 [ 1006.255810][ T1248] usb 3-1: Using ep0 maxpacket: 16 [ 1006.262952][ T1248] usb 3-1: config 6 has an invalid interface number: 255 but max is 0 [ 1006.287427][ T1248] usb 3-1: config 6 has no interface number 0 [ 1006.299079][ T1353] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1006.314895][ T1353] ext4 filesystem being mounted at /2655/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1006.336297][ T1248] usb 3-1: config 6 interface 255 has no altsetting 0 [ 1006.413210][ T1248] usb 3-1: New USB device found, idVendor=fa80, idProduct=ebb5, bcdDevice=62.56 [ 1006.436350][ T1353] EXT4-fs error (device loop0): ext4_xattr_block_find:1828: inode #15: comm syz.0.13395: corrupted xattr block 128 [ 1006.461026][ T1248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.469055][ T1248] usb 3-1: Product: syz [ 1006.496291][ T1353] EXT4-fs (loop0): Remounting filesystem read-only [ 1006.514292][ T1248] usb 3-1: Manufacturer: syz [ 1006.536381][ T1248] usb 3-1: SerialNumber: syz [ 1006.612488][ T1351] loop3: detected capacity change from 0 to 40427 [ 1006.627893][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 1006.768671][ T1248] usb 3-1: bad CDC descriptors [ 1006.795129][ T1248] usb 3-1: USB disconnect, device number 100 [ 1006.834548][ T1347] loop6: detected capacity change from 0 to 32768 [ 1006.983401][ T1369] netlink: 'syz.5.13399': attribute type 3 has an invalid length. [ 1006.991269][ T1369] netlink: 666 bytes leftover after parsing attributes in process `syz.5.13399'. [ 1007.007977][ T1347] XFS (loop6): Mounting V5 Filesystem [ 1007.161534][ T1347] XFS (loop6): Ending clean mount [ 1007.289829][ T1347] syz.6.13392: attempt to access beyond end of device [ 1007.289829][ T1347] loop6: rw=4096, sector=18446744073709551587, nr_sectors = 1 limit=32768 [ 1007.538441][T24346] XFS (loop6): Unmounting Filesystem [ 1008.458289][ T1412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13418'. [ 1008.578223][ T1418] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13420'. [ 1009.048689][ T1434] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13428'. [ 1009.092871][ T1403] loop5: detected capacity change from 0 to 32768 [ 1009.183722][ T1403] jfs_strtoUCS: char2uni returned -22. [ 1009.227766][ T1403] charset = cp949, char = 0xd4 [ 1009.648993][ T7981] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1009.852848][ T7981] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.895777][ T7981] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1009.925992][ T7981] usb 7-1: config 1 has no interface number 0 [ 1009.964148][ T7981] usb 7-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 1009.990991][ T7981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.018238][ T7981] usb 7-1: Product: syz [ 1010.037037][ T7981] usb 7-1: Manufacturer: syz [ 1010.055521][ T7981] usb 7-1: SerialNumber: syz [ 1010.311245][ T7981] usb 7-1: 1:0 : does not exist [ 1010.316149][ T7981] usb 7-1: 1:2 : does not exist [ 1010.353350][ T7981] usb 7-1: 1:3 : does not exist [ 1010.358307][ T7981] usb 7-1: BAAD HEADPHONE p_chmask mismatch [ 1010.377027][ T1474] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1010.418617][ T7981] snd-usb-audio: probe of 7-1:1.1 failed with error -22 [ 1010.442656][ T7981] usb 7-1: USB disconnect, device number 15 [ 1010.495872][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1011.798080][ T1532] netlink: 'syz.6.13471': attribute type 1 has an invalid length. [ 1012.017739][ T7975] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1012.227856][ T7975] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1012.243001][ T7975] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1012.295673][ T7975] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1012.330020][ T7975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.374597][ T7975] usb 4-1: probing VID:PID(0424:012C) [ 1012.405304][ T7975] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 1012.414374][ T7975] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1012.427973][ T7975] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 1012.434347][ T7975] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1012.504713][ T7975] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1012.570593][ T1559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1012.592741][ T7975] vub300: probe of 4-1:1.0 failed with error -32 [ 1012.617249][ T7975] usb 4-1: USB disconnect, device number 67 [ 1012.665242][ T1563] loop6: detected capacity change from 0 to 164 [ 1012.761203][ T1565] loop0: detected capacity change from 0 to 2048 [ 1012.968850][ T1565] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1013.205895][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 1013.605865][ T1597] ip6t_srh: unknown srh match flags 4000 [ 1014.021788][ T1615] netlink: 'syz.6.13509': attribute type 6 has an invalid length. [ 1015.113978][ T1660] loop6: detected capacity change from 0 to 1024 [ 1015.302109][ T1668] netlink: 'syz.5.13534': attribute type 10 has an invalid length. [ 1015.322266][ T1668] device veth0_vlan left promiscuous mode [ 1015.373928][ T1668] device veth0_vlan entered promiscuous mode [ 1015.460129][ T1668] team0: Device veth0_vlan failed to register rx_handler [ 1015.652765][ T1680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13540'. [ 1015.981166][ T1691] overlayfs: empty lowerdir [ 1016.026190][ T1694] loop6: detected capacity change from 0 to 512 [ 1016.152962][ T1694] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1016.210116][ T1694] ext4 filesystem being mounted at /804/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1016.262451][ T1703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13551'. [ 1016.411702][ T7971] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1016.459048][T24346] EXT4-fs (loop6): unmounting filesystem. [ 1016.629985][ T7971] usb 4-1: Using ep0 maxpacket: 16 [ 1016.665796][ T7971] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1016.712708][ T7971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.728156][ T1720] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13560'. [ 1016.754293][ T7971] usb 4-1: Product: syz [ 1016.760125][ T7971] usb 4-1: Manufacturer: syz [ 1016.810903][ T7971] usb 4-1: SerialNumber: syz [ 1016.833207][ T7971] r8152-cfgselector 4-1: config 0 descriptor?? [ 1017.307634][ T7971] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1017.333393][ T7971] r8152-cfgselector 4-1: USB disconnect, device number 68 [ 1017.570050][ T1744] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 1017.879517][ T1761] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1018.141901][ T1767] loop5: detected capacity change from 0 to 764 [ 1018.224803][ T1767] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1018.997771][ T1807] vcan0 speed is unknown, defaulting to 1000 [ 1019.050804][ T1807] vcan0 speed is unknown, defaulting to 1000 [ 1019.088243][ T1807] vcan0 speed is unknown, defaulting to 1000 [ 1019.117173][ T7971] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1019.166728][ T1806] loop5: detected capacity change from 0 to 4096 [ 1019.193659][ T1806] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1019.324729][ T7971] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1019.353338][ T7971] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 1019.364546][ T1806] ntfs3: loop5: ino=5, "/" directory corrupted [ 1019.394223][ T7971] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 1019.402410][ T7971] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1019.405793][ T1807] infiniband syz1: set active [ 1019.416328][ T1248] vcan0 speed is unknown, defaulting to 1000 [ 1019.453811][ T1807] infiniband syz1: added vcan0 [ 1019.468988][ T7971] usb 4-1: config 129 has no interface number 0 [ 1019.475267][ T7971] usb 4-1: config 129 has no interface number 1 [ 1019.505073][ T7971] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1019.524074][ T1807] RDS/IB: syz1: added [ 1019.544000][ T1807] smc: adding ib device syz1 with port count 1 [ 1019.552334][ T7971] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1019.565216][ T1807] smc: ib device syz1 port 1 has pnetid [ 1019.577076][ T1248] vcan0 speed is unknown, defaulting to 1000 [ 1019.587747][ T7971] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1019.588335][ T1807] vcan0 speed is unknown, defaulting to 1000 [ 1019.652633][ T7971] usb 4-1: config 129 interface 135 has no altsetting 0 [ 1019.659656][ T7971] usb 4-1: config 129 interface 5 has no altsetting 0 [ 1019.689670][ T7971] usb 4-1: string descriptor 0 read error: -22 [ 1019.738477][ T7971] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1019.781868][ T1818] netlink: 'syz.5.13606': attribute type 2 has an invalid length. [ 1019.793507][ T7971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.848595][ T7971] usb 4-1: MIDIStreaming interface descriptor not found [ 1019.867701][ T1807] vcan0 speed is unknown, defaulting to 1000 [ 1020.130334][ T7971] usb 4-1: USB disconnect, device number 69 [ 1020.246640][ T1813] loop6: detected capacity change from 0 to 32768 [ 1020.312222][ T1807] vcan0 speed is unknown, defaulting to 1000 [ 1020.345324][ T1813] JBD2: Ignoring recovery information on journal [ 1020.443496][ T1813] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1020.511608][ T1821] loop5: detected capacity change from 0 to 32768 [ 1020.548941][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1020.574717][T24346] ocfs2: Unmounting device (7,6) on (node local) [ 1020.675082][ T1807] vcan0 speed is unknown, defaulting to 1000 [ 1021.066340][ T1807] vcan0 speed is unknown, defaulting to 1000 [ 1021.096497][ T1835] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13613'. [ 1021.295141][ T1841] loop5: detected capacity change from 0 to 512 [ 1021.381218][ T1841] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1021.425637][ T1841] ext4 filesystem being mounted at /843/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1021.591924][ T1841] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.13616: corrupted xattr block 33 [ 1021.870979][T24163] EXT4-fs (loop5): unmounting filesystem. [ 1022.137650][ T1860] nvme_fabrics: missing parameter 'traddr=%s' [ 1022.826176][ T1895] netlink: 'syz.3.13640': attribute type 21 has an invalid length. [ 1022.834166][ T1895] netlink: 120 bytes leftover after parsing attributes in process `syz.3.13640'. [ 1022.847068][ T1897] netlink: 'syz.5.13641': attribute type 1 has an invalid length. [ 1022.903624][ T1895] netlink: 'syz.3.13640': attribute type 1 has an invalid length. [ 1022.936606][ T1895] netlink: 9 bytes leftover after parsing attributes in process `syz.3.13640'. [ 1023.034577][ T1904] netlink: 'syz.2.13645': attribute type 1 has an invalid length. [ 1023.217746][ T1910] netlink: 'syz.2.13649': attribute type 2 has an invalid length. [ 1024.054159][ T1942] loop3: detected capacity change from 0 to 2048 [ 1024.079108][ T1942] /dev/loop3: Can't open blockdev [ 1024.315740][ T1950] netlink: 'syz.3.13669': attribute type 9 has an invalid length. [ 1024.334954][ T1956] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13670'. [ 1024.356796][ T1950] netlink: 'syz.3.13669': attribute type 7 has an invalid length. [ 1024.386849][ T1950] netlink: 'syz.3.13669': attribute type 8 has an invalid length. [ 1025.153354][ T1980] loop3: detected capacity change from 0 to 256 [ 1025.185469][ T1980] /dev/loop3: Can't open blockdev [ 1025.271245][ T1984] dlm: no locking on control device [ 1025.287775][ T1983] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1025.747343][ T1999] xt_nfacct: accounting object `syz0' does not exist [ 1026.215399][ T2017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13701'. [ 1026.252517][ T2017] netlink: 31 bytes leftover after parsing attributes in process `syz.3.13701'. [ 1026.279809][ T2021] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13702'. [ 1026.311651][ T2021] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13702'. [ 1026.332325][ T2017] netlink: 'syz.3.13701': attribute type 3 has an invalid length. [ 1026.385902][ T2017] netlink: 'syz.3.13701': attribute type 2 has an invalid length. [ 1026.393812][ T2017] netlink: 31 bytes leftover after parsing attributes in process `syz.3.13701'. [ 1026.546991][ T2028] netlink: 64 bytes leftover after parsing attributes in process `syz.6.13707'. [ 1026.598020][ T2028] netlink: 'syz.6.13707': attribute type 1 has an invalid length. [ 1026.668347][ T2033] xt_nat: multiple ranges no longer supported [ 1026.945829][ T2045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13715'. [ 1027.620640][ T1244] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1027.729946][ T2078] sg_write: data in/out 8454107/16 bytes for SCSI command 0xf0-- guessing data in; [ 1027.729946][ T2078] program syz.3.13731 not setting count and/or reply_len properly [ 1027.887245][ T1244] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.907744][ T1244] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1027.937618][ T2084] 9pnet_fd: Insufficient options for proto=fd [ 1027.962129][ T1244] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1028.021453][ T1244] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1028.052193][ T1244] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1028.088686][ T1244] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.117657][ T1244] usb 6-1: Product: syz [ 1028.121859][ T1244] usb 6-1: Manufacturer: syz [ 1028.126458][ T1244] usb 6-1: SerialNumber: syz [ 1028.194014][ T1244] cdc_ncm 6-1:1.0: skipping garbage [ 1028.199250][ T1244] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1028.256647][ T1244] cdc_ncm 6-1:1.0: bind() failure [ 1028.542127][ T2107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13745'. [ 1028.641495][ T2107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13745'. [ 1028.651857][ T7981] usb 6-1: USB disconnect, device number 18 [ 1029.125413][ T2133] tipc: Can't bind to reserved service type 2 [ 1029.469715][ T2144] netlink: 'syz.3.13763': attribute type 21 has an invalid length. [ 1029.694520][ T2152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13766'. [ 1029.908948][ T2158] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13769'. [ 1030.149548][ T2164] netlink: 388 bytes leftover after parsing attributes in process `syz.3.13773'. [ 1030.228515][ T2169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13774'. [ 1030.362051][ T2174] loop3: detected capacity change from 0 to 764 [ 1030.573609][ T2180] netlink: 1244 bytes leftover after parsing attributes in process `syz.6.13780'. [ 1030.628860][ T2182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13781'. [ 1031.911559][ T2224] netlink: 'syz.5.13803': attribute type 1 has an invalid length. [ 1032.071927][ T2230] comedi comedi4: bad chanlist[0]=0x00000009 chan=9 range length=2 [ 1032.103921][ T2232] netlink: 'syz.3.13807': attribute type 16 has an invalid length. [ 1032.123322][ T2232] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13807'. [ 1032.379138][ T2244] netlink: 'syz.2.13813': attribute type 15 has an invalid length. [ 1032.408668][ T2244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13813'. [ 1032.784496][ T2254] loop6: detected capacity change from 0 to 2048 [ 1032.800366][ T2256] overlayfs: missing 'lowerdir' [ 1032.902503][ T2264] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1033.273614][ T2275] netlink: 'syz.6.13826': attribute type 30 has an invalid length. [ 1033.514605][ T2286] IPv6: sit3: Disabled Multicast RS [ 1033.648328][ T2290] usb usb8: usbfs: process 2290 (syz.5.13834) did not claim interface 0 before use [ 1034.512267][ T2329] tc_dump_action: action bad kind [ 1034.949228][ T2348] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13863'. [ 1034.993400][ T2348] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13863'. [ 1035.181149][ T2364] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13869'. [ 1035.243082][ T2364] netlink: 9 bytes leftover after parsing attributes in process `syz.0.13869'. [ 1035.293709][ T2364] netlink: 9 bytes leftover after parsing attributes in process `syz.0.13869'. [ 1035.907912][ T2389] netlink: 'syz.0.13881': attribute type 10 has an invalid length. [ 1035.937952][ T26] audit: type=1326 audit(1700004149.810:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2390 comm="syz.2.13880" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b0b9e159 code=0x7ffc0000 [ 1036.019310][ T26] audit: type=1326 audit(1700004149.810:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2390 comm="syz.2.13880" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b0b9e159 code=0x7ffc0000 [ 1036.131511][ T2399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13883'. [ 1036.145824][ T26] audit: type=1326 audit(1700004149.810:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2390 comm="syz.2.13880" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b0b9e159 code=0x7ffc0000 [ 1036.175722][ T2401] loop0: detected capacity change from 0 to 256 [ 1036.225123][ T26] audit: type=1326 audit(1700004149.810:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2390 comm="syz.2.13880" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fd1b0b9e159 code=0x7ffc0000 [ 1036.265475][ T2370] nvme nvme0: failed to connect socket: -512 [ 1036.419636][ T26] audit: type=1326 audit(1700004149.810:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2390 comm="syz.2.13880" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b0b9e159 code=0x7ffc0000 [ 1036.545080][ T26] audit: type=1326 audit(1700004149.810:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2390 comm="syz.2.13880" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b0b9e159 code=0x7ffc0000 [ 1036.697067][ T26] audit: type=1326 audit(1700004149.810:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2390 comm="syz.2.13880" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd1b0b9e159 code=0x7ffc0000 [ 1036.809614][ T26] audit: type=1326 audit(1700004149.810:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2390 comm="syz.2.13880" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd1b0b9e159 code=0x7ffc0000 [ 1037.072824][ T2437] netlink: 'syz.6.13897': attribute type 21 has an invalid length. [ 1037.108624][ T2437] netlink: 128 bytes leftover after parsing attributes in process `syz.6.13897'. [ 1037.117830][ T2437] netlink: 'syz.6.13897': attribute type 4 has an invalid length. [ 1037.166673][ T2437] netlink: 'syz.6.13897': attribute type 5 has an invalid length. [ 1037.205081][ T2437] netlink: 3 bytes leftover after parsing attributes in process `syz.6.13897'. [ 1037.675222][ T7981] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1037.814118][ T2469] netlink: 'syz.5.13910': attribute type 1 has an invalid length. [ 1037.854392][ T2469] netlink: 'syz.5.13910': attribute type 2 has an invalid length. [ 1037.878479][ T7981] usb 7-1: Using ep0 maxpacket: 8 [ 1037.902700][ T7981] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1037.934575][ T7981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1037.948431][ T7981] usb 7-1: Product: syz [ 1037.952629][ T7981] usb 7-1: Manufacturer: syz [ 1037.959869][ T7981] usb 7-1: SerialNumber: syz [ 1037.988595][ T7981] usb 7-1: config 0 descriptor?? [ 1038.038462][ T7981] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1038.458547][ T7981] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1038.466023][ T7981] sq905: probe of 7-1:0.0 failed with error -71 [ 1038.527382][ T7981] usb 7-1: USB disconnect, device number 16 [ 1038.551585][ T2501] overlayfs: empty lowerdir [ 1039.288798][ T2535] jffs2: notice: (2535) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1039.698799][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1039.698869][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1039.796166][ T2562] loop5: detected capacity change from 0 to 128 [ 1039.849521][ T2565] loop6: detected capacity change from 0 to 256 [ 1039.864791][ T2562] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1039.888980][ T2562] hpfs: filesystem error: improperly stopped [ 1039.894996][ T2562] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1039.984740][ T2562] hpfs: You really don't want any checks? You are crazy... [ 1039.991991][ T2562] hpfs: Code page index out of array [ 1040.064810][ T2562] hpfs: code page support is disabled [ 1040.081191][ T2562] hpfs: hpfs_map_4sectors(): unaligned read [ 1040.087185][ T2562] hpfs: hpfs_map_4sectors(): unaligned read [ 1040.131527][ T2562] hpfs: filesystem error: unable to find root dir [ 1040.430577][ T2587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13956'. [ 1041.264330][ T2630] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 1042.550215][ T7981] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1042.562529][ T2678] x_tables: duplicate entry at hook 3 [ 1042.753167][ T7981] usb 7-1: Using ep0 maxpacket: 16 [ 1042.762124][ T7981] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 1042.798852][ T7981] usb 7-1: config 1 has no interface number 0 [ 1042.837091][ T7981] usb 7-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1042.876740][ T7981] usb 7-1: config 1 interface 105 has no altsetting 0 [ 1042.910961][ T7981] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1042.961075][ T7981] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1042.991098][ T7981] usb 7-1: Product: syz [ 1043.023471][ T7981] usb 7-1: Manufacturer: syz [ 1043.028105][ T7981] usb 7-1: SerialNumber: syz [ 1043.154761][ T2704] netlink: 'syz.2.14001': attribute type 1 has an invalid length. [ 1043.277542][ T7981] aqc111: probe of 7-1:1.105 failed with error -22 [ 1043.512295][ T7981] usb 7-1: USB disconnect, device number 17 [ 1043.684253][ T2725] netlink: 7 bytes leftover after parsing attributes in process `syz.0.14010'. [ 1043.723822][ T2725] netlink: 7 bytes leftover after parsing attributes in process `syz.0.14010'. [ 1044.292696][ T2754] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1044.299972][ T2754] IPv6: NLM_F_CREATE should be set when creating new route [ 1044.307255][ T2754] IPv6: NLM_F_CREATE should be set when creating new route [ 1044.421565][ T2758] loop6: detected capacity change from 0 to 16 [ 1044.506655][ T2758] erofs: (device loop6): mounted with root inode @ nid 36. [ 1044.524451][ T2762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14027'. [ 1045.122540][ T2797] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 1046.174214][ T2849] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14059'. [ 1046.960694][ T2875] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14071'. [ 1047.003378][ T2878] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1047.265643][ T1247] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1047.424764][ T2868] loop5: detected capacity change from 0 to 32768 [ 1047.487452][ T2868] JBD2: Ignoring recovery information on journal [ 1047.517697][ T1247] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.538800][ T1247] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1047.546484][ T2868] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1047.562324][ T1247] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1047.598893][ T1247] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1047.631094][ T1247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.895262][ T1247] cxacru 3-1:1.0: receive of cm 0x90 failed (-71) [ 1047.902339][ T1247] cxacru 3-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 1047.919650][T24163] ocfs2: Unmounting device (7,5) on (node local) [ 1047.933216][ T1247] cxacru: probe of 3-1:1.0 failed with error -22 [ 1047.964275][ T1247] usb 3-1: USB disconnect, device number 101 [ 1047.969649][ T2897] loop3: detected capacity change from 0 to 64 [ 1048.987597][ T2932] loop0: detected capacity change from 0 to 64 [ 1049.421118][ T2945] loop5: detected capacity change from 0 to 1024 [ 1049.536901][ T2945] hfsplus: invalid length 1280 has been corrected to 255 [ 1049.537580][ T2945] hfsplus: invalid length 1280 has been corrected to 255 [ 1049.589900][ T2949] ADFS-fs (nullb0): unrecognised mount option "arrier" or missing value [ 1050.935706][ T1247] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1051.058107][ T2960] loop3: detected capacity change from 0 to 40427 [ 1051.177480][ T1247] usb 3-1: Using ep0 maxpacket: 32 [ 1051.189063][ T1247] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.239309][ T1247] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.274448][ T1247] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1051.326604][ T1247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.395219][ T1247] hub 3-1:4.0: USB hub found [ 1051.626697][ T1247] hub 3-1:4.0: 2 ports detected [ 1051.631666][ T1247] usb 3-1: selecting invalid altsetting 1 [ 1051.669084][ T1247] hub 3-1:4.0: Using single TT (err -22) [ 1051.852665][ T1247] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 1051.861500][ T1247] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 1051.959048][ T1247] usb 3-1: USB disconnect, device number 102 [ 1052.840550][ T3050] overlayfs: unrecognized mount option "\$:$'" or missing value [ 1053.028895][ T7975] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1053.232908][ T7975] usb 7-1: Using ep0 maxpacket: 16 [ 1053.244676][ T7975] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1053.292664][ T7975] usb 7-1: config 1 has an invalid interface number: 237 but max is 0 [ 1053.326212][ T7975] usb 7-1: config 1 has no interface number 0 [ 1053.378448][ T7975] usb 7-1: config 1 interface 237 has no altsetting 0 [ 1053.407624][ T7975] usb 7-1: string descriptor 0 read error: -22 [ 1053.446590][ T7975] usb 7-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 1053.462993][ T3078] loop5: detected capacity change from 0 to 64 [ 1053.484678][ T7975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.547065][ T7975] ipaq 7-1:1.237: PocketPC PDA converter detected [ 1053.785041][ T7975] usb 7-1: PocketPC PDA converter now attached to ttyUSB0 [ 1053.846906][ T3090] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1054.016199][ T7975] usb 7-1: USB disconnect, device number 18 [ 1054.061389][ T7975] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 1054.093208][ T7975] ipaq 7-1:1.237: device disconnected [ 1054.104583][ T7971] ------------[ cut here ]------------ [ 1054.110716][ T7971] WARNING: CPU: 1 PID: 7971 at net/netfilter/nft_set_pipapo.c:2384 nft_pipapo_destroy+0x87d/0x8e0 [ 1054.121448][ T7971] Modules linked in: [ 1054.125348][ T7971] CPU: 1 PID: 7971 Comm: kworker/1:9 Not tainted syzkaller #0 [ 1054.132846][ T7971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1054.142945][ T7971] Workqueue: events nf_tables_trans_destroy_work [ 1054.149437][ T7971] RIP: 0010:nft_pipapo_destroy+0x87d/0x8e0 [ 1054.155286][ T7971] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 ee 7b 47 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 93 36 f6 f8 <0f> 0b e9 e0 f7 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c ea f9 [ 1054.174966][ T7971] RSP: 0018:ffffc90004ebfa68 EFLAGS: 00010293 [ 1054.181060][ T7971] RAX: ffffffff888bfc4d RBX: ffff888078f0e0f0 RCX: ffff8880264b0000 [ 1054.189091][ T7971] RDX: 0000000000000000 RSI: ffff888078f0e000 RDI: ffff8880537f4528 [ 1054.197120][ T7971] RBP: ffffc90004ebfc30 R08: ffff8880264b0000 R09: 0000000000000008 [ 1054.205142][ T7971] R10: 0000000000000018 R11: 0000000000000000 R12: ffff888078f0e0c0 [ 1054.213139][ T7971] R13: dffffc0000000000 R14: ffff888078f0e110 R15: dffffc0000000000 [ 1054.221180][ T7971] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1054.230152][ T7971] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1054.236782][ T7971] CR2: 00007f2162749000 CR3: 00000000617a9000 CR4: 00000000003506e0 [ 1054.244762][ T7971] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1054.252775][ T7971] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1054.260781][ T7971] Call Trace: [ 1054.264064][ T7971] [ 1054.267042][ T7971] nft_set_destroy+0x489/0xa30 [ 1054.271827][ T7971] ? __kmem_cache_free+0xb6/0x200 [ 1054.276988][ T7971] nf_tables_trans_destroy_work+0xb81/0xdf0 [ 1054.282927][ T7971] ? __lock_acquire+0x7c40/0x7c40 [ 1054.287984][ T7971] ? nft_object_dump+0x1e0/0x1e0 [ 1054.292972][ T7971] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1054.298197][ T7971] ? process_one_work+0x7b4/0x1160 [ 1054.303427][ T7971] process_one_work+0x8ab/0x1160 [ 1054.308396][ T7971] ? worker_detach_from_pool+0x240/0x240 [ 1054.314081][ T7971] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1054.314607][ T3102] netlink: 'syz.2.14179': attribute type 3 has an invalid length. [ 1054.319114][ T7971] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1054.332549][ T7971] ? wq_worker_running+0x97/0x190 [ 1054.337585][ T7971] worker_thread+0xdd1/0x12a0 [ 1054.342328][ T7971] kthread+0x29d/0x330 [ 1054.346473][ T7971] ? worker_clr_flags+0x1a0/0x1a0 [ 1054.351504][ T7971] ? kthread_blkcg+0xd0/0xd0 [ 1054.356140][ T7971] ret_from_fork+0x1f/0x30 [ 1054.360645][ T7971] [ 1054.363728][ T7971] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1054.368941][ T3102] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14179'. [ 1054.380102][ T7971] CPU: 1 PID: 7971 Comm: kworker/1:9 Not tainted syzkaller #0 [ 1054.387562][ T7971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1054.397626][ T7971] Workqueue: events nf_tables_trans_destroy_work [ 1054.403970][ T7971] Call Trace: [ 1054.407255][ T7971] [ 1054.410191][ T7971] dump_stack_lvl+0x188/0x24e [ 1054.414881][ T7971] ? memcpy+0x3c/0x60 [ 1054.418871][ T7971] ? show_regs_print_info+0x12/0x12 [ 1054.424076][ T7971] ? load_image+0x410/0x410 [ 1054.428603][ T7971] panic+0x2d3/0x710 [ 1054.432504][ T7971] ? bpf_jit_dump+0xd0/0xd0 [ 1054.437006][ T7971] ? ret_from_fork+0x1f/0x30 [ 1054.441591][ T7971] __warn+0x2f8/0x4f0 [ 1054.445564][ T7971] ? nft_pipapo_destroy+0x87d/0x8e0 [ 1054.450752][ T7971] ? nft_pipapo_destroy+0x87d/0x8e0 [ 1054.455943][ T7971] report_bug+0x2ba/0x4f0 [ 1054.460266][ T7971] ? nft_pipapo_destroy+0x87d/0x8e0 [ 1054.465457][ T7971] handle_bug+0x3a/0x70 [ 1054.469601][ T7971] exc_invalid_op+0x16/0x40 [ 1054.474091][ T7971] asm_exc_invalid_op+0x16/0x20 [ 1054.478926][ T7971] RIP: 0010:nft_pipapo_destroy+0x87d/0x8e0 [ 1054.484725][ T7971] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 ee 7b 47 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 93 36 f6 f8 <0f> 0b e9 e0 f7 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c ea f9 [ 1054.504318][ T7971] RSP: 0018:ffffc90004ebfa68 EFLAGS: 00010293 [ 1054.510371][ T7971] RAX: ffffffff888bfc4d RBX: ffff888078f0e0f0 RCX: ffff8880264b0000 [ 1054.518327][ T7971] RDX: 0000000000000000 RSI: ffff888078f0e000 RDI: ffff8880537f4528 [ 1054.526286][ T7971] RBP: ffffc90004ebfc30 R08: ffff8880264b0000 R09: 0000000000000008 [ 1054.534240][ T7971] R10: 0000000000000018 R11: 0000000000000000 R12: ffff888078f0e0c0 [ 1054.542193][ T7971] R13: dffffc0000000000 R14: ffff888078f0e110 R15: dffffc0000000000 [ 1054.550158][ T7971] ? nft_pipapo_destroy+0x87d/0x8e0 [ 1054.555351][ T7971] ? nft_pipapo_destroy+0x87d/0x8e0 [ 1054.560540][ T7971] nft_set_destroy+0x489/0xa30 [ 1054.565293][ T7971] ? __kmem_cache_free+0xb6/0x200 [ 1054.570312][ T7971] nf_tables_trans_destroy_work+0xb81/0xdf0 [ 1054.576196][ T7971] ? __lock_acquire+0x7c40/0x7c40 [ 1054.581213][ T7971] ? nft_object_dump+0x1e0/0x1e0 [ 1054.586140][ T7971] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1054.591329][ T7971] ? process_one_work+0x7b4/0x1160 [ 1054.596427][ T7971] process_one_work+0x8ab/0x1160 [ 1054.601359][ T7971] ? worker_detach_from_pool+0x240/0x240 [ 1054.606983][ T7971] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1054.611997][ T7971] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1054.617534][ T7971] ? wq_worker_running+0x97/0x190 [ 1054.622544][ T7971] worker_thread+0xdd1/0x12a0 [ 1054.627224][ T7971] kthread+0x29d/0x330 [ 1054.631277][ T7971] ? worker_clr_flags+0x1a0/0x1a0 [ 1054.636290][ T7971] ? kthread_blkcg+0xd0/0xd0 [ 1054.640864][ T7971] ret_from_fork+0x1f/0x30 [ 1054.645283][ T7971] [ 1054.648418][ T7971] Kernel Offset: disabled [ 1054.652870][ T7971] Rebooting in 86400 seconds..