last executing test programs: 2.124603418s ago: executing program 0 (id=11683): r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, &(0x7f0000000400)="0060010000", 0x5, 0x0, &(0x7f0000000500)={0x23, 0x2, 0xac, 0x1}, 0x10) 1.974486351s ago: executing program 0 (id=11685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x5c}}, 0x0) 1.931953422s ago: executing program 1 (id=11686): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1802000000dce70000000000000000008500000017000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.788668356s ago: executing program 0 (id=11689): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2f, 0x4, 0xfffffffb, 0x0, 0x0, 0x6, 0x2, 0xfe, 0xd, 0x0, 0x0, 0x201, 0x9, 0x0, 0x0, 0x45, [0xf3, 0x100089ff]}}) 1.559920191s ago: executing program 0 (id=11692): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="71756f74612c646973636172642c646973636172642c696f636861727365743d6b6f69382d72752c646973636172642c00f4193eb3ba2a0d5ff2cd7374288ff89ec513a53e007345decb720900f8312da2463eb0edf52fad1a00ebd41c14b3ce75d0cffefd379624b16f7260c835713b263352e03b5cb8fa0c042bd1225ed4ded2b62e12fea4d7e61b738e40781e58d5fff112364ac140f419e5dafecd283b3fab6b142ddbc893b35a81fe9265591ef35fa2928e095fee4c10b22e4212378de59bca0307cc644b9620b63f0000007bbbd422d87856b71348b8f45398b9660b6b3e8ee8a8c32f3234cb46e2cd827ec25c1ca4d046bc004f8df7b1ee690a5e50510700d80c7fa65fa724d0e1b4369f1b64fe249a0312010000004ac983de925f52d735b03fea941b1e948ad8d19cfda5b799325fd69d14fcf6cdde7700a63150eb3699e5314e0827750e244150ec19f3f3f1d8be542c084b5e40bfaa8ad206d2a33b0ddbd7f8e07dc7d17174a4549ffaf5976949cb69658c42ec7cd9fe8ad82852cefb04646edb3a41eb514eb6a772b3ee9f21e25822b54ec33e592d5c040946721101d53aff21f90351c95aa0f73f1853d6afcbf9448b220e988466066fa5c09e6198fc4520d199b93bdedee87c4043815aa05668a06f8da96680ccc1a139ade90f5c79af46208f9762f54e7c29088d9de69bd2d51c6b9c42209ddc3880051303b855853407d959a5777dce25201c5ea1faa084c36e3e349915ebec53435eb2910c59394ee84ba3baf9c440ae5833c23f46b0eaac543ce0c80ba0603213e53ea59755070b18bc10b9224aa082d96700e63d51c5bffa4f712c2d7fafb9cf506c06e1ddad4fc19038407786fedb9afdfb11a5f182676dd84c919f71d5eee2f3b740b68ee7f6518eb9d8baa26f1c3871f863b134ee942eb3af92d19e70d8268839cd7b4637f0627299f99b1873ca165e410f8bd421e1a4859fd9bd6bb34d25c07e1a52b9668a530b10b8585d797124a6975a71aedbe557a17b06bbfe547aa553c3d08b8921a4b0d938c03687bd48a9a387b4c066c056f457fba5738775b900a1e82a89aae1494b05c4bb0fc8ed1a93688bf850a4f7b0942eda1f16ecf043efa6b8c1f9e0fba31f4a58ed0031180fb1b8a00e4a86826b030000002dd1272a3d1609bed545b86ca7a6bf569ed35d0000ca23b0de742f6008fdf20928370d88f8c04bc3b97b9a9e0062e8fc5fd2337d85a66bd20730f3153db2459fb34c134c06c19364e9645e83040dd16ee08f18f0ba69ac9ca3e25e15442b07000000d30d38a64613b535fa808a9b3bae00bc371271d45db200a5cbf433e2f6dd03b7c7fcc040781e5151c9badb787e7e1e2f39d60998919aa8dbd156f31a5b7fa5f9e5ec01e8c799edc322703c7fc4a81ab9bc02dd96714ee9d7e75d28d040ff3566404fd6db547a4b553197c1f316d20ea54f9459cd81351a510d101e90eabe6dc6c6ac3ffa189c073a5fb3fc382df620bf5af9e638819c77a051e6875866a849f6f578c068c0e4c7cfbc15033997efa853c96297b3201dd30ea40dc94d010a0c33da9f63a10b8f813dc789b80be3bb3f00ee58b30d5c03a6ddbf418ac1b3d4a13839e4b273c4f914bed13f8806295495d41609478798396aeec06e8d342efd8ac6b422f6c23a011b1400000000000000bc2a02094e19a1ee8bb3c3c0c088ae8efaf68c85001faf7cf5426fb7c5c367ed93eb25c48a293549d15b91b59f1b574b3f6171f8e56a402ec56bdf51d90312b3ca5398f4050000007504be21456ec953bf06f12fff20c31e7c8b55fee5c49aa939830b09995ff149258118f9aae29206f9731288b56b10de51525665fdb4e289b1c177df97af3085f82045fbd012f1dde94ffecd90b7b63d8197d9c24a6fe5915ac7d7240847f6d0bf9099ee117c83e363f2ad36a4a9f4faa5734afe9770c38c565cae87a408d0acbb2db7db9174acab60a344814ee643fa82ba41706d2360269ed276e13dd83abbc258f07b0d58ab0b65200b18b7f9f871bcb43fec5a2e3789ecd0c1069d2da80b93c86dff8933e70c2108346003ddf6b60379eee63b66e7341cdd8f87ed9f11894c9ae040976321d87405b492f419ebfa77eb367ca6e360b808451102f54893d7d1695c24bcc184b1e7d19940a2b6931ade8638dd2b85a86dc511dbb97f5035d07ca024076e8581db332b1c5f135fe6b2e9d2c18c9d5d5a524d3d5b2657e4b28f1a09696bd5b076a1471c8b2ab2ca3ba57843af1d03590f4e8985e1c463c781bb03ad7ec816ea70bbe06411aae001e0ca72ee7e828ad14bb7a092d883ad000554bf7f00000000000075cc01f8a2e1802192f09e77bc488b3bd3f08a9ce88ba2e2bcc23cf5d7372b339ce1f5003db0ad70fa6e93aa908a2ced81f5514e23e2f94ff03c1c02f5a9195f4735563efd0a1fc7dafcfb3dae043fe0c172ec3a12747d7abf4382bf7453c13df994641017a0f461add956ef8f834b762af30408af6a61f317fd3c7b0816236a768601b7c6606ba52ff126eb13d33c915c5da99d118db488da3f3d7783a608282a93fcbe0910f0389c3ef91de7c84e23daa6554c42b2b3e9f70a9f790f29011a0b5101b23bfeba6e52877ed8a188958e39375dd203d434bef4dc82cc8a21fc40c6e6e6a2475f70bf1503beb9555036e63bdc937f8a4d61b21d06a9d3239d1df6f2e9ef16dee590b15ac028c6d873bb2965374b733d8e11ba763ab157ed91dd871b098c0543dcbba4cf67db8c83c84369dc67735fa4faa0fdcf34b1c6a862ccae9fe4fa28746504643b57f02623a2ef34ea90f2e7f7dd771f8f75217c799d978a3533fcfab6c6f5391b626d61b400f08172fc675e2a062d06c31b85452804f7b125c291f60a02a5d62271e96fe70d64bae36e28b42e197259169ebee8f64355544fb4d8b83c1c8fad02cd1a2e56a6f6e82ec7719a48a1bea803546b8af7a89faf7cef94d8ada45fc0a98a79ba90c95262f0110725c6bf7c81237534dcd6a8a113bd8ac48b7db5526ab762cec103674742476cd6b92b8c7abcfb1f8e08f0a05c1b209187049f3206bd545e8c20f8db6d8a7cdd0c9ecbb9011b611a013cd581521dfcb028d59d5c69d286fb93e4c498b3aaff7e0cdcf1f41fec65ebdbe4c2bf453140251cdd94c32b87c4634d6500000000000000000000000000000000816e6c33f92dca3e03c400"/2303], 0xff, 0x5e5c, &(0x7f0000005d80)="$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") request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) 1.332012047s ago: executing program 3 (id=11695): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) pselect6(0x40, &(0x7f0000000340)={0xd, 0xa3cd, 0x6, 0x7, 0x9, 0x9, 0x5, 0x1}, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x3938700}, 0x0) 1.076249144s ago: executing program 1 (id=11697): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000000c0), 0x4) 1.004089625s ago: executing program 3 (id=11698): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x28}}, 0x0) 944.396957ms ago: executing program 2 (id=11699): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002f, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000002c77030a89079f03b180004415050300845013f2325f0094090519fa0000880b943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c060000000000005992078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc04308461738190da450296b0ac014968ce23eefc9d4246dd14afbf79a228326c3acc240d7da058fa4806d1f5f7ff40000001600"/249, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 912.237388ms ago: executing program 3 (id=11700): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000001180)) 869.442069ms ago: executing program 1 (id=11701): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x8002, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@e={0xff, 0x9, 0xd, 0x5, @SEQ_CONTROLLER, 0xf, 0x83, 0x7f}) 677.468753ms ago: executing program 2 (id=11702): r0 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000200)={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x7d, 0x1b}}) 618.915595ms ago: executing program 3 (id=11703): r0 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) cachestat(r0, &(0x7f00000001c0)={0xa000000, 0x6}, 0x0, 0x0) 618.327495ms ago: executing program 1 (id=11704): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 484.377708ms ago: executing program 2 (id=11705): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:'], 0xa) 484.027378ms ago: executing program 1 (id=11706): r0 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 401.1463ms ago: executing program 3 (id=11707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="900000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c00028005000100000000002c000e800c00028004000100930000001400018008000100ac1414bb080002"], 0x90}}, 0x0) 313.767472ms ago: executing program 1 (id=11708): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_disconnect(r0) 299.645043ms ago: executing program 2 (id=11709): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) 186.655815ms ago: executing program 3 (id=11710): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x0, 0x84, 0x105}, 0x50) syz_usb_connect(0x3, 0x164, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007af28810d30b55055b000000000109025201010000000009044000000e010000082406", @ANYRESOCT, @ANYRESHEX=0x0, @ANYRESOCT], 0x0) 153.927326ms ago: executing program 0 (id=11711): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xe2) 153.281266ms ago: executing program 2 (id=11712): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') lseek(r0, 0x2, 0xffffffff80000001) 43.908769ms ago: executing program 0 (id=11713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) 0s ago: executing program 2 (id=11714): socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) kernel console output (not intermixed with test programs): 905476][T27651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1207.931601][T27651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1208.702571][T27677] netlink: 'syz.0.9954': attribute type 2 has an invalid length. [ 1208.906985][T27660] loop3: detected capacity change from 0 to 32768 [ 1208.940530][T27660] [ 1208.940530][T27660] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1208.940530][T27660] [ 1208.998065][T27660] ERROR: (device loop3): diWrite: ixpxd invalid [ 1208.998065][T27660] [ 1209.024702][T27660] ERROR: (device loop3): txCommit: [ 1209.024702][T27660] [ 1209.133364][ T6169] [ 1209.133364][ T6169] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1209.133364][ T6169] [ 1209.181893][ T6169] [ 1209.181893][ T6169] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1209.181893][ T6169] [ 1209.565643][T27699] ntfs3: loop3: try to read out of volume at offset 0x0 [ 1209.760226][T27706] loop2: detected capacity change from 0 to 512 [ 1209.784176][T27708] netlink: 'syz.3.9970': attribute type 15 has an invalid length. [ 1209.892900][T27706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1209.941179][T27706] ext4 filesystem being mounted at /2478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1209.978960][T27706] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1210.062212][T27717] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1210.095962][ T6165] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1210.972559][ T28] audit: type=1400 audit(1787819548.119:3491): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=27749 comm="syz.1.9990" [ 1211.472184][ T6194] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1211.699026][ T6194] usb 2-1: Using ep0 maxpacket: 16 [ 1211.729180][ T6194] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 1211.738460][ T6194] usb 2-1: config 254 has no interface number 0 [ 1211.749118][ T6194] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1211.771698][ T6194] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1211.800711][T27781] dlm: no local IP address has been set [ 1211.805158][ T6194] usb 2-1: config 254 interface 235 has no altsetting 0 [ 1211.828057][ T6194] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1211.830843][T27781] dlm: cannot start dlm midcomms -107 [ 1211.847003][ T6194] usb 2-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1211.856379][ T6194] usb 2-1: Product: syz [ 1211.865782][ T6194] usb 2-1: Manufacturer: syz [ 1211.872143][ T6194] usb 2-1: SerialNumber: syz [ 1211.887492][T27761] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1211.900444][ T6266] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1212.095181][ T6266] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1212.114196][ T6266] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1212.114991][T16677] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1212.135232][ T6266] usb 1-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 1212.151002][ T6266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.160949][T27761] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1212.173449][ T6194] usbtest 2-1:254.235: Linux gadget zero [ 1212.185332][ T6266] usb-storage 1-1:1.0: USB Mass Storage device detected [ 1212.189118][ T6194] usbtest 2-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 1212.328351][T16677] usb 4-1: Using ep0 maxpacket: 8 [ 1212.345432][T16677] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 1212.355658][T16677] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.371949][T16677] usb 4-1: config 0 has no interface number 0 [ 1212.378219][T16677] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1212.401733][T16677] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1212.421604][ T6266] scsi host1: usb-storage 1-1:1.0 [ 1212.448157][ T6194] usb 2-1: USB disconnect, device number 101 [ 1212.457759][T16677] usb 4-1: config 0 interface 52 has no altsetting 0 [ 1212.489215][T16677] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 1212.500640][T16677] usb 4-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 1212.508986][T16677] usb 4-1: Product: syz [ 1212.527988][T16677] usb 4-1: SerialNumber: syz [ 1212.553761][T16677] usb 4-1: config 0 descriptor?? [ 1212.631996][ T5973] usb 1-1: USB disconnect, device number 76 [ 1212.856427][T16677] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input73 [ 1213.235313][ T6266] usb 4-1: USB disconnect, device number 56 [ 1213.235551][ C0] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1214.262695][ T5973] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1214.348530][ T6658] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1214.414533][T27853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10039'. [ 1214.472299][ T5973] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1214.497302][ T5973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 7 [ 1214.538382][ T5973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 1214.564970][ T6658] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.590852][ T6658] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1214.597244][ T5973] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1214.620719][ T5973] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1214.635062][ T6658] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1214.636810][ T5973] usb 2-1: Manufacturer: syz [ 1214.680545][ T5973] usb 2-1: config 0 descriptor?? [ 1214.686536][ T6658] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1214.703096][ T5973] igorplugusb 2-1:0.0: endpoint incorrect [ 1214.718632][ T6658] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1214.751564][ T6658] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.798631][ T6658] usb 3-1: config 0 descriptor?? [ 1214.916396][ T5973] usb 2-1: USB disconnect, device number 102 [ 1215.055725][ T6658] usb 3-1: USB disconnect, device number 67 [ 1215.421881][T27881] loop3: detected capacity change from 0 to 64 [ 1215.763336][T27888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10056'. [ 1215.916915][T27879] loop0: detected capacity change from 0 to 32768 [ 1215.980689][T27879] ERROR: (device loop0): diAllocAG: nfreeinos = 0, but iag on freelist [ 1215.980689][T27879] [ 1216.036822][T27879] ERROR: (device loop0): remounting filesystem as read-only [ 1216.047249][T27879] ialloc: diAlloc returned -5! [ 1216.300947][T27899] overlayfs: disabling nfs_export due to verity=require [ 1216.316482][T27902] loop3: detected capacity change from 0 to 164 [ 1216.334097][T27899] overlayfs: conflicting options: userxattr,verity=require [ 1217.106291][ T5973] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1217.330437][ T5973] usb 1-1: Using ep0 maxpacket: 8 [ 1217.355105][ T5973] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1217.377084][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1217.402036][ T5973] usb 1-1: Product: syz [ 1217.415356][ T5973] usb 1-1: Manufacturer: syz [ 1217.444939][ T5973] usb 1-1: SerialNumber: syz [ 1217.449757][T27939] CIFS mount error: No usable UNC path provided in device string! [ 1217.449757][T27939] [ 1217.471569][T27939] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1217.482411][ T5973] usb 1-1: config 0 descriptor?? [ 1217.493810][ T5973] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1217.862252][T27952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10088'. [ 1217.959096][ T5973] gspca_sn9c2028: read1 error -71 [ 1217.982615][ T5973] gspca_sn9c2028: read1 error -71 [ 1217.987802][ T5973] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 1218.019365][ T5973] usb 1-1: USB disconnect, device number 77 [ 1218.372915][T27968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10097'. [ 1218.383019][T27968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10097'. [ 1219.344619][T27976] loop2: detected capacity change from 0 to 32768 [ 1219.384262][T27976] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop2 scanned by syz.2.10099 (27976) [ 1219.477248][T27976] BTRFS info (device loop2): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 1219.546088][T27976] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1219.596368][T27976] BTRFS info (device loop2): using free space tree [ 1219.822782][T27976] BTRFS info (device loop2): enabling ssd optimizations [ 1219.851831][T27976] BTRFS info (device loop2): auto enabling async discard [ 1220.354341][ T6165] BTRFS info (device loop2): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 1220.590757][ T6375] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 10 /dev/loop2 scanned by udevd (6375) [ 1220.868469][T28051] netlink: 'syz.3.10129': attribute type 1 has an invalid length. [ 1220.876396][T28051] netlink: 'syz.3.10129': attribute type 2 has an invalid length. [ 1220.937975][T28051] netlink: 'syz.3.10129': attribute type 1 has an invalid length. [ 1221.794525][T28080] netlink: 'syz.1.10141': attribute type 2 has an invalid length. [ 1221.999476][T28057] loop2: detected capacity change from 0 to 32768 [ 1222.041902][T28057] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.10132 (28057) [ 1222.054741][ T6658] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1222.085865][T28057] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1222.102017][T28057] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1222.118901][T28057] BTRFS info (device loop2): enabling ssd optimizations [ 1222.132247][T28057] BTRFS info (device loop2): not using ssd optimizations [ 1222.148081][T28057] BTRFS info (device loop2): turning off barriers [ 1222.170248][T28057] BTRFS info (device loop2): use no compression [ 1222.201490][T28057] BTRFS info (device loop2): using free space tree [ 1222.272106][ T6658] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1222.311986][ T6658] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.331074][ T6658] usb 1-1: Product: syz [ 1222.341902][ T6658] usb 1-1: Manufacturer: syz [ 1222.352729][ T6658] usb 1-1: SerialNumber: syz [ 1222.367487][ T6658] usb 1-1: config 0 descriptor?? [ 1222.600446][ T6165] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1222.806084][T28116] loop3: detected capacity change from 0 to 164 [ 1222.857471][ T6658] usb 1-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 1222.864817][ T6658] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1222.913164][ T6658] f81604: probe of 1-1:0.0 failed with error -71 [ 1222.957998][ T6658] usb 1-1: USB disconnect, device number 78 [ 1223.246798][ T6375] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop2 scanned by udevd (6375) [ 1223.307175][T28128] loop3: detected capacity change from 0 to 512 [ 1223.355414][T28128] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1223.469682][T28128] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1224.482840][T28147] overlay: Unknown parameter 'subj_role' [ 1224.626572][T28133] loop0: detected capacity change from 0 to 40427 [ 1224.661918][T28133] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 1224.709042][T28133] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1224.713800][T28151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10167'. [ 1224.735945][T28133] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x7ffff [ 1224.784914][T28133] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x6 [ 1224.828749][T28133] F2FS-fs (loop0): invalid crc value [ 1224.895608][T28133] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1225.028129][T28133] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1225.058253][T28133] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1225.337868][T28145] loop2: detected capacity change from 0 to 32768 [ 1225.382392][ T6161] syz-executor: attempt to access beyond end of device [ 1225.382392][ T6161] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1225.417748][T28145] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1225.448904][T28145] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1225.459863][ T6161] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1225.480495][T28145] BTRFS info (device loop2): enabling ssd optimizations [ 1225.514455][T28145] BTRFS info (device loop2): not using ssd optimizations [ 1225.555340][T28145] BTRFS info (device loop2): turning off barriers [ 1225.555369][T28145] BTRFS info (device loop2): use no compression [ 1225.555387][T28145] BTRFS info (device loop2): using free space tree [ 1225.914821][ T6165] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1226.618124][T28203] netlink: 'syz.2.10179': attribute type 21 has an invalid length. [ 1226.627136][T28203] netlink: 100 bytes leftover after parsing attributes in process `syz.2.10179'. [ 1227.205087][T28197] loop3: detected capacity change from 0 to 32768 [ 1227.289405][T28197] XFS (loop3): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 1227.382572][T28201] loop1: detected capacity change from 0 to 40427 [ 1227.393493][T28201] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1227.401366][T28201] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1227.420587][T28201] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x7ffff [ 1227.441075][T28201] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x6 [ 1227.487860][T28201] F2FS-fs (loop1): invalid crc value [ 1227.524445][T28201] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1227.625886][T28197] XFS (loop3): Ending clean mount [ 1227.759890][T28201] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1227.786068][T28201] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1227.892129][ T6169] XFS (loop3): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 1227.989876][ T6167] syz-executor: attempt to access beyond end of device [ 1227.989876][ T6167] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1228.021242][T28213] loop0: detected capacity change from 0 to 32768 [ 1228.040409][ T6167] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1228.071264][T28213] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop0 scanned by syz.0.10187 (28213) [ 1228.108844][T28213] BTRFS info (device loop0): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 1228.152276][T28213] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1228.201253][T28213] BTRFS info (device loop0): using free space tree [ 1228.415991][T28213] BTRFS info (device loop0): enabling ssd optimizations [ 1228.423039][T28213] BTRFS info (device loop0): auto enabling async discard [ 1228.868999][ T6161] BTRFS info (device loop0): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 1229.296997][ T6375] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 10 /dev/loop0 scanned by udevd (6375) [ 1229.421613][T28250] loop3: detected capacity change from 0 to 32768 [ 1229.617698][T28250] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1229.743493][T28250] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1229.807581][T28250] XFS (loop3): Starting recovery (logdev: internal) [ 1229.886821][T28250] XFS (loop3): Ending recovery (logdev: internal) [ 1230.143872][ T6169] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1230.380129][T28291] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1230.432592][T28261] loop2: detected capacity change from 0 to 32768 [ 1230.557388][T28261] XFS (loop2): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 1230.755504][ T23] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1230.880465][T28261] XFS (loop2): Ending clean mount [ 1230.912537][T28307] loop0: detected capacity change from 0 to 2048 [ 1230.928648][T28309] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1230.950659][T28307] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1231.006409][ T23] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1231.021875][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.021878][T28310] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1231.086149][ T23] usb 2-1: Product: syz [ 1231.093221][ T23] usb 2-1: Manufacturer: syz [ 1231.100393][ T23] usb 2-1: SerialNumber: syz [ 1231.132777][ T6658] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1231.245406][ T6165] XFS (loop2): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 1231.730296][ T23] usb 2-1: USB disconnect, device number 103 [ 1232.002855][T28312] loop3: detected capacity change from 0 to 32768 [ 1232.067778][T28312] JBD2: Ignoring recovery information on journal [ 1232.207711][T28316] loop0: detected capacity change from 0 to 32768 [ 1232.219828][T28316] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.10215 (28316) [ 1232.236820][T28312] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1232.241624][ T6658] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1232.277992][T28316] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1232.296634][ T6658] ath9k_htc: Failed to initialize the device [ 1232.330236][T28316] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1232.345697][T28326] loop2: detected capacity change from 0 to 512 [ 1232.359318][ T23] usb 2-1: ath9k_htc: USB layer deinitialized [ 1232.367746][T28316] BTRFS info (device loop0): enabling ssd optimizations [ 1232.404613][T28316] BTRFS info (device loop0): not using ssd optimizations [ 1232.435054][T28316] BTRFS info (device loop0): turning off barriers [ 1232.441599][T28316] BTRFS info (device loop0): use no compression [ 1232.512408][T28316] BTRFS info (device loop0): using free space tree [ 1232.545904][T28326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1232.615970][ T6169] ocfs2: Unmounting device (7,3) on (node local) [ 1232.644248][T28326] ext4 filesystem being mounted at /2545/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1232.937725][ T6165] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1233.147965][ T6161] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1233.326139][T28363] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10228'. [ 1233.378495][T28363] netlink: 172 bytes leftover after parsing attributes in process `syz.2.10228'. [ 1234.081684][T28359] loop3: detected capacity change from 0 to 32768 [ 1234.105314][T28359] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.10227 (28359) [ 1234.147127][T28359] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1234.174400][T28359] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1234.216405][T28359] BTRFS info (device loop3): using free space tree [ 1234.324159][T28359] BTRFS info (device loop3): enabling ssd optimizations [ 1234.390754][T28359] BTRFS info (device loop3): auto enabling async discard [ 1234.848901][ T6169] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1234.991142][T28409] loop2: detected capacity change from 0 to 2048 [ 1235.110797][T28409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1235.185306][T28418] loop0: detected capacity change from 0 to 256 [ 1235.313741][ T6165] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1235.389518][T28420] loop1: detected capacity change from 0 to 1024 [ 1235.401134][T28418] FAT-fs (loop0): Directory bread(block 64) failed [ 1235.414238][T28418] FAT-fs (loop0): Directory bread(block 65) failed [ 1235.447456][T28418] FAT-fs (loop0): Directory bread(block 66) failed [ 1235.465209][T28418] FAT-fs (loop0): Directory bread(block 67) failed [ 1235.513122][T28418] FAT-fs (loop0): Directory bread(block 68) failed [ 1235.519757][T28418] FAT-fs (loop0): Directory bread(block 69) failed [ 1235.554842][T28418] FAT-fs (loop0): Directory bread(block 70) failed [ 1235.561497][T28418] FAT-fs (loop0): Directory bread(block 71) failed [ 1235.590182][T28418] FAT-fs (loop0): Directory bread(block 72) failed [ 1235.596858][T28418] FAT-fs (loop0): Directory bread(block 73) failed [ 1236.035073][T28431] netlink: 'syz.3.10253': attribute type 1 has an invalid length. [ 1236.065680][T28431] netlink: 232 bytes leftover after parsing attributes in process `syz.3.10253'. [ 1236.088303][T28434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10252'. [ 1236.359439][T28442] netlink: 'syz.2.10259': attribute type 27 has an invalid length. [ 1236.547470][T28448] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10261'. [ 1236.612979][T28448] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10261'. [ 1237.009889][T28458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10266'. [ 1238.077468][ T56] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 1238.317311][T28438] syz.3.10257 (28438): drop_caches: 2 [ 1238.332970][ T56] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1238.349290][ T56] usb 1-1: not running at top speed; connect to a high speed hub [ 1238.372534][ T56] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1238.388383][ T56] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1238.415590][ T56] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1238.438323][ T56] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8193, setting to 64 [ 1238.476189][ T56] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1238.495589][T28501] ip6gretap1: entered promiscuous mode [ 1238.504996][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.524849][ T56] usb 1-1: Product: syz [ 1238.535721][ T56] usb 1-1: Manufacturer: syz [ 1238.548830][ T56] usb 1-1: SerialNumber: syz [ 1238.635429][T28506] loop1: detected capacity change from 0 to 128 [ 1238.733096][ T5765] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1238.810200][ T56] usb 1-1: 0:2 : does not exist [ 1238.936433][ T56] usb 1-1: USB disconnect, device number 79 [ 1238.994351][T28513] loop1: detected capacity change from 0 to 1764 [ 1239.013462][ T6375] udevd[6375]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1239.090823][T28513] syz.1.10291: attempt to access beyond end of device [ 1239.090823][T28513] loop1: rw=0, sector=7180648572, nr_sectors = 4 limit=1764 [ 1239.144551][T28513] Buffer I/O error on dev loop1, logical block 1795162143, async page read [ 1239.170438][T28513] syz.1.10291: attempt to access beyond end of device [ 1239.170438][T28513] loop1: rw=0, sector=7180648572, nr_sectors = 4 limit=1764 [ 1239.190770][T28513] Buffer I/O error on dev loop1, logical block 1795162143, async page read [ 1239.200624][ T28] audit: type=1800 audit(1787819574.540:3492): pid=28513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10291" name="file0" dev="loop1" ino=1923 res=0 errno=0 [ 1239.532612][T28481] Process accounting resumed [ 1239.826896][T28536] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1239.862872][T28536] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1240.102253][T28545] loop1: detected capacity change from 0 to 2048 [ 1240.200000][T28545] loop1: p4 < > [ 1240.448892][T28550] loop3: detected capacity change from 0 to 4096 [ 1240.514477][T28545] loop1: detected capacity change from 0 to 4096 [ 1240.523840][T28559] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1240.560188][T28545] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 1240.746345][T28545] ntfs3: loop1: $Secure::$SDH is corrupted. [ 1240.792174][T28545] ntfs3: loop1: Failed to initialize $Secure (-22). [ 1241.004514][T28569] siw: device registration error -23 [ 1241.089399][T28572] cgroup: none used incorrectly [ 1241.100360][T28573] netlink: 'syz.1.10321': attribute type 21 has an invalid length. [ 1241.187662][T28575] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10322'. [ 1241.219857][T28575] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10322'. [ 1241.287677][T28579] loop3: detected capacity change from 0 to 64 [ 1241.317650][T28579] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1241.334725][T28581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10325'. [ 1241.367519][T28581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10325'. [ 1241.812727][ T28] audit: type=1400 audit(1787819576.981:3493): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=28594 comm="syz.1.10331" [ 1241.944889][T28601] netlink: 'syz.3.10335': attribute type 20 has an invalid length. [ 1242.364890][T28609] loop3: detected capacity change from 0 to 4096 [ 1242.410271][T28609] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 1242.541030][T28609] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 1244.413026][T28644] syz.0.10355 (28644): drop_caches: 2 [ 1244.937759][T28669] loop3: detected capacity change from 0 to 32768 [ 1244.952240][T28669] [ 1244.952240][T28669] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1244.952240][T28669] [ 1245.000831][T28669] [ 1245.000831][T28669] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1245.000831][T28669] [ 1245.026999][T28669] [ 1245.026999][T28669] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1245.026999][T28669] [ 1245.369022][T28697] netlink: 'syz.2.10380': attribute type 15 has an invalid length. [ 1245.404131][T28697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10380'. [ 1245.814487][T28713] netlink: 'syz.1.10389': attribute type 1 has an invalid length. [ 1245.859941][T28713] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10389'. [ 1246.100540][T28725] netlink: 'syz.3.10394': attribute type 1 has an invalid length. [ 1246.153963][T28725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10394'. [ 1246.289976][T28733] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10397'. [ 1246.362163][T28733] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10397'. [ 1246.400011][T28738] x_tables: unsorted entry at hook 2 [ 1246.958831][T28756] loop0: detected capacity change from 0 to 2048 [ 1247.058092][T28756] loop0: p1 < > p4 < > [ 1247.310969][T28770] netlink: 'syz.2.10415': attribute type 1 has an invalid length. [ 1247.348213][T28770] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.10415'. [ 1247.376574][T28770] netlink: 'syz.2.10415': attribute type 1 has an invalid length. [ 1247.485484][T28776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10418'. [ 1247.536678][T28776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10418'. [ 1247.645169][T28780] netlink: 'syz.2.10420': attribute type 1 has an invalid length. [ 1247.653221][T28780] netlink: 'syz.2.10420': attribute type 1 has an invalid length. [ 1247.769798][T28785] ieee802154 phy0 wpan0: encryption failed: -90 [ 1248.338456][ T6194] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 1248.487681][T28807] loop2: detected capacity change from 0 to 4096 [ 1248.517042][T28807] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1248.556242][ T6194] usb 2-1: config 0 has an invalid interface number: 3 but max is 2 [ 1248.581178][T28807] ntfs3: loop2: Failed to load $Extend (-22). [ 1248.584286][ T6194] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 1248.593716][T28807] ntfs3: loop2: Failed to initialize $Extend. [ 1248.627376][ T6194] usb 2-1: config 0 has no interface number 1 [ 1248.633553][ T6194] usb 2-1: config 0 has no interface number 2 [ 1248.664746][ T6194] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1248.693511][ T6194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.722673][ T6194] usb 2-1: config 0 descriptor?? [ 1248.938064][T28815] MTD: Couldn't look up 'mtd0/file0': -2 [ 1249.003259][ T6194] qcserial 2-1:0.3: Qualcomm USB modem converter detected [ 1249.296054][ T6194] usb 2-1: USB disconnect, device number 104 [ 1249.306113][ T6194] qcserial 2-1:0.3: device disconnected [ 1249.707629][T28837] netlink: 'syz.0.10448': attribute type 3 has an invalid length. [ 1250.081841][T28848] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1251.087866][T28880] loop3: detected capacity change from 0 to 1024 [ 1251.164901][T28880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1251.510905][ T6169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.883358][ T28] audit: type=1326 audit(1787819586.402:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28906 comm="syz.1.10480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20abd9e0d9 code=0x7ffc0000 [ 1251.968190][ T28] audit: type=1326 audit(1787819586.402:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28906 comm="syz.1.10480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20abd9e0d9 code=0x7ffc0000 [ 1251.984125][T28910] netlink: 'syz.3.10481': attribute type 9 has an invalid length. [ 1252.032466][ T28] audit: type=1326 audit(1787819586.431:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28906 comm="syz.1.10480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20abd9e0d9 code=0x7ffc0000 [ 1252.069788][T28910] netlink: 'syz.3.10481': attribute type 6 has an invalid length. [ 1252.077689][T28910] netlink: 'syz.3.10481': attribute type 7 has an invalid length. [ 1252.107183][ T28] audit: type=1326 audit(1787819586.431:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28906 comm="syz.1.10480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20abd9e0d9 code=0x7ffc0000 [ 1252.131723][T28910] netlink: 'syz.3.10481': attribute type 8 has an invalid length. [ 1252.208811][ T28] audit: type=1326 audit(1787819586.440:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28906 comm="syz.1.10480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f20abd9e0d9 code=0x7ffc0000 [ 1252.310788][ T28] audit: type=1326 audit(1787819586.440:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28906 comm="syz.1.10480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20abd9e0d9 code=0x7ffc0000 [ 1252.419551][ T28] audit: type=1326 audit(1787819586.440:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28906 comm="syz.1.10480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20abd9e0d9 code=0x7ffc0000 [ 1252.540255][ T28] audit: type=1326 audit(1787819586.440:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28906 comm="syz.1.10480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f20abd9e0d9 code=0x7ffc0000 [ 1252.589842][ T28] audit: type=1326 audit(1787819586.440:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28906 comm="syz.1.10480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f20abd9e0d9 code=0x7ffc0000 [ 1252.977642][T28937] loop3: detected capacity change from 0 to 256 [ 1253.525222][T28955] bond1: down delay (128) is not a multiple of miimon (7), value rounded to 126 ms [ 1253.552626][T28955] bond1: peer notification delay (5) is not a multiple of miimon (7), value rounded to 0 ms [ 1253.595439][T28955] bond1: entered allmulticast mode [ 1253.620178][T28954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10504'. [ 1253.652419][T28954] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1253.680151][T28954] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10504'. [ 1254.627199][T28981] loop3: detected capacity change from 0 to 4096 [ 1254.671990][T28981] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1254.714301][T28985] program syz.2.10518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1254.801967][T28981] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1254.842783][T28981] ntfs3: loop3: Failed to load $Extend (-22). [ 1254.853863][T28981] ntfs3: loop3: Failed to initialize $Extend. [ 1255.111834][T28993] netlink: 'syz.2.10522': attribute type 3 has an invalid length. [ 1255.157889][T28993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10522'. [ 1255.254110][T28995] netlink: 'syz.1.10524': attribute type 1 has an invalid length. [ 1255.507489][T29005] loop3: detected capacity change from 0 to 512 [ 1255.553906][T29007] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 1255.598002][T29005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1255.649798][T29005] ext4 filesystem being mounted at /2455/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1255.928714][ T6169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1256.046921][T29022] loop0: detected capacity change from 0 to 256 [ 1257.076340][T29062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10554'. [ 1257.537939][T29082] loop2: detected capacity change from 0 to 512 [ 1257.572007][T29078] 9pnet: Could not find request transport: f [ 1257.668284][T29082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1257.730684][T29082] ext4 filesystem being mounted at /2644/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1257.922119][ T6165] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1258.219714][T29100] netlink: 'syz.0.10572': attribute type 1 has an invalid length. [ 1260.630429][T29184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10613'. [ 1260.631605][ T5973] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1260.685208][ T3462] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1261.319386][T29176] loop0: detected capacity change from 0 to 32768 [ 1261.399673][T29205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10623'. [ 1261.409376][T29176] JBD2: Ignoring recovery information on journal [ 1261.419399][T29176] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 1261.433074][T29205] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10623'. [ 1261.456168][T29176] JBD2: bad block at offset 32 [ 1261.516581][T29176] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1261.541448][T29211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10625'. [ 1261.553004][T29211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10625'. [ 1261.568618][T29211] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10625'. [ 1261.572028][T16677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1261.818801][T13492] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1261.872097][T13492] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1261.994758][ T6161] ocfs2: Unmounting device (7,0) on (node local) [ 1262.711533][T29245] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10642'. [ 1262.753657][T29242] loop0: detected capacity change from 0 to 4096 [ 1262.987241][T29254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10645'. [ 1263.011813][T29254] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10645'. [ 1263.029351][ T5973] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1263.297959][T29260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10648'. [ 1263.480042][T29264] loop2: detected capacity change from 0 to 4096 [ 1263.509200][T29264] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 1263.579103][ T28] audit: type=1326 audit(1787819597.339:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29267 comm="syz.1.10652" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20abd9e0d9 code=0x7ffc0000 [ 1263.641735][T29264] ntfs3: loop2: Failed to load $Extend (-22). [ 1263.662721][T29264] ntfs3: loop2: Failed to initialize $Extend. [ 1263.679138][ T28] audit: type=1326 audit(1787819597.339:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29267 comm="syz.1.10652" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20abd9e0d9 code=0x7ffc0000 [ 1263.783626][ T28] audit: type=1326 audit(1787819597.377:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29267 comm="syz.1.10652" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f20abd9e0d9 code=0x7ffc0000 [ 1263.838910][ T28] audit: type=1326 audit(1787819597.377:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29267 comm="syz.1.10652" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20abd9e0d9 code=0x7ffc0000 [ 1263.863629][ T28] audit: type=1326 audit(1787819597.377:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29267 comm="syz.1.10652" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20abd9e0d9 code=0x7ffc0000 [ 1264.221393][T29282] loop3: detected capacity change from 0 to 512 [ 1264.306589][T29282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1264.342390][T29282] ext4 filesystem being mounted at /2489/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1264.375716][T29282] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.10660: corrupted xattr block 33: invalid ea_ino [ 1264.580388][ T6169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1264.964609][T29306] loop3: detected capacity change from 0 to 256 [ 1264.985276][T29306] exfat: Deprecated parameter 'utf8' [ 1264.990782][T29306] exfat: Deprecated parameter 'namecase' [ 1265.077802][T29306] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1265.303559][T29284] loop1: detected capacity change from 0 to 32768 [ 1265.313707][T29311] loop2: detected capacity change from 0 to 4096 [ 1265.339088][T29284] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.10661 (29284) [ 1265.416162][T29315] binder: BC_ATTEMPT_ACQUIRE not supported [ 1265.422921][T29284] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1265.426368][T29315] binder: 29314:29315 ioctl c0306201 200000004a40 returned -22 [ 1265.456041][T29284] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1265.481324][T29284] BTRFS info (device loop1): enabling ssd optimizations [ 1265.495999][T29317] loop3: detected capacity change from 0 to 1024 [ 1265.502556][T29284] BTRFS info (device loop1): not using ssd optimizations [ 1265.526083][T29284] BTRFS info (device loop1): turning off barriers [ 1265.569804][T29284] BTRFS info (device loop1): use no compression [ 1265.593686][T29317] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 1265.606086][T29284] BTRFS info (device loop1): using free space tree [ 1266.092404][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1266.111244][ T6167] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1266.307035][T29343] loop3: detected capacity change from 0 to 256 [ 1266.484643][T29343] FAT-fs (loop3): Directory bread(block 64) failed [ 1266.498507][T29343] FAT-fs (loop3): Directory bread(block 65) failed [ 1266.531753][T29343] FAT-fs (loop3): Directory bread(block 66) failed [ 1266.538384][T29343] FAT-fs (loop3): Directory bread(block 67) failed [ 1266.573628][T29343] FAT-fs (loop3): Directory bread(block 68) failed [ 1266.608811][T29343] FAT-fs (loop3): Directory bread(block 69) failed [ 1266.615567][T29343] FAT-fs (loop3): Directory bread(block 70) failed [ 1266.658909][T29343] FAT-fs (loop3): Directory bread(block 71) failed [ 1266.669667][T29343] FAT-fs (loop3): Directory bread(block 72) failed [ 1266.698518][T29343] FAT-fs (loop3): Directory bread(block 73) failed [ 1266.795788][T29347] UBIFS error (pid: 29347): cannot open "ubi0/file0", error -22 [ 1266.815681][T29334] loop2: detected capacity change from 0 to 32768 [ 1266.990497][T29334] JBD2: Ignoring recovery information on journal [ 1267.103461][T29334] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1267.164485][T29337] loop0: detected capacity change from 0 to 32768 [ 1267.205130][T29337] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.10678 (29337) [ 1267.260031][T29337] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1267.290646][T29337] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1267.300307][T29337] BTRFS info (device loop0): using free space tree [ 1267.381289][T29358] loop1: detected capacity change from 0 to 256 [ 1267.478002][T29337] BTRFS info (device loop0): enabling ssd optimizations [ 1267.490187][T29337] BTRFS info (device loop0): auto enabling async discard [ 1267.602605][ T6161] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1267.602697][ T6165] ocfs2: Unmounting device (7,2) on (node local) [ 1268.008296][T29381] netlink: 'syz.1.10692': attribute type 21 has an invalid length. [ 1268.032845][T29381] __nla_validate_parse: 1 callbacks suppressed [ 1268.032901][T29381] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10692'. [ 1268.065007][T29381] netlink: 'syz.1.10692': attribute type 5 has an invalid length. [ 1268.075633][T29381] netlink: 'syz.1.10692': attribute type 6 has an invalid length. [ 1268.113077][T29381] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10692'. [ 1268.342808][T29383] loop3: detected capacity change from 0 to 4096 [ 1268.395794][T29383] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1268.496041][T29383] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1268.520823][T29383] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 1268.589567][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1268.596223][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1268.663181][T29383] ntfs3: loop3: failed to convert "c46c" to cp869 [ 1269.170901][T16677] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1269.366483][ T5973] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1269.414678][T16677] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1269.428372][T16677] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1269.456798][T16677] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1269.468312][T16677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.482776][T16677] usb 2-1: Product: syz [ 1269.487169][T16677] usb 2-1: Manufacturer: syz [ 1269.492438][T16677] usb 2-1: SerialNumber: syz [ 1269.577167][ T5973] usb 3-1: Using ep0 maxpacket: 32 [ 1269.590262][ T5973] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.618318][ T5973] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1269.652302][ T5973] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1269.669490][ T5973] usb 3-1: config 0 interface 0 has no altsetting 1 [ 1269.680392][ T5973] usb 3-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 1269.691233][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.705010][ T5973] usb 3-1: Product: syz [ 1269.709281][ T5973] usb 3-1: Manufacturer: syz [ 1269.713946][ T5973] usb 3-1: SerialNumber: syz [ 1269.760131][ T5973] usb 3-1: config 0 descriptor?? [ 1269.777733][T16677] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 105 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1270.051886][ T5973] usb 2-1: USB disconnect, device number 105 [ 1270.091825][ T5973] usblp0: removed [ 1270.276609][ T6266] usb 3-1: USB disconnect, device number 68 [ 1270.414594][T29429] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10714'. [ 1270.564501][T29431] loop0: detected capacity change from 0 to 4096 [ 1270.588903][T29431] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1270.685805][T29431] ntfs3: loop0: ino=1e, "file1" attr_set_size [ 1270.701614][T29431] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1270.713238][T29431] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 1270.807653][ T48] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 1270.958962][T29441] loop0: detected capacity change from 0 to 1024 [ 1270.988383][T29441] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1271.023111][T29443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1271.045108][T29441] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.10720: lblock 2 mapped to illegal pblock 2 (length 1) [ 1271.060780][T29441] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1271.069961][T29441] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.10720: lblock 0 mapped to illegal pblock 48 (length 1) [ 1271.087095][T29441] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 1271.099107][T29441] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.10720: Failed to acquire dquot type 0 [ 1271.112740][T29441] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1271.126848][T29446] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1271.127280][T29441] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.10720: mark_inode_dirty error [ 1271.166331][T29441] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1271.207950][T29441] EXT4-fs (loop0): 1 orphan inode deleted [ 1271.216195][T29441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1271.236235][ T3516] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 1271.254368][ T3516] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 1271.292353][ T3516] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 0 [ 1271.377726][ T6161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1271.404897][ T60] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 1271.449126][ T60] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 1271.469470][ T60] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 0 [ 1271.504206][ T6161] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1271.555367][ T6161] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1271.585446][ T6161] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 1271.693890][T29457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10729'. [ 1271.800313][T29462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10730'. [ 1271.915864][T29459] Process accounting paused [ 1272.581574][ T28] audit: type=1400 audit(1787819605.759:3508): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=29489 comm="syz.2.10745" [ 1272.613119][ C0] vkms_vblank_simulate: vblank timer overrun [ 1272.760371][T29491] loop0: detected capacity change from 0 to 4096 [ 1272.832622][T29491] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1272.897163][T29491] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1272.913394][T29491] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 1273.018602][T29491] ntfs3: loop0: failed to convert "c46c" to cp869 [ 1273.180565][T29508] netlink: 'syz.2.10753': attribute type 3 has an invalid length. [ 1273.223571][T29508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10753'. [ 1273.627474][T29524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10761'. [ 1273.640885][T29523] loop1: detected capacity change from 0 to 512 [ 1273.653338][T29524] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1273.726404][T29523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1273.788243][T29523] ext4 filesystem being mounted at /2596/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1274.032448][ T6167] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.202507][T29544] netlink: 'syz.1.10769': attribute type 1 has an invalid length. [ 1274.256053][T29546] veth1_macvtap: left promiscuous mode [ 1274.645723][T29554] loop2: detected capacity change from 0 to 4096 [ 1275.144941][T29575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1275.355934][T29579] loop1: detected capacity change from 0 to 2048 [ 1275.362836][T29572] loop3: detected capacity change from 0 to 8192 [ 1275.424303][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1275.455049][T29579] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1275.769565][T29589] loop3: detected capacity change from 0 to 2048 [ 1275.895145][T29589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1275.947635][T29589] ext4 filesystem being mounted at /2531/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1276.047912][T29601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10792'. [ 1276.098565][ T6169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1276.358260][T29610] netlink: 'syz.1.10796': attribute type 10 has an invalid length. [ 1276.371388][T29610] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10796'. [ 1276.390140][T29610] team0: entered promiscuous mode [ 1276.411786][T29610] team_slave_0: entered promiscuous mode [ 1276.435784][T29610] team_slave_1: entered promiscuous mode [ 1276.457305][T29610] team0: entered allmulticast mode [ 1276.469006][T29607] loop3: detected capacity change from 0 to 4096 [ 1276.471478][T29610] team_slave_0: entered allmulticast mode [ 1276.490052][T29610] team_slave_1: entered allmulticast mode [ 1276.540267][T29610] bridge0: port 3(team0) entered blocking state [ 1276.556871][T29610] bridge0: port 3(team0) entered disabled state [ 1276.609830][T29610] bridge0: port 3(team0) entered blocking state [ 1276.618157][T29610] bridge0: port 3(team0) entered forwarding state [ 1276.662582][ T5434] veth1_macvtap: entered promiscuous mode [ 1278.639093][T29690] loop1: detected capacity change from 0 to 128 [ 1278.692735][T29690] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 1278.714688][T29685] loop2: detected capacity change from 0 to 4096 [ 1278.737723][T29690] FAT-fs (loop1): Filesystem has been set read-only [ 1278.824084][T29685] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1280.014328][T29736] __vm_enough_memory: pid: 29736, comm: syz.2.10847, not enough memory for the allocation [ 1280.153246][T29740] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10849'. [ 1280.456740][T29748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10853'. [ 1280.586440][T29746] loop1: detected capacity change from 0 to 4096 [ 1280.612227][T29746] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1280.962516][T29732] loop3: detected capacity change from 0 to 40427 [ 1281.025692][T29732] F2FS-fs (loop3): Small segment_count (20 < 1 * 24) [ 1281.045650][T29761] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1281.054371][T29732] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1281.107579][T29732] F2FS-fs (loop3): build fault injection attr: rate: 16, type: 0x7ffff [ 1281.145758][T29732] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7698c [ 1281.192359][T29732] F2FS-fs (loop3): invalid crc value [ 1281.226580][T29732] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x217/0x970 [ 1281.263277][T29732] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1281.330824][T29732] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x217/0x970 [ 1281.463239][T29732] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1281.470384][T29732] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1281.588082][T29732] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x139/0x910 [ 1281.714183][ T6169] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x4c3/0x1910 [ 1281.751356][ T6169] F2FS-fs (loop3): invalid blkaddr: 1028, type: 10, run fsck to fix. [ 1281.841232][ T6169] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x4c3/0x1910 [ 1281.871234][ T6169] F2FS-fs (loop3): invalid blkaddr: 515, type: 10, run fsck to fix. [ 1281.888953][ T6169] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x55e/0x1910 [ 1281.913397][ T6169] F2FS-fs (loop3): invalid blkaddr: 1026, type: 10, run fsck to fix. [ 1282.238295][T29792] bridge1: entered allmulticast mode [ 1282.450480][T29799] loop2: detected capacity change from 0 to 256 [ 1282.483548][T29799] FAT-fs (loop2): Unrecognized mount option "sysÀRì®M–ñ"IÃë_immutable" or missing value [ 1282.495660][T29800] loop0: detected capacity change from 0 to 8 [ 1282.618263][T29800] SQUASHFS error: Failed to read block 0x8f: -5 [ 1282.660941][ T28] audit: type=1800 audit(1787819615.199:3509): pid=29800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10878" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 1282.793126][T29810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10880'. [ 1282.804541][T29807] loop3: detected capacity change from 0 to 256 [ 1282.831989][T29807] exfat: Deprecated parameter 'utf8' [ 1282.837370][T29807] exfat: Deprecated parameter 'utf8' [ 1282.872353][T29810] netlink: 540 bytes leftover after parsing attributes in process `syz.1.10880'. [ 1282.939490][T29807] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1283.235659][T29820] netlink: 'syz.2.10888': attribute type 9 has an invalid length. [ 1283.328325][ T28] audit: type=1326 audit(1787819615.817:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29825 comm="syz.0.10889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708359e0d9 code=0x7ffc0000 [ 1283.420260][ T28] audit: type=1326 audit(1787819615.817:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29825 comm="syz.0.10889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708359e0d9 code=0x7ffc0000 [ 1283.518396][ T28] audit: type=1326 audit(1787819615.817:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29825 comm="syz.0.10889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f708359e0d9 code=0x7ffc0000 [ 1283.577552][ T28] audit: type=1326 audit(1787819615.817:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29825 comm="syz.0.10889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708359e0d9 code=0x7ffc0000 [ 1283.608880][ T28] audit: type=1326 audit(1787819615.817:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29825 comm="syz.0.10889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708359e0d9 code=0x7ffc0000 [ 1283.862905][T16677] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 1284.024736][T29844] C: renamed from team_slave_0 (while UP) [ 1284.041044][T29844] netlink: 'syz.3.10898': attribute type 3 has an invalid length. [ 1284.054403][T29844] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10898'. [ 1284.067359][T29844] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1284.094327][T16677] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.116586][T16677] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1284.134544][T16677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.167096][T16677] usb 1-1: Product: syz [ 1284.171357][T16677] usb 1-1: Manufacturer: syz [ 1284.188017][T16677] usb 1-1: SerialNumber: syz [ 1284.203293][T29824] loop1: detected capacity change from 0 to 32768 [ 1284.212770][T16677] usb 1-1: config 0 descriptor?? [ 1284.222003][T16677] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1284.272333][T29824] [ 1284.272333][T29824] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1284.272333][T29824] [ 1284.358152][T29824] [ 1284.358152][T29824] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1284.358152][T29824] [ 1284.412251][T29824] [ 1284.412251][T29824] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1284.412251][T29824] [ 1284.452900][T29824] [ 1284.452900][T29824] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1284.452900][T29824] [ 1284.490792][T29824] [ 1284.490792][T29824] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1284.490792][T29824] [ 1284.543977][T29824] [ 1284.543977][T29824] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1284.543977][T29824] [ 1284.576052][T29824] [ 1284.576052][T29824] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1284.576052][T29824] [ 1284.619725][ T114] [ 1284.619725][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1284.619725][ T114] [ 1284.633920][ T23] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1284.660026][T16677] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 1284.666961][T16677] gspca_pac7302: probe of 1-1:0.0 failed with error -71 [ 1284.719092][T16677] usb 1-1: USB disconnect, device number 80 [ 1284.756544][ T6167] [ 1284.756544][ T6167] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1284.756544][ T6167] [ 1284.777578][ T6167] [ 1284.777578][ T6167] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1284.777578][ T6167] [ 1284.863185][ T23] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1284.878237][ T23] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1284.899463][ T23] usb 4-1: Product: syz [ 1284.915433][ T23] usb 4-1: SerialNumber: syz [ 1284.922845][ T23] usb 4-1: config 0 descriptor?? [ 1285.170001][ T23] hso 4-1:0.0: Failed to find BULK IN ep [ 1285.391344][ T6658] usb 4-1: USB disconnect, device number 57 [ 1285.407295][ T28] audit: type=1326 audit(1787819617.772:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29867 comm="syz.1.10909" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20abd9e0d9 code=0x7ffc0000 [ 1285.496743][ T28] audit: type=1326 audit(1787819617.772:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29867 comm="syz.1.10909" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20abd9e0d9 code=0x7ffc0000 [ 1285.562111][ T28] audit: type=1326 audit(1787819617.800:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29867 comm="syz.1.10909" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f20abd9e0d9 code=0x7ffc0000 [ 1285.601143][ T23] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1285.660262][ T28] audit: type=1326 audit(1787819617.978:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29867 comm="syz.1.10909" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20abd9e0d9 code=0x7ffc0000 [ 1285.822861][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.855866][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1285.885340][ T23] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1285.952322][ T23] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1285.973367][ T23] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice= 0.00 [ 1285.982524][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.271536][ T23] peak_usb 3-1:1.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1286.337086][ T23] peak_usb 3-1:1.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1286.490309][ T23] peak_usb: probe of 3-1:1.0 failed with error -71 [ 1286.520447][T29889] autofs4:pid:29889:autofs_fill_super: called with bogus options [ 1286.536184][ T23] usb 3-1: USB disconnect, device number 69 [ 1286.626627][T29893] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10920'. [ 1286.689233][T29896] loop1: detected capacity change from 0 to 256 [ 1287.220356][T29914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10928'. [ 1287.257973][T29914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10928'. [ 1288.083524][T29946] loop3: detected capacity change from 0 to 256 [ 1288.219332][T29946] FAT-fs (loop3): Directory bread(block 64) failed [ 1288.226080][T29946] FAT-fs (loop3): Directory bread(block 65) failed [ 1288.238311][T29950] loop1: detected capacity change from 0 to 1024 [ 1288.276023][T29953] loop2: detected capacity change from 0 to 22 [ 1288.281337][T29950] EXT4-fs: Ignoring removed orlov option [ 1288.285441][T29946] FAT-fs (loop3): Directory bread(block 66) failed [ 1288.322610][T29953] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1288.329929][T29946] FAT-fs (loop3): Directory bread(block 67) failed [ 1288.352292][T29946] FAT-fs (loop3): Directory bread(block 68) failed [ 1288.360611][T29950] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1288.368536][T29953] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1288.393933][T29956] loop0: detected capacity change from 0 to 1024 [ 1288.400555][T29946] FAT-fs (loop3): Directory bread(block 69) failed [ 1288.407256][T29946] FAT-fs (loop3): Directory bread(block 70) failed [ 1288.465621][T29946] FAT-fs (loop3): Directory bread(block 71) failed [ 1288.472356][T29946] FAT-fs (loop3): Directory bread(block 72) failed [ 1288.487507][T29946] FAT-fs (loop3): Directory bread(block 73) failed [ 1288.547851][T29950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1288.931369][ T6167] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1289.380532][T29983] netlink: 'syz.1.10953': attribute type 17 has an invalid length. [ 1289.736254][T16677] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1289.879718][T29998] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10958'. [ 1289.922926][T30000] loop3: detected capacity change from 0 to 64 [ 1289.951365][T16677] usb 3-1: Using ep0 maxpacket: 32 [ 1290.004258][T16677] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1290.030949][T16677] usb 3-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 1290.043199][T16677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.067988][T16677] usb 3-1: Product: syz [ 1290.116913][T16677] usb 3-1: Manufacturer: syz [ 1290.121859][T16677] usb 3-1: SerialNumber: syz [ 1290.418946][T16677] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1290.436057][T16677] usb 3-1: unit 0 not found! [ 1290.502157][T16677] usb 3-1: USB disconnect, device number 70 [ 1290.578891][ T6375] udevd[6375]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1290.814047][T30019] usb usb2: usbfs: process 30019 (syz.3.10968) did not claim interface 0 before use [ 1290.903505][T30002] loop1: detected capacity change from 0 to 32768 [ 1291.002462][T30024] loop0: detected capacity change from 0 to 512 [ 1291.024338][T30002] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 1291.108006][T30026] loop3: detected capacity change from 0 to 64 [ 1291.419648][T30030] loop0: detected capacity change from 0 to 128 [ 1291.463791][T30030] ufs: ufstype=nextstep-cd is supported read-only [ 1291.586378][T30030] loop0: detected capacity change from 0 to 1024 [ 1291.710625][T30037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10977'. [ 1292.158132][T30044] bond2: Unable to set down delay as MII monitoring is disabled [ 1292.202062][T30044] bond2 (unregistering): Released all slaves [ 1292.743972][T30068] loop2: detected capacity change from 0 to 256 [ 1292.845932][T30068] FAT-fs (loop2): Directory bread(block 64) failed [ 1292.884794][T30068] FAT-fs (loop2): Directory bread(block 65) failed [ 1292.899909][T30068] FAT-fs (loop2): Directory bread(block 66) failed [ 1292.924126][T30068] FAT-fs (loop2): Directory bread(block 67) failed [ 1292.959848][T30068] FAT-fs (loop2): Directory bread(block 68) failed [ 1292.993718][T30068] FAT-fs (loop2): Directory bread(block 69) failed [ 1293.025969][T30068] FAT-fs (loop2): Directory bread(block 70) failed [ 1293.065108][T30068] FAT-fs (loop2): Directory bread(block 71) failed [ 1293.097948][T30068] FAT-fs (loop2): Directory bread(block 72) failed [ 1293.122820][T30068] FAT-fs (loop2): Directory bread(block 73) failed [ 1293.164939][T30049] loop0: detected capacity change from 0 to 32768 [ 1293.190409][T30081] loop1: detected capacity change from 0 to 256 [ 1293.200988][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1293.259581][T30049] JBD2: Ignoring recovery information on journal [ 1293.520036][T30049] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1293.787642][T30049] OCFS2: ERROR (device loop0): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 1293.787885][T30049] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1293.841453][T30049] OCFS2: File system is now read-only. [ 1293.851033][T30049] (syz.0.10982,30049,1):ocfs2_calc_xattr_init:638 ERROR: status = -117 [ 1293.893799][T30049] (syz.0.10982,30049,1):ocfs2_mknod:334 ERROR: status = -117 [ 1293.927298][T30049] (syz.0.10982,30049,1):ocfs2_mknod:502 ERROR: status = -117 [ 1293.958800][T30049] (syz.0.10982,30049,1):ocfs2_create:676 ERROR: status = -117 [ 1294.213801][ T6161] ocfs2: Unmounting device (7,0) on (node local) [ 1294.747528][T30127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11003'. [ 1294.781028][ T56] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1294.873078][T30133] No source specified [ 1294.957605][T30135] cgroup: Invalid name [ 1295.009213][ T56] usb 2-1: Using ep0 maxpacket: 16 [ 1295.047521][ T56] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1295.077952][ T56] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.101567][ T56] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1295.116096][ T56] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.135889][ T56] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1295.146990][ T56] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.176353][ T56] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1295.198601][ T56] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.228093][T30143] loop0: detected capacity change from 0 to 512 [ 1295.235518][ T56] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1295.254587][ T56] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.288726][ T56] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1295.307534][ T56] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.326497][ T56] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1295.332132][T30143] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1295.354023][ T56] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.364850][ T56] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1295.401027][T30143] EXT4-fs: Ignoring removed mblk_io_submit option [ 1295.401849][ T56] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.445978][ T56] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1295.488740][T30152] loop3: detected capacity change from 0 to 16 [ 1295.495970][T30143] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1295.513453][T30152] erofs: (device loop3): mounted with root inode @ nid 36. [ 1295.528387][T30143] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 1295.565952][ T56] usb 2-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 1295.616052][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.647058][T30143] EXT4-fs (loop0): 1 truncate cleaned up [ 1295.664825][ T56] usb 2-1: Product: syz [ 1295.665842][T30143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1295.682131][ T56] usb 2-1: Manufacturer: syz [ 1295.682156][ T56] usb 2-1: SerialNumber: syz [ 1295.749121][T30143] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #2: block 4: comm syz.0.11015: lblock 0 mapped to illegal pblock 4 (length 1) [ 1295.796412][T30143] EXT4-fs (loop0): Remounting filesystem read-only [ 1295.921610][ T6161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1295.996053][ T56] usb 2-1: USB disconnect, device number 106 [ 1296.204247][T30167] loop2: detected capacity change from 0 to 2048 [ 1296.233470][T30167] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1296.335449][T30171] loop0: detected capacity change from 0 to 512 [ 1296.376805][T30171] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1296.407149][T30171] EXT4-fs (loop0): invalid journal inode [ 1296.412956][T30171] EXT4-fs (loop0): can't get journal size [ 1296.439222][T30171] EXT4-fs (loop0): 1 truncate cleaned up [ 1296.446566][T30171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1296.582189][ T6161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1296.626854][T30178] loop3: detected capacity change from 0 to 512 [ 1296.673585][T30178] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1296.680350][T30178] EXT4-fs: Ignoring removed mblk_io_submit option [ 1296.739519][T30178] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1296.774618][T30178] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 1296.820019][T30178] EXT4-fs (loop3): 1 truncate cleaned up [ 1296.849348][T30178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1296.950424][T30178] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #2: block 4: comm syz.3.11031: lblock 0 mapped to illegal pblock 4 (length 1) [ 1297.017239][T30178] EXT4-fs (loop3): Remounting filesystem read-only [ 1297.033437][T30187] openvswitch: netlink: Actions may not be safe on all matching packets [ 1297.189672][ T6169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1297.294552][T30194] gretap0: left promiscuous mode [ 1297.389090][T30194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1297.424015][T30197] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11039'. [ 1297.720790][T30207] loop3: detected capacity change from 0 to 512 [ 1297.728283][T30207] EXT4-fs: Ignoring removed oldalloc option [ 1297.807333][T30207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1297.820871][T30209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11045'. [ 1297.837023][T30209] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1297.896024][T30207] ext4 filesystem being mounted at /2594/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1298.108266][T30207] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.11043: corrupted xattr block 32: invalid ea_ino [ 1298.214308][ T6169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1298.233372][T16329] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 1298.448965][T16329] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1298.461919][T16329] usb 3-1: config 100 has an invalid interface number: 173 but max is 0 [ 1298.501090][T16329] usb 3-1: config 100 has no interface number 0 [ 1298.507490][T16329] usb 3-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 1298.538140][T16329] usb 3-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1298.562385][T16329] usb 3-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1298.597382][T16329] usb 3-1: config 100 interface 173 has no altsetting 0 [ 1298.616872][T16329] usb 3-1: string descriptor 0 read error: -22 [ 1298.634576][T16329] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1298.657054][T16329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.700739][T30217] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1298.739076][T16329] metro_usb 3-1:100.173: Metrologic USB to Serial converter detected [ 1298.777727][T16329] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1299.045363][T16329] usb 3-1: USB disconnect, device number 71 [ 1299.067698][T16329] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1299.086149][T16329] metro_usb 3-1:100.173: device disconnected [ 1300.473256][T30303] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1300.827825][T30313] loop0: detected capacity change from 0 to 2048 [ 1300.970129][T30313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1301.017182][T30313] fscrypt (loop0, inode 12): Error -61 getting encryption context [ 1301.045016][T30324] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1301.078613][T30327] loop2: detected capacity change from 0 to 764 [ 1301.090004][ T6161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1301.652140][T30344] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11110'. [ 1302.021646][T30356] loop0: detected capacity change from 0 to 256 [ 1302.141100][T30350] bond0: left promiscuous mode [ 1302.155750][T30350] : left promiscuous mode [ 1302.171095][T30350] bond_slave_1: left promiscuous mode [ 1302.197111][T30350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1302.422587][T30364] netlink: 'syz.0.11120': attribute type 12 has an invalid length. [ 1302.657318][T30348] loop2: detected capacity change from 0 to 32768 [ 1302.700831][T30348] JBD2: Ignoring recovery information on journal [ 1302.771596][T30348] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1302.971667][T30348] OCFS2: ERROR (device loop2): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 1302.971707][T30348] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1303.031245][T30348] OCFS2: File system is now read-only. [ 1303.074366][T30348] (syz.2.11111,30348,0):ocfs2_calc_xattr_init:638 ERROR: status = -117 [ 1303.095937][T30348] (syz.2.11111,30348,0):ocfs2_mknod:334 ERROR: status = -117 [ 1303.128464][T30348] (syz.2.11111,30348,0):ocfs2_mknod:502 ERROR: status = -117 [ 1303.182382][T30348] (syz.2.11111,30348,0):ocfs2_create:676 ERROR: status = -117 [ 1303.327951][ T6165] ocfs2: Unmounting device (7,2) on (node local) [ 1303.542114][T30395] loop1: detected capacity change from 0 to 256 [ 1304.187106][ T6194] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1304.422165][ T6194] usb 1-1: Using ep0 maxpacket: 8 [ 1304.430025][ T6194] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1304.443723][ T6194] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1304.473424][ T6194] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1304.493771][ T6194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.515408][ T6194] usb 1-1: Product: syz [ 1304.526217][ T6194] usb 1-1: Manufacturer: syz [ 1304.539825][ T6194] usb 1-1: SerialNumber: syz [ 1304.562200][ T6194] usb 1-1: config 0 descriptor?? [ 1304.735336][T30433] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1304.765904][T30435] program syz.3.11154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1305.080916][ T5973] usb 1-1: USB disconnect, device number 81 [ 1305.250751][T30451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11161'. [ 1305.277591][T30451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11161'. [ 1305.286806][T30451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1305.489710][T30458] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1305.660079][T30401] Process accounting resumed [ 1306.256751][T30482] loop1: detected capacity change from 0 to 2048 [ 1306.321691][T30486] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1306.362903][T30482] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1306.439984][T30482] Remounting filesystem read-only [ 1306.490849][T30463] loop3: detected capacity change from 0 to 32768 [ 1306.550756][T30463] JBD2: Ignoring recovery information on journal [ 1306.623829][T30463] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1306.665587][T30494] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1306.880277][T30463] OCFS2: ERROR (device loop3): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 1306.880314][T30463] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1306.953418][T30463] OCFS2: File system is now read-only. [ 1306.987416][T30463] (syz.3.11167,30463,0):ocfs2_calc_xattr_init:638 ERROR: status = -117 [ 1306.995765][T30463] (syz.3.11167,30463,0):ocfs2_mknod:334 ERROR: status = -117 [ 1307.030273][T30463] (syz.3.11167,30463,0):ocfs2_mknod:502 ERROR: status = -117 [ 1307.037762][T30463] (syz.3.11167,30463,0):ocfs2_create:676 ERROR: status = -117 [ 1307.221639][ T6169] ocfs2: Unmounting device (7,3) on (node local) [ 1307.270628][T30509] loop2: detected capacity change from 0 to 1024 [ 1307.286829][ T6658] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1307.355970][T30509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1307.433269][ T6165] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1307.504390][ T6658] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.533271][ T6658] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1307.542413][ T6658] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.582403][ T6658] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1308.480382][T30533] loop1: detected capacity change from 0 to 32768 [ 1308.525438][T30533] JBD2: Ignoring recovery information on journal [ 1308.603770][T30544] nvme nvme0: rdma connection establishment failed (-104) [ 1308.616932][T30533] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1308.763064][ T6658] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 1308.822507][T30533] OCFS2: ERROR (device loop1): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 1308.822551][T30533] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1308.873625][T30533] OCFS2: File system is now read-only. [ 1308.889378][T30533] (syz.1.11197,30533,1):ocfs2_calc_xattr_init:638 ERROR: status = -117 [ 1308.908394][T30533] (syz.1.11197,30533,1):ocfs2_mknod:334 ERROR: status = -117 [ 1308.919549][T30533] (syz.1.11197,30533,1):ocfs2_mknod:502 ERROR: status = -117 [ 1308.965172][T30533] (syz.1.11197,30533,0):ocfs2_create:676 ERROR: status = -117 [ 1308.982014][ T6658] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1309.023556][ T6658] stv0680 1-1:4.0: last error: 86, command = 0x0 [ 1309.061493][ T6658] usb 1-1: USB disconnect, device number 82 [ 1309.188741][ T6167] ocfs2: Unmounting device (7,1) on (node local) [ 1309.744405][T30567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11212'. [ 1309.919922][T30571] loop1: detected capacity change from 0 to 256 [ 1310.189129][T30577] netlink: 'syz.1.11218': attribute type 1 has an invalid length. [ 1310.236819][T30577] netlink: 'syz.1.11218': attribute type 3 has an invalid length. [ 1310.244795][T30577] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11218'. [ 1310.550977][T30590] netlink: 'syz.3.11225': attribute type 1 has an invalid length. [ 1310.582562][T30590] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.11225'. [ 1310.684238][T30595] loop1: detected capacity change from 0 to 2048 [ 1310.756543][T30595] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1310.814159][T30601] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1310.884058][T30595] NILFS error (device loop1): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 1310.957878][T30595] Remounting filesystem read-only [ 1311.046353][T30609] netlink: 'syz.2.11233': attribute type 6 has an invalid length. [ 1311.161911][T30604] loop3: detected capacity change from 0 to 4096 [ 1311.256003][T30614] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1311.306125][T30616] sock: sock_timestamping_bind_phc: sock not bind to device [ 1311.950839][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1311.950858][ T28] audit: type=1326 audit(1787819642.592:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30635 comm="syz.0.11247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708359e0d9 code=0x7ffc0000 [ 1312.049097][ T28] audit: type=1326 audit(1787819642.592:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30635 comm="syz.0.11247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708359e0d9 code=0x7ffc0000 [ 1312.110448][ T28] audit: type=1326 audit(1787819642.592:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30635 comm="syz.0.11247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708359e0d9 code=0x7ffc0000 [ 1312.151411][T30642] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11249'. [ 1312.160563][T30642] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11249'. [ 1312.186585][ T28] audit: type=1326 audit(1787819642.611:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30635 comm="syz.0.11247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f708359e0d9 code=0x7ffc0000 [ 1312.220484][T30644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11250'. [ 1312.242841][ T28] audit: type=1326 audit(1787819642.611:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30635 comm="syz.0.11247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708359e0d9 code=0x7ffc0000 [ 1312.305493][ T28] audit: type=1326 audit(1787819642.611:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30635 comm="syz.0.11247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708359e0d9 code=0x7ffc0000 [ 1312.347406][ T28] audit: type=1326 audit(1787819642.611:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30635 comm="syz.0.11247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708359e0d9 code=0x7ffc0000 [ 1312.463582][ T28] audit: type=1326 audit(1787819642.611:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30635 comm="syz.0.11247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f708359e0d9 code=0x7ffc0000 [ 1312.499405][T30649] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 1312.524155][ T28] audit: type=1326 audit(1787819642.611:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30635 comm="syz.0.11247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f708359e0d9 code=0x7ffc0000 [ 1313.013580][T30668] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.11261'. [ 1313.070887][T30669] loop2: detected capacity change from 0 to 512 [ 1313.095453][T30669] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1313.144249][T30669] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1313.154084][T30669] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1313.211374][T30669] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1313.225325][T30669] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 1313.275372][T30669] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1313.315996][T30669] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.11262: bg 0: block 34: padding at end of block bitmap is not set [ 1313.392818][T30669] Quota error (device loop2): write_blk: dquota write failed [ 1313.422840][T30669] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.11262: Failed to acquire dquot type 1 [ 1313.476139][T30669] EXT4-fs (loop2): 1 truncate cleaned up [ 1313.498811][T30669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1313.545950][T30669] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1313.764601][T30680] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11267'. [ 1313.806902][T30680] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1313.996515][T30676] loop1: detected capacity change from 0 to 32768 [ 1314.005656][T30665] loop3: detected capacity change from 0 to 32768 [ 1314.077629][T30676] JBD2: Ignoring recovery information on journal [ 1314.150319][T30676] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1314.302606][T30692] netlink: 'syz.0.11271': attribute type 21 has an invalid length. [ 1314.335014][T30692] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11271'. [ 1314.412885][T30676] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (3298534883402, expected 74) [ 1314.460302][T30676] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1314.495583][T30676] OCFS2: File system is now read-only. [ 1314.519424][T30676] (syz.1.11265,30676,0):ocfs2_search_chain:1783 ERROR: status = -30 [ 1314.538516][T30676] (syz.1.11265,30676,0):ocfs2_search_chain:1893 ERROR: status = -30 [ 1314.597765][T30676] (syz.1.11265,30676,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 1314.606480][T30676] (syz.1.11265,30676,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 1314.625490][T30676] (syz.1.11265,30676,0):ocfs2_claim_new_inode:2248 ERROR: status = -30 [ 1314.638847][T30676] (syz.1.11265,30676,0):ocfs2_claim_new_inode:2263 ERROR: status = -30 [ 1314.662194][T30676] (syz.1.11265,30676,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1314.685551][T30676] (syz.1.11265,30676,0):ocfs2_mknod:385 ERROR: status = -30 [ 1314.726685][T30676] (syz.1.11265,30676,0):ocfs2_mknod:502 ERROR: status = -30 [ 1314.734078][T30676] (syz.1.11265,30676,0):ocfs2_create:676 ERROR: status = -30 [ 1314.737957][T30701] cgroup: Name too long [ 1314.962846][ T6167] ocfs2: Unmounting device (7,1) on (node local) [ 1315.572000][T30699] loop2: detected capacity change from 0 to 32768 [ 1315.657521][T30699] JBD2: Ignoring recovery information on journal [ 1315.662306][T30721] loop0: detected capacity change from 0 to 1764 [ 1315.671373][T30699] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 1315.685725][T30699] JBD2: bad block at offset 32 [ 1315.724534][T30699] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1315.912905][T30699] ocfs2: Unmounting device (7,2) on (node local) [ 1316.689518][T30751] IPv6: sit2: Disabled Multicast RS [ 1316.866903][T30755] loop0: detected capacity change from 0 to 512 [ 1316.918432][T30757] loop3: detected capacity change from 0 to 1024 [ 1316.932752][T30757] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1316.940822][T30755] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.11301: inode has both inline data and extents flags [ 1316.941560][T30757] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1316.987473][T30755] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.11301: couldn't read orphan inode 15 (err -117) [ 1317.015942][T30757] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1317.080597][T30755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1317.089233][T30757] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1317.141200][T30737] loop1: detected capacity change from 0 to 32768 [ 1317.182920][T30757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1317.251753][T30737] (syz.1.11291,30737,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1317.293443][ T6169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1317.304869][ T6161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1317.347882][T30737] (syz.1.11291,30737,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1317.580786][T30737] (syz.1.11291,30737,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 1317.648148][T30737] JBD2: Ignoring recovery information on journal [ 1317.743146][T30737] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1318.044494][T30761] loop2: detected capacity change from 0 to 32768 [ 1318.090275][T30761] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1318.111840][T30785] netlink: zone id is out of range [ 1318.136822][T30785] netlink: set zone limit has 4 unknown bytes [ 1318.199156][ T6167] ocfs2: Unmounting device (7,1) on (node local) [ 1318.328671][T30761] XFS (loop2): Ending clean mount [ 1318.516717][ T6658] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 1318.609011][ T6165] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1318.715987][T30798] loop3: detected capacity change from 0 to 2048 [ 1318.760114][T30798] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1318.893955][T30803] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1319.021116][T30798] NILFS error (device loop3): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 1319.051093][T30798] Remounting filesystem read-only [ 1319.303149][T30813] loop0: detected capacity change from 0 to 136 [ 1319.366163][T30813] Attempt to read inode for relocated directory [ 1319.915331][T30831] --map-set only usable from mangle table [ 1320.415573][T30851] loop0: detected capacity change from 0 to 256 [ 1320.439683][T30851] exfat: Deprecated parameter 'utf8' [ 1320.494163][T30851] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 1320.948306][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1320.948332][ T28] audit: type=1326 audit(1787819651.022:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30862 comm="syz.3.11348" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75859e0d9 code=0x7ffc0000 [ 1320.978825][T30865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11346'. [ 1321.075836][ T28] audit: type=1326 audit(1787819651.022:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30862 comm="syz.3.11348" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75859e0d9 code=0x7ffc0000 [ 1321.147255][ T28] audit: type=1326 audit(1787819651.059:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30862 comm="syz.3.11348" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fc75859e0d9 code=0x7ffc0000 [ 1321.196436][ T28] audit: type=1326 audit(1787819651.059:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30862 comm="syz.3.11348" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75859e0d9 code=0x7ffc0000 [ 1321.221370][ T28] audit: type=1326 audit(1787819651.059:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30862 comm="syz.3.11348" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75859e0d9 code=0x7ffc0000 [ 1321.327052][T30843] loop1: detected capacity change from 0 to 32768 [ 1321.818342][T30884] loop3: detected capacity change from 0 to 256 [ 1322.008446][T30884] FAT-fs (loop3): Directory bread(block 64) failed [ 1322.015127][T30884] FAT-fs (loop3): Directory bread(block 65) failed [ 1322.037828][T30884] FAT-fs (loop3): Directory bread(block 66) failed [ 1322.044448][T30884] FAT-fs (loop3): Directory bread(block 67) failed [ 1322.096929][T30884] FAT-fs (loop3): Directory bread(block 68) failed [ 1322.130631][T30884] FAT-fs (loop3): Directory bread(block 69) failed [ 1322.158828][T30884] FAT-fs (loop3): Directory bread(block 70) failed [ 1322.187057][T30884] FAT-fs (loop3): Directory bread(block 71) failed [ 1322.193793][T30884] FAT-fs (loop3): Directory bread(block 72) failed [ 1322.240401][T30884] FAT-fs (loop3): Directory bread(block 73) failed [ 1322.389302][T30893] netlink: 'syz.2.11362': attribute type 1 has an invalid length. [ 1322.434810][T30876] loop0: detected capacity change from 0 to 32768 [ 1322.435519][T30893] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.11362'. [ 1322.518366][T30876] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 1322.528372][T30898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1322.546031][T30876] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1322.685578][T30907] netlink: zone id is out of range [ 1322.695849][T30876] XFS (loop0): Ending clean mount [ 1322.709854][T30907] netlink: set zone limit has 4 unknown bytes [ 1322.767695][T30876] XFS (loop0): Quotacheck needed: Please wait. [ 1322.870761][T30910] loop1: detected capacity change from 0 to 512 [ 1322.907061][T16677] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1322.909611][T30910] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1322.962250][T30876] XFS (loop0): Quotacheck: Done. [ 1322.994474][T30910] EXT4-fs error (device loop1): ext4_quota_enable:7140: comm syz.1.11367: Bad quota inum: 2, type: 1 [ 1323.027743][T30910] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 1323.081032][ T6161] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1323.137271][ T6167] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1323.191811][T16677] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1323.244161][T16677] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 1323.268013][T16677] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1323.287108][T16677] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 1323.309161][T16677] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 1323.351923][T16677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.382689][T30903] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1323.780517][T30925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11374'. [ 1323.969054][T30929] netlink: 'syz.0.11369': attribute type 1 has an invalid length. [ 1323.992964][T16677] ims_pcu 3-1:1.0: Failed to set line state, error: -71 [ 1324.011982][T30929] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.11369'. [ 1324.034731][T16677] ims_pcu: probe of 3-1:1.0 failed with error -71 [ 1324.050921][T16677] usb 3-1: USB disconnect, device number 72 [ 1324.505231][T30941] loop3: detected capacity change from 0 to 4096 [ 1324.587204][T30941] ntfs: volume version 3.1. [ 1325.159070][T30965] xt_CONNSECMARK: invalid mode: 254 [ 1325.272784][T30968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11394'. [ 1325.494598][T30977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11399'. [ 1325.714569][T30986] loop1: detected capacity change from 0 to 512 [ 1325.734800][T30986] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1325.765443][T30986] EXT4-fs (loop1): 1 truncate cleaned up [ 1325.795053][T30986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1325.853201][T30989] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 4: invalid block bitmap [ 1325.870700][T30986] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.11403: Logical block already allocated [ 1325.907343][T30986] EXT4-fs (loop1): Remounting filesystem read-only [ 1325.948272][T30989] EXT4-fs (loop1): Remounting filesystem read-only [ 1325.992564][ T6167] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1326.117177][T30997] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11408'. [ 1326.145028][T30997] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11408'. [ 1326.489497][T30987] loop2: detected capacity change from 0 to 32768 [ 1326.510130][T30987] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.11404 (30987) [ 1326.566874][T30987] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1326.585490][T30987] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1326.601818][T30987] BTRFS info (device loop2): setting nodatasum [ 1326.608089][T30987] BTRFS info (device loop2): force zlib compression, level 3 [ 1326.622704][T29992] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1326.635866][T30987] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1326.651651][T30987] BTRFS info (device loop2): use lzo compression, level 0 [ 1326.660526][T30987] BTRFS info (device loop2): turning on flush-on-commit [ 1326.672441][T30987] BTRFS info (device loop2): enabling auto defrag [ 1326.683014][T30987] BTRFS info (device loop2): max_inline at 4096 [ 1326.694169][T30987] BTRFS info (device loop2): using free space tree [ 1326.823299][T30987] BTRFS info (device loop2): enabling ssd optimizations [ 1326.833532][T29992] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1326.843952][T29992] usb 4-1: config 4 has an invalid interface number: 138 but max is 0 [ 1326.858833][T29992] usb 4-1: config 4 has no interface number 0 [ 1326.870107][T29992] usb 4-1: config 4 interface 138 has no altsetting 0 [ 1326.902479][T29992] usb 4-1: string descriptor 0 read error: -22 [ 1326.908915][T29992] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 1326.939958][T29992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.988711][T31035] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11419'. [ 1327.076440][ T6165] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1327.224151][T31039] loop1: detected capacity change from 0 to 256 [ 1327.270409][T29992] catc 4-1:4.138: Missing or invalid endpoints [ 1327.400554][T31039] FAT-fs (loop1): Directory bread(block 64) failed [ 1327.407501][T31039] FAT-fs (loop1): Directory bread(block 65) failed [ 1327.432290][T31039] FAT-fs (loop1): Directory bread(block 66) failed [ 1327.462545][T31039] FAT-fs (loop1): Directory bread(block 67) failed [ 1327.484926][T31039] FAT-fs (loop1): Directory bread(block 68) failed [ 1327.503142][ T6194] usb 4-1: USB disconnect, device number 58 [ 1327.503772][T31039] FAT-fs (loop1): Directory bread(block 69) failed [ 1327.574359][T31039] FAT-fs (loop1): Directory bread(block 70) failed [ 1327.581098][T31039] FAT-fs (loop1): Directory bread(block 71) failed [ 1327.607554][T31039] FAT-fs (loop1): Directory bread(block 72) failed [ 1327.614193][T31039] FAT-fs (loop1): Directory bread(block 73) failed [ 1328.031553][T31055] loop2: detected capacity change from 0 to 256 [ 1328.315766][T31067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11435'. [ 1328.429297][T31069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1328.771555][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1329.191653][T31099] netlink: 'syz.1.11451': attribute type 7 has an invalid length. [ 1329.413498][T31109] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1330.120309][T31137] loop1: detected capacity change from 0 to 128 [ 1330.242393][ T6167] sysv_free_block: flc_count > flc_size [ 1330.256876][ T6167] sysv_free_block: flc_count > flc_size [ 1330.262906][ T6167] sysv_free_block: flc_count > flc_size [ 1330.279757][ T6167] sysv_free_block: flc_count > flc_size [ 1330.285425][ T6167] sysv_free_block: flc_count > flc_size [ 1330.296710][ T6167] sysv_free_block: flc_count > flc_size [ 1330.303853][ T6167] sysv_free_block: flc_count > flc_size [ 1330.303869][ T6167] sysv_free_block: flc_count > flc_size [ 1330.303879][ T6167] sysv_free_block: flc_count > flc_size [ 1330.303887][ T6167] sysv_free_block: flc_count > flc_size [ 1330.304809][ T6167] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1330.455308][T31147] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1330.479092][T31146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11474'. [ 1330.811390][T31159] netlink: 'syz.0.11481': attribute type 32 has an invalid length. [ 1330.829586][T31157] loop3: detected capacity change from 0 to 2048 [ 1330.883913][T31163] loop1: detected capacity change from 0 to 512 [ 1330.887855][T31157] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1330.953038][T31163] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1330.967974][T31163] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1331.007908][T31163] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1331.044702][T31163] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e02c, mo2=0006] [ 1331.053470][T31163] System zones: 0-2, 18-18, 34-35 [ 1331.071019][T31163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1331.269862][ T6167] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1331.283146][ T6194] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1331.359957][ T28] audit: type=1326 audit(1787819660.761:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31172 comm="syz.3.11486" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75859e0d9 code=0x7ffc0000 [ 1331.420154][ T28] audit: type=1326 audit(1787819660.761:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31172 comm="syz.3.11486" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75859e0d9 code=0x7ffc0000 [ 1331.471618][ T28] audit: type=1326 audit(1787819660.761:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31172 comm="syz.3.11486" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75859e0d9 code=0x7ffc0000 [ 1331.504213][ T28] audit: type=1326 audit(1787819660.761:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31172 comm="syz.3.11486" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75859e0d9 code=0x7ffc0000 [ 1331.543494][ T28] audit: type=1326 audit(1787819660.780:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31172 comm="syz.3.11486" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fc75859e0d9 code=0x7ffc0000 [ 1331.569440][ T6194] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1331.599995][ T6194] usb 3-1: config 4 has an invalid interface number: 138 but max is 0 [ 1331.613493][ T6194] usb 3-1: config 4 has no interface number 0 [ 1331.622107][ T6194] usb 3-1: config 4 interface 138 has no altsetting 0 [ 1331.634539][ T28] audit: type=1326 audit(1787819660.780:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31172 comm="syz.3.11486" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75859e0d9 code=0x7ffc0000 [ 1331.708262][ T6194] usb 3-1: string descriptor 0 read error: -22 [ 1331.714895][ T6194] usb 3-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 1331.733379][T31183] loop3: detected capacity change from 0 to 2048 [ 1331.735282][ T6194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.753282][ T28] audit: type=1326 audit(1787819660.780:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31172 comm="syz.3.11486" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75859e0d9 code=0x7ffc0000 [ 1331.785754][ T28] audit: type=1326 audit(1787819660.798:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31172 comm="syz.3.11486" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc75859e0d9 code=0x7ffc0000 [ 1331.811237][ T28] audit: type=1326 audit(1787819660.798:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31172 comm="syz.3.11486" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc75859e0d9 code=0x7ffc0000 [ 1331.832671][T31183] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1331.869972][ T28] audit: type=1326 audit(1787819661.051:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31180 comm="syz.1.11491" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20abd9e0d9 code=0x7ffc0000 [ 1331.981740][T31187] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11494'. [ 1332.090324][ T6194] catc 3-1:4.138: Missing or invalid endpoints [ 1332.347035][T16677] usb 3-1: USB disconnect, device number 73 [ 1332.502855][ T6194] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 1332.542155][T31206] loop3: detected capacity change from 0 to 1024 [ 1332.569396][ T3462] hfsplus: b-tree write err: -5, ino 25 [ 1332.575609][ T3462] hfsplus: b-tree write err: -5, ino 4 [ 1332.583454][ T3462] hfsplus: b-tree write err: -5, ino 2 [ 1332.709025][T31211] loop3: detected capacity change from 0 to 256 [ 1332.744907][T31211] FAT-fs (loop3): Directory bread(block 64) failed [ 1332.752411][ T6194] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.768951][T31211] FAT-fs (loop3): Directory bread(block 65) failed [ 1332.772459][ T6194] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1332.775852][T31211] FAT-fs (loop3): Directory bread(block 66) failed [ 1332.793358][ T6194] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 1332.805763][T31211] FAT-fs (loop3): Directory bread(block 67) failed [ 1332.812897][T31211] FAT-fs (loop3): Directory bread(block 68) failed [ 1332.819665][ T6194] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1332.829906][T31211] FAT-fs (loop3): Directory bread(block 69) failed [ 1332.837071][ T6194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.846681][T31211] FAT-fs (loop3): Directory bread(block 70) failed [ 1332.859291][ T6194] hub 1-1:1.0: bad descriptor, ignoring hub [ 1332.865589][T31211] FAT-fs (loop3): Directory bread(block 71) failed [ 1332.876097][ T6194] hub: probe of 1-1:1.0 failed with error -5 [ 1332.886529][T31211] FAT-fs (loop3): Directory bread(block 72) failed [ 1332.895448][ T6194] cdc_wdm 1-1:1.0: skipping garbage [ 1332.900889][T31211] FAT-fs (loop3): Directory bread(block 73) failed [ 1332.908242][ T6194] cdc_wdm 1-1:1.0: skipping garbage [ 1332.935359][ T6194] cdc_wdm 1-1:1.0: skipping garbage [ 1332.950398][ T6194] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1333.028777][T31214] loop1: detected capacity change from 0 to 512 [ 1333.059404][T31214] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1333.121657][T31214] EXT4-fs (loop1): 1 truncate cleaned up [ 1333.171418][T31214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1333.239283][ T6194] usb 1-1: USB disconnect, device number 83 [ 1333.318620][T31221] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.386487][ T6167] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.711347][T31229] loop3: detected capacity change from 0 to 4096 [ 1333.812868][T31229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1333.886244][T31229] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 16: comm syz.3.11514: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=8, size=4096 fake=1 [ 1333.959821][ T6169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1334.114263][T31242] dlm: non-version read from control device 169 [ 1334.226188][T31250] ip6gre1: entered promiscuous mode [ 1334.248276][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1334.254972][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1334.286502][T31250] ip6gre1: entered allmulticast mode [ 1334.553051][T31262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11529'. [ 1334.682076][T16329] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1334.906578][T16329] usb 4-1: Using ep0 maxpacket: 32 [ 1334.939481][T16329] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1334.948689][T16329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.986200][T16329] usb 4-1: config 0 descriptor?? [ 1335.006101][T16329] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1335.141521][ C1] hrtimer: interrupt took 51922 ns [ 1335.248630][T29992] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1335.443591][T16329] gspca_sq930x: ucbus_write failed -71 [ 1335.460176][T16329] sq930x: probe of 4-1:0.0 failed with error -71 [ 1335.473036][T29992] usb 3-1: Using ep0 maxpacket: 32 [ 1335.495755][T16329] usb 4-1: USB disconnect, device number 59 [ 1335.502678][T29992] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1335.517984][T29992] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1335.534834][T29992] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.552573][T29992] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1335.570471][T29992] usb 3-1: config 1 has no interface number 0 [ 1335.580099][T29992] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1335.589912][T29992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.627861][T29992] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1335.789876][T31295] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11545'. [ 1335.804275][T31295] openvswitch: netlink: Key type 29 is not supported [ 1335.887607][T29992] snd_usb_pod 3-1:1.1: set_interface failed [ 1335.910432][T29992] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1335.920469][T29992] snd_usb_pod: probe of 3-1:1.1 failed with error -71 [ 1335.933155][T29992] usb 3-1: USB disconnect, device number 74 [ 1336.483435][T31317] bond2: option updelay: invalid value (18446744073709510581) [ 1336.499245][T31317] bond2: option updelay: allowed values 0 - 2147483647 [ 1336.555046][T31317] bond2 (unregistering): Released all slaves [ 1336.987965][T31331] loop1: detected capacity change from 0 to 4096 [ 1337.048144][T31331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1337.210887][T31331] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 16: comm syz.1.11562: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=8, size=4096 fake=1 [ 1337.368785][ T6167] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1337.412818][T31352] loop2: detected capacity change from 0 to 1024 [ 1337.495369][T31352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1337.534678][T31356] loop3: detected capacity change from 0 to 764 [ 1337.555142][T31356] Symlink component flag not implemented [ 1337.561541][T31356] Symlink component flag not implemented [ 1337.776150][ T6165] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1337.851585][T31338] Process accounting paused [ 1337.968780][T31364] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11577'. [ 1338.419332][T31379] UBIFS error (pid: 31379): cannot open "ubi0:testvol", error -19 [ 1338.458445][T31381] netlink: 25 bytes leftover after parsing attributes in process `syz.3.11584'. [ 1338.477353][T31381] netlink: 25 bytes leftover after parsing attributes in process `syz.3.11584'. [ 1338.978713][T31404] netlink: 'syz.1.11593': attribute type 10 has an invalid length. [ 1339.056845][T31404] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 1339.074056][T31404] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 1339.093094][T31404] team0: Port device wlan1 added [ 1339.556250][T31424] netlink: 798 bytes leftover after parsing attributes in process `syz.3.11606'. [ 1339.853740][T31435] netlink: 'syz.2.11610': attribute type 16 has an invalid length. [ 1339.882645][T31435] netlink: 'syz.2.11610': attribute type 3 has an invalid length. [ 1339.891562][T31435] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11610'. [ 1339.934046][T31437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11612'. [ 1340.378631][T31453] netlink: 'syz.2.11620': attribute type 11 has an invalid length. [ 1340.488341][T31461] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.11624'. [ 1341.042129][T31475] loop3: detected capacity change from 0 to 512 [ 1341.059179][T31475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1341.084336][T31475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1341.101808][T31479] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1341.139080][T31475] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1341.212961][T31475] EXT4-fs (loop3): 1 truncate cleaned up [ 1341.220155][T31475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1341.456066][ T6169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1341.614439][T31493] loop3: detected capacity change from 0 to 512 [ 1341.666481][T31493] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1341.703190][T31493] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 1341.713432][T31493] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1341.720376][T31493] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #13: comm syz.3.11639: iget: bad i_size value: 12154761577498 [ 1341.733897][T31493] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.11639: couldn't read orphan inode 13 (err -117) [ 1341.748143][T31493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1341.766690][T31493] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.11639: dx entry: limit 65535 != root limit 120 [ 1341.780166][T31493] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.11639: Corrupt directory, running e2fsck is recommended [ 1341.824223][T31496] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11640'. [ 1341.851476][T31498] loop1: detected capacity change from 0 to 8 [ 1341.941764][ T6169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1342.005150][T31498] squashfs image failed sanity check [ 1342.191203][T31501] loop2: detected capacity change from 0 to 2048 [ 1342.252231][T31501] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1342.291190][T31501] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1342.385991][T31508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11646'. [ 1343.005897][T31532] loop3: detected capacity change from 0 to 512 [ 1343.069553][T31532] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1343.088965][T31532] __quota_error: 26 callbacks suppressed [ 1343.088985][T31532] Quota error (device loop3): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 1343.126292][T31532] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1343.231336][T31532] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 1343.244922][T31541] loop2: detected capacity change from 0 to 256 [ 1343.277557][T31532] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.11658: bad orphan inode 14 [ 1343.306613][T31541] exFAT-fs (loop2): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 1343.331534][T31541] exFAT-fs (loop2): failed to load alloc-bitmap [ 1343.350593][T31532] ext4_test_bit(bit=13, block=18) = 1 [ 1343.356100][T31532] is_bad_inode(inode)=0 [ 1343.360303][T31532] NEXT_ORPHAN(inode)=0 [ 1343.365520][T31541] exFAT-fs (loop2): failed to recognize exfat type [ 1343.376217][T31532] max_ino=32 [ 1343.379492][T31532] i_nlink=1 [ 1343.398751][T31532] EXT4-fs (loop3): 1 truncate cleaned up [ 1343.435644][T31532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1343.609376][ T6169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1344.536083][T31588] netlink: 'syz.0.11685': attribute type 1 has an invalid length. [ 1344.562805][ T28] audit: type=1326 audit(1787819673.110:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31590 comm="syz.2.11688" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec0d9e0d9 code=0x7ffc0000 [ 1344.609051][ T28] audit: type=1326 audit(1787819673.110:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31590 comm="syz.2.11688" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec0d9e0d9 code=0x7ffc0000 [ 1344.654622][ T28] audit: type=1326 audit(1787819673.167:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31590 comm="syz.2.11688" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec0d9e0d9 code=0x7ffc0000 [ 1344.761266][ T28] audit: type=1326 audit(1787819673.167:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31590 comm="syz.2.11688" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec0d9e0d9 code=0x7ffc0000 [ 1344.842714][ T28] audit: type=1326 audit(1787819673.185:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31590 comm="syz.2.11688" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f7ec0d9e0d9 code=0x7ffc0000 [ 1344.915074][ T28] audit: type=1326 audit(1787819673.185:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31590 comm="syz.2.11688" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec0d9e0d9 code=0x7ffc0000 [ 1344.972105][ T28] audit: type=1326 audit(1787819673.185:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31590 comm="syz.2.11688" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec0d9e0d9 code=0x7ffc0000 [ 1345.037573][ T28] audit: type=1326 audit(1787819673.232:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31590 comm="syz.2.11688" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7ec0d9e0d9 code=0x7ffc0000 [ 1345.108541][ T28] audit: type=1326 audit(1787819673.232:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31590 comm="syz.2.11688" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7ec0d9e0d9 code=0x7ffc0000 [ 1346.103994][T31633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11707'. [ 1346.139531][T31633] netlink: 'syz.3.11707': attribute type 1 has an invalid length. [ 1346.417515][ T5973] ------------[ cut here ]------------ [ 1346.424309][ T5973] WARNING: CPU: 0 PID: 5973 at net/netfilter/nft_set_pipapo.c:2389 nft_pipapo_destroy+0x84b/0x8b0 [ 1346.435527][ T5973] Modules linked in: [ 1346.439650][ T5973] CPU: 0 PID: 5973 Comm: kworker/0:3 Not tainted syzkaller #0 [ 1346.447543][ T5973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1346.457779][ T5973] Workqueue: events nf_tables_trans_destroy_work [ 1346.464634][ T5973] RIP: 0010:nft_pipapo_destroy+0x84b/0x8b0 [ 1346.470518][ T5973] Code: 00 00 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d9 7b ab f8 e9 d3 f9 ff ff e8 cf 7b ab f8 e9 6c fe ff ff e8 c5 7b ab f8 <0f> 0b e9 16 f8 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 [ 1346.472450][T29992] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1346.490407][ T5973] RSP: 0000:ffffc90004a2f9d8 EFLAGS: 00010293 [ 1346.504339][ T5973] RAX: ffffffff88dbf6ab RBX: ffff88805a3a38f0 RCX: ffff888027d63c00 [ 1346.512371][ T5973] RDX: 0000000000000000 RSI: ffff88805a3a3800 RDI: ffff888025165828 [ 1346.520450][ T5973] RBP: ffffc90004a2fbb0 R08: ffff888027d63c00 R09: 000000000000000f [ 1346.528595][ T5973] R10: 0000000000000020 R11: 0000000000000000 R12: ffff88805a3a38c0 [ 1346.536705][ T5973] R13: dffffc0000000000 R14: ffff88805a3a3910 R15: dffffc0000000000 [ 1346.544775][ T5973] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1346.553837][ T5973] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1346.560626][ T5973] CR2: 0000200000000000 CR3: 000000001d356000 CR4: 00000000003506f0 [ 1346.569014][ T5973] Call Trace: [ 1346.572354][ T5973] [ 1346.575336][ T5973] ? lockdep_hardirqs_on+0x98/0x150 [ 1346.580706][ T5973] nft_set_destroy+0x489/0xa20 [ 1346.585553][ T5973] ? __kmem_cache_free+0xba/0x1f0 [ 1346.590718][ T5973] nf_tables_trans_destroy_work+0xb2d/0x11b0 [ 1346.596867][ T5973] ? nft_object_dump+0x1e0/0x1e0 [ 1346.601950][ T5973] ? _raw_spin_unlock_irq+0x23/0x50 [ 1346.607303][ T5973] ? process_scheduled_works+0x975/0x1600 [ 1346.613209][ T5973] ? process_scheduled_works+0x975/0x1600 [ 1346.619005][ T5973] process_scheduled_works+0xa60/0x1600 [ 1346.624681][ T5973] ? worker_attach_to_pool+0x370/0x370 [ 1346.630210][ T5973] ? assign_work+0x3cc/0x5d0 [ 1346.635008][ T5973] worker_thread+0xa5e/0xfe0 [ 1346.639770][ T5973] ? _raw_spin_unlock+0x40/0x40 [ 1346.644718][ T5973] ? __kthread_parkme+0x71/0x1c0 [ 1346.649724][ T5973] kthread+0x2fa/0x390 [ 1346.653928][ T5973] ? pr_cont_work+0x550/0x550 [ 1346.658669][ T5973] ? kthread_blkcg+0xd0/0xd0 [ 1346.663421][ T5973] ret_from_fork+0x48/0x80 [ 1346.668057][ T5973] ? kthread_blkcg+0xd0/0xd0 [ 1346.672739][ T5973] ret_from_fork_asm+0x11/0x20 [ 1346.677949][ T5973] [ 1346.681113][ T5973] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1346.688512][ T5973] CPU: 0 PID: 5973 Comm: kworker/0:3 Not tainted syzkaller #0 [ 1346.696003][ T5973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1346.706175][ T5973] Workqueue: events nf_tables_trans_destroy_work [ 1346.712550][ T5973] Call Trace: [ 1346.715856][ T5973] [ 1346.718824][ T5973] dump_stack_lvl+0x18c/0x250 [ 1346.723538][ T5973] ? show_regs_print_info+0x20/0x20 [ 1346.728779][ T5973] ? load_image+0x420/0x420 [ 1346.733317][ T5973] panic+0x2ca/0x720 [ 1346.737248][ T5973] ? bpf_jit_dump+0xd0/0xd0 [ 1346.741791][ T5973] ? ret_from_fork_asm+0x11/0x20 [ 1346.746788][ T5973] __warn+0x2e0/0x470 [ 1346.750816][ T5973] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1346.756073][ T5973] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1346.761347][ T5973] report_bug+0x2be/0x4f0 [ 1346.765719][ T5973] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1346.770958][ T5973] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1346.776193][ T5973] ? nft_pipapo_destroy+0x84d/0x8b0 [ 1346.781415][ T5973] handle_bug+0xcf/0x120 [ 1346.785696][ T5973] exc_invalid_op+0x1a/0x50 [ 1346.790231][ T5973] asm_exc_invalid_op+0x1a/0x20 [ 1346.795114][ T5973] RIP: 0010:nft_pipapo_destroy+0x84b/0x8b0 [ 1346.800953][ T5973] Code: 00 00 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d9 7b ab f8 e9 d3 f9 ff ff e8 cf 7b ab f8 e9 6c fe ff ff e8 c5 7b ab f8 <0f> 0b e9 16 f8 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 [ 1346.820592][ T5973] RSP: 0000:ffffc90004a2f9d8 EFLAGS: 00010293 [ 1346.826691][ T5973] RAX: ffffffff88dbf6ab RBX: ffff88805a3a38f0 RCX: ffff888027d63c00 [ 1346.834705][ T5973] RDX: 0000000000000000 RSI: ffff88805a3a3800 RDI: ffff888025165828 [ 1346.842714][ T5973] RBP: ffffc90004a2fbb0 R08: ffff888027d63c00 R09: 000000000000000f [ 1346.850729][ T5973] R10: 0000000000000020 R11: 0000000000000000 R12: ffff88805a3a38c0 [ 1346.858814][ T5973] R13: dffffc0000000000 R14: ffff88805a3a3910 R15: dffffc0000000000 [ 1346.867023][ T5973] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1346.872273][ T5973] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1346.877524][ T5973] ? lockdep_hardirqs_on+0x98/0x150 [ 1346.882786][ T5973] nft_set_destroy+0x489/0xa20 [ 1346.887602][ T5973] ? __kmem_cache_free+0xba/0x1f0 [ 1346.892667][ T5973] nf_tables_trans_destroy_work+0xb2d/0x11b0 [ 1346.898694][ T5973] ? nft_object_dump+0x1e0/0x1e0 [ 1346.903668][ T5973] ? _raw_spin_unlock_irq+0x23/0x50 [ 1346.908928][ T5973] ? process_scheduled_works+0x975/0x1600 [ 1346.914681][ T5973] ? process_scheduled_works+0x975/0x1600 [ 1346.920433][ T5973] process_scheduled_works+0xa60/0x1600 [ 1346.926041][ T5973] ? worker_attach_to_pool+0x370/0x370 [ 1346.931535][ T5973] ? assign_work+0x3cc/0x5d0 [ 1346.936172][ T5973] worker_thread+0xa5e/0xfe0 [ 1346.940892][ T5973] ? _raw_spin_unlock+0x40/0x40 [ 1346.945797][ T5973] ? __kthread_parkme+0x71/0x1c0 [ 1346.950796][ T5973] kthread+0x2fa/0x390 [ 1346.954891][ T5973] ? pr_cont_work+0x550/0x550 [ 1346.959694][ T5973] ? kthread_blkcg+0xd0/0xd0 [ 1346.964314][ T5973] ret_from_fork+0x48/0x80 [ 1346.968772][ T5973] ? kthread_blkcg+0xd0/0xd0 [ 1346.973416][ T5973] ret_from_fork_asm+0x11/0x20 [ 1346.978224][ T5973] [ 1346.981861][ T5973] Kernel Offset: disabled [ 1346.986389][ T5973] Rebooting in 86400 seconds..