last executing test programs: 4.569172698s ago: executing program 2 (id=12104): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x70bd25, 0x0, {{@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x8}, {0xfffffffffffffff8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1d}, {0x0, 0xd42, 0x0, 0x2dd}, 0x0, 0x6e6bc0, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffe}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x6}, {{@in=@rand_addr=0x64010101, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x2}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x33}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x9a, 0x3}]}]}, 0x1fc}}, 0x0) 4.269059485s ago: executing program 2 (id=12107): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x6a980) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x1], [0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0xffffffff]], '\x00', [{}, {0xfffffffd}, {}, {0xfffffffe, 0x0, 0x0, 0x1, 0x1}, {0x80000001, 0xfffffffd, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}], '\x00', 0x1000}) 3.741217428s ago: executing program 2 (id=12113): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 3.541281353s ago: executing program 2 (id=12116): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0x88, 0x30, 0xb, 0x5, 0x0, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000004, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 3.354072528s ago: executing program 2 (id=12119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x180, 0xffffff80, 0x178, 0x0, 0x178, 0x2a0, 0x230, 0x258, 0x2a0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x138, 0x180, 0x12, {0x959f1400}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@multicast1}}, @common=@unspec=@limit={{0x48}, {0x28f5c, 0x412}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'geneve1\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 2.286708874s ago: executing program 2 (id=12128): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f", 0x77) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001000000000904310002ff0107ff09058a02100000fa00090581"], 0x0) 1.20892581s ago: executing program 3 (id=12140): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) 1.113848923s ago: executing program 1 (id=12141): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@allocspi={0x100, 0x16, 0x1, 0x70bd2a, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5, 0x6c}, @in6=@mcast1, {}, {0xff, 0x0, 0x6, 0x5}, {0x7, 0xfffffffd}, 0x0, 0x0, 0x2}, 0x0, 0x4}, [@tfcpad={0x8, 0x16, 0x81}]}, 0x100}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 1.085201823s ago: executing program 0 (id=12142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f0000000400)}, 0x20) 956.992456ms ago: executing program 3 (id=12143): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xa6, &(0x7f0000000000), &(0x7f0000000080)=0x4) 866.769669ms ago: executing program 0 (id=12144): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000055c0)=""/219) 817.70404ms ago: executing program 1 (id=12145): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') setns(r0, 0x0) 710.426202ms ago: executing program 3 (id=12146): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x800, 0x70bd2b, 0x25dfdbff, {0x1, 0x0, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x200080c0) 709.793113ms ago: executing program 0 (id=12147): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000007c0)={0x101, 0x55, 0x4, {0x8, @win={{0xfffffce0, 0x7b3, 0x0, 0xfffffff9}, 0x6, 0xd4d, 0x0, 0x7fffffff, 0x0, 0x1}}, 0x30d}) 584.895666ms ago: executing program 1 (id=12148): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 561.730617ms ago: executing program 0 (id=12149): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x994, 0x800) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, {0xc8c0, 0x0, 0x0, 0x0, 0xa}}) 519.536528ms ago: executing program 3 (id=12150): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9f) 370.516501ms ago: executing program 1 (id=12151): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfbfc, 0x0, 0x0, 0x90f0}, 0x8) 319.253083ms ago: executing program 0 (id=12152): unshare(0x8000400) bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x11}, 0x18) 315.475293ms ago: executing program 3 (id=12153): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x48001) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, 0x0) 152.879767ms ago: executing program 1 (id=12154): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) sendfile(r0, r0, &(0x7f00000001c0)=0x8000000000000001, 0x4) 112.745848ms ago: executing program 0 (id=12155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000012000000000000000000700000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004800900000076657468315f6d616376746170000000080001400000000514000000020a010300000000000000000000000614000000110001"], 0xfc}}, 0x0) 66.950699ms ago: executing program 3 (id=12156): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) fremovexattr(0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=12157): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x40) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x2) kernel console output (not intermixed with test programs): reading failed. [ 1012.220626][T22246] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1012.247165][T22246] dvb-usb: bulk message failed: -22 (6/0) [ 1012.255038][T22246] dvb-usb: bulk message failed: -22 (6/0) [ 1012.265813][T22246] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 1012.278744][T22246] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input53 [ 1012.300418][T22246] dvb-usb: schedule remote query interval to 100 msecs. [ 1012.320891][T22246] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 1012.343025][T22246] usb 1-1: USB disconnect, device number 39 [ 1012.401343][T22246] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 1012.736755][T30604] netlink: 'syz.1.10159': attribute type 9 has an invalid length. [ 1012.745535][T30604] __nla_validate_parse: 3 callbacks suppressed [ 1012.745549][T30604] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.10159'. [ 1013.008408][T30533] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1013.044555][T30533] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1013.061345][T30622] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10166'. [ 1013.107792][T30533] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1013.116736][T30533] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1013.138903][T30533] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1013.157587][T30533] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1013.165073][T30626] Process accounting resumed [ 1013.275268][T30633] loop3: detected capacity change from 0 to 512 [ 1013.306449][T30633] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1013.403889][T30633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1013.551375][T30653] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1013.560056][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.899324][T30677] loop2: detected capacity change from 0 to 64 [ 1013.937265][T30678] No such timeout policy "syz0" [ 1013.960221][ T28] audit: type=1800 audit(1009.674:1470): pid=30677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10181" name=2E02 dev="loop2" ino=21 res=0 errno=0 [ 1014.106195][T30690] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 1014.387271][T30703] netlink: 'syz.1.10190': attribute type 2 has an invalid length. [ 1014.411576][T30705] gtp1: entered promiscuous mode [ 1014.448174][T30705] gtp1: entered allmulticast mode [ 1014.555569][ T5083] Bluetooth: hci2: command 0x0406 tx timeout [ 1014.715622][T30728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10195'. [ 1014.747478][T30728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10195'. [ 1014.969854][T30742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10202'. [ 1015.106418][T30750] (null): rxe_set_mtu: Set mtu to 1024 [ 1015.118764][T30756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10206'. [ 1015.154939][T30750] rdma_rxe: rxe_newlink: failed to add wlan0 [ 1015.320900][T30759] loop1: detected capacity change from 0 to 8192 [ 1015.337778][ T5083] Bluetooth: hci0: command 0x0406 tx timeout [ 1015.343942][T14861] Bluetooth: hci1: command 0x0406 tx timeout [ 1015.352706][T30759] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1015.369025][T30759] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1015.378303][T30759] REISERFS (device loop1): using ordered data mode [ 1015.411803][T30759] reiserfs: using flush barriers [ 1015.422569][T30759] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1015.449163][T30759] REISERFS (device loop1): checking transaction log (loop1) [ 1015.471467][T30759] REISERFS (device loop1): Using r5 hash to sort names [ 1015.479022][T30759] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1015.718578][T30780] bond2: option fail_over_mac: invalid value (4) [ 1015.745194][T30780] bond2 (unregistering): Released all slaves [ 1016.221125][T30878] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1016.566888][T30896] netlink: 'syz.2.10230': attribute type 15 has an invalid length. [ 1016.696075][ T28] audit: type=1400 audit(1012.201:1471): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=30901 comm="syz.3.10231" [ 1016.811079][ T5083] Bluetooth: hci2: command 0x0406 tx timeout [ 1016.826324][T30910] netlink: 264 bytes leftover after parsing attributes in process `syz.3.10234'. [ 1016.861037][T30910] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10234'. [ 1016.884418][ T28] audit: type=1326 audit(1012.367:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30915 comm="syz.2.10236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1016.972386][ T28] audit: type=1326 audit(1012.367:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30915 comm="syz.2.10236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1017.063320][ T28] audit: type=1326 audit(1012.385:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30915 comm="syz.2.10236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1017.104388][ T28] audit: type=1326 audit(1012.385:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30915 comm="syz.2.10236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1017.157862][ T28] audit: type=1326 audit(1012.385:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30915 comm="syz.2.10236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1017.358645][ T5891] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1017.423757][T30941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10244'. [ 1017.559163][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 1017.577397][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.595904][ T5083] Bluetooth: hci0: command 0x0406 tx timeout [ 1017.602025][T14861] Bluetooth: hci1: command 0x0406 tx timeout [ 1017.626572][ T5891] usb 3-1: New USB device found, idVendor=0c0b, idProduct=a109, bcdDevice=22.db [ 1017.646017][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.654155][ T5891] usb 3-1: Product: syz [ 1017.659187][ T5891] usb 3-1: Manufacturer: syz [ 1017.665061][ T5891] usb 3-1: SerialNumber: syz [ 1017.672221][ T5891] usb 3-1: config 0 descriptor?? [ 1017.679849][ T5891] ums-datafab 3-1:0.0: USB Mass Storage device detected [ 1017.699653][ T5891] ums-datafab 3-1:0.0: Quirks match for vid 0c0b pid a109: 1 [ 1017.759246][T30929] loop3: detected capacity change from 0 to 32768 [ 1017.802709][ T5891] ums-sddr55 3-1:0.0: USB Mass Storage device detected [ 1017.875302][T30929] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1017.928416][ T5891] usb 3-1: USB disconnect, device number 46 [ 1018.097560][T30929] XFS (loop3): Ending clean mount [ 1018.191807][ T5771] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1018.297056][T22246] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1018.502814][T22246] usb 1-1: Using ep0 maxpacket: 8 [ 1018.518459][T22246] usb 1-1: config 218 has too many interfaces: 244, using maximum allowed: 32 [ 1018.528538][T22246] usb 1-1: config 218 has 1 interface, different from the descriptor's value: 244 [ 1018.567495][T22246] usb 1-1: config 218 has no interface number 0 [ 1018.589455][T22246] usb 1-1: config 218 interface 95 altsetting 64 has an invalid endpoint with address 0xFF, skipping [ 1018.654471][T22246] usb 1-1: config 218 interface 95 altsetting 64 endpoint 0x82 has an invalid bInterval 233, changing to 7 [ 1018.685364][T22246] usb 1-1: config 218 interface 95 altsetting 64 endpoint 0x82 has invalid maxpacket 50661, setting to 1024 [ 1018.712935][T22246] usb 1-1: config 218 interface 95 has no altsetting 0 [ 1018.715268][T31017] openvswitch: netlink: Actions may not be safe on all matching packets [ 1018.734192][T22246] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 1018.763103][T22246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.792990][T22246] usb 1-1: Product: syz [ 1018.806218][T22246] usb 1-1: Manufacturer: syz [ 1018.810873][T22246] usb 1-1: SerialNumber: syz [ 1019.086601][T22246] usbtouchscreen: probe of 1-1:218.95 failed with error -22 [ 1019.128963][T22246] usb 1-1: USB disconnect, device number 40 [ 1019.231536][T31055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10269'. [ 1019.562961][T31080] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 1019.759782][T31074] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1019.781375][T31074] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1019.792410][T31074] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1019.812934][T31092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10281'. [ 1019.861315][T31092] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1020.448330][T31136] loop2: detected capacity change from 0 to 1024 [ 1020.487668][T31136] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1020.513324][T31136] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1020.533567][T31136] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1020.579802][T31136] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #3: comm syz.2.10294: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1020.585654][T31143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10297'. [ 1020.617954][T31136] EXT4-fs (loop2): no journal found [ 1020.626352][T31136] EXT4-fs (loop2): can't get journal size [ 1020.646412][T31136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1020.744732][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.848908][T31158] loop1: detected capacity change from 0 to 16 [ 1020.921358][T31158] erofs: (device loop1): mounted with root inode @ nid 36. [ 1020.986487][T31158] syz.1.10301: attempt to access beyond end of device [ 1020.986487][T31158] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1021.020853][T31158] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -21 in[55, 4041] out[4096] [ 1021.041501][ T28] audit: type=1800 audit(1016.212:1477): pid=31158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10301" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1021.127473][T31169] geneve5: entered promiscuous mode [ 1021.298474][T31207] ±ÿ: renamed from lo (while UP) [ 1021.525690][T31218] erspan1: entered promiscuous mode [ 1021.563289][T31218] erspan1: entered allmulticast mode [ 1021.842380][ T5083] Bluetooth: hci2: command 0x0406 tx timeout [ 1022.015948][ T5083] Bluetooth: hci0: command 0x0406 tx timeout [ 1022.022040][ T5083] Bluetooth: hci1: command 0x0406 tx timeout [ 1022.219464][T31278] netlink: 'syz.0.10328': attribute type 4 has an invalid length. [ 1022.227643][ T28] audit: type=1326 audit(1017.301:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31279 comm="syz.2.10332" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1022.227853][ T28] audit: type=1326 audit(1017.301:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31279 comm="syz.2.10332" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1022.251540][ C0] vkms_vblank_simulate: vblank timer overrun [ 1022.317266][ T28] audit: type=1326 audit(1017.356:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31279 comm="syz.2.10332" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1022.341056][ C0] vkms_vblank_simulate: vblank timer overrun [ 1022.433518][ T28] audit: type=1326 audit(1017.365:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31279 comm="syz.2.10332" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1022.440399][T31289] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.10335'. [ 1022.457834][ T28] audit: type=1326 audit(1017.365:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31279 comm="syz.2.10332" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1022.491120][T31289] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 1022.633904][ T28] audit: type=1326 audit(1017.365:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31279 comm="syz.2.10332" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1022.734983][ T28] audit: type=1326 audit(1017.365:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31279 comm="syz.2.10332" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1022.758755][ C0] vkms_vblank_simulate: vblank timer overrun [ 1022.817899][ T28] audit: type=1326 audit(1017.365:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31279 comm="syz.2.10332" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1022.864313][T31310] netlink: 'syz.3.10343': attribute type 2 has an invalid length. [ 1022.877777][ T28] audit: type=1326 audit(1017.365:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31279 comm="syz.2.10332" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1023.209264][T31330] netlink: 'syz.2.10352': attribute type 1 has an invalid length. [ 1023.398304][T31344] netlink: 'syz.0.10354': attribute type 4 has an invalid length. [ 1023.462905][T31344] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.10354'. [ 1023.871642][T31379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10367'. [ 1023.959935][T31382] netlink: 172 bytes leftover after parsing attributes in process `syz.1.10369'. [ 1023.978935][T31382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10369'. [ 1023.986078][T31385] netlink: 512 bytes leftover after parsing attributes in process `syz.0.10368'. [ 1023.988341][T31382] netlink: 172 bytes leftover after parsing attributes in process `syz.1.10369'. [ 1024.119715][T22246] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1024.344179][T22246] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1024.363707][T22246] usb 3-1: config 179 has no interface number 0 [ 1024.386336][T22246] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1024.423075][T22246] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 1024.444513][T22246] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1024.458484][T22246] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 1024.503452][T22246] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1024.528540][T22246] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1024.544547][T22246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.556380][T31422] žÿ: renamed from team_slave_1 (while UP) [ 1024.573829][T31369] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1024.581681][T31369] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1024.727364][ T5891] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1024.955093][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 1024.980363][ T5891] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1025.006351][ T5891] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1025.027974][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.059008][ T5891] usb 4-1: Product: syz [ 1025.073740][ T5891] usb 4-1: Manufacturer: syz [ 1025.085419][ T5891] usb 4-1: SerialNumber: syz [ 1025.122057][ T5891] usb 4-1: config 0 descriptor?? [ 1025.155617][ T5891] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1025.179164][T22246] usb 3-1: USB disconnect, device number 47 [ 1025.179227][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1025.193508][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1025.209025][ T5891] usb 4-1: Detected FT232R [ 1025.582191][ T5891] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1025.596131][ T5891] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1025.615596][ T5891] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1025.631970][ T5891] usb 4-1: USB disconnect, device number 44 [ 1025.666105][ T5891] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1025.689684][ T5891] ftdi_sio 4-1:0.0: device disconnected [ 1026.632314][T31529] netlink: 'syz.3.10411': attribute type 7 has an invalid length. [ 1026.673024][T31529] __nla_validate_parse: 3 callbacks suppressed [ 1026.673042][T31529] netlink: 140 bytes leftover after parsing attributes in process `syz.3.10411'. [ 1027.480798][T31582] netlink: 'syz.0.10429': attribute type 3 has an invalid length. [ 1027.864960][T31570] loop2: detected capacity change from 0 to 32768 [ 1027.888371][T31570] [ 1027.888371][T31570] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1027.888371][T31570] [ 1027.975511][T31609] xt_TCPMSS: Only works on TCP SYN packets [ 1028.045339][ T42] [ 1028.045339][ T42] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1028.045339][ T42] [ 1028.083328][ T42] [ 1028.083328][ T42] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1028.083328][ T42] [ 1028.115301][ T5766] [ 1028.115301][ T5766] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1028.115301][ T5766] [ 1028.146622][ T5766] [ 1028.146622][ T5766] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1028.146622][ T5766] [ 1028.181708][ T115] [ 1028.181708][ T115] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1028.181708][ T115] [ 1028.222034][T31617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10440'. [ 1028.258267][T31617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10440'. [ 1028.284985][T31617] netlink: 5 bytes leftover after parsing attributes in process `syz.3.10440'. [ 1028.374904][T31624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10439'. [ 1028.651113][T31642] 9pnet_fd: p9_fd_create_tcp (31642): problem connecting socket to 127.0.0.1 [ 1028.847897][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1029.054667][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1029.054699][ T9] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1029.054721][ T9] usb 3-1: Product: syz [ 1029.054736][ T9] usb 3-1: SerialNumber: syz [ 1029.057220][ T9] usb 3-1: config 0 descriptor?? [ 1029.064350][ T5891] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1029.282722][ T5891] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1029.306923][ T5891] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1029.315653][ T9] hso 3-1:0.0: Failed to find BULK IN ep [ 1029.336801][ T5891] usb 4-1: can't read configurations, error -71 [ 1029.481981][T31699] loop1: detected capacity change from 0 to 64 [ 1029.558039][ T9] usb 3-1: USB disconnect, device number 48 [ 1030.560629][ T9] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 1030.575122][T31739] loop1: detected capacity change from 0 to 32768 [ 1030.590936][T31739] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.10476 (31739) [ 1030.616317][T31739] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1030.638287][T31739] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1030.648184][T31739] BTRFS info (device loop1): enabling ssd optimizations [ 1030.666642][T31739] BTRFS info (device loop1): not using ssd optimizations [ 1030.674653][T31739] BTRFS info (device loop1): turning off barriers [ 1030.685251][T31739] BTRFS info (device loop1): using free space tree [ 1030.730112][T31787] netlink: 'syz.0.10488': attribute type 7 has an invalid length. [ 1030.739088][T31787] netlink: 140 bytes leftover after parsing attributes in process `syz.0.10488'. [ 1030.784269][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.799306][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1030.829467][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1030.852095][ T9] usb 3-1: string descriptor 0 read error: -22 [ 1030.858763][ T5767] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1030.875364][ T9] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1030.896719][ T9] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1030.926268][ T9] usb 3-1: 0:2 : does not exist [ 1031.023436][ T9] usb-storage 3-1:1.1: USB Mass Storage device detected [ 1031.090060][T31811] ./file0: Can't open blockdev [ 1031.154688][ T9] usb_set_interface error [ 1031.168200][ T9] snd-usb-us122l: probe of 3-1:1.1 failed with error -22 [ 1031.184674][T31817] netlink: 'syz.3.10492': attribute type 7 has an invalid length. [ 1031.199450][ T9] usb 3-1: USB disconnect, device number 49 [ 1031.223323][T31817] netlink: 'syz.3.10492': attribute type 8 has an invalid length. [ 1031.244660][T31817] netlink: 'syz.3.10492': attribute type 9 has an invalid length. [ 1031.742762][T31850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1031.774509][T31852] program syz.3.10502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1031.941828][T31862] netlink: 216 bytes leftover after parsing attributes in process `syz.2.10505'. [ 1031.964190][T31862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10505'. [ 1032.200555][T31879] bridge_slave_0: entered promiscuous mode [ 1032.207937][T31879] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1033.025121][T31891] loop2: detected capacity change from 0 to 32768 [ 1033.097366][T31891] JBD2: Ignoring recovery information on journal [ 1033.190307][T31931] program syz.1.10530 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1033.201409][T31891] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1033.237520][T31931] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1033.408608][ T5766] ocfs2: Unmounting device (7,2) on (node local) [ 1033.440796][T31942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10534'. [ 1034.066336][T31981] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10545'. [ 1034.361503][T32003] loop1: detected capacity change from 0 to 512 [ 1034.407203][T32003] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1034.466088][T32003] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1034.536276][T32003] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.10552: bg 0: block 248: padding at end of block bitmap is not set [ 1034.582163][T32003] Quota error (device loop1): write_blk: dquota write failed [ 1034.623635][T32003] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1034.658076][T32003] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.10552: Failed to acquire dquot type 1 [ 1034.710545][T32003] EXT4-fs (loop1): 1 truncate cleaned up [ 1034.726845][T32003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1034.819716][T32026] loop3: detected capacity change from 0 to 2048 [ 1034.826579][ T1100] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 1034.855403][ T1100] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 1 [ 1034.903478][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1034.927550][T32026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1035.080658][T32044] 9pnet_fd: p9_fd_create_tcp (32044): problem connecting socket to 127.0.0.1 [ 1035.093555][T32026] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.10559: bg 0: block 345: padding at end of block bitmap is not set [ 1035.198729][T32051] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10567'. [ 1035.211093][T32050] loop1: detected capacity change from 0 to 128 [ 1035.220470][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.252373][T32050] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1035.379953][ T5767] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1035.567201][T32065] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1036.163117][T22246] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 1036.238518][T32150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10588'. [ 1036.247812][T32150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10588'. [ 1036.417588][T22246] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 1036.437938][T22246] usb 1-1: config 2 has no interface number 0 [ 1036.444138][T22246] usb 1-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64 [ 1036.484680][T22246] usb 1-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1036.510843][T22246] usb 1-1: config 2 interface 88 has no altsetting 0 [ 1036.540073][T22246] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1036.573758][T22246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.595460][T22246] usb 1-1: Product: syz [ 1036.599701][T22246] usb 1-1: Manufacturer: syz [ 1036.613052][T22246] usb 1-1: SerialNumber: syz [ 1036.631686][T32122] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1036.633024][ T5891] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1036.639680][ T28] audit: type=1326 audit(1030.580:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32175 comm="syz.2.10595" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1036.670389][ C1] vkms_vblank_simulate: vblank timer overrun [ 1036.687276][T32122] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1036.716175][ T28] audit: type=1326 audit(1030.580:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32175 comm="syz.2.10595" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1036.739954][ C1] vkms_vblank_simulate: vblank timer overrun [ 1036.781981][ T28] audit: type=1326 audit(1030.617:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32175 comm="syz.2.10595" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1036.812810][ T28] audit: type=1326 audit(1030.617:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32175 comm="syz.2.10595" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1036.871961][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 1036.886823][ T5891] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1036.904052][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.919291][T32122] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1036.923229][ T5891] usb 4-1: Product: syz [ 1036.945219][ T5891] usb 4-1: Manufacturer: syz [ 1036.947844][T32122] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1036.956185][ T5891] usb 4-1: SerialNumber: syz [ 1036.979692][ T5891] r8152-cfgselector 4-1: config 0 descriptor?? [ 1037.181126][T22246] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1037.240872][T22246] asix: probe of 1-1:2.88 failed with error -71 [ 1037.264775][T22246] usb 1-1: USB disconnect, device number 41 [ 1037.457236][ T5891] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1037.484699][ T5891] r8152-cfgselector 4-1: USB disconnect, device number 47 [ 1037.626941][T32236] UBIFS error (pid: 32236): cannot open "ubi:0", error -19 [ 1037.714173][T32240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10611'. [ 1038.287918][T32279] loop3: detected capacity change from 0 to 512 [ 1038.366040][T32279] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.10622: inode has both inline data and extents flags [ 1038.468769][T32279] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.10622: couldn't read orphan inode 15 (err -117) [ 1038.532375][T32279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1038.718805][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.226555][T32324] loop1: detected capacity change from 0 to 256 [ 1039.537074][T32341] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.10643'. [ 1039.683695][T32347] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10645'. [ 1040.087759][T32367] loop1: detected capacity change from 0 to 512 [ 1040.140520][T32367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1040.361862][T32367] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 1040.381108][T32367] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1040.436807][T32367] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.10652: Failed to acquire dquot type 0 [ 1040.579022][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.671395][T32402] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1040.946970][T32422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10670'. [ 1040.992171][T32422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10670'. [ 1041.110637][T32415] loop1: detected capacity change from 0 to 4096 [ 1041.177895][T32415] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1041.309029][T32415] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 1041.441099][T32415] ntfs3: loop1: ino=5, "/" directory corrupted [ 1042.070693][T32471] netlink: zone id is out of range [ 1042.075878][T32471] netlink: del zone limit has 8 unknown bytes [ 1042.197770][T32473] loop1: detected capacity change from 0 to 256 [ 1042.234728][T32476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10688'. [ 1042.261051][T32476] netlink: 7 bytes leftover after parsing attributes in process `syz.0.10688'. [ 1042.427506][T32477] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1043.289008][T32568] usb usb1: usbfs: process 32568 (syz.3.10706) did not claim interface 0 before use [ 1044.009652][T32612] xt_hashlimit: invalid interval [ 1044.353528][T32632] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10729'. [ 1045.175347][T32680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10747'. [ 1045.229189][T32677] loop3: detected capacity change from 0 to 4096 [ 1045.326970][T32677] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1045.406613][T32677] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 1045.913654][T32704] Process accounting paused [ 1046.172983][T32729] bond3: Unable to set up delay as MII monitoring is disabled [ 1046.268207][T32729] bond3 (unregistering): Released all slaves [ 1046.511673][ T345] netlink: 'syz.1.10768': attribute type 2 has an invalid length. [ 1046.541640][ T345] netlink: 'syz.1.10768': attribute type 4 has an invalid length. [ 1046.565929][ T345] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10768'. [ 1046.587648][T22246] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1046.830004][T22246] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.852997][T22246] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.874325][T22246] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1046.902042][T22246] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1046.945267][T22246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.194448][T22246] snd-usb-caiaq 4-1:1.0: invalid EPs [ 1047.211021][T22246] usb 4-1: unable to init card! (ret=-22) [ 1047.240811][T22246] snd-usb-caiaq: probe of 4-1:1.0 failed with error -22 [ 1047.422942][T22246] usb 4-1: USB disconnect, device number 48 [ 1047.513425][ T373] loop2: detected capacity change from 0 to 32768 [ 1047.524247][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1047.542061][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1047.554466][ T373] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.10779 (373) [ 1047.597092][ T404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10787'. [ 1047.606533][ T404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10787'. [ 1047.617701][ T404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10787'. [ 1047.627414][ T404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10787'. [ 1047.637748][ T404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10787'. [ 1047.649588][ T404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10787'. [ 1047.658576][ T373] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1047.660059][ T404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10787'. [ 1047.678405][ T373] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1047.685019][ T404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10787'. [ 1047.710911][ T373] BTRFS info (device loop2): force clearing of disk cache [ 1047.736014][ T373] BTRFS info (device loop2): use zlib compression, level 3 [ 1047.748267][ T373] BTRFS info (device loop2): enabling ssd optimizations [ 1047.769442][ T373] BTRFS info (device loop2): using spread ssd allocation scheme [ 1047.773679][ T408] netlink: 'syz.0.10789': attribute type 8 has an invalid length. [ 1047.777188][ T373] BTRFS info (device loop2): using free space tree [ 1047.886798][ T373] BTRFS info (device loop2): auto enabling async discard [ 1047.906166][ T373] BTRFS info (device loop2): rebuilding free space tree [ 1047.926913][ T429] loop1: detected capacity change from 0 to 128 [ 1047.955174][ T373] BTRFS info (device loop2): checking UUID tree [ 1047.969327][ T429] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1048.067146][ T429] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1048.101512][ T5766] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1048.134653][ T429] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 187 marked as free, partition length is 32) [ 1048.998865][ T5083] Bluetooth: hci2: unexpected event for opcode 0x0402 [ 1049.226868][ T528] program syz.3.10811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1049.241905][ T527] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1049.262510][ T527] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1049.431006][ T543] netlink: 'syz.1.10817': attribute type 15 has an invalid length. [ 1050.252637][ T5806] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 1050.399041][ T561] loop1: detected capacity change from 0 to 32768 [ 1050.467894][ T5806] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.477905][ T561] JBD2: Ignoring recovery information on journal [ 1050.488770][ T5806] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1050.498475][ T5806] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 1050.509717][ T5806] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1050.518932][ T5806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.534150][ T5806] hub 4-1:1.0: bad descriptor, ignoring hub [ 1050.541221][ T5806] hub: probe of 4-1:1.0 failed with error -5 [ 1050.549667][ T5806] cdc_wdm 4-1:1.0: skipping garbage [ 1050.555047][ T5806] cdc_wdm 4-1:1.0: skipping garbage [ 1050.560343][ T5806] cdc_wdm 4-1:1.0: skipping garbage [ 1050.566317][ T5806] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 1050.640534][ T561] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1050.755610][ T608] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1050.860414][ T5767] ocfs2: Unmounting device (7,1) on (node local) [ 1050.881805][ T5806] usb 4-1: USB disconnect, device number 49 [ 1051.459400][ T645] __nla_validate_parse: 12 callbacks suppressed [ 1051.459417][ T645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10847'. [ 1051.611757][ T655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10850'. [ 1051.663410][ T657] ieee802154 phy0 wpan0: encryption failed: -22 [ 1052.125475][ T679] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10859'. [ 1052.315076][ T690] loop3: detected capacity change from 0 to 16 [ 1052.352921][ T690] erofs: (device loop3): mounted with root inode @ nid 36. [ 1052.380089][ T653] loop1: detected capacity change from 0 to 32768 [ 1052.438807][ T653] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1052.582042][ T713] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10868'. [ 1052.611769][ T713] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1052.715939][ T719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1052.748236][ T653] XFS (loop1): Ending clean mount [ 1052.762096][ T653] XFS (loop1): Quotacheck needed: Please wait. [ 1052.927901][ T653] XFS (loop1): Quotacheck: Done. [ 1053.175005][ T5767] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1053.463799][ T756] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.033857][ T794] overlayfs: missing 'lowerdir' [ 1054.189988][ T802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10898'. [ 1054.208507][ T804] netlink: 'syz.1.10897': attribute type 4 has an invalid length. [ 1054.349739][ T805] loop3: detected capacity change from 0 to 4096 [ 1054.372293][ T805] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 1054.566177][ T805] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 1054.908917][ T845] netlink: 'syz.3.10911': attribute type 7 has an invalid length. [ 1054.924371][ T846] loop1: detected capacity change from 0 to 512 [ 1054.932334][ T845] netlink: 'syz.3.10911': attribute type 8 has an invalid length. [ 1054.945240][ T846] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1054.999765][ T846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1055.174849][ T846] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1055.194159][ T846] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1055.200351][ T865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10917'. [ 1055.206200][ T846] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.10913: Failed to acquire dquot type 1 [ 1055.222730][ T866] loop2: detected capacity change from 0 to 256 [ 1055.293367][ T869] IPv6: NLM_F_CREATE should be specified when creating new route [ 1055.388419][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.423973][ T874] comedi comedi4: bad chanlist[0]=0xfffffffe chan=65534 range length=2 [ 1055.778811][ T901] loop1: detected capacity change from 0 to 16 [ 1055.794901][ T901] erofs: (device loop1): mounted with root inode @ nid 36. [ 1056.576408][ T961] loop3: detected capacity change from 0 to 8192 [ 1056.652976][ T961] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1057.193277][ T5891] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 1057.202439][ T1009] veth1_to_hsr: entered promiscuous mode [ 1057.234057][ T1009] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 1057.237557][ T1013] loop2: detected capacity change from 0 to 1024 [ 1057.290418][ T1013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1057.396943][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.411901][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1057.441982][ T5891] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1057.475301][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.483388][ T5891] usb 4-1: Product: syz [ 1057.517404][ T5891] usb 4-1: Manufacturer: syz [ 1057.530891][ T5891] usb 4-1: SerialNumber: syz [ 1057.564389][ T5891] usb 4-1: config 0 descriptor?? [ 1057.595884][ T5891] hub 4-1:0.0: bad descriptor, ignoring hub [ 1057.601848][ T5891] hub: probe of 4-1:0.0 failed with error -5 [ 1057.658608][ T5891] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input55 [ 1057.681784][ T1035] netlink: 'syz.1.10963': attribute type 5 has an invalid length. [ 1058.107970][ T1065] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10968'. [ 1058.124243][ T1065] netlink: 172 bytes leftover after parsing attributes in process `syz.2.10968'. [ 1058.685821][ T1103] loop1: detected capacity change from 0 to 2048 [ 1058.739654][ T1106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10982'. [ 1058.772235][ T1103] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1059.306710][ T1132] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.10989'. [ 1059.316765][ T1132] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1059.338801][ T1132] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1059.409446][ T56] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1059.640193][ T56] usb 2-1: config 1 has an invalid descriptor of length 168, skipping remainder of the config [ 1059.665727][ T56] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 9121, setting to 64 [ 1059.714910][ T56] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1059.755957][ T56] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 1059.784213][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.803302][ T56] usb 2-1: Product: syz [ 1059.807963][ T56] usb 2-1: Manufacturer: syz [ 1059.816929][ T56] usb 2-1: SerialNumber: syz [ 1059.834617][ T56] cdc_subset: probe of 2-1:1.0 failed with error -22 [ 1059.860470][ T56] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 1059.877569][ T1151] netlink: 115 bytes leftover after parsing attributes in process `syz.0.10996'. [ 1059.879040][ T56] cdc_ncm 2-1:1.0: bind() failure [ 1059.902794][ T1118] loop3: detected capacity change from 0 to 32768 [ 1059.914508][ T56] cdc_subset: probe of 2-1:1.1 failed with error -22 [ 1059.941850][ T1118] (syz.3.10985,1118,1):ocfs2_verify_heartbeat:835 ERROR: Heartbeat has to be started to mount a read-write clustered device. [ 1059.961134][ T56] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1060.013496][ T56] cdc_ncm 2-1:1.1: bind() failure [ 1060.024745][ T1118] (syz.3.10985,1118,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1060.209046][ T1170] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.11000'. [ 1060.231907][ T5891] usb 2-1: USB disconnect, device number 40 [ 1061.094352][ T1236] macsec0: entered promiscuous mode [ 1061.107275][ T1236] macsec0: entered allmulticast mode [ 1061.112690][ T1236] veth1_macvtap: entered allmulticast mode [ 1061.684140][ T1276] netlink: 'syz.3.11034': attribute type 2 has an invalid length. [ 1061.712503][ T1276] netlink: 'syz.3.11034': attribute type 8 has an invalid length. [ 1061.739890][ T1276] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11034'. [ 1061.756001][ T1279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11035'. [ 1062.159020][ T5891] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1062.256948][ T5825] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1062.356017][ T5891] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.363790][ T1327] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11049'. [ 1062.368511][ T5891] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1062.385908][ T5891] usb 3-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00 [ 1062.402367][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.475985][ T1333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11051'. [ 1062.493332][ T1333] netlink: 'syz.3.11051': attribute type 6 has an invalid length. [ 1062.503662][ T5825] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1062.514825][ T5825] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1062.540274][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.694525][ T9] usb 3-1: USB disconnect, device number 50 [ 1062.771129][ T1355] CIFS mount error: No usable UNC path provided in device string! [ 1062.771129][ T1355] [ 1062.808769][ T1355] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1062.824436][ T5806] usb 4-1: USB disconnect, device number 50 [ 1063.056776][ T5825] qmi_wwan: probe of 2-1:1.0 failed with error -22 [ 1063.078419][ T5825] usb 2-1: USB disconnect, device number 41 [ 1063.819393][ T1400] loop3: detected capacity change from 0 to 40427 [ 1063.838180][ T1400] F2FS-fs (loop3): Corrupted extension count (33554469 + 1 > 64) [ 1063.856614][ T1400] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1063.891177][ T1400] F2FS-fs (loop3): invalid crc value [ 1064.140176][ T1400] F2FS-fs (loop3): Try to recover 2th superblock, ret: -30 [ 1064.161234][ T1400] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1064.200910][ T1400] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix. [ 1064.630360][ T1441] xt_recent: hitcount (4294967294) is larger than allowed maximum (255) [ 1065.290018][ T1482] __nla_validate_parse: 1 callbacks suppressed [ 1065.290035][ T1482] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11097'. [ 1065.341267][ T1482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11097'. [ 1065.376482][ T1488] IPv6: Can't replace route, no match found [ 1066.018288][ T1491] loop3: detected capacity change from 0 to 32768 [ 1066.160245][ T1491] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1066.486828][ T5771] ocfs2: Unmounting device (7,3) on (node local) [ 1066.702596][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1066.931563][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.953802][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1066.960708][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1066.977603][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.988393][ T9] usb 3-1: config 0 descriptor?? [ 1066.999202][ T9] em28xx 3-1:0.0: audio device (2040:1605): interface 0, class 1 [ 1067.235948][ T9] usb 3-1: USB disconnect, device number 51 [ 1067.937990][ T1615] binder: BC_ACQUIRE_RESULT not supported [ 1067.949880][ T1615] binder: 1613:1615 ioctl c0306201 200000000000 returned -22 [ 1068.022856][ T1617] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1068.087571][ T1617] bridge7: entered promiscuous mode [ 1068.098203][ T1617] bridge7: entered allmulticast mode [ 1068.160539][ T1626] loop2: detected capacity change from 0 to 256 [ 1068.185563][ T1626] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1068.486366][ T28] audit: type=1326 audit(1059.962:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1644 comm="syz.2.11151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1068.551981][ T28] audit: type=1326 audit(1059.962:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1644 comm="syz.2.11151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1068.597809][ T28] audit: type=1326 audit(1059.962:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1644 comm="syz.2.11151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1068.654478][ T28] audit: type=1326 audit(1059.962:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1644 comm="syz.2.11151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1068.663566][ T1656] netlink: 112 bytes leftover after parsing attributes in process `syz.2.11155'. [ 1068.695218][ T1654] loop3: detected capacity change from 0 to 2048 [ 1068.765924][ T1654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1068.901778][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.066575][ T1683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11159'. [ 1069.173905][ T28] audit: type=1326 audit(1060.589:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1686 comm="syz.3.11163" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d6659e0d9 code=0x0 [ 1069.272393][ T56] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1069.484906][ T56] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1069.503453][ T1708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11171'. [ 1069.513601][ T56] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1069.533151][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.533589][ T1708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11171'. [ 1069.546333][ T56] usb 2-1: Product: syz [ 1069.570956][ T56] usb 2-1: Manufacturer: syz [ 1069.575744][ T56] usb 2-1: SerialNumber: syz [ 1069.580645][ T1708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11171'. [ 1069.601702][ T56] usb 2-1: config 0 descriptor?? [ 1069.608704][ T1708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11171'. [ 1069.612890][ T1672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1069.628725][ T1708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11171'. [ 1069.646894][ T56] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1069.657898][ T1708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11171'. [ 1069.874895][ T56] usb 2-1: USB disconnect, device number 42 [ 1070.429059][ T1768] loop3: detected capacity change from 0 to 512 [ 1070.477421][ T1768] EXT4-fs: Ignoring removed bh option [ 1070.482862][ T1768] EXT4-fs: Ignoring removed oldalloc option [ 1070.585230][ T1768] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1070.607690][ T1768] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 1070.627810][ T1768] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.11187: Corrupt directory, running e2fsck is recommended [ 1070.715667][ T1768] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 1070.723894][ T1768] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.11187: bad orphan inode 15 [ 1070.755370][ T1768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1070.840977][ T1768] EXT4-fs error (device loop3): __ext4_new_inode:1081: comm syz.3.11187: reserved inode found cleared - inode=18 [ 1070.959361][ T1812] netdevsim netdevsim2: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 1071.023466][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.061517][ T1888] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1072.194588][ T1889] loop1: detected capacity change from 0 to 4096 [ 1072.281713][ T1889] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1072.843087][ T1937] __nla_validate_parse: 41 callbacks suppressed [ 1072.843105][ T1937] netlink: 464 bytes leftover after parsing attributes in process `syz.3.11240'. [ 1072.883288][ T5825] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1072.938558][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1073.096096][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1073.108355][ T1954] loop3: detected capacity change from 0 to 1024 [ 1073.112472][ T5825] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1073.125130][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.139737][ T5825] usb 2-1: Product: syz [ 1073.154458][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1073.158100][ T5825] usb 2-1: Manufacturer: syz [ 1073.164220][ T5825] usb 2-1: SerialNumber: syz [ 1073.167112][ T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1073.187966][ T9] usb 1-1: config 0 has no interface number 0 [ 1073.193436][ T5825] usb 2-1: config 0 descriptor?? [ 1073.194099][ T9] usb 1-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1073.222216][ T5825] hub 2-1:0.0: bad descriptor, ignoring hub [ 1073.247647][ T5825] hub: probe of 2-1:0.0 failed with error -5 [ 1073.252024][ T9] usb 1-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1073.278506][ T5825] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input56 [ 1073.283729][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1073.313639][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.351648][ T9] usb 1-1: Product: syz [ 1073.355917][ T9] usb 1-1: Manufacturer: syz [ 1073.368599][ T9] usb 1-1: SerialNumber: syz [ 1073.405473][ T9] usb 1-1: config 0 descriptor?? [ 1073.412975][ T1974] netlink: 'syz.2.11248': attribute type 1 has an invalid length. [ 1073.422152][ T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1073.543648][ T1979] loop3: detected capacity change from 0 to 1024 [ 1073.634931][ T9] usb 1-1: qt2_setup_urbs - submit read urb failed -90 [ 1073.648359][ T9] quatech2: probe of 1-1:0.51 failed with error -90 [ 1073.871524][ T5825] usb 1-1: USB disconnect, device number 42 [ 1074.111344][ T2022] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1074.124277][ T2022] bridge4: entered promiscuous mode [ 1074.129511][ T2022] bridge4: entered allmulticast mode [ 1074.325584][ T5891] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 1074.529875][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.561628][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1074.583207][ T5891] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1074.595078][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.615325][ T5891] usb 3-1: config 0 descriptor?? [ 1074.639253][ T5891] qmi_wwan 3-1:0.0: bogus CDC Union: master=25, slave=0 [ 1074.713042][ T9] usb 2-1: USB disconnect, device number 43 [ 1074.744585][ T2059] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1074.782988][ T2059] bridge3: entered promiscuous mode [ 1074.788260][ T2059] bridge3: entered allmulticast mode [ 1074.911441][ T5891] usb 3-1: string descriptor 0 read error: -71 [ 1074.929019][ T5891] qmi_wwan: probe of 3-1:0.0 failed with error -22 [ 1074.947941][ T5891] usb 3-1: USB disconnect, device number 52 [ 1075.117194][ T56] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1075.127676][ T2093] loop1: detected capacity change from 0 to 256 [ 1075.312535][ T2106] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11279'. [ 1075.321620][ T2106] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11279'. [ 1075.358590][ T56] usb 1-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1075.375241][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.396148][ T56] usb 1-1: Product: syz [ 1075.401365][ T56] usb 1-1: Manufacturer: syz [ 1075.420774][ T56] usb 1-1: SerialNumber: syz [ 1075.435473][ T56] usb 1-1: config 0 descriptor?? [ 1075.456934][ T56] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1075.900447][ T56] usb 1-1: USB disconnect, device number 43 [ 1075.925522][ T2139] loop1: detected capacity change from 0 to 1024 [ 1076.432693][ T2177] netlink: 'syz.1.11295': attribute type 5 has an invalid length. [ 1076.515895][ T56] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 1076.653887][ T2192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11300'. [ 1076.674645][ T2192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11300'. [ 1076.695089][ T2192] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11300'. [ 1076.726325][ T56] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1076.760431][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.788082][ T56] usb 4-1: Product: syz [ 1076.792300][ T56] usb 4-1: Manufacturer: syz [ 1076.796921][ T56] usb 4-1: SerialNumber: syz [ 1076.822647][ T56] r8152-cfgselector 4-1: config 0 descriptor?? [ 1077.070188][T22246] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1077.276390][ T56] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1077.277682][T22246] usb 3-1: not running at top speed; connect to a high speed hub [ 1077.303600][ T56] r8152-cfgselector 4-1: USB disconnect, device number 51 [ 1077.314518][T22246] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1077.329670][ T9] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 1077.346121][T22246] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a2b, bcdDevice= 0.40 [ 1077.357853][T22246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.368643][T22246] usb 3-1: Product: syz [ 1077.376381][T22246] usb 3-1: Manufacturer: syz [ 1077.386371][T22246] usb 3-1: SerialNumber: syz [ 1077.553602][ T2251] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11317'. [ 1077.562318][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1077.581578][ T9] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1077.600458][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.612828][ T9] usb 1-1: Product: syz [ 1077.617495][ T9] usb 1-1: Manufacturer: syz [ 1077.623031][ T9] usb 1-1: SerialNumber: syz [ 1077.645848][ T9] usb 1-1: config 0 descriptor?? [ 1077.654260][T22246] usbhid 3-1:1.0: can't add hid device: -71 [ 1077.665573][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 1077.671538][ T9] hub: probe of 1-1:0.0 failed with error -5 [ 1077.684426][T22246] usbhid: probe of 3-1:1.0 failed with error -71 [ 1077.701060][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input57 [ 1077.718977][T22246] usb 3-1: USB disconnect, device number 53 [ 1078.142896][ T5891] usb 1-1: USB disconnect, device number 44 [ 1078.272606][ T5825] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1078.372752][ T2313] loop2: detected capacity change from 0 to 4096 [ 1078.472494][ T2313] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1078.478328][ T2319] Process accounting resumed [ 1078.519582][ T5825] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1078.540731][ T5825] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1078.572328][ T5825] usb 4-1: config 0 has no interface number 0 [ 1078.597089][ T5825] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1078.613678][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.623540][ T5825] usb 4-1: Product: syz [ 1078.627962][ T5825] usb 4-1: Manufacturer: syz [ 1078.638382][ T5825] usb 4-1: SerialNumber: syz [ 1078.677955][ T5825] usb 4-1: config 0 descriptor?? [ 1079.020920][ T5807] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1079.091747][ T28] audit: type=1326 audit(1069.737:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2353 comm="syz.2.11340" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1079.137408][ T5825] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 1079.151166][ T5825] usb 4-1: No valid video chain found. [ 1079.174840][ T5825] usb 4-1: USB disconnect, device number 52 [ 1079.180900][ T28] audit: type=1326 audit(1069.737:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2353 comm="syz.2.11340" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1079.237681][ T28] audit: type=1326 audit(1069.737:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2353 comm="syz.2.11340" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1079.262460][ T5807] usb 2-1: Using ep0 maxpacket: 8 [ 1079.289174][ T5807] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1079.299584][ T28] audit: type=1326 audit(1069.737:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2353 comm="syz.2.11340" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1079.323447][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1079.344093][ T5807] usb 2-1: Product: syz [ 1079.348649][ T5807] usb 2-1: Manufacturer: syz [ 1079.353276][ T5807] usb 2-1: SerialNumber: syz [ 1079.359800][ T28] audit: type=1326 audit(1069.737:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2353 comm="syz.2.11340" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1079.384766][ T5807] usb 2-1: config 0 descriptor?? [ 1079.395650][ T5807] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1079.405746][ T28] audit: type=1326 audit(1069.737:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2353 comm="syz.2.11340" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1079.431442][ T28] audit: type=1326 audit(1069.737:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2353 comm="syz.2.11340" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1079.464059][ T28] audit: type=1326 audit(1069.737:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2353 comm="syz.2.11340" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1079.539298][ T28] audit: type=1326 audit(1069.737:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2353 comm="syz.2.11340" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1079.597481][ T2374] usb usb8: usbfs: process 2374 (syz.0.11343) did not claim interface 0 before use [ 1079.847794][ T5807] gspca_sn9c2028: read1 error -71 [ 1079.854549][ T5807] gspca_sn9c2028: read1 error -71 [ 1079.869710][ T5807] sn9c2028: probe of 2-1:0.0 failed with error -71 [ 1079.883090][ T5807] usb 2-1: USB disconnect, device number 44 [ 1080.201714][ T2428] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11356'. [ 1080.255937][ T2428] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1080.833727][ T2475] veth9: entered allmulticast mode [ 1081.395530][ T5891] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1081.408496][ T2543] loop3: detected capacity change from 0 to 1024 [ 1081.612895][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 1081.638339][ T5891] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1081.658560][ T5891] usb 2-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 1081.690756][ T5891] usb 2-1: config 0 has no interface number 0 [ 1081.709152][ T2514] loop2: detected capacity change from 0 to 32768 [ 1081.719839][ T5891] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1081.753183][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.765773][ T5891] usb 2-1: Product: syz [ 1081.783575][ T5891] usb 2-1: Manufacturer: syz [ 1081.790572][ T5891] usb 2-1: SerialNumber: syz [ 1081.808473][ T5891] usb 2-1: config 0 descriptor?? [ 1081.826008][ T5891] usb 2-1: Found UVC 0.00 device syz (046d:08d3) [ 1081.841554][ T5891] usb 2-1: No valid video chain found. [ 1082.046889][ T5825] usb 2-1: USB disconnect, device number 45 [ 1082.336322][ T2594] loop3: detected capacity change from 0 to 16 [ 1082.356894][ T2594] erofs: (device loop3): mounted with root inode @ nid 36. [ 1082.400166][ T2594] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 1082.419442][ T2594] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 1082.445013][ T2594] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 1082.457512][ T2594] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 1082.468473][ T2594] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 1082.480757][ T2594] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 1082.489924][ T2594] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 1082.501359][ T2594] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 1082.512928][ T2594] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 1082.521893][ T28] audit: type=1800 audit(1072.900:1505): pid=2594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.11392" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 1082.643935][ T9] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1082.851185][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1082.871035][ T9] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1082.892666][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.900726][ T9] usb 3-1: Product: syz [ 1082.916023][ T9] usb 3-1: Manufacturer: syz [ 1082.920676][ T9] usb 3-1: SerialNumber: syz [ 1082.938109][ T9] usb 3-1: config 0 descriptor?? [ 1082.946565][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 1082.952681][ T9] hub: probe of 3-1:0.0 failed with error -5 [ 1082.982225][ T9] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input58 [ 1083.043772][ T5825] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1083.279191][ T5825] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.299105][ T5825] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1083.326113][ T5825] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1083.335197][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.345581][ T5825] usb 2-1: Product: syz [ 1083.350214][ T5825] usb 2-1: Manufacturer: syz [ 1083.355528][ T5825] usb 2-1: SerialNumber: syz [ 1083.372309][ T5825] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1083.382761][ T5825] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1083.390832][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1083.400939][ T5825] scsi host1: usb-storage 2-1:1.0 [ 1083.596906][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1083.604593][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1083.618255][ T9] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1083.622401][ T5825] usb 2-1: USB disconnect, device number 46 [ 1083.628000][ T9] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1083.642089][ T9] usb 4-1: Product: syz [ 1083.646988][ T9] usb 4-1: Manufacturer: syz [ 1083.660069][ T9] usb 4-1: SerialNumber: syz [ 1083.673419][T22246] usb 3-1: USB disconnect, device number 54 [ 1083.906409][ T9] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 1083.914881][ T9] usb 4-1: Handspring Visor / Palm OS: port 126, is for Console use [ 1083.923702][ T9] usb 4-1: Handspring Visor / Palm OS: port 123, is for unknown use [ 1083.931778][ T9] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1084.123052][ T9] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 1084.132200][ T9] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 1084.143134][ T9] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1084.156517][ T9] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1084.176711][ T9] usb 4-1: USB disconnect, device number 53 [ 1084.188527][ T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1084.216299][ T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1084.259118][ T9] visor 4-1:1.0: device disconnected [ 1084.265985][ T2654] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1084.330777][ T2718] loop1: detected capacity change from 0 to 256 [ 1084.338391][ T2718] exfat: Deprecated parameter 'namecase' [ 1084.348694][ T2718] exfat: Deprecated parameter 'namecase' [ 1084.357537][ T2719] xt_bpf: check failed: parse error [ 1084.381413][ T2718] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1084.915457][ T2754] loop1: detected capacity change from 0 to 2048 [ 1084.981359][ T2754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 ro without journal. Quota mode: none. [ 1085.012298][ T2763] tmpfs: Bad value for 'mpol' [ 1085.110589][ T2772] loop3: detected capacity change from 0 to 512 [ 1085.126636][ T2754] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.11414: inline data xattr refers to an external xattr inode [ 1085.127440][ T2772] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1085.223386][ T2772] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1085.231529][ T2772] System zones: 0-1, 15-15, 18-18, 34-34 [ 1085.274550][ T2772] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1085.294378][ T2772] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 1085.300832][ T2780] Unsupported ieee802154 address type: 0 [ 1085.308678][ T2772] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1085.326933][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 1085.339229][ T2772] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1085.362270][ T2772] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.11421: bad orphan inode 16 [ 1085.374833][ T2772] ext4_test_bit(bit=15, block=18) = 1 [ 1085.385827][ T2772] is_bad_inode(inode)=0 [ 1085.393671][ T2772] NEXT_ORPHAN(inode)=0 [ 1085.404029][ T2772] max_ino=32 [ 1085.407274][ T2772] i_nlink=2 [ 1085.414677][ T2772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1085.479408][ T2772] overlay: filesystem on ./file0 is read-only [ 1085.591529][ T2801] netlink: 'syz.2.11427': attribute type 3 has an invalid length. [ 1085.606153][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.607162][ T2801] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11427'. [ 1086.303511][ T2852] loop2: detected capacity change from 0 to 4096 [ 1086.519162][ T2852] ntfs3: loop2: ino=9, attr_set_size [ 1086.843928][ T2890] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11451'. [ 1087.357333][ T2925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11464'. [ 1087.471385][ T2929] loop2: detected capacity change from 0 to 256 [ 1087.487497][ T2929] exfat: Deprecated parameter 'namecase' [ 1087.522239][ T2932] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1087.532522][ T2929] exfat: Deprecated parameter 'namecase' [ 1087.589694][ T2929] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1088.215026][ T2976] netlink: 'syz.0.11480': attribute type 3 has an invalid length. [ 1088.247091][ T2976] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11480'. [ 1088.439063][ T2999] bond9: option lacp_active: invalid value (8) [ 1088.462694][ T2999] bond9 (unregistering): Released all slaves [ 1088.782382][T22246] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1088.986434][T22246] usb 3-1: Using ep0 maxpacket: 16 [ 1088.998620][T22246] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1089.008271][T22246] usb 3-1: config 0 has an invalid descriptor of length 214, skipping remainder of the config [ 1089.018596][ T5825] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1089.027420][T22246] usb 3-1: config 0 has no interface number 0 [ 1089.036699][T22246] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1089.046505][T22246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.055106][T22246] usb 3-1: Product: syz [ 1089.060807][T22246] usb 3-1: Manufacturer: syz [ 1089.065941][T22246] usb 3-1: SerialNumber: syz [ 1089.074084][T22246] usb 3-1: config 0 descriptor?? [ 1089.248267][ T5825] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.270967][ T5825] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1089.286235][ T5825] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1089.300948][ T5825] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1089.325147][ T5825] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1089.328079][T22246] usb 3-1: USB disconnect, device number 55 [ 1089.348879][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.452564][ T3125] No such timeout policy "syz1" [ 1089.837535][ T5825] usb 1-1: USB disconnect, device number 45 [ 1090.093316][ T3175] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11510'. [ 1090.127398][ T3178] overlay: Unknown parameter 'smackfstransmute' [ 1090.220014][ T3183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11513'. [ 1090.664884][ T3190] loop3: detected capacity change from 0 to 32768 [ 1090.682858][ T3190] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.11514 (3190) [ 1090.723966][ T3190] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1090.744307][ T3190] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1090.779944][ T3190] BTRFS info (device loop3): enabling auto defrag [ 1090.818824][ T3190] BTRFS info (device loop3): max_inline at 4096 [ 1090.825150][ T3190] BTRFS info (device loop3): using free space tree [ 1090.938128][ T3190] BTRFS info (device loop3): enabling ssd optimizations [ 1090.945427][ T3190] BTRFS info (device loop3): auto enabling async discard [ 1090.959730][ T3169] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1091.094118][ T3229] loop2: detected capacity change from 0 to 8 [ 1091.204170][ T3229] SQUASHFS error: Unable to read inode 0xa7 [ 1091.248190][ T3235] netlink: 164 bytes leftover after parsing attributes in process `syz.1.11524'. [ 1091.296192][ T5771] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1092.247473][ T3286] bridge5: entered promiscuous mode [ 1092.587095][ T5807] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1092.643931][ T3260] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1092.805127][ T5807] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.836550][ T3325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11552'. [ 1092.846835][ T5807] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1092.856531][ T5807] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1092.904476][ T5807] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1092.928557][ T5807] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1092.961381][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.191276][ T3342] nvme_fabrics: missing parameter 'nqn=%s' [ 1093.228034][ T5807] gud 1-1:1.0: Protocol version 33 is not supported [ 1093.304495][ T3353] comedi comedi1: 8255: I/O port conflict (0x9,4) [ 1093.320902][ T3353] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 1093.347033][ T3353] comedi comedi1: 8255: I/O port conflict (0x10000007,4) [ 1093.353758][ T3358] SET target dimension over the limit! [ 1093.366001][ T3353] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 1093.381522][ T3353] comedi comedi1: 8255: I/O port conflict (0x30000002,4) [ 1093.396697][ T3353] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 1093.482582][ T5807] usb 1-1: USB disconnect, device number 46 [ 1093.548852][ T3378] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11565'. [ 1093.585817][ T3378] tc_dump_action: action bad kind [ 1093.654486][ T3384] loop1: detected capacity change from 0 to 4096 [ 1093.775172][ T3384] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1093.842797][ T3384] ntfs3: loop1: Failed to load $Extend (-22). [ 1093.860308][ T3384] ntfs3: loop1: Failed to initialize $Extend. [ 1094.267149][ T3421] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11578'. [ 1094.801952][ T3457] cgroup: Unexpected value for 'nofavordynmods' [ 1094.949761][ T3469] netlink: 'syz.2.11594': attribute type 6 has an invalid length. [ 1095.362100][ T5807] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1095.477144][ T3503] loop2: detected capacity change from 0 to 4096 [ 1095.522077][ T3503] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1095.532546][ T3503] NILFS (loop2): trying rollback from an earlier position [ 1095.557186][ T3503] NILFS (loop2): recovery complete [ 1095.570971][ T3508] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1095.599002][ T5807] usb 4-1: Using ep0 maxpacket: 16 [ 1095.611974][ T5807] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1095.644112][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.655178][ T5807] usb 4-1: Product: syz [ 1095.659467][ T5807] usb 4-1: Manufacturer: syz [ 1095.664080][ T5807] usb 4-1: SerialNumber: syz [ 1095.688083][ T5807] r8152-cfgselector 4-1: config 0 descriptor?? [ 1095.911304][ T3519] netlink: 288 bytes leftover after parsing attributes in process `syz.2.11611'. [ 1096.157790][ T5807] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1096.183339][ T5807] r8152-cfgselector 4-1: USB disconnect, device number 54 [ 1096.568720][ T3564] loop2: detected capacity change from 0 to 4096 [ 1096.594715][ T3564] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1096.626235][ T3564] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1096.639343][ T3564] ntfs3: loop2: Failed to load $Extend (-22). [ 1096.656130][ T3564] ntfs3: loop2: Failed to initialize $Extend. [ 1096.772192][ T5825] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1096.983355][ T5825] usb 1-1: Using ep0 maxpacket: 8 [ 1096.996612][ T5825] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1097.017190][ T5825] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1097.026952][ T5825] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1097.038248][ T5807] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1097.067061][ T5825] usb 1-1: Product: syz [ 1097.081339][ T5825] usb 1-1: Manufacturer: syz [ 1097.087005][ T5825] usb 1-1: SerialNumber: syz [ 1097.229220][ T3602] netlink: 'syz.2.11634': attribute type 3 has an invalid length. [ 1097.237101][ T3602] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11634'. [ 1097.271312][ T5807] usb 2-1: Using ep0 maxpacket: 8 [ 1097.292897][ T5807] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 1097.301559][ T5807] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.355302][ T5807] usb 2-1: config 3 has no interface number 0 [ 1097.368680][ T5825] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 1097.378676][ T5807] usb 2-1: config 3 interface 45 altsetting 2 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1097.392584][ T5825] usb 1-1: Handspring Visor / Palm OS: port 126, is for Console use [ 1097.407977][ T5807] usb 2-1: config 3 interface 45 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1097.418494][ T5825] usb 1-1: Handspring Visor / Palm OS: port 123, is for unknown use [ 1097.426840][ T5825] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1097.434380][ T5807] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1097.459309][ T5807] usb 2-1: config 3 interface 45 has no altsetting 0 [ 1097.478900][ T5807] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 1097.518730][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.527473][ T5807] usb 2-1: Product: syz [ 1097.532961][ T5807] usb 2-1: Manufacturer: syz [ 1097.538020][ T5807] usb 2-1: SerialNumber: syz [ 1097.590004][ T3620] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1097.600806][ T5825] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 1097.622030][ T5825] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 1097.658763][ T5825] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1097.691739][ T5825] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1097.734318][ T5825] usb 1-1: USB disconnect, device number 47 [ 1097.754211][ T5825] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1097.816985][ T3637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11641'. [ 1097.836995][ T5825] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1097.861967][ T3637] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11641'. [ 1097.874106][ T5825] visor 1-1:1.0: device disconnected [ 1097.884661][ T5807] usb 2-1: USB disconnect, device number 47 [ 1097.935170][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1098.172273][ T3679] program syz.3.11647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1098.563422][ T3706] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1098.593544][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1098.799799][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1098.829398][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1098.852057][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.882907][ T9] usb 3-1: Product: syz [ 1098.887303][ T9] usb 3-1: Manufacturer: syz [ 1098.898121][ T9] usb 3-1: SerialNumber: syz [ 1098.907252][ T9] r8152-cfgselector 3-1: config 0 descriptor?? [ 1098.917333][ T3726] netlink: 'syz.0.11663': attribute type 5 has an invalid length. [ 1098.940808][ T3729] netlink: 830 bytes leftover after parsing attributes in process `syz.3.11664'. [ 1099.359033][ T3748] vers=1.0 (cifs) not permitted when mounting with smb3 [ 1099.359033][ T3748] [ 1099.370261][ T3748] CIFS: VFS: vers=1.0 (cifs) not permitted when mounting with smb3 [ 1099.407168][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1099.424953][ T9] r8152-cfgselector 3-1: USB disconnect, device number 57 [ 1099.482747][ T5807] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1099.598564][ T3767] netlink: 300 bytes leftover after parsing attributes in process `syz.1.11675'. [ 1099.700369][ T3771] kernel profiling enabled (shift: 63) [ 1099.706664][ T3771] profiling shift: 63 too large [ 1099.716129][ T5807] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 1099.742917][ T5807] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 1099.757585][ T5807] usb 4-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 1099.786344][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.794391][ T5807] usb 4-1: Product: syz [ 1099.812167][ T5807] usb 4-1: Manufacturer: syz [ 1099.816813][ T5807] usb 4-1: SerialNumber: syz [ 1100.078231][ T5807] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 1100.140561][ T5807] usb 4-1: USB disconnect, device number 55 [ 1100.380620][ T3819] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11689'. [ 1100.611655][ T3828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11693'. [ 1101.060199][ T3859] netlink: 'syz.1.11702': attribute type 1 has an invalid length. [ 1101.076734][ T3859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11702'. [ 1101.203796][ T3864] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11704'. [ 1101.996615][ T28] audit: type=1326 audit(1090.865:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3888 comm="syz.0.11712" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97b39e0d9 code=0x7ffc0000 [ 1102.031982][ T3890] loop1: detected capacity change from 0 to 64 [ 1102.078496][ T28] audit: type=1326 audit(1090.865:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3888 comm="syz.0.11712" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97b39e0d9 code=0x7ffc0000 [ 1102.174746][ T3890] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1102.255781][ T28] audit: type=1326 audit(1090.865:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3888 comm="syz.0.11712" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97b39e0d9 code=0x7ffc0000 [ 1102.372293][ T28] audit: type=1326 audit(1090.865:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3888 comm="syz.0.11712" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fb97b39e0d9 code=0x7ffc0000 [ 1102.432142][ T28] audit: type=1326 audit(2000000000.018:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3888 comm="syz.0.11712" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97b39e0d9 code=0x7ffc0000 [ 1102.508182][ T28] audit: type=1326 audit(2000000000.018:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3888 comm="syz.0.11712" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97b39e0d9 code=0x7ffc0000 [ 1102.582880][ T28] audit: type=1326 audit(2000000000.036:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3888 comm="syz.0.11712" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97b39e0d9 code=0x7ffc0000 [ 1102.662453][ T28] audit: type=1326 audit(2000000000.036:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3888 comm="syz.0.11712" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb97b39e0d9 code=0x7ffc0000 [ 1102.790153][ T28] audit: type=1326 audit(2000000000.036:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3888 comm="syz.0.11712" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb97b39e0d9 code=0x7ffc0000 [ 1103.641339][ T3950] loop3: detected capacity change from 0 to 128 [ 1103.761979][ T5825] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 1103.985172][ T5825] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.002164][ T5825] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1104.028179][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.069628][ T5825] usb 1-1: Product: syz [ 1104.073845][ T5825] usb 1-1: Manufacturer: syz [ 1104.109627][ T5825] usb 1-1: SerialNumber: syz [ 1104.135700][ T5825] usb 1-1: config 0 descriptor?? [ 1104.193725][ T3966] netlink: 'syz.1.11736': attribute type 2 has an invalid length. [ 1104.235367][ T3966] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1104.268834][ T3901] loop2: detected capacity change from 0 to 32768 [ 1104.291134][ T3901] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.11716 (3901) [ 1104.340264][ T3901] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1104.369813][ T3901] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1104.370301][ T5825] cdc_subset: probe of 1-1:0.0 failed with error -22 [ 1104.390470][ T3901] BTRFS info (device loop2): force zlib compression, level 3 [ 1104.410474][ T3901] BTRFS info (device loop2): turning on flush-on-commit [ 1104.427432][ T3901] BTRFS info (device loop2): max_inline at 0 [ 1104.568364][ T3901] BTRFS info (device loop2): using free space tree [ 1104.621960][ T5825] usb 1-1: USB disconnect, device number 48 [ 1104.947060][ T3901] BTRFS info (device loop2): enabling ssd optimizations [ 1104.993959][ T4010] netlink: 220 bytes leftover after parsing attributes in process `syz.3.11740'. [ 1105.078128][ T3901] BTRFS info (device loop2): auto enabling async discard [ 1105.200214][ T4013] netlink: 'syz.1.11743': attribute type 1 has an invalid length. [ 1105.234575][ T4013] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11743'. [ 1105.790808][ T5766] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1105.880865][ T5825] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1106.114383][ T5825] usb 1-1: Using ep0 maxpacket: 8 [ 1106.154850][ T5825] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.202746][ T5825] usb 1-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1106.273440][ T5825] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1106.313829][ T5825] usb 1-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 1106.349863][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.375238][ T5825] usb 1-1: Product: syz [ 1106.412413][ T5825] usb 1-1: Manufacturer: syz [ 1106.438623][ T5825] usb 1-1: SerialNumber: syz [ 1106.694650][ T4027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.748787][ T4027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.805128][ T5825] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input61 [ 1106.891568][ T5123] bcm5974 1-1:1.0: could not read from device [ 1106.992038][ T5825] usb 1-1: USB disconnect, device number 49 [ 1107.008703][ T5123] bcm5974 1-1:1.0: could not read from device [ 1107.304978][ T5853] udevd[5853]: Error opening device "/dev/input/event4": No such file or directory [ 1107.348963][ T5853] udevd[5853]: Unable to EVIOCGABS device "/dev/input/event4" [ 1107.366693][ T5853] udevd[5853]: Unable to EVIOCGABS device "/dev/input/event4" [ 1107.388455][ T5853] udevd[5853]: Unable to EVIOCGABS device "/dev/input/event4" [ 1107.463704][ T5853] udevd[5853]: Unable to EVIOCGABS device "/dev/input/event4" [ 1107.629749][ T4105] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1108.104213][ T4123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11771'. [ 1108.114079][ T4123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11771'. [ 1108.125974][ T4123] netlink: 17 bytes leftover after parsing attributes in process `syz.0.11771'. [ 1108.291376][ T4137] netlink: 88 bytes leftover after parsing attributes in process `syz.2.11776'. [ 1108.369487][ T4134] loop3: detected capacity change from 0 to 4096 [ 1108.504631][ T4134] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1108.512293][ T4134] EXT4-fs (loop3): Encoding requested by superblock is unknown [ 1108.971086][ T5825] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1109.200875][ T5825] usb 4-1: config 0 has an invalid interface number: 42 but max is 8 [ 1109.226562][ T5825] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1109.268067][ T5825] usb 4-1: config 0 has no interface number 0 [ 1109.286106][ T5825] usb 4-1: New USB device found, idVendor=04cb, idProduct=0100, bcdDevice= 0.bb [ 1109.331532][ T4186] loop2: detected capacity change from 0 to 1024 [ 1109.331600][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.396503][ T5825] usb 4-1: config 0 descriptor?? [ 1109.525067][ T4186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1109.655615][ T5825] usb 4-1: string descriptor 0 read error: -71 [ 1109.687106][ T5825] usb-storage 4-1:0.42: USB Mass Storage device detected [ 1109.737628][ T5825] usb-storage 4-1:0.42: Quirks match for vid 04cb pid 0100: 9 [ 1109.773450][ T5825] usb-storage 4-1:0.42: This device (04cb,0100,00bb S 04 P 61) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1109.773450][ T5825] Please send a copy of this message to and [ 1109.937349][ T4186] EXT4-fs error (device loop2): ext4_get_first_dir_block:3595: inode #11: comm syz.2.11791: directory missing '.' [ 1109.995337][ T5825] usb 4-1: USB disconnect, device number 56 [ 1110.011467][ T4186] EXT4-fs (loop2): Remounting filesystem read-only [ 1110.169418][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.500557][ T4236] cgroup: noprefix used incorrectly [ 1111.191207][ T4268] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 1111.389171][ T5825] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1111.616701][ T5825] usb 2-1: Using ep0 maxpacket: 8 [ 1111.624282][ T5825] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1111.640173][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1111.657352][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1111.667488][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1111.682699][ T5825] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1111.701974][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1111.713479][ T5825] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 1111.736720][ T5825] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1111.745946][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.760867][ T5825] usb 2-1: Product: syz [ 1111.765121][ T5825] usb 2-1: Manufacturer: syz [ 1111.773877][ T5825] usb 2-1: SerialNumber: syz [ 1111.782338][ T5825] usb 2-1: config 0 descriptor?? [ 1111.800804][ T4258] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1111.808373][ T5807] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1111.824631][ T4258] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1111.844398][ T5825] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1112.017988][ T5807] usb 4-1: Using ep0 maxpacket: 16 [ 1112.024922][ T5807] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 1112.039603][ T5807] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1112.087074][ T5807] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1112.128472][ T5807] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1112.169834][ T5807] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1112.179847][ T5807] usb 4-1: config 0 has no interface number 0 [ 1112.186504][ T5807] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1112.202628][ T5807] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1112.214554][ T5807] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1112.225967][ T5807] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1112.239804][ T5807] usb 4-1: config 0 interface 125 has no altsetting 0 [ 1112.294087][ T5807] usb 4-1: config 0 interface 125 has no altsetting 2 [ 1112.314162][ T5807] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1112.360548][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.381846][ T5807] usb 4-1: Product: syz [ 1112.386056][ T5807] usb 4-1: Manufacturer: syz [ 1112.397410][ T5807] usb 4-1: SerialNumber: syz [ 1112.411181][ T5807] usb 4-1: config 0 descriptor?? [ 1112.449959][ T5807] usb 4-1: selecting invalid altsetting 2 [ 1112.546138][ T5825] usb 2-1: USB disconnect, device number 48 [ 1112.935963][ C1] usb 4-1: async_complete: urb error -71 [ 1112.941801][ C1] usb 4-1: async_complete: urb error -71 [ 1112.947596][ C1] usb 4-1: async_complete: urb error -71 [ 1112.964679][ T5807] get_1284_register: usb error -71 [ 1112.984940][ T5807] usb 4-1: USB disconnect, device number 57 [ 1113.264115][ T4258] Process accounting paused [ 1113.596083][ T4364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11833'. [ 1113.949633][ T4376] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11838'. [ 1113.989338][ T4376] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11838'. [ 1114.147862][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1114.305932][ T5825] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1114.501470][T22246] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1114.523731][ T5825] usb 1-1: Using ep0 maxpacket: 8 [ 1114.568087][ T5825] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1114.583715][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.606046][ T5825] usb 1-1: Product: syz [ 1114.611998][ T5825] usb 1-1: Manufacturer: syz [ 1114.616632][ T5825] usb 1-1: SerialNumber: syz [ 1114.751407][T22246] usb 2-1: Using ep0 maxpacket: 32 [ 1114.759578][T22246] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1114.794382][T22246] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 1114.864583][T22246] usb 2-1: string descriptor 0 read error: -22 [ 1114.872679][T22246] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1114.875850][ T5825] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1114.913156][T22246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.915211][ T5825] usb 1-1: unit 3 not found! [ 1115.050149][ T5825] usb 1-1: USB disconnect, device number 50 [ 1115.206630][T22246] usb 2-1: unit 255 not found! [ 1115.573496][ T5825] usb 2-1: USB disconnect, device number 49 [ 1115.582216][ T4411] loop3: detected capacity change from 0 to 32768 [ 1115.713041][ T4411] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1115.986955][ T4411] XFS (loop3): Ending clean mount [ 1116.222443][ T4499] loop2: detected capacity change from 0 to 64 [ 1116.347693][ T5771] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1116.659606][ T5825] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1116.868435][ T4522] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.11865'. [ 1116.931828][ T5825] usb 1-1: Using ep0 maxpacket: 32 [ 1116.975547][ T5825] usb 1-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=1a.51 [ 1116.995122][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.026100][ T5825] usb 1-1: Product: syz [ 1117.038102][ T4530] netlink: 'syz.2.11867': attribute type 2 has an invalid length. [ 1117.074007][ T5825] usb 1-1: Manufacturer: syz [ 1117.078653][ T5825] usb 1-1: SerialNumber: syz [ 1117.093500][ T5825] usb 1-1: config 0 descriptor?? [ 1117.132004][ T5825] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 1117.326117][ T5825] gspca_sn9c2028: read1 error -71 [ 1117.359054][ T5825] gspca_sn9c2028: read1 error -71 [ 1117.386672][ T5825] gspca_sn9c2028: read1 error -71 [ 1117.418175][ T5825] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 1117.449984][ T5825] usb 1-1: USB disconnect, device number 51 [ 1117.744887][ T4564] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.983127][ T28] audit: type=1326 audit(2000000014.736:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.11876" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1118.187167][ T28] audit: type=1326 audit(2000000014.736:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.11876" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1118.287561][ T28] audit: type=1326 audit(2000000014.745:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.11876" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1118.367614][ T28] audit: type=1326 audit(2000000014.745:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.11876" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1118.426001][ T28] audit: type=1326 audit(2000000014.745:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.11876" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1118.518980][ T28] audit: type=1326 audit(2000000014.745:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.11876" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1118.618042][ T28] audit: type=1326 audit(2000000014.745:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.11876" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1118.686663][ T28] audit: type=1326 audit(2000000014.745:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.11876" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1118.792949][ T28] audit: type=1326 audit(2000000014.745:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.11876" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc34399e0d9 code=0x7ffc0000 [ 1118.903768][ T4600] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11886'. [ 1119.131444][ T4603] netlink: 'syz.0.11887': attribute type 21 has an invalid length. [ 1119.517758][ T4582] loop2: detected capacity change from 0 to 32768 [ 1119.553318][ T4582] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.11879 (4582) [ 1119.583233][ T4616] xt_TCPMSS: Only works on TCP SYN packets [ 1119.662767][ T5825] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1119.779075][ T4582] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1119.803752][ T4582] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1119.812509][ T4582] BTRFS info (device loop2): force clearing of disk cache [ 1119.854807][ T4582] BTRFS info (device loop2): enabling disk space caching [ 1119.876752][ T4582] BTRFS info (device loop2): turning on sync discard [ 1119.901303][ T5825] usb 1-1: Using ep0 maxpacket: 16 [ 1119.908509][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1119.922912][ T4582] BTRFS info (device loop2): disabling tree log [ 1119.929229][ T4582] BTRFS info (device loop2): metadata ratio 5 [ 1119.937272][ T5825] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1119.955476][ T4582] BTRFS info (device loop2): disk space caching is enabled [ 1119.999693][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.040984][ T5825] usb 1-1: Product: syz [ 1120.051972][ T5825] usb 1-1: Manufacturer: syz [ 1120.057055][ T5825] usb 1-1: SerialNumber: syz [ 1120.070399][ T5825] usb 1-1: config 0 descriptor?? [ 1120.106734][ T5825] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1120.347692][ T4582] BTRFS info (device loop2): enabling ssd optimizations [ 1120.368580][ T4582] BTRFS info (device loop2): rebuilding free space tree [ 1120.389478][ T56] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1120.408691][ T4582] BTRFS info (device loop2): disabling free space tree [ 1120.432738][ T4582] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1120.454290][ T4582] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1120.480857][ T5825] usb 1-1: USB disconnect, device number 52 [ 1120.495364][T15351] usb 1-1: Failed to submit usb control message: -71 [ 1120.525098][T15351] usb 1-1: unable to send the bmi data to the device: -71 [ 1120.535829][T15351] usb 1-1: unable to get target info from device [ 1120.549759][T15351] usb 1-1: could not get target info (-71) [ 1120.565439][T15351] usb 1-1: could not probe fw (-71) [ 1120.633199][ T56] usb 2-1: Using ep0 maxpacket: 8 [ 1120.671473][ T56] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.723111][ T56] usb 2-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1120.789460][ T56] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1120.814079][ T56] usb 2-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 1120.852521][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.888010][ T56] usb 2-1: Product: syz [ 1120.892238][ T56] usb 2-1: Manufacturer: syz [ 1120.959092][ T56] usb 2-1: SerialNumber: syz [ 1121.236758][ T4642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.300960][ T4642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.354950][ T5766] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1121.371911][ T56] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input63 [ 1121.452876][ T5123] bcm5974 2-1:1.0: could not read from device [ 1121.494832][ T5123] bcm5974 2-1:1.0: could not read from device [ 1121.537802][ T56] usb 2-1: USB disconnect, device number 50 [ 1121.538650][ T5123] bcm5974 2-1:1.0: could not read from device [ 1121.738868][ T6176] udevd[6176]: Error opening device "/dev/input/event4": No such file or directory [ 1121.779940][ T6176] udevd[6176]: Unable to EVIOCGABS device "/dev/input/event4" [ 1121.796269][ T4711] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1121.813385][ T6176] udevd[6176]: Unable to EVIOCGABS device "/dev/input/event4" [ 1121.864502][ T6176] udevd[6176]: Unable to EVIOCGABS device "/dev/input/event4" [ 1121.900034][ T6176] udevd[6176]: Unable to EVIOCGABS device "/dev/input/event4" [ 1122.115428][ T5891] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1122.253029][ T4730] netlink: 'syz.3.11909': attribute type 10 has an invalid length. [ 1122.279167][ T4730] netdevsim netdevsim3 ªªªªªª: left allmulticast mode [ 1122.297102][ T4730] netdevsim netdevsim3 ªªªªªª: left promiscuous mode [ 1122.315410][ T4730] bridge0: port 1(ªªªªªª) entered disabled state [ 1122.482059][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 1122.532075][ T4739] loop3: detected capacity change from 0 to 512 [ 1122.554414][ T4739] EXT4-fs: inline encryption not supported [ 1122.604192][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.620293][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.622438][ T4739] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #15: comm syz.3.11911: corrupted inode contents [ 1122.641155][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1122.649939][ T5891] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1122.677213][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.697040][ T5891] usb 1-1: config 0 descriptor?? [ 1122.704296][ T4739] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1122.732676][ T4739] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #15: comm syz.3.11911: corrupted inode contents [ 1122.762513][ T4739] EXT4-fs error (device loop3): ext4_evict_inode:302: inode #15: comm syz.3.11911: mark_inode_dirty error [ 1122.779495][ T4748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11913'. [ 1122.790381][ T4739] EXT4-fs (loop3): 1 orphan inode deleted [ 1122.804807][ T4739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1123.024495][ T5891] hub 1-1:0.0: USB hub found [ 1123.038123][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.057957][ T9] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1123.066688][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1123.188306][ T5891] hub 1-1:0.0: 3 ports detected [ 1123.384655][ T9] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1123.403715][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.411997][ T5891] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1123.425400][ T5891] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1123.433777][ T9] usb 3-1: Product: syz [ 1123.444985][ T9] usb 3-1: Manufacturer: syz [ 1123.457365][ T9] usb 3-1: SerialNumber: syz [ 1123.465420][ T4773] netlink: 'syz.1.11919': attribute type 12 has an invalid length. [ 1123.467780][ T5891] usbhid 1-1:0.0: can't add hid device: -71 [ 1123.497884][ T9] usb 3-1: config 0 descriptor?? [ 1123.501453][ T4773] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11919'. [ 1123.503655][ T5891] usbhid: probe of 1-1:0.0 failed with error -71 [ 1123.532329][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1123.642476][ T5891] usb 1-1: USB disconnect, device number 53 [ 1123.865214][ T4792] loop1: detected capacity change from 0 to 512 [ 1123.930109][ T4792] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 49, start 00000103) [ 1123.962196][ T4792] FAT-fs (loop1): Filesystem has been set read-only [ 1123.989388][ T5891] usb 3-1: USB disconnect, device number 58 [ 1124.103489][ T4792] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000103) [ 1125.821975][ T4874] SET target dimension over the limit! [ 1125.894695][ T4868] loop3: detected capacity change from 0 to 4096 [ 1126.377951][ T4868] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1126.385403][ T4868] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 1126.587725][ T4893] gretap1: entered allmulticast mode [ 1127.230282][ T4916] Cannot find del_set index 4 as target [ 1127.285899][ T5825] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1127.518357][ T5825] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1127.538082][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.559875][ T5825] usb 2-1: Product: syz [ 1127.575101][ T5825] usb 2-1: Manufacturer: syz [ 1127.597009][ T5825] usb 2-1: SerialNumber: syz [ 1127.727891][ T5807] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1127.770075][ T4939] binder: 4934:4939 ioctl c00c620f 0 returned -14 [ 1128.338005][ T5891] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1128.358203][ T5825] usb 2-1: USB disconnect, device number 51 [ 1128.603555][ T5891] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1128.612981][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.641949][ T5891] usb 3-1: config 0 descriptor?? [ 1128.805442][ T4970] loop3: detected capacity change from 0 to 64 [ 1128.891141][ T5807] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1128.914755][ T5807] ath9k_htc: Failed to initialize the device [ 1128.933162][ T5825] usb 2-1: ath9k_htc: USB layer deinitialized [ 1129.121482][ T5891] usb 3-1: Cannot set MAC address [ 1129.126710][ T5891] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 1129.175464][ T5891] usb 3-1: USB disconnect, device number 59 [ 1129.422069][ T4999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11980'. [ 1129.454608][ T4999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11980'. [ 1129.892726][ T5019] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1130.120164][ T5033] binder: 5031:5033 ioctl c0306201 200000000380 returned -14 [ 1130.235516][ T5807] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1130.473822][ T5807] usb 4-1: Using ep0 maxpacket: 16 [ 1130.483351][ T5807] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1130.516708][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 1130.559241][ T5807] usb 4-1: Product: syz [ 1130.568222][ T5807] usb 4-1: Manufacturer: syz [ 1130.598870][ T5807] usb 4-1: SerialNumber: syz [ 1130.614143][ T5052] sctp: [Deprecated]: syz.0.11998 (pid 5052) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1130.614143][ T5052] Use struct sctp_sack_info instead [ 1130.639767][ T5807] usb 4-1: config 0 descriptor?? [ 1130.668683][ T5807] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 1130.749356][ T5055] loop2: detected capacity change from 0 to 256 [ 1130.941457][ T5807] usb 4-1: USB disconnect, device number 58 [ 1131.059411][ T5825] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 1131.082076][ T5055] exfat: Deprecated parameter 'utf8' [ 1131.159005][ T5055] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d) [ 1131.268538][ T5825] usb 1-1: config 0 has an invalid interface number: 3 but max is 2 [ 1131.284568][ T5825] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 1131.300572][ T5825] usb 1-1: config 0 has no interface number 1 [ 1131.324204][ T5825] usb 1-1: config 0 has no interface number 2 [ 1131.350444][ T5825] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1131.371303][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.436340][ T5825] usb 1-1: config 0 descriptor?? [ 1131.685378][ T5825] qcserial 1-1:0.3: Qualcomm USB modem converter detected [ 1131.908737][ T56] usb 1-1: USB disconnect, device number 54 [ 1131.931461][ T56] qcserial 1-1:0.3: device disconnected [ 1132.154453][ T5148] loop1: detected capacity change from 0 to 128 [ 1132.362866][ T5154] netlink: 'syz.3.12014': attribute type 1 has an invalid length. [ 1132.380062][ T5154] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.12014'. [ 1133.500363][ T5192] netlink: 'syz.2.12013': attribute type 21 has an invalid length. [ 1133.576661][ T5201] binder: 5198:5201 ioctl c018620c 2000000002c0 returned -1 [ 1134.164799][ T5223] netlink: 'syz.1.12037': attribute type 1 has an invalid length. [ 1134.204464][ T5223] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12037'. [ 1134.440977][ T5225] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1134.740738][ T5250] loop1: detected capacity change from 0 to 8 [ 1134.946174][ T5257] loop2: detected capacity change from 0 to 512 [ 1135.107380][ T5257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1135.136645][ T5257] ext4 filesystem being mounted at /2539/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1135.310750][ T5277] x_tables: unsorted underflow at hook 3 [ 1135.365572][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.056759][ T5309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12061'. [ 1136.071187][ T5309] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12061'. [ 1136.126973][ T5309] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12061'. [ 1136.796533][ T5337] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1137.413862][ T5891] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1137.414434][ T5363] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 1137.718160][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 1137.773336][ T5891] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.793207][ T5891] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1137.817142][ T5891] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1137.836579][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.855651][ T5891] usb 3-1: Product: syz [ 1137.868350][ T5891] usb 3-1: Manufacturer: syz [ 1137.879256][ T5891] usb 3-1: SerialNumber: syz [ 1138.179458][ T5393] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 1138.204910][ T5891] usb 3-1: interface 2 not found [ 1138.439444][ T5402] loop1: detected capacity change from 0 to 4096 [ 1138.459894][ T5891] usb 3-1: USB disconnect, device number 60 [ 1138.578861][ T5402] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1139.150340][ T28] audit: type=1326 audit(2000000034.241:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.0.12101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97b39e0d9 code=0x7ffc0000 [ 1139.236099][ T28] audit: type=1326 audit(2000000034.241:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.0.12101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97b39e0d9 code=0x7ffc0000 [ 1139.260301][ C1] vkms_vblank_simulate: vblank timer overrun [ 1139.318741][ T28] audit: type=1326 audit(2000000034.259:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.0.12101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fb97b39e0d9 code=0x7ffc0000 [ 1139.481192][ T28] audit: type=1326 audit(2000000034.259:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.0.12101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97b39e0d9 code=0x7ffc0000 [ 1139.582954][ T28] audit: type=1326 audit(2000000034.259:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.0.12101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97b39e0d9 code=0x7ffc0000 [ 1139.688490][ T5460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12109'. [ 1140.109857][ T5473] netlink: 'syz.1.12112': attribute type 40 has an invalid length. [ 1140.368683][ T5446] loop3: detected capacity change from 0 to 32768 [ 1140.659300][ T5446] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1140.859152][ T5446] XFS (loop3): Ending clean mount [ 1141.044804][ T5771] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1141.092951][ T5512] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1141.570366][ T5522] loop1: detected capacity change from 0 to 64 [ 1141.892190][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1141.963679][ T5546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12130'. [ 1142.412693][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1142.430517][ T9] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 1142.445159][ T9] usb 3-1: config 0 has no interface number 0 [ 1142.451312][ T9] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1142.770443][ T9] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1142.791682][ T9] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1142.826739][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1142.836105][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.844126][ T9] usb 3-1: Product: syz [ 1142.868399][ T9] usb 3-1: Manufacturer: syz [ 1142.873059][ T9] usb 3-1: SerialNumber: syz [ 1142.912089][ T9] usb 3-1: config 0 descriptor?? [ 1142.918084][ T5527] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1143.215271][ T9] usb 3-1: USB disconnect, device number 61 [ 1143.786003][ T5628] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12155'. [ 1143.804516][ T56] ------------[ cut here ]------------ [ 1143.810943][ T56] WARNING: CPU: 1 PID: 56 at net/netfilter/nft_set_pipapo.c:2389 nft_pipapo_destroy+0x84b/0x8b0 [ 1143.822421][ T56] Modules linked in: [ 1143.826512][ T56] CPU: 1 PID: 56 Comm: kworker/1:2 Not tainted syzkaller #0 [ 1143.834256][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1143.844573][ T56] Workqueue: events nf_tables_trans_destroy_work [ 1143.851257][ T56] RIP: 0010:nft_pipapo_destroy+0x84b/0x8b0 [ 1143.857273][ T56] Code: 00 00 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 b4 ab f8 e9 d3 f9 ff ff e8 7f b4 ab f8 e9 6c fe ff ff e8 75 b4 ab f8 <0f> 0b e9 16 f8 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 [ 1143.877036][ T56] RSP: 0018:ffffc9000131f9d8 EFLAGS: 00010293 [ 1143.883137][ T56] RAX: ffffffff88dbbdab RBX: ffff8880312d98f0 RCX: ffff88801d273c00 [ 1143.891316][ T56] RDX: 0000000000000000 RSI: ffff8880312d9800 RDI: ffff88803048dd28 [ 1143.900062][ T56] RBP: ffffc9000131fbb0 R08: ffff88801d273c00 R09: 000000000000000f [ 1143.908346][ T56] R10: 0000000000000020 R11: 0000000000000000 R12: ffff8880312d98c0 [ 1143.916406][ T56] R13: dffffc0000000000 R14: ffff8880312d9910 R15: dffffc0000000000 [ 1143.924496][ T56] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1143.933534][ T56] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1143.940176][ T56] CR2: 00007f6d6735da08 CR3: 0000000041a62000 CR4: 00000000003506e0 [ 1143.948240][ T56] Call Trace: [ 1143.951537][ T56] [ 1143.954527][ T56] ? lockdep_hardirqs_on+0x98/0x150 [ 1143.959814][ T56] nft_set_destroy+0x489/0xa20 [ 1143.964706][ T56] ? __kmem_cache_free+0xba/0x1f0 [ 1143.969773][ T56] nf_tables_trans_destroy_work+0xb2d/0x11b0 [ 1143.975861][ T56] ? __lock_acquire+0x7d80/0x7d80 [ 1143.980922][ T56] ? nft_object_dump+0x1e0/0x1e0 [ 1143.986022][ T56] ? _raw_spin_unlock_irq+0x23/0x50 [ 1143.991342][ T56] ? process_scheduled_works+0x975/0x1600 [ 1143.997168][ T56] ? process_scheduled_works+0x975/0x1600 [ 1144.002911][ T56] process_scheduled_works+0xa60/0x1600 [ 1144.008551][ T56] ? worker_attach_to_pool+0x370/0x370 [ 1144.014074][ T56] ? assign_work+0x3cc/0x5d0 [ 1144.018956][ T56] worker_thread+0xa5e/0xfe0 [ 1144.023596][ T56] kthread+0x2fa/0x390 [ 1144.027687][ T56] ? pr_cont_work+0x550/0x550 [ 1144.032446][ T56] ? kthread_blkcg+0xd0/0xd0 [ 1144.037051][ T56] ret_from_fork+0x48/0x80 [ 1144.041621][ T56] ? kthread_blkcg+0xd0/0xd0 [ 1144.046241][ T56] ret_from_fork_asm+0x11/0x20 [ 1144.051132][ T56] [ 1144.054171][ T56] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1144.061465][ T56] CPU: 1 PID: 56 Comm: kworker/1:2 Not tainted syzkaller #0 [ 1144.068758][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1144.078829][ T56] Workqueue: events nf_tables_trans_destroy_work [ 1144.085191][ T56] Call Trace: [ 1144.088477][ T56] [ 1144.091415][ T56] dump_stack_lvl+0x18c/0x250 [ 1144.096123][ T56] ? show_regs_print_info+0x20/0x20 [ 1144.101344][ T56] ? load_image+0x420/0x420 [ 1144.105907][ T56] panic+0x2ca/0x720 [ 1144.109830][ T56] ? bpf_jit_dump+0xd0/0xd0 [ 1144.114367][ T56] ? ret_from_fork_asm+0x11/0x20 [ 1144.119336][ T56] __warn+0x2e0/0x470 [ 1144.123340][ T56] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1144.128552][ T56] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1144.133763][ T56] report_bug+0x2be/0x4f0 [ 1144.138125][ T56] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1144.143336][ T56] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1144.148547][ T56] ? nft_pipapo_destroy+0x84d/0x8b0 [ 1144.153758][ T56] handle_bug+0xcf/0x120 [ 1144.158013][ T56] exc_invalid_op+0x1a/0x50 [ 1144.162534][ T56] asm_exc_invalid_op+0x1a/0x20 [ 1144.167397][ T56] RIP: 0010:nft_pipapo_destroy+0x84b/0x8b0 [ 1144.173223][ T56] Code: 00 00 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 b4 ab f8 e9 d3 f9 ff ff e8 7f b4 ab f8 e9 6c fe ff ff e8 75 b4 ab f8 <0f> 0b e9 16 f8 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 [ 1144.192844][ T56] RSP: 0018:ffffc9000131f9d8 EFLAGS: 00010293 [ 1144.198935][ T56] RAX: ffffffff88dbbdab RBX: ffff8880312d98f0 RCX: ffff88801d273c00 [ 1144.206921][ T56] RDX: 0000000000000000 RSI: ffff8880312d9800 RDI: ffff88803048dd28 [ 1144.214909][ T56] RBP: ffffc9000131fbb0 R08: ffff88801d273c00 R09: 000000000000000f [ 1144.222892][ T56] R10: 0000000000000020 R11: 0000000000000000 R12: ffff8880312d98c0 [ 1144.230862][ T56] R13: dffffc0000000000 R14: ffff8880312d9910 R15: dffffc0000000000 [ 1144.238837][ T56] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1144.244039][ T56] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1144.249231][ T56] ? lockdep_hardirqs_on+0x98/0x150 [ 1144.254543][ T56] nft_set_destroy+0x489/0xa20 [ 1144.259313][ T56] ? __kmem_cache_free+0xba/0x1f0 [ 1144.264339][ T56] nf_tables_trans_destroy_work+0xb2d/0x11b0 [ 1144.270315][ T56] ? __lock_acquire+0x7d80/0x7d80 [ 1144.275334][ T56] ? nft_object_dump+0x1e0/0x1e0 [ 1144.280268][ T56] ? _raw_spin_unlock_irq+0x23/0x50 [ 1144.285464][ T56] ? process_scheduled_works+0x975/0x1600 [ 1144.291180][ T56] ? process_scheduled_works+0x975/0x1600 [ 1144.296928][ T56] process_scheduled_works+0xa60/0x1600 [ 1144.302488][ T56] ? worker_attach_to_pool+0x370/0x370 [ 1144.307943][ T56] ? assign_work+0x3cc/0x5d0 [ 1144.312530][ T56] worker_thread+0xa5e/0xfe0 [ 1144.317130][ T56] kthread+0x2fa/0x390 [ 1144.321190][ T56] ? pr_cont_work+0x550/0x550 [ 1144.325859][ T56] ? kthread_blkcg+0xd0/0xd0 [ 1144.330440][ T56] ret_from_fork+0x48/0x80 [ 1144.334851][ T56] ? kthread_blkcg+0xd0/0xd0 [ 1144.339435][ T56] ret_from_fork_asm+0x11/0x20 [ 1144.344208][ T56] [ 1144.347464][ T56] Kernel Offset: disabled [ 1144.351915][ T56] Rebooting in 86400 seconds..