last executing test programs: 2m13.296491625s ago: executing program 2 (id=23898): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000180), &(0x7f00000000c0)=@udp, 0x1}, 0x20) 2m13.223510079s ago: executing program 2 (id=23902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002"], 0xa4}}, 0x0) 2m13.056340229s ago: executing program 2 (id=23907): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x3938700}, 0x0) 2m12.811932763s ago: executing program 2 (id=23916): syz_mount_image$cramfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00e5496ddf42b572a11a00801680", @ANYRESHEX, @ANYRES32=0x0], 0x1, 0x14c, &(0x7f00000001c0)="$eJzszr9LOnEcBvDnvnen30r7QQYWZEJDRyKdJ9XUoJEkdAmFS5NQJwVKkVCORbS1tTpIQpP4L1jWYihE/RMtbkFrfO6OwCb3ntdy3PN+Pm/eG2tdDWFAhmP9uHhyapVK1kF4J2Omdj+azYTIPQD+982d/kMCOBRfBehdAiJ+8sPrriuI/14C0AAkR4D8UcHS4XSHRRYAFLcsMm0eaE2pds/oy+wTrLibzShAcuxnn5nPq1gQ+yacLAbgE0C5EmnUX7Y77XR08X5WxnU6Mjcp9ech68ZITdd8QRlZ6/kOSXv+vtSOvg416m/djrmVMb3duGGsxPWYri/73YOhbPrOgL1f+zwIhpQscCUBt/as9yiJN63qV6Y4ulp1X1+cy2FAKlf2c0G1lguM/4OsQcIg1IFaRERERERERERERERERET0V3wHAAD//1/LWts=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m12.491465591s ago: executing program 2 (id=23923): r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) 2m11.3914437s ago: executing program 2 (id=23949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7fffffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 2m11.121424188s ago: executing program 32 (id=23949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7fffffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 2.557057408s ago: executing program 0 (id=26587): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x15c, 0x10, 0x713, 0x70bd27, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x2f}, {@in=@multicast1, 0x1, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x8727e}, {0x0, 0xffffdffff7fffffb, 0x6, 0x5}, {0x1, 0x9, 0x8}, 0x80000000, 0x3506, 0xa, 0x4, 0x0, 0x21}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x80}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd29, 0x70bd2a, 0x70bd2b, 0x70bd2d, 0x9, [0x100]}}]}, 0x15c}}, 0x0) 2.449192638s ago: executing program 0 (id=26590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x34, 0x3, "64000000746573745f6c6162656c000000000000000000000000000000000000000200"/48}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x104}}, 0x0) 2.349760195s ago: executing program 0 (id=26592): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) 2.328204639s ago: executing program 5 (id=26593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4000}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x0, 0x0, @local}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x8000) 2.21276138s ago: executing program 0 (id=26595): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)='overlay\x00', 0x0, &(0x7f00000006c0)='lowerdir=lower1:\\ower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') 2.175643647s ago: executing program 5 (id=26596): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x200040, 0x4a) fcntl$getflags(r0, 0x3) 2.006223367s ago: executing program 0 (id=26598): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x401}) 1.941203659s ago: executing program 5 (id=26599): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {0x9, 0x0, 0x6}, {}, 0x0, 0x3502, 0xa}, [@offload={0xc, 0x1c, {0x0, 0x6}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) 1.889481439s ago: executing program 0 (id=26601): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000400)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c020201020c240202060203840c0008120daa471fcfda0a0007000500190c240803090034c5e5eb68a3082405010201013f0924030201030301"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x15555599}) 1.652000571s ago: executing program 5 (id=26604): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) 1.516566456s ago: executing program 5 (id=26608): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) 1.310819813s ago: executing program 5 (id=26612): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0xc800) 718.01772ms ago: executing program 4 (id=26629): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') write$cgroup_int(r0, &(0x7f0000000180)=0x4b6e, 0xfffffdcb) 677.042117ms ago: executing program 1 (id=26630): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x88, 0x1, &(0x7f0000000140), 0x4) 581.316425ms ago: executing program 1 (id=26631): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000600)="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", 0xfc) 580.872365ms ago: executing program 4 (id=26632): mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x2900, 0x0, 0x0) 519.011936ms ago: executing program 3 (id=26633): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x9b}) 515.419836ms ago: executing program 1 (id=26634): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001a00)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback}, {@in=@multicast1}}}, [@mark={0xc}]}, 0x104}}, 0x0) 466.681076ms ago: executing program 4 (id=26635): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x84, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 388.513559ms ago: executing program 1 (id=26636): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) 388.015579ms ago: executing program 3 (id=26637): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b45, 0x8000000000001) 337.652019ms ago: executing program 4 (id=26638): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x8, 0x4) 244.898105ms ago: executing program 3 (id=26639): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000140)={{0xa, 0x3, 0x2, 0x0, 'syz1\x00', 0x1}, 0x0, [0x9, 0x3, 0x0, 0x800000000000, 0x2, 0x9, 0x9, 0x9, 0x72, 0x2, 0x1, 0x8, 0xffffffffffff5887, 0x3, 0x4, 0x100000001, 0x7, 0x2c, 0x8, 0x3, 0x7, 0x5a, 0x6, 0x5, 0x8, 0x194a, 0x7ff, 0xffffffffffffffff, 0x7, 0x0, 0x8a2f, 0x765, 0x100, 0x3, 0x6, 0xffff, 0x80000000, 0x7, 0x4, 0x6, 0x6, 0x1, 0x100, 0xa, 0x7, 0x100000001, 0x10, 0x0, 0x6000000, 0x80, 0x5, 0x1, 0x6, 0x5, 0x100, 0x5, 0x6, 0x942, 0x5, 0xb, 0x8, 0xfffffffffffeffff, 0xb68, 0x800, 0x80000001, 0x705b62be, 0x4, 0x7, 0x5, 0x0, 0xff, 0x7, 0x0, 0x80000001, 0x1, 0x4, 0x10001, 0x3, 0x3, 0x3, 0x2, 0x0, 0x3, 0xbb3, 0x2, 0x1, 0x9, 0x7, 0xfffffffffffffff8, 0xc2, 0x3ca, 0x2, 0x0, 0x10001, 0x100000000, 0x2, 0x6, 0x2, 0xa, 0xe, 0xfffffffffffffffb, 0x3, 0x2, 0xffffffffffffffc0, 0x9, 0xb2ff, 0x7, 0x7, 0x6, 0x8000000000000000, 0x7, 0x2, 0x974, 0x88, 0x80, 0x5ab, 0xff, 0x7, 0xce, 0x401, 0x7, 0xffff, 0x3, 0x6, 0x6, 0xffc8, 0x8000000000000001, 0x7]}) 243.977185ms ago: executing program 1 (id=26640): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="10", 0x1}], 0x2, 0x3666, 0x0, 0x0) 195.789065ms ago: executing program 4 (id=26641): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000006640)={&(0x7f00000003c0)={0xa, 0x4e23, 0xf, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000054c0)=[@dstopts_2292={{0x14, 0x29, 0x4, {0x1}}}], 0x14}, 0x24040094) 153.025252ms ago: executing program 3 (id=26642): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x80000000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0xc4, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@loopback, 0xffffffff, 0x3c}, 0x2, @in=@multicast2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, {{@in6=@private2, 0x0, 0x33}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0xff}, 0x2, 0x1, 0x0, 0x85, 0x0, 0x0, 0x3}]}]}, 0x17c}}, 0x20000000) 92.036763ms ago: executing program 1 (id=26643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}}, 0x80) 91.532673ms ago: executing program 4 (id=26644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 79.409915ms ago: executing program 3 (id=26645): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0xff, 0x1, 0x0, 0x6}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5, 0x5, 0x2}}, @RTA_GATEWAY={0x8, 0x5, @empty}]}, 0x30}}, 0x40004) 0s ago: executing program 3 (id=26646): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x320, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) kernel console output (not intermixed with test programs): mode [ 1514.358623][T23592] xt_hl: Unknown Hop Limit match mode: 4 [ 1514.372303][T23147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1514.381309][T21700] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1514.410434][T21700] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1514.437933][T21700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1514.449313][ T4777] EXT4-fs (loop4): unmounting filesystem. [ 1514.456200][T21700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1514.502718][T23147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1514.531066][T21700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1514.560660][T21700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1514.600087][T23147] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.624730][T23147] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.644824][T23147] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.680303][T23147] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.918497][ T2149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.935956][T23612] netlink: 'syz.1.24144': attribute type 1 has an invalid length. [ 1514.957944][ T2149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1515.030432][ T2151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1515.046887][ T2151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1515.080446][ T2151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1515.106916][ T2151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1515.467919][T23638] netlink: 'syz.4.24151': attribute type 1 has an invalid length. [ 1515.511578][T23638] netlink: 216 bytes leftover after parsing attributes in process `syz.4.24151'. [ 1515.531368][T23638] netlink: 16 bytes leftover after parsing attributes in process `syz.4.24151'. [ 1515.659159][T20038] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1515.858995][T20038] usb 4-1: Using ep0 maxpacket: 16 [ 1515.865804][T20038] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1515.902645][T20038] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1515.931864][T20038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.968702][T20038] usb 4-1: Product: syz [ 1515.981925][T20038] usb 4-1: Manufacturer: syz [ 1515.996612][T20038] usb 4-1: SerialNumber: syz [ 1516.017764][T20038] usb 4-1: config 0 descriptor?? [ 1516.046266][T20038] mcba_usb 4-1:0.0: Can't find endpoints [ 1516.109238][T23668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.24163'. [ 1516.284874][T20038] usb 4-1: USB disconnect, device number 78 [ 1516.686570][T23702] sctp: [Deprecated]: syz.4.24175 (pid 23702) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1516.686570][T23702] Use struct sctp_sack_info instead [ 1516.706377][T23703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24176'. [ 1517.116996][T23722] xt_hashlimit: max too large, truncated to 1048576 [ 1517.552957][T23750] xt_SECMARK: invalid mode: 2 [ 1517.622012][T23756] loop5: detected capacity change from 0 to 16 [ 1517.669163][T23756] erofs: (device loop5): mounted with root inode @ nid 36. [ 1517.748752][T23759] xt_TCPMSS: Only works on TCP SYN packets [ 1518.533145][ T4759] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1518.548261][T23796] netlink: 20 bytes leftover after parsing attributes in process `syz.3.24214'. [ 1518.573014][T23796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24214'. [ 1518.720005][ T4759] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 1518.744361][ T4759] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1518.787095][ T4759] usb 6-1: Product: syz [ 1518.818466][ T4759] ftdi_sio 6-1:5.0: FTDI USB Serial Device converter detected [ 1518.846326][ T4759] usb 6-1: Detected FT4233HP [ 1518.954594][ T4709] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1519.000546][ T4759] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1519.016875][ T4759] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1519.050988][ T4759] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1519.079106][ T4759] usb 6-1: USB disconnect, device number 2 [ 1519.097957][ T4759] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1519.127465][ T4759] ftdi_sio 6-1:5.0: device disconnected [ 1519.137753][ T4709] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.161585][ T4709] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1519.185112][ T4709] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1519.209483][ T4709] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1519.229441][ T4709] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1519.260980][ T4709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.672860][ T4759] usb 2-1: USB disconnect, device number 80 [ 1519.887990][ T4709] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1520.069834][ T4709] usb 5-1: Using ep0 maxpacket: 32 [ 1520.077103][ T4709] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1520.101290][ T4709] usb 5-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 1520.103538][T23863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24236'. [ 1520.120082][ T4709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.138693][ T4709] usb 5-1: Product: syz [ 1520.145680][T23863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24236'. [ 1520.153815][ T4709] usb 5-1: Manufacturer: syz [ 1520.171740][ T4709] usb 5-1: SerialNumber: syz [ 1520.395007][ T4709] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input136 [ 1520.422690][ T3625] bcm5974 5-1:1.0: could not read from device [ 1520.438856][ T3625] bcm5974 5-1:1.0: could not read from device [ 1520.448664][ T4709] usb 5-1: USB disconnect, device number 69 [ 1520.470008][ T3625] bcm5974 5-1:1.0: could not read from device [ 1520.588570][T23877] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (32) [ 1521.650477][T20741] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1521.850314][T20741] usb 4-1: Using ep0 maxpacket: 32 [ 1521.857446][T20741] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1521.879120][T20741] usb 4-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 1521.917332][T20741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.951759][T20741] usb 4-1: config 0 descriptor?? [ 1521.967346][T20741] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 1522.015724][T20741] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1522.056394][T20741] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 1522.088021][T20741] usb 4-1: media controller created [ 1522.143538][T20741] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1522.237477][T20741] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1522.253595][T20741] error writing reg: 0xff, val: 0x00 [ 1522.309789][T20741] dvb_usb_mxl111sf: probe of 4-1:0.0 failed with error -22 [ 1522.334630][T23975] loop4: detected capacity change from 0 to 16 [ 1522.387865][T23975] erofs: (device loop4): mounted with root inode @ nid 36. [ 1522.495295][T20741] usb 4-1: USB disconnect, device number 79 [ 1522.542284][T23980] 9p: Unknown access argument 18446744073709551615: -34 [ 1522.614327][T23985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24287'. [ 1523.001384][T24001] nvme_fabrics: missing parameter 'traddr=%s' [ 1523.428696][T24035] loop4: detected capacity change from 0 to 22 [ 1523.470038][T24035] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1523.517907][T24035] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1523.644624][T24040] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1524.718166][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1525.769056][T24158] netlink: 16 bytes leftover after parsing attributes in process `syz.4.24355'. [ 1526.189280][T24180] loop5: detected capacity change from 0 to 512 [ 1526.391561][T24180] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1526.427341][T24180] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1526.488333][T24180] __quota_error: 16 callbacks suppressed [ 1526.488347][T24180] Quota error (device loop5): do_check_range: Getting block 134217728 out of range 0-5 [ 1526.645894][T23147] EXT4-fs (loop5): unmounting filesystem. [ 1526.869462][T24217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24379'. [ 1526.899077][T20741] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 1527.119775][T20741] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1527.147630][T20741] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1527.175622][T20741] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1527.193578][T20741] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 1527.223969][T20741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1527.232005][T20741] usb 4-1: SerialNumber: syz [ 1527.261739][T20741] usb 4-1: config 0 descriptor?? [ 1527.262096][ T4709] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1527.470528][ T4709] usb 6-1: Using ep0 maxpacket: 8 [ 1527.477574][ T4709] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1527.500961][T24253] netlink: 'syz.0.24393': attribute type 21 has an invalid length. [ 1527.509228][ T4709] usb 6-1: config 179 has no interface number 0 [ 1527.515514][ T4709] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1527.527785][T24253] IPv6: NLM_F_CREATE should be specified when creating new route [ 1527.546690][ T4709] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1527.587051][ T4709] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1527.613881][ T4709] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1527.659150][ T4709] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1527.664147][T20741] usb 4-1: USB disconnect, device number 80 [ 1527.695116][ T4709] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1527.708754][ T4709] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1527.728312][ T4709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.769897][ T4709] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input140 [ 1528.030486][ T4709] usb 6-1: USB disconnect, device number 3 [ 1528.036435][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1528.053212][ T4709] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1528.519366][T24296] tmpfs: Bad value for 'mpol' [ 1528.899607][T24320] loop4: detected capacity change from 0 to 64 [ 1528.988480][T24324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.24424'. [ 1529.391751][T24347] ip_tables: iptables: counters copy to user failed while replacing table [ 1529.607085][T24357] SET target dimension over the limit! [ 1529.637421][T24360] overlayfs: missing 'lowerdir' [ 1529.825146][T24371] loop5: detected capacity change from 0 to 256 [ 1530.246352][T24390] netlink: 14 bytes leftover after parsing attributes in process `syz.4.24452'. [ 1530.833409][T24425] netlink: 'syz.5.24468': attribute type 1 has an invalid length. [ 1530.912715][T24427] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1531.461938][T20741] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1531.559950][T24471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24491'. [ 1531.652525][T20741] usb 6-1: Using ep0 maxpacket: 16 [ 1531.659847][T20741] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1531.675591][T20741] usb 6-1: config 0 has no interface number 0 [ 1531.700092][T20741] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1531.730237][T20741] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1531.755795][T20741] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1531.784479][T20741] usb 6-1: Product: syz [ 1531.788970][T20741] usb 6-1: SerialNumber: syz [ 1531.815664][T20741] usb 6-1: config 0 descriptor?? [ 1531.833486][T20741] cm109 6-1:0.8: invalid payload size 208, expected 4 [ 1531.841372][T20741] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input141 [ 1531.989582][T24488] netlink: 'syz.1.24497': attribute type 5 has an invalid length. [ 1532.033209][T24488] netlink: 176 bytes leftover after parsing attributes in process `syz.1.24497'. [ 1532.155117][T24467] loop3: detected capacity change from 0 to 32768 [ 1532.214716][T22646] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1532.235262][ C0] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1532.241956][ T4709] usb 6-1: USB disconnect, device number 4 [ 1532.242232][ C0] cm109 6-1:0.8: cm109_urb_irq_callback: usb_submit_urb (urb_ctl) failed -19 [ 1532.278975][ T4709] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1532.299655][T24496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24502'. [ 1532.503653][ T26] audit: type=1326 audit(2000000061.581:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24503 comm="syz.4.24506" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a459e159 code=0x7ffc0000 [ 1532.522980][T24506] netlink: 14 bytes leftover after parsing attributes in process `syz.3.24507'. [ 1532.527829][ C1] vkms_vblank_simulate: vblank timer overrun [ 1532.576264][ T26] audit: type=1326 audit(2000000061.613:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24503 comm="syz.4.24506" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f07a459e159 code=0x7ffc0000 [ 1532.660458][ T26] audit: type=1326 audit(2000000061.613:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24503 comm="syz.4.24506" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a459e159 code=0x7ffc0000 [ 1532.696602][ T7826] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1532.816866][T24515] netlink: 'syz.3.24511': attribute type 10 has an invalid length. [ 1532.882600][ T7826] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.902562][T24519] tc_dump_action: action bad kind [ 1532.910620][ T7826] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1532.939203][ T7826] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1532.975539][ T7826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.020324][ T7826] usb 2-1: Found UVC 1.00 device (046d:0825) [ 1533.047816][ T7826] usb 2-1: No streaming interface found for terminal 2. [ 1533.212251][ T4709] usb 2-1: USB disconnect, device number 81 [ 1533.372805][T24540] autofs4:pid:24540:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 1533.412275][T24540] autofs4:pid:24540:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 1533.750338][T24561] device sit0 entered promiscuous mode [ 1533.755969][T24561] netlink: 'syz.3.24533': attribute type 1 has an invalid length. [ 1533.791520][T24561] netlink: 1 bytes leftover after parsing attributes in process `syz.3.24533'. [ 1533.830410][T24567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24535'. [ 1534.455564][T24607] loop3: detected capacity change from 0 to 4096 [ 1534.530042][T22647] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1534.564131][T24606] loop4: detected capacity change from 0 to 4096 [ 1535.014945][T24627] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 1535.421670][T24601] loop5: detected capacity change from 0 to 40427 [ 1535.511365][T24601] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 1535.536654][T24601] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1535.561609][T24601] F2FS-fs (loop5): invalid crc value [ 1535.607294][T24601] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1535.807037][T24601] F2FS-fs (loop5): recover fsync data on readonly fs [ 1535.813957][T24601] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 1535.879661][T24601] F2FS-fs (loop5): Try to recover 1th superblock, ret: -30 [ 1535.910192][T24601] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1535.959445][T24666] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1536.023018][T24601] F2FS-fs (loop5): Try to recover all the superblocks, ret: 0 [ 1536.156445][T24649] loop3: detected capacity change from 0 to 32768 [ 1536.200940][T22646] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1536.277244][T24682] qrtr: Invalid version 0 [ 1536.387568][T24686] libceph: resolve 'c' (ret=-3): failed [ 1536.609243][T24695] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24587'. [ 1536.793332][T24703] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24591'. [ 1536.838343][T24703] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24591'. [ 1536.927105][T24709] device gre2 entered promiscuous mode [ 1536.929729][ T4709] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1537.131096][ T4709] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1537.155130][ T4709] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.175758][ T4709] usb 2-1: config 0 has no interface number 0 [ 1537.202330][ T4709] usb 2-1: config 0 interface 2 has no altsetting 0 [ 1537.222528][ T4709] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1537.268585][ T4709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.289979][ T4709] usb 2-1: Product: syz [ 1537.306431][ T4709] usb 2-1: Manufacturer: syz [ 1537.330706][ T4709] usb 2-1: SerialNumber: syz [ 1537.357023][ T4709] usb 2-1: config 0 descriptor?? [ 1537.753658][T24751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24612'. [ 1537.787056][ T4759] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1537.799618][ T4709] usb 2-1: USB disconnect, device number 82 [ 1537.805835][ T4709] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 1537.908429][ T26] audit: type=1326 audit(2000000067.250:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24761 comm="syz.4.24613" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a459e159 code=0x7ffc0000 [ 1537.962533][ T26] audit: type=1326 audit(2000000067.250:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24761 comm="syz.4.24613" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a459e159 code=0x7ffc0000 [ 1537.989991][ T4759] usb 4-1: Using ep0 maxpacket: 16 [ 1537.997497][ T4759] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1538.032175][ T4759] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1538.052010][ T26] audit: type=1326 audit(2000000067.271:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24761 comm="syz.4.24613" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a459e159 code=0x7ffc0000 [ 1538.086770][ T4759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.095186][ T4759] usb 4-1: Product: syz [ 1538.105025][ T4759] usb 4-1: Manufacturer: syz [ 1538.114685][ T4759] usb 4-1: SerialNumber: syz [ 1538.124563][ T26] audit: type=1326 audit(2000000067.282:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24761 comm="syz.4.24613" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a459e159 code=0x7ffc0000 [ 1538.150918][ T4759] usb 4-1: config 0 descriptor?? [ 1538.175963][ T26] audit: type=1326 audit(2000000067.282:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24761 comm="syz.4.24613" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f07a459e159 code=0x7ffc0000 [ 1538.231108][ T26] audit: type=1326 audit(2000000067.282:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24761 comm="syz.4.24613" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a459e159 code=0x7ffc0000 [ 1538.280567][ T26] audit: type=1326 audit(2000000067.282:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24761 comm="syz.4.24613" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a459e159 code=0x7ffc0000 [ 1538.317814][ T26] audit: type=1326 audit(2000000067.292:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24761 comm="syz.4.24613" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f07a459e159 code=0x7ffc0000 [ 1538.351283][ T26] audit: type=1326 audit(2000000067.292:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24761 comm="syz.4.24613" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f07a459e159 code=0x7ffc0000 [ 1538.352118][ T4759] usb 4-1: USB disconnect, device number 81 [ 1538.766105][T24801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24628'. [ 1538.944097][ T7828] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1539.131799][ T7828] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1539.142179][ T7828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.161494][ T7828] usb 5-1: config 0 descriptor?? [ 1539.502510][T24842] netlink: 'syz.5.24647': attribute type 21 has an invalid length. [ 1539.524168][T24842] IPv6: NLM_F_CREATE should be specified when creating new route [ 1539.549293][T24842] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1539.556587][T24842] IPv6: NLM_F_CREATE should be set when creating new route [ 1539.563903][T24842] IPv6: NLM_F_CREATE should be set when creating new route [ 1539.571165][T24842] IPv6: NLM_F_CREATE should be set when creating new route [ 1539.580816][ T7828] [drm:udl_init] *ERROR* Selecting channel failed [ 1539.594166][ T7828] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 1539.602218][ T7828] [drm] Initialized udl on minor 2 [ 1539.609237][ T7828] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1539.617684][ T7828] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1539.644097][ T7828] usb 5-1: USB disconnect, device number 70 [ 1539.670415][ T4709] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1539.687967][ T4709] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1539.706071][ T4709] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1539.769924][T24851] netlink: 196 bytes leftover after parsing attributes in process `syz.5.24650'. [ 1539.787286][T24851] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1540.041980][T24868] netlink: 'syz.3.24656': attribute type 16 has an invalid length. [ 1540.060190][T24868] netlink: 156 bytes leftover after parsing attributes in process `syz.3.24656'. [ 1540.248631][T24880] netlink: 392 bytes leftover after parsing attributes in process `syz.4.24660'. [ 1540.593018][T24897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.24668'. [ 1540.632147][T24897] netlink: 4260 bytes leftover after parsing attributes in process `syz.5.24668'. [ 1540.795868][T24910] loop3: detected capacity change from 0 to 512 [ 1540.859053][T24910] EXT4-fs: Ignoring removed orlov option [ 1540.871016][T24910] /dev/loop3: Can't open blockdev [ 1541.066418][T24925] No such timeout policy "syz1" [ 1541.516748][ T26] audit: type=1326 audit(2000000071.040:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24944 comm="syz.4.24688" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a459e159 code=0x7ffc0000 [ 1541.660005][T24955] kAFS: unable to lookup cell '(,c¾Ì' [ 1542.205196][T24989] Invalid option length (63641) for dns_resolver key [ 1542.518638][T25007] device bridge_slave_1 left promiscuous mode [ 1542.537133][T25007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.568314][T25007] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1543.068263][T25040] Unsupported ieee802154 address type: 0 [ 1543.435470][T25063] UBIFS error (pid: 25063): cannot open "ubi0/file0", error -22 [ 1543.666617][T25076] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24744'. [ 1543.866337][T25090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24751'. [ 1544.286550][T25118] device bridge10 entered promiscuous mode [ 1544.563734][T25136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24769'. [ 1544.855428][T25149] /dev/loop0: Can't open blockdev [ 1544.979182][ T7828] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 1545.114894][T25120] 9pnet_fd: p9_fd_create_tcp (25120): problem connecting socket to 127.0.0.1 [ 1545.181961][ T7828] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1545.187342][T25162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24780'. [ 1545.199990][ T7828] usb 5-1: not running at top speed; connect to a high speed hub [ 1545.218045][T25162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24780'. [ 1545.220590][ T7828] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.260697][T25162] netlink: 'syz.1.24780': attribute type 6 has an invalid length. [ 1545.268900][ T7828] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1545.305245][ T7828] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1545.346779][ T7828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.377205][ T7828] usb 5-1: Product: syz [ 1545.377226][ T7828] usb 5-1: Manufacturer: syz [ 1545.377241][ T7828] usb 5-1: SerialNumber: syz [ 1545.590994][ T7828] usb 5-1: unit 3 not found! [ 1545.611211][ T7828] usb 5-1: 5:0: failed to get current value for ch 0 (-71) [ 1545.637938][T25182] device sit0 entered promiscuous mode [ 1545.643573][T25182] netlink: 'syz.0.24787': attribute type 1 has an invalid length. [ 1545.690314][ T7828] usb 5-1: USB disconnect, device number 71 [ 1545.731113][T25182] netlink: 1 bytes leftover after parsing attributes in process `syz.0.24787'. [ 1545.756894][T25188] netlink: 'syz.1.24789': attribute type 1 has an invalid length. [ 1545.783663][T25188] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.24789'. [ 1546.310059][T25213] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 1546.874835][T25238] xt_CT: No such helper "netbios-ns" [ 1547.149507][T25265] nvme_fabrics: unknown parameter or missing value 'nqn=' in ctrl creation request [ 1547.773225][T25259] loop3: detected capacity change from 0 to 32768 [ 1547.914583][T25259] XFS (loop3): Mounting V5 Filesystem [ 1547.972169][T25259] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 1548.001814][T25259] XFS (loop3): Tail block (0x29) overwrite detected. Updated to 0x30 [ 1548.047711][T25259] XFS (loop3): Ending clean mount [ 1548.118135][T25259] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2d4/0x1120, inode 0x1803 dinode [ 1548.191288][T25259] XFS (loop3): Unmount and run xfs_repair [ 1548.217230][T25259] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1548.255330][T25259] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 1548.284774][T25259] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1548.341124][T25259] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 1548.382975][T25322] xt_CT: No such helper "snmp_trap" [ 1548.390044][T25259] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 1548.417936][T25259] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1548.453201][T25259] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 1548.494183][T25259] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 1548.526832][T25259] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 1548.683443][ T4779] XFS (loop3): Unmounting Filesystem [ 1548.817232][T25295] loop4: detected capacity change from 0 to 40427 [ 1548.895122][T25295] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1548.940533][T25295] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1549.032516][T25295] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1549.265637][T25295] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1549.273146][T25295] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1549.673428][T25384] netlink: 88 bytes leftover after parsing attributes in process `syz.5.24862'. [ 1550.221410][T25410] netlink: 56 bytes leftover after parsing attributes in process `syz.0.24872'. [ 1551.120437][T25462] kAFS: No cell specified [ 1551.373019][T25478] loop3: detected capacity change from 0 to 64 [ 1551.434800][T25483] MTD: Couldn't look up 'mtd0/file0': -2 [ 1552.087551][T25516] netlink: 88 bytes leftover after parsing attributes in process `syz.3.24915'. [ 1552.561249][ T4759] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1552.592077][T25545] loop5: detected capacity change from 0 to 4096 [ 1552.649386][T25547] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1552.788161][ T4759] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1552.818418][ T4759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.826459][ T4759] usb 4-1: Product: syz [ 1552.850851][ T4759] usb 4-1: Manufacturer: syz [ 1552.865450][ T4759] usb 4-1: SerialNumber: syz [ 1552.918735][ T4759] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1553.353522][T20038] usb 4-1: USB disconnect, device number 82 [ 1553.389809][T25578] xt_l2tp: invalid flags combination: 8 [ 1553.547383][T25588] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 1553.879583][T25601] Timeout policy `syz0' can only be used by L3 protocol number 24580 [ 1553.980439][ T4759] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1553.987472][ T4759] ath9k_htc: Failed to initialize the device [ 1554.017752][T20038] usb 4-1: ath9k_htc: USB layer deinitialized [ 1554.092977][T25612] comedi comedi2: bad chanlist[0]=0x00000006 chan=6 range length=1 [ 1554.357841][T25624] loop4: detected capacity change from 0 to 512 [ 1554.391222][T25624] EXT4-fs: Ignoring removed nobh option [ 1554.419656][T25624] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1554.449467][T25624] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1554.495198][T25624] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1554.548915][T25624] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1554.605836][T25624] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 1554.674273][T25624] EXT4-fs (loop4): failed to initialize system zone (-117) [ 1554.730582][T25624] EXT4-fs (loop4): mount failed [ 1555.100434][T25651] netlink: 'syz.3.24978': attribute type 32 has an invalid length. [ 1555.313966][T25638] loop5: detected capacity change from 0 to 32768 [ 1555.445261][T25638] XFS (loop5): Mounting V5 Filesystem [ 1555.574920][T25638] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 1555.664439][T25638] XFS (loop5): Tail block (0x29) overwrite detected. Updated to 0x30 [ 1555.709191][T25638] XFS (loop5): Ending clean mount [ 1555.781438][T25638] XFS (loop5): Metadata corruption detected at xfs_dinode_verify+0x2d4/0x1120, inode 0x1803 dinode [ 1555.828568][T25638] XFS (loop5): Unmount and run xfs_repair [ 1555.841307][T25638] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1555.876528][T25638] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 1555.921377][T25638] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1555.944572][T25638] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 1555.977231][T25638] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 1556.009208][T25638] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1556.028308][T25638] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 1556.047825][T25638] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 1556.056728][T25638] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 1556.147609][T23147] XFS (loop5): Unmounting Filesystem [ 1556.237009][T25694] netlink: 36 bytes leftover after parsing attributes in process `syz.4.24994'. [ 1556.323208][T20038] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1556.543018][T20038] usb 4-1: Using ep0 maxpacket: 32 [ 1556.550591][T20038] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1556.559247][T25702] CIFS: Attempting to mount \\::1\share [ 1556.579956][T20038] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1556.581763][T25702] CIFS: VFS: No username specified [ 1556.611960][T20038] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1556.639711][T20038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.667110][T20038] usb 4-1: Product: syz [ 1556.671342][T20038] usb 4-1: Manufacturer: syz [ 1556.695400][T20038] usb 4-1: SerialNumber: syz [ 1556.916759][T20038] usb 4-1: Invalid number of CPorts: 0 [ 1556.922318][T20038] es2_ap_driver: probe of 4-1:7.0 failed with error -22 [ 1557.130893][T20038] usb 4-1: USB disconnect, device number 83 [ 1557.241219][T25728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25011'. [ 1557.564324][T25750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25022'. [ 1557.753821][T25758] netdevsim netdevsim1: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 1557.927014][T25768] netlink: 'syz.3.25032': attribute type 1 has an invalid length. [ 1557.952808][T25768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25032'. [ 1558.254149][T25752] loop4: detected capacity change from 0 to 32768 [ 1558.769462][T25804] netlink: 292 bytes leftover after parsing attributes in process `syz.4.25048'. [ 1559.469733][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1559.476084][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1559.867538][T25856] netlink: 28 bytes leftover after parsing attributes in process `syz.5.25072'. [ 1561.307487][T25933] netlink: 180 bytes leftover after parsing attributes in process `syz.0.25107'. [ 1561.331571][T25935] IPVS: set_ctl: invalid protocol: 41 172.30.0.5:20002 [ 1561.421103][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1561.421118][ T26] audit: type=1326 audit(2000000091.941:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25937 comm="syz.3.25109" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1561.543020][ T26] audit: type=1326 audit(2000000091.973:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25937 comm="syz.3.25109" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1561.653742][ T26] audit: type=1326 audit(2000000091.973:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25937 comm="syz.3.25109" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1561.745259][ T26] audit: type=1326 audit(2000000091.973:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25937 comm="syz.3.25109" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1561.839810][ T26] audit: type=1326 audit(2000000091.983:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25937 comm="syz.3.25109" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1561.942925][ T26] audit: type=1326 audit(2000000091.983:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25937 comm="syz.3.25109" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1562.049146][ T26] audit: type=1326 audit(2000000091.983:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25937 comm="syz.3.25109" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1562.163724][ T26] audit: type=1326 audit(2000000091.983:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25937 comm="syz.3.25109" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1562.191824][T25978] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1562.244057][ T26] audit: type=1326 audit(2000000091.983:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25937 comm="syz.3.25109" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1562.518841][T25998] netlink: 'syz.3.25135': attribute type 10 has an invalid length. [ 1562.642117][T26003] loop5: detected capacity change from 0 to 2048 [ 1562.666896][T26010] kAFS: unable to lookup cell '/,' [ 1562.679211][T25998] bridge0: port 1(team0) entered disabled state [ 1562.711722][T25998] device vlan0 left promiscuous mode [ 1562.728755][T25998] team0 (unregistering): Port device vlan0 removed [ 1562.732157][T26003] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1563.185836][T26025] netlink: 'syz.3.25146': attribute type 1 has an invalid length. [ 1563.198808][ T26] audit: type=1326 audit(2000000093.800:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26029 comm="syz.0.25145" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238a99e159 code=0x7ffc0000 [ 1563.231806][T26025] netlink: 'syz.3.25146': attribute type 1 has an invalid length. [ 1563.257021][T26025] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.25146'. [ 1563.273822][T26033] netlink: 'syz.1.25149': attribute type 3 has an invalid length. [ 1563.306422][T26033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25149'. [ 1563.316558][T26033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25149'. [ 1564.496895][T26109] netlink: 'syz.5.25180': attribute type 1 has an invalid length. [ 1564.708715][T26118] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1565.222842][T26135] netlink: 'syz.5.25190': attribute type 21 has an invalid length. [ 1565.256421][T26135] netlink: 132 bytes leftover after parsing attributes in process `syz.5.25190'. [ 1565.408579][T26113] loop4: detected capacity change from 0 to 32768 [ 1565.441920][T26113] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.25182 (26113) [ 1565.524906][T26113] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1565.577884][T26113] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1565.612172][T26113] BTRFS info (device loop4): force clearing of disk cache [ 1565.629998][T26113] BTRFS info (device loop4): force zlib compression, level 3 [ 1565.639347][T26113] BTRFS info (device loop4): disabling free space tree [ 1565.667600][T26113] BTRFS info (device loop4): max_inline at 0 [ 1565.692968][T26113] BTRFS info (device loop4): enabling free space tree [ 1565.723019][T26113] BTRFS info (device loop4): using free space tree [ 1565.950774][T26113] BTRFS info (device loop4): enabling ssd optimizations [ 1566.057738][ T4777] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1566.271110][T26194] netlink: 'syz.5.25207': attribute type 10 has an invalid length. [ 1566.692411][T26194] team0 (unregistering): Port device team_slave_0 removed [ 1566.719836][T26194] team0 (unregistering): Port device team_slave_1 removed [ 1566.774864][T26201] device ip6gre4 entered promiscuous mode [ 1567.064434][T26225] netlink: 'syz.1.25215': attribute type 20 has an invalid length. [ 1567.064461][T26225] IPv6: NLM_F_CREATE should be specified when creating new route [ 1567.194349][T26228] IPVS: length: 127 != 8 [ 1567.503804][T26246] netlink: 'syz.0.25223': attribute type 10 has an invalid length. [ 1567.736514][T26246] device dummy0 left promiscuous mode [ 1567.785034][T26246] team0 (unregistering): Port device dummy0 removed [ 1567.808163][ C1] vkms_vblank_simulate: vblank timer overrun [ 1567.831542][T26264] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25230'. [ 1567.898377][T26264] netlink: 9 bytes leftover after parsing attributes in process `syz.1.25230'. [ 1567.967561][T26264] netlink: 9 bytes leftover after parsing attributes in process `syz.1.25230'. [ 1568.014354][T26264] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1568.403877][T26296] loop4: detected capacity change from 0 to 8 [ 1569.062825][T26326] netlink: 16 bytes leftover after parsing attributes in process `syz.3.25257'. [ 1569.390963][T26345] netlink: 168 bytes leftover after parsing attributes in process `syz.1.25265'. [ 1569.545490][T20042] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1569.754735][T20042] usb 5-1: Using ep0 maxpacket: 32 [ 1569.761588][T20042] usb 5-1: config 0 has an invalid interface number: 188 but max is 1 [ 1569.800077][T20042] usb 5-1: config 0 has an invalid interface number: 122 but max is 1 [ 1569.823131][T20042] usb 5-1: config 0 has no interface number 0 [ 1569.829257][T20042] usb 5-1: config 0 has no interface number 1 [ 1569.859724][T20042] usb 5-1: config 0 interface 188 altsetting 1 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1569.890476][T20042] usb 5-1: config 0 interface 188 has no altsetting 0 [ 1569.916897][T20042] usb 5-1: config 0 interface 122 has no altsetting 0 [ 1569.943183][T20042] usb 5-1: string descriptor 0 read error: -22 [ 1569.955174][T20042] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=bb.1a [ 1570.000452][T20042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.023471][T20042] usb 5-1: config 0 descriptor?? [ 1570.077683][T26389] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1570.225314][T11541] usb 5-1: USB disconnect, device number 72 [ 1570.278920][ T4760] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1570.461574][ T4760] usb 6-1: Using ep0 maxpacket: 16 [ 1570.469232][ T4760] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1570.494537][T26410] CIFS: VFS: Malformed UNC in devname [ 1570.497602][ T4760] usb 6-1: config 0 has no interface number 0 [ 1570.519960][ T4760] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1570.560737][ T4760] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1570.586593][ T4760] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1570.616532][ T4760] usb 6-1: Product: syz [ 1570.620747][ T4760] usb 6-1: SerialNumber: syz [ 1570.643661][ T4760] usb 6-1: config 0 descriptor?? [ 1570.663021][ T4760] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input144 [ 1570.845834][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1570.846041][ T7828] usb 6-1: USB disconnect, device number 5 [ 1570.852815][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1570.924547][ T7828] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1571.347672][T26458] netlink: 'syz.4.25319': attribute type 3 has an invalid length. [ 1571.400772][T26458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25319'. [ 1571.431404][T26458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25319'. [ 1571.729557][T26480] netlink: 'syz.0.25330': attribute type 1 has an invalid length. [ 1571.764602][ T4760] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1571.956679][ T4760] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.980379][ T4760] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1572.006140][T26496] device sit0 left promiscuous mode [ 1572.011810][ T4760] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 32768, setting to 1024 [ 1572.033655][T26496] device syz_tun left promiscuous mode [ 1572.042832][ T4760] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1572.062191][ T4760] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1572.063375][T26500] blktrace: Concurrent blktraces are not allowed on nbd1 [ 1572.072194][ T4760] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.089891][ T4760] usb 6-1: config 0 descriptor?? [ 1572.096127][T26496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1572.130937][T26502] netlink: 'syz.0.25341': attribute type 1 has an invalid length. [ 1572.209427][T26504] netlink: 'syz.3.25342': attribute type 16 has an invalid length. [ 1572.224561][T26504] netlink: 'syz.3.25342': attribute type 17 has an invalid length. [ 1572.238093][T26504] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1572.249948][T26504] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1572.261655][T26504] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1572.273416][T11541] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1572.287306][T26504] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1572.295933][T26504] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1572.304213][T26504] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1572.312937][T26504] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1572.322106][T26504] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready [ 1572.324128][ T4709] usb 6-1: USB disconnect, device number 6 [ 1572.335866][T26504] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 1572.346692][T26504] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready [ 1572.361189][T26504] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 1572.370696][T26504] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready [ 1572.380835][T26504] bridge0: port 2(ip6gretap0) entered blocking state [ 1572.387725][T26504] bridge0: port 2(ip6gretap0) entered forwarding state [ 1572.399867][T26504] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1572.409183][T26504] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1572.418896][T26504] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1572.427567][T26504] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready [ 1572.440362][T26504] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 1572.448402][T26504] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 1572.458590][T26506] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1572.476456][T26508] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 1572.481995][ T2154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1572.486137][T26508] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 1572.512855][T11541] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1572.529845][T11541] usb 5-1: config 13 has an invalid interface number: 50 but max is 3 [ 1572.554837][T11541] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.576447][T11541] usb 5-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 1572.595602][T11541] usb 5-1: config 13 has no interface number 0 [ 1572.611936][T11541] usb 5-1: config 13 interface 50 altsetting 4 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1572.631963][T11541] usb 5-1: config 13 interface 50 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1572.660953][T11541] usb 5-1: config 13 interface 50 has no altsetting 0 [ 1572.678620][T11541] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 1572.698493][T11541] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.716232][T11541] usb 5-1: Product: syz [ 1572.725020][T11541] usb 5-1: Manufacturer: syz [ 1572.735723][T11541] usb 5-1: SerialNumber: syz [ 1572.971804][T11541] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1572.990709][ T2149] usb 5-1: Failed to submit usb control message: -71 [ 1573.007714][ T2149] usb 5-1: unable to send the bmi data to the device: -71 [ 1573.017533][T11541] usb 5-1: USB disconnect, device number 73 [ 1573.023844][ T2149] usb 5-1: unable to get target info from device [ 1573.080244][ T2149] usb 5-1: could not get target info (-71) [ 1573.086460][ T2149] usb 5-1: could not probe fw (-71) [ 1573.203758][T26532] loop3: detected capacity change from 0 to 4096 [ 1573.210174][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 1573.210186][ T26] audit: type=1400 audit(2000000104.308:828): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=26536 comm="syz.5.25356" [ 1573.361721][ T26] audit: type=1326 audit(2000000104.476:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26546 comm="syz.5.25362" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44acb9e159 code=0x7ffc0000 [ 1573.385925][ C1] vkms_vblank_simulate: vblank timer overrun [ 1573.412248][T26549] netlink: 'syz.3.25363': attribute type 7 has an invalid length. [ 1573.460264][ T26] audit: type=1326 audit(2000000104.476:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26546 comm="syz.5.25362" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f44acb9e159 code=0x7ffc0000 [ 1573.532449][ T26] audit: type=1326 audit(2000000104.476:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26546 comm="syz.5.25362" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44acb9e159 code=0x7ffc0000 [ 1573.556665][ C1] vkms_vblank_simulate: vblank timer overrun [ 1573.612666][ T26] audit: type=1326 audit(2000000104.476:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26546 comm="syz.5.25362" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44acb9e159 code=0x7ffc0000 [ 1573.636867][ C1] vkms_vblank_simulate: vblank timer overrun [ 1573.944669][T26576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.25376'. [ 1573.984162][ T4709] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1574.170869][ T4709] usb 2-1: Using ep0 maxpacket: 32 [ 1574.178074][ T4709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1574.210050][ T4709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1574.227376][ T4709] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1574.237816][ T4709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.243976][T26592] netlink: 'syz.3.25384': attribute type 2 has an invalid length. [ 1574.257984][ T4709] usb 2-1: config 0 descriptor?? [ 1574.270273][T26592] netlink: 'syz.3.25384': attribute type 8 has an invalid length. [ 1574.278144][ T4709] hub 2-1:0.0: USB hub found [ 1574.288760][T26592] netlink: 132 bytes leftover after parsing attributes in process `syz.3.25384'. [ 1574.421700][T26600] netlink: 104 bytes leftover after parsing attributes in process `syz.3.25388'. [ 1574.499005][ T4709] hub 2-1:0.0: 26 ports detected [ 1574.506615][ T4709] hub 2-1:0.0: insufficient power available to use all downstream ports [ 1574.507506][T26603] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1574.589818][T26603] team0: Port device macvlan1 removed [ 1574.630618][T26610] netlink: 12 bytes leftover after parsing attributes in process `syz.5.25393'. [ 1574.661339][ T4760] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1574.695962][ T4709] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1574.712426][ T4709] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1574.743470][ T4709] usbhid 2-1:0.0: can't add hid device: -71 [ 1574.755811][ T4709] usbhid: probe of 2-1:0.0 failed with error -71 [ 1574.804349][ T4709] usb 2-1: USB disconnect, device number 83 [ 1574.866053][T26621] loop4: detected capacity change from 0 to 256 [ 1574.938078][T26621] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1575.059156][ T4760] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1575.242041][T26635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1575.336031][T26641] loop5: detected capacity change from 0 to 256 [ 1575.371679][T26641] exfat: Deprecated parameter 'utf8' [ 1575.395399][T26641] exfat: Deprecated parameter 'namecase' [ 1575.423725][T26641] exfat: Deprecated parameter 'namecase' [ 1575.429432][T26641] exfat: Deprecated parameter 'utf8' [ 1575.486925][T26641] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1575.622033][T26644] loop3: detected capacity change from 0 to 8192 [ 1576.036272][T26631] loop4: detected capacity change from 0 to 32768 [ 1576.040510][T26665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25420'. [ 1576.146950][T26673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25422'. [ 1576.153064][T26631] XFS (loop4): Mounting V5 Filesystem [ 1576.156359][T26673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25422'. [ 1576.207878][T26631] XFS (loop4): Ending clean mount [ 1576.232056][ T7826] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1576.351638][ T4777] XFS (loop4): Unmounting Filesystem [ 1576.376263][ T4760] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 1576.418571][ T7826] usb 6-1: Using ep0 maxpacket: 32 [ 1576.430365][ T7826] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1576.460232][ T7826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.490052][ T7826] usb 6-1: Product: syz [ 1576.494268][ T7826] usb 6-1: Manufacturer: syz [ 1576.518682][ T7826] usb 6-1: SerialNumber: syz [ 1576.533762][ T7826] usb 6-1: config 0 descriptor?? [ 1576.604862][ T4760] usb 2-1: not running at top speed; connect to a high speed hub [ 1576.626309][ T4760] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 1576.641640][ T4760] usb 2-1: config 95 has no interface number 0 [ 1576.669281][ T4760] usb 2-1: config 95 interface 1 has no altsetting 0 [ 1576.691162][ T4760] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 1576.709005][ T4760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.725805][ T4760] usb 2-1: Product: syz [ 1576.746969][ T4760] usb 2-1: Manufacturer: syz [ 1576.751633][ T4760] usb 2-1: SerialNumber: syz [ 1576.758201][ T7826] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 007 [ 1576.893169][T26697] loop3: detected capacity change from 0 to 256 [ 1576.950616][ T7828] usb 6-1: USB disconnect, device number 7 [ 1577.074729][ T4760] usb 2-1: USB disconnect, device number 84 [ 1577.274125][T26711] netlink: 44 bytes leftover after parsing attributes in process `syz.3.25440'. [ 1577.288269][T26711] netlink: 43 bytes leftover after parsing attributes in process `syz.3.25440'. [ 1577.300070][T26711] netlink: 'syz.3.25440': attribute type 6 has an invalid length. [ 1577.304029][T26713] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptfs_fnekyptfs_cipher=aes] [ 1577.307902][T26711] netlink: 'syz.3.25440': attribute type 5 has an invalid length. [ 1577.324598][T26713] ecryptfs_parse_options: eCryptfs: unrecognized option [ecqMã¦ÀìIÑâ¼D¨Ïryptfs_] [ 1577.334448][T26711] netlink: 43 bytes leftover after parsing attributes in process `syz.3.25440'. [ 1577.338583][T26713] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 1577.352230][T26713] Error parsing options; rc = [-22] [ 1577.387265][T22647] udevd[22647]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1577.934564][T26749] netlink: 'syz.4.25456': attribute type 11 has an invalid length. [ 1578.178562][T26762] bond0: (slave wlan1): Releasing backup interface [ 1578.454050][T26781] tmpfs: Bad value for 'nr_blocks' [ 1578.726010][T26793] __nla_validate_parse: 1 callbacks suppressed [ 1578.726027][T26793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.25478'. [ 1578.782471][T26793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.25478'. [ 1578.945496][T26799] loop5: detected capacity change from 0 to 8192 [ 1579.033379][T26799] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1579.061709][T26799] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 1579.090246][T26799] REISERFS (device loop5): using ordered data mode [ 1579.109422][T26799] reiserfs: using flush barriers [ 1579.138119][T26799] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1579.185467][T26799] REISERFS (device loop5): checking transaction log (loop5) [ 1579.414486][T26799] REISERFS (device loop5): Using tea hash to sort names [ 1579.421765][T26799] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 1579.454387][T26826] vivid-002: disconnect [ 1579.462166][T26823] vivid-002: reconnect [ 1579.516844][T26799] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1579.870063][ T26] audit: type=1326 audit(2000000111.300:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26843 comm="syz.3.25507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1579.954174][ T26] audit: type=1326 audit(2000000111.300:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26843 comm="syz.3.25507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1580.019186][ T26] audit: type=1326 audit(2000000111.300:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26843 comm="syz.3.25507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1580.126485][ T26] audit: type=1326 audit(2000000111.300:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26843 comm="syz.3.25507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1580.203778][ T26] audit: type=1326 audit(2000000111.300:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26843 comm="syz.3.25507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1580.271099][ T26] audit: type=1326 audit(2000000111.300:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26843 comm="syz.3.25507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1580.330033][T26870] netlink: 'syz.0.25517': attribute type 11 has an invalid length. [ 1580.343729][ T26] audit: type=1326 audit(2000000111.300:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26843 comm="syz.3.25507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1580.368852][ T26] audit: type=1326 audit(2000000111.300:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26843 comm="syz.3.25507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1580.750795][ T26] audit: type=1326 audit(2000000112.234:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26895 comm="syz.3.25530" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1580.805039][T11541] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1580.814379][ T26] audit: type=1326 audit(2000000112.234:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26895 comm="syz.3.25530" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1580.921303][T26904] netlink: 56 bytes leftover after parsing attributes in process `syz.3.25533'. [ 1580.945419][T26906] device wlan0 entered promiscuous mode [ 1580.956344][T26906] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1581.004580][T11541] usb 2-1: Using ep0 maxpacket: 16 [ 1581.011626][T11541] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1581.030147][T11541] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1581.050608][T11541] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1581.069998][T11541] usb 2-1: config 1 has no interface number 1 [ 1581.089935][T11541] usb 2-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1581.113781][T11541] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1581.135449][T11541] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1581.164828][T11541] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1581.180785][T11541] usb 2-1: Product: syz [ 1581.190557][T11541] usb 2-1: Manufacturer: syz [ 1581.200143][T11541] usb 2-1: SerialNumber: syz [ 1581.425042][T11541] aqc111: probe of 2-1:1.105 failed with error -22 [ 1581.531354][T26933] netlink: 'syz.5.25545': attribute type 1 has an invalid length. [ 1581.562074][T26933] netlink: 'syz.5.25545': attribute type 2 has an invalid length. [ 1581.573172][T26935] netlink: 60 bytes leftover after parsing attributes in process `syz.3.25548'. [ 1581.653676][T11541] usb 2-1: USB disconnect, device number 85 [ 1582.092573][T26965] loop4: detected capacity change from 0 to 16 [ 1582.099598][T26965] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1582.658039][T27000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25580'. [ 1582.675132][T27000] netlink: 'syz.1.25580': attribute type 1 has an invalid length. [ 1582.719309][T11541] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1582.909752][T11541] usb 4-1: Using ep0 maxpacket: 16 [ 1582.916720][T11541] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.925765][T27016] netlink: 'syz.5.25588': attribute type 5 has an invalid length. [ 1582.937037][T11541] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1582.943519][T27016] netlink: 'syz.5.25588': attribute type 11 has an invalid length. [ 1582.968539][T11541] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1582.986217][T11541] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1583.003984][T11541] usb 4-1: SerialNumber: syz [ 1583.040396][T11541] usb 4-1: 0:2 : does not exist [ 1583.118984][T26203] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1583.147551][T27026] netlink: 'syz.5.25593': attribute type 2 has an invalid length. [ 1583.155620][T27026] netlink: 132 bytes leftover after parsing attributes in process `syz.5.25593'. [ 1583.331251][T26203] usb 2-1: Using ep0 maxpacket: 16 [ 1583.347963][T26203] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1583.365854][T26203] usb 2-1: config 0 has no interface number 0 [ 1583.377664][T26203] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1583.415691][T26203] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1583.431986][T11541] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1583.446136][T26203] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1583.458148][T26203] usb 2-1: Product: syz [ 1583.475266][T11541] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1583.490538][T26203] usb 2-1: SerialNumber: syz [ 1583.506896][T26203] usb 2-1: config 0 descriptor?? [ 1583.529099][T11541] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1583.548387][T26203] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input145 [ 1583.567929][T11541] usb 4-1: USB disconnect, device number 84 [ 1583.632262][T27047] device wg1 entered promiscuous mode [ 1583.638804][ T2149] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1583.752209][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1583.754915][T27052] netlink: 'syz.5.25606': attribute type 29 has an invalid length. [ 1583.760276][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1583.775052][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1583.782242][T26203] usb 2-1: USB disconnect, device number 86 [ 1583.794614][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1583.801620][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1583.812006][T26203] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1583.853065][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1584.172848][T27070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25615'. [ 1585.008297][T27113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.25635'. [ 1585.084061][T27115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25636'. [ 1585.212392][T27119] netlink: 56 bytes leftover after parsing attributes in process `syz.5.25638'. [ 1585.223538][T27119] netlink: 56 bytes leftover after parsing attributes in process `syz.5.25638'. [ 1585.243644][T11541] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1585.380005][T27121] netlink: 'syz.5.25639': attribute type 1 has an invalid length. [ 1585.449842][T11541] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1585.465796][T11541] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.481786][T11541] usb 4-1: Product: syz [ 1585.496079][T11541] usb 4-1: Manufacturer: syz [ 1585.500804][T11541] usb 4-1: SerialNumber: syz [ 1585.568093][T11541] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1585.658975][T27131] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1585.774824][T27111] random: crng reseeded on system resumption [ 1586.179334][T27157] netlink: 'syz.5.25657': attribute type 32 has an invalid length. [ 1586.471516][T27168] netlink: 36 bytes leftover after parsing attributes in process `syz.4.25663'. [ 1586.504503][T27171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25664'. [ 1586.567562][T26203] usb 4-1: USB disconnect, device number 85 [ 1586.580955][T27169] IPVS: Error connecting to the multicast addr [ 1586.605412][T11541] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1586.613633][T11541] ath9k_htc: Failed to initialize the device [ 1586.652322][T26203] usb 4-1: ath9k_htc: USB layer deinitialized [ 1586.684203][T27173] loop5: detected capacity change from 0 to 8192 [ 1586.754871][T27173] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1586.952205][T27185] tmpfs: Bad value for 'mpol' [ 1587.203145][T27195] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25676'. [ 1587.229355][T27195] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25676'. [ 1587.429169][T27207] sctp: [Deprecated]: syz.1.25681 (pid 27207) Use of int in max_burst socket option. [ 1587.429169][T27207] Use struct sctp_assoc_value instead [ 1587.580346][T27211] netlink: 36 bytes leftover after parsing attributes in process `syz.4.25683'. [ 1588.170740][T27239] device bridge_slave_0 entered promiscuous mode [ 1588.195494][T27239] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1588.282063][T11541] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1588.499692][T11541] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1588.526360][T11541] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1588.536896][T11541] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1588.548372][T11541] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1588.551249][T27260] netlink: 'syz.0.25705': attribute type 29 has an invalid length. [ 1588.563323][T27257] loop4: detected capacity change from 0 to 1764 [ 1588.576668][T27260] netlink: 'syz.0.25705': attribute type 3 has an invalid length. [ 1588.584758][T11541] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1588.584784][T11541] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.730724][ T2154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1588.777394][T26203] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1588.790090][T11541] gud 4-1:1.0: Protocol version 3 is not supported [ 1588.891491][T27271] xt_l2tp: v2 doesn't support IP mode [ 1588.896173][T27273] openvswitch: netlink: Key 17 has unexpected len 48122 expected 4 [ 1588.986026][T27277] loop4: detected capacity change from 0 to 1024 [ 1588.998533][T26203] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1589.024795][T26203] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1589.035003][T26203] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1589.064223][T26203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.096470][T11541] usb 4-1: USB disconnect, device number 86 [ 1589.137148][T26203] idmouse 2-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1589.394184][T27295] netlink: 'syz.0.25722': attribute type 95 has an invalid length. [ 1589.566522][T27303] autofs4:pid:27303:autofs_fill_super: called with bogus options [ 1589.704736][T27311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1590.129931][T11541] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1590.198192][T27338] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1590.243211][T27342] netlink: 'syz.4.25745': attribute type 4 has an invalid length. [ 1590.299344][T27344] netlink: 'syz.0.25746': attribute type 29 has an invalid length. [ 1590.314423][T27344] __nla_validate_parse: 4 callbacks suppressed [ 1590.314440][T27344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25746'. [ 1590.315711][T27346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25747'. [ 1590.346093][T11541] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1590.360670][T11541] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.377046][T11541] usb 6-1: config 0 descriptor?? [ 1590.384370][T26203] usb 2-1: USB disconnect, device number 87 [ 1590.403131][T26203] idmouse 2-1:1.0: disconnected [ 1590.782111][T11541] ath6kl: Failed to submit usb control message: -71 [ 1590.789796][T11541] ath6kl: unable to send the bmi data to the device: -71 [ 1590.807763][T11541] ath6kl: Unable to send get target info: -71 [ 1590.828431][T11541] ath6kl: Failed to init ath6kl core: -71 [ 1590.956359][T11541] ath6kl_usb: probe of 6-1:0.0 failed with error -71 [ 1590.997424][T11541] usb 6-1: USB disconnect, device number 8 [ 1591.175537][T27383] loop3: detected capacity change from 0 to 512 [ 1591.212816][T27383] /dev/loop3: Can't open blockdev [ 1591.456613][T27399] netlink: 'syz.0.25771': attribute type 1 has an invalid length. [ 1591.578839][T27405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25785'. [ 1591.639647][T27409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25776'. [ 1591.746045][T27418] netlink: 'syz.3.25780': attribute type 4 has an invalid length. [ 1592.243194][T27414] loop4: detected capacity change from 0 to 32768 [ 1592.271778][T27414] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.25778 (27414) [ 1592.326324][T27414] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1592.346725][T27414] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1592.373404][T27414] BTRFS info (device loop4): using free space tree [ 1592.698152][T27414] BTRFS info (device loop4): enabling ssd optimizations [ 1592.847607][ T4777] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1593.171084][T27493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25812'. [ 1593.212852][T27493] device veth0_to_bridge left promiscuous mode [ 1593.236580][T27493] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1593.469893][T27493] device ip6gretap0 left promiscuous mode [ 1593.483369][T27493] bridge0: port 2(ip6gretap0) entered disabled state [ 1593.758483][T27510] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25816'. [ 1593.968831][T27524] netlink: 'syz.1.25822': attribute type 11 has an invalid length. [ 1594.027886][T27529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25824'. [ 1594.119595][T27533] IPv6: Can't replace route, no match found [ 1594.217420][ T2165] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1594.630005][T27528] loop3: detected capacity change from 0 to 32768 [ 1594.912051][T27573] netlink: 16 bytes leftover after parsing attributes in process `syz.4.25848'. [ 1595.049529][T27581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.25852'. [ 1595.272226][T27593] netlink: 'syz.1.25858': attribute type 5 has an invalid length. [ 1595.407314][T11541] usb 4-1: new low-speed USB device number 87 using dummy_hcd [ 1595.628156][T11541] usb 4-1: config 0 has an invalid interface number: 60 but max is 0 [ 1595.646126][T11541] usb 4-1: config 0 has no interface number 0 [ 1595.673912][T11541] usb 4-1: config 0 interface 60 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 0 [ 1595.702057][T11541] usb 4-1: config 0 interface 60 altsetting 0 endpoint 0xB has invalid maxpacket 1032, setting to 8 [ 1595.738882][T11541] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01bb, bcdDevice= 0.11 [ 1595.758701][T11541] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.780638][T11541] usb 4-1: config 0 descriptor?? [ 1595.983693][T27631] netlink: 188 bytes leftover after parsing attributes in process `syz.0.25876'. [ 1595.998375][T11541] usb 4-1: string descriptor 0 read error: -71 [ 1596.012824][T11541] ftdi_sio 4-1:0.60: FTDI USB Serial Device converter detected [ 1596.028055][T11541] usb 4-1: Detected SIO [ 1596.047040][T11541] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 9 [ 1596.075967][T11541] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1596.104169][T11541] usb 4-1: USB disconnect, device number 87 [ 1596.130518][T11541] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1596.157163][T11541] ftdi_sio 4-1:0.60: device disconnected [ 1596.364023][T27651] netlink: 5 bytes leftover after parsing attributes in process `syz.4.25886'. [ 1596.389521][T27651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1596.504853][T27655] netlink: 132 bytes leftover after parsing attributes in process `syz.0.25888'. [ 1596.556445][T27655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25888'. [ 1596.586718][T27655] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25888'. [ 1596.608793][T27655] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25888'. [ 1596.627171][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 1596.627184][ T26] audit: type=1326 audit(2000000128.905:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27660 comm="syz.3.25891" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1596.725718][ T26] audit: type=1326 audit(2000000128.947:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27660 comm="syz.3.25891" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1596.855503][ T26] audit: type=1326 audit(2000000128.947:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27660 comm="syz.3.25891" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1596.939763][ T26] audit: type=1326 audit(2000000128.947:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27660 comm="syz.3.25891" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1597.020056][T27677] netlink: 36 bytes leftover after parsing attributes in process `syz.0.25899'. [ 1597.252555][T27685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25904'. [ 1597.859370][ T26] audit: type=1400 audit(2000000130.196:859): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=27708 comm="syz.5.25916" [ 1598.238764][T27727] IPv6: Can't replace route, no match found [ 1598.381015][T27734] x_tables: duplicate entry at hook 1 [ 1598.490670][T27740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25930'. [ 1598.526393][T27740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25930'. [ 1598.748401][T27757] IPv6: Can't replace route, no match found [ 1599.315992][T27794] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1599.704024][ T2146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1599.756186][ T26] audit: type=1326 audit(2000000132.180:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27820 comm="syz.1.25971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918f19e159 code=0x7ffc0000 [ 1599.846405][ T26] audit: type=1326 audit(2000000132.180:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27820 comm="syz.1.25971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918f19e159 code=0x7ffc0000 [ 1599.951326][ T26] audit: type=1326 audit(2000000132.180:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27820 comm="syz.1.25971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918f19e159 code=0x7ffc0000 [ 1599.990564][ T26] audit: type=1326 audit(2000000132.180:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27820 comm="syz.1.25971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918f19e159 code=0x7ffc0000 [ 1600.035931][ T26] audit: type=1326 audit(2000000132.233:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27820 comm="syz.1.25971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f918f19e159 code=0x7ffc0000 [ 1600.160846][T11541] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1600.302386][T27852] Timeout policy `syz1' can only be used by L3 protocol number 33024 [ 1600.322589][T20509] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1600.352939][T11541] usb 5-1: Using ep0 maxpacket: 16 [ 1600.359645][T27856] overlayfs: unrecognized mount option "\" or missing value [ 1600.369678][T11541] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1600.388356][T11541] usb 5-1: config 0 has no interface number 0 [ 1600.408070][T11541] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1600.438969][T11541] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0xC has invalid maxpacket 1025, setting to 1024 [ 1600.477355][T11541] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1600.494435][T11541] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.513135][T11541] usb 5-1: Product: syz [ 1600.515542][T20509] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1600.517329][T11541] usb 5-1: Manufacturer: syz [ 1600.539210][T20509] usb 6-1: not running at top speed; connect to a high speed hub [ 1600.547247][T11541] usb 5-1: SerialNumber: syz [ 1600.561709][T11541] usb 5-1: config 0 descriptor?? [ 1600.567627][T27825] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1600.571585][T20509] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1600.590320][T11541] cypress_m8 5-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1600.613365][T20509] usb 6-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 1600.658549][T20509] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.713397][T20509] usb 6-1: Product: syz [ 1600.717622][T20509] usb 6-1: Manufacturer: syz [ 1600.722231][T20509] usb 6-1: SerialNumber: syz [ 1600.739536][T27836] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1600.791074][T11541] usb 5-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 1600.820858][T11541] usb 5-1: USB disconnect, device number 74 [ 1600.846033][T11541] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 1600.877971][T11541] cypress_m8 5-1:0.35: device disconnected [ 1600.961028][T20509] usb 6-1: MIDIStreaming interface descriptor not found [ 1600.964861][T27855] loop3: detected capacity change from 0 to 32768 [ 1600.995579][T27872] libceph: Failed to parse secret: -22 [ 1601.024954][T20509] usb 6-1: USB disconnect, device number 9 [ 1601.035827][T22647] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1601.263021][T22429] udevd[22429]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1601.586885][T27887] loop4: detected capacity change from 0 to 4096 [ 1601.610558][T27892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.26005'. [ 1601.630091][T27895] netlink: 20 bytes leftover after parsing attributes in process `syz.0.26007'. [ 1601.645935][T27887] __ntfs_error: 4 callbacks suppressed [ 1601.645953][T27887] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 1601.669885][T27898] loop3: detected capacity change from 0 to 256 [ 1601.712613][T27887] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 1601.797038][T27887] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1601.847022][T27887] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1601.910648][T27887] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1601.988603][T27887] ntfs: volume version 3.1. [ 1602.007625][T27887] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1602.051553][T27887] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1602.086099][T27887] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1602.104164][T27887] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1602.123012][T27887] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1602.324062][T20509] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1602.515012][T20509] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1602.545306][T27938] loop4: detected capacity change from 0 to 64 [ 1602.552263][T20509] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1602.600710][T20509] usb 6-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1602.620728][T27942] netlink: 60 bytes leftover after parsing attributes in process `syz.0.26028'. [ 1602.623396][T20509] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1602.668660][T20509] usb 6-1: Product: syz [ 1602.673823][T20509] usb 6-1: Manufacturer: syz [ 1602.735471][T20509] mos7840 6-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1602.899111][T27955] hsr0: mtu greater than device maximum [ 1603.123211][T20509] mos7840: probe of ttyUSB0 failed with error -71 [ 1603.149956][T20509] usb 6-1: USB disconnect, device number 10 [ 1603.187707][T20509] mos7840 6-1:1.0: device disconnected [ 1603.326968][T27975] netlink: 20 bytes leftover after parsing attributes in process `syz.4.26045'. [ 1603.942101][T28012] loop4: detected capacity change from 0 to 512 [ 1603.974974][T28015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26066'. [ 1604.056162][T28012] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1604.099838][T28012] EXT4-fs error (device loop4): ext4_validate_block_bitmap:420: comm syz.4.26065: bg 0: bad block bitmap checksum [ 1604.171660][ T4777] EXT4-fs (loop4): unmounting filesystem. [ 1604.739813][T28063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.26088'. [ 1604.759319][T28063] netlink: 'syz.4.26088': attribute type 1 has an invalid length. [ 1604.889455][T28074] loop3: detected capacity change from 0 to 256 [ 1605.183764][T28087] autofs4:pid:28087:autofs_fill_super: called with bogus options [ 1605.193712][ T2146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1605.320331][T20509] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1605.514448][T20509] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1605.544244][T20509] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1605.573939][T20509] usb 2-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 1605.601262][T28075] loop4: detected capacity change from 0 to 32768 [ 1605.608153][T20509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.623810][T28075] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.26094 (28075) [ 1605.650559][T20509] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1605.663484][T28075] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1605.675126][T28075] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1605.685609][T28075] BTRFS info (device loop4): using free space tree [ 1605.869382][T28125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26113'. [ 1605.894518][T28125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26113'. [ 1605.951585][T28075] BTRFS info (device loop4): enabling ssd optimizations [ 1606.088265][T20509] usb-storage: probe of 2-1:1.0 failed with error -5 [ 1606.111385][ T4777] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1606.122544][T20509] usb 2-1: USB disconnect, device number 88 [ 1606.708900][T28157] netlink: 'syz.1.26124': attribute type 41 has an invalid length. [ 1606.780337][T28156] loop3: detected capacity change from 0 to 4096 [ 1606.821386][T28161] netlink: 52 bytes leftover after parsing attributes in process `syz.1.26127'. [ 1606.840590][T28156] __ntfs_error: 10 callbacks suppressed [ 1606.840611][T28156] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 1606.869093][T28156] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 1606.892634][T28165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.26129'. [ 1606.893129][T28156] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1606.911810][T28165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.26129'. [ 1606.941394][T28156] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1606.962902][T28156] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1607.001515][T28156] ntfs: volume version 3.1. [ 1607.031438][T28168] netlink: 'syz.5.26130': attribute type 1 has an invalid length. [ 1607.040568][T28156] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1607.065751][T28156] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1607.113646][T28156] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1607.154707][T28156] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1607.181673][T28156] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1607.483177][T28185] xt_nfacct: accounting object `syz0' does not exist [ 1607.723417][T28197] syz.3.26146: attempt to access beyond end of device [ 1607.723417][T28197] nbd3: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1607.752500][T28197] F2FS-fs (nbd3): Unable to read 1th superblock [ 1607.772145][T28197] syz.3.26146: attempt to access beyond end of device [ 1607.772145][T28197] nbd3: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1607.809677][T28197] F2FS-fs (nbd3): Unable to read 2th superblock [ 1608.093884][T28195] loop4: detected capacity change from 0 to 32768 [ 1608.181753][T28195] JBD2: Ignoring recovery information on journal [ 1608.348741][T28195] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1608.488497][T28226] ax25_connect(): syz.3.26158 uses autobind, please contact jreuter@yaina.de [ 1608.585404][ T4777] ocfs2: Unmounting device (7,4) on (node local) [ 1608.696258][T28235] netlink: 60 bytes leftover after parsing attributes in process `syz.1.26162'. [ 1609.386134][T28271] netlink: 20 bytes leftover after parsing attributes in process `syz.5.26175'. [ 1609.950207][T28304] loop3: detected capacity change from 0 to 256 [ 1610.003606][T28304] exfat: Deprecated parameter 'namecase' [ 1610.009645][T28304] exfat: Deprecated parameter 'namecase' [ 1610.041905][T28304] exfat: Deprecated parameter 'namecase' [ 1610.047801][T28304] /dev/loop3: Can't open blockdev [ 1610.068026][ T2149] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1610.649630][T28348] netlink: 'syz.3.26206': attribute type 1 has an invalid length. [ 1610.695906][T20044] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1610.818101][T28352] loop4: detected capacity change from 0 to 2048 [ 1610.895116][T28352] loop4: p1 < > p2 p3 < > p4 < p5 > [ 1610.902567][T28352] loop4: partition table partially beyond EOD, truncated [ 1610.917004][T20044] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 1610.934405][T28352] loop4: p1 start 3405774849 is beyond EOD, truncated [ 1610.941451][T20044] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1610.954434][T28352] loop4: p3 start 4225 is beyond EOD, truncated [ 1610.970802][T20044] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.014796][ T3640] loop4: p1 < > p2 p3 < > p4 < p5 > [ 1611.022142][ T3640] loop4: partition table partially beyond EOD, truncated [ 1611.029504][T20044] usb 2-1: Product: syz [ 1611.033790][T20044] usb 2-1: Manufacturer: syz [ 1611.038395][T20044] usb 2-1: SerialNumber: syz [ 1611.053745][ T3640] loop4: p1 start 3405774849 is beyond EOD, truncated [ 1611.095134][T20044] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1611.096451][ T3640] loop4: p3 start 4225 is beyond EOD, truncated [ 1611.166140][T28371] loop5: detected capacity change from 0 to 164 [ 1611.216983][T22646] udevd[22646]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1611.235127][T22647] udevd[22647]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1611.248161][T22644] udevd[22644]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 1611.282038][T28371] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1611.301567][ C0] usb 2-1: ath: unknown panic pattern! [ 1611.367009][T22569] udevd[22569]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 1611.392688][T22644] udevd[22644]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1611.393881][T22647] udevd[22647]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1611.503441][T20509] usb 2-1: USB disconnect, device number 89 [ 1611.561433][T28380] loop4: detected capacity change from 0 to 64 [ 1612.068011][T28406] sock: sock_timestamping_bind_phc: sock not bind to device [ 1612.134254][T20044] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1612.153593][T20044] ath9k_htc: Failed to initialize the device [ 1612.160964][T20509] usb 2-1: ath9k_htc: USB layer deinitialized [ 1612.439767][T28431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.26243'. [ 1612.915111][T28459] netlink: 'syz.1.26257': attribute type 1 has an invalid length. [ 1612.938123][T28459] netlink: 228 bytes leftover after parsing attributes in process `syz.1.26257'. [ 1613.096622][T28472] netlink: 'syz.4.26263': attribute type 3 has an invalid length. [ 1613.106927][T28473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26264'. [ 1613.308064][T28486] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.498917][T28499] netlink: 168 bytes leftover after parsing attributes in process `syz.1.26276'. [ 1613.566068][T28503] netlink: 5427 bytes leftover after parsing attributes in process `syz.3.26278'. [ 1613.605056][T28503] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.26278'. [ 1613.619623][T28503] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.26278'. [ 1613.720263][T28511] netlink: zone id is out of range [ 1613.742109][T28513] xt_cluster: node mask cannot exceed total number of nodes [ 1613.936931][T28526] netlink: 28 bytes leftover after parsing attributes in process `syz.1.26290'. [ 1613.951663][T28527] loop3: detected capacity change from 0 to 1024 [ 1613.976194][T28526] netlink: 28 bytes leftover after parsing attributes in process `syz.1.26290'. [ 1614.439978][T28551] ieee802154 phy0 wpan0: encryption failed: -22 [ 1614.581057][T28561] netlink: 72 bytes leftover after parsing attributes in process `syz.0.26307'. [ 1614.945242][ T2154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1615.278279][T20044] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1615.459115][T20509] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1615.468528][T20044] usb 5-1: Using ep0 maxpacket: 16 [ 1615.475725][T20044] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.509090][T20044] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1615.525647][T20044] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.544523][T20044] usb 5-1: Product: syz [ 1615.548727][T20044] usb 5-1: Manufacturer: syz [ 1615.553333][T20044] usb 5-1: SerialNumber: syz [ 1615.568560][T20036] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 1615.577150][T20044] usb 5-1: config 0 descriptor?? [ 1615.587496][T20044] asix: probe of 5-1:0.0 failed with error -22 [ 1615.651089][T20509] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.664340][T20509] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1615.687596][T20509] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1615.697130][T28620] netlink: 'syz.1.26336': attribute type 21 has an invalid length. [ 1615.713004][T20509] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.762248][T20036] usb 4-1: not running at top speed; connect to a high speed hub [ 1615.784227][T20036] usb 4-1: config index 0 descriptor too short (expected 4257, got 161) [ 1615.803535][T20036] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 1615.812007][T20509] usb 5-1: USB disconnect, device number 75 [ 1615.823392][T20036] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1615.851193][T20036] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.891507][T28628] netlink: 'syz.0.26340': attribute type 2 has an invalid length. [ 1615.939639][T27502] usb 6-1: USB disconnect, device number 11 [ 1616.015161][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1616.015176][ T26] audit: type=1326 audit(2000000149.250:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28633 comm="syz.1.26343" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918f19e159 code=0x7ffc0000 [ 1616.074445][T20036] usb 4-1: string descriptor 0 read error: -71 [ 1616.075851][ T26] audit: type=1326 audit(2000000149.250:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28633 comm="syz.1.26343" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918f19e159 code=0x7ffc0000 [ 1616.098036][T20036] uvcvideo 4-1:1.1: Unknown video format 32595559-0008-0010-8000-00aa00389b71 [ 1616.113905][ T26] audit: type=1326 audit(2000000149.261:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28633 comm="syz.1.26343" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918f19e159 code=0x7ffc0000 [ 1616.113944][ T26] audit: type=1326 audit(2000000149.261:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28633 comm="syz.1.26343" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f918f19e159 code=0x7ffc0000 [ 1616.113971][ T26] audit: type=1326 audit(2000000149.261:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28633 comm="syz.1.26343" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918f19e159 code=0x7ffc0000 [ 1616.113998][ T26] audit: type=1326 audit(2000000149.261:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28633 comm="syz.1.26343" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918f19e159 code=0x7ffc0000 [ 1616.114023][ T26] audit: type=1326 audit(2000000149.261:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28633 comm="syz.1.26343" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918f19e159 code=0x7ffc0000 [ 1616.114048][ T26] audit: type=1326 audit(2000000149.261:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28633 comm="syz.1.26343" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f918f19e159 code=0x7ffc0000 [ 1616.114072][ T26] audit: type=1326 audit(2000000149.261:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28633 comm="syz.1.26343" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f918f19e159 code=0x7ffc0000 [ 1616.292290][T20036] usb 4-1: Found UVC 1.00 device (046d:0825) [ 1616.306901][T20036] uvcvideo 4-1:1.1: No supported video formats found. [ 1616.323882][T20036] uvcvideo 4-1:1.1: Failed to initialize the device (-22). [ 1616.361537][T20036] usb 4-1: USB disconnect, device number 88 [ 1616.380453][T28642] trusted_key: encrypted_key: master key parameter is missing [ 1616.539354][ T26] audit: type=1326 audit(2000000149.806:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28647 comm="syz.5.26351" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44acb9e159 code=0x7ffc0000 [ 1616.884309][T28671] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1616.900392][T28672] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 1616.916421][T28672] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 1616.933386][T28672] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 1616.955756][T28672] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 1616.973057][T28672] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 1616.992975][T28672] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 1617.016762][T28672] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 1617.034848][T28672] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 1617.085851][T28672] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1617.110605][T28672] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1617.149291][T28680] device bridge8 entered promiscuous mode [ 1617.336289][T28690] No source specified [ 1617.677612][T28715] __nla_validate_parse: 1 callbacks suppressed [ 1617.677628][T28715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26383'. [ 1617.994623][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1618.001024][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1618.839318][T28744] loop3: detected capacity change from 0 to 32768 [ 1619.479302][T28791] loop4: detected capacity change from 0 to 4096 [ 1619.545603][T28801] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1619.562921][T28801] overlayfs: missing 'lowerdir' [ 1619.579489][T28791] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1619.872620][T28815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.26427'. [ 1619.938077][T28817] netlink: 'syz.1.26428': attribute type 2 has an invalid length. [ 1619.970876][T28817] netlink: 504 bytes leftover after parsing attributes in process `syz.1.26428'. [ 1620.336120][T20044] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 1620.433907][ T2146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1620.527710][T20044] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1620.548018][T20044] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1620.548492][T28857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.26446'. [ 1620.576743][T20044] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice= 0.40 [ 1620.602033][T20044] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.638861][T20044] usb 4-1: Product: syz [ 1620.643237][T20044] usb 4-1: Manufacturer: syz [ 1620.647850][T20044] usb 4-1: SerialNumber: syz [ 1620.868910][T20044] usb 4-1: 0:1 : does not exist [ 1620.874456][T20044] usb 4-1: unit 1 not found! [ 1620.892252][T20044] usb 4-1: unit 64 not found! [ 1620.920088][T20044] usb 4-1: USB disconnect, device number 89 [ 1620.978213][T28877] sctp: [Deprecated]: syz.4.26458 (pid 28877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1620.978213][T28877] Use struct sctp_sack_info instead [ 1620.994972][T28879] Cannot find del_set index 4 as target [ 1621.031505][T27502] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1621.142368][T22646] udevd[22646]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1621.182434][T28885] ip6t_srh: unknown srh invflags 4000 [ 1621.223458][T27502] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1621.244607][T27502] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1621.272835][T27502] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.303951][T27502] usb 6-1: config 0 descriptor?? [ 1621.516277][T27502] ath6kl: Failed to submit usb control message: -71 [ 1621.525023][T27502] ath6kl: unable to send the bmi data to the device: -71 [ 1621.532496][T27502] ath6kl: Unable to send get target info: -71 [ 1621.540839][T27502] ath6kl: Failed to init ath6kl core: -71 [ 1621.596041][T27502] ath6kl_usb: probe of 6-1:0.0 failed with error -71 [ 1621.622869][T27502] usb 6-1: USB disconnect, device number 12 [ 1622.057018][T20044] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1622.125882][T28932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26486'. [ 1622.254238][T20044] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1622.269556][T20044] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.293193][T20044] usb 4-1: Product: syz [ 1622.297435][T20044] usb 4-1: Manufacturer: syz [ 1622.312740][T20044] usb 4-1: SerialNumber: syz [ 1622.327241][T20044] usb 4-1: config 0 descriptor?? [ 1622.353267][T20044] ch341 4-1:0.0: ch341-uart converter detected [ 1622.397647][T28946] loop4: detected capacity change from 0 to 2048 [ 1622.430326][T28946] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1622.488838][T28946] syz.4.26492: attempt to access beyond end of device [ 1622.488838][T28946] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1622.504326][T28951] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1622.575272][T28946] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1622.602774][T28946] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1622.622979][T28946] Remounting filesystem read-only [ 1622.628573][T28946] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1622.659309][T28946] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1622.677015][T28946] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1622.696456][T28946] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1622.706975][T28946] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1622.722025][T20044] usb 4-1: failed to send control message: -71 [ 1622.728344][T28946] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1622.736087][T20044] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1622.744492][T28946] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1622.744618][T28946] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1622.774241][T28946] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1622.793291][T28946] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1622.795888][T20044] usb 4-1: USB disconnect, device number 90 [ 1622.815272][T28946] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1622.832604][T20044] ch341 4-1:0.0: device disconnected [ 1622.834739][T28946] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1622.868594][T28946] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1622.892286][T28946] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1622.910225][T28957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.26497'. [ 1622.920336][T28946] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1622.936560][T28946] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1622.954104][T28946] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1622.972676][T28946] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1622.983066][T28946] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1623.002481][T28946] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1623.023510][T28946] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1623.042824][T28946] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1623.096250][T28946] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1623.135220][T28946] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1623.158928][T28946] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1623.184963][T28946] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1623.203319][T28946] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1623.223510][T28946] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1623.259890][T28946] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1623.278632][T28946] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1623.304410][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 1623.304423][ T26] audit: type=1800 audit(2000000156.903:895): pid=28946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.26492" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 1623.667230][T28977] netlink: 'syz.1.26506': attribute type 10 has an invalid length. [ 1623.688184][T28977] device macvlan0 entered promiscuous mode [ 1623.889101][T20044] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 1624.091246][T20044] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1624.109573][T20044] usb 4-1: not running at top speed; connect to a high speed hub [ 1624.126858][T20044] usb 4-1: config 88 has an invalid interface number: 235 but max is 0 [ 1624.155564][T20044] usb 4-1: config 88 has no interface number 0 [ 1624.161847][T20044] usb 4-1: config 88 interface 235 has no altsetting 0 [ 1624.182315][T20044] usb 4-1: string descriptor 0 read error: -22 [ 1624.197061][T20044] usb 4-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=31.e6 [ 1624.216297][T20044] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.243548][T20044] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 1624.300579][T28981] loop5: detected capacity change from 0 to 32768 [ 1624.384257][T28981] JBD2: Ignoring recovery information on journal [ 1624.495325][T28981] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1624.629910][T20044] gspca_sn9c20x: Write register 1001 failed -71 [ 1624.641435][T20044] gspca_sn9c20x: Device initialization failed [ 1624.657768][T20044] gspca_sn9c20x: probe of 4-1:88.235 failed with error -71 [ 1624.716014][T20044] usb 4-1: USB disconnect, device number 91 [ 1624.737841][T23147] ocfs2: Unmounting device (7,5) on (node local) [ 1624.753645][T29014] netlink: 'syz.1.26524': attribute type 2 has an invalid length. [ 1624.861998][T29017] loop4: detected capacity change from 0 to 1024 [ 1624.880867][T29017] EXT4-fs: inline encryption not supported [ 1625.005939][T29017] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1625.060884][T29017] ext4 filesystem being mounted at /5118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1625.267514][ T4777] EXT4-fs (loop4): unmounting filesystem. [ 1625.308736][ T2149] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1625.409765][T29038] comedi comedi0: dt2815: I/O port conflict (0x300,2) [ 1625.451008][T29042] xt_TCPMSS: Only works on TCP SYN packets [ 1625.577541][T29019] loop5: detected capacity change from 0 to 32768 [ 1625.619534][T29019] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.26526 (29019) [ 1625.670426][T29019] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1625.702097][T29019] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1625.728742][T29019] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1625.756895][T29019] BTRFS info (device loop5): setting datasum, datacow enabled [ 1625.765739][T29019] BTRFS info (device loop5): force clearing of disk cache [ 1625.772903][T29019] BTRFS info (device loop5): enabling ssd optimizations [ 1625.822918][T29019] BTRFS info (device loop5): using spread ssd allocation scheme [ 1625.830623][T29019] BTRFS info (device loop5): turning on sync discard [ 1625.879794][T29019] BTRFS info (device loop5): not using ssd optimizations [ 1625.888297][T29019] BTRFS info (device loop5): not using spread ssd allocation scheme [ 1625.908591][T29019] BTRFS info (device loop5): using free space tree [ 1626.007611][T29065] xt_socket: unknown flags 0x50 [ 1626.146742][T29040] loop4: detected capacity change from 0 to 32768 [ 1626.162074][T29040] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.26533 (29040) [ 1626.185405][T29019] BTRFS info (device loop5): rebuilding free space tree [ 1626.202139][T29040] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1626.232625][T29040] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1626.262991][T29040] BTRFS info (device loop4): enabling auto defrag [ 1626.286230][T29040] BTRFS info (device loop4): force clearing of disk cache [ 1626.323427][T29040] BTRFS info (device loop4): disabling log replay at mount time [ 1626.361251][T29040] BTRFS info (device loop4): turning on async discard [ 1626.383878][T29040] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1626.409438][T29040] BTRFS info (device loop4): turning off async discard [ 1626.418358][T23147] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1626.432578][T29040] BTRFS info (device loop4): disabling free space tree [ 1626.458699][T29040] BTRFS info (device loop4): disabling tree log [ 1626.475658][T29040] BTRFS info (device loop4): enabling disk space caching [ 1626.490420][T29040] BTRFS info (device loop4): disk space caching is enabled [ 1626.813778][T29101] loop3: detected capacity change from 0 to 2048 [ 1627.443499][ T4777] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1627.729843][T29139] netlink: 180 bytes leftover after parsing attributes in process `syz.1.26565'. [ 1627.765000][ T26] audit: type=1326 audit(2000000161.585:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29140 comm="syz.3.26567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1627.784351][ C0] vkms_vblank_simulate: vblank timer overrun [ 1627.848040][ T26] audit: type=1326 audit(2000000161.638:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29140 comm="syz.3.26567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1627.937623][ T26] audit: type=1326 audit(2000000161.638:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29140 comm="syz.3.26567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1627.971721][ T26] audit: type=1326 audit(2000000161.638:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29140 comm="syz.3.26567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1628.020541][ T26] audit: type=1326 audit(2000000161.638:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29140 comm="syz.3.26567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1628.068858][ T26] audit: type=1326 audit(2000000161.638:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29140 comm="syz.3.26567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1628.101137][ T26] audit: type=1326 audit(2000000161.638:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29140 comm="syz.3.26567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f64ec79e159 code=0x7ffc0000 [ 1628.244201][T29160] netlink: 'syz.5.26576': attribute type 10 has an invalid length. [ 1628.261991][T29160] device macvlan0 entered promiscuous mode [ 1628.329101][T29160] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1628.366468][ T7620] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1628.440832][T29168] netlink: 'syz.0.26579': attribute type 2 has an invalid length. [ 1628.472758][T29168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26579'. [ 1628.521544][T29168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1628.537713][T29172] loop5: detected capacity change from 0 to 16 [ 1628.578210][ T7620] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.592549][T29172] erofs: (device loop5): mounted with root inode @ nid 36. [ 1628.619796][ T7620] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1628.659577][ T7620] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1628.688843][T17223] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -38 in[46, 4050] out[9000] [ 1628.699501][ T7620] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1628.703881][T29172] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -38 in[46, 4050] out[8192] [ 1628.730239][ T26] audit: type=1800 audit(2000000162.604:903): pid=29172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.26581" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1628.792988][ T7620] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1628.821525][ T7620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.039586][T29162] loop3: detected capacity change from 0 to 32768 [ 1629.098482][T22647] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1629.259687][T20509] usb 2-1: USB disconnect, device number 90 [ 1629.292175][T29200] overlayfs: failed to resolve 'upper': -2 [ 1629.351984][ T26] audit: type=1326 audit(2000000163.254:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29203 comm="syz.4.26597" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a459e159 code=0x7ff00000 [ 1629.404467][ T26] audit: type=1326 audit(2000000163.286:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29203 comm="syz.4.26597" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a459e159 code=0x7ff00000 [ 1629.478689][ T26] audit: type=1326 audit(2000000163.286:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29203 comm="syz.4.26597" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a459e159 code=0x7ff00000 [ 1629.523221][ T26] audit: type=1326 audit(2000000163.286:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29203 comm="syz.4.26597" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a459e159 code=0x7ff00000 [ 1629.564423][ T26] audit: type=1326 audit(2000000163.286:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29203 comm="syz.4.26597" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a459e159 code=0x7ff00000 [ 1629.593714][ T26] audit: type=1326 audit(2000000163.286:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29203 comm="syz.4.26597" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a459e159 code=0x7ff00000 [ 1629.648378][ T26] audit: type=1326 audit(2000000163.286:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29203 comm="syz.4.26597" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a459e159 code=0x7ff00000 [ 1629.692526][ T26] audit: type=1326 audit(2000000163.286:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29203 comm="syz.4.26597" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a459e159 code=0x7ff00000 [ 1629.763703][T29217] loop3: detected capacity change from 0 to 1024 [ 1629.777987][T29217] /dev/loop3: Can't open blockdev [ 1629.830193][T22646] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1629.922794][T29223] netlink: 'syz.1.26606': attribute type 11 has an invalid length. [ 1630.187939][T28774] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1630.429571][T29254] loop4: detected capacity change from 0 to 8 [ 1630.480980][ T7620] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1630.646523][T29263] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 1630.693021][T29267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.26628'. [ 1630.702452][ T7620] usb 6-1: Using ep0 maxpacket: 8 [ 1630.710992][ T7620] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1630.733242][ T7620] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 1630.753375][T29267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.26628'. [ 1630.768026][ T7620] usb 6-1: config 0 has no interface number 0 [ 1630.774166][ T7620] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1630.794283][T29267] netlink: 48 bytes leftover after parsing attributes in process `syz.3.26628'. [ 1630.805039][ T7620] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1630.822029][T29273] netlink: 'syz.1.26631': attribute type 12 has an invalid length. [ 1630.839574][ T7620] usb 6-1: config 0 interface 88 has no altsetting 0 [ 1630.869619][ T7620] usb 6-1: string descriptor 0 read error: -22 [ 1630.898125][ T7620] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1630.917720][ T7620] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1630.940308][ T7620] usb 6-1: config 0 descriptor?? [ 1630.969019][ T7620] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input151 [ 1631.097908][T22647] udevd[22647]: Error opening device "/dev/input/event4": Input/output error [ 1631.123990][T22647] udevd[22647]: Unable to EVIOCGABS device "/dev/input/event4" [ 1631.173899][T22647] udevd[22647]: Unable to EVIOCGABS device "/dev/input/event4" [ 1631.191625][T20036] usb 6-1: USB disconnect, device number 13 [ 1631.362944][T27502] ------------[ cut here ]------------ [ 1631.370041][T27502] WARNING: CPU: 1 PID: 27502 at net/netfilter/nft_set_pipapo.c:2384 nft_pipapo_destroy+0x87d/0x8e0 [ 1631.381071][T27502] Modules linked in: [ 1631.384990][T27502] CPU: 1 PID: 27502 Comm: kworker/1:11 Not tainted syzkaller #0 [ 1631.392821][T27502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1631.402968][T27502] Workqueue: events nf_tables_trans_destroy_work [ 1631.409614][T27502] RIP: 0010:nft_pipapo_destroy+0x87d/0x8e0 [ 1631.415591][T27502] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 ee 7b 47 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 93 36 f6 f8 <0f> 0b e9 e0 f7 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c ea f9 [ 1631.435305][T27502] RSP: 0018:ffffc90006167a68 EFLAGS: 00010293 [ 1631.441407][T27502] RAX: ffffffff888bfc4d RBX: ffff88807b5f50f0 RCX: ffff888075341e00 [ 1631.449462][T27502] RDX: 0000000000000000 RSI: ffff88807b5f5000 RDI: ffff888060f75a28 [ 1631.457567][T27502] RBP: ffffc90006167c30 R08: ffff888075341e00 R09: 0000000000000008 [ 1631.465649][T27502] R10: 0000000000000018 R11: 0000000000000000 R12: ffff88807b5f50c0 [ 1631.473695][T27502] R13: dffffc0000000000 R14: ffff88807b5f5110 R15: dffffc0000000000 [ 1631.481749][T27502] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1631.490754][T27502] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1631.497397][T27502] CR2: 0000200000000040 CR3: 0000000069778000 CR4: 00000000003506e0 [ 1631.505467][T27502] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1631.513664][T27502] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1631.521741][T27502] Call Trace: [ 1631.525032][T27502] [ 1631.527971][T27502] nft_set_destroy+0x489/0xa30 [ 1631.532818][T27502] ? __kmem_cache_free+0xb6/0x200 [ 1631.538053][T27502] nf_tables_trans_destroy_work+0xb81/0xdf0 [ 1631.543973][T27502] ? nft_object_dump+0x1e0/0x1e0 [ 1631.549005][T27502] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1631.554220][T27502] ? process_one_work+0x7b4/0x1160 [ 1631.559416][T27502] process_one_work+0x8ab/0x1160 [ 1631.564370][T27502] ? worker_detach_from_pool+0x240/0x240 [ 1631.570091][T27502] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1631.575135][T27502] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1631.580733][T27502] ? wq_worker_running+0x97/0x190 [ 1631.585833][T27502] worker_thread+0xaf5/0x12a0 [ 1631.590531][T27502] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1631.596496][T27502] kthread+0x29d/0x330 [ 1631.600580][T27502] ? worker_clr_flags+0x1a0/0x1a0 [ 1631.605681][T27502] ? kthread_blkcg+0xd0/0xd0 [ 1631.610283][T27502] ret_from_fork+0x1f/0x30 [ 1631.614853][T27502] [ 1631.617891][T27502] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1631.625165][T27502] CPU: 1 PID: 27502 Comm: kworker/1:11 Not tainted syzkaller #0 [ 1631.632800][T27502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1631.642858][T27502] Workqueue: events nf_tables_trans_destroy_work [ 1631.649198][T27502] Call Trace: [ 1631.652472][T27502] [ 1631.655398][T27502] dump_stack_lvl+0x188/0x24e [ 1631.660070][T27502] ? memcpy+0x3c/0x60 [ 1631.664043][T27502] ? show_regs_print_info+0x12/0x12 [ 1631.669234][T27502] ? load_image+0x410/0x410 [ 1631.673760][T27502] panic+0x2d3/0x710 [ 1631.677656][T27502] ? bpf_jit_dump+0xd0/0xd0 [ 1631.682155][T27502] ? ret_from_fork+0x1f/0x30 [ 1631.686745][T27502] __warn+0x2f8/0x4f0 [ 1631.690720][T27502] ? nft_pipapo_destroy+0x87d/0x8e0 [ 1631.695912][T27502] ? nft_pipapo_destroy+0x87d/0x8e0 [ 1631.701102][T27502] report_bug+0x2ba/0x4f0 [ 1631.705425][T27502] ? nft_pipapo_destroy+0x87d/0x8e0 [ 1631.710621][T27502] handle_bug+0x3a/0x70 [ 1631.714768][T27502] exc_invalid_op+0x16/0x40 [ 1631.719266][T27502] asm_exc_invalid_op+0x16/0x20 [ 1631.724116][T27502] RIP: 0010:nft_pipapo_destroy+0x87d/0x8e0 [ 1631.729913][T27502] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 ee 7b 47 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 93 36 f6 f8 <0f> 0b e9 e0 f7 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c ea f9 [ 1631.749524][T27502] RSP: 0018:ffffc90006167a68 EFLAGS: 00010293 [ 1631.755607][T27502] RAX: ffffffff888bfc4d RBX: ffff88807b5f50f0 RCX: ffff888075341e00 [ 1631.763588][T27502] RDX: 0000000000000000 RSI: ffff88807b5f5000 RDI: ffff888060f75a28 [ 1631.771556][T27502] RBP: ffffc90006167c30 R08: ffff888075341e00 R09: 0000000000000008 [ 1631.779519][T27502] R10: 0000000000000018 R11: 0000000000000000 R12: ffff88807b5f50c0 [ 1631.787478][T27502] R13: dffffc0000000000 R14: ffff88807b5f5110 R15: dffffc0000000000 [ 1631.795447][T27502] ? nft_pipapo_destroy+0x87d/0x8e0 [ 1631.800651][T27502] ? nft_pipapo_destroy+0x87d/0x8e0 [ 1631.805859][T27502] nft_set_destroy+0x489/0xa30 [ 1631.810616][T27502] ? __kmem_cache_free+0xb6/0x200 [ 1631.815637][T27502] nf_tables_trans_destroy_work+0xb81/0xdf0 [ 1631.821527][T27502] ? nft_object_dump+0x1e0/0x1e0 [ 1631.826457][T27502] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1631.831649][T27502] ? process_one_work+0x7b4/0x1160 [ 1631.836765][T27502] process_one_work+0x8ab/0x1160 [ 1631.841703][T27502] ? worker_detach_from_pool+0x240/0x240 [ 1631.847328][T27502] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1631.852343][T27502] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1631.857881][T27502] ? wq_worker_running+0x97/0x190 [ 1631.862896][T27502] worker_thread+0xaf5/0x12a0 [ 1631.867573][T27502] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1631.873465][T27502] kthread+0x29d/0x330 [ 1631.877525][T27502] ? worker_clr_flags+0x1a0/0x1a0 [ 1631.882541][T27502] ? kthread_blkcg+0xd0/0xd0 [ 1631.887120][T27502] ret_from_fork+0x1f/0x30 [ 1631.891538][T27502] [ 1631.894790][T27502] Kernel Offset: disabled [ 1631.899268][T27502] Rebooting in 86400 seconds..