last executing test programs: 2.70942661s ago: executing program 4 (id=13932): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="68c5000000000000140003006e657464657673696d3000000000000034001680300001802c000c"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x200088c4) 2.552373241s ago: executing program 4 (id=13937): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)="b84fc7b290", 0x5) 1.713502004s ago: executing program 4 (id=13955): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001a80)=@filter={'filter\x00', 0x42, 0x4, 0x2d8, 0xffffffff, 0xf8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'dvmrp0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) 1.598478246s ago: executing program 4 (id=13958): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r0, &(0x7f00000000c0)=""/144, 0x90, 0x2f) 1.386857549s ago: executing program 4 (id=13963): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa, 0x3}]}, @struct={0x4}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000001fc0)=""/4115, 0x3d, 0x1013, 0x1}, 0x28) 1.29315466s ago: executing program 1 (id=13964): r0 = syz_open_dev$video(&(0x7f0000000540), 0x107, 0x40401) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000480)={0xd77, 0xa, 0x3, 0x0, 0x4}) 1.243236211s ago: executing program 0 (id=13966): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)) 1.228502832s ago: executing program 4 (id=13967): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) syz_usb_connect(0x5, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002000000407b06032300000102030109022d0001010080000904000003ff00000009050102000200000009058202000200000009058303"], 0x0) 1.085073114s ago: executing program 1 (id=13969): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="66697c746572000000000000000000000000000000000000000000000000000005"], 0x78) 1.080273164s ago: executing program 3 (id=13970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r0, &(0x7f00000001c0), 0x0}, 0x20) 1.071257164s ago: executing program 0 (id=13971): r0 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='secret\x00', &(0x7f0000000000)='AQB123+56789p1234567890123456789\x00\x00\x00\x00\x00\x00\x00\x00=\x00>G\xa7R\aM\xd5\xd8\x1a\xd3\xbf\xb4W\x92\x1fu\xfd\xfd\xe2g\x10\xb3b\x98\x81ae\x1a\x8b7\xb6\x00{zU\xae\x98)7\xee\a\xf8H1\x9d\xe5\xa1\xf2U\xf1\x02RV\n\x95\xae3\xc9\x9a\xb8\xe7_\xaf\xb4`\r\xfd\xcc\xd5d \xe8i\x12 (0000:0000) [ 977.187984][ T5015] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 977.198786][ T5015] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 977.208216][ T5015] uvcvideo 4-1:1.1: Failed to initialize the device (-5). [ 977.222013][ T5015] usb 4-1: USB disconnect, device number 24 [ 977.228972][ T9191] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 977.236349][ T9191] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 977.302849][ T9191] usb 2-1: USB disconnect, device number 29 [ 978.093621][T20091] usb 3-1: firmware upload failed (-110). [ 978.253466][ T5015] usb 3-1: USB disconnect, device number 5 [ 978.842523][T29820] netlink: 260 bytes leftover after parsing attributes in process `syz.0.11938'. [ 979.023829][T29833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11934'. [ 979.075220][T29835] vivid-003: disconnect [ 979.114187][T29834] vivid-003: reconnect [ 980.323954][T29898] xt_l2tp: missing protocol rule (udp|l2tpip) [ 980.349926][T29901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11967'. [ 980.637744][T29915] netlink: 'syz.0.11973': attribute type 2 has an invalid length. [ 981.214555][T29943] No such timeout policy "syz1" [ 981.245991][T29945] ieee802154 phy0 wpan0: encryption failed: -90 [ 981.388879][T29951] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11987'. [ 981.421133][T29951] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11987'. [ 981.491399][T29955] netlink: 'syz.4.11989': attribute type 32 has an invalid length. [ 981.525396][T29955] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 981.675016][T29917] loop1: detected capacity change from 0 to 40427 [ 981.718458][T29917] F2FS-fs (loop1): Wrong segment_count / block_count (64 > 16384) [ 981.762853][T29917] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 981.843282][T29917] F2FS-fs (loop1): Found nat_bits in checkpoint [ 981.865812][T29972] loop3: detected capacity change from 0 to 1024 [ 981.906583][T29972] /dev/loop3: Can't open blockdev [ 982.007049][T29968] loop2: detected capacity change from 0 to 4096 [ 982.039184][T29968] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 982.048335][T29917] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 982.059107][T29917] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 982.207429][T29968] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 982.483823][ T9] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 982.501640][ T4995] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 982.507935][ T4995] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 982.525809][ T4995] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 982.534104][ T9] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 982.565413][ T4995] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 982.606970][ T4995] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 983.238611][T30022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 983.579703][T30007] loop0: detected capacity change from 0 to 32768 [ 983.594775][T30034] netlink: 180 bytes leftover after parsing attributes in process `syz.4.12025'. [ 983.713005][T30007] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 983.801712][T30047] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12032'. [ 983.913198][T20091] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 984.089714][ T4998] ocfs2: Unmounting device (7,0) on (node local) [ 984.137704][T20091] usb 3-1: Using ep0 maxpacket: 32 [ 984.160755][T20091] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 984.194075][T20091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.222009][T20091] usb 3-1: config 0 descriptor?? [ 984.244314][T20091] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 984.597122][T30078] netlink: 830 bytes leftover after parsing attributes in process `syz.0.12046'. [ 984.675189][T20091] gspca_nw80x: reg_r err -71 [ 984.679867][T20091] nw80x: probe of 3-1:0.0 failed with error -71 [ 984.711664][T20091] usb 3-1: USB disconnect, device number 6 [ 985.146945][T30102] ieee802154 phy0 wpan0: encryption failed: -90 [ 985.160622][T30105] overlayfs: unrecognized mount option "\$:$'" or missing value [ 985.314514][T30110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12062'. [ 985.323589][T30110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12062'. [ 985.378602][T30110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12062'. [ 985.763719][ T4982] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 985.938041][T30143] loop2: detected capacity change from 0 to 256 [ 985.995450][ T4982] usb 5-1: config 1 interface 0 altsetting 54 endpoint 0x1 is Bulk; changing to Interrupt [ 986.027274][ T4982] usb 5-1: config 1 interface 0 has no altsetting 0 [ 986.065850][ T4982] usb 5-1: string descriptor 0 read error: -22 [ 986.090044][ T4982] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice= 0.40 [ 986.111505][ T4982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.145729][T30118] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 986.165259][ T4982] hub 5-1:1.0: bad descriptor, ignoring hub [ 986.176856][ T4982] hub: probe of 5-1:1.0 failed with error -5 [ 986.338450][T30160] loop1: detected capacity change from 0 to 512 [ 986.411022][T30160] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.12086: bg 0: block 112: padding at end of block bitmap is not set [ 986.446432][T30160] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 986.465613][T30160] EXT4-fs (loop1): 1 orphan inode deleted [ 986.476356][T30160] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 986.489847][ T9] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 986.501403][T30172] loop2: detected capacity change from 0 to 1024 [ 986.511448][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 1 [ 986.518749][T30172] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 986.544408][T30160] ext4 filesystem being mounted at /2268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 986.555671][ T4982] usb 5-1: USB disconnect, device number 28 [ 986.569695][T30172] hfsplus: filesystem is marked journaled, leaving read-only. [ 986.590920][T30160] Quota error (device loop1): write_blk: dquota write failed [ 986.660240][T30160] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 986.696569][T30176] loop3: detected capacity change from 0 to 8 [ 986.701962][T30160] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.12086: Failed to acquire dquot type 1 [ 986.720056][T30176] /dev/loop3: Can't open blockdev [ 986.761686][ T5003] EXT4-fs (loop1): unmounting filesystem. [ 986.923522][T30182] overlayfs: missing 'workdir' [ 987.125033][T30193] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 987.201029][T30198] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 987.208633][T30198] IPv6: NLM_F_CREATE should be set when creating new route [ 987.216112][T30198] IPv6: NLM_F_CREATE should be set when creating new route [ 987.698218][T30225] netlink: 'syz.3.12115': attribute type 21 has an invalid length. [ 987.717623][T30225] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12115'. [ 987.801179][T30229] netlink: 'syz.2.12117': attribute type 10 has an invalid length. [ 987.872697][T30233] loop0: detected capacity change from 0 to 1024 [ 987.875636][T30235] loop3: detected capacity change from 0 to 256 [ 987.899621][T30235] exfat: Deprecated parameter 'utf8' [ 987.926765][T30235] /dev/loop3: Can't open blockdev [ 987.967482][T30233] hfsplus: failed to extend attributes file [ 988.209902][T30247] loop0: detected capacity change from 0 to 256 [ 988.218644][T30247] exfat: Deprecated parameter 'namecase' [ 988.227413][T30247] exfat: Deprecated parameter 'namecase' [ 988.260613][T30247] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 988.326612][T30251] 9p: Unknown access argument z: -22 [ 988.550166][T30263] loop0: detected capacity change from 0 to 256 [ 988.584700][T30263] exfat: Deprecated parameter 'utf8' [ 988.628515][T30267] xt_addrtype: ipv6 does not support BROADCAST matching [ 988.649670][T30263] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 988.893761][T30273] device veth3 entered promiscuous mode [ 989.064417][T30283] comedi comedi0: comedi_config --init_data is deprecated [ 989.236302][T30291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12148'. [ 989.251267][T30291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12148'. [ 989.281903][T30291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12148'. [ 989.478029][T30305] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12154'. [ 989.632688][T30313] binder: 30309:30313 unknown command 0 [ 989.657616][T30313] binder: 30309:30313 ioctl c0306201 2000000001c0 returned -22 [ 989.949209][T30327] loop0: detected capacity change from 0 to 512 [ 989.994990][T30327] FAT-fs (loop0): Directory bread(block 2080) failed [ 990.015386][T30327] FAT-fs (loop0): Directory bread(block 2081) failed [ 990.031457][T30327] FAT-fs (loop0): Directory bread(block 2082) failed [ 990.051903][T30327] FAT-fs (loop0): Directory bread(block 2083) failed [ 990.090757][T30327] FAT-fs (loop0): Directory bread(block 2084) failed [ 990.115695][T30327] FAT-fs (loop0): Directory bread(block 2085) failed [ 990.145484][T30327] FAT-fs (loop0): Directory bread(block 2086) failed [ 990.149638][ T9191] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 990.179214][T30327] FAT-fs (loop0): Directory bread(block 2087) failed [ 990.230704][T30327] FAT-fs (loop0): Directory bread(block 2080) failed [ 990.253305][T30327] FAT-fs (loop0): Directory bread(block 2081) failed [ 990.385981][ T9191] usb 3-1: unable to get BOS descriptor or descriptor too short [ 990.402401][ T9191] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 990.435276][ T9191] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 990.458094][T30349] netlink: 'syz.3.12176': attribute type 12 has an invalid length. [ 990.482610][ T9191] usb 3-1: config 63 has no interface number 0 [ 990.488768][T30351] loop1: detected capacity change from 0 to 256 [ 990.488802][ T9191] usb 3-1: config 63 interface 66 has no altsetting 0 [ 990.511814][T30351] exfat: Deprecated parameter 'utf8' [ 990.536381][ T9191] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 990.564980][ T9191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.583532][T30351] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 990.610216][ T9191] usb 3-1: Product: syz [ 990.616824][ T9191] usb 3-1: Manufacturer: syz [ 990.636520][ T9191] usb 3-1: SerialNumber: syz [ 990.891290][ T9191] usb 3-1: Found UVC 0.07 device syz (174f:8acf) [ 990.930235][ T9191] usb 3-1: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 990.974015][ T9191] usb 3-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 990.999082][ T9191] usb 3-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 991.027957][ T9191] usb 3-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 991.029305][ T9191] usb 3-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 991.029365][ T9191] usb 3-1: No streaming interface found for terminal 29. [ 991.029404][ T9191] uvcvideo 3-1:63.66: Entity type for entity Output 5 was not initialized! [ 991.037990][ T9191] usb 3-1: USB disconnect, device number 7 [ 991.372923][T30385] fuse: Invalid rootmode [ 991.979061][ T9191] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 992.182281][ T9191] usb 2-1: Using ep0 maxpacket: 8 [ 992.196344][ T9191] usb 2-1: unable to get BOS descriptor or descriptor too short [ 992.216130][ T9191] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 992.231908][T30431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12218'. [ 992.235797][ T9191] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 992.241099][ T4982] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 992.280590][ T9191] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 992.304428][ T9191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.350660][ T9191] usb 2-1: Product: syz [ 992.359364][ T9191] usb 2-1: Manufacturer: syz [ 992.380818][T30435] loop0: detected capacity change from 0 to 1024 [ 992.380961][ T9191] usb 2-1: SerialNumber: syz [ 992.415369][T30435] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 992.450025][T30435] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 992.459397][T30435] EXT4-fs (loop0): orphan cleanup on readonly fs [ 992.477632][T30438] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12221'. [ 992.489554][T30435] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #3: block 3: comm syz.0.12220: lblock 3 mapped to illegal pblock 3 (length 1) [ 992.507195][T30435] Quota error (device loop0): write_blk: dquota write failed [ 992.515507][ T4982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4 [ 992.526824][T30435] Quota error (device loop0): find_free_dqentry: Can't write quota data block 3 [ 992.532719][T30438] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12221'. [ 992.536051][ T4982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023 [ 992.536257][T30435] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 992.559057][T30423] loop2: detected capacity change from 0 to 32768 [ 992.566526][T30435] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.12220: Failed to acquire dquot type 0 [ 992.588235][T30438] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12221'. [ 992.588682][T30435] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 3: comm syz.0.12220: lblock 3 mapped to illegal pblock 3 (length 1) [ 992.611578][ T4982] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 992.620860][ T4982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.629129][T30435] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 992.642523][ T4982] usb 4-1: Product: syz [ 992.646917][ T4982] usb 4-1: Manufacturer: syz [ 992.653034][ T4982] usb 4-1: SerialNumber: syz [ 992.660668][T30435] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.12220: Failed to acquire dquot type 0 [ 992.672135][ T27] audit: type=1800 audit(1700525514.747:228): pid=30423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12214" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 992.707163][ T4982] usb 4-1: config 0 descriptor?? [ 992.718422][ T4982] hub 4-1:0.0: bad descriptor, ignoring hub [ 992.724375][ T4982] hub: probe of 4-1:0.0 failed with error -5 [ 992.738988][T30435] EXT4-fs error (device loop0): ext4_free_blocks:6220: comm syz.0.12220: Freeing blocks not in datazone - block = 0, count = 4096 [ 992.761937][ T4982] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input99 [ 992.796297][T30435] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 3: comm syz.0.12220: lblock 3 mapped to illegal pblock 3 (length 1) [ 992.862189][ T9191] usb 2-1: cannot find UAC_HEADER [ 992.869465][T30435] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 992.904898][T30435] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.12220: Failed to acquire dquot type 0 [ 992.942953][T30435] EXT4-fs (loop0): 1 orphan inode deleted [ 992.944157][ T9191] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 993.001878][ T5072] udevd[5072]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 993.015020][T30444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12224'. [ 993.022166][ T9191] usb 2-1: USB disconnect, device number 30 [ 993.051850][T30435] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 993.165181][T30435] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 993.198680][ T4982] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 993.214098][ T4998] EXT4-fs (loop0): unmounting filesystem. [ 993.310423][T30450] netlink: zone id is out of range [ 993.361823][T20091] usb 4-1: USB disconnect, device number 25 [ 993.414580][ T4982] usb 5-1: unable to get BOS descriptor or descriptor too short [ 993.424884][ T4982] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 993.447659][ T4982] usb 5-1: string descriptor 0 read error: -22 [ 993.453922][ T4982] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 993.474471][ T4982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.487349][ T4983] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 993.514785][T30440] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 993.527542][ T4982] usb 5-1: MIDIStreaming interface descriptor not found [ 993.718983][ T4983] usb 3-1: Using ep0 maxpacket: 32 [ 993.733969][T30464] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.735649][ T4983] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 993.763064][ T4983] usb 3-1: config 0 has no interface number 0 [ 993.769788][ T4983] usb 3-1: config 0 interface 196 has no altsetting 0 [ 993.779507][ T4982] usb 5-1: USB disconnect, device number 29 [ 993.786317][T30466] ieee802154 phy0 wpan0: encryption failed: -90 [ 993.802799][ T4983] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 993.813184][ T4983] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 993.840258][ T4983] usb 3-1: Product: syz [ 993.844465][ T4983] usb 3-1: Manufacturer: syz [ 993.858285][ T4983] usb 3-1: SerialNumber: syz [ 993.859690][T30468] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 993.884720][ T4983] usb 3-1: config 0 descriptor?? [ 994.121653][ T4983] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 994.131886][ T4983] ipheth: probe of 3-1:0.196 failed with error -71 [ 994.148426][ T4983] usb 3-1: USB disconnect, device number 8 [ 994.535882][T30490] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12247'. [ 994.565640][T30490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12247'. [ 994.750188][T30494] No source specified [ 995.008365][T30486] loop1: detected capacity change from 0 to 32768 [ 995.303386][T30511] xt_TPROXY: Can be used only with -p tcp or -p udp [ 995.753822][T30526] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 995.783209][T30526] overlayfs: missing 'lowerdir' [ 995.974759][T30540] loop2: detected capacity change from 0 to 256 [ 996.602943][T30573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12288'. [ 997.199436][ T4982] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 997.251562][T30607] loop0: detected capacity change from 0 to 2048 [ 997.282115][T30607] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 997.321474][T30607] UDF-fs: warning (device loop0): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 997.404867][ T4982] usb 2-1: unable to get BOS descriptor or descriptor too short [ 997.423420][ T4982] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 997.465705][ T4982] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 997.489042][ T4982] usb 2-1: config 63 has no interface number 0 [ 997.495264][ T4982] usb 2-1: config 63 interface 66 has no altsetting 0 [ 997.526047][ T4982] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 997.546287][ T4982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.563275][ T4982] usb 2-1: Product: syz [ 997.567476][ T4982] usb 2-1: Manufacturer: syz [ 997.577840][ T4982] usb 2-1: SerialNumber: syz [ 997.657342][T30622] x_tables: duplicate underflow at hook 4 [ 997.832414][ T4982] usb 2-1: Found UVC 0.07 device syz (174f:8acf) [ 997.849525][ T4982] usb 2-1: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 997.876068][ T4982] usb 2-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 997.931049][ T4982] usb 2-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 997.959184][ T4982] usb 2-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 997.977858][ T4982] usb 2-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 998.002523][ T4982] usb 2-1: No streaming interface found for terminal 29. [ 998.009608][ T4982] uvcvideo 2-1:63.66: Entity type for entity Output 5 was not initialized! [ 998.072962][ T4982] usb 2-1: USB disconnect, device number 31 [ 998.137935][T30641] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 998.183740][T30641] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 998.265211][T30646] loop3: detected capacity change from 0 to 2048 [ 998.325102][T13981] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 998.530277][T30657] loop0: detected capacity change from 0 to 64 [ 998.563801][T30657] Bad inode number on dev loop0: 2 is out of range [ 998.823503][T30670] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12336'. [ 998.850906][T30675] bond0: option packets_per_slave: invalid value (868050663) [ 998.900404][T30675] bond0: option packets_per_slave: allowed values 0 - 65535 [ 998.959834][T30674] 8021q: adding VLAN 0 to HW filter on device bond3 [ 998.970954][T30678] loop3: detected capacity change from 0 to 2048 [ 999.138769][T30686] loop2: detected capacity change from 0 to 164 [ 999.272067][T30688] loop1: detected capacity change from 0 to 256 [ 999.364149][T30688] FAT-fs (loop1): Directory bread(block 64) failed [ 999.392293][T30688] FAT-fs (loop1): Directory bread(block 65) failed [ 999.416696][T30688] FAT-fs (loop1): Directory bread(block 66) failed [ 999.461222][T30688] FAT-fs (loop1): Directory bread(block 67) failed [ 999.494954][T30688] FAT-fs (loop1): Directory bread(block 68) failed [ 999.511102][T30688] FAT-fs (loop1): Directory bread(block 69) failed [ 999.517862][T30688] FAT-fs (loop1): Directory bread(block 70) failed [ 999.530220][T30688] FAT-fs (loop1): Directory bread(block 71) failed [ 999.542737][T30688] FAT-fs (loop1): Directory bread(block 72) failed [ 999.549647][T30688] FAT-fs (loop1): Directory bread(block 73) failed [ 999.667917][T30702] overlayfs: empty lowerdir [ 1000.550329][T30740] loop1: detected capacity change from 0 to 256 [ 1000.597252][T30746] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12373'. [ 1000.601989][T30740] exfat: Deprecated parameter 'namecase' [ 1000.644092][T30740] exfat: Deprecated parameter 'namecase' [ 1000.655993][T30746] netlink: 9 bytes leftover after parsing attributes in process `syz.0.12373'. [ 1000.691649][T30740] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1000.715780][T30746] netlink: 9 bytes leftover after parsing attributes in process `syz.0.12373'. [ 1001.033689][ T4983] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1001.112386][T30764] netlink: 'syz.2.12382': attribute type 1 has an invalid length. [ 1001.243185][ T4983] usb 4-1: Using ep0 maxpacket: 8 [ 1001.245274][T30773] loop2: detected capacity change from 0 to 512 [ 1001.260522][ T4983] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1001.284944][ T4983] usb 4-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1001.289699][T30773] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.12387: inode has both inline data and extents flags [ 1001.303673][ T4983] usb 4-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 1001.323417][T30773] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.12387: couldn't read orphan inode 15 (err -117) [ 1001.324810][ T4983] usb 4-1: config 8 interface 0 has no altsetting 0 [ 1001.339808][T30773] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1001.366325][ T4983] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1001.393766][ T4983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.401804][ T4983] usb 4-1: Product: syz [ 1001.428685][ T4983] usb 4-1: Manufacturer: syz [ 1001.450285][ T4983] usb 4-1: SerialNumber: syz [ 1001.497305][ T4995] EXT4-fs (loop2): unmounting filesystem. [ 1001.688569][ T4983] usb 4-1: selecting invalid altsetting 0 [ 1001.721649][T30783] delete_channel: no stack [ 1001.740663][ T4983] snd-usb-audio: probe of 4-1:8.0 failed with error -12 [ 1001.798058][ T7501] udevd[7501]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1001.817127][ T4983] usb 4-1: USB disconnect, device number 26 [ 1001.956136][T30794] loop2: detected capacity change from 0 to 256 [ 1002.011668][T30794] FAT-fs (loop2): Directory bread(block 64) failed [ 1002.038397][T30794] FAT-fs (loop2): Directory bread(block 65) failed [ 1002.056728][T30794] FAT-fs (loop2): Directory bread(block 66) failed [ 1002.081529][T30794] FAT-fs (loop2): Directory bread(block 67) failed [ 1002.098799][T30794] FAT-fs (loop2): Directory bread(block 68) failed [ 1002.113550][T30794] FAT-fs (loop2): Directory bread(block 69) failed [ 1002.138010][T30794] FAT-fs (loop2): Directory bread(block 70) failed [ 1002.149622][T30794] FAT-fs (loop2): Directory bread(block 71) failed [ 1002.163321][T30794] FAT-fs (loop2): Directory bread(block 72) failed [ 1002.170267][T30794] FAT-fs (loop2): Directory bread(block 73) failed [ 1002.323033][T30806] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12401'. [ 1002.411356][T30808] xt_cluster: node mask cannot exceed total number of nodes [ 1002.462722][ T4982] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1002.530697][ T5015] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1002.667719][ T4982] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.699173][ T4982] usb 2-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 1002.716090][ T4982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.731819][ T5015] usb 1-1: Using ep0 maxpacket: 8 [ 1002.735299][ T4982] usb 2-1: Product: syz [ 1002.744441][ T5015] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1002.751443][ T4982] usb 2-1: Manufacturer: syz [ 1002.756352][ T4982] usb 2-1: SerialNumber: syz [ 1002.766387][ T5015] usb 1-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.40 [ 1002.791081][ T5015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.810322][ T5015] usb 1-1: Product: syz [ 1002.828766][ T5015] usb 1-1: Manufacturer: syz [ 1002.833486][ T5015] usb 1-1: SerialNumber: syz [ 1003.040231][T30827] Bluetooth: hci5: unexpected event for opcode 0x1002 [ 1003.254476][ T5007] Bluetooth: hci5: CSR: Local version failed (-71) [ 1003.324759][ T4983] usb 2-1: USB disconnect, device number 32 [ 1003.343194][ T5015] usbhid 1-1:1.0: can't add hid device: -71 [ 1003.353974][ T5015] usbhid: probe of 1-1:1.0 failed with error -71 [ 1003.370381][ T5015] usb 1-1: USB disconnect, device number 20 [ 1003.528348][T30842] Process accounting resumed [ 1003.610642][T30853] loop4: detected capacity change from 0 to 1764 [ 1003.663020][T30853] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1003.852370][T30867] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1004.480129][T30903] loop1: detected capacity change from 0 to 128 [ 1004.601959][ T5015] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1004.805223][ T5015] usb 4-1: Using ep0 maxpacket: 8 [ 1004.812814][ T5015] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1004.843951][ T5015] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1004.873443][ T5015] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.900833][ T5015] usb 4-1: Product: syz [ 1004.912844][ T5015] usb 4-1: Manufacturer: syz [ 1004.925108][ T5015] usb 4-1: SerialNumber: syz [ 1004.933299][ T5015] usb 4-1: config 0 descriptor?? [ 1004.969396][ T5015] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 1005.141008][ T4983] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1005.168077][ T5015] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 1005.188488][ T5015] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 1005.233076][ T4982] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1005.280131][T30929] loop1: detected capacity change from 0 to 4096 [ 1005.327534][T30929] ntfs: volume version 3.1. [ 1005.361560][ T4983] usb 5-1: Using ep0 maxpacket: 32 [ 1005.368485][ T4983] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 1005.399295][ T4983] usb 5-1: config 0 has no interface number 0 [ 1005.405635][ T4983] usb 5-1: config 0 interface 196 has no altsetting 0 [ 1005.417063][T20091] usb 4-1: USB disconnect, device number 27 [ 1005.424968][ T4983] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1005.436393][ T4982] usb 1-1: Using ep0 maxpacket: 8 [ 1005.443495][ T4982] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1005.454989][ T4983] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1005.464126][ T4983] usb 5-1: Product: syz [ 1005.471578][ T4982] usb 1-1: config 28 has an invalid interface number: 157 but max is 0 [ 1005.481115][ T4982] usb 1-1: config 28 has no interface number 0 [ 1005.487349][ T4983] usb 5-1: Manufacturer: syz [ 1005.495187][ T4982] usb 1-1: config 28 interface 157 has no altsetting 0 [ 1005.503510][ T4983] usb 5-1: SerialNumber: syz [ 1005.511834][ T4982] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=38.c2 [ 1005.521388][ T4983] usb 5-1: config 0 descriptor?? [ 1005.530575][ T4982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.539254][ T4982] usb 1-1: Product: syz [ 1005.548805][ T4982] usb 1-1: Manufacturer: syz [ 1005.553715][ T4982] usb 1-1: SerialNumber: syz [ 1005.765127][ T4983] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1005.783631][ T4983] ipheth: probe of 5-1:0.196 failed with error -71 [ 1005.821153][ T4983] usb 5-1: USB disconnect, device number 30 [ 1005.849603][ T4982] usb 1-1: USB disconnect, device number 21 [ 1006.085664][T30944] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Q�öì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|�Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 30944 comm: syz.1.12470) [ 1006.119137][ T27] audit: type=1800 audit(1700525527.321:229): pid=30944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12470" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=112586 res=0 errno=0 [ 1006.498662][T30960] netlink: 'syz.0.12478': attribute type 2 has an invalid length. [ 1006.516094][T30960] netlink: 'syz.0.12478': attribute type 2 has an invalid length. [ 1006.560803][T30960] netlink: 'syz.0.12478': attribute type 1 has an invalid length. [ 1006.588978][T30960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12478'. [ 1006.748779][T30966] netlink: 'syz.2.12481': attribute type 10 has an invalid length. [ 1006.795055][T30966] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12481'. [ 1006.818299][T30966] device team0 entered promiscuous mode [ 1006.834849][T30966] device team_slave_0 entered promiscuous mode [ 1006.848739][T30966] device team_slave_1 entered promiscuous mode [ 1006.860069][T30966] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1007.032847][T30977] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12486'. [ 1007.295820][T30993] loop4: detected capacity change from 0 to 512 [ 1007.411458][T30993] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.12495: inode has both inline data and extents flags [ 1007.474334][T30993] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.12495: couldn't read orphan inode 15 (err -117) [ 1007.508780][T30993] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1007.717634][ T5009] EXT4-fs (loop4): unmounting filesystem. [ 1007.755013][T31016] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1007.993991][T31030] CIFS mount error: No usable UNC path provided in device string! [ 1007.993991][T31030] [ 1008.033596][T31030] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1008.481349][T31056] netlink: 6 bytes leftover after parsing attributes in process `syz.3.12525'. [ 1008.567137][T31061] loop0: detected capacity change from 0 to 64 [ 1009.192065][T31084] loop1: detected capacity change from 0 to 4096 [ 1009.206433][T31084] ntfs3: loop1: mft corrupted [ 1009.211243][T31084] ntfs3: loop1: Failed to load $MFT. [ 1009.633987][T31110] x_tables: unsorted underflow at hook 4 [ 1009.655326][T31112] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Q�öì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|�Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 31112 comm: syz.2.12553) [ 1009.716225][ T27] audit: type=1800 audit(1700525530.695:230): pid=31112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.12553" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=113972 res=0 errno=0 [ 1010.024242][T31131] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1010.182329][T31141] ecryptfs_parse_options: eCryptfs: unrecognized option [ecry/²áº_cipher=aes] [ 1010.280333][T31147] netlink: 'syz.2.12568': attribute type 11 has an invalid length. [ 1010.300555][T31147] netlink: 'syz.2.12568': attribute type 4 has an invalid length. [ 1010.471967][T31141] Could not find key with description: [syz ] [ 1010.485925][T31153] loop1: detected capacity change from 0 to 4096 [ 1010.489390][T31141] process_request_key_err: No key [ 1010.500159][T31141] Could not find valid key in user session keyring for sig specified in mount option: [syz ] [ 1010.500635][T31153] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1010.517341][T31141] One or more global auth toks could not properly register; rc = [-2] [ 1010.531311][T31141] Error parsing options; rc = [-2] [ 1010.566375][T31153] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1010.601082][T31153] UBIFS error (pid: 31153): cannot open "./file0", error -22 [ 1010.742469][ T9191] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1010.838884][T31169] netlink: 'syz.4.12577': attribute type 3 has an invalid length. [ 1010.956334][ T9191] usb 4-1: Using ep0 maxpacket: 32 [ 1010.963495][ T9191] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1010.982030][T31135] ceph: No mds server is up or the cluster is laggy [ 1010.997985][ T9191] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1011.013274][ T9191] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1011.041231][ T9191] usb 4-1: config 1 has no interface number 0 [ 1011.048556][ T9191] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1011.063843][ T9191] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1011.074526][ T9191] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1011.102461][ T9191] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1011.111866][ T9191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.182456][ T9191] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1011.245863][T31184] loop2: detected capacity change from 0 to 128 [ 1011.331600][T31184] FAT-fs (loop2): Directory bread(block 32) failed [ 1011.362921][T31184] FAT-fs (loop2): Directory bread(block 33) failed [ 1011.391236][T31184] FAT-fs (loop2): Directory bread(block 34) failed [ 1011.401055][ T9191] snd_usb_pod 4-1:1.1: cannot start listening: -90 [ 1011.416588][ T9191] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1011.434364][T31184] FAT-fs (loop2): Directory bread(block 35) failed [ 1011.441667][ T9191] snd_usb_pod: probe of 4-1:1.1 failed with error -90 [ 1011.490471][T31184] FAT-fs (loop2): Directory bread(block 36) failed [ 1011.523294][T31184] FAT-fs (loop2): Directory bread(block 37) failed [ 1011.549252][T31184] FAT-fs (loop2): Directory bread(block 38) failed [ 1011.565865][T31184] FAT-fs (loop2): Directory bread(block 39) failed [ 1011.576993][T31184] FAT-fs (loop2): Directory bread(block 40) failed [ 1011.594457][T31184] FAT-fs (loop2): Directory bread(block 41) failed [ 1011.647835][ T9191] usb 4-1: USB disconnect, device number 28 [ 1011.772777][T31184] FAT-fs (loop2): Filesystem has been set read-only [ 1011.787830][T31204] UBIFS error (pid: 31204): cannot open "usb0", error -22 [ 1012.024072][T31214] overlayfs: missing 'lowerdir' [ 1012.142473][T31219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12602'. [ 1012.191425][T31219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12602'. [ 1012.904551][T31264] loop3: detected capacity change from 0 to 64 [ 1012.949483][T31267] loop4: detected capacity change from 0 to 512 [ 1012.992979][T13981] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1013.003333][T31267] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1013.028469][T31267] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1013.044085][T31267] System zones: 0-1, 15-15, 18-18, 34-34 [ 1013.050965][T31267] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1013.058199][T31267] Quota error (device loop4): v2_read_file_info: Number of blocks too big for quota file size (6144 > 1792). [ 1013.073092][T31267] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1013.088263][T31267] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 1013.096184][T31267] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.12625: bad orphan inode 16 [ 1013.112835][T31267] ext4_test_bit(bit=15, block=18) = 1 [ 1013.118635][T31267] is_bad_inode(inode)=0 [ 1013.122802][T31267] NEXT_ORPHAN(inode)=0 [ 1013.127048][T31267] max_ino=32 [ 1013.130904][T31267] i_nlink=2 [ 1013.134188][T31267] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1013.153116][T31267] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 1013.183502][ T5009] EXT4-fs (loop4): unmounting filesystem. [ 1013.395777][T31282] netlink: 'syz.1.12631': attribute type 10 has an invalid length. [ 1013.414696][T31282] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12631'. [ 1013.432111][T31282] device team0 entered promiscuous mode [ 1013.449406][T31282] device team_slave_0 entered promiscuous mode [ 1013.464817][T31282] device team_slave_1 entered promiscuous mode [ 1013.485165][T31282] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1013.608290][T31290] netlink: 'syz.4.12637': attribute type 15 has an invalid length. [ 1013.643569][ T5015] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1013.856370][ T5015] usb 1-1: Using ep0 maxpacket: 16 [ 1013.864495][ T5015] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 1013.883212][ T5015] usb 1-1: config 252 has no interface number 0 [ 1013.916019][ T5015] usb 1-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 16384, setting to 64 [ 1013.953890][ T5015] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1013.979357][ T5015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.998439][ T5015] usb 1-1: Product: syz [ 1014.002658][ T5015] usb 1-1: Manufacturer: syz [ 1014.021950][ T5015] usb 1-1: SerialNumber: syz [ 1014.062107][ T5015] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1014.250039][T31288] loop2: detected capacity change from 0 to 32768 [ 1014.269788][ T5080] usb 1-1: Failed to submit usb control message: -71 [ 1014.277695][ T4982] usb 1-1: USB disconnect, device number 22 [ 1014.285600][ T5080] usb 1-1: unable to send the bmi data to the device: -71 [ 1014.293298][ T5080] usb 1-1: unable to get target info from device [ 1014.312435][T31288] ea_get: invalid extended attribute [ 1014.321466][ T5080] usb 1-1: could not get target info (-71) [ 1014.327866][T31288] ffff888062257230: 04 00 00 00 .... [ 1014.352512][ T5080] usb 1-1: could not probe fw (-71) [ 1014.570996][T31326] netlink: 340 bytes leftover after parsing attributes in process `syz.2.12653'. [ 1014.998012][T31349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12665'. [ 1015.157937][T31347] loop0: detected capacity change from 0 to 4096 [ 1015.159944][T31355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12668'. [ 1015.272460][T31359] PKCS8: Unsupported PKCS#8 version [ 1015.287428][T31347] ntfs3: loop0: ino=5, "/" directory corrupted [ 1015.560138][T31364] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1015.638766][T31374] netlink: 'syz.2.12676': attribute type 11 has an invalid length. [ 1015.691458][T31374] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12676'. [ 1015.784706][T31382] netlink: 136 bytes leftover after parsing attributes in process `syz.0.12679'. [ 1015.799110][T31382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12679'. [ 1015.816773][T31382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12679'. [ 1016.427749][T31414] sctp: [Deprecated]: syz.2.12698 (pid 31414) Use of int in maxseg socket option. [ 1016.427749][T31414] Use struct sctp_assoc_value instead [ 1016.603251][T31424] loop0: detected capacity change from 0 to 64 [ 1016.622365][T31426] xt_connbytes: Forcing CT accounting to be enabled [ 1016.827223][T31432] loop2: detected capacity change from 0 to 2048 [ 1016.886972][T31439] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1016.917339][T31432] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1017.075526][T31432] Remounting filesystem read-only [ 1017.428925][T31461] loop4: detected capacity change from 0 to 64 [ 1017.665715][T31475] __nla_validate_parse: 3 callbacks suppressed [ 1017.665731][T31475] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12726'. [ 1017.738259][T31475] netlink: 7 bytes leftover after parsing attributes in process `syz.2.12726'. [ 1017.986637][T31491] loop3: detected capacity change from 0 to 128 [ 1018.109576][T13981] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1018.326406][T31503] loop3: detected capacity change from 0 to 256 [ 1018.341485][T13981] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1018.353852][T31506] loop1: detected capacity change from 0 to 128 [ 1018.361187][T13981] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1018.372196][T31506] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1018.409864][T31509] netlink: 'syz.4.12744': attribute type 9 has an invalid length. [ 1018.423165][T31506] hpfs: filesystem error: improperly stopped [ 1018.435926][T13981] Buffer I/O error on dev loop3, logical block 0, async page read [ 1018.442626][T31506] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1018.451734][T31509] netlink: 'syz.4.12744': attribute type 7 has an invalid length. [ 1018.490416][T31506] hpfs: You really don't want any checks? You are crazy... [ 1018.519370][T31509] netlink: 'syz.4.12744': attribute type 8 has an invalid length. [ 1018.527573][T31506] hpfs: Code page index out of array [ 1018.541152][T31506] hpfs: code page support is disabled [ 1018.551959][T31506] hpfs: hpfs_map_4sectors(): unaligned read [ 1018.557956][T31506] hpfs: hpfs_map_4sectors(): unaligned read [ 1018.597166][T31506] hpfs: filesystem error: unable to find root dir [ 1018.658138][T31506] hpfs: hpfs_map_sector(): read error [ 1018.760246][T31519] loop4: detected capacity change from 0 to 256 [ 1018.936545][ T9186] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1018.980347][T31528] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1019.186267][ T9186] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1019.215087][ T9186] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.248830][ T9186] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1019.271819][ T9186] usb 1-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice= 0.40 [ 1019.284226][ T9186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.321603][ T9186] usb 1-1: Product: syz [ 1019.325857][ T9186] usb 1-1: Manufacturer: syz [ 1019.330769][ T9186] usb 1-1: SerialNumber: syz [ 1019.582963][T20091] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 1019.625646][ T9186] vmk80xx 1-1:1.0: driver 'vmk80xx' failed to auto-configure device. [ 1019.660171][ T9186] usb 1-1: USB disconnect, device number 23 [ 1019.769579][T31567] netlink: 'syz.1.12772': attribute type 2 has an invalid length. [ 1019.777628][ T5007] Bluetooth: hci0: command 0x0401 tx timeout [ 1019.783772][T31567] netlink: 'syz.1.12772': attribute type 11 has an invalid length. [ 1019.799892][T20091] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1019.813842][T31567] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12772'. [ 1019.815651][T20091] usb 4-1: not running at top speed; connect to a high speed hub [ 1019.896502][T20091] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.914713][T20091] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1019.964633][T20091] usb 4-1: string descriptor 0 read error: -22 [ 1019.978252][T20091] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 1019.995694][T20091] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.247981][T20091] snd-usb-6fire 4-1:2.0: unknown device firmware state received from device: [ 1020.262335][T20091] eb 2e 87 4b 9a 05 e6 5e [ 1020.269015][T20091] snd-usb-6fire: probe of 4-1:2.0 failed with error -5 [ 1020.390382][T31584] loop2: detected capacity change from 0 to 2048 [ 1020.469070][T31584] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1020.481690][ T4982] usb 4-1: USB disconnect, device number 29 [ 1020.892722][T31602] netlink: 348 bytes leftover after parsing attributes in process `syz.2.12790'. [ 1021.399553][T31612] loop3: detected capacity change from 0 to 256 [ 1021.795399][T31622] loop0: detected capacity change from 0 to 64 [ 1021.818418][T31622] hfs: unable to locate alternate MDB [ 1021.833300][T31622] hfs: continuing without an alternate MDB [ 1021.940554][T31624] loop3: detected capacity change from 0 to 256 [ 1021.972279][T31624] exfat: Deprecated parameter 'utf8' [ 1021.978463][T31624] exfat: Deprecated parameter 'namecase' [ 1021.984345][T31624] /dev/loop3: Can't open blockdev [ 1022.127426][T31570] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.137485][T31570] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.148665][T31570] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.188629][T31570] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.284251][T31635] program syz.3.12805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1022.294827][T31635] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1022.644686][T31647] netlink: 'syz.2.12812': attribute type 21 has an invalid length. [ 1022.677196][T31647] netlink: 120 bytes leftover after parsing attributes in process `syz.2.12812'. [ 1022.708192][T31647] netlink: 'syz.2.12812': attribute type 1 has an invalid length. [ 1022.722104][T31647] netlink: 9 bytes leftover after parsing attributes in process `syz.2.12812'. [ 1022.899781][T20393] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1022.939928][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1022.946288][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1023.136468][T20393] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1023.159659][T20393] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.178056][T20393] usb 5-1: Product: syz [ 1023.189941][T20393] usb 5-1: Manufacturer: syz [ 1023.215817][T31673] loop1: detected capacity change from 0 to 256 [ 1023.222202][T20393] usb 5-1: SerialNumber: syz [ 1023.230073][T31675] x_tables: duplicate entry at hook 2 [ 1023.236756][T20393] r8152-cfgselector 5-1: config 0 descriptor?? [ 1023.284706][T31677] ERROR: device name not specified. [ 1023.472958][T20393] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 1023.622862][T31692] No such timeout policy "syz1" [ 1023.706257][T20393] usb 5-1: USB disconnect, device number 31 [ 1023.887655][T31706] netlink: 'syz.1.12841': attribute type 1 has an invalid length. [ 1023.927070][T31706] netlink: 908 bytes leftover after parsing attributes in process `syz.1.12841'. [ 1023.954274][T31706] nbd: must specify at least one socket [ 1024.011511][T31712] comedi comedi0: aio_iiro_16: a I/O base address must be specified [ 1024.168288][T31722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12847'. [ 1024.340071][T31726] loop0: detected capacity change from 0 to 2048 [ 1024.413925][T31726] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1024.482606][ T4998] EXT4-fs (loop0): unmounting filesystem. [ 1025.162300][T31774] loop0: detected capacity change from 0 to 8 [ 1025.330539][T31783] netlink: 'syz.2.12875': attribute type 2 has an invalid length. [ 1025.339920][T31783] netlink: 'syz.2.12875': attribute type 4 has an invalid length. [ 1025.349375][T31783] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12875'. [ 1025.636882][T31791] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.646044][T31799] No such timeout policy "syz1" [ 1025.810955][T31805] netlink: 'syz.0.12887': attribute type 1 has an invalid length. [ 1025.872486][T31805] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.12887'. [ 1025.937071][T31810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12889'. [ 1025.962122][T31810] netlink: 'syz.1.12889': attribute type 8 has an invalid length. [ 1026.075789][T31817] loop3: detected capacity change from 0 to 64 [ 1026.150958][T13981] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1026.380150][T31832] netlink: 'syz.0.12898': attribute type 5 has an invalid length. [ 1026.422967][T31832] device ip6erspan0 entered promiscuous mode [ 1027.023934][ T4982] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1027.098309][T31868] loop4: detected capacity change from 0 to 256 [ 1027.148165][T31868] exfat: Deprecated parameter 'utf8' [ 1027.163519][T31868] exfat: Deprecated parameter 'namecase' [ 1027.239297][T31868] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1027.251900][ T4982] usb 3-1: Using ep0 maxpacket: 16 [ 1027.261982][ T4982] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 1027.284152][ T4982] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1027.318703][ T4982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.350672][ T4982] usb 3-1: Product: syz [ 1027.354951][ T4982] usb 3-1: Manufacturer: syz [ 1027.400177][ T4982] usb 3-1: SerialNumber: syz [ 1027.410568][ T4982] r8152-cfgselector 3-1: config 0 descriptor?? [ 1027.445077][T31880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12917'. [ 1027.475160][T31882] CIFS: bad ip= option (::.) [ 1027.650672][T31888] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12921'. [ 1027.680291][T31888] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12921'. [ 1027.719849][T31888] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12921'. [ 1027.851881][ T4982] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1027.882844][ T4982] r8152-cfgselector 3-1: USB disconnect, device number 9 [ 1027.947122][T31900] loop1: detected capacity change from 0 to 256 [ 1028.201247][T31907] netlink: 184 bytes leftover after parsing attributes in process `syz.0.12929'. [ 1028.379043][T31914] loop1: detected capacity change from 0 to 256 [ 1028.458920][T31914] exfat: Deprecated parameter 'utf8' [ 1028.488050][T31917] xt_socket: unknown flags 0x4c [ 1028.521743][T31914] exfat: Deprecated parameter 'namecase' [ 1028.581484][T31914] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1029.624866][T31961] loop1: detected capacity change from 0 to 4096 [ 1029.769220][T31972] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1029.830501][T31961] NILFS (loop1): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 1029.855734][T31974] x_tables: duplicate underflow at hook 1 [ 1030.126295][T31983] netlink: 'syz.2.12959': attribute type 1 has an invalid length. [ 1030.166511][T31983] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.12959'. [ 1030.447028][ T5015] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1030.650400][ T5015] usb 2-1: Using ep0 maxpacket: 8 [ 1030.659372][ T5015] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1030.704557][ T5015] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1030.747448][ T5015] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1030.766067][ T5015] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.775612][T32012] netlink: 'syz.2.12972': attribute type 3 has an invalid length. [ 1030.784900][ T5015] usb 2-1: Product: syz [ 1030.789546][T32015] netlink: 68 bytes leftover after parsing attributes in process `syz.3.12973'. [ 1030.798721][ T5015] usb 2-1: Manufacturer: syz [ 1030.809201][T32012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12972'. [ 1030.829695][T32012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12972'. [ 1030.841196][ T5015] usb 2-1: SerialNumber: syz [ 1030.847221][T32015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12973'. [ 1030.857258][ T5015] usb 2-1: config 0 descriptor?? [ 1030.858323][T32017] netlink: 'syz.4.12974': attribute type 5 has an invalid length. [ 1030.886121][T32019] loop0: detected capacity change from 0 to 64 [ 1030.912986][T32017] device ip6erspan0 entered promiscuous mode [ 1030.985142][T32021] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1031.080574][T20077] usb 2-1: USB disconnect, device number 33 [ 1031.115110][T32025] x_tables: unsorted entry at hook 4 [ 1031.373452][T32039] loop3: detected capacity change from 0 to 64 [ 1031.613235][T20091] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1031.817930][T20091] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1031.827470][T20091] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.839873][T32061] can0: slcan on ttyS3. [ 1031.855786][T20091] usb 3-1: config 220 has no interface number 2 [ 1031.891685][T20091] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1031.917738][T20091] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1031.934249][T20091] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1031.941167][T20091] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1031.967646][T20091] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1031.988476][T32060] can0 (unregistered): slcan off ttyS3. [ 1032.011652][T20091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.030213][T20091] usb 3-1: Product: syz [ 1032.034437][T20091] usb 3-1: Manufacturer: syz [ 1032.039052][T20091] usb 3-1: SerialNumber: syz [ 1032.275178][T32077] loop4: detected capacity change from 0 to 2048 [ 1032.321044][T32077] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1032.335172][T20091] usb 3-1: selecting invalid altsetting 0 [ 1032.353610][T20091] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1032.360006][T20091] usb 3-1: No valid video chain found. [ 1032.451014][T20091] usb 3-1: selecting invalid altsetting 0 [ 1032.456808][T20091] usbtest: probe of 3-1:220.1 failed with error -22 [ 1032.518099][T20091] usb 3-1: USB disconnect, device number 10 [ 1032.967282][T32106] loop3: detected capacity change from 0 to 512 [ 1032.990207][T32106] /dev/loop3: Can't open blockdev [ 1033.760925][ T27] audit: type=1326 audit(1700525553.158:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32147 comm="syz.1.13032" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa72f9e159 code=0x7ffc0000 [ 1033.785144][ C0] vkms_vblank_simulate: vblank timer overrun [ 1033.863805][ T27] audit: type=1326 audit(1700525553.158:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32147 comm="syz.1.13032" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa72f9e159 code=0x7ffc0000 [ 1033.929539][T32154] loop3: detected capacity change from 0 to 512 [ 1033.975543][T32154] /dev/loop3: Can't open blockdev [ 1033.984745][ T27] audit: type=1326 audit(1700525553.158:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32147 comm="syz.1.13032" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa72f9e159 code=0x7ffc0000 [ 1034.079982][ T27] audit: type=1326 audit(1700525553.158:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32147 comm="syz.1.13032" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa72f9e159 code=0x7ffc0000 [ 1034.104224][ C0] vkms_vblank_simulate: vblank timer overrun [ 1034.223585][ T27] audit: type=1326 audit(1700525553.158:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32147 comm="syz.1.13032" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7faa72f9e159 code=0x7ffc0000 [ 1034.247703][ C0] vkms_vblank_simulate: vblank timer overrun [ 1034.299198][T32169] loop0: detected capacity change from 0 to 1024 [ 1034.331240][T32169] EXT4-fs: inline encryption not supported [ 1034.341692][ T27] audit: type=1326 audit(1700525553.158:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32147 comm="syz.1.13032" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa72f9e159 code=0x7ffc0000 [ 1034.426660][T32169] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 1034.446207][T32169] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1034.491979][T32169] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.13040: Failed to acquire dquot type 0 [ 1034.508470][ T27] audit: type=1326 audit(1700525553.158:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32147 comm="syz.1.13032" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa72f9e159 code=0x7ffc0000 [ 1034.532701][ C0] vkms_vblank_simulate: vblank timer overrun [ 1034.575383][T32169] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 1034.625459][ T27] audit: type=1326 audit(1700525553.158:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32147 comm="syz.1.13032" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faa72f9e159 code=0x7ffc0000 [ 1034.661586][T32169] EXT4-fs (loop0): 1 truncate cleaned up [ 1034.684311][T32169] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1034.836453][ T4998] EXT4-fs (loop0): unmounting filesystem. [ 1035.705987][T32232] loop4: detected capacity change from 0 to 256 [ 1035.714271][T32230] Process accounting paused [ 1036.074092][ T9186] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1036.282993][ T9186] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.306268][ T9186] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1036.326549][ T9186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.334927][ T9186] usb 4-1: Product: syz [ 1036.345579][ T9186] usb 4-1: Manufacturer: syz [ 1036.352254][ T9186] usb 4-1: SerialNumber: syz [ 1036.573197][T32247] loop4: detected capacity change from 0 to 32768 [ 1036.610505][T32247] jfs_extendfs: invalid size [ 1036.645179][T32201] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.654720][T32201] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.663913][T32201] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.673207][T32201] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.812962][ T9186] snd-usb-6fire 4-1:1.0: can't set first interface. [ 1036.819613][ T9186] snd-usb-6fire: probe of 4-1:1.0 failed with error -5 [ 1036.856816][ T9186] usb 4-1: USB disconnect, device number 30 [ 1037.014192][T32215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13058'. [ 1037.034547][T32215] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13058'. [ 1037.080167][T32237] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 1037.411215][T20077] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1037.432576][T32272] netlink: 124 bytes leftover after parsing attributes in process `syz.2.13083'. [ 1037.504889][T32274] device bond4 entered promiscuous mode [ 1037.513632][T32274] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1037.585623][T32278] netlink: 'syz.3.13088': attribute type 1 has an invalid length. [ 1037.593712][T32278] netlink: 216 bytes leftover after parsing attributes in process `syz.3.13088'. [ 1037.603608][T32278] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13088'. [ 1037.614359][T20077] usb 5-1: Using ep0 maxpacket: 8 [ 1037.621014][T20077] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1037.640090][T20077] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.660167][T20077] usb 5-1: config 0 has no interface number 0 [ 1037.679571][T20077] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1037.697643][T20077] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.716930][T20077] usb 5-1: Product: syz [ 1037.731274][T20077] usb 5-1: Manufacturer: syz [ 1037.736017][T20077] usb 5-1: SerialNumber: syz [ 1037.774792][T20077] usb 5-1: config 0 descriptor?? [ 1037.973456][T32297] loop0: detected capacity change from 0 to 16 [ 1037.999103][T20077] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 1038.006819][T32297] erofs: (device loop0): mounted with root inode @ nid 36. [ 1038.017996][T20077] usb 5-1: No valid video chain found. [ 1038.060457][T32297] syz.0.13095: attempt to access beyond end of device [ 1038.060457][T32297] loop0: rw=0, sector=15300821024, nr_sectors = 8 limit=16 [ 1038.106532][ T5015] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1038.106633][T32297] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 1038.250269][ T4982] usb 5-1: USB disconnect, device number 32 [ 1038.331154][ T5015] usb 2-1: Using ep0 maxpacket: 16 [ 1038.338301][ T5015] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1038.362167][ T5015] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1038.397975][ T5015] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.427668][ T5015] usb 2-1: Product: syz [ 1038.438736][ T5015] usb 2-1: Manufacturer: syz [ 1038.454259][ T5015] usb 2-1: SerialNumber: syz [ 1038.471827][ T5015] r8152-cfgselector 2-1: config 0 descriptor?? [ 1038.573132][T32318] qrtr: Invalid version 0 [ 1038.712752][ T5015] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 1038.754977][T32328] netlink: 'syz.3.13108': attribute type 2 has an invalid length. [ 1038.936844][ T5015] usb 2-1: USB disconnect, device number 34 [ 1039.331232][T32358] netlink: 'syz.0.13119': attribute type 1 has an invalid length. [ 1039.348084][T32358] netlink: 220 bytes leftover after parsing attributes in process `syz.0.13119'. [ 1039.391447][T32358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13119'. [ 1039.819866][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1039.851503][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1040.119524][T32388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13133'. [ 1040.165271][T32388] netlink: 108 bytes leftover after parsing attributes in process `syz.2.13133'. [ 1040.192430][T32390] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 5 out of range (51000000..2150000000) [ 1040.207452][T32388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13133'. [ 1040.236159][T32361] loop3: detected capacity change from 0 to 32768 [ 1040.575677][T32407] loop4: detected capacity change from 0 to 2048 [ 1040.685497][T32413] loop3: detected capacity change from 0 to 256 [ 1041.320650][ T9186] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1041.459790][T32443] device vlan0 entered promiscuous mode [ 1041.513622][T32421] loop4: detected capacity change from 0 to 32768 [ 1041.533467][ T9186] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 1041.546208][ T9186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.558553][T32421] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 1041.575498][ T9186] usb 1-1: Product: syz [ 1041.592919][ T9186] usb 1-1: Manufacturer: syz [ 1041.603732][ T9186] usb 1-1: SerialNumber: syz [ 1041.773320][T13981] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 1041.807869][ T9186] usb 1-1: reset high-speed USB device number 24 using dummy_hcd [ 1042.061765][ T9186] usb 1-1: driver API: 1.9.9 2016-02-15 [1-1] [ 1042.088965][ T9186] usb 1-1: firmware API: 1.9.6 2012-07-07 [ 1042.370319][T32479] syz.4.13175: attempt to access beyond end of device [ 1042.370319][T32479] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1042.389356][ C0] usb 1-1: received invalid command response:got -4, instead of 0 [ 1042.397370][ C0] usb 1-1: restart device (9) [ 1042.754488][ T9192] usb 1-1: USB disconnect, device number 24 [ 1042.761354][ C0] device 1-1 is not registered [ 1042.972476][T32502] loop1: detected capacity change from 0 to 2048 [ 1043.027597][T32502] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1043.081668][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1043.081682][ T27] audit: type=1800 audit(1700525561.880:243): pid=32502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13184" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 1043.220946][ T9186] usb 1-1: firmware upload failed (-110). [ 1043.322432][T32519] futex_wake_op: syz.3.13192 tries to shift op by 32; fix this program [ 1043.384725][T32521] xt_nfacct: accounting object `syz0' does not exist [ 1044.428919][ T9192] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1044.622113][ T9186] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1044.642727][ T9192] usb 2-1: Using ep0 maxpacket: 8 [ 1044.649705][ T9192] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 1044.684694][ T9192] usb 2-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 1044.707995][ T9192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.728795][ T9192] usb 2-1: Product: syz [ 1044.742924][ T9192] usb 2-1: Manufacturer: syz [ 1044.751307][ T9192] usb 2-1: SerialNumber: syz [ 1044.776775][T32594] x_tables: unsorted entry at hook 2 [ 1044.826305][ T9186] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 1044.839395][ T9186] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.864875][ T9186] usb 4-1: config 0 has no interface number 0 [ 1044.879521][ T9186] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1044.905930][T32599] nftables ruleset with unbound chain [ 1044.916516][ T9186] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1044.932752][ T9186] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1044.949639][ T9186] usb 4-1: config 0 interface 52 has no altsetting 0 [ 1044.982669][ T9186] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1044.999513][ T9186] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 1045.008027][ T9186] usb 4-1: Product: syz [ 1045.012385][ T9186] usb 4-1: Manufacturer: syz [ 1045.018440][ T9186] usb 4-1: SerialNumber: syz [ 1045.026204][ T9186] usb 4-1: config 0 descriptor?? [ 1045.196130][ T9192] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1045.207532][ T9192] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1045.260068][ T9186] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1045.287275][ T9192] usb 2-1: USB disconnect, device number 35 [ 1045.305674][ T9186] synaptics_usb: probe of 4-1:0.52 failed with error -5 [ 1045.436011][T32619] --map-set only usable from mangle table [ 1045.459258][T32621] loop2: detected capacity change from 0 to 256 [ 1045.543715][ T9186] usb 4-1: USB disconnect, device number 31 [ 1045.552720][T13981] udevd[13981]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1046.245094][T32659] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 1046.258124][T20077] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 1046.489090][T20077] usb 5-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 1046.514749][T20077] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1046.514783][ T9192] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1046.542428][T20077] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 1046.570251][T20077] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1046.582534][T20077] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.599138][T32645] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1046.760750][ T9192] usb 3-1: Using ep0 maxpacket: 32 [ 1046.767664][ T9192] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1046.814322][ T9192] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1046.824141][ T9192] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1046.858910][ T9192] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1046.870035][T32689] __nla_validate_parse: 1 callbacks suppressed [ 1046.870051][T32689] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13266'. [ 1046.875894][T20077] usb 5-1: string descriptor 0 read error: -71 [ 1046.876818][ T9192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.932949][T20077] usb 5-1: USB disconnect, device number 33 [ 1046.934060][ T9192] usb 3-1: Product: syz [ 1046.966827][ T9192] usb 3-1: Manufacturer: syz [ 1046.971700][ T9192] usb 3-1: SerialNumber: syz [ 1046.997089][ T9192] usb 3-1: config 0 descriptor?? [ 1047.216075][T13981] udevd[13981]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1047.266323][T32705] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13274'. [ 1047.464185][ T9192] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 1047.475607][ T9192] gs_usb: probe of 3-1:0.0 failed with error -71 [ 1047.526471][ T9192] usb 3-1: USB disconnect, device number 11 [ 1048.020567][T32734] loop4: detected capacity change from 0 to 2048 [ 1048.045707][T32734] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1048.087621][T20091] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1048.279962][T20091] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1048.370713][T32728] loop3: detected capacity change from 0 to 32768 [ 1048.400167][T32724] loop0: detected capacity change from 0 to 32768 [ 1048.413202][T32724] [ 1048.413202][T32724] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1048.413202][T32724] [ 1048.439418][T32724] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 1048.439418][T32724] [ 1048.487295][ T5389] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1048.660351][ T63] [ 1048.660351][ T63] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1048.660351][ T63] [ 1048.701941][ T63] [ 1048.701941][ T63] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1048.701941][ T63] [ 1048.751914][ T108] [ 1048.751914][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1048.751914][ T108] [ 1048.787573][ T4998] [ 1048.787573][ T4998] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1048.787573][ T4998] [ 1048.817390][ T4998] [ 1048.817390][ T4998] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1048.817390][ T4998] [ 1048.872780][T32750] loop1: detected capacity change from 0 to 4096 [ 1048.926084][T32750] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1049.034781][T32750] ntfs3: loop1: failed to convert "c46c" to maccroatian [ 1049.097850][T32758] cgroup: none used incorrectly [ 1050.321792][T32748] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.331228][T32748] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.340716][T32748] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.349814][T32748] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.488926][ T338] nfs: Deprecated parameter 'nointr' [ 1050.701448][T20077] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1050.768636][ T309] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1050.794667][ T318] netlink: 'syz.0.13315': attribute type 10 has an invalid length. [ 1051.011197][ T356] netlink: 'syz.3.13329': attribute type 10 has an invalid length. [ 1051.052981][ T356] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13329'. [ 1051.080527][ T356] netlink: 'syz.3.13329': attribute type 10 has an invalid length. [ 1051.136766][ T356] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13329'. [ 1051.193384][ T364] netlink: 'syz.4.13333': attribute type 10 has an invalid length. [ 1051.221981][ T364] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13333'. [ 1051.233075][ T364] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1051.494502][ T377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13337'. [ 1051.538882][ T377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13337'. [ 1051.617276][ T377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13337'. [ 1051.789131][T20077] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1051.798062][T20077] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1051.873893][ T358] loop0: detected capacity change from 0 to 32768 [ 1051.947560][ T358] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1051.970571][ T358] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1051.991862][T20077] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1052.010202][ T358] BTRFS info (device loop0): using free space tree [ 1052.218719][ T358] BTRFS info (device loop0): enabling ssd optimizations [ 1052.296961][ T424] overlayfs: conflicting options: userxattr,metacopy=on [ 1052.467529][ T4998] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1053.249367][ T27] audit: type=1400 audit(1700525571.378:244): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A950D02494F07333A pid=463 comm="syz.1.13366" [ 1054.820121][ T541] syz.2.13401: attempt to access beyond end of device [ 1054.820121][ T541] mtdblock2: rw=2048, sector=288230376151715400, nr_sectors = 8 limit=255 [ 1054.933774][T20091] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1055.072158][ T549] nvme_fabrics: missing parameter 'nqn=%s' [ 1055.138610][T20091] usb 5-1: config index 0 descriptor too short (expected 897, got 27) [ 1055.152928][T20091] usb 5-1: config 2 has an invalid interface number: 1 but max is -1 [ 1055.170877][ T562] loop0: detected capacity change from 0 to 64 [ 1055.184188][T20091] usb 5-1: config 2 has an invalid interface number: 1 but max is -1 [ 1055.229446][T20091] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 0 [ 1055.243760][T20091] usb 5-1: config 2 has no interface number 0 [ 1055.278071][T20091] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=20.da [ 1055.313021][T20091] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.328564][T20091] usb 5-1: Product: syz [ 1055.338544][T20091] usb 5-1: Manufacturer: syz [ 1055.350882][T20091] usb 5-1: SerialNumber: syz [ 1055.539103][ T576] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1055.585761][T20091] cdc_ncm 5-1:2.1: CDC Union missing and no IAD found [ 1055.615414][T20091] cdc_ncm 5-1:2.1: bind() failure [ 1055.632206][T20091] usb 5-1: no audio or video endpoints found [ 1055.681669][T20091] usb 5-1: USB disconnect, device number 34 [ 1055.727365][ T27] audit: type=1326 audit(1700525573.705:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=581 comm="syz.2.13421" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d819e159 code=0x7ffc0000 [ 1055.778914][ T27] audit: type=1326 audit(1700525573.733:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=581 comm="syz.2.13421" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff7d815e98e code=0x7ffc0000 [ 1055.845139][ T27] audit: type=1326 audit(1700525573.733:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=581 comm="syz.2.13421" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d819e159 code=0x7ffc0000 [ 1056.017093][ T596] loop0: detected capacity change from 0 to 164 [ 1056.077365][ T596] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1056.122382][ T600] loop2: detected capacity change from 0 to 16 [ 1056.184132][ T600] erofs: (device loop2): mounted with root inode @ nid 36. [ 1056.409973][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1056.508518][ T612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13437'. [ 1056.518509][ T27] audit: type=1326 audit(1700525574.444:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=613 comm="syz.2.13436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d819e159 code=0x7ffc0000 [ 1056.638607][ T27] audit: type=1326 audit(1700525574.444:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=613 comm="syz.2.13436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d819e159 code=0x7ffc0000 [ 1056.752395][ T27] audit: type=1326 audit(1700525574.463:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=613 comm="syz.2.13436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7ff7d819e159 code=0x7ffc0000 [ 1056.827042][ T27] audit: type=1326 audit(1700525574.463:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=613 comm="syz.2.13436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d819e159 code=0x7ffc0000 [ 1056.919352][ T27] audit: type=1326 audit(1700525574.463:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=613 comm="syz.2.13436" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d819e159 code=0x7ffc0000 [ 1056.921865][ T626] nvme nvme0: rdma_resolve_addr failed (-19). [ 1057.165350][ T639] netlink: 124 bytes leftover after parsing attributes in process `syz.4.13449'. [ 1057.223738][ T639] netlink: 'syz.4.13449': attribute type 3 has an invalid length. [ 1057.287108][T20095] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1057.315495][ T647] netlink: 'syz.0.13453': attribute type 4 has an invalid length. [ 1057.351013][ T647] netlink: 220 bytes leftover after parsing attributes in process `syz.0.13453'. [ 1057.490250][T20095] usb 4-1: Using ep0 maxpacket: 16 [ 1057.507807][T20095] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1057.521029][ T655] loop2: detected capacity change from 0 to 256 [ 1057.538982][T20095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.559271][T20095] usb 4-1: Product: syz [ 1057.563579][T20095] usb 4-1: Manufacturer: syz [ 1057.576502][T20095] usb 4-1: SerialNumber: syz [ 1057.585490][T20095] r8152-cfgselector 4-1: config 0 descriptor?? [ 1057.817351][T20095] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 1058.009748][ T673] loop0: detected capacity change from 0 to 128 [ 1058.056249][T20095] usb 4-1: USB disconnect, device number 32 [ 1058.066146][ T673] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 1058.988714][ T707] syz.0.13483: attempt to access beyond end of device [ 1058.988714][ T707] mtdblock2: rw=2048, sector=288230376151715400, nr_sectors = 8 limit=255 [ 1059.480278][ T660] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.493768][ T660] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.503021][ T660] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.695693][ T666] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1059.723989][ T697] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13478'. [ 1060.068087][ T724] loop2: detected capacity change from 0 to 8192 [ 1060.100000][ T724] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1060.183108][ T724] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 1046) [ 1060.223153][ T724] FAT-fs (loop2): Filesystem has been set read-only [ 1060.373404][ T4995] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 1046) [ 1060.622216][ T757] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13509'. [ 1061.190170][ T794] sg_write: data in/out 8454107/16 bytes for SCSI command 0xf0-- guessing data in; [ 1061.190170][ T794] program syz.4.13524 not setting count and/or reply_len properly [ 1061.449435][ T5016] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1061.663261][ T5016] usb 3-1: Using ep0 maxpacket: 16 [ 1061.670179][ T5016] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1061.703655][ T5016] usb 3-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 1061.727755][ T5016] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1061.761433][ T5016] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1061.799049][ T5016] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1061.825248][ T824] syz.4.13539: attempt to access beyond end of device [ 1061.825248][ T824] mtdblock2: rw=2048, sector=288230376151715400, nr_sectors = 8 limit=255 [ 1061.826233][ T5016] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.885246][ T5016] usb 3-1: Product: syz [ 1061.889960][ T5016] usb 3-1: Manufacturer: syz [ 1061.894575][ T5016] usb 3-1: SerialNumber: syz [ 1061.921943][ T5016] usb 3-1: config 0 descriptor?? [ 1061.929891][ T790] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1061.954047][ T5016] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1062.087069][ T27] audit: type=1326 audit(1700525579.641:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=836 comm="syz.3.13545" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3fd9e159 code=0x7ffc0000 [ 1062.129680][ T27] audit: type=1326 audit(1700525579.669:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=836 comm="syz.3.13545" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3fd9e159 code=0x7ffc0000 [ 1062.191163][ T27] audit: type=1326 audit(1700525579.669:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=836 comm="syz.3.13545" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3e3fd5e98e code=0x7ffc0000 [ 1062.207835][ T9186] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1062.270584][ T27] audit: type=1326 audit(1700525579.669:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=836 comm="syz.3.13545" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3fd9e159 code=0x7ffc0000 [ 1062.345712][ T844] IPv6: Can't replace route, no match found [ 1062.347493][ T27] audit: type=1326 audit(1700525579.669:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=836 comm="syz.3.13545" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3fd9e159 code=0x7ffc0000 [ 1062.445719][ T9186] usb 2-1: Using ep0 maxpacket: 32 [ 1062.454788][ T9186] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1062.472823][ T9186] usb 2-1: config 0 has no interface number 0 [ 1062.490237][ T9186] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1062.511166][ T9186] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1062.535798][ T9186] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1062.554118][ T9186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.576040][ T9186] usb 2-1: Product: syz [ 1062.580258][ T9186] usb 2-1: Manufacturer: syz [ 1062.592965][ T9186] usb 2-1: SerialNumber: syz [ 1062.600790][ T9186] usb 2-1: config 0 descriptor?? [ 1062.827961][T20095] usb 3-1: USB disconnect, device number 12 [ 1062.851947][ T9186] radio-si470x 2-1:0.35: this is not a si470x device. [ 1063.077583][ T9186] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 1063.113287][ T9186] usb 2-1: USB disconnect, device number 36 [ 1063.284076][ T858] loop4: detected capacity change from 0 to 32768 [ 1063.291939][ T858] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.13556 (858) [ 1063.317293][ T858] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1063.349775][ T858] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1063.359864][ T858] BTRFS info (device loop4): enabling ssd optimizations [ 1063.370850][ T858] BTRFS info (device loop4): not using ssd optimizations [ 1063.379320][ T858] BTRFS info (device loop4): turning off barriers [ 1063.388984][ T858] BTRFS info (device loop4): use no compression [ 1063.397078][ T858] BTRFS info (device loop4): using free space tree [ 1063.416088][ T874] loop0: detected capacity change from 0 to 256 [ 1063.456009][ T874] FAT-fs (loop0): Directory bread(block 64) failed [ 1063.494947][ T874] FAT-fs (loop0): Directory bread(block 65) failed [ 1063.524878][ T874] FAT-fs (loop0): Directory bread(block 66) failed [ 1063.531483][ T874] FAT-fs (loop0): Directory bread(block 67) failed [ 1063.538582][ T874] FAT-fs (loop0): Directory bread(block 68) failed [ 1063.547113][ T874] FAT-fs (loop0): Directory bread(block 69) failed [ 1063.557385][ T874] FAT-fs (loop0): Directory bread(block 70) failed [ 1063.563948][ T874] FAT-fs (loop0): Directory bread(block 71) failed [ 1063.576277][ T874] FAT-fs (loop0): Directory bread(block 72) failed [ 1063.582977][ T874] FAT-fs (loop0): Directory bread(block 73) failed [ 1063.830942][ T5009] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1064.224242][ T934] xt_bpf: check failed: parse error [ 1064.433212][ T940] loop1: detected capacity change from 0 to 64 [ 1064.558755][ T5072] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1065.037882][ T969] binder: 968:969 ioctl c018620c 200000000000 returned -22 [ 1065.385679][ T993] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13604'. [ 1065.705847][ T1013] netlink: 'syz.0.13613': attribute type 1 has an invalid length. [ 1066.207904][ T1050] Cannot find del_set index 286 as target [ 1066.354313][ T1058] netlink: 'syz.1.13630': attribute type 7 has an invalid length. [ 1066.467714][ T1062] xt_connbytes: Forcing CT accounting to be enabled [ 1067.227602][ T1106] IPv6: Can't replace route, no match found [ 1067.327917][ T1110] xt_hashlimit: max too large, truncated to 1048576 [ 1067.552372][ T1124] device bridge0 left promiscuous mode [ 1067.613824][ T1127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13664'. [ 1067.645063][ T1127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13664'. [ 1067.838454][ T1140] IPv6: Can't replace route, no match found [ 1068.096006][ T1145] Process accounting resumed [ 1068.126619][ T1143] loop3: detected capacity change from 0 to 8192 [ 1068.184040][T13981] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1068.412351][ T9186] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1068.423264][ T9192] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1068.476549][ T5016] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 1068.606097][ T9186] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1068.614476][ T9186] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.624839][ T9192] usb 1-1: Using ep0 maxpacket: 32 [ 1068.630120][ T9186] usb 5-1: config 220 has no interface number 2 [ 1068.636465][ T9186] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1068.650526][ T9186] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1068.657358][ T9186] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1068.664454][ T9186] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1068.671904][ T9192] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1068.680122][ T9192] usb 1-1: config 0 has no interface number 0 [ 1068.686971][ T5016] usb 2-1: not running at top speed; connect to a high speed hub [ 1068.695522][ T9186] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1068.704868][ T9186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.713074][ T9186] usb 5-1: Product: syz [ 1068.717540][ T9186] usb 5-1: Manufacturer: syz [ 1068.722222][ T9186] usb 5-1: SerialNumber: syz [ 1068.727014][ T9192] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1068.737772][ T5016] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1068.747734][ T9192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.755876][ T5016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.764080][ T9192] usb 1-1: Product: syz [ 1068.768339][ T9192] usb 1-1: Manufacturer: syz [ 1068.772955][ T9192] usb 1-1: SerialNumber: syz [ 1068.777612][ T5016] usb 2-1: Product: syz [ 1068.781796][ T5016] usb 2-1: Manufacturer: syz [ 1068.786388][ T5016] usb 2-1: SerialNumber: syz [ 1068.793199][ T9192] usb 1-1: config 0 descriptor?? [ 1068.803474][ T5016] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 1068.812322][ T9192] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1068.822742][ T9192] usb 1-1: selecting invalid altsetting 1 [ 1068.828502][ T9192] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1068.836079][ T5016] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1068.846638][ T5016] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1068.857061][ T9192] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1068.868844][ T5016] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1068.877477][ T9192] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1068.887279][ T9192] usb 1-1: media controller created [ 1068.892729][ T5016] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1068.911116][ T9192] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1068.986784][ T9186] usb 5-1: selecting invalid altsetting 0 [ 1068.995498][ T9186] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1069.006069][ T9186] usb 5-1: No valid video chain found. [ 1069.026446][ T9192] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1069.034659][ T9192] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1069.045830][ T9186] usb 5-1: selecting invalid altsetting 0 [ 1069.051628][ T9186] usbtest: probe of 5-1:220.1 failed with error -22 [ 1069.058479][ T9192] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1069.070589][ T9186] usb 5-1: USB disconnect, device number 35 [ 1069.119767][ T9192] usb 1-1: USB disconnect, device number 25 [ 1069.245137][ T5016] usb 2-1: USB disconnect, device number 37 [ 1069.255086][ T5016] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1069.267254][ T5016] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1069.283498][ T5016] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1069.295450][ T5016] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1069.308037][ T5016] keyspan 2-1:1.0: device disconnected [ 1069.581445][ T1174] IPv6: Can't replace route, no match found [ 1069.588871][ T1173] loop2: detected capacity change from 0 to 128 [ 1069.625472][ T1173] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1069.655361][ T1173] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1069.685234][ T1173] EXT4-fs error (device loop2): __ext4_find_entry:1698: inode #2: comm syz.2.13695: checksumming directory block 0 [ 1069.735975][ T4995] EXT4-fs (loop2): unmounting filesystem. [ 1069.897591][ T1185] loop2: detected capacity change from 0 to 1024 [ 1069.992073][ T1185] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1070.032177][ T1185] EXT4-fs warning (device loop2): ext4_empty_dir:3149: inode #11: comm syz.2.13689: directory missing '.' [ 1070.080283][ T1194] nvme_fabrics: missing parameter 'transport=%s' [ 1070.156956][ T4995] EXT4-fs (loop2): unmounting filesystem. [ 1070.180608][ T1200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13694'. [ 1070.551160][ T1216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13703'. [ 1070.584617][ T1216] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13703'. [ 1070.967765][ T1233] vivid-002: disconnect [ 1070.990996][ T1232] vivid-002: reconnect [ 1071.452015][ T1255] loop4: detected capacity change from 0 to 16 [ 1071.496387][ T1255] erofs: (device loop4): mounted with root inode @ nid 36. [ 1071.885334][ T1275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13732'. [ 1071.989726][ T1281] loop0: detected capacity change from 0 to 512 [ 1072.019296][ T9192] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1072.079596][ T1281] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1072.091743][ T1281] EXT4-fs error (device loop0): ext4_xattr_set_entry:1619: inode #2: comm syz.0.13734: corrupted xattr entries [ 1072.177983][ T1292] netlink: 'syz.3.13739': attribute type 11 has an invalid length. [ 1072.200027][ T1292] netlink: 220 bytes leftover after parsing attributes in process `syz.3.13739'. [ 1072.230238][ T4998] EXT4-fs (loop0): unmounting filesystem. [ 1072.237325][ T9192] usb 2-1: Using ep0 maxpacket: 8 [ 1072.252835][ T9192] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1072.272532][ T9192] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 8.40 [ 1072.317891][ T9192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1072.338281][ T9192] usb 2-1: Product: syz [ 1072.357830][ T9192] usb 2-1: Manufacturer: syz [ 1072.370562][ T9192] usb 2-1: SerialNumber: syz [ 1072.621887][ T9192] pcwd_usb: The device isn't a Human Interface Device [ 1072.659365][ T9192] usb 2-1: USB disconnect, device number 38 [ 1073.200757][ T1334] loop3: detected capacity change from 0 to 1024 [ 1073.215593][ T1336] usb usb8: usbfs: process 1336 (syz.0.13758) did not claim interface 0 before use [ 1073.227006][ T1334] /dev/loop3: Can't open blockdev [ 1073.424598][ T1321] loop2: detected capacity change from 0 to 32768 [ 1073.477287][ T1321] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 1073.749469][ T27] audit: type=1326 audit(1700525590.541:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1357 comm="syz.2.13769" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d819e159 code=0x7ffc0000 [ 1073.790474][T13981] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 1073.817620][ T1361] netlink: 108 bytes leftover after parsing attributes in process `syz.0.13772'. [ 1073.833168][ T27] audit: type=1326 audit(1700525590.541:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1357 comm="syz.2.13769" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7ff7d819e159 code=0x7ffc0000 [ 1073.900268][ T27] audit: type=1326 audit(1700525590.541:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1357 comm="syz.2.13769" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d819e159 code=0x7ffc0000 [ 1073.949779][ T1366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13775'. [ 1074.028596][T20090] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1074.077385][ T1372] netlink: 'syz.3.13777': attribute type 2 has an invalid length. [ 1074.244512][T20090] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1074.285387][T20090] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1074.306733][T20090] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1074.316443][T20090] usb 2-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 1074.370559][T20090] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.381865][ T27] audit: type=1326 audit(1700525591.139:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1385 comm="syz.3.13785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3fd9e159 code=0x7ffc0000 [ 1074.422345][ T1356] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1074.531282][ T27] audit: type=1326 audit(1700525591.139:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1385 comm="syz.3.13785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3fd9e159 code=0x7ffc0000 [ 1074.628143][ T27] audit: type=1326 audit(1700525591.139:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1385 comm="syz.3.13785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3fd9e159 code=0x7ffc0000 [ 1074.706703][ T27] audit: type=1326 audit(1700525591.139:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1385 comm="syz.3.13785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f3e3fd9e159 code=0x7ffc0000 [ 1074.781995][ T27] audit: type=1326 audit(1700525591.139:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1385 comm="syz.3.13785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3fd9e159 code=0x7ffc0000 [ 1074.829655][ T27] audit: type=1326 audit(1700525591.139:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1385 comm="syz.3.13785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3fd9e159 code=0x7ffc0000 [ 1074.911066][T20095] usb 2-1: USB disconnect, device number 39 [ 1074.920817][T30827] Bluetooth: hci5: Reading Intel version command failed (-19) [ 1074.931366][ T27] audit: type=1326 audit(1700525591.139:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1385 comm="syz.3.13785" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3e3fd9e159 code=0x7ffc0000 [ 1075.421736][ T1431] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.13806'. [ 1075.426413][ T1434] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13808'. [ 1075.441760][ T1431] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1076.232204][ T9186] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1076.457085][ T9186] usb 3-1: Using ep0 maxpacket: 32 [ 1076.463970][ T9186] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.491487][ T9186] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1076.512615][ T9186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.561453][ T9186] usb 3-1: Product: syz [ 1076.566096][ T9186] usb 3-1: Manufacturer: syz [ 1076.570713][ T9186] usb 3-1: SerialNumber: syz [ 1076.586204][ T1461] loop1: detected capacity change from 0 to 32768 [ 1076.600919][ T9186] usb 3-1: config 0 descriptor?? [ 1076.625734][ T1488] netlink: 188 bytes leftover after parsing attributes in process `syz.4.13835'. [ 1076.629840][ T9186] usb 3-1: bad CDC descriptors [ 1076.662413][ T9186] usb 3-1: unsupported MDLM descriptors [ 1076.897974][ T9192] usb 3-1: USB disconnect, device number 13 [ 1077.023672][ T1502] netlink: 'syz.4.13842': attribute type 1 has an invalid length. [ 1077.066924][ T1502] netlink: 'syz.4.13842': attribute type 1 has an invalid length. [ 1077.074783][ T1502] netlink: 180 bytes leftover after parsing attributes in process `syz.4.13842'. [ 1077.183518][ T1502] NCSI netlink: No device for ifindex 2151022881 [ 1077.259437][ T1514] device netdevsim0 entered promiscuous mode [ 1078.022677][ T1548] loop2: detected capacity change from 0 to 1024 [ 1078.520592][ T1566] ubi0: attaching mtd0 [ 1078.540286][ T1566] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 0 [ 1078.567783][ T1510] loop0: detected capacity change from 0 to 65536 [ 1078.569793][ T1566] ubi0: scanning is finished [ 1078.680574][ T1566] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1078.697520][ T1510] XFS (loop0): Mounting V5 Filesystem [ 1078.717590][ T1579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13878'. [ 1078.735573][ T1566] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1078.753802][ T1566] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1078.810410][ T1510] XFS (loop0): Ending clean mount [ 1078.826985][ T1566] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1078.870177][ T1566] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1078.887386][ T4998] XFS (loop0): Unmounting Filesystem [ 1078.904269][ T1566] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1078.987235][ T1566] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3708156900 [ 1079.045941][ T1566] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1079.087449][ T1576] ubi0: background thread "ubi_bgt0d" started, PID 1576 [ 1079.117510][ T1576] ubi0: scrubbed PEB 0 (LEB 2147479551:0), data moved to PEB 31 [ 1079.377451][T20090] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1079.409578][ T1603] device bridge0 entered promiscuous mode [ 1079.415493][ T1605] netlink: 'syz.1.13890': attribute type 21 has an invalid length. [ 1079.591276][T20090] usb 4-1: Using ep0 maxpacket: 32 [ 1079.605425][T20090] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1079.623362][T20090] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.642335][T20090] usb 4-1: Product: syz [ 1079.662362][T20090] usb 4-1: Manufacturer: syz [ 1079.672883][T20090] usb 4-1: SerialNumber: syz [ 1079.757310][ T1617] tipc: Trying to set illegal importance in message [ 1079.770863][ T1619] loop4: detected capacity change from 0 to 164 [ 1079.938439][T20090] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 1079.961902][T20090] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1080.009195][T20090] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1080.155189][T20090] usb 4-1: USB disconnect, device number 33 [ 1080.190617][T20090] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1080.223909][T20090] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1080.252981][ T1635] loop0: detected capacity change from 0 to 16 [ 1080.256415][T20090] visor 4-1:1.0: device disconnected [ 1080.309026][ T1635] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1080.779056][ T1653] netlink: 'syz.2.13914': attribute type 21 has an invalid length. [ 1080.793727][ T1653] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13914'. [ 1080.829532][ T1653] netlink: 'syz.2.13914': attribute type 4 has an invalid length. [ 1080.864221][ T1653] netlink: 3 bytes leftover after parsing attributes in process `syz.2.13914'. [ 1081.342832][ T1674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13923'. [ 1081.682080][ T1691] device netdevsim0 entered promiscuous mode [ 1082.333474][ T1721] loop2: detected capacity change from 0 to 164 [ 1082.378749][ T1721] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1082.398380][ T1723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13948'. [ 1082.425675][ T1721] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1082.440295][ T1723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13948'. [ 1082.450283][ T1721] Symlink component flag not implemented [ 1082.456849][ T1721] Symlink component flag not implemented (7) [ 1082.668901][ T1737] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1082.808670][ T1740] [U] [ 1082.812275][ T1740] [U] [ 1082.814979][ T1740] [U] [ 1082.817685][ T1740] [U] [ 1082.857391][ T1740] [U] [ 1082.860137][ T1740] [U] [ 1082.862831][ T1740] [U] [ 1082.864721][ T1747] netlink: 56 bytes leftover after parsing attributes in process `syz.1.13960'. [ 1082.865516][ T1740] [U] [ 1082.896716][ T1747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13960'. [ 1082.921266][ T1747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13960'. [ 1082.950365][ T1740] [U] [ 1082.953103][ T1740] [U] [ 1082.955800][ T1740] [U] [ 1082.963040][ T1738] [U] [ 1083.007103][ T1752] loop3: detected capacity change from 0 to 164 [ 1083.061588][ T1752] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1083.110171][ T1752] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1083.164707][ T1752] Symlink component flag not implemented [ 1083.188730][ T1752] Symlink component flag not implemented (7) [ 1083.446917][ T1772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13974'. [ 1083.464379][ T1774] device wlan0 left promiscuous mode [ 1083.474480][ T1774] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1083.497749][ T1777] loop0: detected capacity change from 0 to 1024 [ 1083.513262][T20095] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1083.597757][ T1777] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1083.672398][ T1785] loop1: detected capacity change from 0 to 4096 [ 1083.681219][ T1785] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1083.722355][T20095] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1083.763650][ T1785] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1083.782459][T20095] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1083.807729][ T4998] EXT4-fs (loop0): unmounting filesystem. [ 1083.813925][ T1785] ntfs3: loop1: Inode r=b is not in use! [ 1083.828903][ T1785] ntfs3: loop1: Failed to load $Extend. [ 1083.855773][T20095] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 0.00 [ 1083.887738][T20095] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.920484][T20095] usb 5-1: Product: syz [ 1083.946468][T20095] usb 5-1: Manufacturer: syz [ 1083.950842][ T1796] x_tables: duplicate entry at hook 1 [ 1083.951085][T20095] usb 5-1: SerialNumber: syz [ 1083.994493][T20095] pl2303 5-1:1.0: pl2303 converter detected [ 1084.013826][T20095] pl2303 5-1:1.0: unknown device type, please report to linux-usb@vger.kernel.org [ 1084.114998][ T1799] loop0: detected capacity change from 0 to 64 [ 1084.133233][ T1801] __nla_validate_parse: 1 callbacks suppressed [ 1084.133250][ T1801] netlink: 200 bytes leftover after parsing attributes in process `syz.2.13985'. [ 1084.175782][ T1799] Trying to free block not in datazone [ 1084.201978][ T1799] Trying to free block not in datazone [ 1084.264439][T20095] usb 5-1: USB disconnect, device number 36 [ 1084.370303][ T9192] ------------[ cut here ]------------ [ 1084.376348][ T9192] WARNING: CPU: 0 PID: 9192 at net/netfilter/nft_set_pipapo.c:2384 nft_pipapo_destroy+0x87d/0x8e0 [ 1084.387485][ T9192] Modules linked in: [ 1084.391402][ T9192] CPU: 0 PID: 9192 Comm: kworker/0:16 Not tainted syzkaller #0 [ 1084.398999][ T9192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1084.409122][ T9192] Workqueue: events nf_tables_trans_destroy_work [ 1084.415587][ T9192] RIP: 0010:nft_pipapo_destroy+0x87d/0x8e0 [ 1084.421463][ T9192] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 ee 7b 47 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 93 36 f6 f8 <0f> 0b e9 e0 f7 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c ea f9 [ 1084.441229][ T9192] RSP: 0018:ffffc90003b37a68 EFLAGS: 00010293 [ 1084.447320][ T9192] RAX: ffffffff888bfc4d RBX: ffff88802f9cf4f0 RCX: ffff8880270cda00 [ 1084.455378][ T9192] RDX: 0000000000000000 RSI: ffff88802f9cf400 RDI: ffff88805e55a028 [ 1084.463403][ T9192] RBP: ffffc90003b37c30 R08: ffff8880270cda00 R09: 0000000000000008 [ 1084.471435][ T9192] R10: 0000000000000018 R11: 0000000000000000 R12: ffff88802f9cf4c0 [ 1084.479442][ T9192] R13: dffffc0000000000 R14: ffff88802f9cf510 R15: dffffc0000000000 [ 1084.487476][ T9192] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1084.496466][ T9192] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1084.503119][ T9192] CR2: 000000110c3650a8 CR3: 0000000043ce2000 CR4: 00000000003506f0 [ 1084.511118][ T9192] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1084.519340][ T9192] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1084.527363][ T9192] Call Trace: [ 1084.529657][ T1813] netlink: 'syz.2.13989': attribute type 10 has an invalid length. [ 1084.530641][ T9192] [ 1084.541545][ T9192] nft_set_destroy+0x489/0xa30 [ 1084.546372][ T9192] ? __kmem_cache_free+0xb6/0x200 [ 1084.551533][ T9192] nf_tables_trans_destroy_work+0xb81/0xdf0 [ 1084.557479][ T9192] ? __lock_acquire+0x7c40/0x7c40 [ 1084.562609][ T9192] ? nft_object_dump+0x1e0/0x1e0 [ 1084.567624][ T9192] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1084.572854][ T9192] ? process_one_work+0x7b4/0x1160 [ 1084.574752][ T1813] device macvlan1 entered promiscuous mode [ 1084.578108][ T9192] process_one_work+0x8ab/0x1160 [ 1084.578148][ T9192] ? worker_detach_from_pool+0x240/0x240 [ 1084.578173][ T9192] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1084.578197][ T9192] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1084.578221][ T9192] ? wq_worker_running+0x97/0x190 [ 1084.578241][ T9192] worker_thread+0xaf5/0x12a0 [ 1084.578275][ T9192] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1084.578305][ T9192] kthread+0x29d/0x330 [ 1084.589689][ T1813] team0: Port device macvlan1 added [ 1084.594661][ T9192] ? worker_clr_flags+0x1a0/0x1a0 [ 1084.594689][ T9192] ? kthread_blkcg+0xd0/0xd0 [ 1084.639843][ T9192] ret_from_fork+0x1f/0x30 [ 1084.644445][ T9192] [ 1084.647501][ T9192] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1084.654788][ T9192] CPU: 0 PID: 9192 Comm: kworker/0:16 Not tainted syzkaller #0 [ 1084.662341][ T9192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1084.672407][ T9192] Workqueue: events nf_tables_trans_destroy_work [ 1084.678760][ T9192] Call Trace: [ 1084.682047][ T9192] [ 1084.684985][ T9192] dump_stack_lvl+0x188/0x24e [ 1084.689678][ T9192] ? memcpy+0x3c/0x60 [ 1084.693671][ T9192] ? show_regs_print_info+0x12/0x12 [ 1084.698882][ T9192] ? load_image+0x410/0x410 [ 1084.703409][ T9192] panic+0x2d3/0x710 [ 1084.707330][ T9192] ? bpf_jit_dump+0xd0/0xd0 [ 1084.711863][ T9192] ? ret_from_fork+0x1f/0x30 [ 1084.716492][ T9192] __warn+0x2f8/0x4f0 [ 1084.720500][ T9192] ? nft_pipapo_destroy+0x87d/0x8e0 [ 1084.725719][ T9192] ? nft_pipapo_destroy+0x87d/0x8e0 [ 1084.730931][ T9192] report_bug+0x2ba/0x4f0 [ 1084.735288][ T9192] ? nft_pipapo_destroy+0x87d/0x8e0 [ 1084.740514][ T9192] handle_bug+0x3a/0x70 [ 1084.744685][ T9192] exc_invalid_op+0x16/0x40 [ 1084.749205][ T9192] asm_exc_invalid_op+0x16/0x20 [ 1084.754072][ T9192] RIP: 0010:nft_pipapo_destroy+0x87d/0x8e0 [ 1084.759892][ T9192] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 ee 7b 47 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 93 36 f6 f8 <0f> 0b e9 e0 f7 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c ea f9 [ 1084.779553][ T9192] RSP: 0018:ffffc90003b37a68 EFLAGS: 00010293 [ 1084.785644][ T9192] RAX: ffffffff888bfc4d RBX: ffff88802f9cf4f0 RCX: ffff8880270cda00 [ 1084.793630][ T9192] RDX: 0000000000000000 RSI: ffff88802f9cf400 RDI: ffff88805e55a028 [ 1084.801703][ T9192] RBP: ffffc90003b37c30 R08: ffff8880270cda00 R09: 0000000000000008 [ 1084.809687][ T9192] R10: 0000000000000018 R11: 0000000000000000 R12: ffff88802f9cf4c0 [ 1084.817674][ T9192] R13: dffffc0000000000 R14: ffff88802f9cf510 R15: dffffc0000000000 [ 1084.825667][ T9192] ? nft_pipapo_destroy+0x87d/0x8e0 [ 1084.830897][ T9192] ? nft_pipapo_destroy+0x87d/0x8e0 [ 1084.836122][ T9192] nft_set_destroy+0x489/0xa30 [ 1084.840905][ T9192] ? __kmem_cache_free+0xb6/0x200 [ 1084.845968][ T9192] nf_tables_trans_destroy_work+0xb81/0xdf0 [ 1084.851923][ T9192] ? __lock_acquire+0x7c40/0x7c40 [ 1084.856967][ T9192] ? nft_object_dump+0x1e0/0x1e0 [ 1084.861921][ T9192] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1084.867139][ T9192] ? process_one_work+0x7b4/0x1160 [ 1084.872268][ T9192] process_one_work+0x8ab/0x1160 [ 1084.877232][ T9192] ? worker_detach_from_pool+0x240/0x240 [ 1084.882879][ T9192] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1084.887921][ T9192] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1084.893491][ T9192] ? wq_worker_running+0x97/0x190 [ 1084.898531][ T9192] worker_thread+0xaf5/0x12a0 [ 1084.903234][ T9192] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1084.909165][ T9192] kthread+0x29d/0x330 [ 1084.913271][ T9192] ? worker_clr_flags+0x1a0/0x1a0 [ 1084.918311][ T9192] ? kthread_blkcg+0xd0/0xd0 [ 1084.922998][ T9192] ret_from_fork+0x1f/0x30 [ 1084.927440][ T9192] [ 1084.930735][ T9192] Kernel Offset: disabled [ 1084.935187][ T9192] Rebooting in 86400 seconds..