last executing test programs: 4.007328032s ago: executing program 2 (id=12772): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000080000000200000007"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000200), 0x0}, 0x20) 3.715898059s ago: executing program 2 (id=12775): setuid(0xee01) setgid(0xee01) 3.483520104s ago: executing program 2 (id=12779): syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000700)=ANY=[@ANYBLOB="1201100100000008ac05620240000102030109022d0001010510010904000402030102"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x4, 0x0, 0x6}}]}}, 0x0) 3.308311099s ago: executing program 3 (id=12783): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000002dc0)={0x12, {{0x29, 0x0, 0xb000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfff}}}, 0x88) 3.134469253s ago: executing program 3 (id=12786): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='target PCI:18:\t'], 0x15) 2.945623327s ago: executing program 3 (id=12788): r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4000040, 0x0, 0x0) 2.927531658s ago: executing program 0 (id=12789): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port1\x00', 0x94, 0x120000, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0xfc}) 2.788333851s ago: executing program 0 (id=12790): r0 = syz_usb_connect$uac3(0x0, 0xa4, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x6, 0x20, 0x5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x4b}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x2e, 0x6}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x306, 0x6, 0x4, 0xff, 0xc, 0x3, 0x8, 0x8}, @extension_unit={0x11, 0x24, 0xa, 0x4, 0x1, [0x0, 0x7, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0xff, {0xa, 0x25, 0x25, 0xea, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xba, 0x2, 0xc, {0xa, 0x25, 0x25, 0x0, 0x6, 0x3}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x24}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x40, 0x9a927ced5ef2226a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.683950264s ago: executing program 3 (id=12791): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file2\x00', 0x8, &(0x7f00000001c0)={[{@clear_cache}, {@space_cache}, {@discard}, {@notreelog}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x5}}]}, 0x1, 0x50ed, &(0x7f00000051c0)="$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") truncate(&(0x7f0000000100)='./file1\x00', 0x7) 1.728725148s ago: executing program 2 (id=12794): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x403, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x9000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x10}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1.526976803s ago: executing program 2 (id=12796): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x40000, 0x4, 0x0, 0xe}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x8040) 1.244916069s ago: executing program 2 (id=12798): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f0000000340)={[{@compress_force}, {@datasum}, {@flushoncommit}, {@enospc_debug}, {@max_inline={'max_inline', 0x3d, [0x25, 0x6b, 0x0, 0x32, 0x31, 0x86, 0x6d]}}, {@space_cache_v1}, {@commit={'commit', 0x3d, 0x7b}}, {@barrier}, {@check_int_print_mask={'check_int_print_mask', 0x3d, 0x8000000000000000}}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x173b07b8947e961a, 0x32, 0x32, 0x66, 0x64, 0x35, 0x33], 0x2d, [0x34, 0x30, 0x39, 0x62], 0x2d, [0x65, 0x30, 0x65, 0x65], 0x2d, [0x38, 0x39, 0x0, 0x37], 0x2d, [0x32, 0x5c, 0x37, 0x32, 0x65, 0x30, 0x65, 0x63]}}}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, 0x0) 1.175979791s ago: executing program 1 (id=12799): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0xd4, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10}, 0x94) 1.020886725s ago: executing program 1 (id=12800): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000080)) 990.588786ms ago: executing program 3 (id=12801): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 780.107881ms ago: executing program 1 (id=12802): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x400}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x54}}, 0x0) 777.990121ms ago: executing program 0 (id=12803): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f00000015c0)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14) 593.606845ms ago: executing program 1 (id=12804): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) getitimer(0x0, &(0x7f0000000100)) 538.522427ms ago: executing program 0 (id=12805): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x4040}, 0x8040) 312.661563ms ago: executing program 0 (id=12806): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::.:\x00', 0x0) 274.988774ms ago: executing program 1 (id=12807): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) 140.375707ms ago: executing program 0 (id=12808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x10, 0x3, "91abc12404cf378042f26c43"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x8c}}, 0x0) 47.84µs ago: executing program 1 (id=12809): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x72213, 0x58091}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}}, 0x20004040) 0s ago: executing program 3 (id=12810): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/stat\x00') getdents(r0, &(0x7f0000000000)=""/42, 0x2a) kernel console output (not intermixed with test programs): . [ 967.735871][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.740007][T31146] ip6gre1: left promiscuous mode [ 967.762288][T31146] bond2: left promiscuous mode [ 968.500379][T31185] netlink: 'syz.0.10667': attribute type 10 has an invalid length. [ 968.541181][T31185] team0: Port device wlan1 added [ 968.728940][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 968.728958][ T27] audit: type=1326 audit(1786501309.909:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31193 comm="syz.2.10672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7ffc0000 [ 968.834522][ T27] audit: type=1326 audit(1786501309.909:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31193 comm="syz.2.10672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7ffc0000 [ 968.856116][T31201] xt_hashlimit: size too large, truncated to 1048576 [ 968.884354][T31201] xt_hashlimit: max too large, truncated to 1048576 [ 968.929708][ T27] audit: type=1326 audit(1786501309.936:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31193 comm="syz.2.10672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f9586b9e0d9 code=0x7ffc0000 [ 969.026590][ T27] audit: type=1326 audit(1786501309.936:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31193 comm="syz.2.10672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7ffc0000 [ 969.050879][ C0] vkms_vblank_simulate: vblank timer overrun [ 969.087450][T31211] loop1: detected capacity change from 0 to 16 [ 969.094705][ T27] audit: type=1326 audit(1786501309.936:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31193 comm="syz.2.10672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7ffc0000 [ 969.121356][T31211] erofs: (device loop1): mounted with root inode @ nid 36. [ 969.648843][ T5766] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 969.863337][ T5766] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 969.883938][ T5766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.905816][ T5766] usb 3-1: Product: syz [ 969.917061][ T5766] usb 3-1: Manufacturer: syz [ 969.927691][ T5766] usb 3-1: SerialNumber: syz [ 969.992350][ T5815] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 970.061395][T31260] loop3: detected capacity change from 0 to 4096 [ 970.098445][T31260] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 970.304601][T31260] ntfs3: loop3: failed to convert "c46c" to cp437 [ 970.479665][ T23] usb 3-1: USB disconnect, device number 16 [ 970.586261][T31292] loop3: detected capacity change from 0 to 128 [ 970.610896][T31294] netlink: 'syz.0.10703': attribute type 10 has an invalid length. [ 970.852973][ T6330] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 971.113579][ T6330] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 971.138691][ T6330] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 971.159486][ T6330] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 971.175510][ T6330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 971.185539][ T6330] usb 2-1: SerialNumber: syz [ 971.211108][ T5815] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 971.224953][ T6330] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 971.232259][ T5815] ath9k_htc: Failed to initialize the device [ 971.241276][ T23] usb 3-1: ath9k_htc: USB layer deinitialized [ 971.250465][ T6330] usb-storage 2-1:1.0: USB Mass Storage device detected [ 971.299184][ T6330] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 971.340396][ T6330] scsi host1: usb-storage 2-1:1.0 [ 971.347008][T31328] loop2: detected capacity change from 0 to 256 [ 971.377348][T31328] exfat: Deprecated parameter 'utf8' [ 971.406856][T31328] exfat: Deprecated parameter 'utf8' [ 971.419458][T31328] exFAT-fs (loop2): failed to read boot sector [ 971.425871][T31328] exFAT-fs (loop2): failed to recognize exfat type [ 971.758515][T31310] loop3: detected capacity change from 0 to 32768 [ 971.775620][T31310] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.10708 (31310) [ 971.804146][T31310] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 971.815795][T31310] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 971.825292][T31310] BTRFS info (device loop3): using free space tree [ 971.861766][ T5766] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 971.917846][T31310] BTRFS info (device loop3): enabling ssd optimizations [ 971.933046][T31310] BTRFS info (device loop3): auto enabling async discard [ 972.058101][ T5766] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 972.068304][ T5766] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 972.109954][ T5766] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 972.138064][ T5766] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 972.173509][ T5766] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 972.186094][ T5766] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.222570][ T5766] hub 1-1:1.0: bad descriptor, ignoring hub [ 972.239609][ T5766] hub: probe of 1-1:1.0 failed with error -5 [ 972.249135][ T5766] cdc_wdm 1-1:1.0: skipping garbage [ 972.269827][ T5766] cdc_wdm 1-1:1.0: invalid descriptor buffer length [ 972.294333][ T5766] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 972.412737][ T5778] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 972.587476][ T27] audit: type=1326 audit(1786501313.459:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31392 comm="syz.2.10722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7fc00000 [ 972.618896][ T5766] usb 1-1: USB disconnect, device number 35 [ 972.682120][ T27] audit: type=1326 audit(1786501313.459:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31392 comm="syz.2.10722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7fc00000 [ 972.710570][ T27] audit: type=1326 audit(1786501313.459:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31392 comm="syz.2.10722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7fc00000 [ 972.753415][ T27] audit: type=1326 audit(1786501313.459:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31392 comm="syz.2.10722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7fc00000 [ 972.816265][ T23] usb 2-1: USB disconnect, device number 23 [ 972.825004][ T27] audit: type=1326 audit(1786501313.459:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31392 comm="syz.2.10722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7fc00000 [ 972.953373][T31399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.001965][T31399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.034681][T31399] bond0 (unregistering): Released all slaves [ 974.157487][T31442] netlink: 'syz.1.10733': attribute type 10 has an invalid length. [ 974.165739][ T27] kauditd_printk_skb: 1498 callbacks suppressed [ 974.165757][ T27] audit: type=1326 audit(1786501314.907:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31392 comm="syz.2.10722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7fc00000 [ 974.245731][ T27] audit: type=1326 audit(1786501314.907:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31392 comm="syz.2.10722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7fc00000 [ 974.250915][T31442] team0: Port device wlan1 added [ 974.310122][ T27] audit: type=1326 audit(1786501314.907:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31392 comm="syz.2.10722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7fc00000 [ 974.345664][ T27] audit: type=1326 audit(1786501314.907:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31392 comm="syz.2.10722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7fc00000 [ 974.391973][ T27] audit: type=1326 audit(1786501314.907:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31392 comm="syz.2.10722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7fc00000 [ 974.439022][ T27] audit: type=1326 audit(1786501314.907:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31392 comm="syz.2.10722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7fc00000 [ 974.494439][ T27] audit: type=1326 audit(1786501314.907:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31392 comm="syz.2.10722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7fc00000 [ 974.530553][ T27] audit: type=1326 audit(1786501314.907:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31392 comm="syz.2.10722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7fc00000 [ 974.610943][ T27] audit: type=1326 audit(1786501314.907:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31392 comm="syz.2.10722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7fc00000 [ 974.692782][ T27] audit: type=1326 audit(1786501314.907:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31392 comm="syz.2.10722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7fc00000 [ 974.875508][T31460] __nla_validate_parse: 24 callbacks suppressed [ 974.875526][T31460] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10740'. [ 976.483438][T31530] loop3: detected capacity change from 0 to 256 [ 976.512896][T31530] exfat: Deprecated parameter 'namecase' [ 976.553563][T31530] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x86468389, utbl_chksum : 0xe619d30d) [ 977.015058][T31553] loop1: detected capacity change from 0 to 4096 [ 977.046197][T31553] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 977.109948][ T5815] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 977.187540][T31553] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 977.338711][ T5815] usb 4-1: Using ep0 maxpacket: 16 [ 977.370432][ T5815] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 977.378616][ T5815] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.420857][ T5815] usb 4-1: config 0 has no interface number 0 [ 977.439475][ T5815] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 977.471674][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.513637][ T5815] usb 4-1: config 0 descriptor?? [ 977.751957][ T23] usb 4-1: USB disconnect, device number 34 [ 977.795133][T31588] block nbd2: NBD_DISCONNECT [ 977.868053][ T6330] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 978.089646][ T6330] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 978.129603][ T6330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 7 [ 978.150607][ T6330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 978.170859][ T6330] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 978.182485][ T6330] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 978.192937][ T6330] usb 2-1: Manufacturer: syz [ 978.216412][ T6330] usb 2-1: config 0 descriptor?? [ 978.231028][ T6330] igorplugusb 2-1:0.0: endpoint incorrect [ 978.307925][T31619] binder: 31617:31619 ioctl c018620b 0 returned -14 [ 978.493890][T31628] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.10794'. [ 978.519010][ T6330] usb 2-1: USB disconnect, device number 24 [ 979.726682][T31705] netlink: 'syz.0.10818': attribute type 1 has an invalid length. [ 980.796048][T31758] netlink: 'syz.0.10838': attribute type 4 has an invalid length. [ 980.806613][T31758] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.10838'. [ 981.090884][T31764] netlink: 'syz.0.10841': attribute type 32 has an invalid length. [ 981.450540][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 981.456985][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 981.553347][T31754] loop2: detected capacity change from 0 to 32768 [ 981.655057][T31754] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 981.698014][T31785] dlm: plock device version mismatch: kernel (1.2.0), user (1.8192.0) [ 982.009805][T31754] XFS (loop2): Ending clean mount [ 982.120607][ T5779] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 982.147820][T31751] loop3: detected capacity change from 0 to 65536 [ 982.206878][ T5815] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 982.218017][T31751] XFS (loop3): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 982.366577][T31815] netlink: 220 bytes leftover after parsing attributes in process `syz.1.10855'. [ 982.386090][T31815] tc_dump_action: action bad kind [ 982.414453][T31751] XFS (loop3): Ending clean mount [ 982.424650][ T5815] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 982.465038][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 982.507249][ T5815] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 982.531729][ T5815] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 982.540335][T31751] XFS (loop3): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 982.550741][ T5815] usb 1-1: Manufacturer: syz [ 982.583501][ T5815] usb 1-1: config 0 descriptor?? [ 982.620160][ T5815] igorplugusb 1-1:0.0: endpoint incorrect [ 982.706586][ T5778] XFS (loop3): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 982.842951][ T5815] usb 1-1: USB disconnect, device number 36 [ 983.018087][T31844] x_tables: unsorted entry at hook 1 [ 983.224785][ T5766] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 983.277656][T31850] netlink: 'syz.3.10857': attribute type 1 has an invalid length. [ 983.452724][ T5766] usb 3-1: Using ep0 maxpacket: 16 [ 983.485238][ T5766] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 983.493420][ T5766] usb 3-1: config 0 has no interface number 0 [ 983.522403][ T5766] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 983.550151][ T5766] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 983.574833][ T5766] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 983.586322][ T5766] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 983.615224][ T5766] usb 3-1: Product: syz [ 983.619476][ T5766] usb 3-1: SerialNumber: syz [ 983.660449][ T5766] usb 3-1: config 0 descriptor?? [ 983.681631][ T5766] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 983.721961][ T5766] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input58 [ 983.946538][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 983.987997][T31879] netlink: 'syz.3.10871': attribute type 32 has an invalid length. [ 984.204837][ T5766] usb 3-1: USB disconnect, device number 17 [ 984.250787][ T5766] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 984.759356][T31839] Process accounting paused [ 984.921122][T31920] binfmt_misc: register: failed to install interpreter file ./file0 [ 985.070343][T31927] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 985.155534][T31859] loop1: detected capacity change from 0 to 65536 [ 985.212648][T31859] XFS (loop1): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 985.442329][T31859] XFS (loop1): Ending clean mount [ 985.541177][T31859] XFS (loop1): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 985.676171][ T5776] XFS (loop1): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 985.888427][T31971] netlink: 'syz.0.10900': attribute type 1 has an invalid length. [ 986.464394][ T27] kauditd_printk_skb: 1159 callbacks suppressed [ 986.464414][ T27] audit: type=1326 audit(984.024:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31995 comm="syz.0.10909" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9539e0d9 code=0x7ffc0000 [ 986.549344][ T27] audit: type=1326 audit(984.070:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31995 comm="syz.0.10909" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9539e0d9 code=0x7ffc0000 [ 986.670583][ T27] audit: type=1326 audit(984.079:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31995 comm="syz.0.10909" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7efc9539e0d9 code=0x7ffc0000 [ 986.756339][ T27] audit: type=1326 audit(984.079:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31995 comm="syz.0.10909" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9539e0d9 code=0x7ffc0000 [ 986.854822][ T27] audit: type=1326 audit(984.079:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31995 comm="syz.0.10909" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9539e0d9 code=0x7ffc0000 [ 987.385318][T32049] loop1: detected capacity change from 0 to 1024 [ 987.411725][T32049] EXT4-fs: Ignoring removed bh option [ 987.482621][T32049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 987.593965][T32049] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.10923: Freeing blocks not in datazone - block = 0, count = 16 [ 987.617744][ T5836] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 987.679546][T32049] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.10923: bg 0: block 112: padding at end of block bitmap is not set [ 987.728189][T32049] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 987.835013][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 987.847112][ T5836] usb 4-1: unable to get BOS descriptor or descriptor too short [ 987.867011][ T5836] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 987.890136][ T5836] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 987.901020][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 987.909298][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.930091][ T5836] usb 4-1: Product: syz [ 987.940873][ T5836] usb 4-1: Manufacturer: syz [ 987.962654][ T5836] usb 4-1: SerialNumber: syz [ 988.215627][ T5836] usb 4-1: Invalid number of CPorts: 0 [ 988.221278][ T5836] es2_ap_driver: probe of 4-1:7.0 failed with error -22 [ 988.372835][T32096] ntfs3: loop5: try to read out of volume at offset 0x0 [ 988.465809][ T5836] usb 4-1: USB disconnect, device number 35 [ 989.255925][T32138] nvme_fabrics: missing parameter 'host_traddr=%s' [ 989.409113][T32156] loop3: detected capacity change from 0 to 128 [ 989.474431][T32156] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 989.489691][T32156] FAT-fs (loop3): Filesystem has been set read-only [ 989.505589][T32163] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.10962'. [ 989.506567][T32156] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 989.517543][T32160] loop1: detected capacity change from 0 to 2048 [ 989.524474][T32156] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 989.551472][T32156] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 989.564489][T32156] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 989.575007][T32160] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=301129, location=301129 [ 989.575688][T32156] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 989.636104][T32160] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 989.637176][T32156] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 989.678223][T32156] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 989.720504][T32156] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 989.753529][T32156] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 989.778025][ T27] audit: type=1800 audit(987.076:3330): pid=32156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10960" name="file1" dev="loop3" ino=1048649 res=0 errno=0 [ 989.828606][T32156] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 990.249945][T32190] loop1: detected capacity change from 0 to 4096 [ 990.350348][T32190] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 990.391444][T32190] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 990.405839][T32202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10972'. [ 990.435837][T32190] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 990.458037][T32190] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 990.758009][T32215] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.10975'. [ 991.099357][T32230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10980'. [ 991.398433][T32242] loop1: detected capacity change from 0 to 4096 [ 991.445009][ T5766] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 991.459344][T32252] sit0: entered promiscuous mode [ 991.474323][T32252] netlink: 'syz.3.10986': attribute type 1 has an invalid length. [ 991.476531][T32242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 991.662300][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.715759][ T5766] usb 1-1: Using ep0 maxpacket: 8 [ 991.735129][ T5766] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.749817][ T5766] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 991.773743][ T5766] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.782526][ T5766] usb 1-1: Product: syz [ 991.786731][ T5766] usb 1-1: Manufacturer: syz [ 991.791507][ T5766] usb 1-1: SerialNumber: syz [ 991.803756][ T5766] usb 1-1: config 0 descriptor?? [ 991.817825][ T5766] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 991.834671][ T5766] usb 1-1: selecting invalid altsetting 1 [ 992.147738][T32285] netlink: 'syz.1.10994': attribute type 1 has an invalid length. [ 992.309368][ T5766] usb 1-1: USB disconnect, device number 37 [ 992.658046][T32315] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11001'. [ 993.439933][ T5815] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 993.448337][T32360] loop1: detected capacity change from 0 to 1024 [ 993.648031][ T5815] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 993.675153][ T5815] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 993.706483][T32368] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.11016'. [ 993.738607][ T5815] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 993.762820][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 993.789114][ T5815] usb 4-1: SerialNumber: syz [ 993.820146][ T5815] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 993.837138][ T5815] usb-storage 4-1:1.0: USB Mass Storage device detected [ 993.877139][ T5815] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 993.906330][ T5815] scsi host1: usb-storage 4-1:1.0 [ 994.373991][T32403] netlink: 'syz.2.11026': attribute type 30 has an invalid length. [ 994.653361][T32417] usb usb8: usbfs: process 32417 (syz.1.11031) did not claim interface 0 before use [ 995.163709][T32443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11042'. [ 995.187298][T32443] netlink: 31 bytes leftover after parsing attributes in process `syz.0.11042'. [ 995.212507][T32443] netlink: 'syz.0.11042': attribute type 3 has an invalid length. [ 995.230042][T32443] netlink: 'syz.0.11042': attribute type 2 has an invalid length. [ 995.247151][T32443] netlink: 31 bytes leftover after parsing attributes in process `syz.0.11042'. [ 995.711628][T32473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11051'. [ 996.192305][T32497] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11060'. [ 996.273122][ T6330] usb 4-1: USB disconnect, device number 36 [ 996.502474][T32515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11066'. [ 998.877059][T32630] loop3: detected capacity change from 0 to 8192 [ 998.959808][T32630] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 999.029501][T32630] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 999.068392][T32630] FAT-fs (loop3): Filesystem has been set read-only [ 999.345085][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 999.345102][ T27] audit: type=1326 audit(995.911:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32657 comm="syz.1.11112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65f59e0d9 code=0x7ffc0000 [ 999.478977][ T27] audit: type=1326 audit(995.939:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32657 comm="syz.1.11112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65f59e0d9 code=0x7ffc0000 [ 999.560840][ T27] audit: type=1326 audit(995.939:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32657 comm="syz.1.11112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65f59e0d9 code=0x7ffc0000 [ 999.584537][ C1] vkms_vblank_simulate: vblank timer overrun [ 999.663960][ T27] audit: type=1326 audit(995.966:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32657 comm="syz.1.11112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65f59e0d9 code=0x7ffc0000 [ 999.761273][ T27] audit: type=1326 audit(995.966:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32657 comm="syz.1.11112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fd65f59e0d9 code=0x7ffc0000 [ 999.785072][ C1] vkms_vblank_simulate: vblank timer overrun [ 999.842510][ T27] audit: type=1326 audit(995.966:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32657 comm="syz.1.11112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65f59e0d9 code=0x7ffc0000 [ 999.946174][ T27] audit: type=1326 audit(995.966:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32657 comm="syz.1.11112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65f59e0d9 code=0x7ffc0000 [ 1000.043275][ T27] audit: type=1326 audit(995.976:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32657 comm="syz.1.11112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd65f59e0d9 code=0x7ffc0000 [ 1000.113359][T32690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11121'. [ 1000.137045][ T27] audit: type=1326 audit(995.976:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32657 comm="syz.1.11112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd65f59e0d9 code=0x7ffc0000 [ 1000.288865][T32694] loop2: detected capacity change from 0 to 2048 [ 1000.315154][T32694] EXT4-fs: Ignoring removed nobh option [ 1000.413101][T32694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1000.627803][T32717] netlink: 'syz.3.11129': attribute type 1 has an invalid length. [ 1000.642205][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.850057][T32729] dns_resolver: Unsupported content type (254) [ 1001.329124][T32747] netlink: 'syz.0.11140': attribute type 10 has an invalid length. [ 1001.397706][T32747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.419976][T32747] team0: Port device batadv0 added [ 1001.448925][T32754] netlink: 'syz.3.11144': attribute type 12 has an invalid length. [ 1002.595793][ T348] tmpfs: Bad value for 'mpol' [ 1003.272376][ T387] netlink: 'syz.1.11181': attribute type 21 has an invalid length. [ 1003.281092][ T388] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 1003.299331][ T387] netlink: 'syz.1.11181': attribute type 30 has an invalid length. [ 1003.749826][ T405] ieee802154 phy0 wpan0: encryption failed: -90 [ 1004.224753][ T420] loop1: detected capacity change from 0 to 256 [ 1004.473954][ T393] loop2: detected capacity change from 0 to 32768 [ 1004.825978][ T441] netlink: 164 bytes leftover after parsing attributes in process `syz.1.11197'. [ 1005.413118][ T464] loop2: detected capacity change from 0 to 4096 [ 1005.551989][ T5815] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1005.590210][ T464] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1005.694860][ T464] ntfs3: loop2: Failed to load $Extend (-22). [ 1005.701051][ T464] ntfs3: loop2: Failed to initialize $Extend. [ 1005.758703][ T5815] usb 1-1: Using ep0 maxpacket: 8 [ 1005.774459][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1005.807949][ T5815] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1005.858399][ T5815] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1005.875586][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.887501][ T5815] usb 1-1: Product: syz [ 1005.895857][ T5815] usb 1-1: Manufacturer: syz [ 1005.907288][ T5815] usb 1-1: SerialNumber: syz [ 1005.922252][ T5815] usb 1-1: config 0 descriptor?? [ 1006.405343][ T473] loop1: detected capacity change from 0 to 32768 [ 1006.472720][ T5815] usb 1-1: USB disconnect, device number 38 [ 1006.526840][ T473] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 1006.542970][ T473] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1006.769277][ T473] XFS (loop1): Ending clean mount [ 1006.990090][ T5776] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1007.496981][ T555] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1007.658788][ T561] ERROR: device name not specified. [ 1007.859014][ T574] ip_tables: iptables: counters copy to user failed while replacing table [ 1007.902823][ T575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1008.082793][ T589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11237'. [ 1008.100205][ T589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11237'. [ 1008.109249][ T589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11237'. [ 1008.133613][ T589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11237'. [ 1008.182718][ T589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11237'. [ 1008.196110][ T589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11237'. [ 1008.221613][ T589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11237'. [ 1008.236508][ T589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11237'. [ 1008.248862][ T589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11237'. [ 1008.708934][ T618] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1008.716318][ T618] IPv6: NLM_F_CREATE should be set when creating new route [ 1008.723719][ T618] IPv6: NLM_F_CREATE should be set when creating new route [ 1008.783745][ T624] tmpfs: Bad value for 'mpol' [ 1009.303425][ T654] netlink: 'syz.1.11259': attribute type 1 has an invalid length. [ 1009.320693][ T654] netlink: 'syz.1.11259': attribute type 3 has an invalid length. [ 1009.417698][ T658] netlink: 'syz.0.11261': attribute type 1 has an invalid length. [ 1009.455892][ T790] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1009.633510][ T665] sctp: [Deprecated]: syz.0.11264 (pid 665) Use of int in max_burst socket option. [ 1009.633510][ T665] Use struct sctp_assoc_value instead [ 1009.683333][ T790] usb 4-1: Using ep0 maxpacket: 32 [ 1009.708830][ T790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.726976][ T790] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1009.759160][ T790] usb 4-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 1009.779330][ T790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.815563][ T790] usb 4-1: config 0 descriptor?? [ 1009.826104][ T790] rndis_wlan 4-1:0.0: skipping garbage [ 1009.831763][ T790] rndis_wlan 4-1:0.0: invalid descriptor buffer length [ 1009.845957][ T790] usb 4-1: bad CDC descriptors [ 1009.870314][ T790] rndis_host 4-1:0.0: skipping garbage [ 1009.875961][ T790] rndis_host 4-1:0.0: invalid descriptor buffer length [ 1009.884963][ T790] usb 4-1: bad CDC descriptors [ 1009.890409][ T790] cdc_acm 4-1:0.0: skipping garbage [ 1009.896013][ T790] cdc_acm 4-1:0.0: invalid descriptor buffer length [ 1009.961071][ T652] loop2: detected capacity change from 0 to 32768 [ 1010.007282][ T652] ialloc: diAlloc returned -5! [ 1010.047027][ T5815] usb 4-1: USB disconnect, device number 37 [ 1010.074499][ T175] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1010.305202][ T175] usb 2-1: not running at top speed; connect to a high speed hub [ 1010.320308][ T175] usb 2-1: config 45 has an invalid interface number: 2 but max is 0 [ 1010.344797][ T175] usb 2-1: config 45 has no interface number 0 [ 1010.351105][ T175] usb 2-1: config 45 interface 2 has no altsetting 0 [ 1010.370374][ T175] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 1010.384732][ T175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.403919][ T175] usb 2-1: Product: syz [ 1010.408209][ T175] usb 2-1: Manufacturer: syz [ 1010.419018][ T175] usb 2-1: SerialNumber: syz [ 1010.608170][ T709] __nla_validate_parse: 39 callbacks suppressed [ 1010.608223][ T709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11276'. [ 1010.659198][ T711] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1010.676908][ T175] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 1010.702588][ T175] dvb-usb: bulk message failed: -22 (3/0) [ 1010.725280][ T175] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1010.741783][ T175] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 1010.789580][ T175] usb 2-1: media controller created [ 1010.800323][ T175] dvb-usb: bulk message failed: -22 (5/0) [ 1010.806186][ T175] dvb-usb: MAC address reading failed. [ 1010.826987][ T175] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1010.879743][ T175] dvb-usb: bulk message failed: -22 (6/0) [ 1010.885789][ T175] dvb-usb: bulk message failed: -22 (6/0) [ 1010.927311][ T175] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 1010.947569][ T175] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input59 [ 1010.982426][ T734] loop2: detected capacity change from 0 to 512 [ 1010.983042][ T175] dvb-usb: schedule remote query interval to 100 msecs. [ 1011.012267][ T734] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1011.018094][ T175] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 1011.050613][ T728] loop3: detected capacity change from 0 to 4096 [ 1011.063035][ T175] usb 2-1: USB disconnect, device number 25 [ 1011.066160][ T734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1011.150198][ T175] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 1011.155663][ T728] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1011.261636][ T728] ntfs3: loop3: Failed to load $Extend (-22). [ 1011.271011][ T728] ntfs3: loop3: Failed to initialize $Extend. [ 1011.452810][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.609761][ T773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11288'. [ 1012.253287][ T175] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1012.473566][ T175] usb 1-1: config index 0 descriptor too short (expected 57635, got 36) [ 1012.488870][ T175] usb 1-1: config 1 has an invalid interface number: 188 but max is 0 [ 1012.522525][ T175] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.559291][ T175] usb 1-1: config 1 has no interface number 0 [ 1012.589657][ T175] usb 1-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1012.597930][ T829] netlink: 'syz.3.11304': attribute type 5 has an invalid length. [ 1012.620780][ T175] usb 1-1: config 1 interface 188 has no altsetting 0 [ 1012.641186][ T175] usb 1-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 1012.661775][ T175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.676218][ T175] usb 1-1: Product: syz [ 1012.680487][ T175] usb 1-1: Manufacturer: syz [ 1012.696214][ T175] usb 1-1: SerialNumber: syz [ 1012.826027][ T836] netlink: 220 bytes leftover after parsing attributes in process `syz.2.11306'. [ 1012.846432][ T836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11306'. [ 1012.860566][ T836] tc_dump_action: action bad kind [ 1012.999141][ T175] usb 1-1: unknown interface protocol 0xc1, assuming v1 [ 1013.015139][ T175] usb 1-1: 188:0 : does not exist [ 1013.017872][ T842] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11309'. [ 1013.035715][ T175] usb 1-1: USB disconnect, device number 39 [ 1013.100764][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1013.509438][ T830] loop1: detected capacity change from 0 to 32768 [ 1013.518440][ T874] netlink: 'syz.3.11313': attribute type 9 has an invalid length. [ 1013.529113][ T830] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.11303 (830) [ 1013.545188][ T874] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11313'. [ 1013.580234][ T830] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1013.601495][ T830] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1013.614171][ T830] BTRFS info (device loop1): force clearing of disk cache [ 1013.624002][ T830] BTRFS info (device loop1): metadata ratio 0 [ 1013.649652][ T830] BTRFS info (device loop1): enabling ssd optimizations [ 1013.657598][ T830] BTRFS info (device loop1): using spread ssd allocation scheme [ 1013.666802][ T830] BTRFS info (device loop1): using free space tree [ 1013.748692][ T830] BTRFS info (device loop1): auto enabling async discard [ 1013.814586][ T830] BTRFS info (device loop1): rebuilding free space tree [ 1013.836643][ T896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11316'. [ 1013.857961][ T896] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11316'. [ 1014.127491][ T5776] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1014.368882][ T5769] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (5769) [ 1014.894651][ T949] netlink: 'syz.0.11327': attribute type 1 has an invalid length. [ 1014.907928][ T951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11328'. [ 1015.637136][ T1014] overlayfs: conflicting options: userxattr,metacopy=on [ 1016.267777][ T1063] No such timeout policy "syz0" [ 1016.439545][ T1072] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 1016.611613][ T1080] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11356'. [ 1016.863322][ T1093] gtp0: entered promiscuous mode [ 1016.868404][ T1093] gtp0: entered allmulticast mode [ 1017.341598][ T1118] Process accounting resumed [ 1017.368508][ T1123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11371'. [ 1017.403115][ T1125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11374'. [ 1017.741206][ T1142] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1017.963964][ T27] audit: type=1326 audit(1013.073:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1156 comm="syz.2.11383" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7ffc0000 [ 1018.033645][ T27] audit: type=1326 audit(1013.101:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1156 comm="syz.2.11383" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f9586b9e0d9 code=0x7ffc0000 [ 1018.082673][ T1165] netlink: 'syz.0.11386': attribute type 2 has an invalid length. [ 1018.098173][ T27] audit: type=1326 audit(1013.101:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1156 comm="syz.2.11383" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7ffc0000 [ 1018.170709][ T27] audit: type=1326 audit(1013.101:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1156 comm="syz.2.11383" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7ffc0000 [ 1018.249763][T32254] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1018.437264][ T1189] loop3: detected capacity change from 0 to 64 [ 1018.466761][T32254] usb 2-1: Using ep0 maxpacket: 32 [ 1018.472253][ T790] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1018.485990][T32254] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.504137][T32254] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1018.524119][ T27] audit: type=1800 audit(1013.599:3344): pid=1189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11394" name=2E02 dev="loop3" ino=21 res=0 errno=0 [ 1018.533956][T32254] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=21.11 [ 1018.558357][ T1192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11395'. [ 1018.567635][T32254] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.567667][T32254] usb 2-1: Product: syz [ 1018.567684][T32254] usb 2-1: Manufacturer: syz [ 1018.567700][T32254] usb 2-1: SerialNumber: syz [ 1018.591402][ T1192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11395'. [ 1018.595501][T32254] usb 2-1: config 0 descriptor?? [ 1018.702456][ T1199] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1018.729659][ T790] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1018.738728][ T790] usb 3-1: config 179 has no interface number 0 [ 1018.745066][ T790] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1018.765068][ T790] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 1018.778072][ T790] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1018.791074][ T790] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 1018.803480][ T790] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1018.818802][ T790] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1018.857026][ T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.888807][ T1170] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1018.897257][ T1170] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1018.902064][ T1209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11398'. [ 1019.089196][ T175] usb 2-1: USB disconnect, device number 26 [ 1019.231001][ T5815] usb 3-1: USB disconnect, device number 18 [ 1019.231062][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1019.246197][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 1019.527911][ T27] audit: type=1400 audit(1014.521:3345): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=1281 comm="syz.3.11404" [ 1019.620903][ T1277] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1019.628977][ T1277] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1019.705768][ T1277] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1019.714987][ T1277] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1019.737104][ T1277] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1019.767881][ T1277] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1019.781784][ T1277] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1019.795561][ T1277] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1020.216654][ T1320] netlink: 264 bytes leftover after parsing attributes in process `syz.0.11415'. [ 1020.256170][ T1320] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11415'. [ 1020.649310][ T1334] loop2: detected capacity change from 0 to 8192 [ 1020.690174][ T1334] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1020.704817][ T1334] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1020.715296][ T1334] REISERFS (device loop2): using ordered data mode [ 1020.725952][ T1334] reiserfs: using flush barriers [ 1020.733522][ T1334] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1020.756304][ T1334] REISERFS (device loop2): checking transaction log (loop2) [ 1020.781148][ T1334] REISERFS (device loop2): Using r5 hash to sort names [ 1020.788784][ T1334] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1020.873993][ T1350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11424'. [ 1020.894601][ T1350] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1021.473846][ T1367] bond7: option fail_over_mac: invalid value (4) [ 1021.504863][ T1367] bond7 (unregistering): Released all slaves [ 1021.784888][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 1021.968269][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 1021.974668][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 1021.977830][T15305] Bluetooth: hci1: command 0x0406 tx timeout [ 1022.051620][ T1457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11436'. [ 1022.183693][ T1462] openvswitch: netlink: Actions may not be safe on all matching packets [ 1022.589030][ T1485] erspan1: entered promiscuous mode [ 1022.594345][ T1485] erspan1: entered allmulticast mode [ 1023.098979][ T1511] loop3: detected capacity change from 0 to 1024 [ 1023.125179][ T1511] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1023.187339][ T1511] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1023.233385][ T1511] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1023.281706][ T1511] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #3: comm syz.3.11455: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1023.337559][ T1511] EXT4-fs (loop3): no journal found [ 1023.342858][ T1511] EXT4-fs (loop3): can't get journal size [ 1023.364635][ T1511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1023.468325][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.724843][ T1545] loop3: detected capacity change from 0 to 16 [ 1023.775685][ T1545] erofs: (device loop3): mounted with root inode @ nid 36. [ 1023.826913][ T1545] syz.3.11462: attempt to access beyond end of device [ 1023.826913][ T1545] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1023.834304][ T1552] ±ÿ: renamed from lo [ 1023.874441][ T1545] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -21 in[55, 4041] out[4096] [ 1023.916701][ T27] audit: type=1800 audit(1018.569:3346): pid=1545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.11462" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1024.041362][ T1453] Bluetooth: hci3: command 0x0406 tx timeout [ 1024.213956][ T1453] Bluetooth: hci2: command 0x0406 tx timeout [ 1024.214028][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 1024.220056][ T1453] Bluetooth: hci0: command 0x0406 tx timeout [ 1024.431516][ T1579] netlink: 'syz.3.11476': attribute type 1 has an invalid length. [ 1024.637238][ T27] audit: type=1326 audit(1019.233:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1588 comm="syz.3.11481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a59e0d9 code=0x7ffc0000 [ 1024.701976][ T27] audit: type=1326 audit(1019.233:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1588 comm="syz.3.11481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a59e0d9 code=0x7ffc0000 [ 1024.769330][ T1592] loop2: detected capacity change from 0 to 2048 [ 1024.789826][ T27] audit: type=1326 audit(1019.233:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1588 comm="syz.3.11481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a59e0d9 code=0x7ffc0000 [ 1024.834887][ T1592] loop2: p1 < > p3 [ 1024.843181][ T1592] loop2: p3 size 134217728 extends beyond EOD, truncated [ 1024.883260][ T27] audit: type=1326 audit(1019.233:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1588 comm="syz.3.11481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a59e0d9 code=0x7ffc0000 [ 1024.962894][ T27] audit: type=1326 audit(1019.233:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1588 comm="syz.3.11481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f306a59e0d9 code=0x7ffc0000 [ 1025.036117][ T27] audit: type=1326 audit(1019.233:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1588 comm="syz.3.11481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a59e0d9 code=0x7ffc0000 [ 1025.124764][ T27] audit: type=1326 audit(1019.233:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1588 comm="syz.3.11481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a59e0d9 code=0x7ffc0000 [ 1025.138606][ T1627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11488'. [ 1025.191467][ T27] audit: type=1326 audit(1019.233:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1588 comm="syz.3.11481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f306a59e0d9 code=0x7ffc0000 [ 1025.228829][ T27] audit: type=1326 audit(1019.233:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1588 comm="syz.3.11481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f306a59e0d9 code=0x7ffc0000 [ 1025.253045][ T790] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1025.449838][ T790] usb 3-1: Using ep0 maxpacket: 8 [ 1025.457447][ T790] usb 3-1: config 218 has too many interfaces: 244, using maximum allowed: 32 [ 1025.465786][ T1639] netlink: 'syz.0.11493': attribute type 2 has an invalid length. [ 1025.474721][ T790] usb 3-1: config 218 has 1 interface, different from the descriptor's value: 244 [ 1025.474754][ T790] usb 3-1: config 218 has no interface number 0 [ 1025.524170][ T790] usb 3-1: config 218 interface 95 altsetting 64 has an invalid endpoint with address 0xFF, skipping [ 1025.558790][ T790] usb 3-1: config 218 interface 95 altsetting 64 endpoint 0x82 has an invalid bInterval 233, changing to 7 [ 1025.585607][ T790] usb 3-1: config 218 interface 95 altsetting 64 endpoint 0x82 has invalid maxpacket 50661, setting to 1024 [ 1025.609126][ T790] usb 3-1: config 218 interface 95 has no altsetting 0 [ 1025.623435][ T790] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 1025.632979][ T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.654634][ T790] usb 3-1: Product: syz [ 1025.659369][ T790] usb 3-1: Manufacturer: syz [ 1025.664050][ T790] usb 3-1: SerialNumber: syz [ 1025.687026][ T1647] netlink: 'syz.0.11496': attribute type 4 has an invalid length. [ 1025.834849][ T1652] geneve3: entered promiscuous mode [ 1025.941976][ T790] usbtouchscreen: probe of 3-1:218.95 failed with error -22 [ 1025.992950][ T790] usb 3-1: USB disconnect, device number 19 [ 1025.997493][ T1685] netlink: 'syz.0.11500': attribute type 4 has an invalid length. [ 1026.031807][ T1685] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.11500'. [ 1026.391714][ T1708] netlink: 512 bytes leftover after parsing attributes in process `syz.1.11507'. [ 1027.127763][ T1747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11520'. [ 1027.333469][ T1759] žÿ: renamed from team_slave_1 (while UP) [ 1028.433142][ T1816] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1028.443365][ T1816] bridge0: port 1(netdevsim0) entered disabled state [ 1028.831785][ T1842] netlink: 172 bytes leftover after parsing attributes in process `syz.0.11547'. [ 1028.841514][ T1842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11547'. [ 1028.851733][ T1842] netlink: 172 bytes leftover after parsing attributes in process `syz.0.11547'. [ 1028.862524][ T1842] netlink: 100 bytes leftover after parsing attributes in process `syz.0.11547'. [ 1028.872314][ T1842] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11547'. [ 1028.881729][ T5815] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1028.898261][T32254] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1028.961960][ T1847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11550'. [ 1029.048420][ T1850] xt_TCPMSS: Only works on TCP SYN packets [ 1029.082669][ T5815] usb 2-1: Using ep0 maxpacket: 16 [ 1029.095847][ T5815] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1029.125891][ T5815] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1029.147679][T32254] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1029.148788][ T5786] Bluetooth: hci0: unexpected event for opcode 0x080f [ 1029.164506][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.179310][T32254] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1029.188873][ T5815] usb 2-1: Product: syz [ 1029.193699][ T5815] usb 2-1: Manufacturer: syz [ 1029.198335][ T5815] usb 2-1: SerialNumber: syz [ 1029.205542][T32254] usb 3-1: can't read configurations, error -71 [ 1029.215860][ T5815] usb 2-1: config 0 descriptor?? [ 1029.238091][ T5815] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1029.257166][ T5815] usb 2-1: Detected FT232R [ 1029.349584][ T1868] netlink: 'syz.0.11556': attribute type 7 has an invalid length. [ 1029.358386][ T1868] netlink: 140 bytes leftover after parsing attributes in process `syz.0.11556'. [ 1029.694863][ T5815] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1029.723278][ T5815] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 1029.741011][ T5815] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1029.765202][ T5815] usb 2-1: USB disconnect, device number 27 [ 1029.800552][ T5815] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1029.821698][ T5815] ftdi_sio 2-1:0.0: device disconnected [ 1029.946030][ T1906] netlink: 'syz.3.11564': attribute type 3 has an invalid length. [ 1030.741850][ T1943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11578'. [ 1030.961067][ T1956] 9pnet_fd: p9_fd_create_tcp (1956): problem connecting socket to 127.0.0.1 [ 1031.447178][ T5766] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1031.468397][ T1986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11592'. [ 1031.477549][ T1986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11592'. [ 1031.655607][ T5766] usb 1-1: Using ep0 maxpacket: 16 [ 1031.667545][ T5766] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1031.692279][ T5766] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.710986][ T5766] usb 1-1: Product: syz [ 1031.718057][ T5766] usb 1-1: Manufacturer: syz [ 1031.725273][ T5766] usb 1-1: SerialNumber: syz [ 1031.758149][ T5766] r8152-cfgselector 1-1: config 0 descriptor?? [ 1031.951008][ T2006] ./file0: Can't open blockdev [ 1032.095408][ T2012] loop1: detected capacity change from 0 to 64 [ 1032.247005][ T5766] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1032.280598][ T5766] r8152-cfgselector 1-1: USB disconnect, device number 40 [ 1032.350126][ T2019] loop2: detected capacity change from 0 to 2048 [ 1032.409227][ T2019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1032.519986][ T2019] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.11602: bg 0: block 345: padding at end of block bitmap is not set [ 1032.642396][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.500806][ T5786] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1033.512059][ T5786] Bluetooth: hci0: Injecting HCI hardware error event [ 1033.523379][ T5786] Bluetooth: hci0: hardware error 0x00 [ 1033.602511][ T2095] netlink: 'syz.0.11625': attribute type 7 has an invalid length. [ 1033.611606][ T2095] netlink: 'syz.0.11625': attribute type 8 has an invalid length. [ 1033.619874][ T2095] netlink: 'syz.0.11625': attribute type 9 has an invalid length. [ 1034.090586][ T2125] program syz.3.11633 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1034.330801][ T5766] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 1034.530249][ T5766] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.558259][ T5766] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1034.588514][ T5766] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1034.611931][ T5766] usb 1-1: string descriptor 0 read error: -22 [ 1034.619347][ T5766] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1034.656070][ T5766] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1034.692677][ T5766] usb 1-1: 0:2 : does not exist [ 1034.711806][ T2155] bridge_slave_0: entered promiscuous mode [ 1034.733363][ T2155] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1034.796487][ T5766] usb-storage 1-1:1.1: USB Mass Storage device detected [ 1034.926676][ T5766] usb_set_interface error [ 1034.937485][ T5766] snd-usb-us122l: probe of 1-1:1.1 failed with error -22 [ 1034.977733][ T5766] usb 1-1: USB disconnect, device number 41 [ 1035.438880][ T2152] loop2: detected capacity change from 0 to 32768 [ 1035.459815][ T2152] [ 1035.459815][ T2152] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1035.459815][ T2152] [ 1035.624033][ T3507] [ 1035.624033][ T3507] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1035.624033][ T3507] [ 1035.655491][ T3507] [ 1035.655491][ T3507] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1035.655491][ T3507] [ 1035.675389][T32254] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1035.705426][ T114] [ 1035.705426][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1035.705426][ T114] [ 1035.737815][ T5779] [ 1035.737815][ T5779] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1035.737815][ T5779] [ 1035.752279][ T5786] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1035.757295][ T5779] [ 1035.757295][ T5779] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1035.757295][ T5779] [ 1035.885750][T32254] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1035.906347][T32254] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1035.935905][T32254] usb 4-1: Product: syz [ 1035.948038][T32254] usb 4-1: SerialNumber: syz [ 1035.969367][T32254] usb 4-1: config 0 descriptor?? [ 1036.242576][T32254] hso 4-1:0.0: Failed to find BULK IN ep [ 1036.485313][T32254] usb 4-1: USB disconnect, device number 38 [ 1036.620027][ T2258] __nla_validate_parse: 3 callbacks suppressed [ 1036.620047][ T2258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11665'. [ 1037.296795][ T2297] program syz.0.11679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1037.316769][ T2297] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1037.522717][ T2308] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11683'. [ 1038.092266][ T2329] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11691'. [ 1038.280953][ T2305] loop3: detected capacity change from 0 to 32768 [ 1038.309867][ T2305] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.11682 (2305) [ 1038.375430][ T2305] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1038.413817][ T2305] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1038.425291][ T2305] BTRFS info (device loop3): enabling ssd optimizations [ 1038.447061][ T2305] BTRFS info (device loop3): not using ssd optimizations [ 1038.468026][ T2346] loop2: detected capacity change from 0 to 512 [ 1038.482553][ T2305] BTRFS info (device loop3): turning off barriers [ 1038.489490][ T2305] BTRFS info (device loop3): using free space tree [ 1038.507331][ T2346] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1038.567867][ T2346] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1038.685101][ T2346] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.11697: bg 0: block 248: padding at end of block bitmap is not set [ 1038.735225][ T2346] Quota error (device loop2): write_blk: dquota write failed [ 1038.742842][ T2346] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 1038.788157][ T2346] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.11697: Failed to acquire dquot type 1 [ 1038.869092][ T2346] EXT4-fs (loop2): 1 truncate cleaned up [ 1038.908143][ T2346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1039.001591][ T5778] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1039.190389][ T49] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 1039.216549][ T49] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 1 [ 1039.254793][ T2385] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1039.338362][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1039.371022][ T27] audit: type=1326 audit(1032.817:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2434 comm="syz.1.11706" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65f59e0d9 code=0x7ffc0000 [ 1039.504086][ T27] audit: type=1326 audit(1032.817:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2434 comm="syz.1.11706" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65f59e0d9 code=0x7ffc0000 [ 1039.633221][ T27] audit: type=1326 audit(1032.817:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2434 comm="syz.1.11706" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fd65f59e0d9 code=0x7ffc0000 [ 1039.710946][ T27] audit: type=1326 audit(1032.817:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2434 comm="syz.1.11706" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65f59e0d9 code=0x7ffc0000 [ 1039.858167][ T27] audit: type=1326 audit(1032.817:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2434 comm="syz.1.11706" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65f59e0d9 code=0x7ffc0000 [ 1040.367307][ T2483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1040.764799][ T2513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11727'. [ 1040.783343][ T2513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11727'. [ 1040.912392][ T2518] UBIFS error (pid: 2518): cannot open "ubi:0", error -19 [ 1041.602808][ T2560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1041.938956][ T2578] loop3: detected capacity change from 0 to 512 [ 1041.984810][ T2578] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.11747: inode has both inline data and extents flags [ 1042.008104][ T2578] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.11747: couldn't read orphan inode 15 (err -117) [ 1042.093094][ T2578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1042.313916][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.810117][ T2623] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11758'. [ 1043.341921][ T2647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11765'. [ 1044.034429][ T2642] loop2: detected capacity change from 0 to 32768 [ 1044.081389][ T2642] JBD2: Ignoring recovery information on journal [ 1044.177827][ T2642] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1044.680091][ T5779] ocfs2: Unmounting device (7,2) on (node local) [ 1045.301507][ T2743] netlink: zone id is out of range [ 1045.320768][ T2743] netlink: del zone limit has 8 unknown bytes [ 1045.641825][ T2758] loop1: detected capacity change from 0 to 512 [ 1045.739825][ T2766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11798'. [ 1045.757461][ T2766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11798'. [ 1045.803392][ T2769] usb usb1: usbfs: process 2769 (syz.0.11799) did not claim interface 0 before use [ 1045.863016][ T2758] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 1045.918398][ T2758] FAT-fs (loop1): Filesystem has been set read-only [ 1046.815389][ T2836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11815'. [ 1046.841541][ T2836] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11815'. [ 1046.895231][ T2838] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11816'. [ 1047.074321][ T2850] loop2: detected capacity change from 0 to 256 [ 1047.852969][ T2879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11828'. [ 1048.081002][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1048.087404][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1048.909898][ T2933] x_tables: duplicate underflow at hook 1 [ 1048.996530][ T2938] netlink: 'syz.2.11849': attribute type 2 has an invalid length. [ 1049.014024][ T2938] netlink: 'syz.2.11849': attribute type 4 has an invalid length. [ 1049.032192][ T2938] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11849'. [ 1049.615045][ T2960] loop2: detected capacity change from 0 to 4096 [ 1049.679726][ T2960] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1049.715718][ T2960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1049.830656][ T2960] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 1049.960164][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.184667][ T2990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11867'. [ 1050.226113][ T2985] Process accounting paused [ 1050.238779][ T2990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11867'. [ 1050.248031][ T2990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11867'. [ 1050.289591][ T2990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11867'. [ 1050.314629][ T2990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11867'. [ 1050.353285][ T2990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11867'. [ 1050.379754][ T2990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11867'. [ 1050.389459][ T2990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11867'. [ 1050.412025][ T2990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11867'. [ 1051.255109][ T3039] bond4: Unable to set up delay as MII monitoring is disabled [ 1051.295758][ T3039] bond4 (unregistering): Released all slaves [ 1051.507214][ T5786] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 1051.619412][ T3121] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1051.630062][ T3121] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1051.802525][ T3127] program syz.0.11892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1052.145579][ T3149] netlink: 'syz.0.11900': attribute type 8 has an invalid length. [ 1052.721644][ T3215] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.126676][ T3233] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1053.299115][ T3240] loop2: detected capacity change from 0 to 16 [ 1053.329099][ T3240] erofs: (device loop2): mounted with root inode @ nid 36. [ 1053.455942][ T3211] loop3: detected capacity change from 0 to 32768 [ 1053.515647][ T3211] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 1053.835507][ T3267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.842654][ T5769] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 1054.001125][ T23] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1054.230071][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1054.253521][ T23] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1054.272118][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.290461][ T23] usb 2-1: Product: syz [ 1054.304935][ T23] usb 2-1: Manufacturer: syz [ 1054.312151][ T23] usb 2-1: SerialNumber: syz [ 1054.338519][ T23] usb 2-1: config 0 descriptor?? [ 1054.369567][ T23] hub 2-1:0.0: bad descriptor, ignoring hub [ 1054.375896][ T23] hub: probe of 2-1:0.0 failed with error -5 [ 1054.423271][ T23] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input61 [ 1055.055370][ T790] usb 2-1: USB disconnect, device number 28 [ 1055.222564][ T3324] __nla_validate_parse: 13 callbacks suppressed [ 1055.222587][ T3324] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11945'. [ 1055.276554][ T3326] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11946'. [ 1055.305248][ T3326] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1056.361002][ T3392] overlayfs: missing 'lowerdir' [ 1056.460396][ T3396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1056.579918][ T3403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11969'. [ 1057.592686][ T3457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11989'. [ 1057.650043][ T3459] netlink: 'syz.3.11990': attribute type 4 has an invalid length. [ 1057.879867][ T3472] comedi comedi4: bad chanlist[0]=0xfffffffe chan=65534 range length=2 [ 1058.272591][ T3492] loop3: detected capacity change from 0 to 16 [ 1058.305584][ T3492] erofs: (device loop3): mounted with root inode @ nid 36. [ 1058.523213][ T5815] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 1058.596693][ T3514] netlink: 'syz.2.12007': attribute type 5 has an invalid length. [ 1058.754082][ T5815] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.783149][ T5815] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1058.803569][ T5815] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 1058.826940][ T5815] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1058.848829][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.870381][ T5815] hub 1-1:1.0: bad descriptor, ignoring hub [ 1058.876536][ T5815] hub: probe of 1-1:1.0 failed with error -5 [ 1058.902943][ T5815] cdc_wdm 1-1:1.0: skipping garbage [ 1058.908333][ T5815] cdc_wdm 1-1:1.0: skipping garbage [ 1058.935220][ T5815] cdc_wdm 1-1:1.0: skipping garbage [ 1058.948696][ T5815] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1059.210229][ T3500] loop1: detected capacity change from 0 to 32768 [ 1059.270032][ T3500] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1059.293861][ T5815] usb 1-1: USB disconnect, device number 42 [ 1059.341226][ T3555] loop2: detected capacity change from 0 to 256 [ 1059.496078][ T3500] XFS (loop1): Ending clean mount [ 1059.534510][ T3500] XFS (loop1): Quotacheck needed: Please wait. [ 1059.570733][ T3563] netlink: 'syz.3.12016': attribute type 7 has an invalid length. [ 1059.597299][ T3563] netlink: 'syz.3.12016': attribute type 8 has an invalid length. [ 1059.687248][ T3500] XFS (loop1): Quotacheck: Done. [ 1059.933645][ T3584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12020'. [ 1060.002896][ T5776] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1060.714903][ T3614] overlayfs: missing 'lowerdir' [ 1061.355421][ T3641] veth1_to_hsr: entered promiscuous mode [ 1061.402009][ T3641] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 1061.653805][ T3651] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12043'. [ 1061.698580][ T3651] netlink: 172 bytes leftover after parsing attributes in process `syz.2.12043'. [ 1061.722150][ T3656] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1062.219170][ T3681] netlink: 115 bytes leftover after parsing attributes in process `syz.0.12054'. [ 1062.422586][ T3692] loop2: detected capacity change from 0 to 2048 [ 1062.490764][ T3692] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1062.819666][ T3712] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.12063'. [ 1062.978534][ T3728] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.12068'. [ 1062.994785][ T3728] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1063.011895][ T3728] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1063.500265][ T5815] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1063.544698][ T3754] loop3: detected capacity change from 0 to 512 [ 1063.557789][ T3754] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1063.615476][ T3754] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1063.662178][ T3754] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1063.697600][ T5815] usb 2-1: config 1 has an invalid descriptor of length 168, skipping remainder of the config [ 1063.709290][ T3754] System zones: 0-1, 15-15, 18-18, 34-34 [ 1063.715223][ T5815] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 9121, setting to 64 [ 1063.735608][ T5815] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1063.745537][ T3754] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1063.752598][ T5815] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 1063.775113][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.790447][ T3754] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 1063.792911][ T5815] usb 2-1: Product: syz [ 1063.811126][ T3754] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1063.814598][ T5815] usb 2-1: Manufacturer: syz [ 1063.847723][ T5815] usb 2-1: SerialNumber: syz [ 1063.854712][ T3754] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1063.877039][ T3754] EXT4-fs (loop3): 1 truncate cleaned up [ 1063.888822][ T5815] cdc_subset: probe of 2-1:1.0 failed with error -22 [ 1063.891728][ T3754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1063.903493][ T5815] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 1063.931602][ T5815] cdc_ncm 2-1:1.0: bind() failure [ 1063.970033][ T5815] cdc_subset: probe of 2-1:1.1 failed with error -22 [ 1064.001744][ T5815] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1064.022642][ T3754] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 1064.023337][ T5815] cdc_ncm 2-1:1.1: bind() failure [ 1064.066908][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.139708][ T5815] usb 2-1: USB disconnect, device number 29 [ 1064.425854][ T3800] netlink: 'syz.0.12089': attribute type 2 has an invalid length. [ 1064.454517][ T3800] netlink: 'syz.0.12089': attribute type 8 has an invalid length. [ 1064.462558][ T3800] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12089'. [ 1065.228258][ T3796] loop3: detected capacity change from 0 to 32768 [ 1065.309731][ T3796] (syz.3.12086,3796,0):ocfs2_verify_heartbeat:835 ERROR: Heartbeat has to be started to mount a read-write clustered device. [ 1065.405703][ T3796] (syz.3.12086,3796,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1065.996553][ T3860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12109'. [ 1066.269463][ T3871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12110'. [ 1066.330656][ T175] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1066.576866][ T175] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.599675][ T175] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1066.610275][ T175] usb 1-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00 [ 1066.632952][ T175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.652500][ T3889] IPv6: Can't replace route, no match found [ 1066.750455][ T3895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12118'. [ 1066.774996][ T3895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12118'. [ 1066.804447][ T3895] netlink: 'syz.3.12118': attribute type 6 has an invalid length. [ 1066.949694][ T175] usb 1-1: USB disconnect, device number 43 [ 1067.112813][ T3920] xt_recent: hitcount (4294967294) is larger than allowed maximum (255) [ 1067.309401][ T3929] CIFS mount error: No usable UNC path provided in device string! [ 1067.309401][ T3929] [ 1067.319912][ T3929] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1068.726902][ T175] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1068.935103][ T175] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1068.956948][ T175] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1068.976545][ T175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.061469][ T4012] loop1: detected capacity change from 0 to 256 [ 1069.078536][ T4012] exfat: Deprecated parameter 'utf8' [ 1069.097796][ T4012] exfat: Deprecated parameter 'namecase' [ 1069.103656][ T4012] exfat: Deprecated parameter 'namecase' [ 1069.126667][ T4012] exfat: Deprecated parameter 'utf8' [ 1069.145571][ T4012] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1069.456464][ T175] qmi_wwan: probe of 3-1:1.0 failed with error -22 [ 1069.485003][ T175] usb 3-1: USB disconnect, device number 22 [ 1069.525868][ T4002] loop3: detected capacity change from 0 to 32768 [ 1069.612635][ T4002] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1069.914724][ T5778] ocfs2: Unmounting device (7,3) on (node local) [ 1070.060754][ T4047] netlink: 76 bytes leftover after parsing attributes in process `syz.0.12159'. [ 1070.082165][ T4047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12159'. [ 1071.267498][ T4106] loop1: detected capacity change from 0 to 2048 [ 1071.328175][ T4106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1071.606755][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.629194][ T4117] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1071.642176][ T4117] bridge5: entered promiscuous mode [ 1071.668762][ T4117] bridge5: entered allmulticast mode [ 1072.018800][ T4130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12182'. [ 1072.297735][ T27] audit: type=1326 audit(1063.176:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4138 comm="syz.3.12186" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f306a59e0d9 code=0x0 [ 1072.523906][ T4153] loop1: detected capacity change from 0 to 256 [ 1072.556009][ T4153] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1072.958875][ T27] audit: type=1326 audit(1063.794:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4177 comm="syz.2.12198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7ffc0000 [ 1073.036108][ T27] audit: type=1326 audit(1063.794:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4177 comm="syz.2.12198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7ffc0000 [ 1073.107709][ T790] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 1073.126460][ T27] audit: type=1326 audit(1063.840:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4177 comm="syz.2.12198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f9586b9e0d9 code=0x7ffc0000 [ 1073.173942][ T27] audit: type=1326 audit(1063.840:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4177 comm="syz.2.12198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7ffc0000 [ 1073.223241][ T27] audit: type=1326 audit(1063.840:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4177 comm="syz.2.12198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9586b9e0d9 code=0x7ffc0000 [ 1073.381390][ T790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1073.395618][ T790] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1073.405991][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.421998][ T790] usb 2-1: Product: syz [ 1073.426747][ T790] usb 2-1: Manufacturer: syz [ 1073.453641][ T790] usb 2-1: SerialNumber: syz [ 1073.491220][ T790] usb 2-1: config 0 descriptor?? [ 1073.497101][ T4166] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1073.518536][ T790] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1073.787040][ T790] usb 2-1: USB disconnect, device number 30 [ 1073.984854][ T4227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12212'. [ 1074.011064][ T4227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12212'. [ 1074.033124][ T4227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12212'. [ 1074.062207][ T4227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12212'. [ 1074.082321][ T4227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12212'. [ 1074.100839][ T4227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12212'. [ 1074.116548][ T4227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12212'. [ 1074.990624][ T4294] loop1: detected capacity change from 0 to 512 [ 1074.997428][ T175] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1075.016492][ T4294] EXT4-fs: Ignoring removed bh option [ 1075.021969][ T4294] EXT4-fs: Ignoring removed oldalloc option [ 1075.069864][ T4294] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1075.092514][ T4294] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 1075.167976][ T4294] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.12228: Corrupt directory, running e2fsck is recommended [ 1075.202772][ T175] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.230369][ T175] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1075.253844][ T175] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1075.268925][ T4294] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1075.280939][ T4294] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.12228: bad orphan inode 15 [ 1075.294962][ T4294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1075.296348][ T175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.362014][ T175] usb 1-1: config 0 descriptor?? [ 1075.382488][ T4294] EXT4-fs error (device loop1): __ext4_new_inode:1081: comm syz.1.12228: reserved inode found cleared - inode=18 [ 1075.394130][ T175] em28xx 1-1:0.0: audio device (2040:1605): interface 0, class 1 [ 1075.502383][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.693134][ T175] usb 1-1: USB disconnect, device number 44 [ 1076.053857][ T4353] netlink: 'syz.2.12243': attribute type 1 has an invalid length. [ 1076.240589][ T4354] loop1: detected capacity change from 0 to 4096 [ 1076.287435][ T4354] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1077.219707][ T4407] loop2: detected capacity change from 0 to 1024 [ 1077.585333][ T4430] __nla_validate_parse: 38 callbacks suppressed [ 1077.585354][ T4430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12268'. [ 1077.633649][ T4430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12268'. [ 1077.680471][ T4430] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12268'. [ 1077.717523][ T4434] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1078.571498][ T4480] loop1: detected capacity change from 0 to 1024 [ 1079.325005][ T4515] netlink: 'syz.3.12297': attribute type 5 has an invalid length. [ 1079.384703][ T4519] loop2: detected capacity change from 0 to 256 [ 1080.118109][ T27] audit: type=1326 audit(1070.397:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4552 comm="syz.3.12311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a59e0d9 code=0x7ffc0000 [ 1080.170971][ T27] audit: type=1326 audit(1070.397:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4552 comm="syz.3.12311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a59e0d9 code=0x7ffc0000 [ 1080.226766][ T27] audit: type=1326 audit(1070.406:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4552 comm="syz.3.12311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a59e0d9 code=0x7ffc0000 [ 1080.298782][ T27] audit: type=1326 audit(1070.434:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4552 comm="syz.3.12311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a59e0d9 code=0x7ffc0000 [ 1080.379063][ T27] audit: type=1326 audit(1070.434:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4552 comm="syz.3.12311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f306a59e0d9 code=0x7ffc0000 [ 1080.427532][ T175] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 1080.448869][ T27] audit: type=1326 audit(1070.434:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4552 comm="syz.3.12311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a59e0d9 code=0x7ffc0000 [ 1080.569296][ T27] audit: type=1326 audit(1070.434:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4552 comm="syz.3.12311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306a59e0d9 code=0x7ffc0000 [ 1080.650421][ T27] audit: type=1326 audit(1070.434:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4552 comm="syz.3.12311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f306a59e0d9 code=0x7ffc0000 [ 1080.681256][ T175] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1080.705775][ T175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.741606][ T27] audit: type=1326 audit(1070.434:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4552 comm="syz.3.12311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f306a59e0d9 code=0x7ffc0000 [ 1080.747302][ T175] usb 1-1: Product: syz [ 1080.810694][ T175] usb 1-1: Manufacturer: syz [ 1080.815638][ T175] usb 1-1: SerialNumber: syz [ 1080.833882][ T175] r8152-cfgselector 1-1: config 0 descriptor?? [ 1081.335071][ T175] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1081.350942][ T175] r8152-cfgselector 1-1: USB disconnect, device number 45 [ 1081.385381][T15305] Bluetooth: hci2: command 0x0406 tx timeout [ 1081.489875][T32254] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1081.555197][ T5815] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1081.705008][ T4630] loop1: detected capacity change from 0 to 32768 [ 1081.705125][T32254] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1081.770846][ T5815] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1081.775012][T32254] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1081.793522][T32254] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.802887][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.803758][T32254] usb 4-1: Product: syz [ 1081.816984][T32254] usb 4-1: Manufacturer: syz [ 1081.822539][T32254] usb 4-1: SerialNumber: syz [ 1081.824783][ T5815] usb 3-1: Product: syz [ 1081.830843][T32254] usb 4-1: config 0 descriptor?? [ 1081.843557][T32254] hub 4-1:0.0: bad descriptor, ignoring hub [ 1081.856537][ T5815] usb 3-1: Manufacturer: syz [ 1081.861023][T32254] hub: probe of 4-1:0.0 failed with error -5 [ 1081.867292][ T5815] usb 3-1: SerialNumber: syz [ 1081.895967][ T5815] usb 3-1: config 0 descriptor?? [ 1081.906327][T32254] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input62 [ 1081.914330][ T5815] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1082.480109][ T5815] usb 3-1: USB disconnect, device number 23 [ 1082.527957][ T4661] loop1: detected capacity change from 0 to 1024 [ 1083.114832][ T4614] Process accounting resumed [ 1083.127276][ T5815] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 1083.357908][ T5815] usb 1-1: not running at top speed; connect to a high speed hub [ 1083.388769][ T5815] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1083.412158][ T5815] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a2b, bcdDevice= 0.40 [ 1083.416771][ T23] usb 4-1: USB disconnect, device number 39 [ 1083.448584][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.474589][ T5815] usb 1-1: Product: syz [ 1083.478875][ T5815] usb 1-1: Manufacturer: syz [ 1083.526869][ T5815] usb 1-1: SerialNumber: syz [ 1083.798445][ T4734] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12356'. [ 1083.834099][ T5815] usbhid 1-1:1.0: can't add hid device: -71 [ 1083.854116][ T4734] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1083.882045][ T5815] usbhid: probe of 1-1:1.0 failed with error -71 [ 1083.886745][ T4743] usb usb8: usbfs: process 4743 (syz.3.12358) did not claim interface 0 before use [ 1083.897171][ T5815] usb 1-1: USB disconnect, device number 46 [ 1084.078429][ T4756] loop1: detected capacity change from 0 to 256 [ 1084.094306][ T4756] exfat: Deprecated parameter 'namecase' [ 1084.107184][ T4756] exfat: Deprecated parameter 'namecase' [ 1084.195139][ T4756] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1084.584704][ T4769] loop2: detected capacity change from 0 to 4096 [ 1084.710071][ T4786] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1084.819634][ T4790] Unsupported ieee802154 address type: 0 [ 1084.922606][ T4769] ntfs3: loop2: ino=9, attr_set_size [ 1085.204255][ T790] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1085.224800][ T4815] loop2: detected capacity change from 0 to 512 [ 1085.237489][ T4815] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1085.246371][ T4815] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1085.254944][ T4815] System zones: 0-1, 15-15, 18-18, 34-34 [ 1085.261637][ T4815] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1085.268581][ T4815] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1085.274705][ T5815] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1085.278677][ T4815] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1085.301422][ T4815] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1085.310183][ T4815] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.12376: bad orphan inode 16 [ 1085.321196][ T4815] ext4_test_bit(bit=15, block=18) = 1 [ 1085.326639][ T4815] is_bad_inode(inode)=0 [ 1085.331348][ T4815] NEXT_ORPHAN(inode)=0 [ 1085.335924][ T4815] max_ino=32 [ 1085.339471][ T4815] i_nlink=2 [ 1085.344188][ T4815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1085.363218][ T5766] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1085.367946][ T4815] overlay: filesystem on ./file0 is read-only [ 1085.404297][ T790] usb 2-1: Using ep0 maxpacket: 32 [ 1085.410348][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.422784][ T790] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1085.431605][ T790] usb 2-1: config 0 has no interface number 0 [ 1085.447678][ T790] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1085.469784][ T790] usb 2-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1085.501968][ T5815] usb 1-1: Using ep0 maxpacket: 8 [ 1085.505998][ T790] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1085.511740][ T5815] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1085.524810][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.532838][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1085.544456][ T5815] usb 1-1: Product: syz [ 1085.545304][ T790] usb 2-1: Product: syz [ 1085.556201][ T790] usb 2-1: Manufacturer: syz [ 1085.559298][ T5815] usb 1-1: Manufacturer: syz [ 1085.560825][ T790] usb 2-1: SerialNumber: syz [ 1085.565432][ T5815] usb 1-1: SerialNumber: syz [ 1085.567174][ T5766] usb 4-1: Using ep0 maxpacket: 16 [ 1085.589913][ T5815] usb 1-1: config 0 descriptor?? [ 1085.595207][ T790] usb 2-1: config 0 descriptor?? [ 1085.597791][ T5766] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1085.611506][ T5815] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1085.618786][ T5766] usb 4-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 1085.628672][ T790] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1085.629961][ T5766] usb 4-1: config 0 has no interface number 0 [ 1085.656273][ T5766] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1085.666078][ T5766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.685565][ T5766] usb 4-1: Product: syz [ 1085.696440][ T5766] usb 4-1: Manufacturer: syz [ 1085.701482][ T5766] usb 4-1: SerialNumber: syz [ 1085.714906][ T5766] usb 4-1: config 0 descriptor?? [ 1085.732081][ T5766] usb 4-1: Found UVC 0.00 device syz (046d:08d3) [ 1085.738735][ T5766] usb 4-1: No valid video chain found. [ 1085.894055][ T790] usb 2-1: qt2_setup_urbs - submit read urb failed -90 [ 1085.911687][ T790] quatech2: probe of 2-1:0.51 failed with error -90 [ 1086.042502][ T790] usb 4-1: USB disconnect, device number 40 [ 1086.079259][ T5815] gspca_sn9c2028: read1 error -71 [ 1086.086349][ T5815] gspca_sn9c2028: read1 error -71 [ 1086.097271][ T5815] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 1086.131065][ T5815] usb 1-1: USB disconnect, device number 47 [ 1086.202435][ T23] usb 2-1: USB disconnect, device number 31 [ 1086.629313][ T4891] loop2: detected capacity change from 0 to 128 [ 1086.654667][ T4891] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1086.964343][ T4910] loop2: detected capacity change from 0 to 16 [ 1086.979631][ T4910] erofs: (device loop2): mounted with root inode @ nid 36. [ 1086.996203][ T4910] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 1087.008017][ T4910] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 1087.017825][ T4910] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 1087.043222][ T4910] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 1087.060531][ T4910] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 1087.074618][ T5815] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 1087.106851][ T4910] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 1087.118840][ T4910] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 1087.130320][ T4910] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 1087.143001][ T4910] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 1087.152394][ T27] audit: type=1800 audit(1076.889:3376): pid=4910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.12392" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 1087.313787][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1087.331900][ T5815] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1087.351786][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.367362][ T5815] usb 1-1: Product: syz [ 1087.367437][ T790] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1087.375668][ T5815] usb 1-1: Manufacturer: syz [ 1087.393567][ T5815] usb 1-1: SerialNumber: syz [ 1087.408236][ T5815] usb 1-1: config 0 descriptor?? [ 1087.428581][ T5815] hub 1-1:0.0: bad descriptor, ignoring hub [ 1087.439745][ T5815] hub: probe of 1-1:0.0 failed with error -5 [ 1087.456358][ T5815] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input63 [ 1087.607912][ T790] usb 2-1: Using ep0 maxpacket: 8 [ 1087.636871][ T790] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1087.677744][ T790] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1087.699751][ T790] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1087.718231][ T790] usb 2-1: Product: syz [ 1087.725406][ T790] usb 2-1: Manufacturer: syz [ 1087.730075][ T790] usb 2-1: SerialNumber: syz [ 1087.961715][ T4963] xt_bpf: check failed: parse error [ 1087.995559][ T790] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 1088.021994][ T790] usb 2-1: Handspring Visor / Palm OS: port 126, is for Console use [ 1088.037938][ T790] usb 2-1: Handspring Visor / Palm OS: port 123, is for unknown use [ 1088.054731][ T790] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1088.221328][ T790] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 1088.261291][ T790] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 1088.280957][ T790] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1088.302337][ T790] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1088.330692][ T790] usb 2-1: USB disconnect, device number 32 [ 1088.358366][ T790] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1088.390044][ T790] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1088.394883][ T4995] tmpfs: Bad value for 'mpol' [ 1088.402255][ T790] visor 2-1:1.0: device disconnected [ 1089.781791][ T5066] loop2: detected capacity change from 0 to 2048 [ 1089.927825][ T5078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12436'. [ 1089.937090][ T5078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12436'. [ 1089.968209][ T5066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 ro without journal. Quota mode: none. [ 1089.991467][ T5076] netlink: 'syz.3.12434': attribute type 3 has an invalid length. [ 1090.030062][ T5076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12434'. [ 1090.112952][ T5066] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.12432: inline data xattr refers to an external xattr inode [ 1090.356493][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 1090.425449][ T5101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12442'. [ 1090.607110][ T5116] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1090.622580][ T5117] netlink: 'syz.0.12447': attribute type 3 has an invalid length. [ 1090.630535][ T5117] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12447'. [ 1090.835109][ T5130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12451'. [ 1091.411973][ T5164] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12462'. [ 1091.730200][ T5185] loop1: detected capacity change from 0 to 8 [ 1091.802389][ T5185] SQUASHFS error: Unable to read inode 0xa7 [ 1091.884876][ T5190] No such timeout policy "syz1" [ 1092.573772][ T5224] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12478'. [ 1092.693701][ T5820] usb 1-1: USB disconnect, device number 48 [ 1092.996045][ T5257] overlay: Unknown parameter 'smackfstransmute' [ 1093.062994][ T5253] loop1: detected capacity change from 0 to 4096 [ 1093.087173][ T5253] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1093.122658][ T5253] ntfs3: loop1: It is recommened to use chkdsk. [ 1093.189942][ T5820] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1093.399373][ T5820] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.429801][ T5820] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1093.462442][ T5820] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1093.493570][ T5820] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1093.531067][ T5820] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1093.557029][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.704449][ T5288] bond8: option lacp_active: invalid value (8) [ 1093.760965][ T5288] bond8 (unregistering): Released all slaves [ 1094.193669][ T5820] usb 1-1: USB disconnect, device number 49 [ 1094.816685][ T5815] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1094.997980][ T5419] netlink: 164 bytes leftover after parsing attributes in process `syz.1.12512'. [ 1095.005794][ T5423] cgroup: Unexpected value for 'nofavordynmods' [ 1095.033848][ T5815] usb 4-1: Using ep0 maxpacket: 16 [ 1095.046562][ T5815] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1095.065954][ T5815] usb 4-1: config 0 has an invalid descriptor of length 214, skipping remainder of the config [ 1095.084434][ T5815] usb 4-1: config 0 has no interface number 0 [ 1095.105874][ T5815] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1095.130725][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.148580][ T5815] usb 4-1: Product: syz [ 1095.162674][ T5815] usb 4-1: Manufacturer: syz [ 1095.183067][ T5815] usb 4-1: SerialNumber: syz [ 1095.207956][ T5815] usb 4-1: config 0 descriptor?? [ 1095.503202][ T790] usb 4-1: USB disconnect, device number 41 [ 1095.705892][ T5815] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1095.824088][ T5480] comedi comedi1: 8255: I/O port conflict (0x9,4) [ 1095.831898][ T5480] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 1095.839659][ T5480] comedi comedi1: 8255: I/O port conflict (0x10000007,4) [ 1095.860735][ T5480] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 1095.879405][ T5480] comedi comedi1: 8255: I/O port conflict (0x30000002,4) [ 1095.890670][ T5480] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 1095.922948][ T5815] usb 1-1: Using ep0 maxpacket: 16 [ 1095.947129][ T5815] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1095.967530][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.975613][ T5815] usb 1-1: Product: syz [ 1096.006751][ T5815] usb 1-1: Manufacturer: syz [ 1096.015277][ T5487] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12530'. [ 1096.024892][ T5815] usb 1-1: SerialNumber: syz [ 1096.032483][ T5815] r8152-cfgselector 1-1: config 0 descriptor?? [ 1096.046271][ T5487] tc_dump_action: action bad kind [ 1096.514795][ T5815] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1096.530599][ T5815] r8152-cfgselector 1-1: USB disconnect, device number 50 [ 1096.587398][ T5510] loop3: detected capacity change from 0 to 4096 [ 1096.639297][ T5510] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1096.658231][ T5510] NILFS (loop3): trying rollback from an earlier position [ 1096.689411][ T5510] NILFS (loop3): recovery complete [ 1096.702992][ T5529] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1096.855245][ T23] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1096.881781][ T5533] loop1: detected capacity change from 0 to 4096 [ 1096.916546][ T5539] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12541'. [ 1097.091458][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.115648][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1097.152649][ T23] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1097.172547][ T5547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12544'. [ 1097.180506][ T23] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1097.220725][ T23] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1097.234564][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.500185][ T23] gud 3-1:1.0: Protocol version 33 is not supported [ 1097.778310][ T23] usb 3-1: USB disconnect, device number 24 [ 1098.439154][ T5615] loop1: detected capacity change from 0 to 2048 [ 1098.490871][ T5615] loop1: p1 < > p4 < > [ 1098.937970][ T5650] netlink: 'syz.0.12572': attribute type 6 has an invalid length. [ 1099.415155][ T5675] netlink: 19 bytes leftover after parsing attributes in process `syz.1.12580'. [ 1099.514805][ T5685] netlink: 'syz.0.12583': attribute type 3 has an invalid length. [ 1099.534017][ T5685] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12583'. [ 1100.243010][ T5749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12595'. [ 1100.271406][ T5749] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12595'. [ 1100.444598][ T5760] program syz.0.12599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1100.667809][ T5782] loop1: detected capacity change from 0 to 4096 [ 1100.698048][ T5782] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1100.887029][ T5782] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1100.920564][ T5782] ntfs3: loop1: Failed to load $Extend (-22). [ 1100.940485][ T5782] ntfs3: loop1: Failed to initialize $Extend. [ 1101.096181][ T5824] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1101.553815][ T5851] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1101.791931][ T5865] vers=1.0 (cifs) not permitted when mounting with smb3 [ 1101.791931][ T5865] [ 1101.833550][ T5865] CIFS: VFS: vers=1.0 (cifs) not permitted when mounting with smb3 [ 1101.842111][ T5871] netlink: 830 bytes leftover after parsing attributes in process `syz.1.12624'. [ 1101.989073][ T5875] netlink: 300 bytes leftover after parsing attributes in process `syz.3.12625'. [ 1103.405609][ T5815] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1103.615911][ T5815] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 1103.632430][ T5815] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 1103.662363][ T5815] usb 4-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 1103.683868][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.708318][ T5815] usb 4-1: Product: syz [ 1103.712555][ T5815] usb 4-1: Manufacturer: syz [ 1103.728429][ T5815] usb 4-1: SerialNumber: syz [ 1103.798821][ T5952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12649'. [ 1104.033707][ T5815] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 1104.057386][ T5963] netlink: 'syz.2.12652': attribute type 5 has an invalid length. [ 1104.077266][ T5815] usb 4-1: USB disconnect, device number 42 [ 1104.309335][ T5978] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12655'. [ 1104.535924][ T5990] loop1: detected capacity change from 0 to 128 [ 1104.775279][ T6000] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12662'. [ 1105.118515][ T6018] netlink: 220 bytes leftover after parsing attributes in process `syz.2.12669'. [ 1105.666611][ T6053] loop2: detected capacity change from 0 to 64 [ 1105.695455][ T6053] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1106.036652][ T6071] loop1: detected capacity change from 0 to 256 [ 1106.332920][ T5820] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1106.538823][ T5820] usb 3-1: Using ep0 maxpacket: 8 [ 1106.546395][ T5820] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1106.571510][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1106.607688][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1106.636164][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1106.663819][ T5820] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1106.690353][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1106.719811][ T5820] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 1106.756519][ T5820] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1106.765660][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.803469][ T5820] usb 3-1: Product: syz [ 1106.807725][ T5820] usb 3-1: Manufacturer: syz [ 1106.831196][ T5820] usb 3-1: SerialNumber: syz [ 1106.856830][ T5820] usb 3-1: config 0 descriptor?? [ 1106.862986][ T6076] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1106.874855][ T6076] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1106.904302][ T5820] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1107.555841][ T790] usb 3-1: USB disconnect, device number 25 [ 1107.604789][ T6152] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1108.056836][ T5820] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1108.067451][ T5815] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1108.274659][ T5820] usb 1-1: config 0 has an invalid interface number: 42 but max is 8 [ 1108.282985][ T5815] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.297107][ T5820] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1108.317151][ T5820] usb 1-1: config 0 has no interface number 0 [ 1108.325568][ T5815] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1108.338933][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.355200][ T5820] usb 1-1: New USB device found, idVendor=04cb, idProduct=0100, bcdDevice= 0.bb [ 1108.365064][ T5815] usb 4-1: Product: syz [ 1108.369442][ T5815] usb 4-1: Manufacturer: syz [ 1108.374224][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.382533][ T5815] usb 4-1: SerialNumber: syz [ 1108.402315][ T5820] usb 1-1: config 0 descriptor?? [ 1108.408680][ T5815] usb 4-1: config 0 descriptor?? [ 1108.648724][ T5820] usb 1-1: string descriptor 0 read error: -71 [ 1108.679271][ T6194] netlink: 'syz.1.12715': attribute type 2 has an invalid length. [ 1108.694660][ T6194] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1108.695419][ T5820] usb-storage 1-1:0.42: USB Mass Storage device detected [ 1108.719066][ T5815] cdc_subset: probe of 4-1:0.0 failed with error -22 [ 1108.790127][ T5820] usb-storage 1-1:0.42: Quirks match for vid 04cb pid 0100: 9 [ 1108.813293][ T5820] usb-storage 1-1:0.42: This device (04cb,0100,00bb S 04 P 61) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1108.813293][ T5820] Please send a copy of this message to and [ 1108.909720][ T5820] usb 1-1: USB disconnect, device number 51 [ 1108.930615][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12717'. [ 1108.977265][ T790] usb 4-1: USB disconnect, device number 43 [ 1108.984615][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12717'. [ 1109.016084][ T6211] netlink: 17 bytes leftover after parsing attributes in process `syz.2.12717'. [ 1109.289995][ T6235] netlink: 88 bytes leftover after parsing attributes in process `syz.2.12722'. [ 1110.002952][ T6272] loop2: detected capacity change from 0 to 1024 [ 1110.073995][ T6272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1110.182096][ T6272] EXT4-fs error (device loop2): ext4_get_first_dir_block:3595: inode #11: comm syz.2.12735: directory missing '.' [ 1110.263888][ T6272] EXT4-fs (loop2): Remounting filesystem read-only [ 1110.399223][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.025758][ T6312] loop2: detected capacity change from 0 to 64 [ 1111.059029][ T6312] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1111.234227][ T6322] cgroup: noprefix used incorrectly [ 1111.848755][ T6347] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1112.096219][ T6403] netlink: 'syz.0.12768': attribute type 1 has an invalid length. [ 1112.111820][ T6403] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12768'. [ 1113.044715][ T23] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1113.184729][ T6459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12787'. [ 1113.274288][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 1113.290375][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.322338][ T23] usb 3-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1113.346809][ T23] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1113.367240][ T23] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 1113.379852][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.400643][ T23] usb 3-1: Product: syz [ 1113.405291][ T23] usb 3-1: Manufacturer: syz [ 1113.409936][ T23] usb 3-1: SerialNumber: syz [ 1113.702182][ T6435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.720551][ T6435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1113.738769][ T5820] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1113.746408][ T23] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input65 [ 1113.747959][ T5128] bcm5974 3-1:1.0: could not read from device [ 1113.909281][ T23] usb 3-1: USB disconnect, device number 26 [ 1113.932350][ T5128] bcm5974 3-1:1.0: could not read from device [ 1113.979355][ T5820] usb 1-1: Using ep0 maxpacket: 32 [ 1114.014973][ T5820] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1114.029529][ T5770] udevd[5770]: Error opening device "/dev/input/event4": No such file or directory [ 1114.060645][ T5820] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 1114.083510][ T5770] udevd[5770]: Unable to EVIOCGABS device "/dev/input/event4" [ 1114.094129][ T5770] udevd[5770]: Unable to EVIOCGABS device "/dev/input/event4" [ 1114.103111][ T6494] netlink: 'syz.1.12792': attribute type 1 has an invalid length. [ 1114.112211][ T5770] udevd[5770]: Unable to EVIOCGABS device "/dev/input/event4" [ 1114.118299][ T6494] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12792'. [ 1114.123385][ T5820] usb 1-1: string descriptor 0 read error: -22 [ 1114.145373][ T5820] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1114.156288][ T5770] udevd[5770]: Unable to EVIOCGABS device "/dev/input/event4" [ 1114.170327][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.178638][ T5770] udevd[5770]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 1114.231052][ T6473] loop3: detected capacity change from 0 to 32768 [ 1114.251239][ T5143] udevd[5143]: worker [5770] terminated by signal 6 (Aborted) [ 1114.268118][ T5143] udevd[5143]: worker [5770] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input65/event4' [ 1114.269752][ T6473] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.12791 (6473) [ 1114.320526][ T6473] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1114.332895][ T6473] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1114.342605][ T6473] BTRFS info (device loop3): force clearing of disk cache [ 1114.351075][ T6473] BTRFS info (device loop3): enabling disk space caching [ 1114.358356][ T6473] BTRFS info (device loop3): turning on sync discard [ 1114.365218][ T6473] BTRFS info (device loop3): disabling tree log [ 1114.396454][ T6473] BTRFS info (device loop3): metadata ratio 5 [ 1114.405414][ T6473] BTRFS info (device loop3): disk space caching is enabled [ 1114.452596][ T5820] usb 1-1: unit 255 not found! [ 1114.561828][ T6520] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1114.717955][ T6473] BTRFS info (device loop3): enabling ssd optimizations [ 1114.722486][ T5820] usb 1-1: USB disconnect, device number 52 [ 1114.733911][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1114.754814][ T6473] BTRFS info (device loop3): rebuilding free space tree [ 1114.778440][ T6541] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12796'. [ 1114.802483][ T6541] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12796'. [ 1114.872761][ T6473] BTRFS info (device loop3): disabling free space tree [ 1114.888133][ T6473] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1114.910166][ T6473] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1115.214212][ T5778] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1115.699161][ T27] audit: type=1326 audit(1103.209:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.1.12804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65f59e0d9 code=0x7ffc0000 [ 1115.803817][ T6579] netlink: 'syz.3.12801': attribute type 1 has an invalid length. [ 1115.807479][ T27] audit: type=1326 audit(1103.209:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.1.12804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65f59e0d9 code=0x7ffc0000 [ 1115.811980][ T6579] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12801'. [ 1115.884755][ T27] audit: type=1326 audit(1103.237:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.1.12804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65f59e0d9 code=0x7ffc0000 [ 1115.987290][ T27] audit: type=1326 audit(1103.237:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.1.12804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65f59e0d9 code=0x7ffc0000 [ 1116.004705][ T6558] loop2: detected capacity change from 0 to 32768 [ 1116.057480][ T27] audit: type=1326 audit(1103.246:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.1.12804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fd65f59e0d9 code=0x7ffc0000 [ 1116.096215][ T6558] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.12798 (6558) [ 1116.148917][ T5820] ------------[ cut here ]------------ [ 1116.155437][ T5820] WARNING: CPU: 0 PID: 5820 at net/netfilter/nft_set_pipapo.c:2389 nft_pipapo_destroy+0x84b/0x8b0 [ 1116.166904][ T5820] Modules linked in: [ 1116.171373][ T5820] CPU: 0 PID: 5820 Comm: kworker/0:5 Not tainted syzkaller #0 [ 1116.178992][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1116.189109][ T5820] Workqueue: events nf_tables_trans_destroy_work [ 1116.195767][ T5820] RIP: 0010:nft_pipapo_destroy+0x84b/0x8b0 [ 1116.202020][ T5820] Code: 00 00 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 b4 ab f8 e9 d3 f9 ff ff e8 7f b4 ab f8 e9 6c fe ff ff e8 75 b4 ab f8 <0f> 0b e9 16 f8 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 [ 1116.222197][ T5820] RSP: 0018:ffffc90004a8f9d8 EFLAGS: 00010293 [ 1116.229108][ T5820] RAX: ffffffff88dbbdab RBX: ffff88805e5cfcf0 RCX: ffff88802d951e00 [ 1116.237508][ T5820] RDX: 0000000000000000 RSI: ffff88805e5cfc00 RDI: ffff88805f134328 [ 1116.245878][ T5820] RBP: ffffc90004a8fbb0 R08: ffff88802d951e00 R09: 000000000000000f [ 1116.254366][ T5820] R10: 0000000000000020 R11: 0000000000000000 R12: ffff88805e5cfcc0 [ 1116.262917][ T5820] R13: dffffc0000000000 R14: ffff88805e5cfd10 R15: dffffc0000000000 [ 1116.271322][ T5820] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1116.280487][ T5820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1116.287219][ T5820] CR2: 00007f4f18b47000 CR3: 000000002e050000 CR4: 00000000003506f0 [ 1116.295258][ T5820] Call Trace: [ 1116.298685][ T5820] [ 1116.301759][ T5820] ? lockdep_hardirqs_on+0x98/0x150 [ 1116.307045][ T5820] nft_set_destroy+0x489/0xa20 [ 1116.311983][ T5820] ? __kmem_cache_free+0xba/0x1f0 [ 1116.317081][ T5820] nf_tables_trans_destroy_work+0xb2d/0x11b0 [ 1116.323303][ T5820] ? __lock_acquire+0x7d80/0x7d80 [ 1116.328419][ T5820] ? nft_object_dump+0x1e0/0x1e0 [ 1116.333853][ T5820] ? _raw_spin_unlock_irq+0x23/0x50 [ 1116.339137][ T5820] ? process_scheduled_works+0x975/0x1600 [ 1116.345169][ T5820] ? process_scheduled_works+0x975/0x1600 [ 1116.351060][ T5820] process_scheduled_works+0xa60/0x1600 [ 1116.356803][ T5820] ? worker_attach_to_pool+0x370/0x370 [ 1116.362354][ T5820] ? assign_work+0x3cc/0x5d0 [ 1116.362814][ T27] audit: type=1326 audit(1103.246:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.1.12804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65f59e0d9 code=0x7ffc0000 [ 1116.367059][ T5820] worker_thread+0xa5e/0xfe0 [ 1116.395472][ T5820] kthread+0x2fa/0x390 [ 1116.399599][ T5820] ? pr_cont_work+0x550/0x550 [ 1116.404333][ T5820] ? kthread_blkcg+0xd0/0xd0 [ 1116.409066][ T5820] ret_from_fork+0x48/0x80 [ 1116.413551][ T5820] ? kthread_blkcg+0xd0/0xd0 [ 1116.418329][ T5820] ret_from_fork_asm+0x11/0x20 [ 1116.423194][ T5820] [ 1116.426250][ T5820] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1116.433558][ T5820] CPU: 0 PID: 5820 Comm: kworker/0:5 Not tainted syzkaller #0 [ 1116.441060][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1116.450841][ T27] audit: type=1326 audit(1103.246:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.1.12804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65f59e0d9 code=0x7ffc0000 [ 1116.450885][ T27] audit: type=1326 audit(1103.274:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.1.12804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd65f59e0d9 code=0x7ffc0000 [ 1116.450921][ T27] audit: type=1326 audit(1103.274:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.1.12804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd65f59e0d9 code=0x7ffc0000 [ 1116.522875][ T5820] Workqueue: events nf_tables_trans_destroy_work [ 1116.529238][ T5820] Call Trace: [ 1116.532530][ T5820] [ 1116.535582][ T5820] dump_stack_lvl+0x18c/0x250 [ 1116.540339][ T5820] ? show_regs_print_info+0x20/0x20 [ 1116.545595][ T5820] ? load_image+0x420/0x420 [ 1116.550256][ T5820] panic+0x2ca/0x720 [ 1116.554275][ T5820] ? bpf_jit_dump+0xd0/0xd0 [ 1116.558822][ T5820] ? ret_from_fork_asm+0x11/0x20 [ 1116.563890][ T5820] __warn+0x2e0/0x470 [ 1116.567980][ T5820] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1116.573196][ T5820] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1116.578414][ T5820] report_bug+0x2be/0x4f0 [ 1116.582849][ T5820] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1116.588093][ T5820] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1116.593311][ T5820] ? nft_pipapo_destroy+0x84d/0x8b0 [ 1116.598613][ T5820] handle_bug+0xcf/0x120 [ 1116.602898][ T5820] exc_invalid_op+0x1a/0x50 [ 1116.607423][ T5820] asm_exc_invalid_op+0x1a/0x20 [ 1116.612298][ T5820] RIP: 0010:nft_pipapo_destroy+0x84b/0x8b0 [ 1116.618135][ T5820] Code: 00 00 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 b4 ab f8 e9 d3 f9 ff ff e8 7f b4 ab f8 e9 6c fe ff ff e8 75 b4 ab f8 <0f> 0b e9 16 f8 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 [ 1116.637761][ T5820] RSP: 0018:ffffc90004a8f9d8 EFLAGS: 00010293 [ 1116.643849][ T5820] RAX: ffffffff88dbbdab RBX: ffff88805e5cfcf0 RCX: ffff88802d951e00 [ 1116.651873][ T5820] RDX: 0000000000000000 RSI: ffff88805e5cfc00 RDI: ffff88805f134328 [ 1116.659946][ T5820] RBP: ffffc90004a8fbb0 R08: ffff88802d951e00 R09: 000000000000000f [ 1116.668110][ T5820] R10: 0000000000000020 R11: 0000000000000000 R12: ffff88805e5cfcc0 [ 1116.676251][ T5820] R13: dffffc0000000000 R14: ffff88805e5cfd10 R15: dffffc0000000000 [ 1116.684418][ T5820] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1116.689642][ T5820] ? nft_pipapo_destroy+0x84b/0x8b0 [ 1116.694856][ T5820] ? lockdep_hardirqs_on+0x98/0x150 [ 1116.700178][ T5820] nft_set_destroy+0x489/0xa20 [ 1116.704962][ T5820] ? __kmem_cache_free+0xba/0x1f0 [ 1116.710188][ T5820] nf_tables_trans_destroy_work+0xb2d/0x11b0 [ 1116.716270][ T5820] ? __lock_acquire+0x7d80/0x7d80 [ 1116.721320][ T5820] ? nft_object_dump+0x1e0/0x1e0 [ 1116.726294][ T5820] ? _raw_spin_unlock_irq+0x23/0x50 [ 1116.731534][ T5820] ? process_scheduled_works+0x975/0x1600 [ 1116.737308][ T5820] ? process_scheduled_works+0x975/0x1600 [ 1116.743074][ T5820] process_scheduled_works+0xa60/0x1600 [ 1116.748748][ T5820] ? worker_attach_to_pool+0x370/0x370 [ 1116.754229][ T5820] ? assign_work+0x3cc/0x5d0 [ 1116.759251][ T5820] worker_thread+0xa5e/0xfe0 [ 1116.763886][ T5820] kthread+0x2fa/0x390 [ 1116.768320][ T5820] ? pr_cont_work+0x550/0x550 [ 1116.773018][ T5820] ? kthread_blkcg+0xd0/0xd0 [ 1116.777831][ T5820] ret_from_fork+0x48/0x80 [ 1116.782287][ T5820] ? kthread_blkcg+0xd0/0xd0 [ 1116.787006][ T5820] ret_from_fork_asm+0x11/0x20 [ 1116.791802][ T5820] [ 1116.795132][ T5820] Kernel Offset: disabled [ 1116.799782][ T5820] Rebooting in 86400 seconds..