last executing test programs: 2.117113838s ago: executing program 3 (id=6838): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x9) 1.927834253s ago: executing program 1 (id=6839): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x0, 0x0, &(0x7f0000000080)) 1.889853254s ago: executing program 2 (id=6841): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x35314241, 0x7, 0x5, [{0x6, 0xd381}, {0xdc5, 0x7}, {0x0, 0x5}, {0x6, 0x10000}, {0x1000, 0xd3}, {0x3, 0x6}, {0x1, 0x5}, {0xffffffff, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x5}}) 1.683270469s ago: executing program 3 (id=6842): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) 1.596682041s ago: executing program 0 (id=6843): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000380)="010000002b0bd67de1", 0x9}], 0x2, 0x8, 0x4080000) 1.527341573s ago: executing program 1 (id=6844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000000900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500090000000d000300686173683a6d6163"], 0x5c}}, 0x4000000) 1.491625194s ago: executing program 2 (id=6845): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000000)) 1.398364486s ago: executing program 3 (id=6846): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6) 1.260189319s ago: executing program 0 (id=6847): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x18002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xfffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x40004) 1.21708523s ago: executing program 1 (id=6848): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) writev(r0, &(0x7f0000002c00)=[{&(0x7f0000001840)="d2", 0x1}], 0x1) 1.180164781s ago: executing program 3 (id=6849): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r0, &(0x7f0000000000)=0x2b00, 0x12) 1.141647572s ago: executing program 2 (id=6850): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x9) 1.032268645s ago: executing program 0 (id=6851): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x0, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) 896.433668ms ago: executing program 1 (id=6852): r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) sendfile(r0, r0, 0x0, 0x0) 892.973698ms ago: executing program 2 (id=6853): r0 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)={0x0, 0x300c, 0x300c, 0x2220, 0x5, 0x4000c251, 0x7f, 0x1}) 694.044003ms ago: executing program 0 (id=6854): r0 = socket(0x10, 0x803, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000003c0)) 656.626424ms ago: executing program 3 (id=6855): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000004000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 638.314804ms ago: executing program 2 (id=6856): ioperm(0x0, 0x7c7, 0xff) futex_waitv(0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1) 589.817786ms ago: executing program 1 (id=6857): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)={0x14, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0xd}]}, 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) 345.966042ms ago: executing program 0 (id=6858): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x9a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 250.761534ms ago: executing program 1 (id=6859): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001200)={0x2, @win={{0x4, 0x4, 0x47524247, 0x2}, 0x2, 0xfffffe84, 0x0, 0x5, 0x0}}) 218.338735ms ago: executing program 2 (id=6860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x19, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x98}}, 0x0) 217.735695ms ago: executing program 3 (id=6861): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000001c00)=""/158, &(0x7f00000000c0)=0xfffffffffffffe45) 0s ago: executing program 0 (id=6862): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, 0x800, 0x8, [@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) kernel console output (not intermixed with test programs): ange from 0 to 1024 [ 537.419369][T16422] hfsplus: invalid uid specified [ 537.433048][T16422] hfsplus: unable to parse mount options [ 537.592665][T16430] UBIFS error (pid: 16430): cannot open "ubi0_0", error -19 [ 537.606675][T16429] CIFS: VFS: Malformed UNC in devname [ 538.028002][T16436] loop1: detected capacity change from 0 to 4096 [ 538.064289][T16436] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 538.143247][T16436] ntfs3: loop1: Failed to initialize $Secure (-22). [ 538.324707][T16450] loop2: detected capacity change from 0 to 16 [ 538.373075][T16450] erofs: (device loop2): mounted with root inode @ nid 36. [ 538.445396][T16450] syz.2.4833: attempt to access beyond end of device [ 538.445396][T16450] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 538.511640][T16454] loop1: detected capacity change from 0 to 16 [ 538.539101][T16450] erofs: (device loop2): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 538.554079][T16454] erofs: (device loop1): mounted with root inode @ nid 36. [ 538.590786][T16450] syz.2.4833: attempt to access beyond end of device [ 538.590786][T16450] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 538.618747][T16454] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 538.686611][T16450] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4351] [ 538.710931][T16450] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 538.730058][ T28] audit: type=1800 audit(1786388892.352:147): pid=16450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4833" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 538.924173][T16462] snd_dummy snd_dummy.0: control 0:7841:0:syz0:0 is already present [ 539.914720][T16494] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4854'. [ 540.383506][ T28] audit: type=1800 audit(1786388894.002:148): pid=16497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.4856" name="/2457/task/2458/net/xfrm_stat" dev="proc" ino=4026533119 res=0 errno=0 [ 540.687171][T16518] loop1: detected capacity change from 0 to 1764 [ 541.429750][ T28] audit: type=1800 audit(1786388895.052:149): pid=16534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.4873" name="/2467/task/2468/net/xfrm_stat" dev="proc" ino=4026533133 res=0 errno=0 [ 541.642093][T16549] loop0: detected capacity change from 0 to 4096 [ 541.693232][T16549] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 541.766841][T16549] ntfs3: loop0: Failed to initialize $Secure (-22). [ 542.002602][T16558] loop2: detected capacity change from 0 to 4096 [ 542.049975][T16558] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 542.218114][T16566] ieee802154 phy0 wpan0: encryption failed: -90 [ 543.077443][T16591] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4899'. [ 543.484107][T15224] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 543.703623][T15224] usb 2-1: Using ep0 maxpacket: 16 [ 543.718476][T15224] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 543.735418][T15224] usb 2-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config [ 543.766681][T15224] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 543.792303][T15224] usb 2-1: config 1 has no interface number 1 [ 543.817842][T15224] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 543.861492][T15224] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x89 has an invalid bInterval 201, changing to 7 [ 543.888185][T15224] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 543.903533][T15224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.912024][T15224] usb 2-1: Product: syz [ 543.921097][T15224] usb 2-1: Manufacturer: syz [ 543.949615][T15224] usb 2-1: SerialNumber: syz [ 544.105289][T16622] loop2: detected capacity change from 0 to 4096 [ 544.118665][T16622] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 544.205724][T15224] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 544.233415][T15224] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 544.252834][T15224] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 544.279378][T16622] ntfs3: loop2: Failed to initialize $Secure (-22). [ 544.341608][T15224] usb 2-1: USB disconnect, device number 54 [ 544.397360][ T6192] udevd[6192]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.804878][T16638] loop2: detected capacity change from 0 to 256 [ 544.812702][T16638] exfat: Deprecated parameter 'utf8' [ 544.819933][T16638] exfat: Deprecated parameter 'namecase' [ 544.833175][T16638] exfat: Deprecated parameter 'namecase' [ 544.838922][T16638] exfat: Deprecated parameter 'utf8' [ 544.860045][T16638] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 544.922999][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 545.041264][ T28] audit: type=1326 audit(1786388898.662:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.0.4925" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 545.111369][ T28] audit: type=1326 audit(1786388898.702:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.0.4925" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 545.140582][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 545.155396][T16642] loop1: detected capacity change from 0 to 4096 [ 545.162589][ T9] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 545.170975][ T9] usb 4-1: config 0 has no interface number 0 [ 545.177392][ T28] audit: type=1326 audit(1786388898.702:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.0.4925" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 545.203123][ T9] usb 4-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 545.218831][T16642] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 545.230692][ T9] usb 4-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 545.241072][T16642] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 545.269095][ T9] usb 4-1: config 0 interface 12 has no altsetting 0 [ 545.280729][ T28] audit: type=1326 audit(1786388898.702:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.0.4925" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 545.319546][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 545.332942][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.341016][ T9] usb 4-1: Product: syz [ 545.347166][T16642] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 545.386484][T16642] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 545.404475][ T9] usb 4-1: Manufacturer: syz [ 545.409271][ T9] usb 4-1: SerialNumber: syz [ 545.423098][ T28] audit: type=1326 audit(1786388898.702:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.0.4925" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 545.448603][ T9] usb 4-1: config 0 descriptor?? [ 545.461511][T16642] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 545.509552][ T9] f81534 4-1:0.12: unsupported endpoint max packet size [ 545.543751][T16642] ntfs: volume version 3.1. [ 545.673906][T16654] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4931'. [ 546.120959][T16668] loop1: detected capacity change from 0 to 512 [ 546.138414][T16668] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 546.175561][T16668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.274901][T16668] ext4 filesystem being mounted at /1234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.480899][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.723083][T16690] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 546.743031][ T5809] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 546.943037][ T5809] usb 3-1: Using ep0 maxpacket: 32 [ 546.960367][ T5809] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 546.979799][ T5809] usb 3-1: config 0 has no interface number 0 [ 546.998857][ T5809] usb 3-1: config 0 interface 184 has no altsetting 0 [ 547.016162][ T5809] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 547.026744][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.043061][ T5809] usb 3-1: Product: syz [ 547.056063][ T5809] usb 3-1: Manufacturer: syz [ 547.066823][T16702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4953'. [ 547.076543][ T5809] usb 3-1: SerialNumber: syz [ 547.099987][ T5809] usb 3-1: config 0 descriptor?? [ 547.122376][ T5809] smsc75xx v1.0.0 [ 547.296709][T16710] syz.1.4957 (16710): drop_caches: 0 [ 547.543818][ T5809] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 547.567860][ T5809] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 547.579692][ T5809] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 547.590307][ T5809] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 547.612679][ T5809] usb 3-1: USB disconnect, device number 48 [ 547.681978][ T9] usb 4-1: USB disconnect, device number 59 [ 547.693722][T16722] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 547.857408][T16727] loop0: detected capacity change from 0 to 512 [ 547.881398][T16727] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 547.968708][T16727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.998776][T16727] ext4 filesystem being mounted at /1258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.222457][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.330423][T16738] loop2: detected capacity change from 0 to 512 [ 548.456447][T16738] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 49, start 00000103) [ 548.492106][T16738] FAT-fs (loop2): Filesystem has been set read-only [ 548.530993][T16738] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000103) [ 549.011893][T16758] netlink: 'syz.2.4978': attribute type 7 has an invalid length. [ 549.038945][T16758] netlink: 'syz.2.4978': attribute type 8 has an invalid length. [ 549.118412][T16760] bridge3: entered promiscuous mode [ 549.353048][T15224] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 549.560252][T16776] bond2: option updelay: invalid value (18446744073709510581) [ 549.583046][T15224] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.603520][T15224] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 549.612469][T16776] bond2: option updelay: allowed values 0 - 2147483647 [ 549.624482][T16776] bond2 (unregistering): Released all slaves [ 549.653115][T15224] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 549.706207][T15224] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 549.723299][T15224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.741816][T15224] usb 2-1: Product: syz [ 549.749001][T15224] usb 2-1: Manufacturer: syz [ 549.759999][T15224] usb 2-1: SerialNumber: syz [ 549.784275][T15224] cdc_ncm 2-1:1.0: skipping garbage [ 549.792636][T15224] usb 2-1: selecting invalid altsetting 1 [ 550.154164][T16795] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4997'. [ 550.204544][T15224] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 550.213441][T15224] cdc_ncm 2-1:1.0: bind() failure [ 550.251492][T15224] usb 2-1: USB disconnect, device number 55 [ 550.614666][T16809] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5004'. [ 550.631273][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5004'. [ 550.960133][T16819] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 550.995064][T16819] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 551.023010][T16819] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 551.202351][T16829] xt_TCPMSS: Only works on TCP SYN packets [ 551.593243][ T9] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 551.805240][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 551.843863][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 551.868166][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.900708][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 551.934590][ T9] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 551.951778][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.960358][ T9] usb 3-1: Product: syz [ 551.970509][ T9] usb 3-1: Manufacturer: syz [ 551.976157][ T9] usb 3-1: SerialNumber: syz [ 552.187480][T16859] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 552.233960][ T9] usb 3-1: 3:0: failed to get current value for ch 1 (-71) [ 552.261777][ T9] usb 3-1: 3:0: cannot get min/max values for control 5 (id 3) [ 552.327500][ T9] usb 3-1: 3:0: cannot get min/max values for control 5 (id 3) [ 552.359163][ T9] usb 3-1: USB disconnect, device number 49 [ 552.411310][ T6192] udevd[6192]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 553.099078][T16894] comedi comedi0: adq12b: I/O port conflict (0x82,16) [ 553.223342][T15224] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 553.423219][T15224] usb 3-1: Using ep0 maxpacket: 8 [ 553.440763][T15224] usb 3-1: config 3 has an invalid interface number: 45 but max is 0 [ 553.470413][T15224] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 553.494984][T15224] usb 3-1: config 3 has no interface number 0 [ 553.502748][T15224] usb 3-1: config 3 interface 45 altsetting 2 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 553.517734][T15224] usb 3-1: config 3 interface 45 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0 [ 553.532054][T16910] loop0: detected capacity change from 0 to 1024 [ 553.550879][T16910] EXT4-fs: inline encryption not supported [ 553.560726][T15224] usb 3-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 553.583813][T16910] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 553.592584][T15224] usb 3-1: config 3 interface 45 has no altsetting 0 [ 553.633970][T15224] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 553.648220][T15224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.661679][T16910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.667464][T15224] usb 3-1: Product: syz [ 553.733065][T15224] usb 3-1: Manufacturer: syz [ 553.737741][T15224] usb 3-1: SerialNumber: syz [ 553.845799][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.076471][T15224] usb 3-1: USB disconnect, device number 50 [ 554.162396][T16928] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5062'. [ 554.169945][ T6192] udevd[6192]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 554.341469][T16932] loop1: detected capacity change from 0 to 256 [ 554.391238][T16932] exfat: Deprecated parameter 'namecase' [ 554.485012][T16932] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 554.934525][T16945] loop0: detected capacity change from 0 to 4096 [ 555.199016][T16945] ntfs3: loop0: mft corrupted [ 555.554094][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 555.554111][ T28] audit: type=1326 audit(1786388909.182:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16965 comm="syz.0.5081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 555.638266][T16969] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5083'. [ 555.662996][ T28] audit: type=1326 audit(1786388909.182:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16965 comm="syz.0.5081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 555.730344][ T28] audit: type=1326 audit(1786388909.182:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16965 comm="syz.0.5081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 555.812953][ T28] audit: type=1326 audit(1786388909.182:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16965 comm="syz.0.5081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 555.866188][ T28] audit: type=1326 audit(1786388909.242:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16965 comm="syz.0.5081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 555.906131][ T28] audit: type=1326 audit(1786388909.242:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16965 comm="syz.0.5081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 555.930262][ C0] vkms_vblank_simulate: vblank timer overrun [ 556.027415][ T28] audit: type=1326 audit(1786388909.242:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16965 comm="syz.0.5081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 556.141019][ T28] audit: type=1326 audit(1786388909.242:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16965 comm="syz.0.5081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 556.201081][ T28] audit: type=1326 audit(1786388909.242:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16965 comm="syz.0.5081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 556.225248][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.072174][T16987] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 557.716193][ T5809] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.disc‘verxŤzđ‰zl]! [ 557.750993][T17033] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.disc‘verxŤzđ‰zl]" [ 557.911937][T17046] loop2: detected capacity change from 0 to 256 [ 557.976451][T17046] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 558.252290][T17054] geneve3: entered promiscuous mode [ 558.320223][T17058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 558.335701][ T28] audit: type=1326 audit(1786388911.952:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17056 comm="syz.3.5126" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad16b9e0d9 code=0x0 [ 558.673278][ T8] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 558.895160][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 558.929681][ T8] usb 1-1: not running at top speed; connect to a high speed hub [ 558.958396][ T8] usb 1-1: config 5 has an invalid interface number: 206 but max is 0 [ 558.982951][ T8] usb 1-1: config 5 has no interface number 0 [ 558.989143][ T8] usb 1-1: config 5 interface 206 has no altsetting 0 [ 559.035339][ T8] usb 1-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=87.b4 [ 559.055940][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.074853][ T8] usb 1-1: Product: syz [ 559.083491][ T8] usb 1-1: Manufacturer: syz [ 559.094156][ T8] usb 1-1: SerialNumber: syz [ 559.358688][T17088] loop1: detected capacity change from 0 to 4096 [ 559.365218][ T8] rtsx_usb: probe of 1-1:5.206 failed with error -22 [ 559.384008][ T8] usb 1-1: USB disconnect, device number 50 [ 559.495732][T17088] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 559.563951][T17095] qrtr: Invalid version 73 [ 559.580298][T17088] ntfs3: loop1: Failed to load $Extend (-22). [ 559.602953][T17088] ntfs3: loop1: Failed to initialize $Extend. [ 560.036690][T17103] bond2: Removing last arp target with arp_interval on [ 560.109497][T17101] loop2: detected capacity change from 0 to 4096 [ 560.167052][T17101] ntfs: volume version 3.1. [ 560.313277][ T5809] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 560.533153][ T5809] usb 1-1: Using ep0 maxpacket: 8 [ 560.553516][ T5809] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 560.582134][ T5809] usb 1-1: config 2 has no interface number 0 [ 560.595367][ T5809] usb 1-1: config 2 interface 31 has no altsetting 0 [ 560.616470][ T5809] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 560.653022][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.674372][ T5809] usb 1-1: Product: syz [ 560.678640][ T5809] usb 1-1: Manufacturer: syz [ 560.724463][ T5809] usb 1-1: SerialNumber: syz [ 561.244864][ T5809] ch9200: probe of 1-1:2.31 failed with error -22 [ 561.266394][ T5809] usb 1-1: USB disconnect, device number 51 [ 561.712965][ T8] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 561.903144][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 561.920762][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 561.938822][ T8] usb 3-1: config 198 has an invalid interface number: 59 but max is 0 [ 561.960638][ T8] usb 3-1: config 198 has no interface number 0 [ 561.978410][ T8] usb 3-1: config 198 interface 59 altsetting 6 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 562.013358][ T8] usb 3-1: config 198 interface 59 altsetting 6 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 562.055290][ T8] usb 3-1: config 198 interface 59 has no altsetting 0 [ 562.106184][ T8] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=58.84 [ 562.121283][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.151903][ T8] usb 3-1: Product: syz [ 562.156700][ T8] usb 3-1: Manufacturer: syz [ 562.166902][ T8] usb 3-1: SerialNumber: syz [ 562.235227][T17165] ip6erspan0: entered promiscuous mode [ 562.240793][T17165] ip6erspan0: entered allmulticast mode [ 562.417035][ T8] comedi comedi5: Endpoint has wrong direction [ 562.430823][ T8] dt9812 3-1:198.59: driver 'dt9812' failed to auto-configure device. [ 562.451069][ T8] usb 3-1: USB disconnect, device number 51 [ 562.871577][T17185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5189'. [ 563.309978][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.320010][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.331950][T17203] netlink: 'syz.2.5194': attribute type 2 has an invalid length. [ 563.363123][ T55] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 563.577703][ T55] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 563.607579][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.644037][ T55] usb 2-1: Product: syz [ 563.658625][ T55] usb 2-1: Manufacturer: syz [ 563.672928][ T55] usb 2-1: SerialNumber: syz [ 563.719140][T15224] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 564.176004][ T5855] usb 2-1: USB disconnect, device number 56 [ 564.403301][ C1] Adjusting tsc more than 11% (6079458 vs 8464875) [ 564.867717][ T55] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 564.970373][T15224] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 564.994507][T15224] ath9k_htc: Failed to initialize the device [ 565.006456][ T5855] usb 2-1: ath9k_htc: USB layer deinitialized [ 565.118601][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 565.134764][ T55] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 565.161987][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.185348][ T55] usb 4-1: Product: syz [ 565.189603][ T55] usb 4-1: Manufacturer: syz [ 565.207202][ T55] usb 4-1: SerialNumber: syz [ 565.223438][ T55] usb 4-1: config 0 descriptor?? [ 565.285806][T17265] loop2: detected capacity change from 0 to 512 [ 565.297872][T17265] EXT4-fs: Ignoring removed oldalloc option [ 565.303988][T17265] EXT4-fs: Ignoring removed i_version option [ 565.344268][T17265] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 565.361924][T17265] EXT4-fs (loop2): orphan cleanup on readonly fs [ 565.401574][T17265] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.5228: invalid indirect mapped block 4294967295 (level 1) [ 565.484604][T17271] loop0: detected capacity change from 0 to 256 [ 565.524366][T17265] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.5228: invalid indirect mapped block 4294967295 (level 1) [ 565.580892][T17265] EXT4-fs (loop2): 2 truncates cleaned up [ 565.605147][T17265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 565.787565][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.817056][ T55] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 565.840986][ T55] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 565.976404][T17281] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5233'. [ 565.999034][ T55] peak_usb: probe of 4-1:0.0 failed with error -71 [ 566.023020][ T55] usb 4-1: USB disconnect, device number 60 [ 566.340644][T17294] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5240'. [ 566.792062][T17307] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.021671][T17315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5251'. [ 567.166099][T17295] loop1: detected capacity change from 0 to 32768 [ 567.196549][T17295] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.5241 (17295) [ 567.243563][T17295] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 567.275790][T17295] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 567.299433][T17295] BTRFS info (device loop1): force clearing of disk cache [ 567.306731][T17295] BTRFS info (device loop1): enabling disk space caching [ 567.357383][T17295] BTRFS info (device loop1): turning on sync discard [ 567.364165][T17295] BTRFS info (device loop1): disabling tree log [ 567.388745][T17295] BTRFS info (device loop1): metadata ratio 5 [ 567.423719][T17295] BTRFS info (device loop1): disk space caching is enabled [ 567.662985][T17295] BTRFS info (device loop1): enabling ssd optimizations [ 567.749543][T17295] BTRFS info (device loop1): rebuilding free space tree [ 567.920061][T17295] BTRFS info (device loop1): disabling free space tree [ 567.949914][T17295] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 568.003151][T17295] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 568.380646][T17366] tmpfs: User quota inode hardlimit too large. [ 568.561217][T17370] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.5268' sets config #0 [ 568.573248][ T5780] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 569.500564][T17399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5282'. [ 569.543348][T17399] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5282'. [ 569.574075][T17399] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5282'. [ 570.604118][T17406] loop1: detected capacity change from 0 to 32768 [ 570.676471][T17406] ERROR: (device loop1): dbAlloc: unable to allocate blocks [ 570.676471][T17406] [ 570.711479][T17406] ERROR: (device loop1): remounting filesystem as read-only [ 570.790866][T17431] loop2: detected capacity change from 0 to 8192 [ 570.829980][T17431] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 571.318727][ T9] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 571.555205][ T9] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 571.575169][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.597343][ T9] usb 2-1: Product: syz [ 571.601585][ T9] usb 2-1: Manufacturer: syz [ 571.606222][ T9] usb 2-1: SerialNumber: syz [ 571.646475][ T9] usb 2-1: config 0 descriptor?? [ 571.683293][ T9] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now attached [ 571.692595][T17450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5304'. [ 571.909330][ T5808] usb 2-1: USB disconnect, device number 57 [ 571.944013][ T5808] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now disconnected [ 572.449336][T17471] loop2: detected capacity change from 0 to 4096 [ 573.556510][T17477] loop0: detected capacity change from 0 to 40427 [ 573.609156][T17477] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 573.632410][T17477] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 573.691522][T17477] F2FS-fs (loop0): invalid crc value [ 573.722718][T17477] F2FS-fs (loop0): Found nat_bits in checkpoint [ 573.889048][T17477] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 573.896374][T17477] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 574.048649][T17477] F2FS-fs (loop0): Corrupted max_depth of 3: 255 [ 574.078791][T17477] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 574.137892][T17520] loop1: detected capacity change from 0 to 1024 [ 575.030561][ T5808] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 575.151244][ T55] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 575.245068][T17556] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5356'. [ 575.250100][ T5808] usb 3-1: Using ep0 maxpacket: 8 [ 575.255169][T17556] openvswitch: netlink: Key type 29 is not supported [ 575.268187][ T5808] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 575.279842][ T5808] usb 3-1: config 179 has no interface number 0 [ 575.289249][ T5808] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 575.318074][ T5808] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 575.331967][ T5808] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 575.346658][ T5808] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 575.363381][ T55] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 575.386831][ T5808] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 575.400499][ T55] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 575.404429][T17558] loop0: detected capacity change from 0 to 64 [ 575.416521][ T5808] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 575.416552][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.428839][ T55] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 575.455976][T17538] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 575.490676][ T5809] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 575.512209][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.540844][ T55] usb 4-1: Product: syz [ 575.554176][ T55] usb 4-1: Manufacturer: syz [ 575.562365][ T55] usb 4-1: SerialNumber: syz [ 575.586170][T17542] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 575.595107][T17542] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 575.607016][ T55] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 575.725903][ T5809] usb 2-1: unable to get BOS descriptor or descriptor too short [ 575.770187][ T5809] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 575.789480][ T5809] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 575.804192][ T5809] usb 2-1: config 1 interface 0 has no altsetting 0 [ 575.811339][ T5809] usb 2-1: config 1 interface 0 has no altsetting 1 [ 575.871878][ T5809] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 575.902212][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.929056][ T5809] usb 2-1: Product: syz [ 575.933666][ T5809] usb 2-1: Manufacturer: syz [ 575.938619][ T5809] usb 2-1: SerialNumber: syz [ 576.153082][T17568] xt_connbytes: Forcing CT accounting to be enabled [ 576.220452][ T5809] smsusb:smsusb_probe: board id=8, interface number 0 [ 576.253280][ T5809] usb 2-1: selecting invalid altsetting 0 [ 576.269392][ T5809] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 576.276840][ T5809] smsusb: probe of 2-1:1.0 failed with error -22 [ 576.293182][ T5809] usb 2-1: USB disconnect, device number 58 [ 576.301890][ T5855] usb 3-1: USB disconnect, device number 52 [ 576.302036][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 576.316244][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 576.324665][ C1] vkms_vblank_simulate: vblank timer overrun [ 576.778586][T17572] loop0: detected capacity change from 0 to 32768 [ 576.828977][T17572] ERROR: (device loop0): diAllocAG: nfreeinos = 0, but iag on freelist [ 576.828977][T17572] [ 576.849105][T17572] ialloc: diAlloc returned -5! [ 576.966669][ T55] mos7840: probe of 4-1:1.0 failed with error -71 [ 577.018662][ T55] usb 4-1: USB disconnect, device number 61 [ 577.279281][T17578] bond2: option lp_interval: invalid value (0) [ 577.296469][T17578] bond2: option lp_interval: allowed values 1 - 2147483647 [ 577.308443][T17578] bond2 (unregistering): Released all slaves [ 577.692156][T17591] loop0: detected capacity change from 0 to 256 [ 578.190881][ T55] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 578.223140][T17605] netlink: 'syz.3.5379': attribute type 30 has an invalid length. [ 578.231141][T17605] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5379'. [ 578.302692][T17605] bond3: option arp_missed_max: invalid value (0) [ 578.309323][T17605] bond3: option arp_missed_max: allowed values 1 - 255 [ 578.321520][T17605] bond3 (unregistering): Released all slaves [ 578.397596][ T55] usb 3-1: Using ep0 maxpacket: 16 [ 578.410028][ T55] usb 3-1: config 0 has no interfaces? [ 578.451555][ T55] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 578.483342][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.491421][ T55] usb 3-1: Product: syz [ 578.513096][ T55] usb 3-1: Manufacturer: syz [ 578.530899][ T55] usb 3-1: SerialNumber: syz [ 578.557261][ T55] r8152-cfgselector 3-1: config 0 descriptor?? [ 578.799698][ T55] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 579.029423][ T55] usb 3-1: USB disconnect, device number 53 [ 579.211778][T17626] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5390'. [ 580.254428][T17628] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 580.339406][T17597] loop1: detected capacity change from 0 to 131072 [ 580.350320][T17597] F2FS-fs (loop1): invalid crc value [ 580.383498][T17646] loop0: detected capacity change from 0 to 64 [ 580.398630][T17597] F2FS-fs (loop1): Found nat_bits in checkpoint [ 580.425323][T17646] syz.0.5398: attempt to access beyond end of device [ 580.425323][T17646] loop0: rw=0, sector=3584, nr_sectors = 2 limit=64 [ 580.484481][T17646] Buffer I/O error on dev loop0, logical block 1792, async page read [ 580.515842][T17646] syz.0.5398: attempt to access beyond end of device [ 580.515842][T17646] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 580.604702][T17646] Buffer I/O error on dev loop0, logical block 56576, async page read [ 580.642730][T17597] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 580.709332][T17649] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5399'. [ 582.889490][T17689] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 582.897649][T17689] IPv6: NLM_F_CREATE should be set when creating new route [ 582.905024][T17689] IPv6: NLM_F_CREATE should be set when creating new route [ 582.982475][T17691] bond0: (slave bond_slave_1): Releasing backup interface [ 583.185437][T17695] netlink: 'syz.1.5402': attribute type 21 has an invalid length. [ 583.196078][T17695] netlink: 'syz.1.5402': attribute type 15 has an invalid length. [ 583.205315][T17696] loop0: detected capacity change from 0 to 256 [ 583.210948][T17695] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5402'. [ 583.220758][T17695] IPv6: NLM_F_CREATE should be specified when creating new route [ 583.245528][T17695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 583.252848][T17695] IPv6: NLM_F_CREATE should be set when creating new route [ 583.260396][T17695] IPv6: NLM_F_CREATE should be set when creating new route [ 583.267784][T17695] IPv6: NLM_F_CREATE should be set when creating new route [ 583.336028][T17679] loop2: detected capacity change from 0 to 32768 [ 583.352304][T17679] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.5415 (17679) [ 583.380885][T17679] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 583.391212][T17679] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 583.400704][T17679] BTRFS info (device loop2): using free space tree [ 583.436850][T17696] FAT-fs (loop0): Directory bread(block 64) failed [ 583.514931][T17696] FAT-fs (loop0): Directory bread(block 65) failed [ 583.521740][T17696] FAT-fs (loop0): Directory bread(block 66) failed [ 583.528624][T17696] FAT-fs (loop0): Directory bread(block 67) failed [ 583.538136][T17696] FAT-fs (loop0): Directory bread(block 68) failed [ 583.544834][T17696] FAT-fs (loop0): Directory bread(block 69) failed [ 583.581118][T17696] FAT-fs (loop0): Directory bread(block 70) failed [ 583.588471][T17696] FAT-fs (loop0): Directory bread(block 71) failed [ 583.595647][T17696] FAT-fs (loop0): Directory bread(block 72) failed [ 583.602582][T17696] FAT-fs (loop0): Directory bread(block 73) failed [ 583.653224][T17679] BTRFS info (device loop2): enabling ssd optimizations [ 583.696712][T17679] BTRFS info (device loop2): auto enabling async discard [ 583.963936][ T5781] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 584.078783][T17722] bond3: option lp_interval: invalid value (0) [ 584.177062][T17722] bond3: option lp_interval: allowed values 1 - 2147483647 [ 584.232556][T17722] bond3 (unregistering): Released all slaves [ 584.571731][T17734] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 584.687395][T17738] netlink: 'syz.3.5435': attribute type 21 has an invalid length. [ 584.708836][T17738] IPv6: NLM_F_CREATE should be specified when creating new route [ 585.195556][T17728] loop1: detected capacity change from 0 to 32768 [ 585.218655][T17728] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.5431 (17728) [ 585.285149][T17728] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 585.313047][T17728] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 585.340268][T17728] BTRFS info (device loop1): use zlib compression, level 3 [ 585.366810][T17728] BTRFS info (device loop1): turning on sync discard [ 585.381223][T17728] BTRFS info (device loop1): using free space tree [ 585.402295][T17754] netlink: 'syz.0.5443': attribute type 21 has an invalid length. [ 585.425367][T17754] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5443'. [ 585.522987][T17728] BTRFS info (device loop1): enabling ssd optimizations [ 585.736775][ T5780] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 585.776117][T17777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5446'. [ 586.905535][T17812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5464'. [ 586.941956][T17812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5464'. [ 587.012138][T17812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5464'. [ 587.062916][T17812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5464'. [ 587.110817][T17812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5464'. [ 587.166653][T17812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5464'. [ 587.195610][T17812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5464'. [ 587.357541][T17826] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5470'. [ 587.842282][T17844] netlink: 'syz.2.5480': attribute type 1 has an invalid length. [ 588.047071][T17853] loop2: detected capacity change from 0 to 512 [ 588.093600][T17853] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 588.197236][T17853] EXT4-fs (loop2): 1 truncate cleaned up [ 588.216026][T17857] loop1: detected capacity change from 0 to 64 [ 588.248398][T17853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.557440][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.082989][T17886] autofs4:pid:17886:autofs_fill_super: called with bogus options [ 589.478933][T17897] fuse: Bad value for 'fd' [ 589.489171][T17899] __vm_enough_memory: pid: 17899, comm: syz.2.5502, not enough memory for the allocation [ 590.586513][T17940] bridge4: entered allmulticast mode [ 590.753496][T17946] xt_CT: You must specify a L4 protocol and not use inversions on it [ 590.824125][T17948] loop1: detected capacity change from 0 to 512 [ 590.876252][T17948] EXT4-fs: Ignoring removed orlov option [ 590.924865][T17948] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 591.011808][T17948] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2971: inode #15: comm syz.1.5528: corrupted xattr block 252: invalid header [ 591.083997][T17948] EXT4-fs (loop1): Remounting filesystem read-only [ 591.091430][T17948] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 591.134407][T17948] EXT4-fs (loop1): 1 orphan inode deleted [ 591.166407][T17948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.322457][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.401961][ T27] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 591.486616][T17967] sctp: [Deprecated]: syz.1.5536 (pid 17967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 591.486616][T17967] Use struct sctp_sack_info instead [ 591.630111][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 591.653423][ T27] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 591.667539][T17972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5539'. [ 591.673595][ T27] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 591.688693][ T27] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 591.706921][ T27] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 591.720745][T17975] loop1: detected capacity change from 0 to 512 [ 591.730764][ T27] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 591.746775][T17975] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 591.749227][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.801015][T17975] EXT4-fs (loop1): 1 truncate cleaned up [ 591.806987][ T27] usb 1-1: Product: syz [ 591.811242][ T27] usb 1-1: Manufacturer: syz [ 591.815052][T17975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.864721][ T27] usb 1-1: SerialNumber: syz [ 591.946270][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.211649][ T27] usb 1-1: USB disconnect, device number 52 [ 592.361530][ T5766] udevd[5766]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 592.694228][T17998] netlink: 'syz.1.5552': attribute type 6 has an invalid length. [ 593.208622][T18015] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 593.491765][T18025] netlink: 372 bytes leftover after parsing attributes in process `syz.3.5565'. [ 593.774768][T18031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5567'. [ 593.895084][T18001] loop2: detected capacity change from 0 to 32768 [ 593.988741][T18001] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 594.024526][T18046] loop0: detected capacity change from 0 to 512 [ 594.037745][T18046] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 594.069328][T18046] EXT4-fs (loop0): 1 truncate cleaned up [ 594.074050][T18047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5571'. [ 594.109047][T18046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.227980][T18001] XFS (loop2): Ending clean mount [ 594.354338][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.366349][T18058] loop1: detected capacity change from 0 to 256 [ 594.420656][T18058] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xba6f1341, utbl_chksum : 0xe619d30d) [ 594.629494][ T5781] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 595.441224][T18085] loop2: detected capacity change from 0 to 256 [ 595.710249][T18092] loop0: detected capacity change from 0 to 64 [ 595.765103][T18094] netlink: 'syz.1.5595': attribute type 13 has an invalid length. [ 596.159774][T18106] netlink: 'syz.3.5599': attribute type 5 has an invalid length. [ 597.086992][T18138] netlink: 'syz.2.5615': attribute type 5 has an invalid length. [ 597.169735][T18138] : entered promiscuous mode [ 597.192043][T18144] netlink: 'syz.0.5618': attribute type 2 has an invalid length. [ 597.204560][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5618'. [ 597.656505][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 597.656520][ T28] audit: type=1326 audit(2000000000.617:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18160 comm="syz.3.5626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad16b9e0d9 code=0x7ffc0000 [ 597.734655][ T28] audit: type=1326 audit(2000000000.654:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18160 comm="syz.3.5626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad16b9e0d9 code=0x7ffc0000 [ 597.783439][ T28] audit: type=1326 audit(2000000000.691:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18160 comm="syz.3.5626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fad16b9e0d9 code=0x7ffc0000 [ 597.817773][ T28] audit: type=1326 audit(2000000000.691:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18160 comm="syz.3.5626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad16b9e0d9 code=0x7ffc0000 [ 597.978906][T18170] loop2: detected capacity change from 0 to 1024 [ 598.083685][T18173] deleting an unspecified loop device is not supported. [ 598.176701][T18175] loop2: detected capacity change from 0 to 512 [ 598.189263][T18175] EXT4-fs: Ignoring removed orlov option [ 598.216533][T18175] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 598.257327][ T55] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 598.269233][T18175] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2971: inode #15: comm syz.2.5633: corrupted xattr block 252: invalid header [ 598.284240][T18175] EXT4-fs (loop2): Remounting filesystem read-only [ 598.290963][T18175] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 598.301114][T18175] EXT4-fs (loop2): 1 orphan inode deleted [ 598.308408][T18175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 598.373777][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.462786][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 598.474557][ T55] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 598.482803][ T55] usb 4-1: config 4 has no interface number 0 [ 598.506183][ T55] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.526933][ T5856] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 598.527361][ T55] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.555876][T18181] bond3: entered promiscuous mode [ 598.561387][ T55] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 598.571244][T18181] 8021q: adding VLAN 0 to HW filter on device bond3 [ 598.579018][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.602071][ T55] hub 4-1:4.128: USB hub found [ 598.750852][T18186] loop2: detected capacity change from 0 to 512 [ 598.758402][ T5856] usb 2-1: Using ep0 maxpacket: 32 [ 598.771800][ T5856] usb 2-1: unable to get BOS descriptor or descriptor too short [ 598.781230][T18186] EXT4-fs: Ignoring removed i_version option [ 598.792522][ T5856] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 598.819915][T18186] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 598.836915][ T55] hub 4-1:4.128: 19 ports detected [ 598.842627][ T5856] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 598.842659][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.842682][ T5856] usb 2-1: Product: syz [ 598.842700][ T5856] usb 2-1: Manufacturer: syz [ 598.842716][ T5856] usb 2-1: SerialNumber: syz [ 598.925624][ T28] audit: type=1326 audit(2000000001.789:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.5639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 598.972470][ T28] audit: type=1326 audit(2000000001.789:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.5639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 598.973646][ T55] hub 4-1:4.128: Using single TT (err -22) [ 599.000045][ T28] audit: type=1326 audit(2000000001.789:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.5639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 599.027104][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.034253][ T28] audit: type=1326 audit(2000000001.789:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.5639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 599.068366][T18186] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 599.093485][T18186] Quota error (device loop2): write_blk: dquota write failed [ 599.104001][ T28] audit: type=1326 audit(2000000001.789:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.5639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 599.124212][ T55] hub 4-1:4.128: config failed, can't get hub status (err -5) [ 599.145312][T18186] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.5637: Failed to acquire dquot type 1 [ 599.172483][ T5856] usb 2-1: Invalid number of CPorts: 0 [ 599.178665][ T5856] es2_ap_driver: probe of 2-1:7.0 failed with error -22 [ 599.186436][T18186] EXT4-fs (loop2): 1 truncate cleaned up [ 599.194933][T18186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.237747][T18195] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5640'. [ 599.248527][ T55] usb 4-1: USB disconnect, device number 62 [ 599.258703][T18186] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.5637: Failed to acquire dquot type 1 [ 599.330577][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.405048][ T5856] usb 2-1: USB disconnect, device number 59 [ 600.638917][T18201] loop0: detected capacity change from 0 to 131072 [ 600.665350][T18201] F2FS-fs (loop0): invalid crc value [ 600.676659][T18201] F2FS-fs (loop0): Found nat_bits in checkpoint [ 600.735511][T18201] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 601.456760][T18228] netlink: 'syz.3.5655': attribute type 5 has an invalid length. [ 601.493043][T18228] netlink: 13 bytes leftover after parsing attributes in process `syz.3.5655'. [ 602.100796][ T5086] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 602.745849][ T27] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 602.808923][T18269] loop0: detected capacity change from 0 to 512 [ 602.870979][T18269] EXT4-fs: Ignoring removed orlov option [ 602.894426][T18269] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 602.949761][T18269] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2971: inode #15: comm syz.0.5644: corrupted xattr block 252: invalid header [ 602.956096][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.974715][ T27] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 602.999185][ T27] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 603.025009][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 603.033632][ T27] usb 4-1: SerialNumber: syz [ 603.046567][ T27] usb 4-1: bad CDC descriptors [ 603.058346][T18269] EXT4-fs (loop0): Remounting filesystem read-only [ 603.065747][ T27] usb-storage 4-1:1.0: USB Mass Storage device detected [ 603.078121][T18269] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 603.114997][ T27] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 603.118967][T18269] EXT4-fs (loop0): 1 orphan inode deleted [ 603.156400][T18269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.266134][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.599431][T18288] loop2: detected capacity change from 0 to 4096 [ 603.675374][T18288] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 603.755489][T18288] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 604.145097][T18302] loop0: detected capacity change from 0 to 512 [ 604.173857][ T27] usb 4-1: USB disconnect, device number 63 [ 604.179293][T18302] EXT4-fs: Ignoring removed orlov option [ 604.209869][T18302] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 604.256918][T18302] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2971: inode #15: comm syz.0.5689: corrupted xattr block 252: invalid header [ 604.283330][T18302] EXT4-fs (loop0): Remounting filesystem read-only [ 604.344221][T18302] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 604.384744][T18311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5694'. [ 604.391362][T18302] EXT4-fs (loop0): 1 orphan inode deleted [ 604.403693][T18302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.601411][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.975217][T18328] tc_dump_action: action bad kind [ 605.725232][T18360] netlink: 'syz.0.5717': attribute type 1 has an invalid length. [ 606.096038][T18371] netlink: 'syz.3.5723': attribute type 1 has an invalid length. [ 606.103863][T18371] netlink: 'syz.3.5723': attribute type 2 has an invalid length. [ 606.137622][T18371] netlink: 'syz.3.5723': attribute type 1 has an invalid length. [ 606.909136][ T5856] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 607.140759][ T5856] usb 3-1: config 0 has an invalid interface number: 13 but max is 0 [ 607.160971][ T5856] usb 3-1: config 0 has no interface number 0 [ 607.167576][ T5856] usb 3-1: config 0 interface 13 has no altsetting 0 [ 607.204189][ T5856] usb 3-1: Dual-Role OTG device on HNP port [ 607.210605][ T5856] usb 3-1: New USB device found, idVendor=17cc, idProduct=1940, bcdDevice=1e.7a [ 607.234214][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.242282][ T5856] usb 3-1: Product: syz [ 607.266884][T18415] openvswitch: netlink: EtherType 0 is less than min 600 [ 607.274136][ T5856] usb 3-1: Manufacturer: syz [ 607.284761][ T5856] usb 3-1: SerialNumber: syz [ 607.297314][ T5856] usb 3-1: config 0 descriptor?? [ 607.559406][ T5856] snd-usb-caiaq 3-1:0.13: can't set alt interface. [ 607.566019][ T5856] usb 3-1: unable to init card! (ret=-5) [ 607.590437][ T5856] snd-usb-caiaq: probe of 3-1:0.13 failed with error -5 [ 607.598227][T18427] netlink: 'syz.0.5751': attribute type 21 has an invalid length. [ 607.613644][ T27] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 607.623751][T18427] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5751'. [ 607.633979][ T5856] usb 3-1: USB disconnect, device number 54 [ 607.819949][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 607.832534][ T27] usb 4-1: unable to get BOS descriptor or descriptor too short [ 607.849822][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.866240][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 607.882628][ T27] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 607.902964][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.922289][ T27] usb 4-1: Product: syz [ 607.930935][ T27] usb 4-1: Manufacturer: syz [ 607.946837][ T27] usb 4-1: SerialNumber: syz [ 608.189766][T18443] netlink: 'syz.0.5759': attribute type 5 has an invalid length. [ 608.239913][T18443] : entered promiscuous mode [ 608.287883][T18446] loop2: detected capacity change from 0 to 2048 [ 608.313962][T18446] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 608.337081][T18446] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 608.346134][T18446] UDF-fs: Scanning with blocksize 512 failed [ 608.411687][T18446] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 608.449417][ T27] usb 4-1: cannot find UAC_HEADER [ 608.501468][ T27] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 608.504491][T18446] UDF-fs: bad mount option "ý'*§včźzłçnt" or missing value [ 608.538860][ T27] usb 4-1: USB disconnect, device number 64 [ 608.612919][ T6192] udevd[6192]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 608.682687][T18453] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5764'. [ 608.771076][T18455] binder: 18454:18455 ioctl c0306201 200000000380 returned -14 [ 609.259373][T18451] loop0: detected capacity change from 0 to 40427 [ 609.296157][T18451] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 609.303493][T18451] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 609.323925][ T5856] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 609.349964][T18451] F2FS-fs (loop0): Image doesn't support compression [ 609.359424][T18451] F2FS-fs (loop0): Image doesn't support compression [ 609.377926][T18451] F2FS-fs (loop0): invalid crc value [ 609.487592][T18471] loop2: detected capacity change from 0 to 256 [ 609.529302][T18471] exfat: Deprecated parameter 'utf8' [ 609.548297][T18471] exfat: Deprecated parameter 'utf8' [ 609.553755][T18471] exfat: Deprecated parameter 'namecase' [ 609.573783][ T5856] usb 2-1: unable to get BOS descriptor or descriptor too short [ 609.616834][ T5856] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 609.657075][ T5856] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 609.660991][T18471] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 609.695113][ T5856] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 609.718032][T18451] F2FS-fs (loop0): Start checkpoint disabled! [ 609.739370][ T5856] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 609.776655][ T5856] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 609.793755][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.801836][ T5856] usb 2-1: Product: syz [ 609.816651][ T5856] usb 2-1: Manufacturer: syz [ 609.825157][T18451] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 609.836495][ T5856] usb 2-1: SerialNumber: syz [ 609.844979][T18451] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 610.270296][ T5856] usb 2-1: USB disconnect, device number 60 [ 610.316141][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 610.443303][T18486] netlink: 'syz.3.5780': attribute type 5 has an invalid length. [ 610.519020][T18486] : entered promiscuous mode [ 610.690695][T18490] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5782'. [ 611.068356][T18503] openvswitch: netlink: EtherType 0 is less than min 600 [ 611.359107][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 611.359125][ T28] audit: type=1400 audit(2000000013.261:191): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=18511 comm="syz.1.5793" [ 611.409633][T18516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5794'. [ 611.429225][T18516] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 611.749514][T18530] cgroup: none used incorrectly [ 611.952104][ T27] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 612.195020][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 612.233834][ T27] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 612.258452][ T27] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 612.293751][ T27] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 612.337918][ T27] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 612.377196][ T27] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 612.397515][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.405797][ T27] usb 3-1: Product: syz [ 612.430577][ T27] usb 3-1: Manufacturer: syz [ 612.435294][ T27] usb 3-1: SerialNumber: syz [ 612.543395][T18552] xt_bpf: check failed: parse error [ 612.838711][ T27] usb 3-1: USB disconnect, device number 55 [ 612.990304][T18544] loop0: detected capacity change from 0 to 32768 [ 613.133713][T18544] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 613.133713][T18544] [ 613.165873][T18544] ERROR: (device loop0): remounting filesystem as read-only [ 613.176313][T18544] xtLookup: xtSearch returned -5 [ 613.181427][T18544] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 613.181427][T18544] [ 613.655947][T18566] loop0: detected capacity change from 0 to 4096 [ 613.705840][T18570] netlink: 'syz.3.5821': attribute type 6 has an invalid length. [ 613.802833][T18566] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 613.898747][T18566] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 614.413543][T15225] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 614.623484][T15225] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 614.643522][T15225] usb 2-1: config 0 has no interface number 0 [ 614.659049][T15225] usb 2-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 614.662612][T18597] netlink: 'syz.3.5833': attribute type 1 has an invalid length. [ 614.680944][T15225] usb 2-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid maxpacket 47698, setting to 1024 [ 614.692769][T15225] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 614.705392][T18597] openvswitch: netlink: Actions may not be safe on all matching packets [ 614.717823][T15225] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a [ 614.732122][T15225] usb 2-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 614.748988][T15225] usb 2-1: Product: syz [ 614.754533][T15225] usb 2-1: Manufacturer: syz [ 614.759372][T15225] usb 2-1: SerialNumber: syz [ 614.767463][T15225] usb 2-1: config 0 descriptor?? [ 614.770797][ T5856] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 614.775478][T18579] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 614.820473][T15225] ni6501 2-1:0.238: driver 'ni6501' failed to auto-configure device. [ 614.977638][ T5856] usb 1-1: Using ep0 maxpacket: 8 [ 615.002696][ T5856] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 615.012597][ T5856] usb 1-1: config 0 has no interface number 0 [ 615.033321][ T5856] usb 1-1: config 0 interface 1 has no altsetting 0 [ 615.059234][ T5856] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 615.074018][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.097320][ T5856] usb 1-1: Product: syz [ 615.101579][ T5856] usb 1-1: Manufacturer: syz [ 615.108052][T15224] usb 2-1: USB disconnect, device number 61 [ 615.117975][ T5856] usb 1-1: SerialNumber: syz [ 615.151127][ T5856] usb 1-1: config 0 descriptor?? [ 615.407717][ T5856] i2c-cp2615: probe of 1-1:0.1 failed with error -22 [ 615.566600][T18620] IPv6: Can't replace route, no match found [ 615.632328][ T5856] usb 1-1: USB disconnect, device number 53 [ 616.136861][T15224] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 616.238417][ T28] audit: type=1326 audit(2000000017.761:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18639 comm="syz.2.5855" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea79e0d9 code=0x7ffc0000 [ 616.291981][ T28] audit: type=1326 audit(2000000017.780:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18639 comm="syz.2.5855" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea79e0d9 code=0x7ffc0000 [ 616.344941][T15224] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 616.361920][T15224] usb 2-1: config 2 has no interface number 0 [ 616.383645][T18644] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5857'. [ 616.387955][ T28] audit: type=1326 audit(2000000017.826:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18639 comm="syz.2.5855" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea79e0d9 code=0x7ffc0000 [ 616.410703][T15224] usb 2-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64 [ 616.439894][T18644] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5857'. [ 616.449328][T15224] usb 2-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 616.471645][T18644] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5857'. [ 616.505354][T15224] usb 2-1: config 2 interface 88 has no altsetting 0 [ 616.532616][ T28] audit: type=1326 audit(2000000017.826:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18639 comm="syz.2.5855" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea79e0d9 code=0x7ffc0000 [ 616.575911][ T28] audit: type=1326 audit(2000000017.844:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18639 comm="syz.2.5855" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f38ea79e0d9 code=0x7ffc0000 [ 616.584136][T15224] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 616.618337][ T28] audit: type=1326 audit(2000000017.844:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18639 comm="syz.2.5855" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea79e0d9 code=0x7ffc0000 [ 616.651616][ T28] audit: type=1326 audit(2000000017.844:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18639 comm="syz.2.5855" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea79e0d9 code=0x7ffc0000 [ 616.668250][T15224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.687989][ T28] audit: type=1326 audit(2000000017.844:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18639 comm="syz.2.5855" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f38ea79e0d9 code=0x7ffc0000 [ 616.733806][T15224] usb 2-1: Product: syz [ 616.738182][T15224] usb 2-1: Manufacturer: syz [ 616.766298][T15224] usb 2-1: SerialNumber: syz [ 616.794381][T18628] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 616.809127][ T28] audit: type=1326 audit(2000000017.844:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18639 comm="syz.2.5855" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f38ea79e0d9 code=0x7ffc0000 [ 616.809422][T18628] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 617.059448][ T28] audit: type=1326 audit(2000000018.508:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18655 comm="syz.3.5863" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad16b9e0d9 code=0x7ffc0000 [ 617.112678][T18628] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 617.135756][T18628] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 617.150804][ T28] audit: type=1326 audit(2000000018.508:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18655 comm="syz.3.5863" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad16b9e0d9 code=0x7ffc0000 [ 617.237358][ T28] audit: type=1326 audit(2000000018.573:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18655 comm="syz.3.5863" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fad16b9e0d9 code=0x7ffc0000 [ 617.314467][ T28] audit: type=1326 audit(2000000018.582:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18655 comm="syz.3.5863" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad16b9e0d9 code=0x7ffc0000 [ 617.320136][T18662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5866'. [ 617.418766][T15224] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 617.460280][T15224] asix: probe of 2-1:2.88 failed with error -71 [ 617.490292][T15224] usb 2-1: USB disconnect, device number 62 [ 617.745876][T18677] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.5873'. [ 617.800052][T18678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5874'. [ 618.291610][T18690] netlink: 'syz.1.5879': attribute type 10 has an invalid length. [ 618.291638][T18690] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.5879'. [ 618.291658][T18690] openvswitch: netlink: Flow key attr not present in new flow. [ 618.310188][ T28] audit: type=1326 audit(2000000019.670:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18691 comm="syz.2.5881" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea79e0d9 code=0x7ffc0000 [ 618.312097][ T28] audit: type=1326 audit(2000000019.670:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18691 comm="syz.2.5881" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea79e0d9 code=0x7ffc0000 [ 618.338357][ T28] audit: type=1326 audit(2000000019.688:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18691 comm="syz.2.5881" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f38ea79e0d9 code=0x7ffc0000 [ 618.338415][ T28] audit: type=1326 audit(2000000019.688:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18691 comm="syz.2.5881" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea79e0d9 code=0x7ffc0000 [ 618.338463][ T28] audit: type=1326 audit(2000000019.688:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18691 comm="syz.2.5881" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea79e0d9 code=0x7ffc0000 [ 618.511150][T18694] netlink: 'syz.2.5882': attribute type 4 has an invalid length. [ 618.568484][ C0] vkms_vblank_simulate: vblank timer overrun [ 619.683138][T18732] netlink: 'syz.3.5901': attribute type 13 has an invalid length. [ 619.706365][T18732] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5901'. [ 619.759431][T18732] erspan0: refused to change device tx_queue_len [ 619.992144][T18741] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 620.516727][T18761] loop0: detected capacity change from 0 to 136 [ 620.543151][T18761] Attempt to read inode for relocated directory [ 620.577651][T18761] syz.0.5916: attempt to access beyond end of device [ 620.577651][T18761] loop0: rw=524288, sector=335544428, nr_sectors = 4 limit=136 [ 620.632725][T18761] syz.0.5916: attempt to access beyond end of device [ 620.632725][T18761] loop0: rw=0, sector=335544428, nr_sectors = 4 limit=136 [ 621.261830][T18748] loop1: detected capacity change from 0 to 32768 [ 621.296300][T18748] XFS: attr2 mount option is deprecated. [ 621.367526][T18748] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 621.610438][T18748] XFS (loop1): Ending clean mount [ 621.697667][T18748] XFS (loop1): Quotacheck needed: Please wait. [ 621.815068][T18748] XFS (loop1): Quotacheck: Done. [ 621.922023][T18804] SET target dimension over the limit! [ 621.959879][T18807] netlink: 'syz.0.5934': attribute type 1 has an invalid length. [ 622.131711][ T5780] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 622.970839][T18836] loop0: detected capacity change from 0 to 4096 [ 622.994455][T18840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5952'. [ 623.053650][T18836] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 623.098607][T18836] ntfs3: loop0: Failed to load $Extend (-22). [ 623.104806][T18836] ntfs3: loop0: Failed to initialize $Extend. [ 623.891065][T18834] loop2: detected capacity change from 0 to 32768 [ 623.942382][T18854] loop1: detected capacity change from 0 to 512 [ 623.964040][T18854] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 624.118684][T18854] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 624.214957][T18862] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5960'. [ 624.258979][T18862] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5960'. [ 624.279583][T18864] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5961'. [ 624.900680][T18884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5971'. [ 625.137065][T18892] netlink: 'syz.2.5975': attribute type 21 has an invalid length. [ 625.151220][T18892] IPv6: NLM_F_CREATE should be specified when creating new route [ 625.160658][T18892] netlink: 'syz.2.5975': attribute type 1 has an invalid length. [ 625.310502][T15225] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 625.379612][T18900] netlink: 'syz.0.5979': attribute type 1 has an invalid length. [ 625.393852][T18900] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5979'. [ 625.532719][T15225] usb 4-1: Using ep0 maxpacket: 16 [ 625.544065][T15225] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 625.560189][T18907] binder: BC_ATTEMPT_ACQUIRE not supported [ 625.563336][T15225] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 625.566034][T18907] binder: 18906:18907 ioctl c0306201 200000004a40 returned -22 [ 625.604611][T15225] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 625.657602][T15225] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 625.686493][T15225] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 625.700487][T15225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.713624][T15225] usb 4-1: Product: syz [ 625.717855][T15225] usb 4-1: Manufacturer: syz [ 625.755100][T15225] usb 4-1: SerialNumber: syz [ 625.892102][T18919] loop2: detected capacity change from 0 to 128 [ 626.243521][T15225] usb 4-1: 0:2 : does not exist [ 626.267535][T18927] loop2: detected capacity change from 0 to 1024 [ 626.324069][T15225] usb 4-1: USB disconnect, device number 65 [ 626.398067][ T6192] udevd[6192]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 627.267619][T18961] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6008'. [ 627.305989][T18961] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 627.309029][T18966] netlink: 'syz.3.6010': attribute type 29 has an invalid length. [ 627.361977][T18966] netlink: 'syz.3.6010': attribute type 29 has an invalid length. [ 627.517010][T18972] tc_dump_action: action bad kind [ 628.194421][T18991] loop0: detected capacity change from 0 to 2048 [ 628.272114][T18991] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 628.371341][T18993] loop1: detected capacity change from 0 to 4096 [ 628.476612][T18993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.660341][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.845485][ T5856] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 628.853430][T19007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6028'. [ 629.068829][ T5856] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 629.083485][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 629.106135][ T5856] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 629.126219][ T5856] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 629.149098][ T5856] usb 4-1: Manufacturer: syz [ 629.164973][ T5856] usb 4-1: config 0 descriptor?? [ 629.189138][ T5856] igorplugusb 4-1:0.0: endpoint incorrect [ 629.458992][T15224] usb 4-1: USB disconnect, device number 66 [ 629.776440][T19041] IPv6: Can't replace route, no match found [ 629.961294][T19048] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6049'. [ 630.511334][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.517775][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.537842][T19067] netlink: 'syz.1.6059': attribute type 7 has an invalid length. [ 631.417987][T19103] overlay: Unknown parameter 'smackfstransmute' [ 632.055389][T15224] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 632.272093][T15224] usb 4-1: Using ep0 maxpacket: 32 [ 632.304924][T15224] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 632.314065][T15224] usb 4-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 632.324662][T15224] usb 4-1: Product: syz [ 632.337202][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 632.353418][T15224] usb 4-1: config 0 descriptor?? [ 632.380115][T19140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6095'. [ 632.501771][T19146] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6098'. [ 632.565069][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 632.579361][ T9] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 632.597489][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 632.607219][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 632.631546][T15224] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input30 [ 632.657297][ T9] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 632.687444][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.746323][ T9] usb 2-1: config 0 descriptor?? [ 632.762684][ T9] pxrc 2-1:0.0: Could not find endpoint [ 632.805878][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 632.837441][T15224] usb 4-1: USB disconnect, device number 67 [ 632.917282][T19154] loop0: detected capacity change from 0 to 256 [ 632.985758][T15225] usb 2-1: USB disconnect, device number 63 [ 633.250858][T19164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6107'. [ 633.378468][T19168] loop0: detected capacity change from 0 to 512 [ 633.385987][T19168] EXT4-fs: Ignoring removed bh option [ 633.404066][T19168] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 633.446502][T19168] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 633.485357][T19168] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 633.499169][T19168] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 633.546230][T19168] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 633.554507][T19168] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=8842c118, mo2=0080] [ 633.562911][T19168] EXT4-fs (loop0): orphan cleanup on readonly fs [ 633.585264][T19168] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.6109: bg 0: block 34: padding at end of block bitmap is not set [ 633.640905][T19168] __quota_error: 2 callbacks suppressed [ 633.640924][T19168] Quota error (device loop0): write_blk: dquota write failed [ 633.654123][T19168] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 633.664112][T19168] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.6109: Failed to acquire dquot type 1 [ 633.708076][T19168] EXT4-fs (loop0): 1 truncate cleaned up [ 633.745691][T19168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 633.899673][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.007355][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 634.143086][T19185] raw_sendmsg: syz.1.6117 forgot to set AF_INET. Fix it! [ 634.239637][ T9] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 634.262786][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 634.297680][ T9] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 634.317975][ T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 634.344322][ T9] usb 3-1: Manufacturer: syz [ 634.366781][ T9] usb 3-1: config 0 descriptor?? [ 634.406548][ T9] igorplugusb 3-1:0.0: endpoint incorrect [ 634.643486][ T9] usb 3-1: USB disconnect, device number 56 [ 634.676017][T19201] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6125'. [ 635.167243][ T28] audit: type=1326 audit(2000000035.209:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19218 comm="syz.1.6134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43579e0d9 code=0x7ffc0000 [ 635.244421][ T28] audit: type=1326 audit(2000000035.209:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19218 comm="syz.1.6134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43579e0d9 code=0x7ffc0000 [ 635.342210][ T28] audit: type=1326 audit(2000000035.237:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19218 comm="syz.1.6134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fb43579e0d9 code=0x7ffc0000 [ 635.390713][ T28] audit: type=1326 audit(2000000035.237:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19218 comm="syz.1.6134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43579e0d9 code=0x7ffc0000 [ 635.496759][ T28] audit: type=1326 audit(2000000035.237:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19218 comm="syz.1.6134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43579e0d9 code=0x7ffc0000 [ 635.834019][T19240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6144'. [ 636.054094][T19246] program syz.2.6147 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 636.159616][T19250] netlink: 'syz.3.6149': attribute type 7 has an invalid length. [ 636.373265][T19232] loop0: detected capacity change from 0 to 32768 [ 636.426239][T19232] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.6139 (19232) [ 636.525239][T19232] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 636.560547][T19232] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 636.569559][T19232] BTRFS info (device loop0): turning on sync discard [ 636.576348][T19232] BTRFS info (device loop0): setting nodatacow, compression disabled [ 636.586737][T19232] BTRFS info (device loop0): turning on async discard [ 636.609007][T19232] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 636.664243][T19232] BTRFS info (device loop0): trying to use backup root at mount time [ 636.672446][T19232] BTRFS info (device loop0): enabling auto defrag [ 636.720764][T19232] BTRFS info (device loop0): using free space tree [ 636.738652][T19263] loop1: detected capacity change from 0 to 256 [ 636.814840][T19263] exfat: Deprecated parameter 'namecase' [ 636.871223][T19263] exfat: Deprecated parameter 'namecase' [ 636.876980][T19263] exfat: Deprecated parameter 'namecase' [ 636.936255][ T4555] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 636.950152][T19263] exFAT-fs (loop1): bogus fat length [ 636.955497][T19263] exFAT-fs (loop1): failed to read boot sector [ 637.031233][T19263] exFAT-fs (loop1): failed to recognize exfat type [ 637.031324][T19232] BTRFS error (device loop0): failed to load root extent [ 637.060619][T19232] BTRFS warning (device loop0): try to load backup roots slot 1 [ 637.075929][ T34] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 637.113174][T19232] BTRFS warning (device loop0): couldn't read tree root [ 637.134990][T19232] BTRFS warning (device loop0): try to load backup roots slot 2 [ 637.173470][ T60] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 637.190322][T19232] BTRFS warning (device loop0): couldn't read tree root [ 637.216797][T19232] BTRFS warning (device loop0): try to load backup roots slot 3 [ 637.270385][T19232] BTRFS info (device loop0): enabling ssd optimizations [ 637.308349][T19232] BTRFS info (device loop0): rebuilding free space tree [ 637.363587][T19232] BTRFS info (device loop0): checking UUID tree [ 637.611463][T19301] xt_CT: You must specify a L4 protocol and not use inversions on it [ 637.701726][ T5773] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 638.047390][T19313] xt_cgroup: xt_cgroup: no path or classid specified [ 639.046948][T19350] loop1: detected capacity change from 0 to 736 [ 639.070404][T19346] loop2: detected capacity change from 0 to 4096 [ 639.146967][T19353] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 639.345385][T19350] rock: directory entry would overflow storage [ 639.351654][T19350] rock: sig=0x3b10, size=4, remaining=3 [ 640.396864][T19389] openvswitch: netlink: Actions may not be safe on all matching packets [ 640.434432][T19393] loop2: detected capacity change from 0 to 512 [ 640.482102][T19393] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 640.543407][T19393] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 640.589310][T19393] System zones: 1-12 [ 640.593634][T19393] EXT4-fs (loop2): orphan cleanup on readonly fs [ 640.611209][T19393] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.6209: invalid indirect mapped block 12 (level 1) [ 640.673956][T19393] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.6209: invalid indirect mapped block 2 (level 2) [ 640.715067][T19393] EXT4-fs (loop2): 1 truncate cleaned up [ 640.724467][T19393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 640.928807][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 641.306862][T19418] bond1: entered promiscuous mode [ 641.467438][T15225] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 641.667531][T15225] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 641.687756][T15225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.719763][T15225] usb 4-1: Product: syz [ 641.724011][T15225] usb 4-1: Manufacturer: syz [ 641.752777][T15225] usb 4-1: SerialNumber: syz [ 641.789980][T19437] loop1: detected capacity change from 0 to 2048 [ 641.831955][T15224] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 641.880405][T19437] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 641.978369][T19441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 641.985722][T19441] IPv6: NLM_F_CREATE should be set when creating new route [ 641.993062][T19441] IPv6: NLM_F_CREATE should be set when creating new route [ 642.025599][T19437] /dev/loop1: Can't open blockdev [ 642.179878][T19445] loop2: detected capacity change from 0 to 256 [ 642.291520][T19445] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 642.300166][T19445] FAT-fs (loop2): Filesystem has been set read-only [ 642.396274][ T55] usb 4-1: USB disconnect, device number 68 [ 642.418174][T19449] overlayfs: missing 'lowerdir' [ 643.009081][T15224] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 643.016264][T15224] ath9k_htc: Failed to initialize the device [ 643.026092][T19473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6246'. [ 643.050039][ T55] usb 4-1: ath9k_htc: USB layer deinitialized [ 643.205737][T19477] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6248'. [ 643.212413][T19475] netlink: 368 bytes leftover after parsing attributes in process `syz.3.6247'. [ 643.254564][T19475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6247'. [ 643.277981][T19475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6247'. [ 643.298273][T19475] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6247'. [ 643.496230][T19487] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 4 out of range (1000000..45000000) [ 643.657879][T15224] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 643.881738][T15224] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 643.890608][T15224] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 643.907356][T15224] usb 2-1: config 220 has no interface number 2 [ 643.924819][T15224] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 643.940884][T19500] loop0: detected capacity change from 0 to 4096 [ 643.948556][T15224] usb 2-1: config 220 interface 0 has no altsetting 0 [ 643.962703][T15224] usb 2-1: config 220 interface 76 has no altsetting 0 [ 643.969727][T15224] usb 2-1: config 220 interface 1 has no altsetting 0 [ 644.011054][T15224] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 644.026467][T15224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.045942][T19503] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 644.068208][T15224] usb 2-1: Product: syz [ 644.079558][T15224] usb 2-1: Manufacturer: syz [ 644.089672][T15224] usb 2-1: SerialNumber: syz [ 644.361778][T15224] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 644.373541][T15224] usb 2-1: No valid video chain found. [ 644.379483][T15224] usb 2-1: selecting invalid altsetting 0 [ 644.424492][T15224] usb 2-1: selecting invalid altsetting 0 [ 644.463606][T15224] usbtest: probe of 2-1:220.1 failed with error -22 [ 644.488342][T15224] usb 2-1: USB disconnect, device number 64 [ 645.158102][T19531] netlink: 'syz.2.6274': attribute type 9 has an invalid length. [ 645.175939][T19531] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6274'. [ 645.439296][T19541] loop2: detected capacity change from 0 to 1024 [ 645.489536][T19541] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 645.550473][T19541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.631225][T19541] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.6278: missing EA_INODE flag [ 645.653036][T19541] EXT4-fs (loop2): Remounting filesystem read-only [ 645.670430][T19525] loop0: detected capacity change from 0 to 32768 [ 645.704451][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.750867][T19525] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.6272 (19525) [ 645.796798][T19525] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 645.836167][T19525] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 645.891754][T19525] BTRFS info (device loop0): enabling auto defrag [ 645.898297][T19525] BTRFS info (device loop0): force clearing of disk cache [ 645.948969][T19525] BTRFS info (device loop0): disabling log replay at mount time [ 645.965901][T19525] BTRFS info (device loop0): turning on async discard [ 645.974117][T19525] BTRFS info (device loop0): setting nodatacow, compression disabled [ 645.988397][T19525] BTRFS info (device loop0): turning off async discard [ 646.004394][T19525] BTRFS info (device loop0): disabling free space tree [ 646.026857][T19525] BTRFS info (device loop0): disabling tree log [ 646.043532][T19525] BTRFS info (device loop0): enabling disk space caching [ 646.076474][T19525] BTRFS info (device loop0): disk space caching is enabled [ 646.385457][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6288'. [ 646.499347][ T5773] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 647.233897][T19603] x_tables: unsorted underflow at hook 3 [ 647.404017][T19607] netlink: 'syz.1.6302': attribute type 2 has an invalid length. [ 647.448282][T19607] netlink: 'syz.1.6302': attribute type 1 has an invalid length. [ 647.482476][T19609] tmpfs: Bad value for 'mpol' [ 647.588021][T19613] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6305'. [ 647.887995][T19623] netlink: 'syz.1.6310': attribute type 13 has an invalid length. [ 647.895897][T19623] netlink: 'syz.1.6310': attribute type 12 has an invalid length. [ 648.071253][T19628] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6313'. [ 648.788847][T19653] loop1: detected capacity change from 0 to 16 [ 648.826819][T19653] erofs: (device loop1): mounted with root inode @ nid 36. [ 648.888686][T19653] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 649.100184][T19662] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6329'. [ 649.137984][T19662] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 649.196813][T19662] bridge5: entered promiscuous mode [ 649.573079][T19678] loop2: detected capacity change from 0 to 16 [ 649.609723][T19678] erofs: (device loop2): mounted with root inode @ nid 36. [ 649.644254][T19678] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 649.839826][T19684] ip6gre2: entered promiscuous mode [ 649.845151][T19684] ip6gre2: entered allmulticast mode [ 649.874497][T19688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6342'. [ 650.301617][T19701] gretap1: entered allmulticast mode [ 650.407146][T19706] loop1: detected capacity change from 0 to 2048 [ 650.474811][T19706] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 650.586205][T19712] netlink: 'syz.3.6354': attribute type 5 has an invalid length. [ 651.195600][T19732] netlink: 'syz.0.6364': attribute type 1 has an invalid length. [ 651.222711][T19732] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.6364'. [ 651.647853][T19748] loop2: detected capacity change from 0 to 64 [ 651.725083][T19750] loop1: detected capacity change from 0 to 128 [ 651.736731][T19748] syz.2.6372: attempt to access beyond end of device [ 651.736731][T19748] loop2: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 651.783829][T19750] FAT-fs (loop1): Directory bread(block 32) failed [ 651.794068][T19748] Buffer I/O error on dev loop2, logical block 22533, async page read [ 651.805386][T19750] FAT-fs (loop1): Directory bread(block 33) failed [ 651.812078][T19750] FAT-fs (loop1): Directory bread(block 34) failed [ 651.832338][T19748] syz.2.6372: attempt to access beyond end of device [ 651.832338][T19748] loop2: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 651.846413][T19750] FAT-fs (loop1): Directory bread(block 35) failed [ 651.853191][T19750] FAT-fs (loop1): Directory bread(block 36) failed [ 651.866842][T19748] Buffer I/O error on dev loop2, logical block 22533, async page read [ 651.875263][T19750] FAT-fs (loop1): Directory bread(block 37) failed [ 651.889462][T19750] FAT-fs (loop1): Directory bread(block 38) failed [ 651.896056][T19750] FAT-fs (loop1): Directory bread(block 39) failed [ 651.929711][T19750] FAT-fs (loop1): Directory bread(block 40) failed [ 651.959112][T19750] FAT-fs (loop1): Directory bread(block 41) failed [ 652.271746][T19758] xt_TCPMSS: Only works on TCP SYN packets [ 652.473789][T19762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6380'. [ 652.482818][T19762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6380'. [ 653.160597][T19778] loop0: detected capacity change from 0 to 8192 [ 653.347032][T19791] loop2: detected capacity change from 0 to 256 [ 653.395981][T15224] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 653.578310][ T28] audit: type=1326 audit(2000000052.187:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19795 comm="syz.0.6396" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 653.612381][T15224] usb 4-1: Using ep0 maxpacket: 8 [ 653.636533][T15224] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 653.668973][T15224] usb 4-1: config 9 has 1 interface, different from the descriptor's value: 4 [ 653.677452][ T28] audit: type=1326 audit(2000000052.187:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19795 comm="syz.0.6396" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 653.702023][ C0] vkms_vblank_simulate: vblank timer overrun [ 653.740096][T15224] usb 4-1: New USB device found, idVendor=04b8, idProduct=0002, bcdDevice=61.6b [ 653.767395][T19799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6398'. [ 653.772175][ T28] audit: type=1326 audit(2000000052.187:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19795 comm="syz.0.6396" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 653.792734][T15224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.815803][T19800] x_tables: duplicate entry at hook 3 [ 653.830956][T15224] usb 4-1: Product: syz [ 653.835205][T15224] usb 4-1: Manufacturer: syz [ 653.839856][T15224] usb 4-1: SerialNumber: syz [ 653.861909][ T28] audit: type=1326 audit(2000000052.187:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19795 comm="syz.0.6396" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 653.900337][T19802] misc userio: The device must be registered before sending interrupts [ 654.001126][ T28] audit: type=1326 audit(2000000052.224:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19795 comm="syz.0.6396" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 654.025288][ C0] vkms_vblank_simulate: vblank timer overrun [ 654.081891][T19805] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 654.085138][ T28] audit: type=1326 audit(2000000052.224:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19795 comm="syz.0.6396" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 654.116581][ C0] vkms_vblank_simulate: vblank timer overrun [ 654.126920][ T28] audit: type=1326 audit(2000000052.224:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19795 comm="syz.0.6396" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 654.189214][T15224] usb 4-1: USB disconnect, device number 69 [ 654.195335][ T28] audit: type=1326 audit(2000000052.224:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19795 comm="syz.0.6396" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 654.246194][ T28] audit: type=1326 audit(2000000052.224:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19795 comm="syz.0.6396" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 654.466575][T19814] loop2: detected capacity change from 0 to 2048 [ 654.491596][T19814] NILFS (loop2): unrecognized mount option "syzkaller" [ 654.566327][ T6192] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 654.858940][T19826] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by ""[19826] [ 654.946073][ T28] audit: type=1326 audit(2000000053.450:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19829 comm="syz.3.6412" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad16b9e0d9 code=0x7ffc0000 [ 655.544515][T19850] SET target dimension over the limit! [ 656.240785][T19874] loop2: detected capacity change from 0 to 2048 [ 656.335705][T19874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.365667][T19874] ext4 filesystem being mounted at /1623/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 656.593209][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.158268][T19908] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 657.266993][ T9] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 657.502337][ T9] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 657.527292][ T9] usb 4-1: config 8 has no interface number 0 [ 657.533488][ T9] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 657.581125][ T9] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 657.591157][ T9] usb 4-1: config 8 interface 177 has no altsetting 0 [ 657.617086][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 657.632188][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.648338][T19901] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 657.744349][T15224] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 657.885093][ T9] usb 4-1: string descriptor 0 read error: -71 [ 657.914886][ T9] ir_toy 4-1:8.177: required endpoints not found [ 657.947842][ T9] usb 4-1: USB disconnect, device number 70 [ 657.953446][T15224] usb 2-1: Using ep0 maxpacket: 16 [ 657.977602][T15224] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 658.014754][T15224] usb 2-1: config 0 has no interface number 0 [ 658.020970][T15224] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 658.053202][T15224] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 658.069868][T15224] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 658.089089][T15224] usb 2-1: Product: syz [ 658.094139][T15224] usb 2-1: SerialNumber: syz [ 658.118458][T15224] usb 2-1: config 0 descriptor?? [ 658.154755][T15224] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input32 [ 658.398088][T19945] loop0: detected capacity change from 0 to 256 [ 658.421466][T19945] exfat: Deprecated parameter 'utf8' [ 658.446123][T19945] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5a1fe699, utbl_chksum : 0xe619d30d) [ 658.462882][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 658.462900][ T5856] usb 2-1: USB disconnect, device number 65 [ 658.476232][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 658.499187][ T5856] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 658.514708][T15224] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 658.724832][T19947] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 658.737495][T19947] bond3 (unregistering): Released all slaves [ 658.746253][T15224] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 658.756970][T15224] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 658.766217][T15224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.784209][T15224] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 658.881372][T19952] netlink: 'syz.0.6472': attribute type 1 has an invalid length. [ 658.889362][T19952] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6472'. [ 658.899181][T19952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6472'. [ 659.913964][T15224] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 660.133871][T15224] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 660.173477][T15224] stv0680 3-1:4.0: last error: 86, command = 0x0 [ 660.195569][T15224] usb 3-1: USB disconnect, device number 57 [ 660.845360][ T5856] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 661.072451][ T5856] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 661.089152][ T5856] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 661.108834][ T5856] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 661.126912][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.159607][ T5856] usb 4-1: Product: syz [ 661.163879][ T5856] usb 4-1: Manufacturer: syz [ 661.183454][ T5856] usb 4-1: SerialNumber: syz [ 661.203753][ T5856] usb 4-1: config 0 descriptor?? [ 661.246596][ T5856] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 661.517392][T20041] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6517'. [ 661.738272][T15225] usb 4-1: USB disconnect, device number 71 [ 661.759796][T20048] loop0: detected capacity change from 0 to 128 [ 661.814712][T20048] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 661.859707][T20048] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 662.796911][ T5855] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 662.881672][T20088] loop0: detected capacity change from 0 to 2048 [ 662.922165][T20088] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 663.028321][T20088] UDF-fs: unknown compression code (0) [ 663.046078][ T5855] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 663.064924][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.075974][ T5855] usb 3-1: Product: syz [ 663.086053][ T5855] usb 3-1: Manufacturer: syz [ 663.091231][ T5855] usb 3-1: SerialNumber: syz [ 663.129400][ T5856] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 663.596882][T20104] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6548'. [ 663.931952][ T5855] usb 3-1: USB disconnect, device number 58 [ 664.086434][T20116] netlink: 'syz.3.6553': attribute type 24 has an invalid length. [ 664.349797][ T5856] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 664.356937][ T5856] ath9k_htc: Failed to initialize the device [ 664.401769][ T5855] usb 3-1: ath9k_htc: USB layer deinitialized [ 664.866437][T20140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6565'. [ 664.934283][T20144] IPVS: set_ctl: invalid protocol: 47 172.20.20.24:20003 [ 665.365115][T20160] xt_TCPMSS: Only works on TCP SYN packets [ 665.473405][T20165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6577'. [ 665.516062][T20165] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6577'. [ 666.131534][T20186] netlink: 'syz.3.6588': attribute type 2 has an invalid length. [ 666.414756][T20200] ubi31: attaching mtd0 [ 666.442251][T20200] ubi31: scanning is finished [ 666.447190][T20200] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 666.552513][T20200] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 666.851477][T20214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6602'. [ 667.086539][T15225] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 667.110886][T20224] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 667.123618][T20224] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 667.307583][T15225] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 667.328845][T15225] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 667.351156][T15225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.580169][T20238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6614'. [ 667.690852][T20240] netlink: 'syz.3.6615': attribute type 21 has an invalid length. [ 667.890232][T15225] qmi_wwan: probe of 3-1:1.0 failed with error -22 [ 667.921404][T15225] usb 3-1: USB disconnect, device number 59 [ 668.393772][T20264] netlink: 'syz.0.6627': attribute type 11 has an invalid length. [ 668.401820][T20264] netlink: 212832 bytes leftover after parsing attributes in process `syz.0.6627'. [ 669.052989][T20284] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6644'. [ 669.085520][T20284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 669.230737][T20291] netlink: 'syz.0.6639': attribute type 21 has an invalid length. [ 669.841135][T20313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6651'. [ 670.300613][T15225] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 670.439720][ T55] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 670.509138][T15225] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 670.528317][T15225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.548190][T15225] usb 4-1: config 0 descriptor?? [ 670.562132][T15225] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 670.661153][ T55] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 670.692253][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.700573][ T55] usb 3-1: Product: syz [ 670.725514][ T55] usb 3-1: Manufacturer: syz [ 670.730355][ T55] usb 3-1: SerialNumber: syz [ 670.771119][T15224] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 670.778188][T20337] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6662'. [ 670.806378][T20337] netlink: 'syz.1.6662': attribute type 3 has an invalid length. [ 670.835413][T20337] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6662'. [ 671.012678][T15225] gspca_cpia1: usb_control_msg 03, error -71 [ 671.059790][T15225] gspca_cpia1: usb_control_msg 01, error -71 [ 671.066057][T15225] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 671.106295][T15225] usb 4-1: USB disconnect, device number 72 [ 671.333772][ T5856] usb 3-1: USB disconnect, device number 60 [ 671.482758][ T5855] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 671.621573][T20359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6674'. [ 671.646391][T20359] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6674'. [ 671.688714][ T5855] usb 2-1: Using ep0 maxpacket: 32 [ 671.709088][ T5855] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 671.732820][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.765429][ T5855] usb 2-1: config 0 descriptor?? [ 671.783664][ T5855] gspca_main: sunplus-2.14.0 probing 041e:400b [ 671.813751][T20364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6676'. [ 671.824420][T20364] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6676'. [ 671.971743][T15224] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 671.978901][T15224] ath9k_htc: Failed to initialize the device [ 672.014764][ T5856] usb 3-1: ath9k_htc: USB layer deinitialized [ 672.243907][ T5855] gspca_sunplus: reg_w_riv err -71 [ 672.249282][ T5855] sunplus: probe of 2-1:0.0 failed with error -71 [ 672.271917][T20375] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 672.306276][ T5855] usb 2-1: USB disconnect, device number 66 [ 672.466009][T20379] loop2: detected capacity change from 0 to 1024 [ 672.488444][T20379] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 672.532105][T20379] hfsplus: filesystem is marked journaled, leaving read-only. [ 673.069019][T20397] ip6gre1: entered promiscuous mode [ 673.087828][T20397] ip6gre1: entered allmulticast mode [ 673.097310][T20400] netlink: 'syz.0.6695': attribute type 21 has an invalid length. [ 673.329964][T20406] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 673.760885][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 673.760903][ T28] audit: type=1326 audit(2000000070.806:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20421 comm="syz.3.6705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad16b9e0d9 code=0x7ffc0000 [ 673.844969][T20424] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 673.862755][ T28] audit: type=1326 audit(2000000070.806:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20421 comm="syz.3.6705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad16b9e0d9 code=0x7ffc0000 [ 673.923088][ T28] audit: type=1326 audit(2000000070.806:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20421 comm="syz.3.6705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad16b9e0d9 code=0x7ffc0000 [ 673.947560][ C1] vkms_vblank_simulate: vblank timer overrun [ 673.976393][ T28] audit: type=1326 audit(2000000070.806:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20421 comm="syz.3.6705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad16b9e0d9 code=0x7ffc0000 [ 674.001166][ T28] audit: type=1326 audit(2000000070.843:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20421 comm="syz.3.6705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fad16b9e0d9 code=0x7ffc0000 [ 674.025468][ T28] audit: type=1326 audit(2000000070.843:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20421 comm="syz.3.6705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad16b9e0d9 code=0x7ffc0000 [ 674.050156][ T28] audit: type=1326 audit(2000000070.843:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20421 comm="syz.3.6705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad16b9e0d9 code=0x7ffc0000 [ 674.074369][ C1] vkms_vblank_simulate: vblank timer overrun [ 674.080665][ T28] audit: type=1326 audit(2000000070.871:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20421 comm="syz.3.6705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fad16b9e0d9 code=0x7ffc0000 [ 674.105173][ T28] audit: type=1326 audit(2000000070.871:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20421 comm="syz.3.6705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fad16b9e0d9 code=0x7ffc0000 [ 674.129390][ C1] vkms_vblank_simulate: vblank timer overrun [ 674.152021][T20428] bond2: option arp_validate: invalid value (18446744073709551615) [ 674.201560][T20428] bond2 (unregistering): Released all slaves [ 674.866706][T20454] blktrace: Concurrent blktraces are not allowed on loop5 [ 675.063809][ T28] audit: type=1326 audit(2000000071.996:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20460 comm="syz.0.6724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2c19e0d9 code=0x7ffc0000 [ 675.087941][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.135623][T20493] bond3 (unregistering): Released all slaves [ 676.199562][ T8] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 676.439476][ T8] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 676.448616][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.534682][ T8] usb 1-1: config 0 descriptor?? [ 676.939177][T20516] syz.3.6751 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 677.041315][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 677.134182][ T8] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 677.155880][ T8] [drm] Initialized udl on minor 2 [ 677.181972][ T8] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 677.194871][ T8] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 677.229798][ T5856] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 677.254460][ T8] usb 1-1: USB disconnect, device number 54 [ 677.284375][ T5856] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 677.924097][T20533] loop2: detected capacity change from 0 to 4096 [ 677.977881][T20533] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 678.887483][T20556] loop2: detected capacity change from 0 to 1764 [ 678.910940][T20560] libceph: resolve '0' (ret=-3): failed [ 679.118575][T20556] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 679.350687][T20569] tmpfs: Bad value for 'mpol' [ 679.458069][T20573] comedi comedi1: 8255: I/O port conflict (0x9,4) [ 679.464910][T20573] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 679.471517][T20573] comedi comedi1: 8255: I/O port conflict (0x10000007,4) [ 679.481281][T20573] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 679.518505][T20573] comedi comedi1: 8255: I/O port conflict (0x30000002,4) [ 679.550651][T20573] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 680.116498][T20588] sctp: [Deprecated]: syz.2.6786 (pid 20588) Use of int in max_burst socket option deprecated. [ 680.116498][T20588] Use struct sctp_assoc_value instead [ 680.666604][T20599] libceph: resolve '0.0.0.0.[' (ret=-3): failed [ 681.080882][T20610] loop1: detected capacity change from 0 to 2048 [ 681.268004][T20610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 681.329775][T20610] ext4 filesystem being mounted at /1679/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 681.469257][T20610] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.6795: bg 0: block 345: padding at end of block bitmap is not set [ 681.727760][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.039027][T20634] overlayfs: cannot append lower layer [ 683.139694][ T5856] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 683.364524][ T5856] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 683.379092][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.418272][ T5856] usb 4-1: Product: syz [ 683.441866][ T5856] usb 4-1: Manufacturer: syz [ 683.454426][T20666] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6822'. [ 683.474587][ T5856] usb 4-1: SerialNumber: syz [ 683.595324][ T5856] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 684.319934][ T8] usb 4-1: USB disconnect, device number 73 [ 684.809635][ T5856] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 684.816747][ T5856] ath9k_htc: Failed to initialize the device [ 684.875015][ T8] usb 4-1: ath9k_htc: USB layer deinitialized [ 686.286663][T20721] syz.3.6849: attempt to access beyond end of device [ 686.286663][T20721] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 687.266112][ T8] ------------[ cut here ]------------ [ 687.272792][ T8] WARNING: CPU: 0 PID: 8 at net/netfilter/nft_set_pipapo.c:2389 nft_pipapo_destroy+0x84b/0x8b0 [ 687.283389][ T8] Modules linked in: [ 687.287334][ T8] CPU: 0 PID: 8 Comm: kworker/0:0 Not tainted syzkaller #0 [ 687.294743][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 687.304897][ T8] Workqueue: events nf_tables_trans_destroy_work [ 687.311410][ T8] RIP: 0010:nft_pipapo_destroy+0x84b/0x8b0 [ 687.317361][ T8] Code: 00 00 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 b4 ab f8 e9 d3 f9 ff ff e8 7f b4 ab f8 e9 6c fe ff ff e8 75 b4 ab f8 <0f> 0b e9 16 f8 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 [ 687.326732][T20744] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 687.337402][ T8] RSP: 0018:ffffc900000d79d8 EFLAGS: 00010293 [ 687.350613][ T8] RAX: ffffffff88dbbdab RBX: ffff88807dea5cf0 RCX: ffff88801b655a00 [ 687.358960][ T8] RDX: 0000000000000000 RSI: ffff88807dea5c00 RDI: ffff88804f518628 [ 687.367009][ T8] RBP: ffffc900000d7bb0 R08: ffff88801b655a00 R09: 000000000000000f [ 687.375995][ T8] R10: 0000000000000020 R11: 0000000000000000 R12: ffff88807dea5cc0 [ 687.384087][ T8] R13: dffffc0000000000 R14: ffff88807dea5d10 R15: dffffc0000000000 [ 687.392313][ T8] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 687.401363][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 687.407996][ T8] CR2: 0000200000001200 CR3: 000000002c432000 CR4: 00000000003506f0 [ 687.416186][ T8] Call Trace: [ 687.419598][ T8] [ 687.422667][ T8] ? lockdep_hardirqs_on+0x98/0x150 [ 687.428040][ T8] nft_set_destroy+0x489/0xa20 [ 687.432866][ T8] ? __kmem_cache_free+0xba/0x1f0 [ 687.438052][ T8] nf_tables_trans_destroy_work+0xb2d/0x11b0 [ 687.444106][ T8] ? nft_object_dump+0x1e0/0x1e0 [ 687.449128][ T8] ? _raw_spin_unlock_irq+0x23/0x50 [ 687.454505][ T8] ? process_scheduled_works+0x975/0x1600 [ 687.460375][ T8] ? process_scheduled_works+0x975/0x1600 [ 687.466321][ T8] process_scheduled_works+0xa60/0x1600 [ 687.472259][ T8] ? worker_attach_to_pool+0x370/0x370 [ 687.477843][ T8] ? assign_work+0x3cc/0x5d0 [ 687.482497][ T8] worker_thread+0xa5e/0xfe0 [ 687.487184][ T8] kthread+0x2fa/0x390 [ 687.491336][ T8] ? pr_cont_work+0x550/0x550 [ 687.496062][ T8] ? kthread_blkcg+0xd0/0xd0 [ 687.500833][ T8] ret_from_fork+0x48/0x80 [ 687.505335][ T8] ? kthread_blkcg+0xd0/0xd0 [ 687.510027][ T8] ret_from_fork_asm+0x11/0x20 [ 687.514884][ T8] [ 687.517974][ T8] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 687.525307][ T8] CPU: 0 PID: 8 Comm: kworker/0:0 Not tainted syzkaller #0 [ 687.532544][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 687.542634][ T8] Workqueue: events nf_tables_trans_destroy_work [ 687.549032][ T8] Call Trace: [ 687.552418][ T8] [ 687.555368][ T8] dump_stack_lvl+0x18c/0x250 [ 687.560159][ T8] ? show_regs_print_info+0x20/0x20 [ 687.565386][ T8] ? load_image+0x420/0x420 [ 687.569970][ T8] panic+0x2ca/0x720 [ 687.573925][ T8] ? bpf_jit_dump+0xd0/0xd0 [ 687.578479][ T8] ? ret_from_fork_asm+0x11/0x20 [ 687.583899][ T8] __warn+0x2e0/0x470 [ 687.587916][ T8] ? nft_pipapo_destroy+0x84b/0x8b0 [ 687.593151][ T8] ? nft_pipapo_destroy+0x84b/0x8b0 [ 687.598383][ T8] report_bug+0x2be/0x4f0 [ 687.602764][ T8] ? nft_pipapo_destroy+0x84b/0x8b0 [ 687.608004][ T8] ? nft_pipapo_destroy+0x84b/0x8b0 [ 687.613262][ T8] ? nft_pipapo_destroy+0x84d/0x8b0 [ 687.618489][ T8] handle_bug+0xcf/0x120 [ 687.622760][ T8] exc_invalid_op+0x1a/0x50 [ 687.627283][ T8] asm_exc_invalid_op+0x1a/0x20 [ 687.632319][ T8] RIP: 0010:nft_pipapo_destroy+0x84b/0x8b0 [ 687.638149][ T8] Code: 00 00 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 b4 ab f8 e9 d3 f9 ff ff e8 7f b4 ab f8 e9 6c fe ff ff e8 75 b4 ab f8 <0f> 0b e9 16 f8 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 [ 687.657777][ T8] RSP: 0018:ffffc900000d79d8 EFLAGS: 00010293 [ 687.663872][ T8] RAX: ffffffff88dbbdab RBX: ffff88807dea5cf0 RCX: ffff88801b655a00 [ 687.671864][ T8] RDX: 0000000000000000 RSI: ffff88807dea5c00 RDI: ffff88804f518628 [ 687.679853][ T8] RBP: ffffc900000d7bb0 R08: ffff88801b655a00 R09: 000000000000000f [ 687.687874][ T8] R10: 0000000000000020 R11: 0000000000000000 R12: ffff88807dea5cc0 [ 687.695869][ T8] R13: dffffc0000000000 R14: ffff88807dea5d10 R15: dffffc0000000000 [ 687.703868][ T8] ? nft_pipapo_destroy+0x84b/0x8b0 [ 687.709098][ T8] ? nft_pipapo_destroy+0x84b/0x8b0 [ 687.714317][ T8] ? lockdep_hardirqs_on+0x98/0x150 [ 687.719548][ T8] nft_set_destroy+0x489/0xa20 [ 687.724348][ T8] ? __kmem_cache_free+0xba/0x1f0 [ 687.729412][ T8] nf_tables_trans_destroy_work+0xb2d/0x11b0 [ 687.735428][ T8] ? nft_object_dump+0x1e0/0x1e0 [ 687.740404][ T8] ? _raw_spin_unlock_irq+0x23/0x50 [ 687.745634][ T8] ? process_scheduled_works+0x975/0x1600 [ 687.751469][ T8] ? process_scheduled_works+0x975/0x1600 [ 687.757219][ T8] process_scheduled_works+0xa60/0x1600 [ 687.763882][ T8] ? worker_attach_to_pool+0x370/0x370 [ 687.769384][ T8] ? assign_work+0x3cc/0x5d0 [ 687.774010][ T8] worker_thread+0xa5e/0xfe0 [ 687.778645][ T8] kthread+0x2fa/0x390 [ 687.782738][ T8] ? pr_cont_work+0x550/0x550 [ 687.787442][ T8] ? kthread_blkcg+0xd0/0xd0 [ 687.792056][ T8] ret_from_fork+0x48/0x80 [ 687.796497][ T8] ? kthread_blkcg+0xd0/0xd0 [ 687.801107][ T8] ret_from_fork_asm+0x11/0x20 [ 687.805905][ T8] [ 687.809518][ T8] Kernel Offset: disabled [ 687.813999][ T8] Rebooting in 86400 seconds..