last executing test programs: 2m15.022187878s ago: executing program 2 (id=581): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0xfffffffffffffffe, 0x0) 2m14.817984192s ago: executing program 2 (id=583): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffff92d, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000d2}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xe}, {0x5, 0xb}, {0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240440e0}, 0x4890) 2m14.508003429s ago: executing program 2 (id=584): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioperm(0x0, 0x7c9, 0x1) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4]}, 0x8, 0x0) signalfd4(r0, &(0x7f00000002c0)={[0x6]}, 0x8, 0x800) 2m14.337755796s ago: executing program 2 (id=586): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x404, &(0x7f0000000340)={[{@grpjquota}, {@usrquota}]}, 0xff, 0x4cb, &(0x7f0000001340)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) 2m13.340802732s ago: executing program 2 (id=589): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xd8, 0x3, 0xd0e7500, 0x0, 0x60, 0x170, 0x1d8, 0x1d8, 0x170, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd, 0x36}, 0xffffffff, 0xff, 'nr0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x1, 0xd}, 0x0, 0x70, 0xd8, 0x0, {0x60000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x100, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 2m12.281690912s ago: executing program 2 (id=595): r0 = fanotify_init(0x1b, 0x40000) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m11.654386368s ago: executing program 32 (id=595): r0 = fanotify_init(0x1b, 0x40000) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3.234048116s ago: executing program 1 (id=1462): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0', 0x1e) 2.995992651s ago: executing program 1 (id=1466): creat(&(0x7f0000000100)='./file0\x00', 0x7a) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x449) removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_access\x00') 2.702047777s ago: executing program 1 (id=1469): mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='binfmt_misc\x00', 0x281c012, 0x0) syz_clone(0x11, 0x0, 0xc, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x1, "906b8a", 0x1, 0xff}) 2.324875159s ago: executing program 3 (id=1472): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x34, r1, 0x1, 0x70bda9, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4048004) 2.250189113s ago: executing program 1 (id=1473): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4000009d, 0x0, 0xfffffffffffefff7}]}) 1.891202001s ago: executing program 1 (id=1477): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0xd, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x10, @mcast2, 0x5}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000011c0)="c2fb8e95213f23e208cf81fbe16d", 0xe}], 0x1}}], 0x1, 0x4001c00) 1.647550877s ago: executing program 1 (id=1479): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x49, &(0x7f00000003c0), 0x4) 1.598843486s ago: executing program 3 (id=1482): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/bus/usb/drivers_autoprobe\x00', 0x100, 0x0) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 1.436544547s ago: executing program 0 (id=1484): capset(&(0x7f0000000540)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x89, 0x8010001, 0x8001}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8a, 0x0, &(0x7f0000000640)="c3ef07cabc67b4241544b5400000000000000000003da04c0033a42c9550f50aff7ef3c311e025bdc6a1b56f04001534fa007debac387a4c491101009707876d0000000000d1d7a0e5eb31eec6c4ea5f7d72bce5cca0ef2ce5c116dfcc876b86ee6f6f4def73aad654bb56fe0b758d19f3c087d91a1384b5acc92e180d708ea0a5fad2a282ac24a8b8b6", 0x0, 0xa7ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x11a}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x80000) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1.254779932s ago: executing program 3 (id=1485): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc180fd08, &(0x7f0000002000)="040000000000000000000000800100003801000001000000000000000000000000000000000000006d") 1.252208912s ago: executing program 4 (id=1486): r0 = socket(0x10, 0x803, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000240)=[{0x1, 0x0, 0x3}]}, 0x10) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x85c, 0x0, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x10, 0x10002, 0x0) 1.166173629s ago: executing program 0 (id=1487): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)="2e801dc070eb3d02050b03b7b765146d6bdd78cb2c2bb145f9cbdffe4073f878", 0x20) 1.034296234s ago: executing program 4 (id=1488): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='online_movable\n', 0xf) 922.912335ms ago: executing program 0 (id=1489): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f00000000c0)={0x0, 0x240, 0x380, 0x0}) 863.245366ms ago: executing program 3 (id=1490): mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x60) lseek(r0, 0x0, 0x0) 819.614884ms ago: executing program 4 (id=1491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r2, @ANYBLOB="0500330003000000080032000700000008003100"], 0x44}}, 0x80) 517.480402ms ago: executing program 4 (id=1492): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./proc\x00', 0x1000, 0x0, 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/netfilter/nf_hooks_lwtunnel\x00', 0x1, 0x6) pwrite64(r0, &(0x7f0000000140)='`1', 0x2, 0xb95) 507.012504ms ago: executing program 0 (id=1493): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0xa2) acct(&(0x7f0000000180)='./file1\x00') rseq(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) acct(0x0) 442.666456ms ago: executing program 3 (id=1494): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1f7) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='1', 0xfdef) 300.110063ms ago: executing program 4 (id=1495): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000000c0)=""/92) 235.977775ms ago: executing program 0 (id=1496): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 33.769264ms ago: executing program 4 (id=1497): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/147, 0x93}], 0x1, 0xfc43, 0x1) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000a80)=""/196, 0xc4}], 0x1, 0x8f, 0x0) 22.839526ms ago: executing program 0 (id=1498): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) recvmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000100) 0s ago: executing program 3 (id=1499): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x15) kernel console output (not intermixed with test programs): 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 124.056453][ T6617] F2FS-fs (loop2): Found nat_bits in checkpoint [ 124.063497][ T5817] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 165, changing to 7 [ 124.079579][ T5817] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 25856, setting to 1024 [ 124.100012][ T5817] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 124.111468][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 124.111484][ T28] audit: type=1326 audit(1790710998.113:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.0.301" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadca99e159 code=0x0 [ 124.146320][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.177420][ T5817] usb 2-1: Product: syz [ 124.181714][ T5817] usb 2-1: Manufacturer: syz [ 124.214857][ T5817] usb 2-1: SerialNumber: syz [ 124.271642][ T6617] F2FS-fs (loop2): Start checkpoint disabled! [ 124.317785][ T6617] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 124.484061][ T5817] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 124.621076][ T5817] usb 2-1: USB disconnect, device number 4 [ 124.749946][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.874107][ T140] kworker/u4:5: attempt to access beyond end of device [ 124.874107][ T140] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 124.893858][ T140] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 124.903213][ T140] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 125.843376][ T6699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.311'. [ 125.866475][ T6699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.311'. [ 125.886423][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 125.951512][ T6699] loop0: detected capacity change from 0 to 1024 [ 126.023153][ T5784] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.328006][ T6713] use of bytesused == 0 is deprecated and will be removed in the future, [ 126.354772][ T6713] use the actual size instead. [ 126.712918][ T6728] loop1: detected capacity change from 0 to 1024 [ 126.715363][ T5817] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 126.759360][ T6728] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 126.855575][ T5848] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.944003][ T6733] loop2: detected capacity change from 0 to 256 [ 126.946208][ T5817] usb 1-1: Using ep0 maxpacket: 8 [ 126.962249][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.990985][ T5817] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 127.011244][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.044879][ T5817] usb 1-1: config 0 descriptor?? [ 127.096838][ T5848] usb 4-1: config 0 has an invalid interface number: 4 but max is 3 [ 127.115565][ T5848] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 127.124629][ T5848] usb 4-1: config 0 has no interface number 0 [ 127.137728][ T5848] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 127.151218][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.180850][ T5848] usb 4-1: config 0 descriptor?? [ 127.208299][ T5848] ums-realtek 4-1:0.4: USB Mass Storage device detected [ 127.287397][ T5817] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 127.444599][ T5848] usb 4-1: USB disconnect, device number 4 [ 127.721871][ T6755] scsi_dev_info_list_add_str: bad dev info string 'Q' '(null)' '(null)' [ 127.747819][ T5848] usb 1-1: USB disconnect, device number 3 [ 128.534299][ T6765] loop3: detected capacity change from 0 to 32768 [ 128.561998][ T6765] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.335 (6765) [ 128.621720][ T6765] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.648938][ T6765] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 128.663326][ T6765] BTRFS info (device loop3): setting nodatasum [ 128.674427][ T6765] BTRFS info (device loop3): disabling tree log [ 128.676193][ T5848] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.700227][ T6765] BTRFS info (device loop3): max_inline at 0 [ 128.724203][ T6765] BTRFS info (device loop3): using free space tree [ 128.937076][ T5848] usb 1-1: unable to get BOS descriptor or descriptor too short [ 128.952702][ T6765] BTRFS info (device loop3): enabling ssd optimizations [ 128.975700][ T5848] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.996484][ T6765] BTRFS info (device loop3): auto enabling async discard [ 129.008892][ T5848] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.088867][ T5848] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 129.118814][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.141350][ T5848] usb 1-1: Product: syz [ 129.158669][ T5848] usb 1-1: Manufacturer: syz [ 129.172973][ T5848] usb 1-1: SerialNumber: syz [ 129.211214][ T5848] usb 1-1: selecting invalid altsetting 1 [ 129.230448][ T5848] usb 1-1: unit 6 not found! [ 129.403127][ T5773] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.664925][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 129.902261][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 129.935847][ T8] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 129.945497][ T8] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 129.954271][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 130.005558][ T8] usb 2-1: config 1 has no interface number 0 [ 130.022186][ T8] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.041333][ T8] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 130.080845][ T8] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 130.094886][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.106583][ T5848] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 130.150529][ T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 130.168824][ T28] audit: type=1400 audit(1790711004.173:24): apparmor="STATUS" operation="profile_load" profile="unconfined" name="f/o" pid=6814 comm="syz.3.350" [ 130.221805][ T5848] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 130.250844][ T5848] usb 1-1: USB disconnect, device number 4 [ 130.316016][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.402992][ T6807] loop1: detected capacity change from 0 to 512 [ 130.458262][ T6807] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.347: bg 0: block 16: invalid block bitmap [ 130.481169][ T6807] EXT4-fs (loop1): Remounting filesystem read-only [ 130.497068][ T6807] EXT4-fs (loop1): 1 truncate cleaned up [ 130.523511][ T6807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.617507][ T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 131.081916][ T5848] usb 2-1: USB disconnect, device number 5 [ 131.090460][ T5848] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 131.300809][ T6835] loop3: detected capacity change from 0 to 512 [ 131.330516][ T6835] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.357: corrupted in-inode xattr: e_value out of bounds [ 131.408139][ T6835] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.357: couldn't read orphan inode 15 (err -117) [ 131.428936][ T6835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.572747][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.660801][ T6838] loop2: detected capacity change from 0 to 2048 [ 131.736689][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.750052][ T6833] loop0: detected capacity change from 0 to 32768 [ 131.769964][ T6838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.804973][ T6833] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.356 (6833) [ 131.879709][ T5782] Bluetooth: hci1: link tx timeout [ 131.886893][ T5782] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.901613][ T5782] Bluetooth: hci1: link tx timeout [ 131.907335][ T5782] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.915342][ T6838] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.985161][ T6833] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 132.057459][ T6833] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 132.070945][ T6833] BTRFS info (device loop0): setting nodatasum [ 132.081038][ T6833] BTRFS info (device loop0): force zlib compression, level 3 [ 132.088900][ T28] audit: type=1800 audit(1790711006.083:25): pid=6838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.358" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 132.134787][ T6833] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 132.150214][ T6833] BTRFS info (device loop0): use lzo compression, level 0 [ 132.158131][ T6833] BTRFS info (device loop0): turning on flush-on-commit [ 132.174956][ T6833] BTRFS info (device loop0): enabling auto defrag [ 132.187940][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.199916][ T6833] BTRFS info (device loop0): max_inline at 4096 [ 132.226952][ T6833] BTRFS info (device loop0): using free space tree [ 132.346545][ T6833] BTRFS info (device loop0): enabling ssd optimizations [ 132.841987][ T5774] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 132.918287][ T6880] loop3: detected capacity change from 0 to 8192 [ 132.955597][ T6880] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 133.035161][ T6880] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 133.096361][ T6880] REISERFS (device loop3): using ordered data mode [ 133.103070][ T6880] reiserfs: using flush barriers [ 133.151284][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.158795][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.191736][ T6880] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 133.230550][ T6880] REISERFS (device loop3): checking transaction log (loop3) [ 133.399708][ T6880] REISERFS (device loop3): Using r5 hash to sort names [ 133.408598][ T6892] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 133.430317][ T6880] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 133.583012][ T6880] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3633, free_space(entry_count) 2 [ 133.614982][ T5817] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 133.644088][ T6880] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 528. Fsck? [ 133.658099][ T6880] REISERFS (device loop3): Remounting filesystem read-only [ 133.681247][ T6894] loop2: detected capacity change from 0 to 2048 [ 133.720099][ T6894] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 133.757250][ T6894] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.821850][ T5817] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.855678][ T5817] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.868054][ T28] audit: type=1800 audit(1790711007.873:26): pid=6894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.375" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 133.891592][ T5817] usb 1-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 1.00 [ 133.944840][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 133.952933][ T5817] usb 1-1: Product: syz [ 133.953708][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 133.981774][ T28] audit: type=1800 audit(1790711007.913:27): pid=6894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.375" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 134.005198][ T5817] usb 1-1: Manufacturer: syz [ 134.454606][ T28] audit: type=1400 audit(1790711008.453:28): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=6909 comm="syz.1.382" [ 134.532674][ T5817] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:046D:C299.0001/input/input8 [ 134.691925][ T5817] logitech 0003:046D:C299.0001: input,hidraw0: USB HID v1.10 Joystick [syz syz] on usb-dummy_hcd.0-1/input0 [ 134.709562][ T5817] logitech 0003:046D:C299.0001: Force feedback support for Logitech Gaming Wheels [ 135.123633][ T8] smpboot: CPU 1 is now offline [ 135.234962][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 135.279296][ T5780] usb 1-1: USB disconnect, device number 5 [ 135.363184][ T6925] fido_id[6925]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 135.460149][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 135.481649][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 135.530686][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 135.579313][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.625260][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 135.658645][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 135.712084][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 135.745822][ T6935] capability: warning: `syz.3.393' uses deprecated v2 capabilities in a way that may be insecure [ 135.757559][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.777690][ T9] usb 3-1: config 0 descriptor?? [ 136.043599][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 136.242429][ T8] usb 3-1: USB disconnect, device number 4 [ 136.279001][ T8] usblp0: removed [ 136.634848][ T28] audit: type=1400 audit(1790711010.643:29): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=6942 comm="syz.1.395" name="foo" offset=35 [ 137.033067][ T6938] loop0: detected capacity change from 0 to 32768 [ 137.103285][ T6938] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.394 (6938) [ 137.211049][ T6938] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 137.279757][ T6938] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 137.289763][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 137.332951][ T6954] loop2: detected capacity change from 0 to 128 [ 137.343250][ T6938] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 137.408700][ T6938] BTRFS info (device loop0): use zstd compression, level 3 [ 137.466176][ T6938] BTRFS info (device loop0): using free space tree [ 137.536060][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.581364][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 137.655420][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.715774][ T9] usb 2-1: config 0 descriptor?? [ 137.757532][ T6938] BTRFS info (device loop0): enabling ssd optimizations [ 137.775565][ T6936] loop3: detected capacity change from 0 to 40427 [ 137.812599][ T6938] BTRFS info (device loop0): auto enabling async discard [ 137.856024][ T6936] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 137.999708][ T6936] F2FS-fs (loop3): invalid crc value [ 138.074213][ T6936] F2FS-fs (loop3): Found nat_bits in checkpoint [ 138.118789][ T28] audit: type=1800 audit(1790711012.123:30): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.394" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 138.297386][ T5774] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 138.372461][ T8] IPVS: starting estimator thread 0... [ 138.416308][ T9] ath6kl: Failed to read usb control message: -71 [ 138.461000][ T9] ath6kl: Unable to read the bmi data from the device: -71 [ 138.479274][ T6936] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 138.491179][ T9] ath6kl: unable to read target info byte count: -71 [ 138.545184][ T6978] IPVS: using max 26 ests per chain, 62400 per kthread [ 138.553776][ T9] ath6kl: Failed to init ath6kl core: -71 [ 138.591314][ T9] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 138.675554][ T9] usb 2-1: USB disconnect, device number 6 [ 139.696178][ T6999] loop1: detected capacity change from 0 to 512 [ 139.728442][ T6999] EXT4-fs: Ignoring removed orlov option [ 139.758616][ T6999] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.798864][ T6999] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.413: corrupted in-inode xattr: e_value size too large [ 139.814751][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 139.850734][ T6999] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.413: couldn't read orphan inode 15 (err -117) [ 139.880866][ T6999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.937343][ T28] audit: type=1800 audit(1790711013.943:31): pid=6999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.413" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 139.978796][ T6999] Invalid ELF header magic: != ELF [ 140.034521][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.061881][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.094373][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.105315][ T8] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 140.122267][ T7005] loop0: detected capacity change from 0 to 128 [ 140.142441][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.180904][ T7005] FAT-fs (loop0): Directory bread(block 1048) failed [ 140.211492][ T8] usb 3-1: config 0 descriptor?? [ 140.254850][ T7005] FAT-fs (loop0): Directory bread(block 1049) failed [ 140.295263][ T7005] FAT-fs (loop0): Directory bread(block 1050) failed [ 140.302178][ T7005] FAT-fs (loop0): Directory bread(block 1051) failed [ 140.341881][ T7005] FAT-fs (loop0): Directory bread(block 1052) failed [ 140.370974][ T7005] FAT-fs (loop0): Directory bread(block 1053) failed [ 140.401232][ T7005] FAT-fs (loop0): Directory bread(block 1054) failed [ 140.445956][ T7005] FAT-fs (loop0): Directory bread(block 1055) failed [ 140.521823][ T7005] FAT-fs (loop0): Directory bread(block 1048) failed [ 140.566832][ T7005] FAT-fs (loop0): Directory bread(block 1049) failed [ 140.682381][ T8] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 140.715581][ T8] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 140.775446][ T8] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 140.892712][ T8] arvo 0003:1E7D:30D4.0002: couldn't init struct arvo_device [ 140.944278][ T8] arvo 0003:1E7D:30D4.0002: couldn't install keyboard [ 140.983982][ T8] arvo: probe of 0003:1E7D:30D4.0002 failed with error -71 [ 141.057254][ T8] usb 3-1: USB disconnect, device number 5 [ 141.625292][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 141.845139][ T8] usb 1-1: config 0 has no interfaces? [ 141.867567][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 141.915434][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 141.942806][ T8] usb 1-1: Product: syz [ 141.970667][ T8] usb 1-1: Manufacturer: syz [ 142.000194][ T8] usb 1-1: config 0 descriptor?? [ 142.293314][ T9] usb 1-1: USB disconnect, device number 6 [ 143.349841][ T7076] loop2: detected capacity change from 0 to 512 [ 143.413532][ T7076] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.444: bg 0: block 5: invalid block bitmap [ 143.468694][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.445'. [ 143.501513][ T7076] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 143.552154][ T7076] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.444: invalid indirect mapped block 3 (level 2) [ 143.630280][ T7076] EXT4-fs (loop2): 1 orphan inode deleted [ 143.644865][ T7076] EXT4-fs (loop2): 1 truncate cleaned up [ 143.662557][ T7076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.824092][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.662219][ T7086] loop0: detected capacity change from 0 to 32768 [ 144.734965][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 144.935941][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 144.973491][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.024600][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 145.058666][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 145.102552][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 145.132846][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.164905][ T9] usb 3-1: Product: syz [ 145.179571][ T9] usb 3-1: Manufacturer: syz [ 145.184232][ T9] usb 3-1: SerialNumber: syz [ 145.328280][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'. [ 145.733185][ T7121] loop0: detected capacity change from 0 to 764 [ 145.857476][ T9] usb 3-1: clock source 0 is not valid, cannot use [ 145.918363][ T7123] loop1: detected capacity change from 0 to 512 [ 145.939790][ T7123] EXT4-fs: inline encryption not supported [ 146.007837][ T7123] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 146.059509][ T9] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 146.082497][ T7125] ip6gre1: entered promiscuous mode [ 146.095823][ T9] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 146.133675][ T7123] EXT4-fs (loop1): 1 truncate cleaned up [ 146.154498][ T7125] ip6gre1: entered allmulticast mode [ 146.173338][ T7123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.255755][ T9] usb 3-1: USB disconnect, device number 6 [ 146.313598][ T7123] EXT4-fs error (device loop1): __ext4_expand_extra_isize:5972: inode #12: comm syz.1.467: bad extra_isize 62 (inode size 256) [ 146.370124][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.460786][ T7123] EXT4-fs (loop1): Remounting filesystem read-only [ 146.510825][ T7123] EXT4-fs warning (device loop1): ext4_rename_delete:3780: inode #12: comm syz.1.467: Deleting old file: nlink 2, error=-5 [ 146.650358][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.777765][ T7134] loop3: detected capacity change from 0 to 2048 [ 146.894469][ T7134] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 146.981009][ T7134] UDF-fs: Scanning with blocksize 512 failed [ 147.069855][ T7134] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.131822][ T7142] loop2: detected capacity change from 0 to 40427 [ 148.170460][ T7142] F2FS-fs (loop2): Invalid log blocks per segment (1) [ 148.221680][ T7161] loop3: detected capacity change from 0 to 256 [ 148.236801][ T7142] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 148.280583][ T7142] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 148.306681][ T7161] exfat: Deprecated parameter 'utf8' [ 148.312120][ T7161] exfat: Deprecated parameter 'utf8' [ 148.343458][ T7142] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 148.415292][ T7142] F2FS-fs (loop2): Image doesn't support compression [ 148.465076][ T7142] F2FS-fs (loop2): invalid crc value [ 148.540489][ T7142] F2FS-fs (loop2): Found nat_bits in checkpoint [ 148.583263][ T7161] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 148.758546][ T7142] F2FS-fs (loop2): Start checkpoint disabled! [ 148.815512][ T7142] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 148.860519][ T7142] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 148.999076][ T7142] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_page+0x1d0/0x910 [ 149.073734][ T7172] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.485'. [ 149.404061][ T11] kworker/u4:0: attempt to access beyond end of device [ 149.404061][ T11] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 149.467280][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 149.506597][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 149.545065][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 149.820882][ T7181] binder: BINDER_SET_CONTEXT_MGR already set [ 149.842880][ T7181] binder: 7180:7181 ioctl 4018620d 200000004a80 returned -16 [ 150.062821][ T7183] loop0: detected capacity change from 0 to 1024 [ 150.108484][ T7183] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 150.194002][ T7183] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #11: comm syz.0.491: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 150.291559][ T7183] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.491: couldn't read orphan inode 11 (err -117) [ 150.319581][ T7189] loop2: detected capacity change from 0 to 256 [ 150.335333][ T7183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.369830][ T7189] exfat: Deprecated parameter 'utf8' [ 150.408124][ T7189] exfat: Deprecated parameter 'utf8' [ 150.465648][ T7189] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 150.498547][ T7183] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.491: lblock 2 mapped to illegal pblock 2 (length 1) [ 150.578635][ T7183] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 150.587598][ T5789] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 150.596469][ T5782] Bluetooth: hci4: command 0xfc11 tx timeout [ 150.668829][ T7183] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.491: lblock 0 mapped to illegal pblock 48 (length 1) [ 150.787441][ T7183] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 150.830953][ T7183] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.491: Failed to acquire dquot type 0 [ 151.041693][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.083388][ T7199] loop1: detected capacity change from 0 to 1024 [ 151.136286][ T5774] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 151.240915][ T5774] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 151.355846][ T5774] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 151.513652][ T3430] hfsplus: b-tree write err: -5, ino 3 [ 151.563046][ T5775] hfsplus: node 4:3 still has 1 user(s)! [ 154.062612][ T7252] loop2: detected capacity change from 0 to 2048 [ 154.172288][ T7254] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.945148][ T7265] loop1: detected capacity change from 0 to 2048 [ 155.050960][ T7265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.124553][ T7265] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.240282][ T7265] fs-verity: sha512 using implementation "sha512-avx2" [ 155.412319][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.521490][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.529'. [ 156.614811][ T5780] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 156.805108][ T5780] usb 1-1: Using ep0 maxpacket: 32 [ 156.836387][ T5780] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 156.858371][ T5780] usb 1-1: config 0 has no interface number 0 [ 156.887108][ T5780] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.926236][ T5780] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.957322][ T5780] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 156.991235][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.014930][ T6931] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 157.028669][ T5780] usb 1-1: config 0 descriptor?? [ 157.053795][ T7320] loop2: detected capacity change from 0 to 1024 [ 157.099500][ T7320] EXT4-fs: Ignoring removed orlov option [ 157.153737][ T7320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.245060][ T6931] usb 2-1: Using ep0 maxpacket: 32 [ 157.273875][ T6931] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 157.332954][ T6931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.374595][ T6931] usb 2-1: config 0 descriptor?? [ 157.423217][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.630959][ T6931] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 157.669347][ T6931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 157.729235][ T6931] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 157.771624][ T6931] usb 2-1: media controller created [ 157.778989][ T5780] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0094.0003/input/input9 [ 157.896959][ T6931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.941125][ T5780] uclogic 0003:28BD:0094.0003: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.0-1/input1 [ 158.066010][ T6931] az6027: usb out operation failed. (-71) [ 158.073697][ T5780] usb 1-1: USB disconnect, device number 7 [ 158.115040][ T6931] az6027: usb out operation failed. (-71) [ 158.120853][ T6931] stb0899_attach: Driver disabled by Kconfig [ 158.192163][ T6931] az6027: no front-end attached [ 158.192163][ T6931] [ 158.235291][ T6931] az6027: usb out operation failed. (-71) [ 158.263563][ T6931] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 158.323465][ T7334] fido_id[7334]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 158.345170][ T6931] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 158.447941][ T6931] dvb-usb: schedule remote query interval to 400 msecs. [ 158.498004][ T6931] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 158.578042][ T6931] usb 2-1: USB disconnect, device number 7 [ 158.823071][ T6931] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 159.105314][ T7349] loop2: detected capacity change from 0 to 64 [ 159.573625][ T7341] loop1: detected capacity change from 0 to 32768 [ 159.788287][ T7341] JBD2: Ignoring recovery information on journal [ 160.007143][ T7341] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 160.445251][ T28] audit: type=1800 audit(1790711034.453:32): pid=7341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.555" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 160.731457][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 161.053855][ T7372] netlink: 52 bytes leftover after parsing attributes in process `syz.2.567'. [ 161.115370][ T7372] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.123364][ T7372] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.546229][ T7384] loop1: detected capacity change from 0 to 64 [ 161.606126][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.570'. [ 162.069462][ T7398] »»»»»»: renamed from vlan0 (while UP) [ 162.152992][ T7401] Bluetooth: MGMT ver 1.22 [ 163.178940][ T7416] loop2: detected capacity change from 0 to 512 [ 163.218306][ T7416] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.237756][ T7403] loop1: detected capacity change from 0 to 32768 [ 163.303301][ T7416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.408889][ T7416] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.433300][ T7403] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 163.617207][ T7403] XFS (loop1): Ending clean mount [ 163.688130][ T7430] EXT4-fs error (device loop2): ext4_lookup:1860: inode #14: comm syz.2.586: iget: bad extended attribute block 65536 [ 163.816603][ T7432] loop3: detected capacity change from 0 to 256 [ 163.960904][ T5775] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 164.250758][ T5776] EXT4-fs error (device loop2): ext4_lookup:1860: inode #14: comm syz-executor: iget: bad extended attribute block 65536 [ 164.350073][ T5776] EXT4-fs error (device loop2): ext4_lookup:1860: inode #14: comm syz-executor: iget: bad extended attribute block 65536 [ 164.719915][ T7440] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 164.938717][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.231326][ T3430] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.520847][ T3430] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.571268][ T7438] loop1: detected capacity change from 0 to 32768 [ 165.646410][ T7438] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 165.674225][ T3430] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.703332][ T7438] JBD2: Ignoring recovery information on journal [ 165.849010][ T7438] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 166.021022][ T3430] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.130249][ T28] audit: type=1800 audit(1790711040.133:33): pid=7438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.588" name="file0" dev="loop1" ino=17058 res=0 errno=0 [ 166.416545][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 167.236387][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.253182][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.262841][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.271228][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.279639][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 167.289166][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.387056][ T5782] Bluetooth: hci3: command tx timeout [ 169.416781][ T7497] loop3: detected capacity change from 0 to 2048 [ 169.535411][ T7497] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.666353][ T7493] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 170.509054][ T7461] chnl_net:caif_netlink_parms(): no params data found [ 171.212808][ T3430] hsr_slave_0: left promiscuous mode [ 171.276322][ T3430] hsr_slave_1: left promiscuous mode [ 171.339088][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.372549][ T7526] loop1: detected capacity change from 0 to 4096 [ 171.385344][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.454913][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.463807][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.482530][ T5782] Bluetooth: hci3: command tx timeout [ 171.509260][ T7526] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 171.612639][ T3430] bridge_slave_1: left allmulticast mode [ 171.663423][ T3430] bridge_slave_1: left promiscuous mode [ 171.695587][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.770953][ T7526] ntfs3: loop1: ino=19, mi_enum_attr [ 171.817520][ T3430] bridge_slave_0: left allmulticast mode [ 171.839046][ T7526] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 171.881749][ T3430] bridge_slave_0: left promiscuous mode [ 171.923263][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.098929][ T7526] ntfs3: loop1: failed to convert "c46c" to macturkish [ 172.128447][ T3430] veth1_macvtap: left promiscuous mode [ 172.153938][ T7526] ntfs3: loop1: ino=20, mi_enum_attr [ 172.160687][ T3430] veth0_macvtap: left promiscuous mode [ 172.181756][ T3430] veth1_vlan: left promiscuous mode [ 172.217215][ T3430] veth0_vlan: left promiscuous mode [ 172.828944][ T5780] hid-generic 0005:4C4A:0007.0004: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 173.554823][ T5782] Bluetooth: hci3: command tx timeout [ 174.819617][ T7569] loop1: detected capacity change from 0 to 512 [ 174.860714][ T7569] EXT4-fs: inline encryption not supported [ 174.928805][ T7569] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 174.999700][ T7569] EXT4-fs (loop1): 1 truncate cleaned up [ 175.044358][ T7569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.129638][ T3430] team0 (unregistering): Port device team_slave_1 removed [ 175.148866][ T28] audit: type=1800 audit(1790711049.153:34): pid=7569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.635" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 175.230541][ T7569] EXT4-fs error (device loop1): __ext4_expand_extra_isize:5972: inode #15: comm syz.1.635: bad extra_isize 62 (inode size 256) [ 175.304547][ T7569] EXT4-fs (loop1): Remounting filesystem read-only [ 175.376212][ T3430] team0 (unregistering): Port device team_slave_0 removed [ 175.433525][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.608906][ T3430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.627067][ T5782] Bluetooth: hci3: command tx timeout [ 175.800280][ T7579] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input12 [ 175.811122][ T3430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.018863][ T3430] bond0 (unregistering): Released all slaves [ 177.232909][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.618'. [ 177.289370][ T7531] Zero length message leads to an empty skb [ 177.299501][ T7587] netlink: 'syz.0.649': attribute type 3 has an invalid length. [ 177.440522][ T7461] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.479813][ T7461] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.514042][ T7461] bridge_slave_0: entered allmulticast mode [ 177.550579][ T7461] bridge_slave_0: entered promiscuous mode [ 177.589504][ T7461] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.612554][ T7461] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.643278][ T7461] bridge_slave_1: entered allmulticast mode [ 177.664202][ T7461] bridge_slave_1: entered promiscuous mode [ 177.847781][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 177.896882][ T7461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.973336][ T7461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.091242][ T3430] IPVS: stop unused estimator thread 0... [ 178.102541][ T7461] team0: Port device team_slave_0 added [ 178.146490][ T7461] team0: Port device team_slave_1 added [ 178.239634][ T7461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.259336][ T7461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.323091][ T7461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.369410][ T7461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.385054][ T7461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.456126][ T7461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.625380][ T7461] hsr_slave_0: entered promiscuous mode [ 178.661907][ T7461] hsr_slave_1: entered promiscuous mode [ 179.026199][ T28] audit: type=1326 audit(1790711053.033:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.0.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 179.159393][ T28] audit: type=1326 audit(1790711053.053:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.0.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 179.310854][ T28] audit: type=1326 audit(1790711053.053:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.0.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 179.481238][ T28] audit: type=1326 audit(1790711053.063:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.0.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 179.570453][ T7461] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 179.619426][ T28] audit: type=1326 audit(1790711053.063:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.0.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 179.657656][ T7621] loop1: detected capacity change from 0 to 8192 [ 179.697032][ T7461] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 179.727156][ T7621] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 179.774288][ T7461] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.783834][ T28] audit: type=1326 audit(1790711053.063:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.0.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 179.822690][ T7621] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 179.843425][ T7461] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 179.881766][ T5782] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 179.888639][ T5789] Bluetooth: hci4: command 0x1003 tx timeout [ 179.906155][ T7621] REISERFS (device loop1): using ordered data mode [ 179.966495][ T7621] reiserfs: using flush barriers [ 179.999373][ T28] audit: type=1326 audit(1790711053.063:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.0.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 180.054888][ T7621] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 180.151360][ T7621] REISERFS (device loop1): checking transaction log (loop1) [ 180.194822][ T28] audit: type=1326 audit(1790711053.073:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.0.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 180.369139][ T28] audit: type=1326 audit(1790711053.073:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.0.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 180.427033][ T7461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.524073][ T7621] REISERFS (device loop1): Using tea hash to sort names [ 180.538827][ T7461] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.545884][ T28] audit: type=1326 audit(1790711053.073:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.0.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 180.600579][ T7621] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 180.678260][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.685495][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.705065][ T28] audit: type=1326 audit(1790711053.073:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.0.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 180.747374][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.754574][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.881064][ T28] audit: type=1326 audit(1790711053.073:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.0.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 181.011380][ T7461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.058938][ T28] audit: type=1326 audit(1790711053.073:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.0.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 181.229740][ T28] audit: type=1326 audit(1790711053.073:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.0.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 181.431904][ T28] audit: type=1326 audit(1790711053.073:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.0.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 181.616861][ T28] audit: type=1326 audit(1790711053.073:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.0.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 181.775740][ T28] audit: type=1326 audit(1790711053.073:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7617 comm="syz.0.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 181.980779][ T7652] netlink: 'syz.0.655': attribute type 2 has an invalid length. [ 182.034994][ T7652] netlink: 'syz.0.655': attribute type 1 has an invalid length. [ 182.061254][ T7461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.272289][ T7680] nvme nvme0: rdma_resolve_addr failed (-19). [ 183.389194][ T7461] veth0_vlan: entered promiscuous mode [ 183.480889][ T7461] veth1_vlan: entered promiscuous mode [ 183.639380][ T7461] veth0_macvtap: entered promiscuous mode [ 183.714246][ T7461] veth1_macvtap: entered promiscuous mode [ 183.794148][ T7461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.840911][ T7461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.885896][ T7461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.932829][ T7461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.955241][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 183.980175][ T7461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.017085][ T7461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.054333][ T7461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.140179][ T7461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.157815][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 184.197962][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 184.209649][ T7461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.241083][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.256385][ T7461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.313411][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 184.349530][ T7461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.373358][ T8] pvrusb2: ********** [ 184.395487][ T7461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.417221][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 184.447147][ T7461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.467054][ T8] pvrusb2: Important functionality might not be entirely working. [ 184.498797][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 184.512065][ T7461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.595124][ T8] pvrusb2: ********** [ 184.601324][ T7461] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.641207][ T2321] pvrusb2: Invalid write control endpoint [ 184.665318][ T7461] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.703217][ T7461] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.755204][ T7461] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.903645][ T9] usb 2-1: USB disconnect, device number 8 [ 184.961556][ T2321] pvrusb2: Invalid write control endpoint [ 185.021410][ T2321] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 185.095652][ T2321] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 185.147206][ T2321] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 185.173980][ T3430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.218247][ T2321] pvrusb2: Device being rendered inoperable [ 185.239058][ T3430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.265044][ T2321] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 185.318149][ T2321] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 185.393584][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.418612][ T2321] pvrusb2: Attached sub-driver cx25840 [ 185.424464][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 185.471855][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.534529][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 186.244770][ T6931] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 186.481721][ T7727] loop1: detected capacity change from 0 to 4096 [ 186.492353][ T6931] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.528899][ T6931] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.570474][ T7727] ntfs3: loop1: ino=3, mi_enum_attr [ 186.612245][ T6931] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.722363][ T6931] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 186.775457][ T6931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.799959][ T7706] loop3: detected capacity change from 0 to 32768 [ 186.847444][ T6931] usb 5-1: Product: syz [ 186.851690][ T6931] usb 5-1: Manufacturer: syz [ 186.897523][ T6931] usb 5-1: SerialNumber: syz [ 186.929601][ T7706] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.667 (7706) [ 187.195590][ T7706] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 187.334316][ T7706] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 187.481843][ T7706] BTRFS info (device loop3): setting nodatacow, compression disabled [ 187.635255][ T7706] BTRFS info (device loop3): setting datasum, datacow enabled [ 187.821732][ T7706] BTRFS info (device loop3): force clearing of disk cache [ 188.003913][ T7706] BTRFS info (device loop3): turning on sync discard [ 188.107133][ T6931] usb 5-1: USB disconnect, device number 2 [ 188.108327][ C0] usb 5-1: comm data receiver aborted. [ 188.147253][ T7706] BTRFS warning (device loop3): excessive commit interval 43283 [ 188.274795][ T7706] BTRFS info (device loop3): enabling ssd optimizations [ 188.434371][ T7706] BTRFS info (device loop3): using spread ssd allocation scheme [ 188.508500][ T7752] udevd[7752]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.588404][ T7706] BTRFS info (device loop3): not using ssd optimizations [ 188.692235][ T7706] BTRFS info (device loop3): not using spread ssd allocation scheme [ 188.714342][ T7755] loop1: detected capacity change from 0 to 2048 [ 188.800414][ T7758] hsr0: entered promiscuous mode [ 188.827645][ T7706] BTRFS info (device loop3): using free space tree [ 188.899192][ T7755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.969483][ T7706] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 188.995367][ T7706] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 189.114209][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 189.114223][ T28] audit: type=1800 audit(1790711063.113:53): pid=7755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.676" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 189.167969][ T7706] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 189.168414][ T7706] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 189.296845][ T7706] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 189.388637][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.455860][ T7706] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 189.482944][ T7706] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 189.611555][ T7706] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 189.759916][ T7706] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 189.770266][ T7784] loop7: detected capacity change from 0 to 7 [ 189.888244][ T7706] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 189.904474][ T7706] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 189.925676][ T7787] netlink: 32 bytes leftover after parsing attributes in process `syz.1.680'. [ 189.977348][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.986799][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.005599][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.014965][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.037765][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.047046][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.065586][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.074868][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.097824][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.107066][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.116296][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.125952][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.138967][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.148459][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.172337][ T7784] ldm_validate_partition_table(): Disk read failed. [ 190.180794][ T7706] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 190.181231][ T7706] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 190.225962][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.244835][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.273311][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.282592][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.303565][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.313006][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.322912][ T7784] Dev loop7: unable to read RDB block 0 [ 190.386005][ T7784] loop7: unable to read partition table [ 190.433576][ T7784] loop7: partition table beyond EOD, truncated [ 190.497506][ T7784] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 190.524534][ T7706] BTRFS error (device loop3): open_ctree failed: -12 [ 191.416410][ T7809] netlink: 56 bytes leftover after parsing attributes in process `syz.0.687'. [ 191.873869][ T7799] loop1: detected capacity change from 0 to 32768 [ 192.015131][ T7799] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 192.161107][ T7799] XFS (loop1): Ending clean mount [ 192.224478][ T7799] XFS (loop1): Quotacheck needed: Please wait. [ 192.465095][ T7799] XFS (loop1): Quotacheck: Done. [ 192.956951][ T5775] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 194.017301][ T7708] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.138393][ T7708] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 194.595914][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.602288][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.182064][ T7838] loop3: detected capacity change from 0 to 40427 [ 195.310869][ T7838] F2FS-fs (loop3): build fault injection attr: rate: 18446, type: 0x7ffff [ 195.447555][ T7838] F2FS-fs (loop3): invalid crc value [ 195.500644][ T7838] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 196.841348][ T7930] loop4: detected capacity change from 0 to 256 [ 196.868012][ T7930] exfat: Deprecated parameter 'namecase' [ 196.986596][ T7930] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 197.015220][ T7708] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 197.226954][ T7708] usb 2-1: Using ep0 maxpacket: 16 [ 197.256140][ T7708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.307036][ T7708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.363678][ T7708] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 197.415414][ T7708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.456178][ T7708] usb 2-1: config 0 descriptor?? [ 197.597364][ T7944] loop4: detected capacity change from 0 to 512 [ 197.644546][ T7944] FAT-fs (loop4): Unrecognized mount option "017777777777777777777770xffffffffffffffff" or missing value [ 197.898460][ T7708] apple 0003:05AC:024B.0006: fixing up MacBook JIS keyboard report descriptor [ 197.950205][ T7708] apple 0003:05AC:024B.0006: unknown global tag 0xe [ 197.978544][ T7949] tap0: tun_chr_ioctl cmd 1074025673 [ 197.984070][ T7708] apple 0003:05AC:024B.0006: item 0 1 1 14 parsing failed [ 198.032898][ T7708] apple 0003:05AC:024B.0006: parse failed [ 198.054807][ T7708] apple: probe of 0003:05AC:024B.0006 failed with error -22 [ 198.111653][ T7708] usb 2-1: USB disconnect, device number 9 [ 199.160449][ T7980] ip_tables: iptables: counters copy to user failed while replacing table [ 199.896223][ T7962] loop3: detected capacity change from 0 to 32768 [ 200.688244][ T7990] mmap: syz.4.750 (7990) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 200.824027][ T8002] loop1: detected capacity change from 0 to 8192 [ 200.950752][ T8002] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 201.301630][ T8012] loop4: detected capacity change from 0 to 128 [ 201.362316][ T8012] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.468171][ T8012] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.639168][ T8012] fscrypt (loop4, inode 12): Direct key flag not allowed with different contents and filenames modes [ 201.969890][ T7461] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.232676][ T8055] loop3: detected capacity change from 0 to 512 [ 203.851670][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.775'. [ 203.902526][ T8065] macvlan0: entered promiscuous mode [ 203.932389][ T8065] netlink: 'syz.4.775': attribute type 1 has an invalid length. [ 203.962065][ T8065] netlink: 'syz.4.775': attribute type 2 has an invalid length. [ 204.912071][ T8087] netlink: 32 bytes leftover after parsing attributes in process `syz.3.783'. [ 205.298005][ T8093] nfsd: exp_rootfh path not found ainx\ [ 205.398742][ T8076] loop4: detected capacity change from 0 to 32768 [ 205.559166][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 205.615164][ T8099] macvlan0: entered promiscuous mode [ 205.647015][ T8099] netlink: 'syz.1.789': attribute type 1 has an invalid length. [ 205.676105][ T8099] netlink: 'syz.1.789': attribute type 2 has an invalid length. [ 205.734414][ T8101] netlink: 'syz.0.798': attribute type 3 has an invalid length. [ 205.785486][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'. [ 206.556256][ T8127] netlink: 32 bytes leftover after parsing attributes in process `syz.4.796'. [ 206.585787][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.797'. [ 207.196502][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 207.424814][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 207.487479][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 207.585050][ T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 207.646927][ T9] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 207.718443][ T9] usb 1-1: Product: syz [ 207.722665][ T9] usb 1-1: Manufacturer: syz [ 207.796760][ T9] usb 1-1: SerialNumber: syz [ 207.835434][ T9] usb 1-1: config 0 descriptor?? [ 207.841751][ T8136] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 207.920971][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 207.958922][ T9] hub: probe of 1-1:0.0 failed with error -5 [ 208.336193][ T9] usb 1-1: USB disconnect, device number 8 [ 208.570685][ T8120] loop3: detected capacity change from 0 to 32768 [ 208.806926][ T8120] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 209.107259][ T8180] program syz.0.813 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.149741][ T8120] (syz.3.793,8120,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 209.643781][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 210.256721][ T8201] pimreg: tun_chr_ioctl cmd 1074025681 [ 210.570769][ T8211] loop1: detected capacity change from 0 to 764 [ 210.708196][ T8211] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 211.479542][ T8229] tipc: Started in network mode [ 211.551699][ T8229] tipc: Node identity ac14140f, cluster identity 4711 [ 211.650702][ T8229] tipc: New replicast peer: 255.255.255.255 [ 211.732391][ T8229] tipc: Enabled bearer , priority 10 [ 211.794930][ T8236] tipc: New replicast peer: fc02:0000:0000:0000:0000:0000:0000:0001 [ 212.025085][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 212.031277][ T5789] Bluetooth: hci0: command 0x0406 tx timeout [ 212.139761][ T8242] veth1_macvtap: left promiscuous mode [ 212.182948][ T8242] macsec0: entered allmulticast mode [ 212.241417][ T8243] veth1_macvtap: entered promiscuous mode [ 212.284860][ T8243] veth1_macvtap: entered allmulticast mode [ 212.343166][ T8243] macsec0: left allmulticast mode [ 212.374580][ T8243] veth1_macvtap: left allmulticast mode [ 212.826703][ T7708] tipc: Node number set to 2886997007 [ 213.534801][ T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 213.574160][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.845'. [ 213.750555][ T9] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 213.779394][ T9] usb 2-1: config 0 has no interface number 0 [ 213.831610][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 213.861650][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.917141][ T9] usb 2-1: Product: syz [ 213.921412][ T9] usb 2-1: Manufacturer: syz [ 213.965800][ T9] usb 2-1: SerialNumber: syz [ 214.003069][ T9] usb 2-1: config 0 descriptor?? [ 214.909879][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 214.964776][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 214.977889][ T28] audit: type=1326 audit(1790711088.983:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.0.858" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 215.041086][ T9] asix: probe of 2-1:0.251 failed with error -71 [ 215.122286][ T9] usb 2-1: USB disconnect, device number 10 [ 215.148308][ T28] audit: type=1326 audit(1790711089.013:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.0.858" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 215.327733][ T28] audit: type=1326 audit(1790711089.013:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.0.858" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 215.480802][ T28] audit: type=1326 audit(1790711089.023:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.0.858" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 215.641231][ T28] audit: type=1326 audit(1790711089.023:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.0.858" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 215.794862][ T28] audit: type=1326 audit(1790711089.023:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.0.858" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 215.954167][ T28] audit: type=1326 audit(1790711089.023:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.0.858" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 216.121300][ T28] audit: type=1326 audit(1790711089.023:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.0.858" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 216.314087][ T28] audit: type=1326 audit(1790711089.023:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.0.858" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 216.383183][ T8327] loop3: detected capacity change from 0 to 16 [ 216.483622][ T28] audit: type=1326 audit(1790711089.033:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.0.858" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fadca99e159 code=0x7ffc0000 [ 216.526118][ T8327] erofs: (device loop3): mounted with root inode @ nid 36. [ 216.841900][ T8332] vlan2: entered promiscuous mode [ 216.876573][ T8332] team0: entered promiscuous mode [ 216.903719][ T8332] team_slave_0: entered promiscuous mode [ 216.939055][ T8332] team_slave_1: entered promiscuous mode [ 218.481071][ T8364] netlink: 24 bytes leftover after parsing attributes in process `syz.1.867'. [ 219.080188][ T8348] loop4: detected capacity change from 0 to 32768 [ 219.226846][ T8348] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 219.420806][ T8348] XFS (loop4): Ending clean mount [ 219.830570][ T7461] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 219.849762][ T8392] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 219.920592][ T8392] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 220.675735][ T8] hid-generic 0005:07C0:05DF.0007: item fetching failed at offset 0/1 [ 220.729425][ T8] hid-generic: probe of 0005:07C0:05DF.0007 failed with error -22 [ 221.363147][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 221.363161][ T28] audit: type=1400 audit(1790711095.363:74): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=8426 comm="syz.0.885" [ 222.252935][ T8458] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 223.339983][ T8490] loop3: detected capacity change from 0 to 1764 [ 224.935165][ T8536] Falling back ldisc for ttyS3. [ 226.363469][ T8549] loop1: detected capacity change from 0 to 32768 [ 226.591864][ T8551] loop4: detected capacity change from 0 to 32768 [ 226.720980][ T8551] [ 226.720980][ T8551] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.720980][ T8551] [ 226.896675][ T8551] JFS: metapage_get_blocks failed [ 226.948509][ T8551] ERROR: (device loop4): release_metapage: metapage_write_one() failed [ 226.948509][ T8551] [ 227.032599][ T8551] ERROR: (device loop4): diWrite: ixpxd invalid [ 227.032599][ T8551] [ 227.100875][ T8551] ERROR: (device loop4): txCommit: [ 227.100875][ T8551] [ 227.231196][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.942'. [ 227.311124][ T7461] [ 227.311124][ T7461] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.311124][ T7461] [ 227.343192][ T7461] [ 227.343192][ T7461] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.343192][ T7461] [ 228.074812][ T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 228.306467][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.331987][ T8] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 228.374606][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.441006][ T8] as10x_usb: device has been detected [ 228.474605][ T8] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 228.559488][ T8] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 228.785824][ T8] as10x_usb: error during firmware upload part1 [ 228.816769][ T8] Registered device Abilis Systems DVB-Titan [ 229.074245][ T8603] program syz.0.958 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.099838][ T8604] loop4: detected capacity change from 0 to 2048 [ 229.237512][ T8605] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.360981][ T7708] usb 2-1: USB disconnect, device number 11 [ 229.468491][ T7708] Unregistered device Abilis Systems DVB-Titan [ 229.494264][ T7708] as10x_usb: device has been disconnected [ 229.624455][ T8609] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 229.836270][ T8588] loop3: detected capacity change from 0 to 32768 [ 229.965603][ T8588] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 230.182474][ T8588] XFS (loop3): Ending clean mount [ 230.491018][ T8627] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 230.538980][ T5773] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 231.856202][ T8650] netlink: 32 bytes leftover after parsing attributes in process `syz.3.968'. [ 231.922336][ T8650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.968'. [ 232.077923][ T8639] loop1: detected capacity change from 0 to 40427 [ 232.149040][ T8639] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 232.187575][ T8639] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 232.245050][ T8639] F2FS-fs (loop1): invalid crc value [ 232.259273][ T28] audit: type=1326 audit(1790711106.263:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8657 comm="syz.4.980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e439e159 code=0x7ffc0000 [ 232.424870][ T28] audit: type=1326 audit(1790711106.293:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8657 comm="syz.4.980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e439e159 code=0x7ffc0000 [ 232.579020][ T28] audit: type=1326 audit(1790711106.293:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8657 comm="syz.4.980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e439e159 code=0x7ffc0000 [ 232.706027][ T8639] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 232.733781][ T28] audit: type=1326 audit(1790711106.303:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8657 comm="syz.4.980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f45e439e159 code=0x7ffc0000 [ 232.777077][ T8639] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 232.867758][ T28] audit: type=1326 audit(1790711106.303:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8657 comm="syz.4.980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e439e159 code=0x7ffc0000 [ 232.983382][ T8639] syz.1.972: attempt to access beyond end of device [ 232.983382][ T8639] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 233.025891][ T28] audit: type=1326 audit(1790711106.313:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8657 comm="syz.4.980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e439e159 code=0x7ffc0000 [ 233.093909][ T8674] loop3: detected capacity change from 0 to 512 [ 233.158568][ T28] audit: type=1326 audit(1790711106.313:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8657 comm="syz.4.980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e439e159 code=0x7ffc0000 [ 233.289345][ T5775] syz-executor: attempt to access beyond end of device [ 233.289345][ T5775] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 233.353789][ T28] audit: type=1326 audit(1790711106.323:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8657 comm="syz.4.980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f45e439e159 code=0x7ffc0000 [ 233.380283][ T8674] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 233.417078][ T5775] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 233.456752][ T8674] FAT-fs (loop3): Filesystem has been set read-only [ 233.506259][ T28] audit: type=1326 audit(1790711106.323:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8657 comm="syz.4.980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e439e159 code=0x7ffc0000 [ 233.623354][ T28] audit: type=1326 audit(1790711106.323:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8657 comm="syz.4.980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e439e159 code=0x7ffc0000 [ 234.502206][ T8691] loop3: detected capacity change from 0 to 512 [ 234.574096][ T8691] EXT4-fs (loop3): bad s_want_extra_isize: 192 [ 234.776171][ T8696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.995'. [ 234.819918][ T8696] tipc: Started in network mode [ 234.838427][ T8696] tipc: Node identity 7, cluster identity 4711 [ 234.864291][ T8696] tipc: Node number set to 7 [ 235.059095][ T8702] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1000'. [ 235.117889][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1000'. [ 235.157608][ T8702] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1000'. [ 235.279843][ T8700] loop3: detected capacity change from 0 to 4096 [ 235.303690][ T8708] ipvlan0: entered promiscuous mode [ 235.326674][ T8708] ipvlan0: left promiscuous mode [ 235.339679][ T8700] EXT4-fs: inline encryption not supported [ 235.407354][ T8700] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 235.494842][ T8700] EXT4-fs (loop3): Test dummy encryption mode enabled [ 235.592418][ T8700] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 235.667478][ T8700] System zones: 0-5 [ 235.717660][ T8700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.933343][ T8727] loop4: detected capacity change from 0 to 512 [ 236.185599][ T7708] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 236.407548][ T7708] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.441702][ T7708] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.491366][ T7708] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 236.512412][ T7708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 236.554779][ T7708] usb 4-1: SerialNumber: syz [ 236.735044][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 236.800255][ T7708] usb 4-1: 0:2 : does not exist [ 236.882545][ T7708] usb 4-1: USB disconnect, device number 5 [ 236.956595][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 236.993444][ T7749] udevd[7749]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.009714][ T8749] kAFS: Invalid Command on /proc/fs/afs/cells file [ 237.025959][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.078445][ T8] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 237.141714][ T8] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 237.206901][ T8] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 237.260666][ T8] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 237.306142][ T8] usb 1-1: config 1 interface 1 has no altsetting 0 [ 237.340575][ T8] usb 1-1: string descriptor 0 read error: -22 [ 237.367359][ T8] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 237.413048][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.498838][ T8756] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 237.741561][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.988856][ T6931] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 238.051984][ T8762] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1024'. [ 238.198528][ T6931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.231399][ T6931] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 238.270124][ T6931] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 238.294526][ T8] usb 1-1: 2:0: failed to get current value for ch 1 (-71) [ 238.322757][ T6931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.386692][ T6931] usb 2-1: config 0 descriptor?? [ 238.431729][ T8] usb 1-1: USB disconnect, device number 9 [ 238.454544][ T6931] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 238.513607][ T6931] dvb-usb: bulk message failed: -22 (3/0) [ 238.561140][ T6931] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 238.623905][ T8760] dibusb: i2c wr: len=61 is too big! [ 238.623905][ T8760] [ 238.647630][ T6931] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 238.686061][ T6931] usb 2-1: media controller created [ 238.707087][ T6931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 238.763924][ T6931] dvb-usb: bulk message failed: -22 (6/0) [ 238.785292][ T6931] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 238.832885][ T6931] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 238.896390][ T6931] dvb-usb: schedule remote query interval to 150 msecs. [ 238.928633][ T6931] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 238.969446][ T6931] usb 2-1: USB disconnect, device number 12 [ 239.069226][ T6931] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 239.433074][ T8766] loop4: detected capacity change from 0 to 32768 [ 239.811282][ T8778] loop1: detected capacity change from 0 to 1764 [ 240.184952][ T7708] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 240.244917][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 240.395913][ T7708] usb 2-1: Using ep0 maxpacket: 32 [ 240.405943][ T7708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.430817][ T7708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.464148][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.490671][ T7708] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 240.508534][ T7708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.518734][ T8] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 240.537879][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 240.557628][ T7708] usb 2-1: config 0 descriptor?? [ 240.582383][ T7708] hub 2-1:0.0: USB hub found [ 240.592967][ T8] usb 5-1: Product: syz [ 240.610704][ T8] usb 5-1: Manufacturer: syz [ 240.657864][ T8] usb 5-1: selecting invalid altsetting 1 [ 240.697056][ T8] dvb_ttusb_budget: ttusb_init_controller: error [ 240.703496][ T8] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 240.730596][ T8787] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 240.748663][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 240.780226][ T7708] hub 2-1:0.0: 27 ports detected [ 240.812977][ T8788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 240.832802][ T7708] hub 2-1:0.0: insufficient power available to use all downstream ports [ 240.860440][ T8782] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 240.883515][ T8788] netlink: 'syz.0.1036': attribute type 6 has an invalid length. [ 240.908269][ T8782] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 240.971855][ T8] DVB: Unable to find symbol cx22700_attach() [ 240.989371][ T7708] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 241.017739][ T7708] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 241.072657][ T7708] usbhid 2-1:0.0: can't add hid device: -71 [ 241.097228][ T7708] usbhid: probe of 2-1:0.0 failed with error -71 [ 241.139099][ T8] DVB: Unable to find symbol tda10046_attach() [ 241.165534][ T7708] usb 2-1: USB disconnect, device number 13 [ 241.171710][ T8] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 241.244951][ T8] usb 5-1: USB disconnect, device number 3 [ 241.251927][ T8794] loop3: detected capacity change from 0 to 512 [ 241.379950][ T8794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.535150][ T8794] fs-verity (loop3, inode 13): Unsupported log_blocksize: 12 [ 241.782777][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.251404][ T8812] rnbd_client L127: Can't parse path h: -93 [ 242.569628][ T8822] input: syz1 as /devices/virtual/input/input14 [ 242.879881][ T8832] :syz3:E:00000000000000000257::*]:./dev/kmsg: [ 243.265139][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 243.391605][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 243.391617][ T28] audit: type=1400 audit(1790711117.393:111): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=8846 comm="syz.1.1064" name="foo" offset=35 [ 243.517577][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.559491][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.605602][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.664830][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 243.719350][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.778293][ T8] usb 4-1: config 0 descriptor?? [ 244.113756][ T8840] loop4: detected capacity change from 0 to 40427 [ 244.149340][ T8840] F2FS-fs (loop4): heap/no_heap options were deprecated [ 244.229224][ T8840] F2FS-fs (loop4): Found nat_bits in checkpoint [ 244.238470][ T8860] loop1: detected capacity change from 0 to 4096 [ 244.255795][ T8] wacom 0003:056A:0003.0008: unbalanced collection at end of report description [ 244.294901][ T7708] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 244.317261][ T8] wacom 0003:056A:0003.0008: parse failed [ 244.323351][ T8] wacom: probe of 0003:056A:0003.0008 failed with error -22 [ 244.383173][ T8860] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 244.437041][ T8860] ntfs3: loop1: Failed to load $MFT (-22). [ 244.473289][ T8] usb 4-1: USB disconnect, device number 6 [ 244.491470][ T8840] F2FS-fs (loop4): Start checkpoint disabled! [ 244.526674][ T7708] usb 1-1: Using ep0 maxpacket: 16 [ 244.618068][ T7708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.648938][ T8840] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 244.680157][ T7708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.752758][ T7708] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 244.800338][ T7708] usb 1-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 244.857270][ T8840] syz.4.1059: attempt to access beyond end of device [ 244.857270][ T8840] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 244.878925][ T7708] usb 1-1: Manufacturer: syz [ 244.909627][ T7708] usb 1-1: config 0 descriptor?? [ 245.198732][ T11] kworker/u4:0: attempt to access beyond end of device [ 245.198732][ T11] loop4: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 245.254528][ T11] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 245.280354][ T11] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 245.310349][ T11] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 245.329404][ T11] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 245.348547][ T11] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 245.568418][ T7708] letsketch 0003:6161:4D15.0009: Device info: а [ 245.798997][ T7708] usb 1-1: Max retries (5) exceeded reading string descriptor 201 [ 245.824381][ T7708] letsketch: probe of 0003:6161:4D15.0009 failed with error -71 [ 245.871886][ T7708] usb 1-1: USB disconnect, device number 10 [ 246.246734][ T28] audit: type=1326 audit(1790711120.253:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.1.1075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03bad9e159 code=0x7ffc0000 [ 246.271046][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.355726][ T28] audit: type=1326 audit(1790711120.293:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.1.1075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03bad9e159 code=0x7ffc0000 [ 246.492754][ T28] audit: type=1326 audit(1790711120.293:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.1.1075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03bad9e159 code=0x7ffc0000 [ 246.518067][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.623113][ T28] audit: type=1326 audit(1790711120.293:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.1.1075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f03bad9e159 code=0x7ffc0000 [ 246.710394][ T8890] loop3: detected capacity change from 0 to 512 [ 246.780861][ T28] audit: type=1326 audit(1790711120.293:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.1.1075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03bad9e159 code=0x7ffc0000 [ 246.937086][ T8890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.963143][ T28] audit: type=1326 audit(1790711120.293:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.1.1075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03bad9e159 code=0x7ffc0000 [ 246.987279][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.107064][ T8890] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.158959][ T28] audit: type=1326 audit(1790711120.293:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.1.1075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03bad9e159 code=0x7ffc0000 [ 247.183010][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.323197][ T28] audit: type=1326 audit(1790711120.293:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.1.1075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03bad9e159 code=0x7ffc0000 [ 247.347592][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.465020][ T28] audit: type=1326 audit(1790711120.293:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.1.1075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03bad9e159 code=0x7ffc0000 [ 247.608233][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.878086][ T8915] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.789297][ T8930] input: syz0 as /devices/virtual/input/input15 [ 249.474402][ T8943] loop3: detected capacity change from 0 to 512 [ 249.524489][ T8943] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 249.621994][ T8943] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 249.683468][ T8943] System zones: 1-12 [ 249.702937][ T8933] loop1: detected capacity change from 0 to 32768 [ 249.728745][ T8943] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.1102: bad orphan inode 131072 [ 249.812312][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 249.812325][ T28] audit: type=1800 audit(1790711123.813:140): pid=8933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1097" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 249.873056][ T8943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.347310][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.892705][ T8956] kAFS: bad VL server IP address [ 251.220843][ T8966] #! [ 251.304075][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1113'. [ 251.489457][ T8976] program syz.4.1118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.061606][ T8992] ip_tables: iptables: counters copy to user failed while replacing table [ 252.133151][ T8993] C: renamed from lo (while UP) [ 252.171796][ T8993] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 252.439228][ T8999] loop1: detected capacity change from 0 to 512 [ 252.471903][ T8999] EXT4-fs: Ignoring removed oldalloc option [ 252.515979][ T8999] EXT4-fs: Ignoring removed mblk_io_submit option [ 252.580697][ T8999] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 252.641998][ T8999] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1127: invalid indirect mapped block 4294967295 (level 1) [ 252.723965][ T8999] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1127: invalid indirect mapped block 4294967295 (level 1) [ 252.802685][ T8999] EXT4-fs (loop1): 2 truncates cleaned up [ 252.810475][ T8988] loop4: detected capacity change from 0 to 32768 [ 252.829583][ T8999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.960342][ T8988] jfs_create: dtInsert returned -EIO [ 252.997145][ T8988] ERROR: (device loop4): jfs_create: [ 252.997145][ T8988] [ 253.058043][ T8988] ERROR: (device loop4): remounting filesystem as read-only [ 253.284066][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.467040][ T5792] Bluetooth: hci3: command tx timeout [ 253.579743][ T28] audit: type=1400 audit(1790711127.583:141): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=9013 comm="syz.1.1134" name="unknown" offset=82 [ 253.842408][ T9016] loop1: detected capacity change from 0 to 2048 [ 253.971316][ T9016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.057244][ T9016] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.189401][ T9021] syzkaller1: tun_chr_ioctl cmd 2147767517 [ 254.292669][ T9023] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1135: bg 0: block 345: padding at end of block bitmap is not set [ 254.338682][ T9023] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 109 with error 117 [ 254.407468][ T9023] EXT4-fs (loop1): This should not happen!! Data will be lost [ 254.407468][ T9023] [ 254.538490][ T3430] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 254.554368][ T7708] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 254.580789][ T3430] EXT4-fs (loop1): This should not happen!! Data will be lost [ 254.580789][ T3430] [ 254.602627][ T3430] EXT4-fs (loop1): Total free blocks count 0 [ 254.613840][ T3430] EXT4-fs (loop1): Free/Dirty block details [ 254.629448][ T3430] EXT4-fs (loop1): free_blocks=0 [ 254.643206][ T3430] EXT4-fs (loop1): dirty_blocks=32 [ 254.652360][ T3430] EXT4-fs (loop1): Block reservation details [ 254.776092][ T7708] usb 5-1: Using ep0 maxpacket: 8 [ 254.792655][ T7708] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 254.817106][ T7708] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 254.840810][ T9033] netlink: 'syz.1.1140': attribute type 5 has an invalid length. [ 254.852802][ T7708] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 254.898956][ T7708] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.946849][ T7708] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 254.959384][ T9035] loop3: detected capacity change from 0 to 1024 [ 254.995069][ T7708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.043543][ T9035] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 255.128869][ T9035] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 255.199869][ T9035] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1141: Failed to acquire dquot type 0 [ 255.250217][ T7708] usb 5-1: GET_CAPABILITIES returned 0 [ 255.268603][ T7708] usbtmc 5-1:16.0: can't read capabilities [ 255.279966][ T9035] EXT4-fs error (device loop3): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 255.382945][ T9035] EXT4-fs (loop3): 1 truncate cleaned up [ 255.433711][ T9035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.502213][ T6931] usb 5-1: USB disconnect, device number 4 [ 255.639635][ T9035] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 255.689771][ T9035] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 255.741946][ T9035] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1141: Failed to acquire dquot type 0 [ 255.855032][ T9053] loop1: detected capacity change from 0 to 2048 [ 255.897952][ T9053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.962030][ T9053] ext4 filesystem being mounted at /344/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 256.013647][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.068650][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.075565][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.374059][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.580832][ T9070] loop3: detected capacity change from 0 to 1024 [ 256.726564][ T9070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.973179][ T9081] loop4: detected capacity change from 0 to 512 [ 257.033592][ T9081] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 257.104396][ T9081] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.1160: bad orphan inode 131083 [ 257.164324][ T9081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.208858][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.490811][ T7461] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.683118][ T7708] IPVS: starting estimator thread 0... [ 257.856122][ T9099] IPVS: using max 26 ests per chain, 62400 per kthread [ 258.078366][ T9105] binder: 9104:9105 ioctl c0306201 200000000080 returned -14 [ 258.105575][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 258.452583][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'. [ 259.005233][ T9136] program syz.0.1183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.060976][ T9167] loop4: detected capacity change from 0 to 128 [ 260.139069][ T9167] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 260.195435][ T9167] hpfs: filesystem error: improperly stopped [ 260.229921][ T9167] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 260.253990][ T9167] hpfs: You really don't want any checks? You are crazy... [ 260.281961][ T9167] hpfs: Code page index out of array [ 260.297831][ T9167] hpfs: code page support is disabled [ 260.320188][ T9167] hpfs: hpfs_map_4sectors(): unaligned read [ 260.349320][ T9167] hpfs: hpfs_map_4sectors(): unaligned read [ 260.384833][ T9167] hpfs: filesystem error: unable to find root dir [ 260.493097][ T28] audit: type=1400 audit(1790711134.493:142): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="foo" pid=9173 comm="syz.1.1201" name="foo" offset=71 [ 260.744975][ T9180] program syz.1.1203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.194932][ T6931] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 261.250531][ T9189] loop3: detected capacity change from 0 to 512 [ 261.349194][ T9189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.396859][ T6931] usb 2-1: not running at top speed; connect to a high speed hub [ 261.410338][ T6931] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.443740][ T6931] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 261.478424][ T6931] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 261.520481][ T6931] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 261.561549][ T6931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.599997][ T6931] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 261.649518][ T6931] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 261.683938][ T6931] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 261.704242][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.740281][ T6931] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 261.794101][ T6931] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 261.860229][ T6931] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 261.921521][ T6931] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 262.405869][ T7708] usb 2-1: USB disconnect, device number 14 [ 262.465822][ T7708] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 262.538796][ T7708] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 262.591368][ T7708] keyspan 2-1:1.0: device disconnected [ 262.810927][ T9194] loop4: detected capacity change from 0 to 32768 [ 262.887195][ T9194] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 263.034832][ T9194] XFS (loop4): Ending clean mount [ 263.080035][ T9194] XFS (loop4): Quotacheck needed: Please wait. [ 263.233881][ T9194] XFS (loop4): Quotacheck: Done. [ 263.646377][ T7461] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 264.117883][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1224'. [ 264.506211][ T9247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1227'. [ 264.530495][ T9246] WARNING! power/level is deprecated; use power/control instead [ 264.874773][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 264.984927][ T7708] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 265.067071][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 265.091553][ T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 265.116177][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 265.139391][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.171285][ T9252] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 265.184850][ T7708] usb 5-1: Using ep0 maxpacket: 32 [ 265.201585][ T7708] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 265.228762][ T7708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.251616][ T8] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 265.272329][ T7708] usb 5-1: config 0 descriptor?? [ 265.526164][ T7708] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 265.568832][ T7708] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 265.636458][ T7708] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 265.663944][ T7708] usb 5-1: media controller created [ 265.756955][ T7708] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.820717][ T6931] usb 4-1: USB disconnect, device number 7 [ 265.862823][ T7708] az6027: usb out operation failed. (-71) [ 265.909377][ T7708] az6027: usb out operation failed. (-71) [ 265.949190][ T7708] stb0899_attach: Driver disabled by Kconfig [ 265.991508][ T7708] az6027: no front-end attached [ 265.991508][ T7708] [ 266.029704][ T7708] az6027: usb out operation failed. (-71) [ 266.058231][ T7708] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 266.097945][ T7708] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 266.154596][ T7708] dvb-usb: schedule remote query interval to 400 msecs. [ 266.194208][ T7708] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 266.273951][ T7708] usb 5-1: USB disconnect, device number 5 [ 266.467513][ T7708] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 267.023925][ T9287] i2c i2c-0: new_device: Extra parameters [ 267.272965][ T9291] loop4: detected capacity change from 0 to 512 [ 267.390366][ T9291] EXT4-fs (loop4): 1 truncate cleaned up [ 267.415705][ T9291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.679410][ T7461] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.064326][ T9306] program syz.4.1253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.919971][ T9327] loop3: detected capacity change from 0 to 8 [ 268.926666][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 269.079441][ T9327] squashfs image failed sanity check [ 269.141906][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 269.171694][ T9] usb 2-1: config 0 has no interface number 0 [ 269.203672][ T9] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 269.236338][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.260303][ T9] usb 2-1: Product: syz [ 269.276314][ T9] usb 2-1: Manufacturer: syz [ 269.294691][ T9] usb 2-1: SerialNumber: syz [ 269.317807][ T9] usb 2-1: config 0 descriptor?? [ 269.578735][ T9] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 269.643472][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 269.685804][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 269.729671][ T9] usb 2-1: media controller created [ 269.812971][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.937920][ T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 270.081067][ T9] usb 2-1: USB disconnect, device number 15 [ 270.361310][ T9349] loop4: detected capacity change from 0 to 512 [ 270.914970][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 271.143036][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 271.169615][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 271.203159][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 271.243343][ T9] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 271.269550][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.318494][ T9] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected [ 271.371500][ T9] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 272.160341][ T8] usb 1-1: USB disconnect, device number 11 [ 272.214269][ T8] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 272.283104][ T8] kobil_sct 1-1:1.0: device disconnected [ 272.836065][ T9396] loop1: detected capacity change from 0 to 128 [ 272.950231][ T28] audit: type=1800 audit(1790711146.953:143): pid=9396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1291" name="file1" dev="loop1" ino=1048661 res=0 errno=0 [ 272.982619][ T9396] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 273.042146][ T9396] FAT-fs (loop1): Filesystem has been set read-only [ 273.374102][ T9407] ipvlan2: entered promiscuous mode [ 273.398762][ T9407] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 273.485010][ T9407] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 273.533818][ T9407] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 274.008398][ T9424] loop3: detected capacity change from 0 to 16 [ 274.087625][ T9424] erofs: (device loop3): mounted with root inode @ nid 36. [ 274.143036][ T9430] loop4: detected capacity change from 0 to 2048 [ 274.244479][ T9431] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 274.286266][ T7708] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 274.504807][ T7708] usb 2-1: Using ep0 maxpacket: 32 [ 274.531918][ T7708] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 274.557571][ T28] audit: type=1800 audit(1790711148.563:144): pid=9430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1308" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 274.607420][ T7708] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 274.649470][ T7708] usb 2-1: config 0 interface 0 has no altsetting 0 [ 274.677146][ T7708] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 274.726663][ T7708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.762704][ T7708] usb 2-1: config 0 descriptor?? [ 275.048873][ T9437] netlink: 'syz.4.1310': attribute type 8 has an invalid length. [ 275.232229][ T7708] corsair-psu 0003:1B1C:1C09.000A: unknown main item tag 0x0 [ 275.282526][ T7708] corsair-psu 0003:1B1C:1C09.000A: unknown main item tag 0x0 [ 275.294985][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1313'. [ 275.315714][ T7708] corsair-psu 0003:1B1C:1C09.000A: unknown main item tag 0x0 [ 275.339669][ T7708] corsair-psu 0003:1B1C:1C09.000A: unknown main item tag 0x0 [ 275.374826][ T7708] corsair-psu 0003:1B1C:1C09.000A: unknown main item tag 0x0 [ 275.413198][ T7708] corsair-psu 0003:1B1C:1C09.000A: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 275.574462][ T7708] corsair-psu 0003:1B1C:1C09.000A: unable to initialize device (-90) [ 275.617586][ T7708] corsair-psu: probe of 0003:1B1C:1C09.000A failed with error -90 [ 275.689433][ T7708] usb 2-1: USB disconnect, device number 16 [ 276.999141][ T9462] loop4: detected capacity change from 0 to 32768 [ 277.062601][ T9462] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 277.267323][ T9462] XFS (loop4): Ending clean mount [ 277.321085][ T9462] XFS (loop4): Quotacheck needed: Please wait. [ 277.504033][ T9462] XFS (loop4): Quotacheck: Done. [ 277.748592][ T7461] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 278.869774][ T9517] bonding: no command found in bonding_masters - use +ifname or -ifname [ 279.384895][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 279.595139][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 279.608794][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 279.627036][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 279.659492][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 279.692556][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 279.730924][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.773408][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 279.809141][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.058425][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 280.077622][ T9] usbtmc 5-1:16.0: can't read capabilities [ 280.197940][ T9547] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input17 [ 280.327851][ T9] usb 5-1: USB disconnect, device number 6 [ 281.061772][ T9560] loop4: detected capacity change from 0 to 512 [ 281.108445][ T9560] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 281.171820][ T9563] loop1: detected capacity change from 0 to 128 [ 281.245763][ T9563] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 281.264980][ T7708] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 281.335862][ T9563] ext4 filesystem being mounted at /404/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 281.494816][ T7708] usb 1-1: Using ep0 maxpacket: 32 [ 281.522196][ T7708] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 281.574102][ T7708] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 281.616166][ T7708] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 281.661813][ T7708] usb 1-1: Product: syz [ 281.683560][ T7708] usb 1-1: Manufacturer: syz [ 281.710818][ T7708] usb 1-1: SerialNumber: syz [ 281.749628][ T7708] usb 1-1: config 0 descriptor?? [ 281.767428][ T9558] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 281.825859][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 281.836650][ T7708] hub 1-1:0.0: bad descriptor, ignoring hub [ 281.842613][ T7708] hub: probe of 1-1:0.0 failed with error -5 [ 282.265677][ T8] usb 1-1: USB disconnect, device number 12 [ 283.463812][ T9570] loop3: detected capacity change from 0 to 32768 [ 283.593251][ T9570] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 283.680447][ T9590] loop4: detected capacity change from 0 to 32768 [ 283.781132][ T9616] loop1: detected capacity change from 0 to 512 [ 283.808938][ T9570] XFS (loop3): Ending clean mount [ 283.861101][ T9616] FAT-fs (loop1): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 283.994159][ T7708] hid (null): global environment stack underflow [ 284.048417][ T7708] hid (null): global environment stack underflow [ 284.061273][ T28] audit: type=1800 audit(1790711158.063:145): pid=9570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1363" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 284.123411][ T7708] hid-generic 0000:0000:0000.000B: global environment stack underflow [ 284.181430][ T7708] hid-generic 0000:0000:0000.000B: item 0 2 1 11 parsing failed [ 284.239123][ T7708] hid-generic: probe of 0000:0000:0000.000B failed with error -22 [ 284.376571][ T5773] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 284.708715][ T9626] nbd: socks must be embedded in a SOCK_ITEM attr [ 286.422148][ T9659] loop3: detected capacity change from 0 to 2048 [ 286.612861][ T9659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.722502][ T9669] loop1: detected capacity change from 0 to 512 [ 287.037664][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.318596][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1406'. [ 287.347547][ T9680] netlink: 'syz.4.1406': attribute type 1 has an invalid length. [ 287.382538][ T9680] netlink: 'syz.4.1406': attribute type 2 has an invalid length. [ 287.714768][ T7708] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 287.722828][ T28] audit: type=1326 audit(1790711161.723:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.1.1410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03bad9e159 code=0x0 [ 287.853241][ T9697] loop4: detected capacity change from 0 to 128 [ 287.945094][ T7708] usb 4-1: Using ep0 maxpacket: 16 [ 287.957490][ T7708] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.007638][ T7708] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.065504][ T7708] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 288.120934][ T7708] usb 4-1: config 0 interface 0 has no altsetting 0 [ 288.138112][ T7708] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 288.169395][ T7708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.198145][ T7708] usb 4-1: config 0 descriptor?? [ 288.375108][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 288.566522][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 288.606029][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 288.648944][ T7708] hid (null): report_id 49134 is invalid [ 288.678662][ T9] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 288.692502][ T7708] hid (null): unknown global tag 0xd [ 288.707954][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.722209][ T7708] hid (null): unknown global tag 0xc [ 288.751716][ T9] usb 5-1: Product: syz [ 288.757121][ T7708] hid (null): unknown global tag 0xc [ 288.772836][ T9] usb 5-1: Manufacturer: syz [ 288.783010][ T7708] hid (null): global environment stack overflow [ 288.799705][ T9] usb 5-1: SerialNumber: syz [ 288.852832][ T9] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 288.878014][ T7708] usb 4-1: USB disconnect, device number 8 [ 288.922335][ T9] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 288.922335][ T9] Please send a copy of this message to and [ 288.995964][ T9717] zero sized request [ 289.502633][ T9729] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1427'. [ 289.514916][ T9] ums-sddr09: probe of 5-1:1.0 failed with error -5 [ 289.729788][ T9] usb 5-1: USB disconnect, device number 7 [ 290.185138][ T7708] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 290.398257][ T7708] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 290.436714][ T7708] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 290.485194][ T7708] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 290.536272][ T7708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.568541][ T7708] usb 1-1: Product: syz [ 290.583667][ T9747] loop1: detected capacity change from 0 to 1024 [ 290.593112][ T7708] usb 1-1: Manufacturer: syz [ 290.604724][ T7708] usb 1-1: SerialNumber: syz [ 290.624027][ T9747] EXT4-fs: Ignoring removed bh option [ 290.648401][ T7708] usb 1-1: config 0 descriptor?? [ 290.689128][ T7708] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 290.701969][ T9747] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 290.799758][ T9747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.116604][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.512860][ T7708] gspca_sunplus: reg_r err -71 [ 291.540431][ T7708] sunplus: probe of 1-1:0.0 failed with error -71 [ 291.586921][ T7708] usb 1-1: USB disconnect, device number 13 [ 291.642884][ T9767] loop4: detected capacity change from 0 to 16 [ 291.696933][ T9767] erofs: (device loop4): mounted with root inode @ nid 36. [ 292.283552][ T9775] loop3: detected capacity change from 0 to 256 [ 292.321783][ T9779] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1447'. [ 292.352867][ T9775] exfat: Bad value for 'uid' [ 292.450365][ T9781] program syz.4.1449 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.846755][ T9789] program syz.3.1453 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.650720][ T9787] loop4: detected capacity change from 0 to 32768 [ 293.716339][ T9802] netlink: 'syz.1.1459': attribute type 15 has an invalid length. [ 293.784852][ T9787] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 293.924903][ T9787] XFS (loop4): Ending clean mount [ 294.014554][ T9787] XFS (loop4): User initiated shutdown received. [ 294.045220][ T9787] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 294.129036][ T9787] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 294.284103][ T7461] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 295.060200][ T6931] kernel write not supported for file /sg0 (pid: 6931 comm: kworker/0:6) [ 296.102823][ T9869] program syz.0.1484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.765429][ T9883] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1491'. [ 296.989311][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 297.068681][ T6931] Process accounting resumed [ 317.480905][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.914494][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 406.599234][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 440.352458][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.587162][ T29] INFO: task jbd2/sda1-8:5101 blocked for more than 143 seconds. [ 450.598322][ T29] Not tainted syzkaller #0 [ 450.603295][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 450.612073][ T29] task:jbd2/sda1-8 state:D stack:25736 pid:5101 ppid:2 flags:0x00004000 [ 450.634863][ T29] Call Trace: [ 450.638366][ T29] [ 450.641550][ T29] __schedule+0x15ae/0x4660 [ 450.651533][ T29] ? asan.module_dtor+0x20/0x20 [ 450.656820][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 450.663491][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 450.682727][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 450.689546][ T29] schedule+0xbd/0x170 [ 450.693779][ T29] io_schedule+0x80/0xd0 [ 450.700828][ T29] bit_wait_io+0x11/0xd0 [ 450.706235][ T29] __wait_on_bit+0x9f/0x2c0 [ 450.710871][ T29] ? bit_wait+0xd0/0xd0 [ 450.718056][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 450.723659][ T29] ? bit_wait+0xd0/0xd0 [ 450.728432][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 450.733228][ T29] ? do_raw_write_lock+0x11e/0x260 [ 450.741558][ T29] ? bit_waitqueue+0x30/0x30 [ 450.747908][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 450.752990][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 450.765257][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 450.772205][ T29] ? lock_chain_count+0x20/0x20 [ 450.783687][ T29] ? _raw_spin_unlock+0x40/0x40 [ 450.789772][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 450.798718][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 450.804075][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 450.809871][ T29] ? timer_delete_sync+0x20/0x20 [ 450.817988][ T29] ? do_raw_read_unlock+0x80/0x80 [ 450.823059][ T29] ? prepare_to_wait+0x1aa/0x200 [ 450.829103][ T29] kjournald2+0x40f/0x810 [ 450.833553][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 450.842181][ T29] ? wake_bit_function+0x200/0x200 [ 450.847696][ T29] ? _raw_spin_unlock+0x40/0x40 [ 450.852686][ T29] ? __kthread_parkme+0x71/0x1c0 [ 450.861350][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 450.868346][ T29] kthread+0x2fa/0x390 [ 450.872465][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 450.880951][ T29] ? kthread_blkcg+0xd0/0xd0 [ 450.888806][ T29] ret_from_fork+0x48/0x80 [ 450.893416][ T29] ? kthread_blkcg+0xd0/0xd0 [ 450.902565][ T29] ret_from_fork_asm+0x11/0x20 [ 450.909890][ T29] [ 450.913070][ T29] INFO: task syz-executor:5762 blocked for more than 143 seconds. [ 450.922939][ T29] Not tainted syzkaller #0 [ 450.930523][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 450.940358][ T29] task:syz-executor state:D stack:22856 pid:5762 ppid:5761 flags:0x00004002 [ 450.952147][ T29] Call Trace: [ 450.956677][ T29] [ 450.959746][ T29] __schedule+0x15ae/0x4660 [ 450.964329][ T29] ? mark_lock+0x94/0x320 [ 450.972999][ T29] ? asan.module_dtor+0x20/0x20 [ 450.979044][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 450.984114][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 450.992571][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 451.001686][ T29] schedule+0xbd/0x170 [ 451.009878][ T29] io_schedule+0x80/0xd0 [ 451.014209][ T29] bit_wait_io+0x11/0xd0 [ 451.019659][ T29] __wait_on_bit+0x9f/0x2c0 [ 451.024228][ T29] ? bit_wait+0xd0/0xd0 [ 451.030886][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 451.037714][ T29] ? bit_wait+0xd0/0xd0 [ 451.041906][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 451.049232][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 451.054304][ T29] ? bit_waitqueue+0x30/0x30 [ 451.059984][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 451.067778][ T29] do_get_write_access+0x5c9/0xe00 [ 451.075728][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 451.082289][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 451.091268][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 451.097884][ T29] ? __might_sleep+0xe0/0xe0 [ 451.102707][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 451.116427][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 451.122025][ T29] ext4_dirty_inode+0xcb/0x110 [ 451.129413][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 451.136253][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 451.141390][ T29] file_update_time+0x187/0x1a0 [ 451.149119][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 451.154329][ T29] ? do_wp_page+0x4ce/0x34d0 [ 451.160166][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 451.168949][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 451.176588][ T29] do_page_mkwrite+0x153/0x3f0 [ 451.181398][ T29] do_wp_page+0xd4d/0x34d0 [ 451.188530][ T29] ? folio_put+0xd0/0xd0 [ 451.192818][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 451.198420][ T29] ? __rwlock_init+0x150/0x150 [ 451.203250][ T29] handle_mm_fault+0x1306/0x4a50 [ 451.211515][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 451.220385][ T29] ? numa_migrate_prep+0x350/0x350 [ 451.229446][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 451.235056][ T29] do_user_addr_fault+0x736/0x12d0 [ 451.240223][ T29] exc_page_fault+0x64/0x100 [ 451.248236][ T29] ? clear_bhb_loop+0x40/0x90 [ 451.253064][ T29] asm_exc_page_fault+0x26/0x30 [ 451.258448][ T29] RIP: 0033:0x7f0905a7c6e2 [ 451.263150][ T29] RSP: 002b:00007fff413bef70 EFLAGS: 00010202 [ 451.272889][ T29] RAX: 00007f09038d4000 RBX: 000055556e28b810 RCX: 0000000000000003 [ 451.282904][ T29] RDX: 0000000000000aac RSI: 000055556e27fea8 RDI: 0000000000000008 [ 451.294087][ T29] RBP: 00007fff413bf470 R08: 000055556e27ff48 R09: 0000000000000092 [ 451.302566][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff413bf2b0 [ 451.313662][ T29] R13: 00007fff413bf0a0 R14: 585858582e7a7973 R15: 00007fff413beff0 [ 451.322094][ T29] [ 451.325620][ T29] INFO: task syz.0.1498:9898 blocked for more than 144 seconds. [ 451.333522][ T29] Not tainted syzkaller #0 [ 451.346045][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 451.356631][ T29] task:syz.0.1498 state:D stack:27048 pid:9898 ppid:5774 flags:0x00004004 [ 451.367621][ T29] Call Trace: [ 451.370970][ T29] [ 451.373940][ T29] __schedule+0x15ae/0x4660 [ 451.382897][ T29] ? mark_lock+0x94/0x320 [ 451.389987][ T29] ? asan.module_dtor+0x20/0x20 [ 451.396752][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 451.401893][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 451.409889][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 451.416895][ T29] schedule+0xbd/0x170 [ 451.421033][ T29] io_schedule+0x80/0xd0 [ 451.427147][ T29] bit_wait_io+0x11/0xd0 [ 451.431433][ T29] __wait_on_bit+0x9f/0x2c0 [ 451.436376][ T29] ? bit_wait+0xd0/0xd0 [ 451.440582][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 451.452505][ T29] ? bit_wait+0xd0/0xd0 [ 451.457073][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 451.461875][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 451.471892][ T29] ? bit_waitqueue+0x30/0x30 [ 451.476911][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 451.483737][ T29] do_get_write_access+0x5c9/0xe00 [ 451.492630][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 451.498988][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 451.508699][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 451.515779][ T29] ? __might_sleep+0xe0/0xe0 [ 451.520439][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 451.529308][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 451.535111][ T29] ext4_dirty_inode+0xcb/0x110 [ 451.539977][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 451.550674][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 451.559824][ T29] file_update_time+0x187/0x1a0 [ 451.568477][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 451.573538][ T29] ? filemap_fault+0x103c/0x1540 [ 451.578918][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 451.589434][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 451.596116][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 451.601209][ T29] ? __pte_offset_map+0x20d/0x280 [ 451.609653][ T29] do_page_mkwrite+0x153/0x3f0 [ 451.614510][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 451.619976][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 451.628514][ T29] ? numa_migrate_prep+0x350/0x350 [ 451.633878][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 451.639649][ T29] do_user_addr_fault+0x736/0x12d0 [ 451.648114][ T29] exc_page_fault+0x64/0x100 [ 451.652800][ T29] ? clear_bhb_loop+0x40/0x90 [ 451.657979][ T29] asm_exc_page_fault+0x26/0x30 [ 451.662957][ T29] RIP: 0033:0x7fadca8727a9 [ 451.674708][ T29] RSP: 002b:00007ffedcd02f80 EFLAGS: 00010202 [ 451.681090][ T29] RAX: 0000001b2db22000 RBX: ffffffff8177c988 RCX: 0000001b2db21ff8 [ 451.693968][ T29] RDX: 0000001b2d52421c RSI: 0000000000000008 RDI: 00007fadcb755720 [ 451.702394][ T29] RBP: 0000000000000172 R08: 00007fadcac10000 R09: 00007fadcac12000 [ 451.719817][ T29] R10: 000000008177c98c R11: 0000000000000002 R12: 00007fadcac26038 [ 451.731069][ T29] R13: 000000000000064a R14: ffffffff8177c75b R15: 00007fadcb755720 [ 451.739646][ T29] ? ktime_get_with_offset+0x2db/0x330 [ 451.748301][ T29] ? ktime_mono_to_any+0x48/0x100 [ 451.753381][ T29] [ 451.756822][ T29] INFO: task syz.3.1499:9901 blocked for more than 144 seconds. [ 451.764474][ T29] Not tainted syzkaller #0 [ 451.772668][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 451.790780][ T29] task:syz.3.1499 state:D stack:27560 pid:9901 ppid:5773 flags:0x00004004 [ 451.801273][ T29] Call Trace: [ 451.807735][ T29] [ 451.810699][ T29] __schedule+0x15ae/0x4660 [ 451.815664][ T29] ? mark_lock+0x94/0x320 [ 451.820028][ T29] ? asan.module_dtor+0x20/0x20 [ 451.828464][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 451.833538][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 451.839847][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 451.848438][ T29] schedule+0xbd/0x170 [ 451.852837][ T29] io_schedule+0x80/0xd0 [ 451.857672][ T29] bit_wait_io+0x11/0xd0 [ 451.861953][ T29] __wait_on_bit+0x9f/0x2c0 [ 451.870943][ T29] ? bit_wait+0xd0/0xd0 [ 451.875427][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 451.880910][ T29] ? bit_wait+0xd0/0xd0 [ 451.891848][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 451.897777][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 451.902836][ T29] ? bit_waitqueue+0x30/0x30 [ 451.911285][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 451.916786][ T29] do_get_write_access+0x5c9/0xe00 [ 451.921941][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 451.931304][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 451.938174][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 451.944382][ T29] ? __might_sleep+0xe0/0xe0 [ 451.953416][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 451.959465][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 451.968067][ T29] ext4_dirty_inode+0xcb/0x110 [ 451.972865][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 451.979344][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 451.984428][ T29] file_update_time+0x187/0x1a0 [ 451.997997][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 452.003113][ T29] ? filemap_fault+0x103c/0x1540 [ 452.012572][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 452.019477][ T29] ? pte_alloc_one+0x3b6/0x540 [ 452.024288][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 452.034272][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 452.039613][ T29] do_page_mkwrite+0x153/0x3f0 [ 452.044444][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 452.052825][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 452.058060][ T29] ? numa_migrate_prep+0x350/0x350 [ 452.063223][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 452.072015][ T29] do_user_addr_fault+0x736/0x12d0 [ 452.077645][ T29] exc_page_fault+0x64/0x100 [ 452.082376][ T29] ? clear_bhb_loop+0x40/0x90 [ 452.090582][ T29] asm_exc_page_fault+0x26/0x30 [ 452.097456][ T29] RIP: 0033:0x7f0b2ce6baa3 [ 452.101903][ T29] RSP: 002b:00007ffc9863df10 EFLAGS: 00010246 [ 452.113988][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2d864000 [ 452.122984][ T29] RDX: 0000001b2d824000 RSI: 0000000000600000 RDI: 00007f0b2d1e0708 [ 452.134920][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 452.143029][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 452.153681][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc9863e1a0 [ 452.163038][ T29] [ 452.168616][ T29] [ 452.168616][ T29] Showing all locks held in the system: [ 452.177702][ T29] 1 lock held by khungtaskd/29: [ 452.182619][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 452.198450][ T29] 2 locks held by getty/5533: [ 452.203182][ T29] #0: ffff8880316720a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 452.214305][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 452.230603][ T29] 3 locks held by syz-executor/5762: [ 452.237485][ T29] #0: ffff88807a2be0a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 452.251103][ T29] #1: ffff88802cd3e510 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 452.261153][ T29] #2: ffff88802cd42990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 452.274186][ T29] 3 locks held by syz.0.1498/9898: [ 452.279586][ T29] #0: ffff888058b66a20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 452.292970][ T29] #1: ffff88802cd3e510 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 452.307793][ T29] #2: ffff88802cd42990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 452.317997][ T29] 3 locks held by syz.3.1499/9901: [ 452.323146][ T29] #0: ffff888058b64420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 452.339224][ T29] #1: ffff88802cd3e510 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 452.351131][ T29] #2: ffff88802cd42990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 452.363509][ T29] [ 452.366934][ T29] ============================================= [ 452.366934][ T29] [ 452.378028][ T29] NMI backtrace for cpu 0 [ 452.382670][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 452.390290][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 452.400372][ T29] Call Trace: [ 452.403753][ T29] [ 452.406719][ T29] dump_stack_lvl+0x18c/0x250 [ 452.411506][ T29] ? __wake_up_klogd+0xd9/0x100 [ 452.416377][ T29] ? show_regs_print_info+0x20/0x20 [ 452.421599][ T29] ? load_image+0x420/0x420 [ 452.426153][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 452.431139][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 452.437330][ T29] ? load_image+0x420/0x420 [ 452.441859][ T29] ? wq_watchdog_touch+0xef/0x170 [ 452.446918][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 452.453033][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 452.459056][ T29] watchdog+0xf59/0xfa0 [ 452.463283][ T29] ? watchdog+0x1e1/0xfa0 [ 452.467667][ T29] kthread+0x2fa/0x390 [ 452.471872][ T29] ? hungtask_pm_notify+0x50/0x50 [ 452.476975][ T29] ? kthread_blkcg+0xd0/0xd0 [ 452.481598][ T29] ret_from_fork+0x48/0x80 [ 452.486070][ T29] ? kthread_blkcg+0xd0/0xd0 [ 452.490698][ T29] ret_from_fork_asm+0x11/0x20 [ 452.495505][ T29] [ 452.513754][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 452.520689][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 452.527921][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 452.538067][ T29] Call Trace: [ 452.541376][ T29] [ 452.544352][ T29] dump_stack_lvl+0x18c/0x250 [ 452.549069][ T29] ? show_regs_print_info+0x20/0x20 [ 452.554314][ T29] ? load_image+0x420/0x420 [ 452.558845][ T29] panic+0x2ca/0x720 [ 452.562758][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 452.567270][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 452.573151][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 452.578821][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 452.585015][ T29] watchdog+0xf98/0xfa0 [ 452.589207][ T29] ? watchdog+0x1e1/0xfa0 [ 452.593568][ T29] kthread+0x2fa/0x390 [ 452.597687][ T29] ? hungtask_pm_notify+0x50/0x50 [ 452.602735][ T29] ? kthread_blkcg+0xd0/0xd0 [ 452.607340][ T29] ret_from_fork+0x48/0x80 [ 452.611961][ T29] ? kthread_blkcg+0xd0/0xd0 [ 452.616579][ T29] ret_from_fork_asm+0x11/0x20 [ 452.621381][ T29] [ 452.624495][ T29] Kernel Offset: disabled [ 452.628891][ T29] Rebooting in 86400 seconds..