last executing test programs: 2m39.229532554s ago: executing program 0 (id=6808): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003a000b00000000000000000003000000c1fe008013000300ca61d8026a2ccf9088814c8ecf4100"], 0x2c}}, 0x0) 2m38.447986423s ago: executing program 0 (id=6814): r0 = syz_io_uring_setup(0x26b6, &(0x7f0000000200)={0x0, 0xf906, 0x40, 0x0, 0x308}, &(0x7f0000000080), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000008c0)={0xa, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000800)=[0x2, 0x4]}, 0x20) 2m37.904554247s ago: executing program 0 (id=6817): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x169a82, 0x0) sendfile(r0, r0, 0x0, 0x7) 2m37.33882646s ago: executing program 0 (id=6821): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000003, &(0x7f0000000140)={[{@adinicb}, {@unhide}, {@anchor={'anchor', 0x3d, 0xec1}}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@undelete}, {@volume={'volume', 0x3d, 0xb1}}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x2}}]}, 0xde, 0xc2e, &(0x7f0000000f40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m36.272489726s ago: executing program 0 (id=6829): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712d2d5f2c282923debbb86f29ba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @generic="4b57a1af124abd604500fd81fa402d2d410e4491"]}, 0xe0}], 0x1, 0x0, 0x0, 0x40000}, 0x40040) 2m35.010726387s ago: executing program 0 (id=6835): r0 = syz_open_dev$video(&(0x7f00000002c0), 0x0, 0x0) ioctl(r0, 0x671f0db1, 0x0) 2m33.688159519s ago: executing program 32 (id=6835): r0 = syz_open_dev$video(&(0x7f00000002c0), 0x0, 0x0) ioctl(r0, 0x671f0db1, 0x0) 1m5.356904633s ago: executing program 1 (id=7071): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406040016c008685c400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d50300000000000000e0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 1m4.113572244s ago: executing program 1 (id=7075): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x1, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@remote}}, [@migrate={0x50, 0x11, [{@in=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, @in6=@private2, 0xff, 0x3, 0x0, 0x3503, 0x8, 0x2}]}, @encap={0x1c, 0x4, {0x3, 0x4e21, 0x4e22, @in6=@mcast2}}]}, 0xbc}}, 0x0) 1m3.538114567s ago: executing program 1 (id=7078): r0 = gettid() setpgid(r0, 0x0) 1m2.812515865s ago: executing program 1 (id=7081): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, 0xffffffffffffffff, 0x1c, 0x0, @void}, 0x10) 1m2.252757089s ago: executing program 1 (id=7084): r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1}) 1m1.612917744s ago: executing program 1 (id=7087): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fa, &(0x7f00000002c0)={'wg2\x00'}) 46.317227126s ago: executing program 33 (id=7087): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fa, &(0x7f00000002c0)={'wg2\x00'}) 5.861560358s ago: executing program 2 (id=7205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="d0000000030805000000000000000000010000053400048008000240000000000800014000010000080008400000000708000940000070b94aff05400000080008000140ffffffff0600024088b5000214000480080002400000000008000240002004010600024088e700000900010073797a3100000000050003"], 0xd0}, 0x1, 0x0, 0x0, 0x48080}, 0x40000) 5.146524235s ago: executing program 2 (id=7208): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2800000013000100000000000000000018000000090000003531f1445400000008003c"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06daeb01ab2}, 0x4844) 4.492110031s ago: executing program 2 (id=7210): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getstats={0x1c, 0x5e, 0x1, 0x70bd2d, 0x25dbdbfd, {0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0xa911}, 0x0) 3.597486403s ago: executing program 2 (id=7212): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x2000000, @loopback={0xc0fe}, 0x10000}, 0x1c) 3.187245213s ago: executing program 2 (id=7214): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3d, 0xfa, 0x0, 0x9}]}, 0x10) 2.615321867s ago: executing program 2 (id=7216): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x0) 2.326421604s ago: executing program 3 (id=7217): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000340)={0x58, 0x0}) 2.006880732s ago: executing program 3 (id=7218): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) writev(r0, &(0x7f0000000d80)=[{&(0x7f0000000d00)="6818e64547e44b4e530fcc2725245b6826888e4d6d62e2d754316225390a8d1321d1725adc4f9396fe63192ebd82bd66a285ed006c7a7b55878d5049d6d08a716b2c38b9077661236b6f92d85c02f136b82a89ea21267436cd6d16d2c55b6733ccca19aa5dd6c6ebf2cfe82320765000e28845f218b8", 0x76}], 0x1) 1.167571952s ago: executing program 3 (id=7219): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x33, 0x0, &(0x7f0000001a40)) 834.66534ms ago: executing program 3 (id=7220): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 538.782417ms ago: executing program 3 (id=7221): r0 = syz_open_procfs(0x0, &(0x7f0000000bc0)='auxv\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000004540)=""/4095, 0xfff}], 0x1, 0xa, 0xb) 0s ago: executing program 3 (id=7222): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe6, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) kernel console output (not intermixed with test programs): 696.448344][T18390] REISERFS (device loop3): using ordered data mode [ 696.466628][ T7095] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 696.474765][T18390] reiserfs: using flush barriers [ 696.532360][T18384] loop1: detected capacity change from 0 to 32768 [ 696.598998][T18390] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 696.663325][T18384] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 696.675216][T18390] REISERFS (device loop3): checking transaction log (loop3) [ 696.686429][ T7095] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 696.716341][ T7095] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 696.726501][T18384] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 696.735185][T18384] BTRFS info (device loop1): using free space tree [ 696.773977][ T7095] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 696.788878][T18390] REISERFS (device loop3): Using rupasov hash to sort names [ 696.796235][T18390] REISERFS (device loop3): using 3.5.x disk format [ 696.803274][ T7095] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 696.813310][ T7095] usb 3-1: SerialNumber: syz [ 696.847002][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 696.927193][T18390] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 696.990139][T18390] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 697.052989][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 697.082336][T18390] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 697.118639][ T7095] usb 3-1: 0:2 : does not exist [ 697.133723][T18384] BTRFS info (device loop1): enabling ssd optimizations [ 697.151547][ T9] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 697.162453][T18384] BTRFS info (device loop1): auto enabling async discard [ 697.177036][T18390] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 697.192628][ T9] usb 1-1: config 0 has no interface number 0 [ 697.239411][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 697.251943][ T7095] usb 3-1: USB disconnect, device number 24 [ 697.296540][T18390] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 697.323493][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 697.406843][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 697.415956][ T9] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 697.465762][T18384] BTRFS warning (device loop1): can't clear the compat_ro:1 feature bit while mounted [ 697.476225][ T9] usb 1-1: Product: syz [ 697.496190][ T9] usb 1-1: SerialNumber: syz [ 697.527715][ T9] usb 1-1: config 0 descriptor?? [ 697.558082][T18390] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 697.590735][ T9] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 697.646034][T18390] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 697.679125][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input19 [ 697.694502][ T5777] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 697.706958][T18390] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 698.220456][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 698.228097][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 698.235323][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 698.242514][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 698.249739][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 698.256932][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 698.264097][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 698.271325][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 698.278538][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 698.285717][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 698.292959][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 698.317015][ T7097] usb 1-1: USB disconnect, device number 29 [ 698.323128][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 698.439121][T18423] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5725'. [ 698.588591][ T7097] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 698.768394][ T28] audit: type=1326 audit(1787496249.506:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18428 comm="syz.2.5729" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ff9e0d9 code=0x7ffc0000 [ 698.854045][ T28] audit: type=1326 audit(1787496249.506:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18428 comm="syz.2.5729" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ff9e0d9 code=0x7ffc0000 [ 698.899774][ T28] audit: type=1326 audit(1787496249.506:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18428 comm="syz.2.5729" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ff9e0d9 code=0x7ffc0000 [ 698.946831][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 699.045247][ T28] audit: type=1326 audit(1787496249.536:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18428 comm="syz.2.5729" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f238ff9e0d9 code=0x7ffc0000 [ 699.149402][ T28] audit: type=1326 audit(1787496249.536:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18428 comm="syz.2.5729" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ff9e0d9 code=0x7ffc0000 [ 699.204370][ T9] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 1.00 [ 699.246620][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.254688][ T9] usb 2-1: Product: syz [ 699.334906][ T9] usb 2-1: Manufacturer: syz [ 699.356588][ T28] audit: type=1326 audit(1787496249.536:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18428 comm="syz.2.5729" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ff9e0d9 code=0x7ffc0000 [ 699.386608][ T9] usb 2-1: SerialNumber: syz [ 699.455776][ T9] ums_eneub6250 2-1:1.0: USB Mass Storage device detected [ 699.547896][ T28] audit: type=1326 audit(1787496249.536:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18428 comm="syz.2.5729" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ff9e0d9 code=0x7ffc0000 [ 699.616635][ T9] scsi host1: usb-storage 2-1:1.0 [ 699.697001][ T28] audit: type=1326 audit(1787496249.536:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18428 comm="syz.2.5729" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f238ff9e0d9 code=0x7ffc0000 [ 699.867265][ T28] audit: type=1326 audit(1787496249.536:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18428 comm="syz.2.5729" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f238ff9e0d9 code=0x7ffc0000 [ 700.061946][ T9] ums_eneub6250: probe of 2-1:1.0 failed with error 3 [ 700.091983][T18449] loop2: detected capacity change from 0 to 2048 [ 700.128167][ T9] usb 2-1: USB disconnect, device number 32 [ 700.172664][T18449] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 700.311814][T18449] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 701.764893][T18486] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5754'. [ 702.377471][ T7097] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 702.588595][ T7097] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 702.622279][ T7097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.669458][ T7097] usb 4-1: config 0 descriptor?? [ 702.958196][ T7097] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 703.009847][ T7097] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 703.074225][T18506] loop0: detected capacity change from 0 to 512 [ 703.140613][ T7097] [drm:udl_init] *ERROR* Selecting channel failed [ 703.194068][T18506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.307740][T18506] ext4 filesystem being mounted at /1390/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 703.347675][ T7097] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 703.417595][ T7097] [drm] Initialized udl on minor 2 [ 703.461148][ T7097] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 703.593291][ T7097] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 703.602345][T18513] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5766'. [ 703.697514][ T7097] usb 4-1: USB disconnect, device number 32 [ 703.704196][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 703.738475][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 703.908873][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.558652][T18527] nfs: Unexpected value for 'lock' [ 704.630763][T18529] loop0: detected capacity change from 0 to 16 [ 704.639292][T18529] erofs: (device loop0): mounted with root inode @ nid 36. [ 704.825319][T18525] loop1: detected capacity change from 0 to 8192 [ 704.884397][T18525] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 704.916480][T18525] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 704.925782][T18525] REISERFS (device loop1): using ordered data mode [ 704.962751][T18525] reiserfs: using flush barriers [ 704.981727][T18525] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 705.005685][T18525] REISERFS (device loop1): checking transaction log (loop1) [ 705.106838][ T7150] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 705.263467][T18525] REISERFS (device loop1): Using rupasov hash to sort names [ 705.276870][T18525] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 705.302612][ T28] audit: type=1400 audit(1787496256.036:633): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 3-1: Using ep0 maxpacket: 8 [ 705.708236][ T7150] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 705.781016][T18548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5783'. [ 705.830337][T18548] openvswitch: netlink: Actions may not be safe on all matching packets [ 706.336430][ T7150] usb 3-1: config 179 has no interface number 0 [ 706.342882][ T7150] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 706.446439][ T7150] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 706.466417][ T7150] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 706.506011][ T7150] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 706.536426][ T7150] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 706.576527][ T7150] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 706.585695][ T7150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.673654][T18533] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 706.730710][T18564] Timeout policy `syz0' can only be used by L3 protocol number 16 [ 706.760912][T18566] netlink: 'syz.1.5792': attribute type 19 has an invalid length. [ 706.784770][T18566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5792'. [ 707.189507][T18571] bond5: option lacp_active: invalid value (8) [ 707.209652][T18571] bond5 (unregistering): Released all slaves [ 707.398092][T18579] netlink: 'syz.0.5798': attribute type 1 has an invalid length. [ 707.493142][ T7097] usb 3-1: USB disconnect, device number 25 [ 707.493163][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 707.507578][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 708.005839][T18587] loop3: detected capacity change from 0 to 256 [ 708.714650][T18581] loop1: detected capacity change from 0 to 32768 [ 708.721364][ T7095] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 708.774853][T18581] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.5799 (18581) [ 708.885083][T18581] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 708.918833][ T7095] usb 4-1: Using ep0 maxpacket: 16 [ 708.953952][T18581] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 708.963339][ T7095] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 709.016712][ T7095] usb 4-1: config 0 has no interface number 0 [ 709.029430][T18581] BTRFS info (device loop1): setting nodatasum [ 709.035666][T18581] BTRFS info (device loop1): force zlib compression, level 3 [ 709.059377][ T7095] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 709.086499][ T7095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.094703][T18581] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 709.139224][ T7095] usb 4-1: Product: syz [ 709.146565][T18581] BTRFS info (device loop1): use lzo compression, level 0 [ 709.158144][ T7095] usb 4-1: Manufacturer: syz [ 709.162887][ T7095] usb 4-1: SerialNumber: syz [ 709.182440][T18581] BTRFS info (device loop1): turning on flush-on-commit [ 709.200794][ T7095] usb 4-1: config 0 descriptor?? [ 709.218158][ T7095] hub 4-1:0.132: bad descriptor, ignoring hub [ 709.224536][T18581] BTRFS info (device loop1): enabling auto defrag [ 709.233573][T18583] loop0: detected capacity change from 0 to 32768 [ 709.246593][T18581] BTRFS info (device loop1): max_inline at 4096 [ 709.253232][ T7095] hub: probe of 4-1:0.132 failed with error -5 [ 709.282154][ T7095] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input20 [ 709.293525][T18581] BTRFS info (device loop1): using free space tree [ 709.337844][T18583] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 709.375804][T18583] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 709.538472][T18581] BTRFS info (device loop1): enabling ssd optimizations [ 709.819646][T18583] XFS (loop0): Ending clean mount [ 709.887732][T18583] XFS (loop0): Quotacheck needed: Please wait. [ 710.046583][T18583] XFS (loop0): Quotacheck: Done. [ 710.276020][ T5777] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 710.319850][ T5776] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 711.046459][ T7150] usb 4-1: USB disconnect, device number 33 [ 712.912920][T18668] loop1: detected capacity change from 0 to 4096 [ 713.043759][T18668] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 713.173968][T18668] ntfs3: loop1: Failed to load $Extend (-22). [ 713.203121][T18668] ntfs3: loop1: Failed to initialize $Extend. [ 713.576540][ T7150] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 713.868230][ T7150] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 713.886481][ T7150] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 713.916465][ T7150] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 713.946135][ T7150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.637130][T18678] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 714.659895][ T7150] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 714.898128][T18708] loop3: detected capacity change from 0 to 8 [ 715.059963][T18708] SQUASHFS error: Failed to read block 0x6de: -5 [ 715.070482][T18711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5851'. [ 715.123190][T18708] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 715.165216][T18708] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 715.261688][ T7095] usb 3-1: USB disconnect, device number 26 [ 715.545665][T18715] loop1: detected capacity change from 0 to 2048 [ 715.576333][T18718] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 715.913884][T18721] IPv6: NLM_F_CREATE should be specified when creating new route [ 716.057960][T18726] libceph: resolve '0' (ret=-3): failed [ 716.064001][T18723] bond5: option resend_igmp: invalid value (2878) [ 716.091555][T18723] bond5: option resend_igmp: allowed values 0 - 255 [ 716.188681][T18723] bond5 (unregistering): Released all slaves [ 716.291159][T18728] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5859'. [ 716.317194][T18728] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5859'. [ 716.650972][T18738] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5864'. [ 716.911922][T18742] loop1: detected capacity change from 0 to 256 [ 716.957834][T18742] exfat: Deprecated parameter 'utf8' [ 716.975392][T18744] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5868'. [ 717.007641][T18742] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 717.443107][T18752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5871'. [ 717.626504][ T7095] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 717.852420][ T7095] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 717.883285][ T7095] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 717.942401][ T7095] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 718.006057][ T7095] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 718.022996][T18764] bridge0: port 4(bond0) entered blocking state [ 718.050289][ T7095] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 718.061262][T18764] bridge0: port 4(bond0) entered disabled state [ 718.081323][T18764] bond0: entered allmulticast mode [ 718.096563][ T7095] usb 3-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 718.114108][T18764] bond_slave_0: entered allmulticast mode [ 718.125508][T18764] bond_slave_1: entered allmulticast mode [ 718.133688][ T7095] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.182131][T18750] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 718.199266][T18750] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 718.258330][T18750] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 718.343507][ T7095] mos7720 3-1:1.0: Moschip 2 port adapter converter detected [ 718.791713][ T7095] usb 3-1: mos7720: usb_control_msg() failed: -71 [ 718.861023][ T7095] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 718.987964][ T7095] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 719.044522][T18781] loop3: detected capacity change from 0 to 64 [ 719.121425][ T7095] usb 3-1: USB disconnect, device number 27 [ 719.127556][ C0] usb 3-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 719.223241][ T7095] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 719.309117][T18781] Trying to free block not in datazone [ 719.324167][ T7095] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 719.369079][ T7095] mos7720 3-1:1.0: device disconnected [ 719.422154][T18785] loop1: detected capacity change from 0 to 256 [ 719.558725][T18785] FAT-fs (loop1): Directory bread(block 64) failed [ 719.565330][T18785] FAT-fs (loop1): Directory bread(block 65) failed [ 719.602785][T18785] FAT-fs (loop1): Directory bread(block 66) failed [ 719.626723][T18785] FAT-fs (loop1): Directory bread(block 67) failed [ 719.644868][T18785] FAT-fs (loop1): Directory bread(block 68) failed [ 719.663672][T18785] FAT-fs (loop1): Directory bread(block 69) failed [ 719.686840][T18785] FAT-fs (loop1): Directory bread(block 70) failed [ 719.714691][T18785] FAT-fs (loop1): Directory bread(block 71) failed [ 719.740310][T18785] FAT-fs (loop1): Directory bread(block 72) failed [ 719.752719][T18785] FAT-fs (loop1): Directory bread(block 73) failed [ 721.481386][T18829] [U] [ 721.484757][T18829] [U] [ 721.487528][T18829] [U] [ 721.490260][T18829] [U] [ 721.543339][T18829] [U] [ 721.546125][T18829] [U] [ 721.548862][T18829] [U] [ 721.551596][T18829] [U] [ 721.621177][T18829] [U] [ 721.623964][T18829] [U] [ 721.626697][T18829] [U] [ 721.629448][T18829] [U] [ 721.669437][T18829] [U] [ 721.672243][T18829] [U] [ 721.674992][T18829] [U] [ 721.677749][T18829] [U] [ 721.722250][T18827] [U] [ 721.861111][T18833] nvme_fabrics: missing parameter 'traddr=%s' [ 722.591459][T18857] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5920'. [ 722.672893][T18863] Cannot find del_set index 3 as target [ 722.679452][T18857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5920'. [ 724.173274][T18899] netlink: 'syz.1.5938': attribute type 30 has an invalid length. [ 724.206845][T17532] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 724.254732][ T28] audit: type=1326 audit(1787496274.986:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.3.5940" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5599e0d9 code=0x7ffc0000 [ 724.287947][ T28] audit: type=1326 audit(1787496275.026:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.3.5940" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5599e0d9 code=0x7ffc0000 [ 724.322221][T18899] bond3: option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 724.343349][ T28] audit: type=1326 audit(1787496275.076:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.3.5940" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f2b5599e0d9 code=0x7ffc0000 [ 724.393385][T18899] bond3 (unregistering): Released all slaves [ 724.421110][T17532] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 724.447600][T17532] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.455672][T17532] usb 3-1: Product: syz [ 724.475428][ T28] audit: type=1326 audit(1787496275.106:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.3.5940" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5599e0d9 code=0x7ffc0000 [ 724.531946][T17532] usb 3-1: Manufacturer: syz [ 724.556788][T17532] usb 3-1: SerialNumber: syz [ 724.619121][ T7097] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 724.632584][ T28] audit: type=1326 audit(1787496275.106:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.3.5940" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5599e0d9 code=0x7ffc0000 [ 725.280747][ T7150] usb 3-1: USB disconnect, device number 28 [ 725.803235][T18924] loop1: detected capacity change from 0 to 256 [ 725.809817][ T7097] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 725.825331][ T7097] ath9k_htc: Failed to initialize the device [ 725.852805][ T7150] usb 3-1: ath9k_htc: USB layer deinitialized [ 725.862485][T18924] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 725.957377][T18924] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 725.999606][T18924] FAT-fs (loop1): Filesystem has been set read-only [ 726.156761][T18930] comedi comedi4: bad chanlist[0]=0xfffffffe chan=65534 range length=2 [ 726.185648][T18931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5953'. [ 726.695938][ T28] audit: type=1326 audit(1787496277.426:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz.1.5959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e70b9e0d9 code=0x7ffc0000 [ 726.840953][ T28] audit: type=1326 audit(1787496277.426:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz.1.5959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e70b9e0d9 code=0x7ffc0000 [ 726.967705][T18949] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5962'. [ 726.986479][ T28] audit: type=1326 audit(1787496277.426:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz.1.5959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e70b9e0d9 code=0x7ffc0000 [ 727.096495][ T28] audit: type=1326 audit(1787496277.476:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz.1.5959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f7e70b9e0d9 code=0x7ffc0000 [ 727.186482][ T28] audit: type=1326 audit(1787496277.476:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz.1.5959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e70b9e0d9 code=0x7ffc0000 [ 727.353219][T18957] No source specified [ 727.677479][T18963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5969'. [ 730.175850][T19018] loop3: detected capacity change from 0 to 1024 [ 730.230677][T19022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5998'. [ 731.246533][ T7097] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 731.271574][T19044] loop0: detected capacity change from 0 to 512 [ 731.408372][T19044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.408496][T19044] ext4 filesystem being mounted at /1455/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 731.457390][ T7097] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 731.458719][ T7097] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 731.459866][ T7097] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 731.461207][ T7097] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 731.462599][ T7097] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 731.463905][ T7097] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 731.465170][ T7097] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 731.466287][ T7097] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 731.470069][ T7097] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 731.470138][ T7097] usb 3-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=ee.8d [ 731.470166][ T7097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.483717][ T7097] pwc: Logitech QuickCam detected (reserved ID). [ 731.483787][ T7097] pwc: Warning: more than 1 configuration available. [ 731.759266][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.770613][T19053] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6012'. [ 731.786485][T19053] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6012'. [ 731.935123][ T7097] pwc: send_video_command error -71 [ 731.935214][ T7097] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 731.935394][ T7097] Philips webcam: probe of 3-1:250.0 failed with error -71 [ 731.948747][ T7097] usb 3-1: USB disconnect, device number 29 [ 732.736972][T19069] comedi comedi3: das16m1: I/O port conflict (0x500,8) [ 734.308611][T19110] loop2: detected capacity change from 0 to 4096 [ 734.448095][T19110] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 734.501385][T19110] ntfs3: loop2: Failed to load $Extend (-22). [ 734.533627][T19110] ntfs3: loop2: Failed to initialize $Extend. [ 735.245885][T19128] loop0: detected capacity change from 0 to 1024 [ 735.446735][T19132] tc_dump_action: action bad kind [ 735.995475][T19139] loop0: detected capacity change from 0 to 4096 [ 736.106446][T19139] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 736.187412][T19139] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 737.040106][T19135] loop1: detected capacity change from 0 to 32768 [ 737.095640][T19135] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.6052 (19135) [ 737.116524][T19157] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6063'. [ 737.284230][T19135] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 737.356486][T19135] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 737.365209][T19135] BTRFS info (device loop1): enabling ssd optimizations [ 737.400643][T19161] loop3: detected capacity change from 0 to 64 [ 737.476682][T19135] BTRFS info (device loop1): not using ssd optimizations [ 737.483892][T19135] BTRFS info (device loop1): turning off barriers [ 737.571320][T19135] BTRFS info (device loop1): use no compression [ 737.636705][T19135] BTRFS info (device loop1): using free space tree [ 738.166496][ T7097] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 738.359399][ T5777] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 738.397968][ T7097] usb 3-1: Using ep0 maxpacket: 32 [ 738.448529][ T7097] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.488896][ T7097] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 738.526536][ T7097] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.549678][ T7097] usb 3-1: Product: syz [ 738.553930][ T7097] usb 3-1: Manufacturer: syz [ 738.600991][ T7097] usb 3-1: SerialNumber: syz [ 738.628457][ T7097] usb 3-1: config 0 descriptor?? [ 738.731296][ T5779] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop1 scanned by udevd (5779) [ 738.937557][T19200] netlink: 'syz.1.6073': attribute type 10 has an invalid length. [ 738.976610][T19200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6073'. [ 738.993869][ T7097] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 739.236902][ T7150] usb 3-1: USB disconnect, device number 30 [ 739.355217][T19209] netlink: 'syz.0.6079': attribute type 1 has an invalid length. [ 740.252632][T19226] loop2: detected capacity change from 0 to 2048 [ 740.456578][T19226] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 740.800268][T19234] x_tables: duplicate entry at hook 1 [ 740.923431][T19238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6095'. [ 741.040406][T19242] loop1: detected capacity change from 0 to 164 [ 741.522177][T19252] ip6gre1: entered promiscuous mode [ 741.973342][T19261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6107'. [ 742.067705][T19266] loop0: detected capacity change from 0 to 256 [ 742.709602][T19279] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 511 out of range (51000000..2150000000) [ 743.500879][T19292] loop3: detected capacity change from 0 to 4096 [ 743.581898][T19292] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 743.656648][T19297] loop0: detected capacity change from 0 to 4096 [ 743.729946][T19292] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 743.787572][T19292] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 743.803281][T19297] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 743.874018][T19297] ntfs3: loop0: Failed to load $Extend (-22). [ 743.936600][T19297] ntfs3: loop0: Failed to initialize $Extend. [ 745.168766][T19331] xt_CONNSECMARK: invalid mode: 129 [ 745.446663][T19301] loop2: detected capacity change from 0 to 32768 [ 746.542254][T19358] netlink: 'syz.1.6146': attribute type 24 has an invalid length. [ 746.598150][T19360] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6147'. [ 746.936680][T19366] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6150'. [ 747.414105][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.138436][T19394] loop3: detected capacity change from 0 to 2048 [ 748.208027][T19394] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=301129, location=301129 [ 748.223300][T19394] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 748.278576][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 748.278594][ T28] audit: type=1800 audit(1787496299.016:648): pid=19394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6164" name="file1" dev="loop3" ino=1367 res=0 errno=0 [ 750.191147][T19414] 8021q: adding VLAN 0 to HW filter on device bond2 [ 750.360688][T19418] binfmt_misc: register: failed to install interpreter file ./file0 [ 751.101194][T19430] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6181'. [ 751.466476][ T7150] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 751.708602][ T7150] usb 1-1: unable to get BOS descriptor or descriptor too short [ 751.729625][ T7150] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 751.756462][ T7150] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 751.816554][ T7150] usb 1-1: config 63 has no interface number 0 [ 751.826659][ T7150] usb 1-1: config 63 interface 66 has no altsetting 0 [ 751.958712][ T7150] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 751.986427][ T7150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.005017][ T7150] usb 1-1: Product: syz [ 752.014802][ T7150] usb 1-1: Manufacturer: syz [ 752.076524][ T7150] usb 1-1: SerialNumber: syz [ 752.383241][ T7150] usb 1-1: Found UVC 0.07 device syz (174f:8acf) [ 752.669985][ T7150] usb 1-1: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 752.696956][ T7150] usb 1-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 752.716718][ T7150] usb 1-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 752.736732][ T7150] usb 1-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 752.786492][ T7150] usb 1-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 752.795508][ T7150] usb 1-1: No streaming interface found for terminal 29. [ 752.932707][T19442] loop3: detected capacity change from 0 to 2048 [ 753.137319][T19445] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 753.215746][ T7150] uvcvideo 1-1:63.66: Entity type for entity Output 5 was not initialized! [ 753.230358][T19428] loop2: detected capacity change from 0 to 32768 [ 753.296652][ T7150] usb 1-1: USB disconnect, device number 30 [ 753.436756][T19428] JBD2: Ignoring recovery information on journal [ 753.684885][T19428] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 754.617060][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 755.010805][T19460] loop3: detected capacity change from 0 to 1764 [ 756.393006][T19477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6201'. [ 756.418636][T19478] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ"[19478] [ 757.089943][T19488] loop0: detected capacity change from 0 to 512 [ 757.196477][T19477] netlink: 'syz.1.6201': attribute type 6 has an invalid length. [ 757.241591][T19488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.321080][T19493] loop2: detected capacity change from 0 to 256 [ 757.332649][T19488] ext4 filesystem being mounted at /1507/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 757.388168][T19493] exfat: Deprecated parameter 'utf8' [ 757.393622][T19493] exfat: Deprecated parameter 'utf8' [ 757.426706][T19495] Cannot find del_set index 4 as target [ 757.474331][T19488] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.6205: corrupted xattr block 33: invalid header [ 757.509251][T19493] exFAT-fs (loop2): failed to read boot sector [ 757.515485][T19493] exFAT-fs (loop2): failed to recognize exfat type [ 757.585590][T19488] fscrypt (loop0, inode 15): Error -117 getting encryption context [ 757.988149][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.303744][T19517] netlink: 'syz.2.6217': attribute type 1 has an invalid length. [ 759.318754][T19518] loop0: detected capacity change from 0 to 8 [ 759.357752][T19518] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 759.393508][ T6452] udevd[6452]: incorrect cramfs checksum on /dev/loop0 [ 759.465592][T19518] cramfs: bad data blocksize 4294934200 [ 759.546604][T19518] cramfs: bad data blocksize 4294934200 [ 759.552535][ T28] audit: type=1800 audit(1787496310.286:649): pid=19518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6218" name="file1" dev="loop0" ino=33092 res=0 errno=0 [ 760.400523][T19527] loop0: detected capacity change from 0 to 1764 [ 760.567144][T19527] syz.0.6221: attempt to access beyond end of device [ 760.567144][T19527] loop0: rw=0, sector=7180648572, nr_sectors = 4 limit=1764 [ 760.726478][T19527] Buffer I/O error on dev loop0, logical block 1795162143, async page read [ 760.782198][T19527] syz.0.6221: attempt to access beyond end of device [ 760.782198][T19527] loop0: rw=0, sector=7180648572, nr_sectors = 4 limit=1764 [ 760.885200][T19527] Buffer I/O error on dev loop0, logical block 1795162143, async page read [ 760.936823][ T28] audit: type=1800 audit(1787496311.676:650): pid=19527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6221" name="file0" dev="loop0" ino=1923 res=0 errno=0 [ 761.795844][T19543] loop2: detected capacity change from 0 to 256 [ 762.421420][T19551] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6233'. [ 763.237628][T19563] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 763.314406][T19564] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6239'. [ 763.410274][T19564] netlink: 172 bytes leftover after parsing attributes in process `syz.2.6239'. [ 763.461077][T19563] overlayfs: overlapping lowerdir path [ 764.179855][T19572] loop0: detected capacity change from 0 to 512 [ 764.281698][T19572] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 764.596483][T19572] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 765.156970][T19585] netlink: 'syz.1.6247': attribute type 21 has an invalid length. [ 765.164856][T19585] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6247'. [ 765.291659][T19585] netlink: 'syz.1.6247': attribute type 4 has an invalid length. [ 765.516585][T19585] netlink: 'syz.1.6247': attribute type 3 has an invalid length. [ 765.546709][T19585] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6247'. [ 767.256736][T19610] sctp: [Deprecated]: syz.3.6261 (pid 19610) Use of int in max_burst socket option. [ 767.256736][T19610] Use struct sctp_assoc_value instead [ 768.253483][T19621] loop3: detected capacity change from 0 to 512 [ 768.348463][T19621] EXT4-fs (loop3): Test dummy encryption mode enabled [ 768.406521][T19621] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.6267: inode has both inline data and extents flags [ 768.456696][T19621] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.6267: couldn't read orphan inode 15 (err -117) [ 768.518636][T19621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.656492][ T7150] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 768.799168][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.936713][ T7150] usb 1-1: Using ep0 maxpacket: 8 [ 769.305250][T19605] loop1: detected capacity change from 0 to 32768 [ 769.534896][T19629] ip6tnl3: entered allmulticast mode [ 769.701231][ T7150] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.766435][ T7150] usb 1-1: config 0 interface 0 has no altsetting 0 [ 769.787167][ T7150] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 769.796255][ T7150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.851654][ T7150] usb 1-1: Product: syz [ 769.855899][ T7150] usb 1-1: Manufacturer: syz [ 769.936906][ T7150] usb 1-1: SerialNumber: syz [ 769.962031][ T7150] usb 1-1: config 0 descriptor?? [ 770.043600][T19615] loop2: detected capacity change from 0 to 32768 [ 770.271429][ T7150] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 770.356632][T19615] ERROR: (device loop2): dbAlloc: unable to allocate blocks [ 770.356632][T19615] [ 770.437965][T19615] ERROR: (device loop2): remounting filesystem as read-only [ 770.504321][ T7150] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 770.567232][ T7150] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 770.639125][ T7150] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 770.726989][ T7150] usb 1-1: USB disconnect, device number 31 [ 772.381935][T19645] sctp: [Deprecated]: syz.0.6278 (pid 19645) Use of struct sctp_assoc_value in delayed_ack socket option. [ 772.381935][T19645] Use struct sctp_sack_info instead [ 772.494981][T19647] wg1 speed is unknown, defaulting to 1000 [ 773.574303][T19659] affs: No valid root block on device nbd3 [ 775.667806][T19673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6292'. [ 775.712838][T19673] ip6tnl5: entered allmulticast mode [ 775.840144][T19651] loop2: detected capacity change from 0 to 32768 [ 775.954685][T19651] read_mapping_page failed! [ 775.997095][T19651] jfs_mount: Failed to read AGGREGATE_I [ 776.036868][T19651] Mount JFS Failure: -5 [ 776.068449][T19651] jfs_mount failed w/return code = -5 [ 777.236302][T19692] loop1: detected capacity change from 0 to 1024 [ 777.348366][T19693] netlink: 'syz.2.6302': attribute type 3 has an invalid length. [ 778.282448][T19704] loop3: detected capacity change from 0 to 256 [ 778.351760][T19705] tmpfs: Bad value for 'mpol' [ 781.050245][T19739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6326'. [ 782.646052][T19763] loop0: detected capacity change from 0 to 16 [ 782.748740][T19763] erofs: (device loop0): erofs_read_superblock: blkszbits 1 isn't supported [ 784.070976][T19773] netlink: 'syz.0.6342': attribute type 1 has an invalid length. [ 785.765588][T19797] loop1: detected capacity change from 0 to 256 [ 787.212971][T19809] loop2: detected capacity change from 0 to 4096 [ 787.433826][T19787] loop0: detected capacity change from 0 to 32768 [ 787.703647][T19809] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 789.647137][T19835] pimreg: entered allmulticast mode [ 790.217218][T19841] netlink: 'syz.3.6377': attribute type 1 has an invalid length. [ 793.277825][T19884] ieee802154 phy1 wpan1: encryption failed: -22 [ 793.482871][ T28] audit: type=1326 audit(1787496344.216:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19889 comm="syz.0.6400" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afc99e0d9 code=0x7ffc0000 [ 793.740009][ T28] audit: type=1326 audit(1787496344.216:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19889 comm="syz.0.6400" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afc99e0d9 code=0x7ffc0000 [ 793.960172][ T28] audit: type=1326 audit(1787496344.256:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19889 comm="syz.0.6400" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f3afc99e0d9 code=0x7ffc0000 [ 794.199834][ T28] audit: type=1326 audit(1787496344.256:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19889 comm="syz.0.6400" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afc99e0d9 code=0x7ffc0000 [ 795.029024][T19912] loop1: detected capacity change from 0 to 64 [ 796.583324][T19931] netlink: 34 bytes leftover after parsing attributes in process `syz.2.6421'. [ 796.901803][ T5783] Bluetooth: hci2: unexpected event for opcode 0x080d [ 797.070867][T19939] loop3: detected capacity change from 0 to 256 [ 797.196506][T19939] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 798.084796][T19950] netlink: 'syz.0.6431': attribute type 1 has an invalid length. [ 798.675445][T19960] loop3: detected capacity change from 0 to 256 [ 799.162157][T19965] loop2: detected capacity change from 0 to 128 [ 799.387943][T19965] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 799.521293][T19965] ext4 filesystem being mounted at /1641/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 800.388299][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 800.963620][ T5783] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 800.975652][ T5783] Bluetooth: hci2: Injecting HCI hardware error event [ 800.985765][ T5783] Bluetooth: hci2: hardware error 0x00 [ 801.239892][T19991] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[19991] [ 802.539678][T20007] loop2: detected capacity change from 0 to 128 [ 802.547413][T20009] netlink: 172 bytes leftover after parsing attributes in process `syz.3.6457'. [ 802.618309][T20009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6457'. [ 802.693351][T20009] netlink: 172 bytes leftover after parsing attributes in process `syz.3.6457'. [ 802.781045][T20009] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6457'. [ 802.849842][T20009] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6457'. [ 803.274937][ T5783] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 804.507181][T20027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6466'. [ 804.516220][T20027] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6466'. [ 805.690863][T20043] netlink: 'syz.3.6474': attribute type 4 has an invalid length. [ 806.292321][T20054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 806.668905][T20059] netlink: 'syz.3.6482': attribute type 2 has an invalid length. [ 808.684468][T20077] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 808.852176][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.211582][T20093] loop0: detected capacity change from 0 to 256 [ 809.429687][T20093] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 809.906597][ T7097] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 810.146597][ T7097] usb 1-1: Using ep0 maxpacket: 16 [ 810.194581][ T7097] usb 1-1: config 1 has an invalid descriptor of length 202, skipping remainder of the config [ 810.280651][ T7097] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 42408, setting to 1024 [ 810.364202][ T7097] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 810.476695][ T7097] usb 1-1: New USB device found, idVendor=0499, idProduct=474b, bcdDevice= 0.40 [ 810.486145][ T7097] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.526303][ T7097] usb 1-1: Product: syz [ 810.531228][ T7097] usb 1-1: Manufacturer: syz [ 810.535852][ T7097] usb 1-1: SerialNumber: syz [ 810.628608][T20093] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 810.636022][ T7095] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 810.793354][T20112] loop2: detected capacity change from 0 to 256 [ 810.823056][T20112] exfat: Deprecated parameter 'utf8' [ 810.941315][T20112] exfat: Deprecated parameter 'namecase' [ 811.002830][T20112] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 811.038329][ T7095] usb 2-1: unable to get BOS descriptor or descriptor too short [ 811.096665][T17532] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 811.299524][ T7095] usb 2-1: config index 0 descriptor too short (expected 26766, got 142) [ 811.308654][ T7097] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 811.326370][ T7095] usb 2-1: config 1 has too many interfaces: 173, using maximum allowed: 32 [ 811.346991][ T7095] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 811.385377][ T7095] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 173 [ 811.425440][T17532] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.446460][ T7097] usb 1-1: USB disconnect, device number 32 [ 811.466758][T17532] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 811.526780][ T7095] usb 2-1: string descriptor 0 read error: -22 [ 811.533155][ T7095] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 811.546466][T17532] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 811.806409][ T7095] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.831888][T17532] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 811.852011][ T7095] usb 2-1: selecting invalid altsetting 1 [ 811.861698][T17532] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.882108][ T7095] usb 2-1: unit 6 not found! [ 811.903117][T20119] loop2: detected capacity change from 0 to 512 [ 811.914376][T17532] usb 4-1: Product: syz [ 811.938755][T17532] usb 4-1: Manufacturer: syz [ 811.940580][ T6531] udevd[6531]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 811.943435][T17532] usb 4-1: SerialNumber: syz [ 812.101850][T17532] usb 4-1: config 0 descriptor?? [ 812.150647][T20119] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 812.218490][T20119] FAT-fs (loop2): Filesystem has been set read-only [ 812.259060][T20119] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 812.348865][T20119] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 812.430966][ T7095] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 812.452894][T20122] loop0: detected capacity change from 0 to 512 [ 812.531969][T17532] usb 4-1: USB disconnect, device number 34 [ 812.548063][T20122] EXT4-fs: inline encryption not supported [ 812.554068][T20122] EXT4-fs: Ignoring removed i_version option [ 812.566492][ T7095] usb 2-1: USB disconnect, device number 33 [ 812.910027][ T5789] udevd[5789]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 812.999818][T20122] EXT4-fs (loop0): 1 orphan inode deleted [ 813.055137][T20122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.557975][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.190213][T20140] team0: entered promiscuous mode [ 814.195336][T20140] team_slave_0: entered promiscuous mode [ 814.287783][T20140] team_slave_1: entered promiscuous mode [ 814.294461][T20140] team0: entered allmulticast mode [ 814.406855][T20140] team_slave_0: entered allmulticast mode [ 814.444629][T20140] team_slave_1: entered allmulticast mode [ 814.481375][T20140] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 815.046662][ T28] audit: type=1326 audit(1787496365.776:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20149 comm="syz.2.6525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ff9e0d9 code=0x7ffc0000 [ 815.070804][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.206406][ T28] audit: type=1326 audit(1787496365.776:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20149 comm="syz.2.6525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ff9e0d9 code=0x7ffc0000 [ 815.286483][ T28] audit: type=1326 audit(1787496365.826:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20149 comm="syz.2.6525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ff9e0d9 code=0x7ffc0000 [ 815.466480][ T28] audit: type=1326 audit(1787496365.826:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20149 comm="syz.2.6525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ff9e0d9 code=0x7ffc0000 [ 815.648710][ T28] audit: type=1326 audit(1787496365.866:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20149 comm="syz.2.6525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f238ff9e0d9 code=0x7ffc0000 [ 815.672823][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.756437][T15711] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 815.806423][ T28] audit: type=1326 audit(1787496365.866:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20149 comm="syz.2.6525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ff9e0d9 code=0x7ffc0000 [ 815.916509][ T28] audit: type=1326 audit(1787496365.866:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20149 comm="syz.2.6525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ff9e0d9 code=0x7ffc0000 [ 816.013074][T15711] usb 4-1: config 1 has an invalid descriptor of length 168, skipping remainder of the config [ 816.046748][T15711] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 9121, setting to 64 [ 816.077378][T20164] Cannot find del_set index 4 as target [ 816.086532][ T28] audit: type=1326 audit(1787496365.866:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20149 comm="syz.2.6525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f238ff9e0d9 code=0x7ffc0000 [ 816.146564][T15711] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 816.233377][T15711] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 816.246437][ T28] audit: type=1326 audit(1787496365.866:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20149 comm="syz.2.6525" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f238ff9e0d9 code=0x7ffc0000 [ 816.281573][T15711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.366586][T15711] usb 4-1: Product: syz [ 816.370853][T15711] usb 4-1: Manufacturer: syz [ 816.375483][T15711] usb 4-1: SerialNumber: syz [ 816.460796][T15711] cdc_subset: probe of 4-1:1.0 failed with error -22 [ 816.524302][T15711] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 816.566419][T15711] cdc_ncm 4-1:1.0: bind() failure [ 816.778989][T15711] cdc_subset: probe of 4-1:1.1 failed with error -22 [ 816.786253][T15711] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 816.816406][T15711] cdc_ncm 4-1:1.1: bind() failure [ 816.869860][T15711] usb 4-1: USB disconnect, device number 35 [ 818.376609][ T7095] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 818.636482][ T7095] usb 3-1: Using ep0 maxpacket: 32 [ 818.740309][ T7095] usb 3-1: unable to get BOS descriptor or descriptor too short [ 818.757779][ T7095] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 818.814816][ T7095] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 818.863012][ T7095] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.966467][ T7095] usb 3-1: Product: syz [ 818.996428][ T7095] usb 3-1: Manufacturer: syz [ 819.001098][ T7095] usb 3-1: SerialNumber: syz [ 819.329278][ T7095] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 819.390338][ T7095] usb 3-1: MIDIStreaming interface descriptor not found [ 819.716441][ T7095] usb 3-1: USB disconnect, device number 31 [ 820.545456][T20212] loop3: detected capacity change from 0 to 4096 [ 821.498809][T20225] loop1: detected capacity change from 0 to 64 [ 824.056166][T20253] loop0: detected capacity change from 0 to 4096 [ 824.099477][T20253] EXT4-fs (loop0): Test dummy encryption mode enabled [ 824.278374][T20253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.350305][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.475670][T20267] loop2: detected capacity change from 0 to 4096 [ 825.776509][T20267] ntfs3: loop2: Failed to initialize MFT zone (-22). [ 834.097125][T20302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6595'. [ 835.496976][T20320] usb usb7: check_ctrlrecip: process 20320 (syz.0.6604) requesting ep 01 but needs 81 [ 835.583542][T20320] usb usb7: usbfs: process 20320 (syz.0.6604) did not claim interface 0 before use [ 836.084293][T20325] loop2: detected capacity change from 0 to 4096 [ 836.131183][T20330] loop3: detected capacity change from 0 to 128 [ 836.268136][T20325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 836.281308][T20330] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 836.457872][T20330] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 836.778364][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.346888][T20338] UBIFS error (pid: 20338): cannot open "ubi0/file0", error -22 [ 839.974195][T20377] tmpfs: Bad value for 'mpol' [ 840.615362][T20387] SET target dimension over the limit! [ 840.842710][T20389] loop0: detected capacity change from 0 to 2048 [ 841.472190][T20389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 841.709175][T20389] ext4 filesystem being mounted at /1616/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 841.915062][T20389] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.6637: bg 0: block 345: padding at end of block bitmap is not set [ 842.514370][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.100938][T20440] loop0: detected capacity change from 0 to 256 [ 846.968781][T20468] loop2: detected capacity change from 0 to 24 [ 847.782150][T20476] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6672'. [ 848.017583][T20479] --map-set only usable from mangle table [ 848.346610][T20483] loop2: detected capacity change from 0 to 512 [ 848.450872][T20483] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 848.477505][T20483] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 848.477832][T20483] EXT4-fs (loop2): orphan cleanup on readonly fs [ 848.477852][T20483] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.6675: bad orphan inode 3 [ 848.493738][T20483] EXT4-fs (loop2): Remounting filesystem read-only [ 848.495088][T20483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 848.558221][T20487] netlink: 'syz.1.6676': attribute type 15 has an invalid length. [ 848.596618][T20483] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.6675: dx entry: limit 0 != root limit 125 [ 848.596745][T20483] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.6675: Corrupt directory, running e2fsck is recommended [ 848.683660][T20489] netlink: 'syz.0.6677': attribute type 2 has an invalid length. [ 848.683684][T20489] netlink: 119 bytes leftover after parsing attributes in process `syz.0.6677'. [ 848.828578][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 852.660987][T20546] loop3: detected capacity change from 0 to 256 [ 853.156496][T20551] comedi: valid board names for 8255 driver are: [ 853.198859][T20551] 8255 [ 853.287287][T20551] comedi: valid board names for vmk80xx driver are: [ 853.293944][T20551] vmk80xx [ 853.401440][T20551] comedi: valid board names for usbduxsigma driver are: [ 853.749441][T20551] usbduxsigma [ 854.156777][T20551] comedi: valid board names for usbduxfast driver are: [ 854.163747][T20551] usbduxfast [ 854.230940][T20551] comedi: valid board names for usbdux driver are: [ 854.286388][T20551] usbdux [ 854.289407][T20551] comedi: valid board names for ni6501 driver are: [ 854.295942][T20551] ni6501 [ 854.458798][T20551] comedi: valid board names for dt9812 driver are: [ 854.465396][T20551] dt9812 [ 854.506435][T20551] comedi: valid board names for ni_labpc_cs driver are: [ 854.538701][T20551] ni_labpc_cs [ 854.542147][T20551] comedi: valid board names for ni_daq_700 driver are: [ 854.554740][T20559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6705'. [ 854.596515][T20551] ni_daq_700 [ 854.599867][T20551] comedi: valid board names for labpc_pci driver are: [ 854.656412][T20551] labpc_pci [ 854.659769][T20551] comedi: valid board names for adl_pci9118 driver are: [ 854.834209][T20551] pci9118dg [ 854.865368][T20551] pci9118hg [ 854.975131][T20551] pci9118hr [ 854.979128][T20551] comedi: valid board names for 8255_pci driver are: [ 855.024564][T20551] 8255_pci [ 855.146422][T20551] comedi: valid board names for s526 driver are: [ 855.152915][T20551] s526 [ 855.155708][T20551] comedi: valid board names for multiq3 driver are: [ 855.256547][T20551] multiq3 [ 855.259734][T20551] comedi: valid board names for pcmuio driver are: [ 855.266255][T20551] pcmuio48 [ 855.376887][T20551] pcmuio96 [ 855.380084][T20551] comedi: valid board names for pcmmio driver are: [ 855.476421][T20551] pcmmio [ 855.479449][T20551] comedi: valid board names for pcmda12 driver are: [ 855.486068][T20551] pcmda12 [ 855.566600][T20551] comedi: valid board names for pcmad driver are: [ 855.573089][T20551] pcmad12 [ 855.637082][T20573] netlink: 888 bytes leftover after parsing attributes in process `syz.2.6712'. [ 855.646909][T20551] pcmad16 [ 855.649988][T20551] comedi: valid board names for ni_labpc driver are: [ 855.692375][T20551] lab-pc-1200 [ 855.746424][T20551] lab-pc-1200ai [ 855.750046][T20551] lab-pc+ [ 855.753105][T20551] comedi: valid board names for atmio16 driver are: [ 855.821106][T20551] atmio16 [ 855.824204][T20551] atmio16d [ 855.986604][T20551] comedi: valid board names for ni_at_ao driver are: [ 855.993359][T20551] at-ao-6 [ 856.077554][T20551] at-ao-10 [ 856.087281][T20551] comedi: valid board names for ni_at_a2150 driver are: [ 856.094270][T20551] ni_at_a2150 [ 856.136441][T20551] comedi: valid board names for adq12b driver are: [ 856.169471][T20551] adq12b [ 856.189656][T20551] comedi: valid board names for mpc624 driver are: [ 856.266529][T20551] mpc624 [ 856.287268][T20551] comedi: valid board names for c6xdigio driver are: [ 856.327350][T20551] c6xdigio [ 856.351434][T20551] comedi: valid board names for aio_iiro_16 driver are: [ 856.506789][T20551] aio_iiro_16 [ 856.516650][T20551] comedi: valid board names for aio_aio12_8 driver are: [ 856.596789][T20551] aio_aio12_8 [ 856.607003][T20551] aio_ai12_8 [ 856.626418][T20551] aio_ao12_4 [ 856.649248][T20551] comedi: valid board names for fl512 driver are: [ 856.797046][T20551] fl512 [ 856.799984][T20551] comedi: valid board names for dmm32at driver are: [ 856.836446][T20551] dmm32at [ 856.839945][T20551] comedi: valid board names for dt282x driver are: [ 856.873748][T20551] dt2821 [ 856.883816][T20551] dt2821-f [ 856.887518][T20551] dt2821-g [ 856.893874][T20551] dt2823 [ 856.916509][T20551] dt2824-pgh [ 856.942496][T20551] dt2824-pgl [ 856.982167][T20551] dt2825 [ 856.996494][T20551] dt2827 [ 857.012576][T20551] dt2828 [ 857.080122][T20551] dt2829 [ 857.094480][T20551] dt21-ez [ 857.109587][T20551] dt23-ez [ 857.116403][T20551] dt24-ez [ 857.130920][T20551] dt24-ez-pgl [ 857.154691][T20551] comedi: valid board names for dt2817 driver are: [ 857.176372][T20592] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 857.194511][T20551] dt2817 [ 857.296412][T20551] comedi: valid board names for dt2815 driver are: [ 857.333047][T20551] dt2815 [ 857.350776][T20551] comedi: valid board names for dt2814 driver are: [ 857.408564][T20551] dt2814 [ 857.411583][T20551] comedi: valid board names for dt2811 driver are: [ 857.436393][T20551] dt2811-pgh [ 857.439952][T20551] dt2811-pgl [ 857.453406][T20551] comedi: valid board names for dt2801 driver are: [ 857.511202][T20551] dt2801 [ 857.536516][T20551] comedi: valid board names for das6402 driver are: [ 857.634874][T20551] das6402-12 [ 857.650728][T20551] das6402-16 [ 857.657278][T20588] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 857.666995][T20596] loop2: detected capacity change from 0 to 64 [ 857.738589][T20551] comedi: valid board names for das1800 driver are: [ 857.761153][T20551] das-1701st [ 857.764609][T20551] das-1701st-da [ 857.776410][T20551] das-1702st [ 857.786742][T20551] das-1702st-da [ 857.808802][T20551] das-1702hr [ 857.837954][T20551] das-1702hr-da [ 857.878641][T20551] das-1701ao [ 857.906568][T20551] das-1702ao [ 857.930106][T20551] das-1801st [ 857.950326][T20551] das-1801st-da [ 857.966202][T20551] das-1802st [ 857.987067][T20551] das-1802st-da [ 857.990683][T20551] das-1802hr [ 857.994008][T20551] das-1802hr-da [ 858.041104][T20551] das-1801hc [ 858.044516][T20551] das-1802hc [ 858.080711][T20551] das-1801ao [ 858.084078][T20551] das-1802ao [ 858.116818][T20551] comedi: valid board names for das800 driver are: [ 858.123400][T20551] das-800 [ 858.141921][T20551] cio-das800 [ 858.145278][T20551] das-801 [ 858.306425][T20551] cio-das801 [ 858.309813][T20551] das-802 [ 858.312887][T20551] cio-das802 [ 858.316212][T20551] cio-das802/16 [ 858.396357][T20551] comedi: valid board names for isa-das08 driver are: [ 858.403291][T20551] isa-das08 [ 858.472518][T20602] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6726'. [ 858.486358][T20551] das08-pgm [ 858.489629][T20551] das08-pgh [ 858.492855][T20551] das08-pgl [ 858.496080][T20551] das08-aoh [ 858.556351][T20551] das08-aol [ 858.559625][T20551] das08-aom [ 858.593402][T20551] das08/jr-ao [ 858.616372][T20551] das08jr-16-ao [ 858.656352][T20551] pc104-das08 [ 858.659806][T20551] das08jr/16 [ 858.663134][T20551] comedi: valid board names for das16m1 driver are: [ 858.816612][T20551] das16m1 [ 858.819739][T20551] comedi: valid board names for dac02 driver are: [ 858.826183][T20551] dac02 [ 858.906350][T20551] comedi: valid board names for rti802 driver are: [ 858.913039][T20551] rti802 [ 858.973297][T20551] comedi: valid board names for rti800 driver are: [ 858.981037][T20610] netlink: 'syz.1.6729': attribute type 12 has an invalid length. [ 859.007460][T20551] rti800 [ 859.010494][T20551] rti815 [ 859.038792][T20551] comedi: valid board names for pcm3724 driver are: [ 859.045473][T20551] pcm3724 [ 859.108076][T20551] comedi: valid board names for pcl818 driver are: [ 859.166768][T20551] pcl818l [ 859.170151][T20610] bond3: option primary_reselect: invalid value (255) [ 859.196638][T20551] pcl818h [ 859.203223][T20551] pcl818hd [ 859.268656][T20551] pcl818hg [ 859.289265][T20610] bond3 (unregistering): Released all slaves [ 859.302030][T20551] pcl818 [ 859.379019][T20551] pcl718 [ 859.387528][T20551] pcm3718 [ 859.397200][T20551] comedi: valid board names for pcl816 driver are: [ 859.496349][T20551] pcl816 [ 859.501872][T20551] pcl814b [ 859.531044][T20551] comedi: valid board names for pcl812 driver are: [ 859.559581][T20551] pcl812 [ 859.580639][T20551] pcl812pg [ 859.603564][T20551] acl8112pg [ 859.632754][T20551] acl8112dg [ 859.688918][T20551] acl8112hg [ 859.692282][T20551] a821pgl [ 859.695326][T20551] a821pglnda [ 859.777057][T20551] a821pgh [ 859.780159][T20551] a822pgl [ 859.783214][T20551] a822pgh [ 859.786277][T20551] a823pgl [ 859.872838][T20551] a823pgh [ 859.875946][T20551] pcl813 [ 859.886346][T20551] pcl813b [ 859.889405][T20551] acl8113 [ 859.892448][T20551] iso813 [ 859.895411][T20551] acl8216 [ 859.939250][T20551] a826pg [ 859.947514][T20618] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~¢)–„VÌ' [ 859.966373][T20551] comedi: valid board names for pcl730 driver are: [ 859.972925][T20551] pcl730 [ 859.975900][T20551] iso730 [ 859.996405][T20618] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT0p³Áúc©' [ 860.004807][T20618] ALSA: mixer_oss: invalid OSS volume 'g›IÓÒš¼ò"Í4¨×-Z›' [ 860.016470][T20551] acl7130 [ 860.019579][T20551] pcm3730 [ 860.056163][T20551] pcl725 [ 860.086408][T20551] p8r8dio [ 860.089507][T20551] acl7225b [ 860.092663][T20551] p16r16dio [ 860.095884][T20551] pcl733 [ 860.127300][T20618] ALSA: mixer_oss: invalid OSS volume 'eQCÈ¡*«±§qµpA˜ÚœøÄe ¦TÒú|Kˆ' [ 860.135626][T20618] ALSA: mixer_oss: invalid OSS volume ':ÀaøËz’´Äã]¶q³°e£X×fb]݆›BäÜ.' [ 860.173889][T20551] pcl734 [ 860.188179][T20551] opmm-1616-xt [ 860.191701][T20551] pearl-mm-p [ 860.195036][T20551] ir104-pbf [ 860.204999][T20618] ALSA: mixer_oss: invalid OSS volume '¯Þj|‡ÓâÚÕq⩃˚[Òw3ù^.¸Œî×’ø' [ 860.230200][T20551] comedi: valid board names for pcl726 driver are: [ 860.237327][T20618] ALSA: mixer_oss: invalid OSS volume 'Ü"PÞ¸àøÛœåÂÏo[ç8>ú7|¤YMeÃp»ñq' [ 860.245729][T20618] ALSA: mixer_oss: invalid OSS volume '¨ÿwI þ×·Ë#Þt\ÞW˜,ãbP=&ež' [ 860.263828][T20551] pcl726 [ 860.286973][T20551] pcl727 [ 860.289977][T20551] pcl728 [ 860.292951][T20551] acl6126 [ 860.296003][T20551] acl6128 [ 860.324037][T20618] ALSA: mixer_oss: invalid OSS volume ']÷“á´Õz‘a›-¯!)ŸÙüúÏ»à²vC¤YpsÆÚ' [ 860.336376][T20551] comedi: valid board names for pcl724 driver are: [ 860.342963][T20551] pcl724 [ 860.345951][T20551] pcl722 [ 860.370995][T20618] ALSA: mixer_oss: invalid OSS volume 'L¹Eá]DþÒxtÎéÝ‚OY3f£¸k$T ÓÝ"' [ 860.426456][T20551] pcl731 [ 860.429487][T20551] acl7122 [ 860.432556][T20551] acl7124 [ 860.435609][T20551] pet48dio [ 860.439581][T20618] ALSA: mixer_oss: invalid OSS volume 'î[' [ 860.445610][T20618] ALSA: mixer_oss: invalid OSS volume '‡¾ö3ÍÉûA14IN—+|¦\' [ 860.495981][T20551] pcmio48 [ 860.499875][T20618] ALSA: mixer_oss: invalid OSS volume '·$ 64) [ 871.847315][T20727] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 871.912022][T20750] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 871.922920][T17532] usb 1-1: Using ep0 maxpacket: 8 [ 871.948420][T20727] F2FS-fs (loop3): invalid crc value [ 871.986562][T17532] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 872.004750][T20727] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 872.037749][T17532] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 872.145531][T20747] NILFS error (device loop2): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 872.246559][T17532] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 872.276591][T17532] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 872.296508][T20747] Remounting filesystem read-only [ 872.411614][T17532] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 872.526756][T17532] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 872.535882][T17532] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.703952][T17532] usb 1-1: config 0 descriptor?? [ 872.771270][T20745] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 873.978667][T20764] loop1: detected capacity change from 0 to 4096 [ 874.086813][T20764] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 874.398940][ T5783] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 874.417728][T15711] usb 1-1: USB disconnect, device number 33 [ 875.286775][T20764] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 875.586916][T20764] ntfs3: loop1: Failed to load $Extend (-22). [ 875.593455][T20764] ntfs3: loop1: Failed to initialize $Extend. [ 878.353955][T20818] loop0: detected capacity change from 0 to 2048 [ 878.704486][T20818] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 879.056358][ T5776] UDF-fs: error (device loop0): udf_read_inode: (ino 1440) failed !bh [ 879.107298][ T5776] UDF-fs: error (device loop0): udf_read_inode: (ino 1440) failed !bh [ 879.188909][T20829] loop2: detected capacity change from 0 to 64 [ 879.754511][T20835] netlink: 'syz.1.6831': attribute type 1 has an invalid length. [ 880.006615][T20835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6831'. [ 880.107136][T20837] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 880.746569][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.338580][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.768957][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.593878][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 882.689022][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.916427][ T5783] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 884.306445][ T7150] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 884.337627][T20758] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 884.349191][T20758] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 884.358135][T20873] loop1: detected capacity change from 0 to 2048 [ 884.439345][T20758] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 884.552450][T20873] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 884.566849][T20758] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 884.574636][T20758] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 884.582489][T20758] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 884.706541][ T7150] usb 4-1: config index 0 descriptor too short (expected 57635, got 36) [ 884.856382][ T7150] usb 4-1: config 1 has an invalid interface number: 188 but max is 0 [ 884.864632][ T7150] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 885.076344][ T7150] usb 4-1: config 1 has no interface number 0 [ 885.082577][ T7150] usb 4-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 885.186495][ T7150] usb 4-1: config 1 interface 188 has no altsetting 0 [ 885.252669][ T7150] usb 4-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 885.444839][T20883] loop1: detected capacity change from 0 to 64 [ 885.647470][ T7150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.655628][ T7150] usb 4-1: Product: syz [ 885.886347][ T7150] usb 4-1: Manufacturer: syz [ 885.912159][ T7150] usb 4-1: SerialNumber: syz [ 886.766781][ T5783] Bluetooth: hci0: command tx timeout [ 886.921868][ T7150] usb 4-1: unknown interface protocol 0xc1, assuming v1 [ 886.956348][ T7150] usb 4-1: 188:0 : does not exist [ 887.076516][ T7150] usb 4-1: USB disconnect, device number 36 [ 887.750107][ T6452] udevd[6452]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 888.902612][ T5783] Bluetooth: hci0: command tx timeout [ 890.476521][T20907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6861'. [ 890.485549][T20907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6861'. [ 890.715146][T20875] wg1 speed is unknown, defaulting to 1000 [ 890.926500][ T5783] Bluetooth: hci0: command tx timeout [ 892.366500][T15711] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 892.717321][T15711] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 892.760614][T15711] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 892.826363][T15711] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 892.916631][T15711] usb 4-1: config 1 has no interface number 1 [ 892.943496][T15711] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 893.016436][ T5783] Bluetooth: hci0: command tx timeout [ 893.036459][T15711] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 893.122655][T15711] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 893.161941][T15711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.376526][T20932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6869'. [ 894.336353][T15711] usb 4-1: Product: syz [ 894.340608][T15711] usb 4-1: Manufacturer: syz [ 894.345240][T15711] usb 4-1: SerialNumber: syz [ 894.676639][T15711] usb 4-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 894.684146][T15711] usb 4-1: MIDIStreaming interface descriptor not found [ 894.720487][T20875] C speed is unknown, defaulting to 1000 [ 894.906451][T13715] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 894.976393][T15711] usb 4-1: USB disconnect, device number 37 [ 895.127015][T13715] usb 3-1: Using ep0 maxpacket: 16 [ 895.169303][T20951] loop1: detected capacity change from 0 to 1024 [ 895.233087][T13715] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 895.428741][T13715] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 895.433077][T20951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 895.450939][T13715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.486344][T13715] usb 3-1: Product: syz [ 895.596342][T13715] usb 3-1: Manufacturer: syz [ 895.601432][T13715] usb 3-1: SerialNumber: syz [ 896.008610][T13715] r8152-cfgselector 3-1: config 0 descriptor?? [ 896.526551][T13715] r8152-cfgselector 3-1: Unknown version 0x0000 [ 896.594744][T13715] r8152-cfgselector 3-1: USB disconnect, device number 34 [ 896.877978][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.068959][T21002] loop1: detected capacity change from 0 to 64 [ 900.090658][T20995] loop2: detected capacity change from 0 to 4096 [ 900.169259][T20995] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 900.674215][T20875] chnl_net:caif_netlink_parms(): no params data found [ 900.926577][T20995] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 900.979613][T20995] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 901.635148][T21019] loop1: detected capacity change from 0 to 256 [ 902.532529][T20875] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.637079][T20875] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.644678][T20875] bridge_slave_0: entered allmulticast mode [ 902.758866][T20875] bridge_slave_0: entered promiscuous mode [ 902.824274][T21031] ipt_ECN: cannot use operation on non-tcp rule [ 902.849412][T20875] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.930395][T20875] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.046851][T21029] loop2: detected capacity change from 0 to 256 [ 903.077002][T20875] bridge_slave_1: entered allmulticast mode [ 903.086968][T21029] exfat: Deprecated parameter 'utf8' [ 903.092304][T21029] exfat: Deprecated parameter 'utf8' [ 903.141736][T20875] bridge_slave_1: entered promiscuous mode [ 903.546549][T21029] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 904.796585][T21051] loop2: detected capacity change from 0 to 16 [ 904.804199][T21051] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 905.105885][T20875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.256589][T20875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.337500][T20875] team0: Port device team_slave_0 added [ 906.381355][T21063] loop1: detected capacity change from 0 to 2048 [ 906.538142][ T59] hsr_slave_0: left promiscuous mode [ 906.586127][ T59] hsr_slave_1: left promiscuous mode [ 906.633466][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 906.683939][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 906.722478][T21063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 906.812875][ T59] bridge_slave_1: left allmulticast mode [ 906.837957][ T59] bridge_slave_1: left promiscuous mode [ 906.864963][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.886498][T21063] ext4 filesystem being mounted at /1711/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 906.980961][ T59] bridge_slave_0: left allmulticast mode [ 907.016073][ T59] bridge_slave_0: left promiscuous mode [ 907.093428][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.554127][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.142175][ T59] pimreg (unregistering): left allmulticast mode [ 909.205208][ T59] bond2 (unregistering): Released all slaves [ 909.885217][ T59] bond1 (unregistering): Released all slaves [ 910.506264][ T59] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 914.541549][ T59] team0 (unregistering): Port device team_slave_1 removed [ 914.862935][ T59] team0 (unregistering): Port device team_slave_0 removed [ 915.270577][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 915.620481][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 916.879286][ T1002] smc: removing ib device syz2 [ 919.360110][ T59] bond0 (unregistering): Released all slaves [ 919.988309][ T12] smc: removing ib device sz1 [ 920.041953][T20875] team0: Port device team_slave_1 added [ 920.326997][T21065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.361632][T21065] 8021q: adding VLAN 0 to HW filter on device team0 [ 920.436566][T21065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 920.546550][T21068] netlink: 'syz.2.6916': attribute type 21 has an invalid length. [ 920.554522][T21068] IPv6: NLM_F_CREATE should be specified when creating new route [ 922.427187][T20875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 922.445468][T20875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.574564][T20875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.817314][T20875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.824334][T20875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 924.256323][T20875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.605744][ T5783] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 925.083212][T21125] loop2: detected capacity change from 0 to 16 [ 925.171706][T21125] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 927.463268][T20875] hsr_slave_0: entered promiscuous mode [ 927.677520][T21151] netlink: 424 bytes leftover after parsing attributes in process `syz.3.6947'. [ 927.696384][T21151] netlink: 'syz.3.6947': attribute type 1 has an invalid length. [ 927.847853][T20875] hsr_slave_1: entered promiscuous mode [ 927.895214][T20875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 927.922876][T20875] Cannot create hsr debugfs directory [ 928.570435][ T59] IPVS: stop unused estimator thread 0... [ 929.548557][T21164] IPv6: sit2: Disabled Multicast RS [ 930.781176][T20875] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 930.871786][T20875] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 931.006532][T20875] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 931.133357][T20875] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 931.733852][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.162501][T21193] loop3: detected capacity change from 0 to 64 [ 932.264137][T20875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 932.599115][T20875] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.655554][T21088] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.664475][T21088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.786575][T21088] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.793885][T21088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 933.206134][T21199] loop3: detected capacity change from 0 to 8 [ 933.536056][T20875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 935.372691][T21219] Unsupported ieee802154 address type: 0 [ 936.098763][T20875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 938.572970][T21226] loop2: detected capacity change from 0 to 32768 [ 938.885656][T20875] veth0_vlan: entered promiscuous mode [ 938.928007][T21226] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 938.928516][T21226] (syz.2.6972,21226,1):ocfs2_initialize_super:2283 ERROR: status = -12 [ 939.053875][T21226] (syz.2.6972,21226,1):ocfs2_fill_super:1178 ERROR: status = -12 [ 939.101162][T20875] veth1_vlan: entered promiscuous mode [ 939.620847][T21265] loop1: detected capacity change from 0 to 256 [ 939.776620][T20875] veth0_macvtap: entered promiscuous mode [ 939.915040][T20875] veth1_macvtap: entered promiscuous mode [ 940.210454][T21270] loop2: detected capacity change from 0 to 2048 [ 940.245722][T20875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 940.426313][T21270] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 940.477856][T20875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 940.691782][T21274] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 940.702907][T21270] syz.2.6985: attempt to access beyond end of device [ 940.702907][T21270] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 940.773713][T20875] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.862162][T20875] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.971771][T20875] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.053676][T20875] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.099208][T21270] syz.2.6985: attempt to access beyond end of device [ 941.099208][T21270] loop2: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 941.272721][T21270] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3) [ 945.147885][T20758] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 945.161539][T20758] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 945.176638][T20758] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 945.185145][T20758] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 945.193037][T20758] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 945.208828][T20758] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 947.246520][T20758] Bluetooth: hci4: command tx timeout [ 948.458473][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.326388][T20758] Bluetooth: hci4: command tx timeout [ 949.641067][T21353] loop1: detected capacity change from 0 to 512 [ 949.786728][T21353] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 950.197175][T21349] loop3: detected capacity change from 0 to 32768 [ 950.246553][T21349] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.7013 (21349) [ 950.667627][T21353] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 950.678111][T21349] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 950.688587][T21353] System zones: 1-12 [ 950.744240][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.776658][T21349] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 950.801905][T21357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7017'. [ 950.807243][T21353] EXT4-fs (loop1): orphan cleanup on readonly fs [ 950.815456][T21349] BTRFS info (device loop3): using free space tree [ 950.869258][T21353] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.7014: invalid indirect mapped block 12 (level 1) [ 951.054539][T21353] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.7014: invalid indirect mapped block 2 (level 2) [ 951.276595][T21349] BTRFS info (device loop3): enabling ssd optimizations [ 951.326409][T21349] BTRFS info (device loop3): auto enabling async discard [ 951.423577][T20758] Bluetooth: hci4: command tx timeout [ 951.569650][T21353] EXT4-fs (loop1): 1 truncate cleaned up [ 951.597246][T21353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 952.016892][ T5778] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 952.151736][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.448719][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 953.487668][T20758] Bluetooth: hci4: command tx timeout [ 953.527237][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.291621][ T7095] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 954.622772][ T7095] usb 2-1: Using ep0 maxpacket: 16 [ 955.000198][ T7095] usb 2-1: unable to get BOS descriptor or descriptor too short [ 955.066841][ T7095] usb 2-1: config 16 has an invalid interface number: 44 but max is 0 [ 955.085489][ T7095] usb 2-1: config 16 has no interface number 0 [ 955.104789][ T7095] usb 2-1: config 16 interface 44 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 32 [ 955.196158][ T7095] usb 2-1: config 16 interface 44 has no altsetting 0 [ 955.379731][ T7095] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64 [ 955.576361][ T7095] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.584438][ T7095] usb 2-1: Product: syz [ 955.970864][T21410] loop3: detected capacity change from 0 to 512 [ 955.993840][T21313] chnl_net:caif_netlink_parms(): no params data found [ 956.087979][T21410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 956.166904][ T7095] usb 2-1: Manufacturer: syz [ 956.171631][ T7095] usb 2-1: SerialNumber: syz [ 956.250101][T21410] ext4 filesystem being mounted at /1801/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 956.261229][T21391] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 956.417048][T21410] EXT4-fs error (device loop3): ext4_xattr_block_list:766: inode #12: comm syz.3.7030: corrupted xattr block 6: invalid header [ 957.008743][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.200241][ T7095] cypress_cy7c63 2-1:16.44: Cypress CY7C63xxx device now attached [ 957.240332][ T7095] usb 2-1: USB disconnect, device number 34 [ 957.268020][ T7095] cypress_cy7c63 2-1:16.44: Cypress CY7C63xxx device now disconnected [ 958.963491][T21313] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.032318][T21313] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.089662][T21313] bridge_slave_0: entered allmulticast mode [ 959.145652][T21441] loop2: detected capacity change from 0 to 1024 [ 959.206726][T21441] syz.2.7039: attempt to access beyond end of device [ 959.206726][T21441] loop2: rw=0, sector=196608, nr_sectors = 8 limit=1024 [ 959.246450][T21313] bridge_slave_0: entered promiscuous mode [ 959.274058][T21441] Buffer I/O error on dev loop2, logical block 24576, async page read [ 959.292515][T21313] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.320370][T21441] hfsplus: failed to load extents file [ 959.329363][T21313] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.521041][T21313] bridge_slave_1: entered allmulticast mode [ 959.572628][T21313] bridge_slave_1: entered promiscuous mode [ 960.714648][T21450] netlink: 'syz.2.7042': attribute type 6 has an invalid length. [ 961.255199][T21313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.369105][T21313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.146876][T21313] team0: Port device team_slave_0 added [ 963.170143][T21482] loop2: detected capacity change from 0 to 64 [ 963.209699][T21313] team0: Port device team_slave_1 added [ 963.389898][T21475] loop1: detected capacity change from 0 to 4096 [ 964.186478][T21475] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 964.206955][T21488] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 964.213696][T21313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.318384][T21313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.536703][T21313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.628209][T21475] ntfs3: loop1: Failed to load $Extend (-22). [ 964.676181][T21475] ntfs3: loop1: Failed to initialize $Extend. [ 965.076241][T21493] bridge2: entered allmulticast mode [ 965.138283][T21313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.145300][T21313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.406450][T21313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.752818][T21499] loop2: detected capacity change from 0 to 4096 [ 966.363543][T21499] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 966.536367][T21499] ntfs3: loop2: Failed to load $Extend (-22). [ 966.542531][T21499] ntfs3: loop2: Failed to initialize $Extend. [ 967.412144][T21512] loop3: detected capacity change from 0 to 1024 [ 967.558830][T21313] hsr_slave_0: entered promiscuous mode [ 967.778213][T21512] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 967.879541][T21313] hsr_slave_1: entered promiscuous mode [ 967.996621][T21313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 968.004260][T21313] Cannot create hsr debugfs directory [ 968.399218][T21517] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7067'. [ 968.442203][T21517] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 968.486628][T21517] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 969.178024][T21523] loop1: detected capacity change from 0 to 8 [ 969.406797][T21523] SQUASHFS error: zstd decompression error: 10 [ 969.413928][T21523] SQUASHFS error: zstd decompression failed, data probably corrupt [ 969.520344][T21523] SQUASHFS error: Failed to read block 0x62b: -5 [ 969.619288][T21523] SQUASHFS error: Unable to read metadata cache entry [629] [ 969.736392][T21523] SQUASHFS error: Unable to read directory block [629:ff26] [ 970.138848][T21515] loop2: detected capacity change from 0 to 32768 [ 970.802833][T21531] netlink: 'syz.1.7071': attribute type 21 has an invalid length. [ 970.862614][T21531] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7071'. [ 971.415035][ T59] hsr_slave_0: left promiscuous mode [ 971.467264][ T59] hsr_slave_1: left promiscuous mode [ 971.549543][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.616957][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.740159][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.874109][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 972.328743][ T59] bridge_slave_1: left allmulticast mode [ 972.334747][ T59] bridge_slave_1: left promiscuous mode [ 972.422712][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.613329][ T59] bridge_slave_0: left allmulticast mode [ 972.689217][ T59] bridge_slave_0: left promiscuous mode [ 972.695753][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.591759][ T59] veth1_macvtap: left promiscuous mode [ 973.734443][T21571] loop2: detected capacity change from 0 to 512 [ 973.741804][ T59] veth0_macvtap: left promiscuous mode [ 973.800179][ T59] veth1_vlan: left promiscuous mode [ 973.858899][ T59] veth0_vlan: left promiscuous mode [ 974.168393][T21571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 974.286760][T21571] ext4 filesystem being mounted at /1838/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 974.818906][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.672896][T21591] loop3: detected capacity change from 0 to 512 [ 978.046433][T21591] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.7093: bg 0: block 5: invalid block bitmap [ 978.169328][T21591] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 978.245198][T21591] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.7093: invalid indirect mapped block 3 (level 2) [ 978.447118][T21591] EXT4-fs (loop3): 1 orphan inode deleted [ 978.452918][T21591] EXT4-fs (loop3): 1 truncate cleaned up [ 978.587692][T21591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 979.544181][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.705810][T21637] loop3: detected capacity change from 0 to 1024 [ 985.939774][T21639] xt_TCPMSS: Only works on TCP SYN packets [ 989.260357][ T59] team0 (unregistering): Port device team_slave_1 removed [ 989.495497][T21649] loop2: detected capacity change from 0 to 32768 [ 989.656989][T21649] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 989.824112][ T59] team0 (unregistering): Port device team_slave_0 removed [ 990.525084][T21087] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 990.760929][T21660] loop2: detected capacity change from 0 to 4096 [ 990.786795][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.906517][T21660] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 991.497246][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 991.657207][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 991.668650][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 991.676856][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 991.684907][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 991.694081][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 991.701664][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 991.967350][T21660] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 992.006585][T21660] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 992.021247][T21658] loop3: detected capacity change from 0 to 32768 [ 992.262696][T21658] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop3": -EINTR [ 993.174991][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.900795][T20758] Bluetooth: hci0: command tx timeout [ 994.360424][T21671] loop3: detected capacity change from 0 to 164 [ 994.636482][T21671] Unsupported NM flag settings (8) [ 994.641809][T21671] Unsupported NM flag settings (8) [ 994.744722][T21671] rock: directory entry would overflow storage [ 994.826378][T21671] rock: sig=0x4f50, size=4, remaining=3 [ 994.832032][T21671] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 995.966565][T20758] Bluetooth: hci0: command tx timeout [ 996.432524][ T28] audit: type=1326 audit(1787496803.148:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21685 comm="syz.2.7136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ff9e0d9 code=0x7ffc0000 [ 996.556317][ T28] audit: type=1326 audit(1787496803.148:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21685 comm="syz.2.7136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ff9e0d9 code=0x7ffc0000 [ 996.849584][ T28] audit: type=1326 audit(1787496803.208:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21685 comm="syz.2.7136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f238ff9e0d9 code=0x7ffc0000 [ 997.116356][ T28] audit: type=1326 audit(1787496803.208:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21685 comm="syz.2.7136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ff9e0d9 code=0x7ffc0000 [ 997.286338][ T28] audit: type=1326 audit(1787496803.208:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21685 comm="syz.2.7136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ff9e0d9 code=0x7ffc0000 [ 998.056506][T20758] Bluetooth: hci0: command tx timeout [ 998.314963][ T59] bond0 (unregistering): Released all slaves [ 1000.136579][T20758] Bluetooth: hci0: command tx timeout [ 1000.638935][T21717] loop3: detected capacity change from 0 to 1024 [ 1000.786467][T13715] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1001.096373][T13715] usb 3-1: Using ep0 maxpacket: 32 [ 1001.127696][T13715] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1001.139629][T13715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.197581][T13715] usb 3-1: config 0 descriptor?? [ 1001.248943][T13715] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1002.136363][T13715] gspca_sq930x: ucbus_write failed -71 [ 1002.426385][T13715] sq930x: probe of 3-1:0.0 failed with error -71 [ 1002.491469][T13715] usb 3-1: USB disconnect, device number 35 [ 1004.068545][T21731] loop2: detected capacity change from 0 to 1024 [ 1004.157432][T21731] EXT4-fs: inline encryption not supported [ 1004.302469][T21731] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 1004.302469][T21731] [ 1006.577182][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1006.590775][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1006.599645][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1006.608721][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1006.617061][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1006.625338][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1007.408231][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 59305 - 0 [ 1007.538465][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 37998 - 0 [ 1007.606463][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 1007.817121][T21760] netlink: 'syz.2.7162': attribute type 2 has an invalid length. [ 1008.581180][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 59305 - 0 [ 1008.686453][ T5783] Bluetooth: hci2: command tx timeout [ 1008.763604][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 37998 - 0 [ 1008.783197][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 1009.011100][T21764] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7163'. [ 1009.052898][T21747] loop3: detected capacity change from 0 to 32768 [ 1009.171183][T21764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1010.005169][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 59305 - 0 [ 1010.116632][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 37998 - 0 [ 1010.206337][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 1010.578071][T21771] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1010.776423][ T5783] Bluetooth: hci2: command tx timeout [ 1011.782343][T21767] loop2: detected capacity change from 0 to 32768 [ 1011.896990][T21767] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.7164 (21767) [ 1012.008549][T21661] chnl_net:caif_netlink_parms(): no params data found [ 1012.180215][T21767] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1012.238426][T21767] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1012.276505][T21767] BTRFS info (device loop2): setting nodatasum [ 1012.286306][T21767] BTRFS info (device loop2): enabling auto defrag [ 1012.314814][T21767] BTRFS info (device loop2): disabling tree log [ 1012.345077][T21767] BTRFS info (device loop2): using free space tree [ 1012.562271][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 59305 - 0 [ 1012.616300][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 37998 - 0 [ 1012.662731][T21767] BTRFS info (device loop2): enabling ssd optimizations [ 1012.686283][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 1012.716620][T21767] BTRFS info (device loop2): auto enabling async discard [ 1012.876404][ T5783] Bluetooth: hci2: command tx timeout [ 1014.236780][ T5775] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1014.926356][ T5783] Bluetooth: hci2: command tx timeout [ 1015.246887][T21661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.254531][T21661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.328269][T21661] bridge_slave_0: entered allmulticast mode [ 1015.388517][T21661] bridge_slave_0: entered promiscuous mode [ 1015.420039][T21661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.507332][T21661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.514947][T21661] bridge_slave_1: entered allmulticast mode [ 1015.607519][T21661] bridge_slave_1: entered promiscuous mode [ 1016.356721][ T28] audit: type=1326 audit(1787496823.078:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21809 comm="syz.3.7173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5599e0d9 code=0x7ffc0000 [ 1016.445482][T21661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.571710][ T28] audit: type=1326 audit(1787496823.078:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21809 comm="syz.3.7173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5599e0d9 code=0x7ffc0000 [ 1016.606787][T21661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.885908][ T28] audit: type=1326 audit(1787496823.078:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21809 comm="syz.3.7173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5599e0d9 code=0x7ffc0000 [ 1017.163458][ T28] audit: type=1326 audit(1787496823.108:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21809 comm="syz.3.7173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f2b5599e0d9 code=0x7ffc0000 [ 1017.333752][ T28] audit: type=1326 audit(1787496823.108:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21809 comm="syz.3.7173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5599e0d9 code=0x7ffc0000 [ 1017.472966][ T28] audit: type=1326 audit(1787496823.108:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21809 comm="syz.3.7173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5599e0d9 code=0x7ffc0000 [ 1017.569982][ T28] audit: type=1326 audit(1787496823.108:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21809 comm="syz.3.7173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5599e0d9 code=0x7ffc0000 [ 1017.732725][ T28] audit: type=1326 audit(1787496823.108:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21809 comm="syz.3.7173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2b5599e0d9 code=0x7ffc0000 [ 1017.766529][ T7095] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1017.840713][ T28] audit: type=1326 audit(1787496823.108:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21809 comm="syz.3.7173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2b5599e0d9 code=0x7ffc0000 [ 1018.106512][ T7095] usb 4-1: Using ep0 maxpacket: 16 [ 1018.248240][ T7095] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 1018.305846][ T7095] usb 4-1: config 252 has no interface number 0 [ 1018.367270][ T7095] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1018.391711][ T7095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.443316][ T7095] usb 4-1: Product: syz [ 1018.556320][ T7095] usb 4-1: Manufacturer: syz [ 1018.561002][ T7095] usb 4-1: SerialNumber: syz [ 1019.022236][ T7095] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1019.098369][ T1133] usb 4-1: Failed to submit usb control message: -71 [ 1019.105853][ T1133] usb 4-1: unable to send the bmi data to the device: -71 [ 1019.296930][ T7095] usb 4-1: USB disconnect, device number 38 [ 1019.419160][ T1133] usb 4-1: unable to get target info from device [ 1019.425571][ T1133] usb 4-1: could not get target info (-71) [ 1019.536680][ T1133] usb 4-1: could not probe fw (-71) [ 1019.560546][T21661] team0: Port device team_slave_0 added [ 1020.393180][T21752] chnl_net:caif_netlink_parms(): no params data found [ 1020.575605][T21661] team0: Port device team_slave_1 added [ 1020.926202][T21841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7181'. [ 1021.667878][T21661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1021.674916][T21661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1021.916293][T21661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1021.991887][T21661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.035415][T21661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.106419][T21854] usb usb8: usbfs: process 21854 (syz.2.7186) did not claim interface 0 before use [ 1022.206289][T21661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.557772][T20948] IPVS: starting estimator thread 0... [ 1023.687445][T21871] IPVS: using max 18 ests per chain, 43200 per kthread [ 1024.225737][T21661] hsr_slave_0: entered promiscuous mode [ 1024.376935][T21661] hsr_slave_1: entered promiscuous mode [ 1024.448570][T21661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1024.486564][T21661] Cannot create hsr debugfs directory [ 1025.253862][T21752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.297304][T21752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.335029][T21752] bridge_slave_0: entered allmulticast mode [ 1025.394676][T21752] bridge_slave_0: entered promiscuous mode [ 1025.449759][T21752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.494445][T21752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.541128][T21752] bridge_slave_1: entered allmulticast mode [ 1025.584359][T21752] bridge_slave_1: entered promiscuous mode [ 1026.626552][T21886] netlink: 'syz.2.7195': attribute type 10 has an invalid length. [ 1026.663891][T21886] syz_tun: entered promiscuous mode [ 1026.705859][T21886] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1027.993906][T21752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.323573][T21752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.347012][T21752] team0: Port device team_slave_0 added [ 1029.618062][T21752] team0: Port device team_slave_1 added [ 1029.727515][T21924] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7205'. [ 1030.299053][T21752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.306075][T21752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1030.486520][T21752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.148087][T21752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.155110][T21752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.335014][T21752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1032.704347][T21953] loop3: detected capacity change from 0 to 764 [ 1032.955533][ T59] hsr_slave_0: left promiscuous mode [ 1033.016870][ T59] hsr_slave_1: left promiscuous mode [ 1033.079772][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1033.115020][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.151502][ T59] hsr0: left allmulticast mode [ 1033.178527][ T59] hsr0: left promiscuous mode [ 1033.204598][ T59] bridge0: port 3(hsr0) entered disabled state [ 1033.266950][ T59] bridge_slave_1: left allmulticast mode [ 1033.280740][ T59] bridge_slave_1: left promiscuous mode [ 1033.314523][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.389265][ T59] bridge_slave_0: left allmulticast mode [ 1033.421631][ T59] bridge_slave_0: left promiscuous mode [ 1033.442523][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.623809][T21959] ieee802154 phy1 wpan1: encryption failed: -90 [ 1033.784387][ T59] infiniband syz0: set down [ 1035.742407][ T59] bond2 (unregistering): Released all slaves [ 1035.875034][ T59] bond1 (unregistering): Released all slaves [ 1036.308734][ T59] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1037.313775][T21088] smc: removing ib device syz0 [ 1040.876701][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1041.262474][ T59] bond0 (unregistering): (slave 17ÿ): Releasing backup interface [ 1043.873226][ T59] bond0 (unregistering): Released all slaves [ 1044.444181][T21752] hsr_slave_0: entered promiscuous mode [ 1044.508218][T21752] hsr_slave_1: entered promiscuous mode [ 1044.527126][T21752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1044.534840][T21752] Cannot create hsr debugfs directory [ 1044.699619][T21955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7216'. [ 1044.747878][ T9] ================================================================== [ 1044.756208][ T9] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x180 [ 1044.765246][ T9] Read of size 8 at addr ffff88801e3fc210 by task kworker/0:1/9 [ 1044.772967][ T9] [ 1044.775400][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted syzkaller #0 [ 1044.782632][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1044.792717][ T9] Workqueue: events smc_ib_port_event_work [ 1044.798702][ T9] Call Trace: [ 1044.802049][ T9] [ 1044.805044][ T9] dump_stack_lvl+0x18c/0x250 [ 1044.809831][ T9] ? __lock_acquire+0x7d80/0x7d80 [ 1044.814938][ T9] ? show_regs_print_info+0x20/0x20 [ 1044.820187][ T9] ? load_image+0x420/0x420 [ 1044.824741][ T9] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1044.830297][ T9] ? __virt_addr_valid+0x10c/0x380 [ 1044.835470][ T9] ? __virt_addr_valid+0x10c/0x380 [ 1044.840614][ T9] ? __virt_addr_valid+0x10c/0x380 [ 1044.845772][ T9] ? __virt_addr_valid+0x10c/0x380 [ 1044.850970][ T9] print_report+0xa8/0x210 [ 1044.855430][ T9] ? __ethtool_get_link_ksettings+0x6e/0x180 [ 1044.861452][ T9] kasan_report+0x117/0x150 [ 1044.866039][ T9] ? __ethtool_get_link_ksettings+0x6e/0x180 [ 1044.872061][ T9] __ethtool_get_link_ksettings+0x6e/0x180 [ 1044.877904][ T9] ib_get_eth_speed+0x17d/0x7e0 [ 1044.882854][ T9] ? _ib_modify_qp+0xd00/0xd00 [ 1044.887657][ T9] ? do_raw_spin_unlock+0x121/0x230 [ 1044.892892][ T9] ? _raw_spin_unlock+0x28/0x40 [ 1044.897773][ T9] ? ib_device_get_netdev+0x155/0x3a0 [ 1044.903169][ T9] rxe_query_port+0x8d/0x2d0 [ 1044.907835][ T9] ib_query_port+0x165/0x820 [ 1044.912461][ T9] smc_ib_port_event_work+0x154/0x920 [ 1044.917896][ T9] ? __lock_acquire+0x7d80/0x7d80 [ 1044.922960][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 1044.928191][ T9] ? process_scheduled_works+0x975/0x1600 [ 1044.933950][ T9] ? process_scheduled_works+0x975/0x1600 [ 1044.939713][ T9] process_scheduled_works+0xa60/0x1600 [ 1044.945321][ T9] ? worker_attach_to_pool+0x370/0x370 [ 1044.950824][ T9] ? assign_work+0x3cc/0x5d0 [ 1044.955472][ T9] worker_thread+0xa5e/0xfe0 [ 1044.960109][ T9] ? _raw_spin_unlock+0x40/0x40 [ 1044.964990][ T9] ? __kthread_parkme+0x71/0x1c0 [ 1044.969965][ T9] kthread+0x2fa/0x390 [ 1044.974070][ T9] ? pr_cont_work+0x550/0x550 [ 1044.978816][ T9] ? kthread_blkcg+0xd0/0xd0 [ 1044.983448][ T9] ret_from_fork+0x48/0x80 [ 1044.987996][ T9] ? kthread_blkcg+0xd0/0xd0 [ 1044.992629][ T9] ret_from_fork_asm+0x11/0x20 [ 1044.997465][ T9] [ 1045.000565][ T9] [ 1045.002916][ T9] Allocated by task 5777: [ 1045.007323][ T9] kasan_set_track+0x4e/0x70 [ 1045.011940][ T9] __kasan_kmalloc+0x8f/0xa0 [ 1045.016562][ T9] __kmalloc_node+0xb6/0x240 [ 1045.021196][ T9] kvmalloc_node+0x70/0x180 [ 1045.025737][ T9] alloc_netdev_mqs+0x87/0x1040 [ 1045.030691][ T9] rtnl_create_link+0x310/0xd00 [ 1045.035672][ T9] rtnl_newlink+0x14ad/0x2170 [ 1045.040383][ T9] rtnetlink_rcv_msg+0x843/0xf90 [ 1045.045443][ T9] netlink_rcv_skb+0x235/0x4c0 [ 1045.050242][ T9] netlink_unicast+0x7b1/0x930 [ 1045.055123][ T9] netlink_sendmsg+0x8d0/0xbf0 [ 1045.059923][ T9] __sys_sendto+0x4a9/0x6b0 [ 1045.064504][ T9] __x64_sys_sendto+0xde/0xf0 [ 1045.069210][ T9] do_syscall_64+0x55/0xb0 [ 1045.073656][ T9] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1045.079684][ T9] [ 1045.082042][ T9] Freed by task 59: [ 1045.085863][ T9] kasan_set_track+0x4e/0x70 [ 1045.090532][ T9] kasan_save_free_info+0x28/0x40 [ 1045.095594][ T9] ____kasan_slab_free+0x126/0x1f0 [ 1045.100744][ T9] slab_free_freelist_hook+0x130/0x1a0 [ 1045.106233][ T9] __kmem_cache_free+0xba/0x1f0 [ 1045.111119][ T9] device_release+0xbc/0x1e0 [ 1045.115764][ T9] kobject_put+0x21b/0x450 [ 1045.120271][ T9] netdev_run_todo+0xcad/0xdb0 [ 1045.125069][ T9] default_device_exit_batch+0x967/0xa00 [ 1045.130747][ T9] cleanup_net+0x792/0xbb0 [ 1045.135209][ T9] process_scheduled_works+0xa60/0x1600 [ 1045.140789][ T9] worker_thread+0xa5e/0xfe0 [ 1045.145515][ T9] kthread+0x2fa/0x390 [ 1045.149628][ T9] ret_from_fork+0x48/0x80 [ 1045.154079][ T9] ret_from_fork_asm+0x11/0x20 [ 1045.158872][ T9] [ 1045.161232][ T9] The buggy address belongs to the object at ffff88801e3fc000 [ 1045.161232][ T9] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1045.175566][ T9] The buggy address is located 528 bytes inside of [ 1045.175566][ T9] freed 4096-byte region [ffff88801e3fc000, ffff88801e3fd000) [ 1045.189471][ T9] [ 1045.191819][ T9] The buggy address belongs to the physical page: [ 1045.198395][ T9] page:ffffea000078fe00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1e3f8 [ 1045.208582][ T9] head:ffffea000078fe00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1045.217547][ T9] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1045.225554][ T9] page_type: 0xffffffff() [ 1045.229926][ T9] raw: 00fff00000000840 ffff888017c4f500 dead000000000122 0000000000000000 [ 1045.238542][ T9] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 1045.247154][ T9] page dumped because: kasan: bad access detected [ 1045.253599][ T9] page_owner tracks the page as allocated [ 1045.259353][ T9] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5777, tgid 5777 (syz-executor), ts 86100345385, free_ts 86099171029 [ 1045.280758][ T9] post_alloc_hook+0x1c1/0x200 [ 1045.285583][ T9] get_page_from_freelist+0x2181/0x22a0 [ 1045.291157][ T9] __alloc_pages+0x1f0/0x460 [ 1045.295778][ T9] alloc_slab_page+0x5d/0x180 [ 1045.300510][ T9] new_slab+0x87/0x2d0 [ 1045.304613][ T9] ___slab_alloc+0xc5c/0x12f0 [ 1045.309318][ T9] __kmem_cache_alloc_node+0x11f/0x250 [ 1045.314822][ T9] kmalloc_trace+0x2a/0xe0 [ 1045.319281][ T9] ipv6_add_dev+0x597/0x11f0 [ 1045.323980][ T9] addrconf_notify+0x67b/0x1010 [ 1045.328864][ T9] notifier_call_chain+0x18f/0x380 [ 1045.334018][ T9] register_netdevice+0x1670/0x1ba0 [ 1045.339251][ T9] virt_wifi_newlink+0x395/0x7d0 [ 1045.344251][ T9] rtnl_newlink+0x15a0/0x2170 [ 1045.348959][ T9] rtnetlink_rcv_msg+0x843/0xf90 [ 1045.353937][ T9] netlink_rcv_skb+0x235/0x4c0 [ 1045.358755][ T9] page last free stack trace: [ 1045.363458][ T9] free_unref_page_prepare+0x7d7/0x8f0 [ 1045.368952][ T9] free_unref_page+0x32/0x2e0 [ 1045.373678][ T9] __unfreeze_partials+0x1cf/0x210 [ 1045.378823][ T9] put_cpu_partial+0x17c/0x250 [ 1045.383615][ T9] __slab_free+0x319/0x400 [ 1045.388064][ T9] qlist_free_all+0x75/0xd0 [ 1045.392619][ T9] kasan_quarantine_reduce+0x143/0x160 [ 1045.398141][ T9] __kasan_slab_alloc+0x22/0x80 [ 1045.403025][ T9] slab_post_alloc_hook+0x6a/0x4d0 [ 1045.408180][ T9] __kmem_cache_alloc_node+0x194/0x250 [ 1045.413680][ T9] kmalloc_trace+0x2a/0xe0 [ 1045.418148][ T9] ref_tracker_alloc+0x163/0x4b0 [ 1045.423188][ T9] netdev_queue_update_kobjects+0x18f/0x480 [ 1045.429188][ T9] netdev_register_kobject+0x277/0x320 [ 1045.434693][ T9] register_netdevice+0x12aa/0x1ba0 [ 1045.439935][ T9] virt_wifi_newlink+0x395/0x7d0 [ 1045.444920][ T9] [ 1045.447371][ T9] Memory state around the buggy address: [ 1045.453031][ T9] ffff88801e3fc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1045.461141][ T9] ffff88801e3fc180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1045.469275][ T9] >ffff88801e3fc200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1045.477366][ T9] ^ [ 1045.481976][ T9] ffff88801e3fc280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1045.490071][ T9] ffff88801e3fc300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1045.498165][ T9] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1047.557115][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1047.564472][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted syzkaller #0 [ 1047.571696][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1047.581807][ T9] Workqueue: events smc_ib_port_event_work [ 1047.587758][ T9] Call Trace: [ 1047.591078][ T9] [ 1047.594034][ T9] dump_stack_lvl+0x18c/0x250 [ 1047.598769][ T9] ? show_regs_print_info+0x20/0x20 [ 1047.604024][ T9] ? load_image+0x420/0x420 [ 1047.608569][ T9] panic+0x2ca/0x720 [ 1047.612516][ T9] ? bpf_jit_dump+0xd0/0xd0 [ 1047.617069][ T9] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1047.623086][ T9] ? _raw_spin_unlock+0x40/0x40 [ 1047.627969][ T9] ? print_memory_metadata+0x314/0x400 [ 1047.633460][ T9] ? __ethtool_get_link_ksettings+0x6e/0x180 [ 1047.639480][ T9] check_panic_on_warn+0x84/0xa0 [ 1047.644459][ T9] ? __ethtool_get_link_ksettings+0x6e/0x180 [ 1047.650478][ T9] end_report+0x6f/0x130 [ 1047.654761][ T9] kasan_report+0x128/0x150 [ 1047.659395][ T9] ? __ethtool_get_link_ksettings+0x6e/0x180 [ 1047.665428][ T9] __ethtool_get_link_ksettings+0x6e/0x180 [ 1047.671291][ T9] ib_get_eth_speed+0x17d/0x7e0 [ 1047.676183][ T9] ? _ib_modify_qp+0xd00/0xd00 [ 1047.680998][ T9] ? do_raw_spin_unlock+0x121/0x230 [ 1047.686263][ T9] ? _raw_spin_unlock+0x28/0x40 [ 1047.691152][ T9] ? ib_device_get_netdev+0x155/0x3a0 [ 1047.696593][ T9] rxe_query_port+0x8d/0x2d0 [ 1047.701244][ T9] ib_query_port+0x165/0x820 [ 1047.705872][ T9] smc_ib_port_event_work+0x154/0x920 [ 1047.711284][ T9] ? __lock_acquire+0x7d80/0x7d80 [ 1047.716380][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 1047.721625][ T9] ? process_scheduled_works+0x975/0x1600 [ 1047.727425][ T9] ? process_scheduled_works+0x975/0x1600 [ 1047.733218][ T9] process_scheduled_works+0xa60/0x1600 [ 1047.738822][ T9] ? worker_attach_to_pool+0x370/0x370 [ 1047.744319][ T9] ? assign_work+0x3cc/0x5d0 [ 1047.748951][ T9] worker_thread+0xa5e/0xfe0 [ 1047.753580][ T9] ? _raw_spin_unlock+0x40/0x40 [ 1047.758460][ T9] ? __kthread_parkme+0x71/0x1c0 [ 1047.763438][ T9] kthread+0x2fa/0x390 [ 1047.767567][ T9] ? pr_cont_work+0x550/0x550 [ 1047.772288][ T9] ? kthread_blkcg+0xd0/0xd0 [ 1047.776923][ T9] ret_from_fork+0x48/0x80 [ 1047.781376][ T9] ? kthread_blkcg+0xd0/0xd0 [ 1047.786002][ T9] ret_from_fork_asm+0x11/0x20 [ 1047.790822][ T9] [ 1047.794507][ T9] Kernel Offset: disabled [ 1047.798847][ T9] Rebooting in 86400 seconds..