last executing test programs: 6m25.660178756s ago: executing program 32 (id=14223): r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r0, 0x0) ftruncate(r0, 0x200000) 3m36.670372519s ago: executing program 33 (id=15633): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)={[{@shortad}, {@partition={'partition', 0x3d, 0x5}}, {@noadinicb}, {@uid}, {@gid}, {@volume={'volume', 0x3d, 0x6}}]}, 0x1, 0x489, &(0x7f0000000580)="$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") mknod$loop(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x0) symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00') 2m59.462567054s ago: executing program 34 (id=16015): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb005}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x4, 0x3}, 0x4) 2m36.104724122s ago: executing program 6 (id=16156): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f000000a4c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000140)) 2m35.672788973s ago: executing program 3 (id=16159): syz_emit_vhci(0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x5, 0xc9}}}, 0x6) 2m35.649346471s ago: executing program 6 (id=16160): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) 2m35.225335286s ago: executing program 6 (id=16162): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x14) 2m35.208693917s ago: executing program 3 (id=16164): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file2\x00', 0x8c80, &(0x7f00000006c0)=ANY=[@ANYBLOB='fmask=00000000000000000000001,umask=00000000000020000000002,utf8,keep_last_dots,allow_utime=00000000000000000004001,errors=continue,discard,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d63703835302c696f636861727365743d69736f383835392d312c006b95def57e2522c1bea829c23d304a63a4dbc03e4e15b41ada21c9a1dd3aad8a353a45e2fb41ed411833b1789f3d88f528c72dcbb5e1aea5dab11e69a77f2b692198fa6cd5c07eae4e91f2350fa2e360df77ba73081b1114f7c77978a4e105bf40f0bfca515e2bbb2552ca497c842e3ebb25e85344d0e964a97a3875dd9cc56d8fda567e4c9f0589ef0b"], 0x3, 0x1510, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) fallocate(r0, 0x0, 0x3, 0x5) 2m34.889024253s ago: executing program 6 (id=16165): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='+M(', 0x3, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x8000800) request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 2m34.46080758s ago: executing program 6 (id=16169): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x12, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000056000106022000000000000007003082df"], 0x18}], 0x1}, 0x0) 2m34.399771872s ago: executing program 3 (id=16170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x74, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m33.968760828s ago: executing program 3 (id=16173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100", @ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a310000000009000200"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m33.879214723s ago: executing program 6 (id=16174): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setuid(0xee01) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4) 2m33.591480999s ago: executing program 3 (id=16177): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x3}, 0x10000000000001) 2m33.350453695s ago: executing program 3 (id=16180): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, &(0x7f0000000000)) 2m17.768660526s ago: executing program 35 (id=16174): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setuid(0xee01) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4) 2m17.174858705s ago: executing program 36 (id=16180): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, &(0x7f0000000000)) 1m1.448701673s ago: executing program 1 (id=17289): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000a00)={0x0, 0xe, 0x4, "53016a31"}, 0x0, 0x0}) 1m1.167121592s ago: executing program 9 (id=17294): r0 = socket$inet(0x2, 0x4000000000000001, 0x6) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x100, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000080)) 1m0.895785389s ago: executing program 9 (id=17299): set_mempolicy(0x5, &(0x7f0000000380)=0x3, 0x9) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1, 0x300, 0x0) 1m0.571840847s ago: executing program 9 (id=17303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000300c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c000280050001000000000006000340000000000800074000000000040006"], 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000040018000680140004"], 0xac}}, 0x0) 1m0.346283535s ago: executing program 9 (id=17308): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 1m0.215101183s ago: executing program 9 (id=17311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 59.922858296s ago: executing program 9 (id=17313): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 59.502924434s ago: executing program 1 (id=17316): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0xff8e}}, 0x40) 58.963740659s ago: executing program 1 (id=17320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200098d5}, 0x4040084) 58.667727101s ago: executing program 1 (id=17324): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="ed", 0x1}], 0x1) 58.567343456s ago: executing program 1 (id=17327): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) write(r0, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) 58.421115579s ago: executing program 1 (id=17329): openat$dir(0xffffffffffffff9c, 0x0, 0x4002, 0x21) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x123a00, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 43.405286681s ago: executing program 37 (id=17313): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 42.302227755s ago: executing program 38 (id=17329): openat$dir(0xffffffffffffff9c, 0x0, 0x4002, 0x21) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x123a00, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 5.059321123s ago: executing program 2 (id=17857): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @empty, {[@cipso={0x86, 0x2a, 0x3, [{0x2, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @multicast2]}]}}}}}}}, 0x0) 3.885690369s ago: executing program 0 (id=17874): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='./file1\x00', 0xa00004, &(0x7f0000000180)={[{@rootdir={'rootdir', 0x3d, 0x2}}, {@gid_ignore}, {@dmode}, {}, {@nostrict}, {@utf8}, {@uid_ignore}, {}, {@longad}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@undelete}, {@nostrict}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@uid_ignore}]}, 0x5, 0xc87, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x8000c61) 3.487559527s ago: executing program 0 (id=17876): prlimit64(0x0, 0xb, &(0x7f0000000140)={0x0, 0xb}, 0x0) r0 = gettid() tkill(r0, 0xb) 3.235851426s ago: executing program 0 (id=17878): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000000c0)) 3.109567727s ago: executing program 0 (id=17879): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x34, r1, 0x1, 0x70bd2a, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x34}}, 0x0) 2.735724371s ago: executing program 8 (id=17881): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000feffffff61100000000000006200ffff0000000095"], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x65}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.613626832s ago: executing program 8 (id=17883): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) 2.171253845s ago: executing program 2 (id=17885): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000011c0)={&(0x7f0000000940)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@rdma_args={0x48, 0x114, 0x2, {{0x7, 0x4}, {0x0}, 0x0, 0x27}}], 0x48}, 0x0) 2.018431991s ago: executing program 0 (id=17887): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a042900000000080000000014000200fe8000000000f0ff00000000000000bb140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040845}, 0x44080) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 2.018218628s ago: executing program 8 (id=17888): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000100000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1003}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1.960162463s ago: executing program 5 (id=17890): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) 1.844085922s ago: executing program 2 (id=17891): r0 = fanotify_init(0x200, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) fanotify_mark(r0, 0x21, 0x8000000, r1, 0x0) 1.567743049s ago: executing program 2 (id=17892): set_mempolicy(0x3, &(0x7f0000000240)=0xbbb, 0x9) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) 1.567516343s ago: executing program 8 (id=17893): r0 = socket(0x2, 0x802, 0x0) shutdown(r0, 0x2) ppoll(&(0x7f0000000000)=[{r0, 0x124a}], 0x1, 0x0, 0x0, 0xfffffffffffffc98) 1.566578619s ago: executing program 5 (id=17894): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x4, 0x4) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 1.565850548s ago: executing program 0 (id=17896): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e0494993cfc0000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000094231306e53f070c0000002a9000070d00be0083"], 0x0}, 0x0) 1.565726945s ago: executing program 7 (id=17904): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@local, 0x0, 0x5, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0, @in6=@loopback, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.379048351s ago: executing program 8 (id=17897): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000300)) 1.37361234s ago: executing program 5 (id=17898): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x5}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000001c0)={0x5, 0x0, 0x2}) 1.345380161s ago: executing program 7 (id=17899): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={0x0, 0xc4}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e65766500002800028005000d0001000000140007000000000000000000000000000000000108000f"], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) 1.247848441s ago: executing program 4 (id=17900): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) sendfile(r0, r1, 0x0, 0x3) 1.146639539s ago: executing program 8 (id=17901): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f000000ad00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1018056, &(0x7f00000065c0)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff4}}, {@grpquota}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@errors_remount}, {@usrquota}, {@discard_size={'discard', 0x3d, 0x8}}, {@nodiscard}, {@nointegrity}, {@errors_remount}]}, 0x24, 0x6260, &(0x7f0000000340)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.110547498s ago: executing program 7 (id=17902): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000040)={0x18, r1, 0xffffffffffffffff, 0x1d}) 1.104291866s ago: executing program 5 (id=17903): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x1, 0x0, 0x0, r1, 0x1}) 991.698429ms ago: executing program 4 (id=17905): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 900.963583ms ago: executing program 7 (id=17906): r0 = gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs(r0, &(0x7f0000000040)='net/netstat\x00') 795.601603ms ago: executing program 5 (id=17907): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) 622.959049ms ago: executing program 2 (id=17908): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000100)) 593.329448ms ago: executing program 4 (id=17909): bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000200)=ANY=[], 0x0, 0x600) 463.609332ms ago: executing program 5 (id=17910): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 452.973656ms ago: executing program 7 (id=17911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x108902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) 402.535781ms ago: executing program 4 (id=17912): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x4, 0x1, 0xf06, 0x3, 0xf7, 0x7f, 0x9}, 0x9c) 232.109243ms ago: executing program 2 (id=17913): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0011}]}) r0 = io_uring_setup(0x289f, &(0x7f00000000c0)={0x0, 0x904b, 0x3000, 0x0, 0x2d6}) poll(&(0x7f0000009b00)=[{r0}], 0x20, 0x72) 127.383531ms ago: executing program 4 (id=17914): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0x20, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600300012800b00010067656e657665000020000280080011"], 0x64}}, 0x20000000) 29.502653ms ago: executing program 7 (id=17915): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) 0s ago: executing program 4 (id=17916): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) kernel console output (not intermixed with test programs): id descriptor of length 0, skipping remainder of the config [ 1614.310723][T10968] usb 4-1: config 0 has no interface number 0 [ 1614.326489][T10968] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1614.381966][T10968] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1614.423387][T10968] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1614.481704][T10968] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1614.502912][T10968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.511849][T28445] veth0: entered promiscuous mode [ 1614.536087][T28444] veth0: left promiscuous mode [ 1614.541473][T10968] usb 4-1: Product: syz [ 1614.556865][T10968] usb 4-1: Manufacturer: syz [ 1614.574708][T10968] usb 4-1: SerialNumber: syz [ 1614.602483][T10968] usb 4-1: config 0 descriptor?? [ 1614.830685][T10690] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1615.024321][T10690] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1615.041292][T10690] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.060557][T28473] tipc: Started in network mode [ 1615.067272][T10690] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1615.079159][T28473] tipc: Node identity ff80000000000000000000000000001, cluster identity 4 [ 1615.093095][T10690] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1615.106201][T28473] tipc: Enabling of bearer rejected, failed to enable media [ 1615.133089][T10690] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1615.178676][T10690] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1615.226007][T10690] usb 1-1: Product: syz [ 1615.236429][T10690] usb 1-1: Manufacturer: syz [ 1615.269251][T10690] cdc_wdm 1-1:1.0: skipping garbage [ 1615.281440][T10690] cdc_wdm 1-1:1.0: skipping garbage [ 1615.318114][T28477] loop1: detected capacity change from 0 to 512 [ 1615.340416][T10690] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1615.371346][T28477] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1615.378763][T10690] cdc_wdm 1-1:1.0: Unknown control protocol [ 1615.417658][T15039] usb 4-1: USB disconnect, device number 103 [ 1615.592172][T28477] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1615.642262][T28477] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 1615.664006][T28477] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 1615.766449][T10968] usb 1-1: USB disconnect, device number 98 [ 1615.871795][T28512] ptrace attach of ""[28515] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[28512] [ 1616.270305][T28528] netlink: 292 bytes leftover after parsing attributes in process `syz.4.14811'. [ 1616.315492][T28531] loop2: detected capacity change from 0 to 256 [ 1616.354993][T28531] exfat: Deprecated parameter 'utf8' [ 1616.421246][T28531] exfat: Deprecated parameter 'namecase' [ 1616.455946][T28531] exfat: Deprecated parameter 'namecase' [ 1616.475798][T28531] exfat: Deprecated parameter 'namecase' [ 1616.481763][T28531] exfat: Deprecated parameter 'namecase' [ 1616.727717][T28547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14816'. [ 1616.753270][T28531] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1617.910177][T28588] loop1: detected capacity change from 0 to 128 [ 1617.969324][T28590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14833'. [ 1617.973737][T28588] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1618.050021][T28588] hpfs: filesystem error: improperly stopped [ 1618.082441][T28588] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1618.118014][T28588] hpfs: You really don't want any checks? You are crazy... [ 1618.149177][T28588] hpfs: hpfs_map_sector(): read error [ 1618.178632][T28588] hpfs: code page support is disabled [ 1618.214952][T28588] hpfs: hpfs_map_4sectors(): unaligned read [ 1618.246476][T28588] hpfs: hpfs_map_4sectors(): unaligned read [ 1618.266492][T28588] hpfs: filesystem error: unable to find root dir [ 1618.495844][T28614] loop3: detected capacity change from 0 to 256 [ 1618.530042][T28614] exfat: Deprecated parameter 'utf8' [ 1618.545004][T28614] exfat: Deprecated parameter 'utf8' [ 1618.564817][T28614] exfat: Deprecated parameter 'utf8' [ 1618.591577][T28614] exfat: Deprecated parameter 'namecase' [ 1618.659522][T28614] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1618.674823][ T804] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1618.831756][T28626] trusted_key: encrypted_key: key user:syz not found [ 1618.871660][ T804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1618.932893][ T804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1618.945157][ T804] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1618.959946][ T804] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1618.971584][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.990925][ T804] usb 1-1: config 0 descriptor?? [ 1619.422375][T10690] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1619.455366][ T804] steelseries 0003:1038:1410.0022: unknown main item tag 0x1 [ 1619.483214][ T804] steelseries 0003:1038:1410.0022: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 1619.597944][T10690] usb 2-1: config 0 interface 0 altsetting 126 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1619.651320][T10690] usb 2-1: config 0 interface 0 altsetting 126 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1619.689296][T10690] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1619.708841][T10690] usb 2-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 1619.726716][T10690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.747432][ T5640] usb 1-1: USB disconnect, device number 99 [ 1619.780487][T10690] usb 2-1: config 0 descriptor?? [ 1620.266479][T10690] wacom 0003:056A:0094.0023: unknown main item tag 0x0 [ 1620.279586][T10690] wacom 0003:056A:0094.0023: unknown main item tag 0x0 [ 1620.298420][T10690] wacom 0003:056A:0094.0023: unknown main item tag 0x0 [ 1620.309462][T10690] wacom 0003:056A:0094.0023: unknown main item tag 0x0 [ 1620.337737][T10690] wacom 0003:056A:0094.0023: unknown main item tag 0x0 [ 1620.376102][T10690] wacom 0003:056A:0094.0023: unknown main item tag 0x0 [ 1620.401902][T10690] wacom 0003:056A:0094.0023: unknown main item tag 0x0 [ 1620.428819][T10690] wacom 0003:056A:0094.0023: unknown main item tag 0x0 [ 1620.447614][T10690] wacom 0003:056A:0094.0023: unknown main item tag 0x0 [ 1620.455888][T10690] wacom 0003:056A:0094.0023: Using device in hidraw-only mode [ 1620.529270][T10690] wacom 0003:056A:0094.0023: hidraw0: USB HID v80.08 Device [HID 056a:0094] on usb-dummy_hcd.1-1/input0 [ 1620.590161][T10690] usb 2-1: USB disconnect, device number 100 [ 1620.890086][T28697] fido_id[28697]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1621.088652][T28713] netlink: 64 bytes leftover after parsing attributes in process `syz.4.14860'. [ 1621.115085][T28713] tipc: Invalid UDP bearer configuration [ 1621.115173][T28713] tipc: Enabling of bearer rejected, failed to enable media [ 1621.260026][T28717] loop3: detected capacity change from 0 to 4096 [ 1621.288660][T28717] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1621.446511][T28717] ntfs3(loop3): ino=19, mi_enum_attr [ 1621.477591][T28717] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1621.505801][T28717] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 1621.594905][T28660] loop2: detected capacity change from 0 to 32768 [ 1622.135086][ T804] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1622.327605][ T804] usb 1-1: Using ep0 maxpacket: 16 [ 1622.371924][ T804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1622.434559][ T804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1622.481490][ T804] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1622.538893][ T804] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1622.588234][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.649186][ T804] usb 1-1: config 0 descriptor?? [ 1622.841545][T28774] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14878'. [ 1623.155085][ T804] microsoft 0003:045E:07DA.0024: ignoring exceeding usage max [ 1623.195926][ T804] microsoft 0003:045E:07DA.0024: ignoring exceeding usage max [ 1623.378158][ T804] microsoft 0003:045E:07DA.0024: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1623.430176][ T804] microsoft 0003:045E:07DA.0024: no inputs found [ 1623.456448][ T804] microsoft 0003:045E:07DA.0024: could not initialize ff, continuing anyway [ 1623.583495][ T804] usb 1-1: USB disconnect, device number 100 [ 1623.992759][T28823] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14889'. [ 1624.941701][T28806] fido_id[28806]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1624.958682][T28825] loop2: detected capacity change from 0 to 256 [ 1625.236925][T28820] loop1: detected capacity change from 0 to 131072 [ 1625.246603][T28820] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1625.256639][T28820] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1625.275427][T28820] F2FS-fs (loop1): invalid crc value [ 1625.304629][T28820] F2FS-fs (loop1): SIT is corrupted node# 0 vs 7 [ 1625.317171][T28820] loop1: lost filesystem error report for type 5 error -117 [ 1625.317213][T28820] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 1626.352741][ T30] audit: type=1326 audit(2000001209.186:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28876 comm="syz.6.14904" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8a599de59 code=0x0 [ 1626.688920][T28887] gretap0: entered promiscuous mode [ 1626.760427][T28887] vlan0: entered promiscuous mode [ 1627.096944][T28910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14914'. [ 1627.776035][T28939] loop3: detected capacity change from 0 to 512 [ 1627.813195][T28939] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1627.870659][T28939] EXT4-fs (loop3): 1 truncate cleaned up [ 1627.870714][T28936] loop1: detected capacity change from 0 to 4096 [ 1627.900183][T28939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1628.031595][T28936] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1628.082380][T28936] ntfs3(loop1): Failed to load $Extend (-22). [ 1628.119223][T28936] ntfs3(loop1): Failed to initialize $Extend. [ 1628.330702][T28957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14930'. [ 1628.410734][T28957] vlan0: entered promiscuous mode [ 1628.433266][T28957] macsec0: entered promiscuous mode [ 1628.581717][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1629.021614][T28997] loop6: detected capacity change from 0 to 2048 [ 1629.061682][T28997] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1629.116417][T28997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1629.639708][T29022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14942'. [ 1629.808095][T29027] devpts: Bad value for 'max' [ 1630.020417][T29033] netlink: 10 bytes leftover after parsing attributes in process `syz.2.14946'. [ 1630.109712][T29044] loop1: detected capacity change from 0 to 64 [ 1630.273930][ T5783] usb 1-1: new low-speed USB device number 101 using dummy_hcd [ 1630.469905][ T5783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1630.505075][ T5783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 1630.540676][ T5783] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1630.560565][ T5783] usb 1-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 1630.569873][ T5783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.596634][ T5783] usb 1-1: config 0 descriptor?? [ 1630.625961][T29037] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1630.661590][T29074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14953'. [ 1630.721955][T10968] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1630.769948][T29077] loop2: detected capacity change from 0 to 2048 [ 1630.821098][T29077] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1630.875021][T29077] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 100 with incorrect tag f201 [ 1630.908709][T10968] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 1630.957569][T10968] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1631.004885][T10968] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1631.037385][T10968] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1631.073731][T10968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.120938][ T5783] hid (null): unknown global tag 0xe [ 1631.137623][T10968] usb 2-1: config 0 descriptor?? [ 1631.150643][ T5783] hid (null): unknown global tag 0xe [ 1631.158983][ T5783] hid (null): invalid report_count 34581 [ 1631.165588][T29061] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1631.235935][ T5783] logitech-hidpp-device 0003:046D:C081.0025: unknown global tag 0xe [ 1631.256493][ T30] audit: type=1326 audit(2000001213.784:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29088 comm="syz.2.14957" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47fb39de59 code=0x0 [ 1631.286272][ T5783] logitech-hidpp-device 0003:046D:C081.0025: item 0 1 1 14 parsing failed [ 1631.320729][ T5783] logitech-hidpp-device 0003:046D:C081.0025: hidpp_probe:parse failed [ 1631.352103][ T5783] logitech-hidpp-device 0003:046D:C081.0025: probe with driver logitech-hidpp-device failed with error -22 [ 1631.392234][ T5783] usb 1-1: USB disconnect, device number 101 [ 1631.646381][T10968] hid_parser_main: 31 callbacks suppressed [ 1631.646436][T10968] saitek 0003:06A3:0621.0026: unknown main item tag 0x2 [ 1631.674276][T10968] saitek 0003:06A3:0621.0026: unknown main item tag 0x0 [ 1631.681347][T10968] saitek 0003:06A3:0621.0026: unknown main item tag 0x0 [ 1631.693347][T10968] saitek 0003:06A3:0621.0026: unknown main item tag 0x0 [ 1631.700556][T10968] saitek 0003:06A3:0621.0026: unknown main item tag 0x0 [ 1631.709497][T10968] saitek 0003:06A3:0621.0026: unknown main item tag 0x0 [ 1631.721942][T10968] saitek 0003:06A3:0621.0026: unknown main item tag 0x0 [ 1631.744174][T10968] saitek 0003:06A3:0621.0026: unknown main item tag 0x0 [ 1631.770593][T10968] saitek 0003:06A3:0621.0026: unknown main item tag 0x0 [ 1631.798364][T10968] saitek 0003:06A3:0621.0026: unknown main item tag 0x0 [ 1631.845469][T10968] saitek 0003:06A3:0621.0026: hidraw0: USB HID v9.0d Device [HID 06a3:0621] on usb-dummy_hcd.1-1/input0 [ 1631.894149][T29128] netlink: 'syz.6.14966': attribute type 7 has an invalid length. [ 1631.898067][T10968] usb 2-1: USB disconnect, device number 101 [ 1632.212334][T29149] loop6: detected capacity change from 0 to 512 [ 1632.229495][T29135] fido_id[29135]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1632.272169][T29153] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1632.296169][T29149] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e866c018, mo2=0002] [ 1632.314116][ T804] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 1632.357627][T29149] System zones: 1-12 [ 1632.375177][T29149] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #15: comm syz.6.14968: corrupted inode contents [ 1632.405177][T29149] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1632.407062][T29149] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1632.407123][T29149] loop6: lost filesystem error report for type 5 error -117 [ 1632.407843][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 1632.407881][ C1] EXT4-fs (loop6): initial error at time 2000001214: ext4_do_update_inode:5742: inode 15 [ 1632.407941][ C1] EXT4-fs (loop6): last error at time 2000001214: ext4_orphan_del:303 [ 1632.410545][T29149] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #15: comm syz.6.14968: corrupted inode contents [ 1632.410598][T29149] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1632.413186][T29149] EXT4-fs error (device loop6): ext4_evict_inode:315: inode #15: comm syz.6.14968: mark_inode_dirty error [ 1632.413249][T29149] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1632.414255][T29149] EXT4-fs (loop6): 1 orphan inode deleted [ 1632.423643][T29149] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1632.530817][ T804] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1632.530877][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.530920][ T804] usb 5-1: Product: syz [ 1632.530951][ T804] usb 5-1: Manufacturer: syz [ 1632.530983][ T804] usb 5-1: SerialNumber: syz [ 1632.537907][ T804] usb 5-1: config 0 descriptor?? [ 1632.690562][T25807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1633.227832][ T804] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1633.285417][ T5640] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1633.341256][ T804] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 1633.363798][ T804] usb 5-1: USB disconnect, device number 104 [ 1633.473504][ T5640] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1633.473565][ T5640] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1633.473606][ T5640] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1633.473680][ T5640] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1633.476789][ T5640] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1633.476842][ T5640] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1633.476883][ T5640] usb 4-1: Product: syz [ 1633.476916][ T5640] usb 4-1: Manufacturer: syz [ 1633.504078][ T5640] cdc_wdm 4-1:1.0: skipping garbage [ 1633.504122][ T5640] cdc_wdm 4-1:1.0: skipping garbage [ 1633.546838][T29203] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14979'. [ 1633.566302][ T5640] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1633.566346][ T5640] cdc_wdm 4-1:1.0: Unknown control protocol [ 1633.689284][ T30] audit: type=1326 audit(2000001216.059:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29216 comm="syz.1.14981" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd370b9de59 code=0x7ffc0000 [ 1633.704042][ T30] audit: type=1326 audit(2000001216.078:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29216 comm="syz.1.14981" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd370b9de59 code=0x7ffc0000 [ 1633.715575][ T30] audit: type=1326 audit(2000001216.078:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29216 comm="syz.1.14981" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd370b9de59 code=0x7ffc0000 [ 1633.716081][ T30] audit: type=1326 audit(2000001216.087:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29216 comm="syz.1.14981" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd370b5e68e code=0x7ffc0000 [ 1633.716864][ T30] audit: type=1326 audit(2000001216.087:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29216 comm="syz.1.14981" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd370b5e68e code=0x7ffc0000 [ 1633.719144][ T30] audit: type=1326 audit(2000001216.087:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29216 comm="syz.1.14981" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd370b9de59 code=0x7ffc0000 [ 1633.730014][ T30] audit: type=1326 audit(2000001216.096:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29216 comm="syz.1.14981" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd370b9de59 code=0x7ffc0000 [ 1633.730109][ T30] audit: type=1326 audit(2000001216.096:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29216 comm="syz.1.14981" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd370b9de59 code=0x7ffc0000 [ 1633.730192][ T30] audit: type=1326 audit(2000001216.096:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29216 comm="syz.1.14981" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd370b9de59 code=0x7ffc0000 [ 1633.738270][ T30] audit: type=1326 audit(2000001216.096:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29216 comm="syz.1.14981" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fd370b9de59 code=0x7ffc0000 [ 1634.421537][T29237] bridge_slave_0: default FDB implementation only supports local addresses [ 1635.805252][ T11] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1635.985905][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 1636.009954][ T11] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1636.058027][ T11] usb 5-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1636.088138][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.132207][ T11] usb 5-1: config 0 descriptor?? [ 1636.237463][T29298] loop6: detected capacity change from 0 to 1024 [ 1636.261618][T10690] usb 4-1: USB disconnect, device number 104 [ 1636.641037][ T11] betop 0003:20BC:5500.0027: reserved main item tag 0xd [ 1636.726657][ T11] betop 0003:20BC:5500.0027: hidraw0: USB HID v0.77 Device [HID 20bc:5500] on usb-dummy_hcd.4-1/input0 [ 1636.784719][ T11] betop 0003:20BC:5500.0027: no inputs found [ 1636.839511][T29328] [U]  [ 1636.920465][T10690] usb 5-1: USB disconnect, device number 105 [ 1637.157556][T29335] fido_id[29335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1638.355311][T29390] batadv_slave_1: entered promiscuous mode [ 1638.518683][T10690] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1638.722847][T10690] usb 5-1: Using ep0 maxpacket: 8 [ 1638.734120][T10690] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1638.764754][T10690] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1638.781488][T10690] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1638.790690][T10690] usb 5-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 1638.794429][T29356] loop1: detected capacity change from 0 to 32768 [ 1638.802665][T10690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.833938][T10690] usb 5-1: config 0 descriptor?? [ 1638.866414][T29356] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1639.010282][T29356] XFS (loop1): Ending clean mount [ 1639.221291][ T5628] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1639.339141][T10690] uclogic 0003:28BD:0075.0028: interface is invalid, ignoring [ 1639.497363][T29441] loop2: detected capacity change from 0 to 256 [ 1639.552837][T29441] exfat: Deprecated parameter 'utf8' [ 1639.697127][T29441] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1639.703098][T10968] usb 5-1: USB disconnect, device number 106 [ 1639.774227][T29458] vivid-000: disconnect [ 1639.839604][T29453] vivid-000: reconnect [ 1639.846817][ T11] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1640.060743][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 1640.086440][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1640.187133][ T11] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1640.222518][T29475] loop2: detected capacity change from 0 to 256 [ 1640.231606][ T11] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1640.236155][T29477] 9pnet_fd: Insufficient options for proto=fd [ 1640.265968][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.329139][ T11] usb 4-1: config 0 descriptor?? [ 1641.002163][ T11] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0029/input/input122 [ 1641.168368][ T11] microsoft 0003:045E:07DA.0029: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1641.260463][ T11] usb 4-1: USB disconnect, device number 105 [ 1641.588285][T29515] fido_id[29515]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1641.641534][T29536] loop6: detected capacity change from 0 to 512 [ 1641.741367][T29536] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.15053: couldn't read orphan inode 26 (err -116) [ 1641.765035][T29536] loop6: lost filesystem error report for type 5 error -116 [ 1641.779259][T29536] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1641.847099][T29536] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1642.186181][T25807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1643.865964][T29553] loop2: detected capacity change from 0 to 32768 [ 1643.981176][T29553] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1644.159807][T29553] XFS (loop2): Ending clean mount [ 1644.196667][T29636] loop6: detected capacity change from 0 to 256 [ 1644.257029][T29636] exfat: Deprecated parameter 'utf8' [ 1644.324682][T29636] exfat: Deprecated parameter 'utf8' [ 1644.431392][T29636] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d) [ 1644.507214][T29645] nbd: must specify a size in bytes for the device [ 1644.848438][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 1644.848466][ T30] audit: type=1800 audit(2000001226.508:520): pid=29640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.15057" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 1645.082076][ T5629] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1646.281263][T29706] sctp: [Deprecated]: syz.4.15095 (pid 29706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1646.281263][T29706] Use struct sctp_sack_info instead [ 1646.509005][T10968] usb 1-1: new low-speed USB device number 102 using dummy_hcd [ 1646.711707][T10968] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1646.754812][T10968] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1646.781766][T29729] loop3: detected capacity change from 0 to 256 [ 1646.793253][T29730] loop1: detected capacity change from 0 to 64 [ 1646.798510][T10968] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1646.828165][T29729] exfat: Deprecated parameter 'namecase' [ 1646.875034][T10968] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1646.919234][T10968] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 1646.943454][T29729] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 1646.993644][T10968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.058211][T29739] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1647.063729][T10968] usb 1-1: config 0 descriptor?? [ 1647.194390][T29736] Trying to free block not in datazone [ 1647.626551][T10968] samsung 0003:0419:0001.002A: ignoring exceeding usage max [ 1647.655008][T10968] samsung 0003:0419:0001.002A: usage index exceeded [ 1647.701080][T10968] samsung 0003:0419:0001.002A: item 0 4 2 0 parsing failed [ 1647.744613][T10968] samsung 0003:0419:0001.002A: parse failed [ 1647.785474][T10968] samsung 0003:0419:0001.002A: probe with driver samsung failed with error -22 [ 1647.850421][T10968] usb 1-1: USB disconnect, device number 102 [ 1648.131205][T29794] loop1: detected capacity change from 0 to 1024 [ 1648.225160][T29794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1648.481018][T29809] loop3: detected capacity change from 0 to 512 [ 1648.593454][T29809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1648.705362][T29809] ext4 filesystem being mounted at /2531/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1648.787713][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1648.947784][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1648.967774][T10968] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1649.087779][T29830] loop2: detected capacity change from 0 to 256 [ 1649.178021][T29830] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 1649.190460][T10968] usb 5-1: Using ep0 maxpacket: 8 [ 1649.208910][T10968] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1649.231672][T10968] usb 5-1: config 0 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1649.280802][T10968] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1649.301180][T10968] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1649.328770][T10968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.374679][T10968] usb 5-1: config 0 descriptor?? [ 1649.840262][T15039] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1649.905126][T10968] hid_parser_main: 28 callbacks suppressed [ 1649.905166][T10968] kye 0003:0458:0138.002B: unknown main item tag 0x0 [ 1649.922647][T10968] kye 0003:0458:0138.002B: unknown main item tag 0x0 [ 1649.931480][T10968] kye 0003:0458:0138.002B: unknown main item tag 0x0 [ 1649.949660][T10968] kye 0003:0458:0138.002B: unknown main item tag 0x0 [ 1649.958363][T10968] kye 0003:0458:0138.002B: unknown main item tag 0x0 [ 1649.965130][T10968] kye 0003:0458:0138.002B: unknown main item tag 0x0 [ 1649.973685][T10968] kye 0003:0458:0138.002B: unknown main item tag 0x0 [ 1649.984784][T10968] kye 0003:0458:0138.002B: unknown main item tag 0x0 [ 1649.994675][T10968] kye 0003:0458:0138.002B: unknown main item tag 0x0 [ 1650.025516][T10968] kye 0003:0458:0138.002B: unknown main item tag 0x0 [ 1650.043028][T15039] usb 1-1: Using ep0 maxpacket: 32 [ 1650.045711][T10968] kye 0003:0458:0138.002B: hidraw0: USB HID v0.04 Device [HID 0458:0138] on usb-dummy_hcd.4-1/input0 [ 1650.053143][T15039] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1650.117586][T15039] usb 1-1: config 0 has no interface number 0 [ 1650.141434][T15039] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1650.161722][T15039] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.169125][T10968] usb 5-1: USB disconnect, device number 107 [ 1650.199139][T29866] loop2: detected capacity change from 0 to 4096 [ 1650.207530][T15039] usb 1-1: Product: syz [ 1650.215845][T15039] usb 1-1: Manufacturer: syz [ 1650.226896][T15039] usb 1-1: SerialNumber: syz [ 1650.252909][T29866] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1650.287377][T15039] usb 1-1: config 0 descriptor?? [ 1650.331670][T15039] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1650.346570][T29869] fido_id[29869]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1650.536825][T15039] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1650.583006][T15039] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1650.594830][T29866] ntfs3(loop2): ino=5, "/" indx_read_ra [ 1650.715449][T29866] ntfs3(loop2): ino=5, "/" ntfs_readdir [ 1650.768872][T29909] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 1651.132042][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1651.134069][T10968] usb 1-1: USB disconnect, device number 103 [ 1651.228135][T10968] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1651.313250][T10968] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1651.364204][T10968] quatech2 1-1:0.51: device disconnected [ 1652.224038][T29972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15148'. [ 1652.445433][T16133] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1652.637089][T16133] usb 2-1: Using ep0 maxpacket: 8 [ 1652.674628][T16133] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.712447][T16133] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1652.737136][T16133] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1652.739694][T29997] loop2: detected capacity change from 0 to 2048 [ 1652.763049][T16133] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1652.795860][T16133] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1652.807926][T29997] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1652.856563][T16133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.906068][T30006] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1652.930948][T16133] hub 2-1:1.0: bad descriptor, ignoring hub [ 1652.963538][T16133] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1653.001191][T16133] cdc_wdm 2-1:1.0: skipping garbage [ 1653.031009][T16133] cdc_wdm 2-1:1.0: skipping garbage [ 1653.080536][T16133] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1653.108730][T16133] cdc_wdm 2-1:1.0: Unknown control protocol [ 1653.191641][T16133] usb 2-1: USB disconnect, device number 102 [ 1653.322071][T30025] loop3: detected capacity change from 0 to 1024 [ 1653.400262][T30025] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1653.456067][T30035] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[25807] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ 8   € \x0c Û  þÿÿú ÿÿÿÿ"[30035] [ 1654.739320][T30084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15179'. [ 1655.135933][T16133] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1655.216010][T30108] loop6: detected capacity change from 0 to 256 [ 1655.333497][T16133] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1655.381794][T16133] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 1655.424738][T16133] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1655.449544][T16133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.482223][T16133] usb 2-1: Product: syz [ 1655.502617][T16133] usb 2-1: Manufacturer: syz [ 1655.522040][T16133] usb 2-1: SerialNumber: syz [ 1655.554846][T16133] usb 2-1: config 0 descriptor?? [ 1655.577209][T30094] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1655.604057][T30094] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1655.914604][T30094] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1655.949270][T30094] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1656.204208][ T11] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1656.235188][T16133] Error reading MAC address [ 1656.268998][T16133] usb 2-1: USB disconnect, device number 103 [ 1656.407012][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 1656.436382][ T11] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1656.468219][ T11] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1656.480734][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1656.488365][ T11] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1656.499970][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.529197][ T11] usb 1-1: config 0 descriptor?? [ 1656.854834][ T11] usbhid 1-1:0.0: can't add hid device: -71 [ 1656.883829][ T11] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1656.938248][ T11] usb 1-1: USB disconnect, device number 104 [ 1657.784390][ T11] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 1657.970055][ T11] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1658.008505][ T11] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1658.027518][ T11] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1658.043148][ T11] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1658.061805][ T11] usb 3-1: Product: syz [ 1658.074608][ T11] usb 3-1: Manufacturer: syz [ 1658.111112][ T11] hub 3-1:4.0: USB hub found [ 1658.334808][ T11] hub 3-1:4.0: 2 ports detected [ 1658.370691][T30232] loop1: detected capacity change from 0 to 128 [ 1658.392657][T30232] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1658.403107][T30230] loop6: detected capacity change from 0 to 512 [ 1658.438076][T30232] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1658.440950][T30230] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1658.546636][T30230] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1658.556777][ T11] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 1658.574643][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1658.581159][ C1] EXT4-fs (loop6): initial error at time 2000001239: ext4_mb_generate_buddy:1314 [ 1658.590388][ C1] EXT4-fs (loop6): last error at time 2000001239: ext4_mb_generate_buddy:1314 [ 1658.595136][T30230] EXT4-fs (loop6): 1 truncate cleaned up [ 1658.626714][T30230] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1658.665433][ T11] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 1658.727501][ T30] audit: type=1800 audit(2000001239.513:521): pid=30230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.15217" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1658.801091][T25807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1658.804324][ T11] usb 3-1: USB disconnect, device number 112 [ 1658.957444][T30247] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1659.022293][T30247] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1659.053567][T30260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15224'. [ 1659.053731][ T5640] IPVS: starting estimator thread 0... [ 1659.205164][T30261] IPVS: using max 23 ests per chain, 55200 per kthread [ 1659.462707][T30208] loop3: detected capacity change from 0 to 32768 [ 1659.839735][T30281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1660.437810][T30300] macsec2: entered promiscuous mode [ 1660.467596][T30300] macsec2: entered allmulticast mode [ 1660.817092][T30313] loop3: detected capacity change from 0 to 1024 [ 1660.952288][T30313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1661.086909][T17829] Bluetooth: hci5: command 0x0406 tx timeout [ 1661.650419][T30338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15245'. [ 1662.109391][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1662.250699][T15039] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 1662.350185][T30324] loop1: detected capacity change from 0 to 32768 [ 1662.445140][T15039] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1662.462644][T15039] usb 1-1: config 0 has no interface number 0 [ 1662.479257][T30324] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1662.479892][T15039] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1662.519450][T15039] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1662.530521][T15039] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.540578][T15039] usb 1-1: Product: syz [ 1662.545014][T15039] usb 1-1: Manufacturer: syz [ 1662.551420][T15039] usb 1-1: SerialNumber: syz [ 1662.572250][T15039] usb 1-1: config 0 descriptor?? [ 1662.822164][T30382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1662.893131][T30384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15256'. [ 1663.105460][ T5628] ocfs2: Unmounting device (7,1) on (node local) [ 1663.290061][T15039] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1663.321576][T17829] Bluetooth: hci5: command 0x0406 tx timeout [ 1663.338795][T15039] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 1663.372096][T15039] usb 1-1: USB disconnect, device number 105 [ 1663.378648][T30399] loop3: detected capacity change from 0 to 256 [ 1663.522229][T30399] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 1664.385924][T30440] nftables ruleset with unbound set [ 1664.506328][T30451] vxcan2: entered allmulticast mode [ 1665.151522][T30484] loop2: detected capacity change from 0 to 1024 [ 1665.222497][T30484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1665.323804][T30496] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1665.511943][T30500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15286'. [ 1665.578078][T30500] bridge_slave_0: entered promiscuous mode [ 1665.600692][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1665.884248][ T5640] kernel write not supported for file /dsp (pid: 5640 comm: kworker/1:5) [ 1666.352319][T15039] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1666.522780][T15039] usb 4-1: Using ep0 maxpacket: 8 [ 1666.530320][T15039] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1666.558847][T15039] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1666.579501][T15039] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1666.597789][T10968] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 1666.605676][T15039] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.623018][T15039] usb 4-1: config 0 descriptor?? [ 1666.793160][T10968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1666.821285][T10968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1666.831056][T30567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15306'. [ 1666.831124][T30567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15306'. [ 1666.831178][T30567] netlink: 'syz.4.15306': attribute type 11 has an invalid length. [ 1666.841067][T10968] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1666.868732][T10968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.884334][ T11] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1666.892481][T10968] usb 2-1: config 0 descriptor?? [ 1667.068359][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 1667.076818][ T11] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1667.084773][T15039] hid_parser_main: 30 callbacks suppressed [ 1667.084803][T15039] logitech 0003:046D:C294.002C: unknown main item tag 0x2 [ 1667.098043][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1667.106421][T15039] logitech 0003:046D:C294.002C: unknown main item tag 0x0 [ 1667.113986][ T11] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1667.127607][T15039] logitech 0003:046D:C294.002C: unknown main item tag 0x0 [ 1667.143903][T15039] logitech 0003:046D:C294.002C: unknown main item tag 0x0 [ 1667.149195][ T11] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1667.154166][T15039] logitech 0003:046D:C294.002C: unknown main item tag 0x0 [ 1667.170400][T15039] logitech 0003:046D:C294.002C: item fetching failed at offset 24/40 [ 1667.176023][ T11] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1667.188702][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.218467][T15039] logitech 0003:046D:C294.002C: parse failed [ 1667.221995][ T11] hub 1-1:1.0: bad descriptor, ignoring hub [ 1667.231345][T15039] logitech 0003:046D:C294.002C: probe with driver logitech failed with error -22 [ 1667.245111][ T11] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1667.267824][ T11] cdc_wdm 1-1:1.0: skipping garbage [ 1667.276523][ T11] cdc_wdm 1-1:1.0: skipping garbage [ 1667.298340][ T11] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1667.316410][ T11] cdc_wdm 1-1:1.0: Unknown control protocol [ 1667.374605][T10968] isku 0003:1E7D:319C.002D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 1667.415406][ T11] usb 4-1: USB disconnect, device number 106 [ 1667.586396][T10968] isku 0003:1E7D:319C.002D: couldn't init struct isku_device [ 1667.599429][T10968] isku 0003:1E7D:319C.002D: couldn't install keyboard [ 1667.628269][T10968] isku 0003:1E7D:319C.002D: probe with driver isku failed with error -71 [ 1667.657047][T10968] usb 2-1: USB disconnect, device number 104 [ 1667.924882][T15039] usb 1-1: USB disconnect, device number 106 [ 1668.434197][T13503] Bluetooth: hci6: command 0x1003 tx timeout [ 1668.434706][T17829] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1668.609707][T30629] loop3: detected capacity change from 0 to 32768 [ 1668.918677][T30657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15323'. [ 1668.942929][T30657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15323'. [ 1669.014885][T10968] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1669.201852][T10968] usb 1-1: Using ep0 maxpacket: 32 [ 1669.216862][T10968] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1669.231640][T10968] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1669.267038][T10968] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1669.323408][T10968] usb 1-1: config 1 has no interface number 0 [ 1669.347095][T10968] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1669.386305][T10968] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1669.387785][T30672] loop3: detected capacity change from 0 to 64 [ 1669.432315][T10968] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1669.470859][T30673] vxcan2: entered allmulticast mode [ 1669.488185][T10968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.556600][T10968] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1669.816941][T10968] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1670.170695][T30712] loop2: detected capacity change from 0 to 8 [ 1670.337725][ T11] usb 1-1: USB disconnect, device number 107 [ 1670.414503][ T11] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1670.555694][T30733] PKCS8: Unsupported PKCS#8 version [ 1670.703688][T30739] loop2: detected capacity change from 0 to 764 [ 1670.734077][T30739] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1671.595635][T10690] kernel write not supported for file /admmidi2 (pid: 10690 comm: kworker/1:4) [ 1672.321194][ T11] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 1672.381048][T30812] nbd: couldn't find device at index 0 [ 1672.504240][ T11] usb 5-1: config 0 has an invalid interface number: 70 but max is 0 [ 1672.539161][ T11] usb 5-1: config 0 has no interface number 0 [ 1672.565791][ T11] usb 5-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 1672.599568][T30821] netlink: 104 bytes leftover after parsing attributes in process `syz.1.15368'. [ 1672.609509][ T11] usb 5-1: config 0 interface 70 altsetting 5 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1672.634332][T30821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15368'. [ 1672.658197][ T11] usb 5-1: config 0 interface 70 altsetting 5 endpoint 0x83 has invalid maxpacket 42809, setting to 64 [ 1672.688804][ T11] usb 5-1: config 0 interface 70 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1672.734857][ T11] usb 5-1: config 0 interface 70 has no altsetting 0 [ 1672.762584][ T11] usb 5-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 1672.800507][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.842688][ T11] usb 5-1: Product: syz [ 1672.852923][ T11] usb 5-1: Manufacturer: syz [ 1672.869525][ T11] usb 5-1: SerialNumber: syz [ 1672.919422][ T11] usb 5-1: config 0 descriptor?? [ 1672.935447][T30829] loop1: detected capacity change from 0 to 64 [ 1672.952770][T30783] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1673.246731][ T11] ti_usb_3410_5052 5-1:0.70: TI USB 3410 1 port adapter converter detected [ 1673.308934][T30854] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15377'. [ 1673.316292][ T11] usb 5-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 1673.417712][ T11] usb 5-1: USB disconnect, device number 108 [ 1673.494337][ T11] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 1673.550586][ T11] ti_usb_3410_5052 5-1:0.70: device disconnected [ 1674.007235][T30893] loop3: detected capacity change from 0 to 64 [ 1674.082650][ T11] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 1674.286789][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1674.338408][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1674.391852][ T11] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1674.419645][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.445068][ T11] usb 3-1: config 0 descriptor?? [ 1674.483889][T30914] loop6: detected capacity change from 0 to 128 [ 1674.512595][T30914] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1674.538103][T30914] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1674.558866][T30910] loop3: detected capacity change from 0 to 1024 [ 1674.577213][T30910] EXT4-fs: Ignoring removed bh option [ 1674.640531][T30910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1674.690070][T30925] netlink: 'syz.4.15391': attribute type 178 has an invalid length. [ 1674.764663][T30910] EXT4-fs (loop3): resizing filesystem from 512 to 0 blocks [ 1674.774482][T30910] EXT4-fs warning (device loop3): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 1674.790237][T18900] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1674.854445][T25807] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1674.952864][ T11] isku 0003:1E7D:319C.002E: item fetching failed at offset 6/7 [ 1674.983346][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1675.047347][ T11] isku 0003:1E7D:319C.002E: parse failed [ 1675.078298][ T11] isku 0003:1E7D:319C.002E: probe with driver isku failed with error -22 [ 1675.133858][T30940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15394'. [ 1675.256417][T30952] loop3: detected capacity change from 0 to 64 [ 1675.269186][ T11] usb 3-1: USB disconnect, device number 113 [ 1675.807273][T30979] loop3: detected capacity change from 0 to 16 [ 1675.840482][T30979] erofs (device loop3): mounted with root inode @ nid 36. [ 1675.933523][T30979] erofs (device loop3): invalid fast symlink size 39 @ nid 83 [ 1676.979362][T10968] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 1677.175960][T10968] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1677.215992][T10968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.263996][T10968] usb 2-1: config 0 descriptor?? [ 1677.288826][T10968] cp210x 2-1:0.0: cp210x converter detected [ 1677.324998][T31049] loop3: detected capacity change from 0 to 1024 [ 1677.776339][T10968] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1678.028734][T10968] usb 2-1: USB disconnect, device number 105 [ 1678.065635][T10968] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1678.150121][T10968] cp210x 2-1:0.0: device disconnected [ 1678.251984][T31103] loop3: detected capacity change from 0 to 1024 [ 1678.305618][T31103] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1678.371871][T31103] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1678.417558][T31103] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1678.463433][T31103] Quota error (device loop3): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1678.497364][T31103] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1678.525699][T31103] EXT4-fs error (device loop3): ext4_acquire_dquot:7039: comm syz.3.15438: Failed to acquire dquot type 0 [ 1678.557716][T31103] loop3: lost filesystem error report for type 5 error -117 [ 1678.558453][T31103] Quota error (device loop3): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1678.575767][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1678.575819][ C0] EXT4-fs (loop3): initial error at time 2000001258: ext4_acquire_dquot:7039 [ 1678.575874][ C0] EXT4-fs (loop3): last error at time 2000001258: ext4_acquire_dquot:7039 [ 1678.607642][T31103] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1678.657806][T31103] EXT4-fs error (device loop3): ext4_acquire_dquot:7039: comm syz.3.15438: Failed to acquire dquot type 0 [ 1678.712579][T31103] loop3: lost filesystem error report for type 5 error -117 [ 1678.714945][T31103] EXT4-fs error (device loop3): ext4_free_blocks:6717: comm syz.3.15438: Freeing blocks not in datazone - block = 0, count = 4096 [ 1678.812081][T31103] loop3: lost filesystem error report for type 5 error -117 [ 1678.835876][T31103] Quota error (device loop3): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1678.870622][T31118] loop6: detected capacity change from 0 to 1024 [ 1678.903926][T31103] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1678.978976][T31103] EXT4-fs error (device loop3): ext4_acquire_dquot:7039: comm syz.3.15438: Failed to acquire dquot type 0 [ 1679.013255][T31103] loop3: lost filesystem error report for type 5 error -117 [ 1679.013813][T31103] EXT4-fs (loop3): 1 orphan inode deleted [ 1679.073577][T31103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1679.277903][T31103] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.15438: bg 0: block 10: padding at end of block bitmap is not set [ 1679.300214][T31136] loop2: detected capacity change from 0 to 64 [ 1679.494018][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1679.569685][T31143] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15449'. [ 1679.725417][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1680.225565][T15039] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1680.352992][T16133] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1680.417563][T15039] usb 2-1: Using ep0 maxpacket: 8 [ 1680.426283][T15039] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1680.438564][T15039] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1680.453591][T31190] openvswitch: netlink: Actions may not be safe on all matching packets [ 1680.471176][T15039] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1680.478529][T15039] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1680.489546][T15039] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.507246][T15039] usb 2-1: config 0 descriptor?? [ 1680.534694][T10968] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1680.543166][T16133] usb 5-1: Using ep0 maxpacket: 8 [ 1680.573805][T16133] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1680.615316][T16133] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1680.629152][T16133] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1680.636929][T16133] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 1680.676510][T16133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.725590][T16133] usb 5-1: config 0 descriptor?? [ 1680.747323][T10968] usb 4-1: Using ep0 maxpacket: 8 [ 1680.773353][T10968] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1680.798897][T10968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.826340][T10968] usb 4-1: Product: syz [ 1680.839609][T10968] usb 4-1: Manufacturer: syz [ 1680.857248][T10968] usb 4-1: SerialNumber: syz [ 1680.889861][T10968] usb 4-1: config 0 descriptor?? [ 1680.921358][T10968] gspca_main: se401-2.14.0 probing 047d:5003 [ 1681.022844][T15039] asus 0003:0B05:17E0.002F: unknown main item tag 0x0 [ 1681.053791][T15039] asus 0003:0B05:17E0.002F: unknown main item tag 0x0 [ 1681.081105][T15039] asus 0003:0B05:17E0.002F: unknown main item tag 0x0 [ 1681.098846][T15039] asus 0003:0B05:17E0.002F: unknown main item tag 0x0 [ 1681.116368][T15039] asus 0003:0B05:17E0.002F: unknown main item tag 0x0 [ 1681.145269][T15039] asus 0003:0B05:17E0.002F: unknown main item tag 0x0 [ 1681.152222][T15039] asus 0003:0B05:17E0.002F: unknown main item tag 0x0 [ 1681.182041][T15039] asus 0003:0B05:17E0.002F: unknown main item tag 0x0 [ 1681.219671][T16133] lenovo 0003:17EF:6009.0030: unknown main item tag 0x0 [ 1681.229920][T16133] lenovo 0003:17EF:6009.0030: unknown main item tag 0x0 [ 1681.257514][T15039] asus 0003:0B05:17E0.002F: hidraw0: USB HID v0.00 Device [HID 0b05:17e0] on usb-dummy_hcd.1-1/input0 [ 1681.271852][T16133] lenovo 0003:17EF:6009.0030: hidraw1: USB HID v0.05 Device [HID 17ef:6009] on usb-dummy_hcd.4-1/input0 [ 1681.327545][T15039] usb 2-1: USB disconnect, device number 106 [ 1681.403243][T31242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15470'. [ 1681.460467][ T804] usb 5-1: USB disconnect, device number 109 [ 1681.608389][T31233] fido_id[31233]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1681.775595][T31254] fido_id[31254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1681.871278][T10968] usb 4-1: reset high-speed USB device number 107 using dummy_hcd [ 1682.221992][T31287] loop6: detected capacity change from 0 to 128 [ 1682.369771][T10968] gspca_se401: read req failed req 0x06 error -71 [ 1682.407082][T10968] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 1682.442232][T10968] usb 4-1: USB disconnect, device number 107 [ 1682.505028][ T11] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1682.534825][ T7423] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 1682.710770][ T11] usb 2-1: config 228 has an invalid interface number: 86 but max is 0 [ 1682.728419][ T7423] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1682.749845][ T11] usb 2-1: config 228 has no interface number 0 [ 1682.759811][ T7423] usb 5-1: config 0 has no interface number 0 [ 1682.780693][ T11] usb 2-1: config 228 interface 86 altsetting 1 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1682.801669][ T11] usb 2-1: config 228 interface 86 has no altsetting 0 [ 1682.811583][ T7423] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1682.822720][ T7423] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.834565][ T7423] usb 5-1: Product: syz [ 1682.840285][ T11] usb 2-1: New USB device found, idVendor=0b57, idProduct=9de3, bcdDevice=87.f6 [ 1682.850176][ T7423] usb 5-1: Manufacturer: syz [ 1682.855046][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.863843][ T7423] usb 5-1: SerialNumber: syz [ 1682.870356][ T11] usb 2-1: Product: syz [ 1682.879577][ T7423] usb 5-1: config 0 descriptor?? [ 1682.892934][ T11] usb 2-1: Manufacturer: syz [ 1682.908007][ T11] usb 2-1: SerialNumber: syz [ 1682.940286][ T7423] usb 5-1: selecting invalid altsetting 1 [ 1682.966952][ T7423] dvb_ttusb_budget: ttusb_init_controller: error [ 1682.984848][ T7423] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1683.200385][ T11] usbhid 2-1:228.86: couldn't find an input interrupt endpoint [ 1683.222919][ T7423] DVB: Unable to find symbol stv0299_attach() [ 1683.241882][ T11] usb 2-1: USB disconnect, device number 107 [ 1683.370913][ T7423] DVB: Unable to find symbol tda8083_attach() [ 1683.388636][ T7423] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1683.423624][ T7423] usb 5-1: USB disconnect, device number 110 [ 1684.227073][T31391] netlink: 'syz.0.15499': attribute type 1 has an invalid length. [ 1684.248627][T31391] netlink: 240 bytes leftover after parsing attributes in process `syz.0.15499'. [ 1684.262226][T31391] netlink: 'syz.0.15499': attribute type 1 has an invalid length. [ 1684.887685][T31413] netlink: 'syz.2.15505': attribute type 2 has an invalid length. [ 1686.487963][T31436] loop1: detected capacity change from 0 to 32768 [ 1686.554367][T31436] [ 1686.554367][T31436] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1686.554367][T31436] [ 1686.869383][ T5628] [ 1686.869383][ T5628] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1686.869383][ T5628] [ 1686.869663][ T5628] [ 1686.869663][ T5628] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1686.869663][ T5628] [ 1688.683735][ T7423] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1688.887112][ T7423] usb 5-1: Using ep0 maxpacket: 8 [ 1688.923593][ T7423] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1688.977796][ T7423] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.991219][ T7423] usb 5-1: Product: syz [ 1689.005404][ T7423] usb 5-1: Manufacturer: syz [ 1689.017081][ T7423] usb 5-1: SerialNumber: syz [ 1689.052343][ T7423] usb 5-1: config 0 descriptor?? [ 1689.090575][ T7423] gspca_main: se401-2.14.0 probing 047d:5003 [ 1689.343431][T31573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15557'. [ 1689.805796][T31599] netlink: 277 bytes leftover after parsing attributes in process `syz.6.15563'. [ 1689.842662][T31544] loop3: detected capacity change from 0 to 32768 [ 1689.923158][T31544] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 1689.985160][T31544] JBD2: Ignoring recovery information on journal [ 1689.985648][ T7423] usb 5-1: reset high-speed USB device number 111 using dummy_hcd [ 1690.093555][T31544] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1690.409361][ T7423] gspca_se401: read req failed req 0x06 error -71 [ 1690.437700][ T7423] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 1690.502580][ T7423] usb 5-1: USB disconnect, device number 111 [ 1691.035689][ T5631] ocfs2: Unmounting device (7,3) on (node local) [ 1691.729975][T31664] Bluetooth: MGMT ver 1.23 [ 1691.942159][T31620] loop1: detected capacity change from 0 to 32768 [ 1692.024298][T31620] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1692.139167][T31620] XFS (loop1): Ending clean mount [ 1692.261901][T31699] tipc: Started in network mode [ 1692.267001][T31699] tipc: Node identity , cluster identity 4711 [ 1692.274443][T31699] tipc: Failed to set node id, please configure manually [ 1692.282270][T31699] tipc: Enabling of bearer rejected, failed to enable media [ 1692.303399][ T5783] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1692.373355][ T5628] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1692.525011][ T5783] usb 4-1: Using ep0 maxpacket: 32 [ 1692.543269][ T5783] usb 4-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1692.583935][ T5783] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1692.605535][ T5783] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 1692.644973][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.751378][ T5783] usb 4-1: config 0 descriptor?? [ 1693.261075][ T5783] pantherlord 0003:0810:0001.0031: item fetching failed at offset 2/40 [ 1693.283967][ T5783] pantherlord 0003:0810:0001.0031: parse failed [ 1693.328636][ T5783] pantherlord 0003:0810:0001.0031: probe with driver pantherlord failed with error -22 [ 1693.541527][T15039] usb 4-1: USB disconnect, device number 108 [ 1694.891546][ T5783] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1695.074163][ T5783] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1695.093654][T31801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15620'. [ 1695.110254][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.181285][ T5783] usb 3-1: config 0 descriptor?? [ 1695.220267][ T5783] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1695.681781][ T5783] gspca_cpia1: usb_control_msg 03, error -32 [ 1695.715580][ T5783] gspca_cpia1: usb_control_msg 03, error -71 [ 1695.750033][ T5783] gspca_cpia1: usb_control_msg 01, error -71 [ 1695.771408][ T5783] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1695.814637][ T5783] usb 3-1: USB disconnect, device number 114 [ 1696.921197][T31866] loop6: detected capacity change from 0 to 4096 [ 1696.969555][T31873] loop2: detected capacity change from 0 to 1024 [ 1697.011272][T31873] hfsplus: failed to load extents file [ 1697.025819][T31866] NILFS (loop6): invalid segment: Checksum error in segment payload [ 1697.040927][ T5783] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 1697.081764][T31866] NILFS (loop6): trying rollback from an earlier position [ 1697.165716][T31866] NILFS (loop6): recovery complete [ 1697.211231][T31880] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1697.253796][ T5783] usb 4-1: config 0 has an invalid interface number: 234 but max is 0 [ 1697.274538][ T5783] usb 4-1: config 0 has no interface number 0 [ 1697.281404][ T5783] usb 4-1: config 0 interface 234 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1697.295519][ T5783] usb 4-1: config 0 interface 234 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1697.339080][ T5783] usb 4-1: config 0 interface 234 has no altsetting 0 [ 1697.367639][ T5783] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1697.419758][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.470754][ T5783] usb 4-1: config 0 descriptor?? [ 1698.020286][ T5783] uclogic 0003:28BD:0909.0032: interface is invalid, ignoring [ 1698.055893][T31908] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1698.067373][ T804] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1698.268032][ T804] usb 2-1: Using ep0 maxpacket: 32 [ 1698.289201][ T804] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 1698.289753][ T5783] usb 4-1: USB disconnect, device number 109 [ 1698.304037][ T804] usb 2-1: config 0 has no interface number 0 [ 1698.344827][ T804] usb 2-1: too many endpoints for config 0 interface 52 altsetting 10: 254, using maximum allowed: 30 [ 1698.403655][ T804] usb 2-1: config 0 interface 52 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1698.462800][ T804] usb 2-1: config 0 interface 52 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1698.501899][ T804] usb 2-1: config 0 interface 52 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1698.558632][ T804] usb 2-1: config 0 interface 52 has no altsetting 0 [ 1698.558702][ T804] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1698.558751][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.578235][ T804] usb 2-1: config 0 descriptor?? [ 1699.030171][ T804] hid_parser_main: 5 callbacks suppressed [ 1699.030207][ T804] uclogic 0003:5543:0522.0033: unknown main item tag 0x2 [ 1699.071724][ T804] uclogic 0003:5543:0522.0033: unknown main item tag 0x2 [ 1699.130761][ T804] uclogic 0003:5543:0522.0033: hidraw0: USB HID v0.05 Device [HID 5543:0522] on usb-dummy_hcd.1-1/input52 [ 1699.200665][T31950] loop6: detected capacity change from 0 to 16 [ 1699.211783][T31951] loop3: detected capacity change from 0 to 64 [ 1699.238049][T31950] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 1699.371846][T18900] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1699.393939][ T804] usb 2-1: USB disconnect, device number 108 [ 1699.444530][T18900] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1699.538200][T18893] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1699.600194][T18893] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1699.612646][T31956] fido_id[31956]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1699.808980][T31981] loop6: detected capacity change from 0 to 256 [ 1699.852438][T31981] exfat: Deprecated parameter 'utf8' [ 1699.886030][T31981] exfat: Deprecated parameter 'namecase' [ 1699.941267][T31981] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d) [ 1700.087204][T31990] loop2: detected capacity change from 0 to 256 [ 1700.195200][T31990] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 1700.955576][T32021] bond9: (slave bond_slave_1): Device is not our slave [ 1700.995196][T32021] bond9: option active_slave: invalid value (bond_slave_1) [ 1701.058519][T32021] bond9 (unregistering): Released all slaves [ 1701.504970][T32110] loop3: detected capacity change from 0 to 4096 [ 1701.612715][T32115] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1702.098913][T15039] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1702.146484][T32134] loop3: detected capacity change from 0 to 1024 [ 1702.187020][T32134] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1702.305290][T15039] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1702.351164][T15039] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1702.387340][T15039] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1702.440747][T15039] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1702.476179][T15039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.510579][T15039] usb 2-1: Product: syz [ 1702.525927][T15039] usb 2-1: Manufacturer: syz [ 1702.552462][T15039] usb 2-1: SerialNumber: syz [ 1702.594293][T15039] usb 2-1: config 0 descriptor?? [ 1702.776950][T32158] loop2: detected capacity change from 0 to 64 [ 1704.346095][T32195] loop1: detected capacity change from 0 to 4096 [ 1704.518273][T32195] ntfs3(loop1): Failed to load $Extend (-22). [ 1704.518318][T32195] ntfs3(loop1): Failed to initialize $Extend. [ 1704.816317][T32215] loop2: detected capacity change from 0 to 64 [ 1706.049191][ T5783] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1706.242560][ T5783] usb 3-1: Using ep0 maxpacket: 16 [ 1706.278168][ T5783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1706.331040][ T5783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1706.383362][ T5783] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1706.440973][ T5783] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1706.474625][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.526648][ T5783] usb 3-1: config 0 descriptor?? [ 1706.527051][T32267] loop6: detected capacity change from 0 to 64 [ 1706.614596][T32267] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 1707.066507][ T5783] microsoft 0003:045E:07DA.0034: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1707.125584][ T5783] microsoft 0003:045E:07DA.0034: no inputs found [ 1707.162024][ T5783] microsoft 0003:045E:07DA.0034: could not initialize ff, continuing anyway [ 1707.340249][ T5783] usb 3-1: USB disconnect, device number 115 [ 1707.494245][T32283] fido_id[32283]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1707.967835][T32313] loop6: detected capacity change from 0 to 512 [ 1708.052029][T32313] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.15725: bad orphan inode 17 [ 1708.090775][T32313] loop6: lost filesystem error report for type 5 error -117 [ 1708.092305][T32313] ext4_test_bit(bit=16, block=4) = 1 [ 1708.099841][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1708.099878][ C1] EXT4-fs (loop6): initial error at time 2000001285: ext4_orphan_get:1425 [ 1708.099925][ C1] EXT4-fs (loop6): last error at time 2000001285: ext4_orphan_get:1425 [ 1708.137391][T32313] is_bad_inode(inode)=0 [ 1708.141857][T32313] NEXT_ORPHAN(inode)=0 [ 1708.147581][T32313] max_ino=32 [ 1708.150907][T32313] i_nlink=1 [ 1708.166297][T32313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1708.481844][T25807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1708.789434][T32341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1708.806482][ T5640] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1708.991752][ T5640] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1709.038452][ T5640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1709.096531][ T5640] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1709.116080][ T5640] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1709.150291][ T5640] usb 5-1: Manufacturer: syz [ 1709.201633][ T5640] usb 5-1: config 0 descriptor?? [ 1709.293438][T32362] loop3: detected capacity change from 0 to 64 [ 1709.377490][T32364] netlink: 43 bytes leftover after parsing attributes in process `syz.2.15737'. [ 1709.380913][T32362] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 1709.447002][ T5640] rc_core: IR keymap rc-hauppauge not found [ 1709.479043][ T5640] Registered IR keymap rc-empty [ 1709.506278][ T5640] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1709.604900][ T5640] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input126 [ 1709.856009][ C1] igorplugusb 5-1:0.0: receive overflow invalid: 21 [ 1710.162576][ T5783] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1710.245981][T10690] usb 5-1: USB disconnect, device number 112 [ 1710.375327][ T5783] usb 3-1: Using ep0 maxpacket: 32 [ 1710.379069][T32399] loop6: detected capacity change from 0 to 256 [ 1710.408666][ T5783] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1710.426053][T32400] loop1: detected capacity change from 0 to 1024 [ 1710.436839][T32399] exfat: Deprecated parameter 'utf8' [ 1710.467437][T32399] exfat: Deprecated parameter 'namecase' [ 1710.469034][ T5783] usb 3-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 1710.500824][T32399] exfat: Deprecated parameter 'namecase' [ 1710.517267][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.563727][ T5783] usb 3-1: config 0 descriptor?? [ 1710.595949][T32399] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1711.104707][ T5783] logitech-djreceiver 0003:046D:C51B.0035: unknown main item tag 0x0 [ 1711.136156][ T5783] logitech-djreceiver 0003:046D:C51B.0035: unknown main item tag 0x0 [ 1711.184904][ T5783] logitech-djreceiver 0003:046D:C51B.0035: unknown main item tag 0x0 [ 1711.221580][ T5783] logitech-djreceiver 0003:046D:C51B.0035: unknown main item tag 0x0 [ 1711.261666][ T5783] logitech-djreceiver 0003:046D:C51B.0035: unknown main item tag 0x0 [ 1711.306858][ T5783] logitech-djreceiver 0003:046D:C51B.0035: unknown main item tag 0x0 [ 1711.367266][ T5783] logitech-djreceiver 0003:046D:C51B.0035: unknown main item tag 0x0 [ 1711.416489][ T5783] logitech-djreceiver 0003:046D:C51B.0035: unknown main item tag 0x0 [ 1711.460319][ T5783] logitech-djreceiver 0003:046D:C51B.0035: unknown main item tag 0x0 [ 1711.512676][ T5783] logitech-djreceiver 0003:046D:C51B.0035: unknown main item tag 0x0 [ 1711.602074][ T5783] usb 3-1: USB disconnect, device number 116 [ 1713.178681][T32476] [U]  [ 1713.504808][T13503] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1713.526809][T13503] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1713.539175][T13503] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1713.549577][T13503] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1713.564511][T13503] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1713.641301][T32488] loop3: detected capacity change from 0 to 16 [ 1713.731651][T32488] erofs (device loop3): mounted with root inode @ nid 36. [ 1713.890053][T15039] iguanair 2-1:0.0: failed to get version [ 1713.896556][T15039] iguanair 2-1:0.0: probe with driver iguanair failed with error -110 [ 1713.928444][ T30] audit: type=1800 audit(2000001291.178:522): pid=32488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.15762" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 1713.968432][T15039] usb 2-1: USB disconnect, device number 109 [ 1714.491744][T32525] loop1: detected capacity change from 0 to 256 [ 1714.566760][T32525] exfat: Deprecated parameter 'utf8' [ 1714.591484][T32525] exfat: Deprecated parameter 'namecase' [ 1714.621890][T32525] exfat: Deprecated parameter 'namecase' [ 1714.686366][T32525] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1715.085849][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 1715.589446][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 1715.773548][T17829] Bluetooth: hci6: command tx timeout [ 1715.846545][T32480] wlan0 speed is unknown, defaulting to 1000 [ 1715.882664][T32566] loop1: detected capacity change from 0 to 4096 [ 1715.996530][T32533] loop2: detected capacity change from 0 to 32768 [ 1716.052167][T32566] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1716.083923][ T48] bond0: (slave netdevsim1): Releasing backup interface [ 1716.084551][T32533] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.15771 (32533) [ 1716.167735][T32533] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1716.176529][T32566] ntfs3(loop1): ino=1a, mi_enum_attr [ 1716.197883][T32566] ntfs3(loop1): ino=1a, mi_enum_attr [ 1716.213865][T32566] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 1716.226785][T32533] BTRFS info (device loop2): using blake2b checksum algorithm [ 1716.270199][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 1716.347640][T32566] ntfs3: Volume is dirty and "force" flag is not set! [ 1716.444290][T32533] BTRFS info (device loop2): enabling ssd optimizations [ 1716.445811][T32480] lo speed is unknown, defaulting to 1000 [ 1716.460413][T32533] BTRFS info (device loop2): turning on async discard [ 1716.469068][T32533] BTRFS info (device loop2): enabling free space tree [ 1716.490801][T32533] BTRFS info (device loop2): use zstd compression, level 3 [ 1716.538496][T15039] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 1716.744800][T15039] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1716.758475][T15039] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1716.793061][T15039] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1716.838864][T15039] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1716.895230][T15039] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.968711][T15039] usb 4-1: config 0 descriptor?? [ 1717.006032][ T5629] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1717.006354][T32581] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1717.035634][ T48] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 1717.204006][T32615] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1717.694518][T15039] hid_parser_main: 30 callbacks suppressed [ 1717.694558][T15039] logitech 0003:046D:C298.0036: unknown main item tag 0x2 [ 1717.785861][T15039] logitech 0003:046D:C298.0036: unknown main item tag 0x2 [ 1717.855358][T15039] logitech 0003:046D:C298.0036: global environment stack underflow [ 1717.894777][T15039] logitech 0003:046D:C298.0036: item 0 1 1 11 parsing failed [ 1717.938676][T15039] logitech 0003:046D:C298.0036: parse failed [ 1717.982346][T15039] logitech 0003:046D:C298.0036: probe with driver logitech failed with error -22 [ 1718.004513][T17829] Bluetooth: hci6: command tx timeout [ 1718.031152][T15039] usb 4-1: USB disconnect, device number 110 [ 1719.082061][T32480] €Â speed is unknown, defaulting to 1000 [ 1719.525175][T32677] loop6: detected capacity change from 0 to 4096 [ 1719.678354][T32677] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1719.808187][T32710] loop1: detected capacity change from 0 to 1024 [ 1719.832315][T32677] ntfs3(loop6): Failed to load $Extend (-22). [ 1719.896716][T32677] ntfs3(loop6): Failed to initialize $Extend. [ 1720.072506][T10968] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 1720.106570][T32677] ntfs3(loop6): ino=5, "/" fiemap is not supported for directories [ 1720.223675][T17829] Bluetooth: hci6: command tx timeout [ 1720.295268][T10968] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1720.344892][T10968] usb 3-1: config 0 has no interface number 0 [ 1720.405010][T10968] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1720.445702][T32732] binder: 32731:32732 ioctl 8080583a 0 returned -22 [ 1720.453469][T10968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.481859][T32732] binder: 32731:32732 ioctl c0046209 0 returned -22 [ 1720.489500][T10968] usb 3-1: Product: syz [ 1720.501911][T10968] usb 3-1: Manufacturer: syz [ 1720.524558][T10968] usb 3-1: SerialNumber: syz [ 1720.566165][T10968] usb 3-1: config 0 descriptor?? [ 1720.850209][T10968] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1720.902221][T10968] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1720.955339][T10968] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1720.976777][T10968] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1721.053043][T10968] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1721.370813][T10968] usb 3-1: USB disconnect, device number 117 [ 1721.509626][T10968] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1721.564054][ T307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15820'. [ 1721.576786][T10968] keyspan 3-1:0.133: device disconnected [ 1721.588559][ T307] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15820'. [ 1721.634823][ T307] netlink: 'syz.6.15820': attribute type 13 has an invalid length. [ 1721.776534][ T804] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1722.003809][ T804] usb 4-1: Using ep0 maxpacket: 16 [ 1722.020751][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1722.039047][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1722.053194][ T804] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1722.116772][ T804] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 1722.127983][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.142223][ T804] usb 4-1: config 0 descriptor?? [ 1722.434369][T17829] Bluetooth: hci6: command tx timeout [ 1722.575776][ T332] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1722.676073][ T804] lenovo 0003:17EF:6067.0037: unknown global tag 0xc [ 1722.690658][ T804] lenovo 0003:17EF:6067.0037: item 0 4 1 12 parsing failed [ 1722.699001][ T804] lenovo 0003:17EF:6067.0037: hid_parse failed [ 1722.710149][ T804] lenovo 0003:17EF:6067.0037: probe with driver lenovo failed with error -22 [ 1722.923139][T15039] usb 4-1: USB disconnect, device number 111 [ 1723.819191][ T352] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1724.084131][ T349] loop2: detected capacity change from 0 to 40427 [ 1724.129172][ T349] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 1724.137394][ T349] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1724.167621][ T349] F2FS-fs (loop2): invalid crc_offset: 1 [ 1724.323251][T10968] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1724.447303][ T349] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1724.528781][T10968] usb 4-1: Using ep0 maxpacket: 32 [ 1724.541340][T10968] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1724.544692][ T349] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1724.558971][ T349] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1724.592493][T10968] usb 4-1: config 0 has no interface number 0 [ 1724.647557][T10968] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1724.659325][T10968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.689141][T10968] usb 4-1: Product: syz [ 1724.693481][T10968] usb 4-1: Manufacturer: syz [ 1724.698191][T10968] usb 4-1: SerialNumber: syz [ 1724.713650][T10968] usb 4-1: config 0 descriptor?? [ 1724.749488][T10968] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1724.758800][T10968] usb 4-1: selecting invalid altsetting 1 [ 1724.765787][T10968] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1724.781716][T10968] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1724.799115][T10968] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1724.840143][T10968] usb 4-1: media controller created [ 1724.844674][ T5629] syz-executor: attempt to access beyond end of device [ 1724.844674][ T5629] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1724.867814][T10968] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1724.903657][ T5629] CPU: 1 UID: 0 PID: 5629 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1724.903723][ T5629] Tainted: [L]=SOFTLOCKUP [ 1724.903739][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1724.903767][ T5629] Call Trace: [ 1724.903790][ T5629] [ 1724.903807][ T5629] dump_stack_lvl+0x100/0x190 [ 1724.903879][ T5629] f2fs_stop_checkpoint+0x5e6/0xb30 [ 1724.903952][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.904006][ T5629] ? errseq_set+0xe3/0x150 [ 1724.904073][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.904133][ T5629] f2fs_write_end_bio+0xf53/0x1340 [ 1724.904213][ T5629] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 1724.904291][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.904354][ T5629] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1724.904425][ T5629] bio_endio+0x778/0x8e0 [ 1724.904478][ T5629] submit_bio_noacct+0x64c/0x1ff0 [ 1724.904558][ T5629] f2fs_submit_write_bio+0x133/0x330 [ 1724.904627][ T5629] __submit_merged_bio+0x330/0x7b0 [ 1724.904696][ T5629] ? rcu_is_watching+0x12/0xc0 [ 1724.904777][ T5629] __submit_merged_write_cond+0x3fe/0x510 [ 1724.904864][ T5629] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1724.904953][ T5629] ? __pfx___might_resched+0x10/0x10 [ 1724.905005][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.905056][ T5629] ? folio_clear_dirty_for_io+0x178/0x960 [ 1724.905141][ T5629] f2fs_write_cache_pages+0x20e9/0x2630 [ 1724.905222][ T5629] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1724.905272][ T5629] ? check_prev_add+0xfe/0xe60 [ 1724.905329][ T5629] ? __lock_acquire+0x49f/0x1a40 [ 1724.905440][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.905543][ T5629] ? check_noncircular+0x97/0x160 [ 1724.905590][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.905642][ T5629] ? rcu_is_watching+0x12/0xc0 [ 1724.905712][ T5629] f2fs_write_data_pages+0x799/0x16d0 [ 1724.905763][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.905821][ T5629] ? check_prev_add+0xfe/0xe60 [ 1724.905880][ T5629] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1724.905954][ T5629] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1724.906010][ T5629] do_writepages+0x278/0x600 [ 1724.906087][ T5629] ? __pfx_do_writepages+0x10/0x10 [ 1724.906156][ T5629] ? do_raw_spin_unlock+0x145/0x1e0 [ 1724.906218][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.906269][ T5629] ? _raw_spin_unlock+0x28/0x50 [ 1724.906343][ T5629] filemap_writeback+0x22d/0x2e0 [ 1724.906390][ T5629] ? __pfx_filemap_writeback+0x10/0x10 [ 1724.906431][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.906544][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.906595][ T5629] ? find_held_lock+0x2b/0x80 [ 1724.906661][ T5629] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 1724.906713][ T5629] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 1724.906764][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.906835][ T5629] f2fs_sync_dirty_inodes+0x46a/0x970 [ 1724.906911][ T5629] block_operations+0x2a6/0xfc0 [ 1724.906976][ T5629] ? __pfx_block_operations+0x10/0x10 [ 1724.907091][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.907148][ T5629] ? ktime_get+0x22c/0x320 [ 1724.907201][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.907253][ T5629] ? rcu_is_watching+0x12/0xc0 [ 1724.907327][ T5629] f2fs_write_checkpoint+0x58b/0x53d0 [ 1724.907384][ T5629] ? _raw_spin_unlock_irq+0x23/0x50 [ 1724.907449][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.907500][ T5629] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1724.907561][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.907612][ T5629] ? __wait_for_common+0x1f3/0x4c0 [ 1724.907682][ T5629] ? __pfx_schedule_timeout+0x10/0x10 [ 1724.907748][ T5629] ? __pfx___wait_for_common+0x10/0x10 [ 1724.907825][ T5629] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1724.907880][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.907944][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.907995][ T5629] ? rcu_is_watching+0x12/0xc0 [ 1724.908056][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.908108][ T5629] ? kthread_stop+0x280/0x630 [ 1724.908184][ T5629] kill_f2fs_super+0x3f1/0x4a0 [ 1724.908239][ T5629] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1724.908315][ T5629] ? lockdep_hardirqs_on+0x78/0x100 [ 1724.908385][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.908438][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.908510][ T5629] deactivate_locked_super+0xc1/0x1b0 [ 1724.908569][ T5629] deactivate_super+0xe7/0x110 [ 1724.908623][ T5629] cleanup_mnt+0x21f/0x450 [ 1724.908691][ T5629] task_work_run+0x150/0x240 [ 1724.908738][ T5629] ? __pfx_task_work_run+0x10/0x10 [ 1724.908798][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.908860][ T5629] exit_to_user_mode_loop+0x1d8/0x6f0 [ 1724.908918][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1724.908965][ T5629] ? rcu_is_watching+0x12/0xc0 [ 1724.909033][ T5629] do_syscall_64+0x666/0x870 [ 1724.909083][ T5629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.909130][ T5629] RIP: 0033:0x7f47fb39f097 [ 1724.909192][ T5629] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1724.909235][ T5629] RSP: 002b:00007ffd666660a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1724.909277][ T5629] RAX: 0000000000000000 RBX: 00007f47fb4332ca RCX: 00007f47fb39f097 [ 1724.909305][ T5629] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd66666160 [ 1724.909332][ T5629] RBP: 00007ffd66666160 R08: 00007ffd66667160 R09: 00000000ffffffff [ 1724.909360][ T5629] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd666671f0 [ 1724.909388][ T5629] R13: 00007f47fb4332ca R14: 0000000000193056 R15: 00007ffd66667230 [ 1724.909448][ T5629] [ 1724.909466][ T5629] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1725.034823][T10968] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1725.539434][T10968] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1725.547662][T10968] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1725.658182][T10968] usb 4-1: USB disconnect, device number 112 [ 1727.093755][ T413] netlink: 'syz.3.15841': attribute type 21 has an invalid length. [ 1727.107490][ T413] IPv6: NLM_F_CREATE should be specified when creating new route [ 1727.117639][ T413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1727.125018][ T413] IPv6: NLM_F_CREATE should be set when creating new route [ 1727.132784][ T413] IPv6: NLM_F_CREATE should be set when creating new route [ 1727.140136][ T413] IPv6: NLM_F_CREATE should be set when creating new route [ 1727.192625][ T414] netlink: 'syz.3.15841': attribute type 21 has an invalid length. [ 1727.202542][ T414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1727.352680][ T30] audit: type=1326 audit(2000001303.753:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=416 comm="syz.3.15842" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9b39de59 code=0x7ffc0000 [ 1727.384273][ T30] audit: type=1326 audit(2000001303.781:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=416 comm="syz.3.15842" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9b39de59 code=0x7ffc0000 [ 1727.428354][ T30] audit: type=1326 audit(2000001303.790:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=416 comm="syz.3.15842" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9b39de59 code=0x7ffc0000 [ 1727.489455][ T30] audit: type=1326 audit(2000001303.790:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=416 comm="syz.3.15842" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9b39de59 code=0x7ffc0000 [ 1727.517370][ T30] audit: type=1326 audit(2000001303.790:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=416 comm="syz.3.15842" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5d9b39de59 code=0x7ffc0000 [ 1727.546476][ T30] audit: type=1326 audit(2000001303.790:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=416 comm="syz.3.15842" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9b39de59 code=0x7ffc0000 [ 1727.576352][ T30] audit: type=1326 audit(2000001303.790:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=416 comm="syz.3.15842" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9b39de59 code=0x7ffc0000 [ 1727.610577][ T30] audit: type=1326 audit(2000001303.818:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=416 comm="syz.3.15842" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9b39de59 code=0x7ffc0000 [ 1727.638350][ T30] audit: type=1326 audit(2000001303.818:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=416 comm="syz.3.15842" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9b39de59 code=0x7ffc0000 [ 1727.670814][ T30] audit: type=1326 audit(2000001303.818:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=416 comm="syz.3.15842" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5d9b39de59 code=0x7ffc0000 [ 1727.770093][ T48] bond0 (unregistering): Released all slaves [ 1727.793345][ T48] bond1 (unregistering): Released all slaves [ 1727.862267][ T48] bond2 (unregistering): Released all slaves [ 1727.887142][ T48] bond3 (unregistering): Released all slaves [ 1727.908916][ T48] bond4 (unregistering): Released all slaves [ 1727.940522][ T48] bond5 (unregistering): Released all slaves [ 1727.969016][ T48] bond6 (unregistering): Released all slaves [ 1728.004964][ T48] bond7 (unregistering): Released all slaves [ 1728.037149][ T48] bond8 (unregistering): Released all slaves [ 1728.068986][ T48] bond9 (unregistering): Released all slaves [ 1728.095862][ T48] bond10 (unregistering): Released all slaves [ 1728.171378][ T5284] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1728.965148][ T48] : left promiscuous mode [ 1729.730725][ T502] loop3: detected capacity change from 0 to 64 [ 1729.828840][ T516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15860'. [ 1729.873213][ T48] ´: left promiscuous mode [ 1730.106697][ T530] overlayfs: overlapping lowerdir path [ 1730.416054][ T545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15864'. [ 1731.346098][ T609] tmpfs: Invalid gid '0x00000000ffffffff' [ 1731.727425][ T627] tipc: Enabling not permitted [ 1731.736562][ T627] tipc: Enabling of bearer rejected, failed to enable media [ 1731.754834][T32480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.787667][T32480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.800831][T32480] bridge_slave_0: entered allmulticast mode [ 1731.819391][T32480] bridge_slave_0: entered promiscuous mode [ 1732.091846][ T5284] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1732.112612][T32480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.134320][T32480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.154508][T32480] bridge_slave_1: entered allmulticast mode [ 1732.169810][T32480] bridge_slave_1: entered promiscuous mode [ 1732.464410][T32480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1732.519055][T32480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1732.918369][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1732.918400][ T30] audit: type=1326 audit(2000001308.968:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=709 comm="syz.2.15885" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fb39de59 code=0x7ffc0000 [ 1733.065098][ T30] audit: type=1326 audit(2000001308.968:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=709 comm="syz.2.15885" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fb39de59 code=0x7ffc0000 [ 1733.066600][T32480] team0: Port device team_slave_0 added [ 1733.182461][ T30] audit: type=1326 audit(2000001308.968:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=709 comm="syz.2.15885" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f47fb39de59 code=0x7ffc0000 [ 1733.308095][T32480] team0: Port device team_slave_1 added [ 1733.322765][ T30] audit: type=1326 audit(2000001308.968:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=709 comm="syz.2.15885" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fb39de59 code=0x7ffc0000 [ 1733.354440][ T733] loop2: detected capacity change from 0 to 64 [ 1733.457715][ T30] audit: type=1326 audit(2000001308.977:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=709 comm="syz.2.15885" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f47fb39de59 code=0x7ffc0000 [ 1733.621234][ T30] audit: type=1326 audit(2000001308.977:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=709 comm="syz.2.15885" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fb39de59 code=0x7ffc0000 [ 1733.775936][T32480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1733.825723][T32480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1733.934310][T32480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1734.123425][ T48] hsr_slave_0: left promiscuous mode [ 1734.159150][ T48] hsr_slave_1: left promiscuous mode [ 1734.201048][ T48] virt_wifi0: left promiscuous mode [ 1734.345193][ T786] loop1: detected capacity change from 0 to 256 [ 1735.014444][ T814] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 1735.096883][ T813] loop2: detected capacity change from 0 to 2048 [ 1735.160737][ T813] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1736.202137][ T845] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15913'. [ 1736.333615][T32480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1736.344618][T32480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1736.372357][T32480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1736.467807][ T5284] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1736.736582][T32480] hsr_slave_0: entered promiscuous mode [ 1736.779089][T32480] hsr_slave_1: entered promiscuous mode [ 1736.809444][T32480] debugfs: 'hsr0' already exists in 'hsr' [ 1736.833896][T32480] Cannot create hsr debugfs directory [ 1737.207175][ T928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15920'. [ 1737.244959][ T928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15920'. [ 1737.529804][ T912] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1737.605801][ T912] bond6 (unregistering): Released all slaves [ 1737.909068][ T5783] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1738.050328][ T48] IPVS: stop unused estimator thread 0... [ 1738.079342][ T5783] usb 5-1: Using ep0 maxpacket: 32 [ 1738.098509][ T5783] usb 5-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1738.136958][ T5783] usb 5-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 1738.187247][ T5783] usb 5-1: Product: syz [ 1738.204808][ T5783] usb 5-1: Manufacturer: syz [ 1738.216519][ T5783] usb 5-1: SerialNumber: syz [ 1738.252915][ T5783] usb 5-1: config 0 descriptor?? [ 1739.212418][ T5783] usb 5-1: reset high-speed USB device number 113 using dummy_hcd [ 1739.641312][ T5783] usb 5-1: [UEAGLE-ATM] interface 1 not found [ 1739.652845][ T5284] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1739.670996][ T5783] ueagle-atm 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1739.698021][T32480] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1739.724685][ T5783] usb 5-1: USB disconnect, device number 113 [ 1739.792013][T32480] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1739.829616][T32480] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1739.912466][T32480] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1739.943750][T32480] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1739.998661][T32480] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1740.027945][T32480] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1740.158787][T32480] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1740.347608][ T1190] loop3: detected capacity change from 0 to 2048 [ 1740.445380][ T1190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1740.586356][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1740.587935][T32480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1740.702974][T32480] 8021q: adding VLAN 0 to HW filter on device team0 [ 1740.724970][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1740.732291][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1740.744205][ T1208] netlink: 'syz.4.15947': attribute type 2 has an invalid length. [ 1740.810506][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1740.817783][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1740.958207][ T1208] : entered promiscuous mode [ 1741.189039][T10690] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1741.390136][T10690] usb 4-1: Using ep0 maxpacket: 16 [ 1741.409848][T10690] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1741.478765][T10690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1741.542803][T10690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1741.570190][T10690] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1741.609878][T10690] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1741.642725][T10690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1741.677587][ T1239] loop6: detected capacity change from 0 to 4096 [ 1741.705524][T10690] usb 4-1: config 0 descriptor?? [ 1741.807367][ T1239] ntfs3(loop6): Failed to load $Extend (-22). [ 1741.848121][ T1239] ntfs3(loop6): Failed to initialize $Extend. [ 1742.111746][ T1265] loop2: detected capacity change from 0 to 256 [ 1742.164150][ T1265] exfat: Deprecated parameter 'namecase' [ 1742.200129][ T1265] exfat: Deprecated parameter 'namecase' [ 1742.225464][ T1265] exfat: Deprecated parameter 'namecase' [ 1742.284604][T10690] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0038/input/input127 [ 1742.327588][ T1265] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 1742.713271][T10690] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0038/input/input128 [ 1743.062579][T10690] kye 0003:0458:5013.0038: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 1743.214503][ T1304] comedi comedi3: pcl818: I/O base address or length out of range [ 1743.254573][T10690] usb 4-1: USB disconnect, device number 113 [ 1743.540105][ T1306] fido_id[1306]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1743.789291][ T1341] loop6: detected capacity change from 0 to 256 [ 1743.862480][ T1341] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1743.987553][ T1350] netlink: 'syz.2.15971': attribute type 25 has an invalid length. [ 1744.100760][ T1351] loop3: detected capacity change from 0 to 1024 [ 1744.221676][ T1351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1744.267040][ T1351] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 623: comm syz.3.15972: Attempting to read directory block (623) that is past i_size (638464) [ 1744.304005][T32480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1744.469303][ T1351] EXT4-fs (loop3): Remounting filesystem read-only [ 1744.592994][ T1372] loop2: detected capacity change from 0 to 256 [ 1744.698073][ T1372] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffac3354, utbl_chksum : 0xe619d30d) [ 1744.770883][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1745.334187][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1745.499277][ T1395] loop6: detected capacity change from 0 to 4096 [ 1745.529306][ T1395] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1745.665713][ T1395] ntfs3(loop6): ino=19, mi_enum_attr [ 1745.665770][ T1395] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1745.670487][ T1395] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 1745.752993][ T1416] netlink: zone id is out of range [ 1745.753022][ T1416] netlink: zone id is out of range [ 1745.753064][ T1416] netlink: zone id is out of range [ 1745.753081][ T1416] netlink: zone id is out of range [ 1745.753099][ T1416] netlink: zone id is out of range [ 1745.753115][ T1416] netlink: zone id is out of range [ 1745.753131][ T1416] netlink: zone id is out of range [ 1745.753148][ T1416] netlink: zone id is out of range [ 1745.753164][ T1416] netlink: zone id is out of range [ 1745.753180][ T1416] netlink: zone id is out of range [ 1745.874276][T32480] veth0_vlan: entered promiscuous mode [ 1745.964034][T32480] veth1_vlan: entered promiscuous mode [ 1746.110157][T32480] veth0_macvtap: entered promiscuous mode [ 1746.140379][T32480] veth1_macvtap: entered promiscuous mode [ 1746.255492][T32480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1746.313392][T32480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1746.382330][ T14] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.384474][T18900] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.384584][T18900] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.384717][T18900] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.748501][ T1468] netlink: 'syz.3.15996': attribute type 1 has an invalid length. [ 1747.086648][T18891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1747.134651][T18891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1747.515532][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1747.558179][ T1505] loop2: detected capacity change from 0 to 256 [ 1747.565430][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1747.708516][ T1505] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1747.774795][ T1513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16006'. [ 1748.789219][ T1546] loop1: detected capacity change from 0 to 512 [ 1748.893693][ T1546] EXT4-fs: Ignoring removed nobh option [ 1748.947575][ T1546] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1748.999265][ T1546] EXT4-fs (loop1): 1 truncate cleaned up [ 1749.113778][ T1546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1749.381343][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1750.037430][ T1533] loop7: detected capacity change from 0 to 40427 [ 1750.116193][ T5783] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1750.299728][ T5783] usb 4-1: Using ep0 maxpacket: 8 [ 1750.314490][ T5783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1750.337541][ T5783] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1750.366875][ T5783] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1750.433821][T13503] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1750.451747][T13503] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1750.464872][T13503] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1750.473178][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.485729][T13503] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1750.503021][T13503] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1750.514877][ T5783] usb 4-1: config 0 descriptor?? [ 1750.585238][T18891] bond0: (slave netdevsim1): Releasing backup interface [ 1751.024689][ T5783] uclogic 0003:28BD:0071.0039: interface is invalid, ignoring [ 1751.274902][T10690] usb 4-1: USB disconnect, device number 114 [ 1751.525992][ T1627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16028'. [ 1752.237148][ T30] audit: type=1326 audit(2000001327.057:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1657 comm="syz.1.16034" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd370b9de59 code=0x0 [ 1752.282874][ T1658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16035'. [ 1752.335868][T18891] bridge_slave_1: left allmulticast mode [ 1752.343871][T18891] bridge_slave_1: left promiscuous mode [ 1752.357174][T18891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.389749][T18891] bridge_slave_0: left allmulticast mode [ 1752.411281][T18891] bridge_slave_0: left promiscuous mode [ 1752.440751][T18891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.549605][T18891] dvmrp1: left allmulticast mode [ 1752.568407][T18891] dvmrp8: left allmulticast mode [ 1752.780327][T13503] Bluetooth: hci0: command tx timeout [ 1753.413607][ T1694] loop6: detected capacity change from 0 to 128 [ 1754.987066][T13503] Bluetooth: hci0: command tx timeout [ 1755.343574][ T11] IPVS: starting estimator thread 0... [ 1755.456205][ T1757] IPVS: using max 21 ests per chain, 50400 per kthread [ 1756.077489][ T1780] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16067'. [ 1756.116965][ T1780] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16067'. [ 1756.143939][ T1780] netlink: 'syz.7.16067': attribute type 12 has an invalid length. [ 1756.190617][ T1780] netlink: 'syz.7.16067': attribute type 13 has an invalid length. [ 1756.648455][ T1768] loop3: detected capacity change from 0 to 32768 [ 1756.659314][ T1768] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.16064 (1768) [ 1756.845585][ T1768] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1756.871598][ T1768] BTRFS info (device loop3): using sha256 checksum algorithm [ 1757.161034][ T1768] BTRFS info (device loop3): enabling ssd optimizations [ 1757.174899][ T1768] BTRFS info (device loop3): turning on async discard [ 1757.193990][ T1768] BTRFS info (device loop3): enabling free space tree [ 1757.234247][T13503] Bluetooth: hci0: command tx timeout [ 1757.966218][ T11] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1758.195354][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 1758.204408][ T5631] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1758.205598][ T11] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1758.234731][ T11] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1758.273805][ T11] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1758.283029][ T11] usb 5-1: Product: syz [ 1758.287361][ T11] usb 5-1: Manufacturer: syz [ 1758.292003][ T11] usb 5-1: SerialNumber: syz [ 1758.303586][ T11] usb 5-1: config 0 descriptor?? [ 1758.325871][ T1816] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1758.710211][ T5640] usb 5-1: USB disconnect, device number 114 [ 1759.431735][T13503] Bluetooth: hci0: command tx timeout [ 1761.264016][T18891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1761.277678][T18891] bond0 (unregistering): Released all slaves [ 1761.299974][T18891] bond1 (unregistering): Released all slaves [ 1761.325683][T18891] bond2 (unregistering): Released all slaves [ 1761.350039][T18891] bond3 (unregistering): Released all slaves [ 1761.375296][ T5284] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1761.456228][ T1576] wlan0 speed is unknown, defaulting to 1000 [ 1761.546713][ T1576] lo speed is unknown, defaulting to 1000 [ 1762.788116][ T1894] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16091'. [ 1762.947517][ T1898] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16091'. [ 1763.567132][ T1911] loop6: detected capacity change from 0 to 2048 [ 1763.599307][ T1911] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=2362, location=2362 [ 1763.649763][ T1911] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1763.770763][ T1911] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1763.899089][ T1911] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1764.074692][ T1921] loop3: detected capacity change from 0 to 4096 [ 1764.087246][ T1921] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1764.337161][ T1576] €Â speed is unknown, defaulting to 1000 [ 1764.354386][ T1921] ntfs3(loop3): ino=19, mi_enum_attr [ 1764.384610][ T1921] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1764.437976][ T1921] ntfs3(loop3): ino=1a, mi_enum_attr [ 1764.449158][ T1921] ntfs3(loop3): ino=1a, mi_enum_attr [ 1764.490737][ T1921] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 1766.214100][ T11] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 1766.395513][ T11] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 1766.418835][ T11] usb 5-1: config 0 has an invalid interface number: 148 but max is 2 [ 1766.440603][ T11] usb 5-1: config 0 has no interface number 0 [ 1766.465747][ T11] usb 5-1: config 0 has no interface number 1 [ 1766.488923][ T11] usb 5-1: too many endpoints for config 0 interface 148 altsetting 40: 36, using maximum allowed: 30 [ 1766.510860][ T11] usb 5-1: config 0 interface 148 altsetting 40 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 1766.558955][ T11] usb 5-1: config 0 interface 148 has no altsetting 0 [ 1766.587963][ T11] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1766.624677][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.644376][T18891] hsr_slave_0: left promiscuous mode [ 1766.682550][ T11] usb 5-1: config 0 descriptor?? [ 1766.691340][T18891] hsr_slave_1: left promiscuous mode [ 1766.729081][T18891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1766.833936][T18891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1766.967672][ T11] qcserial 5-1:0.2: Qualcomm USB modem converter detected [ 1767.200469][ T11] usb 5-1: string descriptor 0 read error: -71 [ 1767.297022][ T11] usb 5-1: USB disconnect, device number 115 [ 1767.411128][ T11] qcserial 5-1:0.2: device disconnected [ 1769.049172][ T2130] loop6: detected capacity change from 0 to 256 [ 1769.087255][ T2130] exfat: Deprecated parameter 'utf8' [ 1769.102685][ T2130] exfat: Deprecated parameter 'namecase' [ 1769.120566][ T2130] exfat: Deprecated parameter 'namecase' [ 1769.150151][ T2130] exfat: Deprecated parameter 'utf8' [ 1769.196166][ T2130] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1769.214770][ T2130] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 1769.251364][ T2130] exFAT-fs (loop6): start_clu is invalid cluster(0x400) [ 1771.585102][T18891] team0 (unregistering): Port device team_slave_1 removed [ 1771.628543][T18891] team0 (unregistering): Port device team_slave_0 removed [ 1771.901369][ T2103] bridge_slave_1: default FDB implementation only supports local addresses [ 1772.606085][ T2201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16149'. [ 1773.434989][T18891] IPVS: stop unused estimator thread 0... [ 1773.848912][ T1576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1773.895844][ T1576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.918743][ T1576] bridge_slave_0: entered allmulticast mode [ 1773.971181][ T1576] bridge_slave_0: entered promiscuous mode [ 1774.137868][ T1576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1774.153756][ T1576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.168961][ T2305] net_ratelimit: 4 callbacks suppressed [ 1774.168992][ T2305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1774.196398][ T1576] bridge_slave_1: entered allmulticast mode [ 1774.228324][ T2307] loop3: detected capacity change from 0 to 256 [ 1774.248217][ T1576] bridge_slave_1: entered promiscuous mode [ 1774.279185][ T2307] exfat: Deprecated parameter 'utf8' [ 1774.352784][ T2307] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1774.529739][ T1576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1774.623824][ T1576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1774.892056][ T1576] team0: Port device team_slave_0 added [ 1774.977269][ T1576] team0: Port device team_slave_1 added [ 1775.228134][ T1576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1775.274376][ T1576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1775.429807][ T1576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1775.458309][ T1576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1775.497103][ T1576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1775.583562][T10690] [ 1775.583581][T10690] ====================================================== [ 1775.583603][T10690] WARNING: possible circular locking dependency detected [ 1775.583627][T10690] syzkaller #0 Tainted: G L [ 1775.583652][T10690] ------------------------------------------------------ [ 1775.583669][T10690] kworker/1:4/10690 is trying to acquire lock: [ 1775.583693][T10690] ffff88801beca0b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x72/0x310 [ 1775.583808][T10690] [ 1775.583808][T10690] but task is already holding lock: [ 1775.583822][T10690] ffffffff8e9d2460 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x320 [ 1775.583935][T10690] [ 1775.583935][T10690] which lock already depends on the new lock. [ 1775.583935][T10690] [ 1775.583951][T10690] [ 1775.583951][T10690] the existing dependency chain (in reverse order) is: [ 1775.583968][T10690] [ 1775.583968][T10690] -> #2 (console_lock){+.+.}-{0:0}: [ 1775.584023][T10690] lock_acquire+0x1b9/0x370 [ 1775.584072][T10690] console_lock+0x7a/0xa0 [ 1775.584119][T10690] con_flush_chars+0x63/0x90 [ 1775.584160][T10690] n_tty_write+0xc26/0x1160 [ 1775.584220][T10690] file_tty_write.isra.0+0x4d2/0x890 [ 1775.584275][T10690] vfs_write+0x6ac/0x1050 [ 1775.584410][T10690] ksys_write+0x12a/0x250 [ 1775.584460][T10690] do_syscall_64+0x115/0x870 [ 1775.584501][T10690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.584545][T10690] [ 1775.584545][T10690] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 1775.584602][T10690] lock_acquire+0x1b9/0x370 [ 1775.584645][T10690] down_write+0x8b/0x1f0 [ 1775.584686][T10690] n_tty_flush_buffer+0x25/0x1b0 [ 1775.584748][T10690] tty_buffer_flush+0x239/0x310 [ 1775.584795][T10690] tty_ldisc_flush+0x68/0xf0 [ 1775.584833][T10690] tty_port_close_start+0x306/0x500 [ 1775.584889][T10690] tty_port_close+0x26/0x170 [ 1775.584943][T10690] uart_close+0x7d/0x240 [ 1775.584981][T10690] tty_release+0x40e/0x1300 [ 1775.585027][T10690] __fput+0x3ff/0xb50 [ 1775.585060][T10690] task_work_run+0x150/0x240 [ 1775.585102][T10690] exit_to_user_mode_loop+0x1d8/0x6f0 [ 1775.585153][T10690] do_syscall_64+0x666/0x870 [ 1775.585186][T10690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.585225][T10690] [ 1775.585225][T10690] -> #0 (&buf->lock){+.+.}-{4:4}: [ 1775.585279][T10690] check_prev_add+0xeb/0xe60 [ 1775.585326][T10690] __lock_acquire+0x136c/0x1a40 [ 1775.585368][T10690] lock_acquire+0x1b9/0x370 [ 1775.585408][T10690] __mutex_lock+0x1a4/0x1bd0 [ 1775.585442][T10690] tty_buffer_flush+0x72/0x310 [ 1775.585485][T10690] tty_ldisc_flush+0xad/0xf0 [ 1775.585523][T10690] __do_SAK+0x368/0x480 [ 1775.585568][T10690] vc_SAK+0x7f/0x320 [ 1775.585624][T10690] process_one_work+0xa23/0x1940 [ 1775.585661][T10690] worker_thread+0x5ef/0xe50 [ 1775.585698][T10690] kthread+0x370/0x450 [ 1775.585731][T10690] ret_from_fork+0x72b/0xd50 [ 1775.585786][T10690] ret_from_fork_asm+0x1a/0x30 [ 1775.585847][T10690] [ 1775.585847][T10690] other info that might help us debug this: [ 1775.585847][T10690] [ 1775.585862][T10690] Chain exists of: [ 1775.585862][T10690] &buf->lock --> &tty->termios_rwsem --> console_lock [ 1775.585862][T10690] [ 1775.585930][T10690] Possible unsafe locking scenario: [ 1775.585930][T10690] [ 1775.585943][T10690] CPU0 CPU1 [ 1775.585956][T10690] ---- ---- [ 1775.585970][T10690] lock(console_lock); [ 1775.585998][T10690] lock(&tty->termios_rwsem); [ 1775.586031][T10690] lock(console_lock); [ 1775.586062][T10690] lock(&buf->lock); [ 1775.586090][T10690] [ 1775.586090][T10690] *** DEADLOCK *** [ 1775.586090][T10690] [ 1775.586103][T10690] 3 locks held by kworker/1:4/10690: [ 1775.586128][T10690] #0: ffff88813fe2b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1775.586226][T10690] #1: ffffc9000a6ffd08 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1775.586340][T10690] #2: ffffffff8e9d2460 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x320 [ 1775.586461][T10690] [ 1775.586461][T10690] stack backtrace: [ 1775.586488][T10690] CPU: 1 UID: 0 PID: 10690 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1775.586546][T10690] Tainted: [L]=SOFTLOCKUP [ 1775.586561][T10690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1775.586592][T10690] Workqueue: events vc_SAK [ 1775.586652][T10690] Call Trace: [ 1775.586667][T10690] [ 1775.586684][T10690] dump_stack_lvl+0x100/0x190 [ 1775.586735][T10690] print_circular_bug.cold+0x178/0x1c7 [ 1775.586808][T10690] check_noncircular+0x146/0x160 [ 1775.586847][T10690] ? rcu_is_watching+0x12/0xc0 [ 1775.586918][T10690] check_prev_add+0xeb/0xe60 [ 1775.586969][T10690] __lock_acquire+0x136c/0x1a40 [ 1775.587027][T10690] lock_acquire+0x1b9/0x370 [ 1775.587074][T10690] ? tty_buffer_flush+0x72/0x310 [ 1775.587127][T10690] ? __pfx___might_resched+0x10/0x10 [ 1775.587182][T10690] __mutex_lock+0x1a4/0x1bd0 [ 1775.587220][T10690] ? tty_buffer_flush+0x72/0x310 [ 1775.587270][T10690] ? tty_buffer_flush+0x72/0x310 [ 1775.587328][T10690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1775.587380][T10690] ? check_prev_add+0x354/0xe60 [ 1775.587426][T10690] ? __pfx___mutex_lock+0x10/0x10 [ 1775.587466][T10690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1775.587518][T10690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1775.587569][T10690] ? __lock_acquire+0xd5b/0x1a40 [ 1775.587632][T10690] ? tty_buffer_flush+0x72/0x310 [ 1775.587683][T10690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1775.587735][T10690] tty_buffer_flush+0x72/0x310 [ 1775.587788][T10690] tty_ldisc_flush+0xad/0xf0 [ 1775.587832][T10690] __do_SAK+0x368/0x480 [ 1775.587882][T10690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1775.587932][T10690] ? mark_held_locks+0x40/0x70 [ 1775.587981][T10690] vc_SAK+0x7f/0x320 [ 1775.588043][T10690] process_one_work+0xa23/0x1940 [ 1775.588095][T10690] ? __pfx_process_one_work+0x10/0x10 [ 1775.588136][T10690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1775.588195][T10690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1775.588250][T10690] worker_thread+0x5ef/0xe50 [ 1775.588295][T10690] ? __pfx_worker_thread+0x10/0x10 [ 1775.588345][T10690] ? kthread+0x13a/0x450 [ 1775.588378][T10690] ? __pfx_worker_thread+0x10/0x10 [ 1775.588417][T10690] kthread+0x370/0x450 [ 1775.588453][T10690] ? __pfx_kthread+0x10/0x10 [ 1775.588490][T10690] ret_from_fork+0x72b/0xd50 [ 1775.588547][T10690] ? __pfx_ret_from_fork+0x10/0x10 [ 1775.588604][T10690] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1775.588655][T10690] ? __switch_to+0x800/0x10f0 [ 1775.588695][T10690] ? __switch_to_asm+0x39/0x70 [ 1775.588758][T10690] ? __pfx_kthread+0x10/0x10 [ 1775.588796][T10690] ret_from_fork_asm+0x1a/0x30 [ 1775.588873][T10690] [ 1775.614123][ T1576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1775.737404][ T1576] hsr_slave_0: entered promiscuous mode [ 1775.741116][ T1576] hsr_slave_1: entered promiscuous mode [ 1775.741779][ T1576] debugfs: 'hsr0' already exists in 'hsr' [ 1775.741809][ T1576] Cannot create hsr debugfs directory [ 1776.114965][ T1576] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1776.125211][ T1576] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1776.126514][ T1576] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1776.131698][ T1576] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1776.134264][ T1576] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1776.142604][ T1576] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1776.148591][ T1576] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1776.154334][ T1576] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1776.414188][ T1576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1776.578667][ T1576] 8021q: adding VLAN 0 to HW filter on device team0 [ 1776.600578][T18903] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.600688][T18903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1776.624265][T18906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.624421][T18906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1777.213670][ T2591] loop1: detected capacity change from 0 to 2048 [ 1777.265466][ T2591] Dev loop1: unable to read partition block 23055453 [ 1777.270626][ T2591] loop1: RDSK (1311599104) unable to read partition table [ 1777.270826][ T2591] loop1: partition table beyond EOD, truncated [ 1777.270869][ T2591] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 1778.101747][ T1576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1778.114839][ T2664] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.303363][ T5640] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1778.369172][ T2678] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16206'. [ 1778.463044][ T5640] usb 2-1: Using ep0 maxpacket: 8 [ 1778.464935][ T5640] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1778.464994][ T5640] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1778.465049][ T5640] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1778.465099][ T5640] usb 2-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 1778.465146][ T5640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.468343][ T5640] usb 2-1: config 0 descriptor?? [ 1778.729232][ T1576] veth0_vlan: entered promiscuous mode [ 1778.765527][ T1576] veth1_vlan: entered promiscuous mode [ 1778.856083][ T1576] veth0_macvtap: entered promiscuous mode [ 1778.874924][ T1576] veth1_macvtap: entered promiscuous mode [ 1778.919006][ T5640] kye 0003:0458:5014.003A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1778.919369][ T5640] kye 0003:0458:5014.003A: unknown main item tag 0x2 [ 1778.919415][ T5640] kye 0003:0458:5014.003A: unknown main item tag 0x7 [ 1778.930044][ T5640] kye 0003:0458:5014.003A: hidraw0: USB HID v0.0c Device [HID 0458:5014] on usb-dummy_hcd.1-1/input0 [ 1778.930117][ T5640] kye 0003:0458:5014.003A: tablet-enabling feature report not found [ 1778.930150][ T5640] kye 0003:0458:5014.003A: tablet enabling failed [ 1778.930419][ T1576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1778.955835][ T1576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1778.987957][T18891] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.988056][T18891] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.988122][T18891] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.988188][T18891] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1779.059121][ T2724] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1779.099146][ T1576] ieee80211 phy79: Selected rate control algorithm 'minstrel_ht' [ 1779.173834][ T5640] usb 2-1: USB disconnect, device number 110 [ 1779.185967][ T2715] fido_id[2715]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1779.215978][ T5284] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1779.249747][T18906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1779.249791][T18906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1779.258074][ T1576] ieee80211 phy80: Selected rate control algorithm 'minstrel_ht' [ 1779.318552][ T2745] netlink: 'syz.4.16212': attribute type 62 has an invalid length. [ 1779.323798][T18891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1779.323840][T18891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1779.464082][ T2758] netlink: 20 bytes leftover after parsing attributes in process `syz.7.16214'. [ 1779.704186][ T2775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16217'. [ 1779.726421][ T2777] netlink: 68 bytes leftover after parsing attributes in process `syz.8.16218'. [ 1779.997963][ T2794] loop1: detected capacity change from 0 to 1024 [ 1780.375915][ T2815] loop7: detected capacity change from 0 to 128 [ 1780.905257][ T5284] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1781.455570][ T2886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16238'. [ 1782.123006][ T5284] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1782.134567][ T2929] netlink: 28 bytes leftover after parsing attributes in process `syz.8.16250'. [ 1782.322012][ T2923] syz.1.16248 (2923): drop_caches: 2 [ 1782.719794][ T2959] binder: 2955:2959 ioctl c00c620f 200000002980 returned -22 [ 1783.557493][T15039] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1783.718145][T15039] usb 9-1: Using ep0 maxpacket: 16 [ 1783.724750][T15039] usb 9-1: config 1 has an invalid interface number: 22 but max is 0 [ 1783.724802][T15039] usb 9-1: config 1 has no interface number 0 [ 1783.724856][T15039] usb 9-1: config 1 interface 22 has no altsetting 0 [ 1783.728962][T15039] usb 9-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=f3.70 [ 1783.729012][T15039] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.729051][T15039] usb 9-1: Product: syz [ 1783.729081][T15039] usb 9-1: Manufacturer: syz [ 1783.729111][T15039] usb 9-1: SerialNumber: syz [ 1783.899919][ T3028] loop1: detected capacity change from 0 to 2048 [ 1783.934799][ T3033] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1783.977875][T15039] gspca_main: touptek-2.14.0 probing 0547:6801 [ 1783.995924][T15039] usb 9-1: USB disconnect, device number 2 [ 1784.261595][ T30] audit: type=1326 audit(2000001357.038:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3051 comm="syz.1.16276" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd370b9de59 code=0x0 [ 1784.307518][ T3054] loop7: detected capacity change from 0 to 1024 [ 1785.116916][ T3100] tipc: Started in network mode [ 1785.117169][ T3100] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1785.117916][ T3100] tipc: Enabled bearer , priority 17 [ 1785.126253][ T11] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1785.286033][ T3105] hugetlbfs: Bad value '%' for mount option 'size' [ 1785.286033][ T3105] [ 1785.286394][ T11] usb 9-1: Using ep0 maxpacket: 16 [ 1785.290770][ T11] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 1785.290824][ T11] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1785.290863][ T11] usb 9-1: config 0 has no interface number 0 [ 1785.290921][ T11] usb 9-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 1785.290967][ T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.298169][ T11] usb 9-1: config 0 descriptor?? [ 1785.317432][ T11] uvcvideo 9-1:0.64: Found UVC 0.00 device (0bd3:05f4) [ 1785.317501][ T11] uvcvideo 9-1:0.64: No valid video chain found. [ 1785.556919][ T11] usb 9-1: USB disconnect, device number 3 [ 1786.311845][ T11] tipc: Node number set to 4269801488 [ 1786.329900][ T3144] loop1: detected capacity change from 0 to 32768 [ 1786.402153][ T30] audit: type=1800 audit(2000001359.051:545): pid=3144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.16297" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 1786.538695][ T3172] loop8: detected capacity change from 0 to 128 [ 1786.541575][ T3172] EXT4-fs: Ignoring removed nobh option [ 1786.550607][ T3172] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1786.551000][ T3172] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1786.727062][ T1576] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1787.233587][ T3218] netlink: 826 bytes leftover after parsing attributes in process `syz.7.16312'. [ 1788.044136][ T3267] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 1788.063583][ T3265] loop1: detected capacity change from 0 to 764 [ 1788.069419][ T3265] ISO 9660 Extensions: Microsoft Joliet Level 0 [ 1788.075250][ T3265] ISOFS: Interleaved files not (yet) supported. [ 1788.075274][ T3265] ISOFS: File unit size != 0 for ISO file (1856). [ 1788.075387][ T3265] Symlink component flag not implemented [ 1788.075424][ T3265] Symlink component flag not implemented [ 1788.075505][ T3265] Symlink component flag not implemented (129) [ 1788.075528][ T3265] Symlink component flag not implemented (6) [ 1788.456033][ T5284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1788.711969][ T3302] loop7: detected capacity change from 0 to 512 [ 1788.943262][ T3316] autofs: Bad value for 'fd' [ 1789.484983][ T3338] syz.7.16343 (3338): drop_caches: 2 [ 1789.518135][ T3295] ceph: No mds server is up or the cluster is laggy [ 1791.119511][ T3406] loop7: detected capacity change from 0 to 256 [ 1791.386533][ T11] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1791.545733][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 1791.549660][ T11] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1791.549716][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.558715][ T11] usb 2-1: config 0 descriptor?? [ 1791.632925][ T3433] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16374'. [ 1791.768160][T17829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1791.768559][T17829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1791.768913][T17829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1791.772822][T17829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1791.773563][T17829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1792.046544][ T11] elecom 0003:056E:011C.003B: unknown main item tag 0x7 [ 1792.046610][ T11] elecom 0003:056E:011C.003B: unknown global tag 0xd [ 1792.046648][ T11] elecom 0003:056E:011C.003B: item 0 0 1 13 parsing failed [ 1792.048189][ T11] elecom 0003:056E:011C.003B: probe with driver elecom failed with error -22 [ 1792.281061][ T29] usb 2-1: USB disconnect, device number 111 [ 1792.359220][T13503] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1792.359916][T13503] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1792.361297][T13503] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1792.362552][T13503] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1792.363248][T13503] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1792.654518][ T3434] wlan0 speed is unknown, defaulting to 1000 [ 1792.658773][ T3434] lo speed is unknown, defaulting to 1000 [ 1793.064290][ T3434] €Â speed is unknown, defaulting to 1000 [ 1793.541847][ T3471] wlan0 speed is unknown, defaulting to 1000 [ 1793.544605][ T3471] lo speed is unknown, defaulting to 1000 [ 1793.787212][ T3585] loop8: detected capacity change from 0 to 256 [ 1793.948518][T13503] Bluetooth: hci3: command tx timeout [ 1794.115884][ T3471] €Â speed is unknown, defaulting to 1000 [ 1794.180930][ T3625] program syz.1.16397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1794.478169][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1794.478274][ T3434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1794.478668][ T3434] bridge_slave_0: entered allmulticast mode [ 1794.486971][ T3434] bridge_slave_0: entered promiscuous mode [ 1794.507358][ T3434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1794.507456][ T3434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1794.507818][ T3434] bridge_slave_1: entered allmulticast mode [ 1794.517069][ T3434] bridge_slave_1: entered promiscuous mode [ 1794.548015][T13503] Bluetooth: hci7: command tx timeout [ 1794.644173][ T3434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1794.678389][ T3434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1794.838286][ T3727] loop1: detected capacity change from 0 to 2048 [ 1794.887170][ T3727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1794.935467][ T3727] EXT4-fs error (device loop1): ext4_find_extent:903: inode #2: comm syz.1.16409: inode has invalid extent depth: 8 [ 1795.008201][ T3434] team0: Port device team_slave_0 added [ 1795.018944][ T3434] team0: Port device team_slave_1 added [ 1795.108995][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1795.298554][ T3434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1795.298589][ T3434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1795.298643][ T3434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1795.331238][ T3434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1795.331272][ T3434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1795.331329][ T3434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1795.385281][ T3813] netlink: 'syz.1.16412': attribute type 6 has an invalid length. [ 1795.385322][ T3813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16412'. [ 1795.474332][ T3434] hsr_slave_0: entered promiscuous mode [ 1795.485686][ T3434] hsr_slave_1: entered promiscuous mode [ 1795.493401][ T3434] debugfs: 'hsr0' already exists in 'hsr' [ 1795.493435][ T3434] Cannot create hsr debugfs directory [ 1795.781708][ T3891] netlink: 'syz.4.16419': attribute type 2 has an invalid length. [ 1795.804853][ T11] libceph: connect (1)[c::]:6789 error -101 [ 1795.805060][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 1796.074448][ T11] libceph: connect (1)[c::]:6789 error -101 [ 1796.074620][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 1796.169625][T13503] Bluetooth: hci3: command tx timeout [ 1796.199687][ T3471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1796.199851][ T3471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.200044][ T3471] bridge_slave_0: entered allmulticast mode [ 1796.208984][ T3471] bridge_slave_0: entered promiscuous mode [ 1796.240193][ T3971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16421'. [ 1796.240233][ T3971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16421'. [ 1796.240286][ T3971] netlink: 'syz.4.16421': attribute type 13 has an invalid length. [ 1796.240313][ T3971] netlink: 'syz.4.16421': attribute type 11 has an invalid length. [ 1796.273522][ T3471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.273623][ T3471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.273880][ T3471] bridge_slave_1: entered allmulticast mode [ 1796.279116][ T3471] bridge_slave_1: entered promiscuous mode [ 1796.344203][ T3471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1796.352161][ T3471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1796.439769][ T3471] team0: Port device team_slave_0 added [ 1796.464127][ T3471] team0: Port device team_slave_1 added [ 1796.495029][ T4026] Bluetooth: MGMT ver 1.23 [ 1796.542939][ T3471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1796.542975][ T3471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1796.543040][ T3471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1796.553525][ T3471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1796.553558][ T3471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1796.553612][ T3471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1796.556315][ T3434] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1796.561612][ T3434] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1796.564033][ T3434] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1796.573031][ T3434] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1796.583957][ T3434] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1796.593497][ T3434] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1796.594495][ T3434] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1796.606877][ T3434] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1796.619853][T10968] libceph: connect (1)[c::]:6789 error -101 [ 1796.620012][T10968] libceph: mon0 (1)[c::]:6789 connect error [ 1796.666990][ T3890] ceph: No mds server is up or the cluster is laggy [ 1796.766174][ T3471] hsr_slave_0: entered promiscuous mode [ 1796.767327][ T3471] hsr_slave_1: entered promiscuous mode [ 1796.768164][T13503] Bluetooth: hci7: command tx timeout [ 1796.772575][ T3471] debugfs: 'hsr0' already exists in 'hsr' [ 1796.772607][ T3471] Cannot create hsr debugfs directory [ 1796.776088][ T4077] loop1: detected capacity change from 0 to 2048 [ 1796.784784][ T4077] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1796.788727][ T4077] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1797.192387][ T4157] netlink: 'syz.1.16436': attribute type 17 has an invalid length. [ 1797.419860][ T4157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1797.422775][ T4157] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1797.455684][ T4157] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1797.497022][ T4157] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1797.511324][ T4157] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1797.559154][T18891] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1797.559257][T18891] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1797.559329][T18891] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1797.559399][T18891] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1797.856430][ T3434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1797.906666][ T4218] loop1: detected capacity change from 0 to 256 [ 1798.040022][ T3434] 8021q: adding VLAN 0 to HW filter on device team0 [ 1798.078959][ T4230] loop8: detected capacity change from 0 to 1024 [ 1798.106122][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1798.106227][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1798.122266][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1798.122386][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1798.164541][ T4230] hfsplus: request for non-existent node 33423360 in B*Tree [ 1798.164574][ T4230] hfsplus: request for non-existent node 33423360 in B*Tree [ 1798.391368][T13503] Bluetooth: hci3: command tx timeout [ 1798.601271][ T3471] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1798.624113][ T3471] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1798.625223][ T3471] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1798.641752][ T3471] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1798.646565][ T3471] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1798.676837][ T3471] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1798.686113][ T3471] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1798.706084][ T3471] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1798.899324][ T4288] loop1: detected capacity change from 0 to 2048 [ 1798.950479][ T4288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1798.992423][T13503] Bluetooth: hci7: command tx timeout [ 1798.999123][ T4300] sock: sock_timestamping_bind_phc: sock not bind to device [ 1799.221432][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1799.228095][ T3471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1799.274075][ T3471] 8021q: adding VLAN 0 to HW filter on device team0 [ 1799.322455][ T4314] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 1799.327358][T18891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.327457][T18891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1799.364596][T18891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.364723][T18891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1799.801598][ T4339] loop1: detected capacity change from 0 to 764 [ 1799.812528][ T4339] ISO 9660 Extensions: Microsoft Joliet Level 0 [ 1799.841015][ T4339] ISOFS: Interleaved files not (yet) supported. [ 1799.841042][ T4339] ISOFS: File unit size != 0 for ISO file (1856). [ 1799.841141][ T4339] ISOFS: Invalid file type 00201 for inode 1859. [ 1800.239697][ T3434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1800.417102][ T4368] loop8: detected capacity change from 0 to 1024 [ 1800.613147][T13503] Bluetooth: hci3: command tx timeout [ 1801.211244][T13503] Bluetooth: hci7: command tx timeout [ 1801.398619][ T3471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1801.511164][ T3434] veth0_vlan: entered promiscuous mode [ 1801.537875][ T3434] veth1_vlan: entered promiscuous mode [ 1801.662143][ T3434] veth0_macvtap: entered promiscuous mode [ 1801.686072][ T3434] veth1_macvtap: entered promiscuous mode [ 1801.715886][ T4429] loop8: detected capacity change from 0 to 512 [ 1801.752582][ T3434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1801.758363][ T4429] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1801.827073][ T3434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1801.869356][ T14] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1801.869440][ T14] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1801.869500][ T14] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1801.869561][ T14] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1801.892407][ T1576] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1802.026398][ T3434] ieee80211 phy81: Selected rate control algorithm 'minstrel_ht' [ 1802.144857][T18891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1802.144897][T18891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1802.156587][ T3434] ieee80211 phy82: Selected rate control algorithm 'minstrel_ht' [ 1802.270840][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1802.270881][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1802.373927][ T3471] veth0_vlan: entered promiscuous mode [ 1802.419400][ T3471] veth1_vlan: entered promiscuous mode [ 1802.544828][ T3471] veth0_macvtap: entered promiscuous mode [ 1802.564653][ T3471] veth1_macvtap: entered promiscuous mode [ 1802.636612][ T3471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1802.654192][ T3471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1802.698016][T18891] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.698108][T18891] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.698174][T18891] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.698239][T18891] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.847454][ T3471] ieee80211 phy83: Selected rate control algorithm 'minstrel_ht' [ 1802.968041][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1802.968082][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1802.982325][ T3471] ieee80211 phy84: Selected rate control algorithm 'minstrel_ht' [ 1803.095545][ T4500] netlink: 'syz.9.16492': attribute type 1 has an invalid length. [ 1803.095584][ T4500] netlink: 232 bytes leftover after parsing attributes in process `syz.9.16492'. [ 1803.095612][ T4500] netlink: 'syz.9.16492': attribute type 1 has an invalid length. [ 1803.127388][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1803.127425][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1803.424941][ T4514] tipc: Started in network mode [ 1803.425000][ T4514] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1803.425679][ T4514] tipc: Enabled bearer , priority 17 [ 1804.254573][T15039] usb 5-1: new low-speed USB device number 116 using dummy_hcd [ 1804.428300][T15039] usb 5-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1804.428374][T15039] usb 5-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 1804.428427][T15039] usb 5-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1804.428481][T15039] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1804.428528][T15039] usb 5-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1804.428573][T15039] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.459540][T15039] usb 5-1: config 0 descriptor?? [ 1804.460548][ T4538] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1804.628843][ T5640] tipc: Node number set to 4269801488 [ 1804.958294][T15039] holtek_mouse 0003:04D9:A081.003C: unknown main item tag 0x0 [ 1804.958349][T15039] holtek_mouse 0003:04D9:A081.003C: unknown main item tag 0x0 [ 1804.958394][T15039] holtek_mouse 0003:04D9:A081.003C: unknown main item tag 0x0 [ 1804.958437][T15039] holtek_mouse 0003:04D9:A081.003C: unknown main item tag 0x0 [ 1804.958479][T15039] holtek_mouse 0003:04D9:A081.003C: unknown main item tag 0x0 [ 1804.960489][T15039] holtek_mouse 0003:04D9:A081.003C: unknown main item tag 0x0 [ 1804.960539][T15039] holtek_mouse 0003:04D9:A081.003C: unknown main item tag 0x0 [ 1804.960581][T15039] holtek_mouse 0003:04D9:A081.003C: unknown main item tag 0x0 [ 1804.960622][T15039] holtek_mouse 0003:04D9:A081.003C: unknown main item tag 0x0 [ 1804.960662][T15039] holtek_mouse 0003:04D9:A081.003C: unknown main item tag 0x0 [ 1804.992985][T15039] holtek_mouse 0003:04D9:A081.003C: hidraw0: USB HID v0.01 Device [HID 04d9:a081] on usb-dummy_hcd.4-1/input0 [ 1805.249766][T15039] usb 5-1: USB disconnect, device number 116 [ 1805.393291][ T4573] loop9: detected capacity change from 0 to 2048 [ 1805.513460][ T4573] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1805.563178][ T4570] fido_id[4570]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1805.776578][ T3434] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1805.818179][ T4593] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16508'. [ 1805.818227][ T4593] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1806.388553][ T4549] loop8: detected capacity change from 0 to 32768 [ 1806.454825][ T4549] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1806.577670][ T4549] XFS (loop8): Ending clean mount [ 1807.071713][ T4628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16514'. [ 1807.128565][ T1576] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1807.410573][ T4638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16519'. [ 1808.057012][T10968] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1808.221086][T10968] usb 9-1: Using ep0 maxpacket: 8 [ 1808.227883][T10968] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1808.227951][T10968] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1808.228024][T10968] usb 9-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1808.228073][T10968] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.241086][T10968] usb 9-1: config 0 descriptor?? [ 1808.569400][T16133] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1808.740626][T16133] usb 10-1: Using ep0 maxpacket: 8 [ 1808.744592][T16133] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1808.744652][T16133] usb 10-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 1808.744699][T16133] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.753740][T16133] usb 10-1: config 0 descriptor?? [ 1808.785425][T10968] hid-picolcd 0003:04D8:C002.003D: No report with id 0x11 found [ 1809.036900][T10968] usb 9-1: USB disconnect, device number 4 [ 1809.269061][T16133] waltop 0003:172F:0500.003E: ignoring exceeding usage max [ 1809.299571][T16133] waltop 0003:172F:0500.003E: hidraw0: USB HID v0.c5 Device [HID 172f:0500] on usb-dummy_hcd.9-1/input0 [ 1809.570525][ T29] usb 10-1: USB disconnect, device number 2 [ 1809.607298][ T4749] fido_id[4749]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1810.035311][ T4769] ptrace attach of ""[4776] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[4769] [ 1810.075083][ T29] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1810.391701][ T4800] fido_id[4800]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1810.437843][ T4812] netlink: 28 bytes leftover after parsing attributes in process `syz.5.16555'. [ 1810.960850][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1811.062012][ T4838] netlink: 163868 bytes leftover after parsing attributes in process `syz.8.16562'. [ 1811.062056][ T4838] openvswitch: netlink: ufid size 48534 bytes exceeds the range (1, 16) [ 1811.062087][ T4838] openvswitch: netlink: Message has 512 unknown bytes. [ 1811.673105][ T4810] loop1: detected capacity change from 0 to 32768 [ 1811.679495][ T4853] ptrace attach of ""[4861] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[4853] [ 1811.767091][ T4810] JBD2: Ignoring recovery information on journal [ 1811.943411][ T4810] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1812.363151][ T5628] OCFS2: ERROR (device loop1): ocfs2_validate_gd_self: Group descriptor #1056 has bad signature [ 1812.363208][ T5628] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1812.363230][ T5628] OCFS2: File system is now read-only. [ 1812.363249][ T5628] (syz-executor,5628,1):_ocfs2_free_suballoc_bits:2913 ERROR: status = -30 [ 1812.363300][ T5628] (syz-executor,5628,1):_ocfs2_free_clusters:3024 ERROR: status = -30 [ 1812.363355][ T5628] (syz-executor,5628,1):ocfs2_sync_local_to_main:994 ERROR: status = -30 [ 1812.363402][ T5628] (syz-executor,5628,1):ocfs2_sync_local_to_main:1007 ERROR: status = -30 [ 1812.363449][ T5628] (syz-executor,5628,1):ocfs2_shutdown_local_alloc:450 ERROR: status = -30 [ 1812.398893][ T5628] ocfs2: Unmounting device (7,1) on (node local) [ 1812.856192][ T7423] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1813.042849][ T4868] loop5: detected capacity change from 0 to 32768 [ 1813.046780][ T7423] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1813.046843][ T7423] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.046890][ T7423] usb 9-1: Product: syz [ 1813.046920][ T7423] usb 9-1: Manufacturer: syz [ 1813.046950][ T7423] usb 9-1: SerialNumber: syz [ 1813.052238][ T7423] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1813.073930][ T4868] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1813.098111][ T7423] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1813.185474][ T4868] XFS (loop5): Ending clean mount [ 1813.201810][ T4868] XFS (loop5): Quotacheck needed: Please wait. [ 1813.274184][ T4868] XFS (loop5): Quotacheck: Done. [ 1813.625782][ T3471] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1813.884309][ T5640] usb 9-1: USB disconnect, device number 5 [ 1814.132307][ T5000] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1814.132411][ T5000] ALSA: mixer_oss: invalid index 137438 [ 1814.144711][ T4996] CUSE: unknown device info "ìŠxóKJ +ßãÛ¤2Lh¸änLþ1Õîì8­¨×0º©®(À3Õ¶ië" [ 1814.144748][ T4996] CUSE: unknown device info "Ù®,°ð<Ö_e¤FÀÆ" [ 1814.144770][ T4996] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 1814.144791][ T4996] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼¿\Nšÿä4¨ô" [ 1814.144824][ T4996] CUSE: unknown device info "´ƒ [ 1814.144824][ T4996] f𳦧ìýzóÚXÁS! [ 1814.144824][ T4996] „Aäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pødY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 1814.144856][ T4996] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜­_“ž@±/íËV ™¨º§{»‡ò" [ 1814.144887][ T4996] CUSE: unknown device info "ÊþwlU~‘ÄÎV¥ß¶âݸFsºXý,xækƒÅq¾é/òQ]Ñ3•ÞH" [ 1814.144928][ T4996] CUSE: zero length info key specified [ 1814.299831][ T5009] netlink: 'syz.1.16597': attribute type 1 has an invalid length. [ 1814.299871][ T5009] netlink: 232 bytes leftover after parsing attributes in process `syz.1.16597'. [ 1814.299900][ T5009] netlink: 'syz.1.16597': attribute type 1 has an invalid length. [ 1814.392697][ T5016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16599'. [ 1814.392739][ T5016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16599'. [ 1814.392793][ T5016] netlink: 'syz.4.16599': attribute type 12 has an invalid length. [ 1814.545198][ T7423] usb 9-1: Service connection timeout for: 256 [ 1814.545248][ T7423] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1814.545912][ T7423] ath9k_htc: Failed to initialize the device [ 1814.546482][ T5640] usb 9-1: ath9k_htc: USB layer deinitialized [ 1814.843405][ T5051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16606'. [ 1814.904935][ T11] usb 6-1: new full-speed USB device number 107 using dummy_hcd [ 1815.066101][ T11] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1815.066159][ T11] usb 6-1: config 0 has no interface number 0 [ 1815.066213][ T11] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1815.068595][ T11] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1815.068646][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.068686][ T11] usb 6-1: Product: syz [ 1815.068718][ T11] usb 6-1: Manufacturer: syz [ 1815.068748][ T11] usb 6-1: SerialNumber: syz [ 1815.070981][ T11] usb 6-1: config 0 descriptor?? [ 1815.132721][ T5061] loop8: detected capacity change from 0 to 8192 [ 1815.170850][ T5640] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1815.318220][ T5077] netlink: 16 bytes leftover after parsing attributes in process `syz.9.16612'. [ 1815.342158][ T5640] usb 5-1: Using ep0 maxpacket: 32 [ 1815.343951][ T5640] usb 5-1: too many endpoints for config 0 interface 0 altsetting 10: 254, using maximum allowed: 30 [ 1815.344026][ T5640] usb 5-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1815.344183][ T5640] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1815.344240][ T5640] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1815.344288][ T5640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.348142][ T5640] usb 5-1: config 0 descriptor?? [ 1815.584679][ T5090] netlink: 'syz.8.16613': attribute type 1 has an invalid length. [ 1815.584723][ T5090] netlink: 232 bytes leftover after parsing attributes in process `syz.8.16613'. [ 1815.584780][ T5090] netlink: 'syz.8.16613': attribute type 1 has an invalid length. [ 1815.777299][ T11] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 1815.794745][ T11] usb 6-1: USB disconnect, device number 107 [ 1815.825535][ T5640] uclogic 0003:5543:0522.0040: item fetching failed at offset 2/40 [ 1815.826129][ T5640] uclogic 0003:5543:0522.0040: parse failed [ 1815.826242][ T5640] uclogic 0003:5543:0522.0040: probe with driver uclogic failed with error -22 [ 1815.886000][ T5112] loop9: detected capacity change from 0 to 256 [ 1815.893499][ T5112] exfat: Deprecated parameter 'utf8' [ 1815.893540][ T5112] exfat: Deprecated parameter 'utf8' [ 1815.893723][ T5112] exfat: Deprecated parameter 'namecase' [ 1815.893767][ T5112] exfat: Deprecated parameter 'utf8' [ 1815.931880][ T5112] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1816.074571][ T29] usb 5-1: USB disconnect, device number 117 [ 1816.305441][ T5084] loop1: detected capacity change from 0 to 32768 [ 1816.318240][ T5084] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.16625 (5084) [ 1816.331554][ T5084] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1816.331623][ T5084] BTRFS info (device loop1): using crc32c checksum algorithm [ 1816.425935][ T5084] BTRFS info (device loop1): enabling ssd optimizations [ 1816.425993][ T5084] BTRFS info (device loop1): turning on async discard [ 1816.426027][ T5084] BTRFS info (device loop1): enabling free space tree [ 1816.550498][ T5628] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1816.734280][ T5162] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1817.655956][ T5160] loop9: detected capacity change from 0 to 32768 [ 1817.664776][ T5160] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.16620 (5160) [ 1817.674671][ T5160] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1817.674733][ T5160] BTRFS info (device loop9): using crc32c checksum algorithm [ 1817.758150][ T5160] BTRFS info (device loop9): enabling ssd optimizations [ 1817.758201][ T5160] BTRFS info (device loop9): turning on flush-on-commit [ 1817.758238][ T5160] BTRFS info (device loop9): turning on async discard [ 1817.758275][ T5160] BTRFS info (device loop9): enabling free space tree [ 1817.758310][ T5160] BTRFS info (device loop9): enabling auto defrag [ 1817.758347][ T5160] BTRFS info (device loop9): force zlib compression, level 3 [ 1817.758390][ T5160] BTRFS info (device loop9): max_inline set to 4096 [ 1817.797150][T15039] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1817.966819][T15039] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 1817.966903][T15039] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1817.970709][T15039] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1817.970765][T15039] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1817.970808][T15039] usb 9-1: Manufacturer: syz [ 1817.982428][T15039] usb 9-1: config 0 descriptor?? [ 1818.116113][ T3434] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1818.281429][T15039] rc_core: IR keymap rc-hauppauge not found [ 1818.281460][T15039] Registered IR keymap rc-empty [ 1818.282465][T15039] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1818.298441][T15039] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input130 [ 1818.357070][ T5269] loop7: detected capacity change from 0 to 164 [ 1818.400185][ T5269] ISO 9660 Extensions: Microsoft Joliet Level 3 [ 1818.407593][ T5269] ISO 9660 Extensions: [ 1818.523453][ T29] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1818.688756][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 1818.699454][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1818.705316][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.705411][ T29] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1818.714294][ T29] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1818.714355][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.714428][ T29] usb 2-1: Product: syz [ 1818.714461][ T29] usb 2-1: Manufacturer: syz [ 1818.714493][ T29] usb 2-1: SerialNumber: syz [ 1818.838210][T15039] usb 9-1: USB disconnect, device number 6 [ 1819.005545][ T29] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1819.005867][ T29] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1819.006845][ T5311] netlink: 20 bytes leftover after parsing attributes in process `syz.7.16647'. [ 1819.203217][ T29] usb 2-1: 2:1 : can't get High Capability descriptor [ 1819.283817][ T11] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1819.452283][ T11] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1819.452352][ T11] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.452395][ T11] usb 10-1: Product: syz [ 1819.452427][ T11] usb 10-1: Manufacturer: syz [ 1819.459156][ T11] usb 10-1: SerialNumber: syz [ 1819.477481][ T11] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1819.524953][T16133] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1819.553896][ T5640] usb 2-1: USB disconnect, device number 112 [ 1819.772686][ T5349] loop5: detected capacity change from 0 to 4096 [ 1819.881826][ T5349] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 1819.881901][ T5349] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 1819.926249][ T5345] ntfs3(loop5): ino=1e, "file1" attr_set_size_ex [ 1820.055360][ T141] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 1820.055491][ T3471] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 1820.055538][ T3471] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1820.055570][ T3471] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 1820.055677][ T141] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 1820.270469][ T29] usb 10-1: USB disconnect, device number 3 [ 1820.739032][ T5410] loop1: detected capacity change from 0 to 2048 [ 1820.802026][ T5410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1820.802142][ T5410] ext4 filesystem being mounted at /2804/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1820.949590][T16133] usb 10-1: Service connection timeout for: 256 [ 1820.949638][T16133] ath9k_htc 10-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1820.950344][T16133] ath9k_htc: Failed to initialize the device [ 1820.952384][ T5431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16669'. [ 1820.955431][ T29] usb 10-1: ath9k_htc: USB layer deinitialized [ 1821.090607][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1821.395512][ T5462] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1821.395512][ T5462] program syz.9.16676 not setting count and/or reply_len properly [ 1821.872115][ T5485] xt_hashlimit: size too large, truncated to 1048576 [ 1822.342244][ T5511] netlink: 'syz.4.16689': attribute type 16 has an invalid length. [ 1822.342290][ T5511] netlink: 64122 bytes leftover after parsing attributes in process `syz.4.16689'. [ 1822.428614][ T5515] usb usb7: usbfs: process 5515 (syz.1.16691) did not claim interface 0 before use [ 1822.825658][ T5465] loop5: detected capacity change from 0 to 40427 [ 1822.833980][ T5465] F2FS-fs: heap/no_heap options were deprecated [ 1822.841757][ T5465] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 1822.841803][ T5465] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1822.855587][ T5465] F2FS-fs (loop5): invalid crc value [ 1822.962861][ T5546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16699'. [ 1823.132769][ T5465] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1823.141360][ T5465] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1823.141405][ T5465] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1823.316404][ T5567] loop1: detected capacity change from 0 to 256 [ 1823.346566][ T3471] syz-executor: attempt to access beyond end of device [ 1823.346566][ T3471] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1823.346680][ T3471] CPU: 1 UID: 0 PID: 3471 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1823.346752][ T3471] Tainted: [L]=SOFTLOCKUP [ 1823.346768][ T3471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1823.346796][ T3471] Call Trace: [ 1823.346811][ T3471] [ 1823.346833][ T3471] dump_stack_lvl+0x100/0x190 [ 1823.346901][ T3471] f2fs_stop_checkpoint+0x5e6/0xb30 [ 1823.346973][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.347027][ T3471] ? errseq_set+0xe3/0x150 [ 1823.347092][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.347149][ T3471] f2fs_write_end_bio+0xf53/0x1340 [ 1823.347225][ T3471] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 1823.347293][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.347345][ T3471] ? rcu_is_watching+0x12/0xc0 [ 1823.347416][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.347469][ T3471] ? lock_release+0x24d/0x310 [ 1823.347525][ T3471] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1823.347596][ T3471] bio_endio+0x778/0x8e0 [ 1823.347646][ T3471] submit_bio_noacct+0x64c/0x1ff0 [ 1823.347720][ T3471] f2fs_submit_write_bio+0x133/0x330 [ 1823.347787][ T3471] __submit_merged_bio+0x330/0x7b0 [ 1823.347862][ T3471] ? rcu_is_watching+0x12/0xc0 [ 1823.347929][ T3471] __submit_merged_write_cond+0x3fe/0x510 [ 1823.348009][ T3471] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1823.348092][ T3471] ? __pfx___might_resched+0x10/0x10 [ 1823.348144][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.348196][ T3471] ? folio_clear_dirty_for_io+0x178/0x960 [ 1823.348275][ T3471] f2fs_write_cache_pages+0x20e9/0x2630 [ 1823.348344][ T3471] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1823.348396][ T3471] ? lock_release+0x24d/0x310 [ 1823.348449][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.348503][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.348556][ T3471] ? kernel_text_address+0x8d/0x100 [ 1823.348602][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.348655][ T3471] ? __kernel_text_address+0xd/0x30 [ 1823.348699][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.348751][ T3471] ? unwind_get_return_address+0x59/0xa0 [ 1823.348824][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.348884][ T3471] ? __css_rstat_updated+0x1ce/0x5a0 [ 1823.348938][ T3471] ? arch_stack_walk+0xa6/0xf0 [ 1823.349019][ T3471] ? unwind_next_frame+0x3be/0x2090 [ 1823.349101][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.349154][ T3471] ? __mod_zone_page_state+0xe2/0x190 [ 1823.349235][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.349288][ T3471] ? rcu_is_watching+0x12/0xc0 [ 1823.349350][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.349402][ T3471] ? lock_release+0x24d/0x310 [ 1823.349451][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.349503][ T3471] ? rcu_is_watching+0x12/0xc0 [ 1823.349571][ T3471] f2fs_write_data_pages+0x799/0x16d0 [ 1823.349632][ T3471] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1823.349689][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.349742][ T3471] ? rcu_is_watching+0x12/0xc0 [ 1823.349805][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.349861][ T3471] ? lock_release+0x24d/0x310 [ 1823.349910][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.349961][ T3471] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1823.350015][ T3471] do_writepages+0x278/0x600 [ 1823.350089][ T3471] ? __pfx_do_writepages+0x10/0x10 [ 1823.350159][ T3471] ? do_raw_spin_unlock+0x145/0x1e0 [ 1823.350219][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.350271][ T3471] ? _raw_spin_unlock+0x28/0x50 [ 1823.350340][ T3471] filemap_writeback+0x22d/0x2e0 [ 1823.350384][ T3471] ? __pfx_filemap_writeback+0x10/0x10 [ 1823.350462][ T3471] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 1823.350515][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.350566][ T3471] ? rcu_is_watching+0x12/0xc0 [ 1823.350628][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.350680][ T3471] ? lock_release+0x24d/0x310 [ 1823.350734][ T3471] f2fs_sync_dirty_inodes+0x46a/0x970 [ 1823.350798][ T3471] block_operations+0x2a6/0xfc0 [ 1823.350853][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.350907][ T3471] ? trace_sched_exit_tp+0x120/0x160 [ 1823.350972][ T3471] ? __pfx_block_operations+0x10/0x10 [ 1823.351020][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.351069][ T3471] ? rcu_is_watching+0x12/0xc0 [ 1823.351163][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.351210][ T3471] ? rcu_is_watching+0x12/0xc0 [ 1823.351271][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.351322][ T3471] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1823.351383][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.351434][ T3471] ? rcu_is_watching+0x12/0xc0 [ 1823.351501][ T3471] f2fs_write_checkpoint+0x58b/0x53d0 [ 1823.351555][ T3471] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1823.351613][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.351664][ T3471] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1823.351723][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.351774][ T3471] ? __wait_for_common+0x1f3/0x4c0 [ 1823.351847][ T3471] ? __pfx_schedule_timeout+0x10/0x10 [ 1823.351908][ T3471] ? __pfx___wait_for_common+0x10/0x10 [ 1823.351975][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.352028][ T3471] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1823.352081][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.352138][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.352189][ T3471] ? rcu_is_watching+0x12/0xc0 [ 1823.352251][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.352302][ T3471] ? kthread_stop+0x280/0x630 [ 1823.352372][ T3471] kill_f2fs_super+0x3f1/0x4a0 [ 1823.352424][ T3471] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1823.352489][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.352549][ T3471] deactivate_locked_super+0xc1/0x1b0 [ 1823.352600][ T3471] deactivate_super+0xe7/0x110 [ 1823.352651][ T3471] cleanup_mnt+0x21f/0x450 [ 1823.352713][ T3471] task_work_run+0x150/0x240 [ 1823.352756][ T3471] ? __pfx_task_work_run+0x10/0x10 [ 1823.352801][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.352857][ T3471] ? rcu_is_watching+0x12/0xc0 [ 1823.352923][ T3471] exit_to_user_mode_loop+0x1d8/0x6f0 [ 1823.352979][ T3471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1823.353030][ T3471] ? rcu_is_watching+0x12/0xc0 [ 1823.353120][ T3471] do_syscall_64+0x666/0x870 [ 1823.353165][ T3471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1823.353209][ T3471] RIP: 0033:0x7fedb979f097 [ 1823.353243][ T3471] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1823.353286][ T3471] RSP: 002b:00007ffe2014a578 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1823.353329][ T3471] RAX: 0000000000000000 RBX: 00007fedb98332ca RCX: 00007fedb979f097 [ 1823.353358][ T3471] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2014a630 [ 1823.353385][ T3471] RBP: 00007ffe2014a630 R08: 00007ffe2014b630 R09: 00000000ffffffff [ 1823.353415][ T3471] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2014b6c0 [ 1823.353444][ T3471] R13: 00007fedb98332ca R14: 00000000001a987d R15: 00007ffe2014b700 [ 1823.353491][ T3471] [ 1823.385505][ T5567] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1823.398403][ T3471] F2FS-fs (loop5): Remounting filesystem read-only [ 1823.839196][ T30] audit: type=1326 audit(2000001394.096:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5592 comm="syz.8.16709" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a4219de59 code=0x0 [ 1824.269591][ T5640] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1824.330866][ T5624] loop1: detected capacity change from 0 to 1024 [ 1824.445555][ T5640] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1824.445642][ T5640] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1824.445695][ T5640] usb 10-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1824.445742][ T5640] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.518907][ T5640] usb 10-1: config 0 descriptor?? [ 1824.602700][ T5636] tc_dump_action: action bad kind [ 1824.949339][ T5604] loop7: detected capacity change from 0 to 131072 [ 1824.980273][ T5640] hid-picolcd 0003:04D8:C002.0041: unexpected long global item [ 1824.980826][ T5640] hid-picolcd 0003:04D8:C002.0041: device report parse failed [ 1824.981031][ T5640] hid-picolcd 0003:04D8:C002.0041: probe with driver hid-picolcd failed with error -22 [ 1825.189955][ T5654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1825.223924][ T5640] usb 10-1: USB disconnect, device number 4 [ 1825.617988][ T5678] loop5: detected capacity change from 0 to 512 [ 1825.633430][ T5678] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 1825.635410][ T5678] EXT4-fs error (device loop5): ext4_iget_extra_inode:5179: inode #15: comm syz.5.16725: corrupted in-inode xattr: e_value size too large [ 1825.635522][ T5678] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1825.636420][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1825.636458][ C0] EXT4-fs (loop5): initial error at time 2000001395: ext4_iget_extra_inode:5179: inode 15 [ 1825.636514][ C0] EXT4-fs (loop5): last error at time 2000001395: ext4_iget_extra_inode:5179: inode 15 [ 1825.637731][ T5678] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.16725: couldn't read orphan inode 15 (err -117) [ 1825.637787][ T5678] loop5: lost filesystem error report for type 5 error -117 [ 1825.644066][ T5678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1825.884049][ T3471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1826.085821][ T5710] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16731'. [ 1826.152340][ T5716] loop5: detected capacity change from 0 to 256 [ 1826.169165][ T5716] exfat: Deprecated parameter 'utf8' [ 1826.169205][ T5716] exfat: Deprecated parameter 'utf8' [ 1826.169290][ T5716] exfat: Deprecated parameter 'namecase' [ 1826.169326][ T5716] exfat: Deprecated parameter 'utf8' [ 1826.262220][ T5716] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1826.684019][ T11] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1826.854139][ T11] usb 10-1: Using ep0 maxpacket: 8 [ 1826.863385][ T11] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1826.863470][ T11] usb 10-1: too many configurations: 188, using maximum allowed: 8 [ 1826.906743][ T11] usb 10-1: New USB device found, idVendor=0499, idProduct=103b, bcdDevice= 0.40 [ 1826.906803][ T11] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=85 [ 1826.906845][ T11] usb 10-1: Product: syz [ 1826.906876][ T11] usb 10-1: Manufacturer: syz [ 1826.906909][ T11] usb 10-1: SerialNumber: syz [ 1827.017292][ T5797] netlink: 296 bytes leftover after parsing attributes in process `syz.4.16747'. [ 1827.045138][ T5800] loop5: detected capacity change from 0 to 64 [ 1827.138810][ T5803] netlink: 'syz.8.16749': attribute type 1 has an invalid length. [ 1827.138862][ T5803] netlink: 244 bytes leftover after parsing attributes in process `syz.8.16749'. [ 1827.222648][ T11] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1827.387913][ T11] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1827.397132][ T11] usb 10-1: USB disconnect, device number 5 [ 1827.479754][T26020] udevd[26020]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1827.552635][ T5836] loop1: detected capacity change from 0 to 16 [ 1827.560460][ T5836] erofs (device loop1): mounted with root inode @ nid 36. [ 1828.146173][ T5789] loop7: detected capacity change from 0 to 32768 [ 1828.166377][ T5789] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.16744 (5789) [ 1828.166798][ T5789] BTRFS error: failed to open device for path /dev/loop7 with flags 0x23: -13 [ 1828.200647][ T5640] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1828.372391][ T5640] usb 2-1: Using ep0 maxpacket: 32 [ 1828.385506][ T5640] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 1828.385562][ T5640] usb 2-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 1828.385603][ T5640] usb 2-1: config 0 has no interface number 0 [ 1828.385657][ T5640] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1828.385708][ T5640] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1828.385763][ T5640] usb 2-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1828.385815][ T5640] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 1828.385870][ T5640] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1828.385920][ T5640] usb 2-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1828.385972][ T5640] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 107, changing to 10 [ 1828.386028][ T5640] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid maxpacket 25209, setting to 1024 [ 1828.386084][ T5640] usb 2-1: config 0 interface 239 has no altsetting 0 [ 1828.399556][ T5640] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1828.399616][ T5640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.399659][ T5640] usb 2-1: Product: syz [ 1828.399692][ T5640] usb 2-1: Manufacturer: syz [ 1828.399724][ T5640] usb 2-1: SerialNumber: syz [ 1828.412357][ T5640] usb 2-1: config 0 descriptor?? [ 1828.414029][ T5855] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1828.414334][ T5855] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1829.073219][T13503] Bluetooth: hci8: BCM: Reset failed (-71) [ 1829.081236][ T5640] usb 2-1: USB disconnect, device number 113 [ 1829.192860][ T5873] loop8: detected capacity change from 0 to 131072 [ 1829.231964][ T5873] F2FS-fs (loop8): Invalid log sectorsize (16253193) [ 1829.232015][ T5873] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 1829.270950][ T5873] F2FS-fs (loop8): Skip to start discard thread for readonly image [ 1829.275801][ T5873] F2FS-fs (loop8): Current segment's next free block offset is inconsistent with bitmap, logtype:0, segno:3, type:0, next_blkoff:5, blkofs:5 [ 1829.275896][ T5873] loop8: lost filesystem error report for type 5 error -117 [ 1829.275923][ T5873] F2FS-fs (loop8): Failed to initialize F2FS segment manager (-117) [ 1829.653640][T16133] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1829.818546][T16133] usb 5-1: Using ep0 maxpacket: 16 [ 1829.827338][T16133] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1829.829822][T16133] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1829.829919][T16133] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1829.837239][T16133] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1829.837293][T16133] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.837356][T16133] usb 5-1: Product: syz [ 1829.837388][T16133] usb 5-1: Manufacturer: syz [ 1829.837420][T16133] usb 5-1: SerialNumber: syz [ 1830.027171][ T5866] loop5: detected capacity change from 0 to 32768 [ 1830.042823][ T5866] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.16761 (5866) [ 1830.057454][ T5866] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1830.057514][ T5866] BTRFS info (device loop5): using blake2b checksum algorithm [ 1830.149462][T16133] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 1830.149766][T16133] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1830.200801][ T5866] BTRFS info (device loop5): enabling ssd optimizations [ 1830.200851][ T5866] BTRFS info (device loop5): turning on async discard [ 1830.200886][ T5866] BTRFS info (device loop5): enabling free space tree [ 1830.200924][ T5866] BTRFS info (device loop5): use zstd compression, level 3 [ 1830.221376][ T11] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1830.243644][ T5968] loop8: detected capacity change from 0 to 128 [ 1830.313349][ T5866] BTRFS error (device loop5): target device is invalid! [ 1830.333805][T16133] usb 5-1: 2:1 : can't get High Capability descriptor [ 1830.379786][ T11] usb 10-1: Using ep0 maxpacket: 16 [ 1830.381960][ T11] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1830.382040][ T11] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1830.382086][ T11] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.391627][ T11] usb 10-1: config 0 descriptor?? [ 1830.525661][ T3471] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1830.729475][T16133] usb 5-1: USB disconnect, device number 118 [ 1830.772754][T26042] udevd[26042]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 1830.876094][ T11] hid_parser_main: 38 callbacks suppressed [ 1830.876137][ T11] kone 0003:1E7D:2CED.0042: unknown main item tag 0x0 [ 1830.876190][ T11] kone 0003:1E7D:2CED.0042: unknown main item tag 0x0 [ 1830.876268][ T11] kone 0003:1E7D:2CED.0042: unknown main item tag 0x0 [ 1830.876310][ T11] kone 0003:1E7D:2CED.0042: unknown main item tag 0x0 [ 1830.876351][ T11] kone 0003:1E7D:2CED.0042: unknown main item tag 0x0 [ 1830.876387][ T11] kone 0003:1E7D:2CED.0042: unknown main item tag 0x0 [ 1830.876426][ T11] kone 0003:1E7D:2CED.0042: unknown main item tag 0x0 [ 1830.876465][ T11] kone 0003:1E7D:2CED.0042: unknown main item tag 0x0 [ 1830.876505][ T11] kone 0003:1E7D:2CED.0042: unknown main item tag 0x0 [ 1830.876544][ T11] kone 0003:1E7D:2CED.0042: unknown main item tag 0x0 [ 1830.914239][ T11] kone 0003:1E7D:2CED.0042: hidraw0: USB HID v0.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.9-1/input0 [ 1831.077980][ T11] kone 0003:1E7D:2CED.0042: couldn't init struct kone_device [ 1831.078047][ T11] kone 0003:1E7D:2CED.0042: couldn't install mouse [ 1831.089564][ T11] kone 0003:1E7D:2CED.0042: probe with driver kone failed with error -5 [ 1831.111896][ T11] usb 10-1: USB disconnect, device number 6 [ 1831.295458][ T6016] fido_id[6016]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1831.785013][ T6064] loop8: detected capacity change from 0 to 16 [ 1831.786132][ T6064] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 1831.840053][ T6064] cramfs: empty filesystem [ 1832.351398][ T6094] netlink: 128 bytes leftover after parsing attributes in process `syz.9.16800'. [ 1832.468097][ T6101] loop1: detected capacity change from 0 to 1024 [ 1832.793053][T16133] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1832.954388][T16133] usb 9-1: Using ep0 maxpacket: 16 [ 1832.959197][T16133] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1832.963763][T16133] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1832.963854][T16133] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1832.980281][T16133] usb 9-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1832.980341][T16133] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.980383][T16133] usb 9-1: Product: syz [ 1832.980416][T16133] usb 9-1: Manufacturer: syz [ 1832.980447][T16133] usb 9-1: SerialNumber: syz [ 1833.287079][T16133] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 1833.287471][T16133] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1833.500275][T16133] usb 9-1: 2:1 : can't get High Capability descriptor [ 1833.506846][ T6098] loop7: detected capacity change from 0 to 32768 [ 1833.527149][ T6098] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.16799 (6098) [ 1833.527481][ T6098] BTRFS error: failed to open device for path /dev/loop7 with flags 0x23: -13 [ 1833.538466][ T6142] tmpfs: Cannot change global quota limit on remount [ 1833.649549][ T6150] netlink: 80 bytes leftover after parsing attributes in process `syz.5.16812'. [ 1833.829487][ T804] usb 9-1: USB disconnect, device number 7 [ 1834.271582][ T6186] loop5: detected capacity change from 0 to 1024 [ 1835.419319][ T6244] loop8: detected capacity change from 0 to 1024 [ 1835.909383][ T6270] loop9: detected capacity change from 0 to 16 [ 1835.921411][ T6270] erofs (device loop9): mounted with root inode @ nid 36. [ 1835.967218][ T6219] loop5: detected capacity change from 0 to 32768 [ 1836.015069][ T30] audit: type=1800 audit(2000001405.500:547): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.16829" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 1836.080513][ T6284] loop7: detected capacity change from 0 to 256 [ 1836.246590][ T5640] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1836.298632][ T6296] loop9: detected capacity change from 0 to 512 [ 1836.334832][ T6296] EXT4-fs error (device loop9): ext4_validate_block_bitmap:440: comm syz.9.16850: bg 0: block 127: padding at end of block bitmap is not set [ 1836.334906][ T6296] loop9: lost filesystem error report for type 5 error -117 [ 1836.335392][ T6296] EXT4-fs (loop9): Remounting filesystem read-only [ 1836.335628][ T6296] EXT4-fs warning (device loop9): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.9.16850: cleanup dec ref error -28 [ 1836.335805][ T6296] EXT4-fs warning (device loop9): ext4_evict_inode:269: couldn't mark inode dirty (err -30) [ 1836.335880][ T6296] EXT4-fs (loop9): 1 orphan inode deleted [ 1836.339514][ T6296] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1836.426671][ T5640] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1836.426728][ T5640] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1836.426764][ T5640] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1836.426794][ T5640] usb 5-1: config 220 has no interface number 2 [ 1836.426846][ T5640] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1836.426894][ T5640] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1836.426922][ T5640] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1836.426950][ T5640] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1836.429152][ T5640] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1836.429204][ T5640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.429242][ T5640] usb 5-1: Product: syz [ 1836.429265][ T5640] usb 5-1: Manufacturer: syz [ 1836.429288][ T5640] usb 5-1: SerialNumber: syz [ 1836.505253][ T3434] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1836.693048][ T5640] uvcvideo 5-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1836.693160][ T5640] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1836.693216][ T5640] uvcvideo 5-1:220.0: No valid video chain found. [ 1836.693367][ T5640] usb 5-1: selecting invalid altsetting 0 [ 1836.721731][ T5640] usb 5-1: selecting invalid altsetting 0 [ 1836.721786][ T5640] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1836.730999][ T5640] usb 5-1: USB disconnect, device number 119 [ 1836.927682][T16133] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1836.984981][ T6347] loop1: detected capacity change from 0 to 512 [ 1836.991291][ T6347] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1837.009539][ T6347] EXT4-fs (loop1): 1 truncate cleaned up [ 1837.010866][ T6347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1837.061091][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1837.094299][T16133] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1837.094369][T16133] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1837.094434][T16133] usb 10-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1837.094484][T16133] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.100715][T16133] usb 10-1: config 0 descriptor?? [ 1837.284592][ T6371] loop5: detected capacity change from 0 to 16 [ 1837.303034][ T6371] erofs (device loop5): mounted with root inode @ nid 36. [ 1837.565212][T16133] hkems 0003:2006:0118.0043: item fetching failed at offset 5/7 [ 1837.565789][T16133] hkems 0003:2006:0118.0043: parse failed [ 1837.565878][T16133] hkems 0003:2006:0118.0043: probe with driver hkems failed with error -22 [ 1837.822154][ T804] usb 10-1: USB disconnect, device number 7 [ 1838.898271][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16887'. [ 1839.580153][ T6493] ucma_write: process 399 (syz.7.16899) changed security contexts after opening file descriptor, this is not allowed. [ 1839.609942][ T6486] wlan0 speed is unknown, defaulting to 1000 [ 1839.616606][ T6486] lo speed is unknown, defaulting to 1000 [ 1839.790258][ T6501] netlink: 296 bytes leftover after parsing attributes in process `syz.7.16901'. [ 1839.850372][ T6506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16903'. [ 1840.069852][ T6486] €Â speed is unknown, defaulting to 1000 [ 1840.093625][ T6517] loop5: detected capacity change from 0 to 512 [ 1840.098579][ T6517] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1840.105428][ T6517] EXT4-fs (loop5): 1 truncate cleaned up [ 1840.113414][ T6517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1840.364987][ T3471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1840.575357][ T6512] loop7: detected capacity change from 0 to 40427 [ 1840.576636][ T6512] F2FS-fs: heap/no_heap options were deprecated [ 1841.018950][ T6566] loop9: detected capacity change from 0 to 512 [ 1841.032410][ T6566] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1841.053381][ T6566] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 1841.059613][ T6566] EXT4-fs (loop9): Errors on filesystem, clearing orphan list. [ 1841.094073][ T6575] netlink: 296 bytes leftover after parsing attributes in process `syz.1.16918'. [ 1841.140829][ T6566] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1841.228692][ T3434] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1841.400341][ T6587] loop5: detected capacity change from 0 to 512 [ 1841.414343][ T6587] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1841.420502][ T6587] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1841.423395][ T6587] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:516: comm syz.5.16921: Block bitmap for bg 0 marked uninitialized [ 1841.423450][ T6587] loop5: lost filesystem error report for type 5 error -117 [ 1841.423884][ T6587] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1841.423923][ T6587] loop5: lost filesystem error report for type 5 error -117 [ 1841.426841][ T6587] EXT4-fs (loop5): 1 orphan inode deleted [ 1841.434377][ T6587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1841.624024][ T3471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1841.792807][ T6611] loop9: detected capacity change from 0 to 512 [ 1841.812066][ T6611] EXT4-fs error (device loop9): ext4_iget_extra_inode:5179: inode #15: comm syz.9.16925: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1841.812138][ T6611] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1841.812448][ T6611] EXT4-fs (loop9): Remounting filesystem read-only [ 1841.813731][ T6611] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1841.988682][ T3434] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1842.144847][ T6639] loop7: detected capacity change from 0 to 512 [ 1842.145097][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16932'. [ 1842.151960][ T6641] loop9: detected capacity change from 0 to 128 [ 1842.215965][ T6641] FAT-fs (loop9): error, clusters badly computed (4 != 3) [ 1842.216018][ T6641] FAT-fs (loop9): Filesystem has been set read-only [ 1842.221362][ T6641] FAT-fs (loop9): error, clusters badly computed (5 != 4) [ 1842.229805][ T6641] FAT-fs (loop9): error, clusters badly computed (6 != 5) [ 1842.420818][ T6656] netlink: 296 bytes leftover after parsing attributes in process `syz.5.16936'. [ 1843.211841][ T6672] loop8: detected capacity change from 0 to 40427 [ 1843.218877][ T6672] F2FS-fs: heap/no_heap options were deprecated [ 1843.221308][ T6672] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 1843.221348][ T6672] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1843.225655][ T6672] F2FS-fs (loop8): invalid crc value [ 1843.276766][ T6690] netlink: 48 bytes leftover after parsing attributes in process `syz.1.16947'. [ 1843.330703][ T6693] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16949'. [ 1843.500536][ T6672] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1843.509133][ T6672] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1843.509177][ T6672] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1843.514495][ T6702] loop7: detected capacity change from 0 to 16 [ 1843.522403][ T6702] erofs (device loop7): mounted with root inode @ nid 36. [ 1843.650367][ T6712] netlink: 24 bytes leftover after parsing attributes in process `syz.9.16954'. [ 1843.808608][ T1576] syz-executor: attempt to access beyond end of device [ 1843.808608][ T1576] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1843.808721][ T1576] CPU: 1 UID: 0 PID: 1576 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1843.808783][ T1576] Tainted: [L]=SOFTLOCKUP [ 1843.808799][ T1576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1843.808827][ T1576] Call Trace: [ 1843.808842][ T1576] [ 1843.808858][ T1576] dump_stack_lvl+0x100/0x190 [ 1843.808930][ T1576] f2fs_stop_checkpoint+0x5e6/0xb30 [ 1843.808998][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.809053][ T1576] ? errseq_set+0xe3/0x150 [ 1843.809115][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.809171][ T1576] f2fs_write_end_bio+0xf53/0x1340 [ 1843.809246][ T1576] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 1843.809314][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.809368][ T1576] ? rcu_is_watching+0x12/0xc0 [ 1843.809441][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.809495][ T1576] ? lock_release+0x24d/0x310 [ 1843.809550][ T1576] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1843.809623][ T1576] bio_endio+0x778/0x8e0 [ 1843.809673][ T1576] submit_bio_noacct+0x64c/0x1ff0 [ 1843.809746][ T1576] f2fs_submit_write_bio+0x133/0x330 [ 1843.809815][ T1576] __submit_merged_bio+0x330/0x7b0 [ 1843.809894][ T1576] ? rcu_is_watching+0x12/0xc0 [ 1843.809962][ T1576] __submit_merged_write_cond+0x3fe/0x510 [ 1843.810047][ T1576] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1843.810131][ T1576] ? __pfx___might_resched+0x10/0x10 [ 1843.810185][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.810239][ T1576] ? folio_clear_dirty_for_io+0x178/0x960 [ 1843.810321][ T1576] f2fs_write_cache_pages+0x20e9/0x2630 [ 1843.810389][ T1576] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1843.810442][ T1576] ? lock_release+0x24d/0x310 [ 1843.810493][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.810548][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.810601][ T1576] ? kernel_text_address+0x8d/0x100 [ 1843.810648][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.810702][ T1576] ? __kernel_text_address+0xd/0x30 [ 1843.810747][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.810805][ T1576] ? unwind_get_return_address+0x59/0xa0 [ 1843.810886][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.810939][ T1576] ? __css_rstat_updated+0x1ce/0x5a0 [ 1843.810994][ T1576] ? arch_stack_walk+0xa6/0xf0 [ 1843.811074][ T1576] ? unwind_next_frame+0x3be/0x2090 [ 1843.811161][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.811215][ T1576] ? __mod_zone_page_state+0xe2/0x190 [ 1843.811295][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.811349][ T1576] ? rcu_is_watching+0x12/0xc0 [ 1843.811411][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.811462][ T1576] ? lock_release+0x24d/0x310 [ 1843.811510][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.811565][ T1576] ? rcu_is_watching+0x12/0xc0 [ 1843.811630][ T1576] f2fs_write_data_pages+0x799/0x16d0 [ 1843.811689][ T1576] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1843.811745][ T1576] ? rcu_is_watching+0x12/0xc0 [ 1843.811807][ T1576] ? clockevents_program_event+0x1bf/0x820 [ 1843.811878][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.811930][ T1576] ? rcu_is_watching+0x12/0xc0 [ 1843.811992][ T1576] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1843.812046][ T1576] do_writepages+0x278/0x600 [ 1843.812118][ T1576] ? __pfx_do_writepages+0x10/0x10 [ 1843.812186][ T1576] ? do_raw_spin_unlock+0x145/0x1e0 [ 1843.812245][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.812297][ T1576] ? _raw_spin_unlock+0x28/0x50 [ 1843.812363][ T1576] filemap_writeback+0x22d/0x2e0 [ 1843.812407][ T1576] ? __pfx_filemap_writeback+0x10/0x10 [ 1843.812446][ T1576] ? __pfx_clockevents_program_event+0x10/0x10 [ 1843.812511][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.812593][ T1576] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 1843.812645][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.812696][ T1576] ? rcu_is_watching+0x12/0xc0 [ 1843.812757][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.812808][ T1576] ? lock_release+0x24d/0x310 [ 1843.812865][ T1576] f2fs_sync_dirty_inodes+0x46a/0x970 [ 1843.812928][ T1576] block_operations+0x2a6/0xfc0 [ 1843.812976][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.813031][ T1576] ? trace_sched_exit_tp+0x120/0x160 [ 1843.813123][ T1576] ? __pfx_block_operations+0x10/0x10 [ 1843.813169][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.813219][ T1576] ? rcu_is_watching+0x12/0xc0 [ 1843.813307][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.813356][ T1576] ? rcu_is_watching+0x12/0xc0 [ 1843.813415][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.813465][ T1576] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1843.813524][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.813574][ T1576] ? rcu_is_watching+0x12/0xc0 [ 1843.813638][ T1576] f2fs_write_checkpoint+0x58b/0x53d0 [ 1843.813690][ T1576] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1843.813747][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.813804][ T1576] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1843.813865][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.813915][ T1576] ? __wait_for_common+0x1f3/0x4c0 [ 1843.813981][ T1576] ? __pfx_schedule_timeout+0x10/0x10 [ 1843.814039][ T1576] ? __pfx___wait_for_common+0x10/0x10 [ 1843.814105][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.814156][ T1576] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1843.814209][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.814267][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.814317][ T1576] ? rcu_is_watching+0x12/0xc0 [ 1843.814378][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.814428][ T1576] ? kthread_stop+0x280/0x630 [ 1843.814497][ T1576] kill_f2fs_super+0x3f1/0x4a0 [ 1843.814549][ T1576] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1843.814614][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.814677][ T1576] deactivate_locked_super+0xc1/0x1b0 [ 1843.814733][ T1576] deactivate_super+0xe7/0x110 [ 1843.814784][ T1576] cleanup_mnt+0x21f/0x450 [ 1843.814846][ T1576] task_work_run+0x150/0x240 [ 1843.814895][ T1576] ? __pfx_task_work_run+0x10/0x10 [ 1843.814941][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.814991][ T1576] ? rcu_is_watching+0x12/0xc0 [ 1843.815058][ T1576] exit_to_user_mode_loop+0x1d8/0x6f0 [ 1843.815112][ T1576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.815165][ T1576] ? rcu_is_watching+0x12/0xc0 [ 1843.815231][ T1576] do_syscall_64+0x666/0x870 [ 1843.815276][ T1576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.815323][ T1576] RIP: 0033:0x7f2a4219f097 [ 1843.815358][ T1576] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1843.815401][ T1576] RSP: 002b:00007ffd46ffb338 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1843.815444][ T1576] RAX: 0000000000000000 RBX: 00007f2a422332ca RCX: 00007f2a4219f097 [ 1843.815472][ T1576] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd46ffb3f0 [ 1843.815500][ T1576] RBP: 00007ffd46ffb3f0 R08: 00007ffd46ffc3f0 R09: 00000000ffffffff [ 1843.815531][ T1576] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd46ffc480 [ 1843.815559][ T1576] R13: 00007f2a422332ca R14: 00000000001ae367 R15: 00007ffd46ffc4c0 [ 1843.815604][ T1576] [ 1843.906308][ T1576] F2FS-fs (loop8): Remounting filesystem read-only [ 1844.033207][ T6732] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1844.151821][ T6733] loop5: detected capacity change from 0 to 4096 [ 1844.204899][ T6743] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1844.225221][ T6745] loop1: detected capacity change from 0 to 256 [ 1844.650266][ T6764] Bluetooth: MGMT ver 1.23 [ 1845.126065][ T6799] loop8: detected capacity change from 0 to 16 [ 1845.145449][ T6799] erofs (device loop8): mounted with root inode @ nid 36. [ 1845.308825][ T30] audit: type=1326 audit(2000001414.199:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6809 comm="syz.4.16977" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f568b79de59 code=0x0 [ 1845.566211][T16133] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1845.728144][T16133] usb 10-1: Using ep0 maxpacket: 16 [ 1845.733042][T16133] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1845.734470][T16133] usb 10-1: config 1 has an invalid interface number: 237 but max is 0 [ 1845.734526][T16133] usb 10-1: config 1 has no interface number 0 [ 1845.734608][T16133] usb 10-1: config 1 interface 237 has no altsetting 0 [ 1845.744107][T16133] usb 10-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 1845.744165][T16133] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.744234][T16133] usb 10-1: Product: syz [ 1845.744265][T16133] usb 10-1: Manufacturer: syz [ 1845.744299][T16133] usb 10-1: SerialNumber: syz [ 1845.816376][ T6842] EXT4-fs: inline encryption not supported [ 1845.827422][ T6842] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1845.827460][ T6842] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1845.829727][ T6842] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 1845.829871][ T6842] System zones: 0-5 [ 1845.846540][ T6842] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1845.908973][ T6842] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 1845.986620][T13503] Bluetooth: hci6: command 0x0405 tx timeout [ 1845.998218][T16133] ipaq 10-1:1.237: PocketPC PDA converter detected [ 1845.999926][T16133] ipaq 10-1:1.237: probe with driver ipaq failed with error -71 [ 1846.010215][T16133] usb 10-1: USB disconnect, device number 8 [ 1846.119881][ T3471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1846.774960][ T6904] set_capacity_and_notify: 2 callbacks suppressed [ 1846.774997][ T6904] loop7: detected capacity change from 0 to 16 [ 1846.792161][ T6904] erofs (device loop7): mounted with root inode @ nid 36. [ 1847.524699][ T6937] loop5: detected capacity change from 0 to 764 [ 1847.549052][ T6937] ISO 9660 Extensions: Microsoft Joliet Level 0 [ 1847.557971][ T6937] ISOFS: File unit size != 0 for ISO file (1792). [ 1847.558004][ T6937] rock: directory entry would overflow storage [ 1847.558022][ T6937] rock: sig=0x4654, size=5, remaining=4 [ 1848.112056][ T6970] loop1: detected capacity change from 0 to 512 [ 1848.160477][ T6970] EXT4-fs error (device loop1): ext4_iget_extra_inode:5179: inode #15: comm syz.1.17012: corrupted in-inode xattr: e_value size too large [ 1848.160544][ T6970] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1848.160956][ T6970] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.17012: couldn't read orphan inode 15 (err -117) [ 1848.161012][ T6970] loop1: lost filesystem error report for type 5 error -117 [ 1848.161235][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 1848.161271][ C1] EXT4-fs (loop1): initial error at time 2000001416: ext4_iget_extra_inode:5179: inode 15 [ 1848.161330][ C1] EXT4-fs (loop1): last error at time 2000001416: ext4_orphan_get:1402 [ 1848.174165][ T6970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1848.349598][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1848.680389][ T7004] netlink: 68 bytes leftover after parsing attributes in process `syz.8.17022'. [ 1848.680438][ T7004] netlink: 'syz.8.17022': attribute type 1 has an invalid length. [ 1848.747959][ T7010] loop1: detected capacity change from 0 to 512 [ 1848.758734][ T7010] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1848.758773][ T7010] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1848.766022][ T7010] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1848.766403][ T7010] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1848.766504][ T7010] System zones: 0-2, 18-18, 34-35 [ 1848.798101][ T7010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1848.852241][ T7018] loop9: detected capacity change from 0 to 512 [ 1848.881785][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1848.933140][ T7018] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1848.933252][ T7018] ext4 filesystem being mounted at /86/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1849.075464][ T3434] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1849.138362][ T7034] hub 8-0:1.0: USB hub found [ 1849.140472][ T7034] hub 8-0:1.0: 1 port detected [ 1849.465928][ T5783] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1849.601258][ T7070] loop7: detected capacity change from 0 to 64 [ 1849.625364][ T5783] usb 5-1: Using ep0 maxpacket: 16 [ 1849.627491][ T5783] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1849.627544][ T5783] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1849.627600][ T5783] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1849.627645][ T5783] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1849.629654][ T5783] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1849.629703][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.629744][ T5783] usb 5-1: Product: syz [ 1849.629775][ T5783] usb 5-1: Manufacturer: syz [ 1849.629807][ T5783] usb 5-1: SerialNumber: syz [ 1849.640467][ T5783] usb 5-1: config 0 descriptor?? [ 1849.838633][ T30] audit: type=1326 audit(2000001418.440:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.5.17042" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb979de59 code=0x7ffc0000 [ 1849.839134][ T30] audit: type=1326 audit(2000001418.449:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.5.17042" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb979de59 code=0x7ffc0000 [ 1849.841827][ T30] audit: type=1326 audit(2000001418.449:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.5.17042" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb979de59 code=0x7ffc0000 [ 1849.848418][ T30] audit: type=1326 audit(2000001418.449:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.5.17042" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb979de59 code=0x7ffc0000 [ 1849.851904][ T30] audit: type=1326 audit(2000001418.459:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.5.17042" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fedb979de59 code=0x7ffc0000 [ 1849.851984][ T30] audit: type=1326 audit(2000001418.459:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.5.17042" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb979de59 code=0x7ffc0000 [ 1849.852054][ T30] audit: type=1326 audit(2000001418.459:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.5.17042" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb979de59 code=0x7ffc0000 [ 1849.857045][ T30] audit: type=1326 audit(2000001418.459:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.5.17042" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb979de59 code=0x7ffc0000 [ 1849.858735][ T30] audit: type=1326 audit(2000001418.459:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.5.17042" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb979de59 code=0x7ffc0000 [ 1849.886302][ T5783] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input131 [ 1849.887429][ T4974] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1849.887944][ T4974] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1849.897753][ T4974] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1849.911593][ T7087] loop7: detected capacity change from 0 to 512 [ 1849.917425][ T4974] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1850.062953][ T7106] No buffer was provided with the request [ 1850.102044][ T7039] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1850.149836][ T5783] usb 5-1: USB disconnect, device number 120 [ 1850.992896][ T7154] ALSA: seq fatal error: cannot create timer (-22) [ 1851.378443][ T7139] loop1: detected capacity change from 0 to 32768 [ 1851.389062][ T7139] BTRFS info: device /dev/loop1 (7:1) using temp-fsid ff73ea72-8059-4179-aa9f-56caf139ca02 [ 1851.389159][ T7139] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.17056 (7139) [ 1851.404423][ T7139] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1851.404493][ T7139] BTRFS info (device loop1): using crc32c checksum algorithm [ 1851.501676][ T7139] BTRFS info (device loop1): enabling ssd optimizations [ 1851.501725][ T7139] BTRFS info (device loop1): turning on flush-on-commit [ 1851.501759][ T7139] BTRFS info (device loop1): enabling free space tree [ 1851.501792][ T7139] BTRFS info (device loop1): enabling auto defrag [ 1851.501826][ T7139] BTRFS info (device loop1): use lzo compression, level 1 [ 1851.501873][ T7139] BTRFS info (device loop1): max_inline set to 4096 [ 1851.666752][T10968] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1851.739987][ T5628] BTRFS info (device loop1): last unmount of filesystem ff73ea72-8059-4179-aa9f-56caf139ca02 [ 1851.830262][T10968] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1851.830325][T10968] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.830368][T10968] usb 9-1: Product: syz [ 1851.830399][T10968] usb 9-1: Manufacturer: syz [ 1851.830431][T10968] usb 9-1: SerialNumber: syz [ 1851.833391][T10968] usb 9-1: config 0 descriptor?? [ 1852.506462][T10968] usb 9-1: f81604_read: reg: 105 failed: -EPROTO [ 1852.506521][T10968] f81604 9-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 1852.506571][T10968] f81604 9-1:0.0: probe with driver f81604 failed with error -71 [ 1852.526961][T10968] usb 9-1: USB disconnect, device number 8 [ 1852.730331][ T7234] loop1: detected capacity change from 0 to 4096 [ 1852.739903][ T7234] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1852.808464][ T7234] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1852.810272][ T7234] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 1852.876823][ T7234] ntfs3(loop1): ino=3f, "cgroup.controllers" fiemap(xattr) is not supported [ 1853.915055][ T7305] loop7: detected capacity change from 0 to 256 [ 1853.924690][ T7305] exfat: Deprecated parameter 'utf8' [ 1854.543552][ T7343] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1854.802607][ T7360] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1855.235183][ T7382] loop9: detected capacity change from 0 to 64 [ 1855.433790][ T7393] team0: Device xfrm0 is of different type [ 1855.677657][ T7412] syz_tun: entered allmulticast mode [ 1855.681024][ T7412] syz_tun: left allmulticast mode [ 1856.059112][ T7435] loop8: detected capacity change from 0 to 1024 [ 1856.093756][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17137'. [ 1856.632903][ T5783] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1856.641242][ T7472] loop8: detected capacity change from 0 to 8 [ 1856.709566][ T7472] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1856.811385][ T5783] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1856.811441][ T5783] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1856.811479][ T5783] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1856.811518][ T5783] usb 2-1: config 220 has no interface number 2 [ 1856.811582][ T5783] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1856.811637][ T5783] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1856.811675][ T5783] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1856.811713][ T5783] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1856.818922][ T5783] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1856.818984][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.819028][ T5783] usb 2-1: Product: syz [ 1856.819061][ T5783] usb 2-1: Manufacturer: syz [ 1856.819093][ T5783] usb 2-1: SerialNumber: syz [ 1857.029488][ T7483] loop9: detected capacity change from 0 to 4096 [ 1857.031510][ T7483] EXT4-fs: inline encryption not supported [ 1857.041731][ T7483] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1857.041769][ T7483] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1857.047934][ T7483] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 1857.048054][ T7483] System zones: 0-5 [ 1857.057129][ T7483] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1857.081102][ T5783] uvcvideo 2-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1857.081191][ T5783] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1857.081245][ T5783] uvcvideo 2-1:220.0: No valid video chain found. [ 1857.081946][ T5783] usb 2-1: selecting invalid altsetting 0 [ 1857.096502][ T5783] usb 2-1: selecting invalid altsetting 0 [ 1857.096554][ T5783] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1857.099958][ T5783] usb 2-1: USB disconnect, device number 114 [ 1857.145363][ T5640] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1857.232222][ T3434] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1857.314719][ T5640] usb 6-1: Using ep0 maxpacket: 16 [ 1857.323890][ T5640] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1857.323953][ T5640] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1857.324000][ T5640] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1857.324076][ T5640] usb 6-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 1857.324135][ T5640] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.330951][ T5640] usb 6-1: config 0 descriptor?? [ 1857.460848][ T7513] loop8: detected capacity change from 0 to 2048 [ 1857.479707][ T7513] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1857.480149][ T7513] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1857.481888][ T7513] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1857.545126][ T7470] loop7: detected capacity change from 0 to 32768 [ 1857.781487][ T5640] hid (null): unknown global tag 0xd [ 1857.789488][ T5640] hid_parser_main: 34 callbacks suppressed [ 1857.789524][ T5640] hid-generic 0003:045E:9994.0044: unknown main item tag 0x2 [ 1857.789639][ T5640] hid-generic 0003:045E:9994.0044: unknown main item tag 0x7 [ 1857.789682][ T5640] hid-generic 0003:045E:9994.0044: unknown global tag 0xd [ 1857.789719][ T5640] hid-generic 0003:045E:9994.0044: item 0 4 1 13 parsing failed [ 1857.799501][ T5640] hid-generic 0003:045E:9994.0044: probe with driver hid-generic failed with error -22