last executing test programs: 4.943763091s ago: executing program 2 (id=550): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x47c, &(0x7f0000000a80)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f00000018c0)={0x2020}, 0x2108) 4.479339049s ago: executing program 2 (id=554): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 4.240163082s ago: executing program 2 (id=557): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0xc051) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 4.105752724s ago: executing program 2 (id=558): bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020600000524060001052400a2000d240f01f9ffff5efdff08000006241a080008090581030004000000090401"], 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) 3.372301366s ago: executing program 3 (id=566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 3.10152696s ago: executing program 3 (id=569): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2.864262124s ago: executing program 3 (id=573): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x82881, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCSETSW2(r0, 0x5434, 0x0) 2.682597007s ago: executing program 3 (id=574): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073597a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b80200001800a00010071756f746100000010"], 0x110}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d61637365630000140002800500090000000000050008"], 0x4c}}, 0x0) 2.644867787s ago: executing program 0 (id=575): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) 2.437870591s ago: executing program 3 (id=578): syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x220, &(0x7f0000000180)="$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") r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f00000004c0), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SEND(r0, 0xd0009411, &(0x7f0000000380)={{r0}, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 2.423876121s ago: executing program 2 (id=579): chdir(&(0x7f0000000540)='./cgroup\x00') mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') 2.363278892s ago: executing program 0 (id=580): syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000340)='./file1\x00', 0x1804810, &(0x7f0000000200)=ANY=[], 0xfe, 0x66e, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x6880, 0x0) 2.082368347s ago: executing program 2 (id=581): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffddf, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES16=r0, @ANYBLOB="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"]) syz_usb_control_io(r0, 0x0, 0x0) 2.044432757s ago: executing program 0 (id=582): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000180)='./file3\x00', 0x8c0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES8], 0x1, 0x443b, &(0x7f00000088c0)="$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") creat(&(0x7f0000000380)='./file0\x00', 0x89) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) 1.132410072s ago: executing program 3 (id=583): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x3a, 0x2, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 761.992078ms ago: executing program 1 (id=584): mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f905, 0xffffbfff, '\x00', @string=&(0x7f0000000180)=0xa3}}) 557.937891ms ago: executing program 0 (id=585): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0xa, 0x4) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1, 0x0) 557.494341ms ago: executing program 1 (id=586): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ppoll(&(0x7f00000000c0)=[{r0, 0xb}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0xf0f046, 0x7fff}) 448.512133ms ago: executing program 1 (id=587): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {}, 0x49, [0x0, 0x3, 0x403, 0x100000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1000000a, 0x0, 0x0, 0x80000007, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffffffff], [0x0, 0xa82, 0x0, 0x0, 0x2, 0x733, 0x1, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x9, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x28220be6, 0x401, 0x0, 0x2, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x2, 0x89, 0x0, 0x800, 0x0, 0xfffffffb, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80008003, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xd, 0x0, 0x0, 0x6492, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xd2a, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0xfffffffc, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x3ff, 0x200000, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000008, 0x4, 0x1, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xffffffffffffffff) 288.081525ms ago: executing program 1 (id=588): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000000), &(0x7f00000010c0)=0x4) 69.850748ms ago: executing program 1 (id=589): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) 69.400048ms ago: executing program 0 (id=590): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002180)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="0700000000000014"], 0x58) 16.281559ms ago: executing program 1 (id=591): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'mpc624\x00', [0x4f27, 0x5, 0x2, 0x3, 0x5, 0xcc5, 0xf, 0x7, 0xa, 0xe8aa, 0x2, 0x1, 0xfffffffd, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x99, 0xcaa7, 0x0, 0x20001e58, 0x7, 0xe6b, 0x3c, 0x8, 0x2, 0x1, 0xfffffff8]}) 0s ago: executing program 0 (id=592): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804, &(0x7f0000000100)={[{@numtail}, {@shortname_lower}, {@utf8no}, {@utf8no}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@uni_xlateno}, {@shortname_win95}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@fat=@uid}, {@fat=@sys_immutable}, {@shortname_lower}, {@uni_xlate}, {@utf8}, {@uni_xlate}]}, 0xb, 0x27b, &(0x7f00000003c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. [ 68.290745][ T5777] cgroup: Unknown subsys name 'net' [ 68.462984][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.109138][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.278748][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.285529][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.014351][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.023111][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.034092][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.042440][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.050382][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.058220][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.178779][ T5103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.187199][ T5103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.194961][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.203408][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.211743][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.219594][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.270388][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.278871][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.286967][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.296885][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.307937][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.316736][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.337893][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.347300][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.366280][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.371197][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.374802][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.394066][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.539528][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 72.737287][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.745355][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.752645][ T5787] bridge_slave_0: entered allmulticast mode [ 72.760433][ T5787] bridge_slave_0: entered promiscuous mode [ 72.776365][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.783507][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.791204][ T5787] bridge_slave_1: entered allmulticast mode [ 72.798438][ T5787] bridge_slave_1: entered promiscuous mode [ 72.917862][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.934657][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.020730][ T5787] team0: Port device team_slave_0 added [ 73.032281][ T5787] team0: Port device team_slave_1 added [ 73.082952][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 73.121994][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.129095][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.155239][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.173613][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.180695][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.206777][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.230356][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 73.312984][ T5787] hsr_slave_0: entered promiscuous mode [ 73.319583][ T5787] hsr_slave_1: entered promiscuous mode [ 73.383203][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 73.425055][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.432410][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.440640][ T5792] bridge_slave_0: entered allmulticast mode [ 73.447921][ T5792] bridge_slave_0: entered promiscuous mode [ 73.501769][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.509254][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.518545][ T5792] bridge_slave_1: entered allmulticast mode [ 73.525910][ T5792] bridge_slave_1: entered promiscuous mode [ 73.550550][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.557788][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.565359][ T5799] bridge_slave_0: entered allmulticast mode [ 73.572343][ T5799] bridge_slave_0: entered promiscuous mode [ 73.635782][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.642916][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.650654][ T5799] bridge_slave_1: entered allmulticast mode [ 73.658242][ T5799] bridge_slave_1: entered promiscuous mode [ 73.700363][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.730651][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.754933][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.787597][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.863579][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.870965][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.878722][ T5796] bridge_slave_0: entered allmulticast mode [ 73.886150][ T5796] bridge_slave_0: entered promiscuous mode [ 73.898927][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.906419][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.913954][ T5796] bridge_slave_1: entered allmulticast mode [ 73.920974][ T5796] bridge_slave_1: entered promiscuous mode [ 73.931524][ T5792] team0: Port device team_slave_0 added [ 73.940697][ T5792] team0: Port device team_slave_1 added [ 73.949975][ T5799] team0: Port device team_slave_0 added [ 73.959102][ T5799] team0: Port device team_slave_1 added [ 74.027021][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.034122][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.061268][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.074218][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.081298][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.107804][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.146158][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.153244][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.181164][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.181302][ T5790] Bluetooth: hci0: command tx timeout [ 74.206494][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.219144][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.234197][ T5790] Bluetooth: hci1: command tx timeout [ 74.248914][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.256481][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.282840][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.371185][ T5796] team0: Port device team_slave_0 added [ 74.380252][ T5796] team0: Port device team_slave_1 added [ 74.404509][ T5799] hsr_slave_0: entered promiscuous mode [ 74.410906][ T5799] hsr_slave_1: entered promiscuous mode [ 74.417370][ T5799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.425338][ T5799] Cannot create hsr debugfs directory [ 74.456097][ T5792] hsr_slave_0: entered promiscuous mode [ 74.462484][ T5792] hsr_slave_1: entered promiscuous mode [ 74.468858][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.476909][ T5792] Cannot create hsr debugfs directory [ 74.484736][ T5790] Bluetooth: hci3: command tx timeout [ 74.485876][ T50] Bluetooth: hci2: command tx timeout [ 74.539479][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.558572][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.565681][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.591770][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.609211][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.616496][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.642531][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.657678][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.731447][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.775541][ T5796] hsr_slave_0: entered promiscuous mode [ 74.783070][ T5796] hsr_slave_1: entered promiscuous mode [ 74.789890][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.797771][ T5796] Cannot create hsr debugfs directory [ 74.803405][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.143090][ T5792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.156694][ T5792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.171996][ T5792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.202306][ T5792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.274020][ T5799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.287919][ T5799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.298597][ T5799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.310775][ T5799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.367291][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.422226][ T5796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.434544][ T5796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.446499][ T5796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.464793][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.475772][ T5796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.521951][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.529544][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.547242][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.554477][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.769076][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.804381][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.842771][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.864791][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.871967][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.901519][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.936512][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.943775][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.958946][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.966185][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.985429][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.992711][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.035802][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.093829][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.120947][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.128154][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.159514][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.166736][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.182385][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.222409][ T5792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.244148][ T50] Bluetooth: hci0: command tx timeout [ 76.314211][ T50] Bluetooth: hci1: command tx timeout [ 76.445499][ T5787] veth0_vlan: entered promiscuous mode [ 76.481170][ T5787] veth1_vlan: entered promiscuous mode [ 76.555773][ T50] Bluetooth: hci3: command tx timeout [ 76.555792][ T5790] Bluetooth: hci2: command tx timeout [ 76.587254][ T5787] veth0_macvtap: entered promiscuous mode [ 76.626313][ T5787] veth1_macvtap: entered promiscuous mode [ 76.672431][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.688537][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.756944][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.777768][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.787612][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.808152][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.865351][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.886579][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.014816][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.065914][ T5799] veth0_vlan: entered promiscuous mode [ 77.088198][ T5799] veth1_vlan: entered promiscuous mode [ 77.098533][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.100224][ T5792] veth0_vlan: entered promiscuous mode [ 77.122874][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.178066][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.191756][ T5792] veth1_vlan: entered promiscuous mode [ 77.195313][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.309337][ T5799] veth0_macvtap: entered promiscuous mode [ 77.321627][ T5796] veth0_vlan: entered promiscuous mode [ 77.341098][ T5792] veth0_macvtap: entered promiscuous mode [ 77.367381][ T5799] veth1_macvtap: entered promiscuous mode [ 77.392525][ T5792] veth1_macvtap: entered promiscuous mode [ 77.470903][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.483821][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.497345][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.508134][ T5796] veth1_vlan: entered promiscuous mode [ 77.532367][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.547738][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.560046][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.571233][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.583958][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.606549][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.617633][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.630662][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.640075][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.652686][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.662975][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.674713][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.686090][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.718366][ T5799] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.728723][ T5799] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.739356][ T5799] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.749958][ T5840] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.758089][ T5799] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.777671][ T5792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.786678][ T5792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.797094][ T5792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.806479][ T5792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.919639][ T5796] veth0_macvtap: entered promiscuous mode [ 77.950009][ T5796] veth1_macvtap: entered promiscuous mode [ 77.956723][ T5840] usb 1-1: Using ep0 maxpacket: 8 [ 77.972823][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.987761][ T5840] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 77.999652][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.039535][ T5840] usb 1-1: config 0 descriptor?? [ 78.076954][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.094972][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.105010][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.115873][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.126243][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.137441][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.149452][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.163070][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.180970][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.218169][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.218821][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.238855][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.242967][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.257401][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.269085][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.280305][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.291196][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.304147][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.331721][ T50] Bluetooth: hci0: command tx timeout [ 78.352555][ T5796] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.366241][ T5796] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.375072][ T5796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.383872][ T5796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.394593][ T50] Bluetooth: hci1: command tx timeout [ 78.439190][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.448510][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.517979][ T5840] waltop 0003:172F:0037.0001: hidraw0: USB HID v0.00 Device [HID 172f:0037] on usb-dummy_hcd.0-1/input0 [ 78.546794][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.556855][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.637450][ T50] Bluetooth: hci3: command tx timeout [ 78.637460][ T5790] Bluetooth: hci2: command tx timeout [ 78.796455][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.807710][ T5874] usb 1-1: USB disconnect, device number 2 [ 78.846245][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.941955][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.959829][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.409286][ T5890] netlink: 'syz.1.8': attribute type 5 has an invalid length. [ 79.803805][ T5907] capability: warning: `syz.2.16' uses deprecated v2 capabilities in a way that may be insecure [ 79.843477][ T5907] 9pnet_rdma: rdma_create_trans (5907): problem binding to privport: 13 [ 80.078154][ T5874] IPVS: starting estimator thread 0... [ 80.173854][ T5915] IPVS: using max 20 ests per chain, 48000 per kthread [ 80.390237][ T5923] syz.0.23[5923]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 80.405287][ T50] Bluetooth: hci0: command tx timeout [ 80.473821][ T50] Bluetooth: hci1: command tx timeout [ 80.564707][ T5874] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.714427][ T50] Bluetooth: hci3: command tx timeout [ 80.714763][ T5790] Bluetooth: hci2: command tx timeout [ 80.792088][ T5874] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.843115][ T5874] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 80.883749][ T5874] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 80.892923][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.958510][ T5874] usb 4-1: config 0 descriptor?? [ 81.234422][ T27] audit: type=1326 audit(1753199877.107:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5944 comm="syz.0.32" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbaff98e9a9 code=0x0 [ 81.620091][ T5874] Bluetooth: Can't get version to change to load ram patch err [ 81.636246][ T5874] Bluetooth: Loading sysconfig file failed [ 81.642983][ T5874] ath3k: probe of 4-1:0.0 failed with error -71 [ 81.682887][ T5874] usb 4-1: USB disconnect, device number 2 [ 82.177005][ T5950] loop2: detected capacity change from 0 to 32768 [ 82.242830][ T5950] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.34 (5950) [ 82.357971][ T5950] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 82.408640][ T5950] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 82.452081][ T5950] BTRFS info (device loop2): turning off barriers [ 82.483803][ T5950] BTRFS info (device loop2): setting nodatasum [ 82.490324][ T5950] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 82.543768][ T5950] BTRFS info (device loop2): use zstd compression, level 3 [ 82.573738][ T5950] BTRFS info (device loop2): using free space tree [ 83.164175][ T5982] loop0: detected capacity change from 0 to 128 [ 83.274744][ T5982] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.314012][ T5982] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.389517][ T5796] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 83.527945][ T5787] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.613154][ T5989] loop3: detected capacity change from 0 to 32768 [ 84.647495][ T5989] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.46 (5989) [ 84.720202][ T5989] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.744039][ T5989] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 84.763136][ T5989] BTRFS info (device loop3): setting nodatacow, compression disabled [ 84.782025][ T5989] BTRFS info (device loop3): max_inline at 0 [ 84.795780][ T5989] BTRFS info (device loop3): enabling disk space caching [ 84.808973][ T6002] loop2: detected capacity change from 0 to 4096 [ 84.827581][ T5989] BTRFS info (device loop3): use zlib compression, level 3 [ 84.858849][ T5989] BTRFS info (device loop3): turning off barriers [ 84.873871][ T5989] BTRFS info (device loop3): turning on flush-on-commit [ 84.891905][ T5989] BTRFS info (device loop3): disabling tree log [ 84.911700][ T5989] BTRFS info (device loop3): force clearing of disk cache [ 84.934324][ T5989] BTRFS info (device loop3): max_inline at 86 [ 84.950790][ T5989] BTRFS info (device loop3): disk space caching is enabled [ 85.174810][ T5989] BTRFS info (device loop3): enabling ssd optimizations [ 85.182117][ T5989] BTRFS info (device loop3): auto enabling async discard [ 85.192316][ T5989] BTRFS info (device loop3): rebuilding free space tree [ 85.276739][ T5989] BTRFS info (device loop3): disabling free space tree [ 85.304338][ T5989] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 85.344722][ T5989] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 85.374750][ T6002] ntfs3: loop2: ino=9, attr_set_size [ 85.416432][ T6002] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 85.564356][ T27] audit: type=1800 audit(1753199881.437:3): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.46" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 85.689804][ T5799] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.640660][ T9] cfg80211: failed to load regulatory.db [ 87.100870][ T6062] netlink: 'syz.0.71': attribute type 11 has an invalid length. [ 87.245260][ T6040] loop3: detected capacity change from 0 to 32768 [ 87.334635][ T6040] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 87.355835][ T6048] loop1: detected capacity change from 0 to 32768 [ 87.383971][ T6048] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.64 (6048) [ 87.423007][ T6040] XFS (loop3): Ending clean mount [ 87.431337][ T6048] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 87.468200][ T6048] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 87.512288][ T6048] BTRFS info (device loop1): setting nodatacow, compression disabled [ 87.539582][ T6077] loop2: detected capacity change from 0 to 128 [ 87.554553][ T6048] BTRFS info (device loop1): max_inline at 0 [ 87.560633][ T6048] BTRFS info (device loop1): enabling disk space caching [ 87.653768][ T6048] BTRFS info (device loop1): turning off barriers [ 87.667780][ T6048] BTRFS info (device loop1): turning on flush-on-commit [ 87.725379][ T6048] BTRFS info (device loop1): doing ref verification [ 87.743529][ T6048] BTRFS info (device loop1): force clearing of disk cache [ 87.779905][ T6048] BTRFS info (device loop1): enabling ssd optimizations [ 87.813899][ T6048] BTRFS info (device loop1): max_inline at 4096 [ 87.820238][ T6048] BTRFS info (device loop1): disk space caching is enabled [ 87.830936][ T5799] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 87.961771][ T6048] BTRFS info (device loop1): auto enabling async discard [ 88.025144][ T6048] BTRFS info (device loop1): rebuilding free space tree [ 88.085060][ T6048] BTRFS info (device loop1): disabling free space tree [ 88.113786][ T6048] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 88.123507][ T6048] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 88.203015][ T6099] loop2: detected capacity change from 0 to 64 [ 88.646685][ T5792] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.674999][ T6079] loop0: detected capacity change from 0 to 32768 [ 88.682503][ T6079] XFS: noikeep mount option is deprecated. [ 88.764010][ T6079] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 89.068008][ T6079] XFS (loop0): Ending clean mount [ 89.184331][ T6125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.80'. [ 89.428167][ T5787] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 89.543806][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.803925][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 89.824020][ T9] usb 4-1: config 0 has an invalid interface number: 33 but max is 1 [ 89.853599][ T9] usb 4-1: config 0 has no interface number 1 [ 89.874580][ T9] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 89.900802][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 89.924013][ T6136] loop2: detected capacity change from 0 to 128 [ 89.941862][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 89.957094][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.971324][ T9] usb 4-1: Product: syz [ 89.980566][ T9] usb 4-1: Manufacturer: syz [ 89.987158][ T9] usb 4-1: SerialNumber: syz [ 89.999792][ T6136] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 90.012745][ T9] usb 4-1: config 0 descriptor?? [ 90.026145][ T9] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 90.049760][ T6136] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.250585][ T2316] pvrusb2: Invalid read control endpoint [ 90.266779][ T9] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 90.289323][ T2316] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 90.313176][ T6142] loop0: detected capacity change from 0 to 8192 [ 90.320039][ T2316] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 90.368345][ T6142] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.440914][ T6127] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 90.733500][ T9] usb 4-1: USB disconnect, device number 3 [ 90.969994][ T6160] netlink: 'syz.1.101': attribute type 1 has an invalid length. [ 90.978526][ T6160] netlink: 144 bytes leftover after parsing attributes in process `syz.1.101'. [ 90.997284][ T6160] netlink: 'syz.1.101': attribute type 1 has an invalid length. [ 91.005229][ T6160] netlink: 76 bytes leftover after parsing attributes in process `syz.1.101'. [ 91.079519][ T6162] loop0: detected capacity change from 0 to 4096 [ 91.127574][ T6162] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 91.142644][ T6162] ntfs3: loop0: It is recommened to use chkdsk. [ 91.313783][ T6162] ntfs3: loop0: failed to convert "076c" to cp857 [ 91.344590][ T6162] ntfs3: loop0: ino=5, "/" directory corrupted [ 91.652290][ T27] audit: type=1326 audit(1753199887.527:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaff98e9a9 code=0x7ffc0000 [ 91.713532][ T27] audit: type=1326 audit(1753199887.527:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaff98e9a9 code=0x7ffc0000 [ 91.772838][ T27] audit: type=1326 audit(1753199887.557:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fbaff98e9a9 code=0x7ffc0000 [ 91.830069][ T27] audit: type=1326 audit(1753199887.557:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaff98e9a9 code=0x7ffc0000 [ 91.894388][ T27] audit: type=1326 audit(1753199887.557:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaff98e9a9 code=0x7ffc0000 [ 92.191617][ T6193] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 92.212416][ T6190] tipc: Started in network mode [ 92.218178][ T6190] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 92.226706][ T6190] tipc: Enabled bearer , priority 10 [ 92.350137][ T6197] loop0: detected capacity change from 0 to 512 [ 92.461185][ T6197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.502261][ T6197] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.611587][ T6206] loop2: detected capacity change from 0 to 128 [ 92.628677][ T6206] EXT4-fs: Ignoring removed nobh option [ 92.697852][ T6206] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.750213][ T6210] netlink: 'syz.3.125': attribute type 1 has an invalid length. [ 92.758983][ T6211] netlink: 'syz.1.124': attribute type 6 has an invalid length. [ 92.775538][ T6206] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.784947][ T6210] netlink: 244 bytes leftover after parsing attributes in process `syz.3.125'. [ 92.884095][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.024320][ T5796] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.291854][ T6227] loop1: detected capacity change from 0 to 256 [ 93.332801][ T6227] exfat: Deprecated parameter 'utf8' [ 93.358630][ T5825] tipc: Node number set to 15444650 [ 93.394744][ T6227] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 93.555254][ T6233] mkiss: ax0: crc mode is auto. [ 94.159683][ T6255] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 94.614589][ T6251] loop3: detected capacity change from 0 to 32768 [ 94.622102][ T6251] ======================================================= [ 94.622102][ T6251] WARNING: The mand mount option has been deprecated and [ 94.622102][ T6251] and is ignored by this kernel. Remove the mand [ 94.622102][ T6251] option from the mount to silence this warning. [ 94.622102][ T6251] ======================================================= [ 94.708030][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.150'. [ 94.736277][ T6251] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 95.040066][ T6251] XFS (loop3): Ending clean mount [ 95.274221][ T5799] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 95.648622][ T6276] loop0: detected capacity change from 0 to 32768 [ 95.727384][ T6276] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 96.002283][ T6276] XFS (loop0): Ending clean mount [ 96.047247][ T6276] XFS (loop0): Quotacheck needed: Please wait. [ 96.122469][ T6304] loop3: detected capacity change from 0 to 512 [ 96.189964][ T6276] XFS (loop0): Quotacheck: Done. [ 96.550387][ T5787] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 96.560787][ T5790] Bluetooth: hci0: command tx timeout [ 96.613307][ T6311] netlink: 'syz.3.165': attribute type 2 has an invalid length. [ 97.417858][ T5825] kernel write not supported for file /input/event2 (pid: 5825 comm: kworker/1:3) [ 97.756124][ T6317] loop3: detected capacity change from 0 to 32768 [ 98.009430][ T5825] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.078116][ T6340] loop3: detected capacity change from 0 to 256 [ 98.123512][ T6340] FAT-fs (loop3): Directory bread(block 64) failed [ 98.133450][ T6340] FAT-fs (loop3): Directory bread(block 65) failed [ 98.145458][ T6340] FAT-fs (loop3): Directory bread(block 66) failed [ 98.152167][ T6340] FAT-fs (loop3): Directory bread(block 67) failed [ 98.163476][ T6340] FAT-fs (loop3): Directory bread(block 68) failed [ 98.173163][ T6340] FAT-fs (loop3): Directory bread(block 69) failed [ 98.183798][ T6340] FAT-fs (loop3): Directory bread(block 70) failed [ 98.190500][ T6340] FAT-fs (loop3): Directory bread(block 71) failed [ 98.202425][ T6340] FAT-fs (loop3): Directory bread(block 72) failed [ 98.212364][ T5825] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.227703][ T6340] FAT-fs (loop3): Directory bread(block 73) failed [ 98.236002][ T5825] usb 3-1: config 0 interface 0 has no altsetting 0 [ 98.243718][ T5825] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 98.263787][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.293241][ T5825] usb 3-1: config 0 descriptor?? [ 98.514728][ T6313] loop1: detected capacity change from 0 to 65536 [ 98.584505][ T5158] udevd[5158]: worker [5872] terminated by signal 33 (Unknown signal 33) [ 98.602112][ T6313] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 98.611073][ T5158] udevd[5158]: worker [5872] failed while handling '/devices/virtual/block/loop1' [ 98.631230][ T6349] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.180'. [ 98.688410][ T6313] XFS (loop1): Ending clean mount [ 98.807629][ T5825] magicmouse 0003:05AC:0269.0002: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.2-1/input0 [ 98.877817][ T6354] warning: `syz.0.181' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.945075][ T5792] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 99.019413][ T5797] usb 3-1: USB disconnect, device number 2 [ 99.369679][ T6365] loop3: detected capacity change from 0 to 1024 [ 99.823177][ T6374] loop2: detected capacity change from 0 to 256 [ 99.849948][ T6374] exfat: Deprecated parameter 'utf8' [ 99.872874][ T6374] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x0b800a9a, utbl_chksum : 0xe619d30d) [ 99.924801][ T6376] loop3: detected capacity change from 0 to 64 [ 100.739606][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.772885][ T6372] loop1: detected capacity change from 0 to 32768 [ 100.790923][ T6372] XFS: ikeep mount option is deprecated. [ 100.837584][ T6372] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.910183][ T6391] syz.3.198 (6391) used greatest stack depth: 20648 bytes left [ 101.147376][ T6372] XFS (loop1): Ending clean mount [ 101.299306][ T6405] loop3: detected capacity change from 0 to 2048 [ 101.335500][ T6407] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 101.350946][ T6405] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 101.379742][ T5792] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.394111][ T6405] NILFS (loop3): mounting unchecked fs [ 101.414109][ T6407] CUSE: unknown device info "3ܟ,̘" [ 101.416077][ T5788] udevd[5788]: incorrect nilfs2 checksum on /dev/loop3 [ 101.420033][ T6407] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 101.420033][ T6407] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 101.493797][ T6407] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 101.508378][ T6405] NILFS (loop3): recovery complete [ 101.546934][ T6407] CUSE: DEVNAME unspecified [ 101.585424][ T6408] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.720954][ T6389] loop2: detected capacity change from 0 to 32768 [ 101.764192][ T27] audit: type=1800 audit(1753199897.627:9): pid=6405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.201" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 101.827289][ T6389] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 102.077689][ T6389] XFS (loop2): Ending clean mount [ 102.114796][ T6389] XFS (loop2): Quotacheck needed: Please wait. [ 102.188437][ T6389] XFS (loop2): Quotacheck: Done. [ 102.303941][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.400958][ T5796] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 102.545474][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.567132][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.593890][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 102.626624][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.666738][ T23] usb 1-1: config 0 descriptor?? [ 103.056244][ T6444] loop3: detected capacity change from 0 to 256 [ 103.119658][ T23] logitech 0003:046D:C623.0003: hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.0-1/input0 [ 103.311545][ T6444] FAT-fs (loop3): Directory bread(block 64) failed [ 103.373799][ T6444] FAT-fs (loop3): Directory bread(block 65) failed [ 103.380528][ T6444] FAT-fs (loop3): Directory bread(block 66) failed [ 103.465273][ T23] usb 1-1: USB disconnect, device number 3 [ 103.484258][ T6444] FAT-fs (loop3): Directory bread(block 67) failed [ 103.490987][ T6444] FAT-fs (loop3): Directory bread(block 68) failed [ 103.603876][ T6444] FAT-fs (loop3): Directory bread(block 69) failed [ 103.610668][ T6444] FAT-fs (loop3): Directory bread(block 70) failed [ 103.701118][ T6444] FAT-fs (loop3): Directory bread(block 71) failed [ 103.739660][ T6444] FAT-fs (loop3): Directory bread(block 72) failed [ 103.791208][ T6444] FAT-fs (loop3): Directory bread(block 73) failed [ 104.043649][ C0] sched: RT throttling activated [ 104.127763][ T6428] loop1: detected capacity change from 0 to 32768 [ 104.303137][ T6442] loop2: detected capacity change from 0 to 131072 [ 104.319033][ T6442] F2FS-fs (loop2): build fault injection attr: rate: 7, type: 0x7ffff [ 104.327677][ T6442] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x40004 [ 104.335984][ T6442] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name [ 104.347635][ T6428] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 104.364924][ T6442] F2FS-fs (loop2): invalid crc value [ 104.386555][ T6442] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x156/0x580 [ 104.398649][ T6442] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 104.410996][ T6442] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 104.424530][ T6442] F2FS-fs (loop2): Found nat_bits in checkpoint [ 104.461961][ T6442] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 104.473749][ T6442] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920 [ 104.498416][ T6462] lo: entered promiscuous mode [ 104.520162][ T6442] F2FS-fs (loop2): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 104.547639][ T6442] F2FS-fs (loop2): Failed to read root inode [ 104.559541][ T6457] lo: left promiscuous mode [ 104.599361][ T6428] XFS (loop1): Ending clean mount [ 104.707812][ T6428] XFS (loop1): Quotacheck needed: Please wait. [ 104.883789][ T6428] XFS (loop1): Quotacheck: Done. [ 105.186250][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'. [ 105.218814][ T5792] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 105.991485][ T6498] loop0: detected capacity change from 0 to 256 [ 106.166001][ T6498] FAT-fs (loop0): Directory bread(block 64) failed [ 106.196354][ T6498] FAT-fs (loop0): Directory bread(block 65) failed [ 106.203085][ T6498] FAT-fs (loop0): Directory bread(block 66) failed [ 106.256355][ T6498] FAT-fs (loop0): Directory bread(block 67) failed [ 106.263093][ T6498] FAT-fs (loop0): Directory bread(block 68) failed [ 106.300423][ T6498] FAT-fs (loop0): Directory bread(block 69) failed [ 106.340303][ T6506] loop2: detected capacity change from 0 to 1024 [ 106.350376][ T6498] FAT-fs (loop0): Directory bread(block 70) failed [ 106.401539][ T6498] FAT-fs (loop0): Directory bread(block 71) failed [ 106.430058][ T6498] FAT-fs (loop0): Directory bread(block 72) failed [ 106.459273][ T6498] FAT-fs (loop0): Directory bread(block 73) failed [ 106.566516][ T6506] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 106.709592][ T58] hfsplus: b-tree write err: -5, ino 4 [ 106.938774][ T6519] process 'syz.1.233' launched '/dev/fd/3' with NULL argv: empty string added [ 107.070654][ T6523] loop0: detected capacity change from 0 to 256 [ 107.090775][ T6523] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 107.276132][ T6523] exFAT-fs (loop0): error, invalid size(size(61440) > aligned(9223372036854777344) [ 107.276132][ T6523] [ 107.324183][ T6523] exFAT-fs (loop0): Filesystem has been set read-only [ 107.331165][ T6529] loop3: detected capacity change from 0 to 64 [ 107.460652][ T6529] hfs: bad catalog entry type 0 [ 107.619176][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'. [ 107.952491][ T27] audit: type=1326 audit(1753199903.827:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b918e9a9 code=0x7ffc0000 [ 108.054647][ T27] audit: type=1326 audit(1753199903.857:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b918e9a9 code=0x7ffc0000 [ 108.121514][ T27] audit: type=1326 audit(1753199903.857:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fd2b918e9a9 code=0x7ffc0000 [ 108.203849][ T27] audit: type=1326 audit(1753199903.857:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b918e9a9 code=0x7ffc0000 [ 108.288610][ T27] audit: type=1326 audit(1753199903.857:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b918e9a9 code=0x7ffc0000 [ 108.695113][ T6575] netlink: 'syz.0.258': attribute type 1 has an invalid length. [ 108.935077][ T6579] loop3: detected capacity change from 0 to 4096 [ 108.954804][ T6579] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 109.036025][ T6579] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 109.207024][ T6584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.262'. [ 109.432815][ T6588] loop1: detected capacity change from 0 to 128 [ 109.478629][ T6572] loop2: detected capacity change from 0 to 32768 [ 109.495344][ T6588] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 109.569193][ T6588] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.611587][ T6572] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.834155][ T6572] XFS (loop2): Ending clean mount [ 109.863416][ T6572] XFS (loop2): Quotacheck needed: Please wait. [ 109.959265][ T6572] XFS (loop2): Quotacheck: Done. [ 109.968065][ T5792] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.213414][ T5796] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 110.381539][ T6586] loop3: detected capacity change from 0 to 40427 [ 110.391088][ T6615] loop0: detected capacity change from 0 to 64 [ 110.421097][ T6586] F2FS-fs (loop3): invalid crc value [ 110.443518][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 110.487995][ T6586] F2FS-fs (loop3): Found nat_bits in checkpoint [ 110.496010][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 110.509927][ T6615] syz.0.273: attempt to access beyond end of device [ 110.509927][ T6615] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 110.533232][ T6617] netlink: 'syz.1.274': attribute type 14 has an invalid length. [ 110.543235][ T6617] netlink: 'syz.1.274': attribute type 13 has an invalid length. [ 110.551867][ T6615] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 110.578256][ T6615] syz.0.273: attempt to access beyond end of device [ 110.578256][ T6615] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 110.628152][ T6615] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 110.705779][ T6586] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 110.951054][ T6624] netlink: 'syz.0.276': attribute type 32 has an invalid length. [ 110.964186][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.276'. [ 111.488578][ T6635] loop1: detected capacity change from 0 to 4096 [ 111.523884][ T6635] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 111.760830][ T6635] IPv6: addrconf: prefix option has invalid lifetime [ 111.796335][ T6635] IPv6: addrconf: prefix option has invalid lifetime [ 112.060993][ T6652] loop3: detected capacity change from 0 to 128 [ 112.599054][ T6669] loop2: detected capacity change from 0 to 512 [ 112.619029][ T6669] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 112.730475][ T6669] EXT4-fs (loop2): 1 orphan inode deleted [ 112.773306][ T6669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.792187][ T3468] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 112.794037][ T5797] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.826191][ T3468] EXT4-fs error (device loop2): ext4_release_dquot:6974: comm kworker/u4:10: Failed to release dquot type 1 [ 112.839635][ T6669] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.036262][ T5797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.040601][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 113.067172][ T5797] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 113.108106][ T5797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.119701][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.155134][ T5797] usb 1-1: config 0 descriptor?? [ 113.531825][ T6694] loop3: detected capacity change from 0 to 256 [ 113.644338][ T5797] elecom 0003:056E:00FF.0004: hidraw0: USB HID v0.00 Device [HID 056e:00ff] on usb-dummy_hcd.0-1/input0 [ 113.670169][ T6694] FAT-fs (loop3): Directory bread(block 64) failed [ 113.717211][ T6694] FAT-fs (loop3): Directory bread(block 65) failed [ 113.734692][ T6694] FAT-fs (loop3): Directory bread(block 66) failed [ 113.753871][ T6694] FAT-fs (loop3): Directory bread(block 67) failed [ 113.760598][ T6694] FAT-fs (loop3): Directory bread(block 68) failed [ 113.784154][ T6694] FAT-fs (loop3): Directory bread(block 69) failed [ 113.796253][ T6694] FAT-fs (loop3): Directory bread(block 70) failed [ 113.802858][ T6694] FAT-fs (loop3): Directory bread(block 71) failed [ 113.834710][ T6694] FAT-fs (loop3): Directory bread(block 72) failed [ 113.841345][ T6694] FAT-fs (loop3): Directory bread(block 73) failed [ 113.893519][ T8] usb 1-1: USB disconnect, device number 4 [ 113.938707][ T6697] fido_id[6697]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056E:00FF.0004/report_descriptor': No such file or directory [ 114.183279][ T6707] loop3: detected capacity change from 0 to 64 [ 114.238967][ T6707] syz.3.311: attempt to access beyond end of device [ 114.238967][ T6707] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 114.273843][ T6707] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 114.643086][ T6715] loop0: detected capacity change from 0 to 1024 [ 114.650609][ T6714] loop2: detected capacity change from 0 to 1024 [ 114.658718][ T6715] hfsplus: unable to parse mount options [ 114.955983][ T1090] hfsplus: b-tree write err: -5, ino 8 [ 115.063393][ T6703] loop1: detected capacity change from 0 to 32768 [ 115.372918][ T5158] udevd[5158]: worker [5788] terminated by signal 33 (Unknown signal 33) [ 115.403814][ T5158] udevd[5158]: worker [5788] failed while handling '/devices/virtual/block/loop1' [ 115.651286][ T6717] loop3: detected capacity change from 0 to 32768 [ 116.270777][ T6751] loop0: detected capacity change from 0 to 64 [ 116.298092][ T6751] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 116.334068][ T5797] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.543770][ T5797] usb 3-1: Using ep0 maxpacket: 32 [ 116.567241][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.598981][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.619130][ T5797] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 116.641864][ T5797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.722840][ T5797] usb 3-1: config 0 descriptor?? [ 116.739894][ T6763] loop1: detected capacity change from 0 to 512 [ 116.743282][ T5797] hub 3-1:0.0: USB hub found [ 116.748432][ T6759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.336'. [ 116.782039][ T6763] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 116.830529][ T6763] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.337: bad orphan inode 67108875 [ 116.877107][ T6763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.969756][ T5797] hub 3-1:0.0: 1 port detected [ 117.041766][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.170724][ T5797] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 117.198461][ T5797] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 117.235877][ T5797] usbhid 3-1:0.0: can't add hid device: -71 [ 117.241968][ T5797] usbhid: probe of 3-1:0.0 failed with error -71 [ 117.316716][ T5797] usb 3-1: USB disconnect, device number 3 [ 117.764936][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.953736][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 117.967483][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.986129][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 117.998801][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.010768][ T23] usb 2-1: config 0 descriptor?? [ 118.163969][ T5874] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 118.293485][ T6795] loop0: detected capacity change from 0 to 128 [ 118.309535][ T6795] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 118.367000][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 118.383584][ T5874] usb 3-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 118.395996][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.416551][ T5874] usb 3-1: config 0 descriptor?? [ 118.668250][ T23] usb 2-1: USB disconnect, device number 2 [ 118.848475][ T6800] loop0: detected capacity change from 0 to 128 [ 118.866029][ T5874] thrustmaster 0003:044F:B65A.0006: hidraw0: USB HID v0.03 Device [HID 044f:b65a] on usb-dummy_hcd.2-1/input0 [ 118.890905][ T5874] thrustmaster 0003:044F:B65A.0006: no inputs found [ 118.910915][ T6800] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.936276][ T6800] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.026498][ T5787] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.075354][ T23] usb 3-1: USB disconnect, device number 4 [ 119.145383][ T6806] loop0: detected capacity change from 0 to 512 [ 119.163877][ T6806] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.183329][ T6806] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 119.199095][ T6806] EXT4-fs (loop0): 1 truncate cleaned up [ 119.209662][ T6806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.305110][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.471596][ T6811] loop0: detected capacity change from 0 to 4096 [ 119.495933][ T6811] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 119.801781][ T6820] genirq: Flags mismatch irq 4. 00000000 (pcl818) vs. 00000000 (ttyS0) [ 119.965042][ T6823] loop1: detected capacity change from 0 to 1024 [ 119.981562][ T6823] EXT4-fs: Ignoring removed orlov option [ 120.025727][ T6823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.277667][ T6822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.077965][ T6849] loop1: detected capacity change from 0 to 512 [ 121.229414][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.374'. [ 121.239294][ T6849] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.373: corrupted inode contents [ 121.240842][ T6854] netlink: 5 bytes leftover after parsing attributes in process `syz.3.374'. [ 121.321585][ T6849] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #16: comm syz.1.373: mark_inode_dirty error [ 121.366025][ T6849] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.373: corrupted inode contents [ 121.433941][ T6849] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.373: mark_inode_dirty error [ 121.465391][ T6859] loop3: detected capacity change from 0 to 1024 [ 121.505913][ T6849] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.373: corrupted inode contents [ 121.530918][ T6861] loop2: detected capacity change from 0 to 164 [ 121.549075][ T6849] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 121.588613][ T6849] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.373: corrupted inode contents [ 121.631177][ T6861] rock: directory entry would overflow storage [ 121.642365][ T6863] loop0: detected capacity change from 0 to 512 [ 121.650617][ T1101] hfsplus: b-tree write err: -5, ino 4 [ 121.651159][ T6861] rock: sig=0x66, size=4, remaining=3 [ 121.664963][ T6849] EXT4-fs error (device loop1): ext4_truncate:4288: inode #16: comm syz.1.373: mark_inode_dirty error [ 121.701596][ T6863] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.720313][ T6849] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 121.759745][ T6849] EXT4-fs (loop1): 1 truncate cleaned up [ 121.770986][ T6849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.775860][ T6861] rock: directory entry would overflow storage [ 121.785761][ T6849] ext4 filesystem being mounted at /75/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.808012][ T6863] EXT4-fs (loop0): 1 orphan inode deleted [ 121.814129][ T6863] EXT4-fs (loop0): 1 truncate cleaned up [ 121.821211][ T6863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.825783][ T1101] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 121.873742][ T6861] rock: sig=0x66, size=4, remaining=3 [ 121.877098][ T6867] loop3: detected capacity change from 0 to 1024 [ 121.919036][ T1101] EXT4-fs error (device loop1): ext4_release_dquot:6974: comm kworker/u4:7: Failed to release dquot type 1 [ 121.975216][ T27] audit: type=1800 audit(1753199917.847:15): pid=6849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.373" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 122.008294][ T6863] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 122.052743][ T6863] EXT4-fs (loop0): Remounting filesystem read-only [ 122.063204][ T6863] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 12, error -5) [ 122.208043][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.219000][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.383864][ T6873] loop0: detected capacity change from 0 to 256 [ 122.410621][ T6873] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 122.592900][ T6879] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 123.172395][ T6897] loop1: detected capacity change from 0 to 512 [ 123.193489][ T6897] EXT4-fs: Ignoring removed bh option [ 123.220877][ T6897] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 123.232402][ T6900] loop2: detected capacity change from 0 to 512 [ 123.293684][ T6905] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 123.300094][ T6897] EXT4-fs (loop1): 1 truncate cleaned up [ 123.344053][ T6900] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 123.346169][ T6897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.357076][ T6900] System zones: 1-12 [ 123.372281][ T6900] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.395: Directory hole found for htree index block 0 [ 123.405556][ T6900] EXT4-fs (loop2): Remounting filesystem read-only [ 123.412602][ T6900] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 123.463911][ T6900] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 123.564982][ T6897] EXT4-fs error (device loop1): __ext4_remount:6741: comm syz.1.394: Abort forced by user [ 123.568641][ T6900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.615995][ T6897] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 123.704340][ T6900] EXT4-fs: Ignoring sb option on remount [ 123.710100][ T6900] EXT4-fs: Ignoring removed orlov option [ 123.741163][ T6900] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 123.742523][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.770040][ T6900] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 123.886736][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.333780][ T5797] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.527325][ T5797] usb 3-1: Using ep0 maxpacket: 16 [ 124.535696][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.547785][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.557925][ T5797] usb 3-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 124.567045][ T5797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.577776][ T5797] usb 3-1: config 0 descriptor?? [ 125.009606][ T5797] logitech-djreceiver 0003:046D:C513.0007: unknown main item tag 0x0 [ 125.017927][ T5797] logitech-djreceiver 0003:046D:C513.0007: unknown main item tag 0x0 [ 125.026245][ T5797] logitech-djreceiver 0003:046D:C513.0007: unknown main item tag 0x0 [ 125.034522][ T5797] logitech-djreceiver 0003:046D:C513.0007: unknown main item tag 0x0 [ 125.042652][ T5797] logitech-djreceiver 0003:046D:C513.0007: unknown main item tag 0x0 [ 125.222272][ T23] usb 3-1: USB disconnect, device number 5 [ 125.821266][ T6928] loop1: detected capacity change from 0 to 1024 [ 125.864429][ T6927] loop2: detected capacity change from 0 to 4096 [ 125.885086][ T6928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.931538][ T6932] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.990101][ T6928] EXT4-fs: Ignoring sb option on remount [ 125.994060][ T5790] Bluetooth: hci3: command tx timeout [ 125.995921][ T6928] EXT4-fs: Ignoring removed orlov option [ 126.016998][ T6928] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.025542][ T6928] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 126.037428][ T6928] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 126.049890][ T6927] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 126.073373][ T6927] Remounting filesystem read-only [ 126.111417][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.158874][ T5796] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 126.167990][ T5796] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 126.180585][ T5796] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 126.190632][ T5796] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 126.206636][ T5796] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 126.217011][ T5796] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 126.227145][ T5796] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 126.274730][ T5796] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 126.281657][ T5796] NILFS (loop2): discard dirty block: blocknr=28, size=4096 [ 126.290537][ T5796] NILFS (loop2): discard dirty page: offset=4096, ino=3 [ 126.298983][ T5796] NILFS (loop2): discard dirty block: blocknr=29, size=4096 [ 126.306693][ T5796] NILFS (loop2): discard dirty page: offset=270336, ino=3 [ 126.314375][ T5796] NILFS (loop2): discard dirty block: blocknr=0, size=4096 [ 126.481169][ T6939] loop1: detected capacity change from 0 to 1024 [ 126.501576][ T6939] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.673745][ T5797] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 126.863835][ T5797] usb 3-1: Using ep0 maxpacket: 16 [ 126.875978][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.892684][ T6949] loop1: detected capacity change from 0 to 256 [ 126.899784][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.911943][ T6949] exfat: Deprecated parameter 'utf8' [ 126.935481][ T5797] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 126.945376][ T6949] exfat: Deprecated parameter 'utf8' [ 126.962594][ T5797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.970958][ T6949] exfat: Deprecated parameter 'utf8' [ 127.001179][ T6949] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36d2a6b4, utbl_chksum : 0xe619d30d) [ 127.034871][ T5797] usb 3-1: config 0 descriptor?? [ 127.264827][ T6953] loop0: detected capacity change from 0 to 4096 [ 127.299753][ T6953] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 127.484063][ T5797] hid-multitouch 0003:1FD2:6007.0008: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 127.745183][ T5825] usb 3-1: USB disconnect, device number 6 [ 127.788038][ T6960] fido_id[6960]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 127.919776][ T6964] loop1: detected capacity change from 0 to 4096 [ 127.936318][ T6964] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 128.034768][ T6964] ntfs3: loop1: failed to convert "c46c" to macturkish [ 128.121165][ T6955] loop3: detected capacity change from 0 to 32768 [ 128.169714][ T6955] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 128.327614][ T6955] XFS (loop3): Ending clean mount [ 128.371957][ T6955] XFS (loop3): Quotacheck needed: Please wait. [ 128.456274][ T6981] loop1: detected capacity change from 0 to 1024 [ 128.466141][ T6982] netlink: 'syz.2.425': attribute type 3 has an invalid length. [ 128.481259][ T6955] XFS (loop3): Quotacheck: Done. [ 128.693577][ T1101] hfsplus: b-tree write err: -5, ino 4 [ 128.711790][ T5799] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 129.563107][ T6988] loop1: detected capacity change from 0 to 40427 [ 129.600631][ T6988] F2FS-fs (loop1): heap/no_heap options were deprecated [ 129.636120][ T6988] F2FS-fs (loop1): invalid crc value [ 129.647999][ T6988] F2FS-fs (loop1): Found nat_bits in checkpoint [ 129.778778][ T6988] F2FS-fs (loop1): Start checkpoint disabled! [ 129.862192][ T6988] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 130.273487][ T6999] loop3: detected capacity change from 0 to 32768 [ 131.397078][ T7045] pim6reg9: entered allmulticast mode [ 131.722392][ T7058] netlink: 60 bytes leftover after parsing attributes in process `syz.3.460'. [ 131.760248][ T7058] netlink: 60 bytes leftover after parsing attributes in process `syz.3.460'. [ 131.791332][ T7057] netlink: 60 bytes leftover after parsing attributes in process `syz.3.460'. [ 132.051412][ T7073] loop0: detected capacity change from 0 to 16 [ 132.091504][ T7073] erofs: (device loop0): mounted with root inode @ nid 36. [ 132.578633][ T23] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.608387][ T23] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.620806][ T23] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.651739][ T23] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz1 [ 132.724279][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.730672][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.807252][ T7095] fido_id[7095]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 132.881684][ T7099] loop3: detected capacity change from 0 to 1024 [ 132.896634][ T5825] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 132.951418][ T7099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 132.973918][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 132.994862][ T7099] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.021439][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.482'. [ 133.095204][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 133.111199][ T5825] usb 2-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 133.121276][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.136917][ T5825] usb 2-1: config 0 descriptor?? [ 133.180078][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 133.238832][ T23] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 133.253895][ T23] usb 3-1: config 0 has no interface number 0 [ 133.260551][ T23] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 133.273441][ T7112] sp0: Synchronizing with TNC [ 133.312744][ T23] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 133.327649][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.339083][ T23] usb 3-1: Product: syz [ 133.344135][ T23] usb 3-1: Manufacturer: syz [ 133.348905][ T23] usb 3-1: SerialNumber: syz [ 133.380462][ T23] usb 3-1: config 0 descriptor?? [ 133.390580][ T23] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 133.405893][ T23] em28xx 3-1:0.132: Video interface 132 found: [ 133.611905][ T5825] macally 0003:060B:0001.000A: unknown main item tag 0x0 [ 133.619314][ T5825] macally 0003:060B:0001.000A: unknown main item tag 0x0 [ 133.626517][ T5825] macally 0003:060B:0001.000A: unknown main item tag 0x0 [ 133.633664][ T5825] macally 0003:060B:0001.000A: unknown main item tag 0x0 [ 133.640754][ T5825] macally 0003:060B:0001.000A: unknown main item tag 0x0 [ 133.649863][ T5825] macally 0003:060B:0001.000A: hidraw0: USB HID v0.05 Device [HID 060b:0001] on usb-dummy_hcd.1-1/input0 [ 133.806595][ T23] em28xx 3-1:0.132: chip ID is em2710/2820 [ 133.834985][ T5797] usb 2-1: USB disconnect, device number 3 [ 134.081708][ T23] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 134.091261][ T23] em28xx 3-1:0.132: board has no eeprom [ 134.163812][ T23] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 134.172547][ T23] em28xx 3-1:0.132: analog set to bulk mode. [ 134.179905][ T5825] em28xx 3-1:0.132: Registering V4L2 extension [ 134.190477][ T23] usb 3-1: USB disconnect, device number 7 [ 134.204196][ T23] em28xx 3-1:0.132: Disconnecting em28xx [ 134.319064][ T5825] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 134.326675][ T5825] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 134.336388][ T5825] em28xx 3-1:0.132: No AC97 audio processor [ 134.351159][ T5825] usb 3-1: Decoder not found [ 134.356010][ T5825] em28xx 3-1:0.132: failed to create media graph [ 134.362422][ T5825] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 134.384978][ T5825] em28xx 3-1:0.132: Remote control support is not available for this card. [ 134.412026][ T23] em28xx 3-1:0.132: Closing input extension [ 134.446780][ T23] em28xx 3-1:0.132: Freeing device [ 134.693748][ T5825] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.832459][ T7129] 9pnet_fd: p9_fd_create_tcp (7129): problem binding to privport [ 134.886530][ T5825] usb 2-1: Using ep0 maxpacket: 16 [ 134.901208][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.914334][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.924866][ T5825] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 134.934466][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.950960][ T5825] usb 2-1: config 0 descriptor?? [ 135.073328][ T7135] capability: warning: `syz.2.494' uses 32-bit capabilities (legacy support in use) [ 135.382921][ T5825] nzxt-kraken2 0003:1E71:170E.000B: unknown main item tag 0x0 [ 135.403310][ T5825] nzxt-kraken2 0003:1E71:170E.000B: unknown main item tag 0x0 [ 135.411271][ T5825] nzxt-kraken2 0003:1E71:170E.000B: item fetching failed at offset 4/5 [ 135.443007][ T5825] nzxt-kraken2 0003:1E71:170E.000B: hid parse failed with -22 [ 135.453140][ T5825] nzxt-kraken2: probe of 0003:1E71:170E.000B failed with error -22 [ 135.629799][ T5825] usb 2-1: USB disconnect, device number 4 [ 135.893962][ T5873] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 136.076235][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.087519][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.097424][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 136.110334][ T5873] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 136.120385][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.131464][ T5873] usb 3-1: config 0 descriptor?? [ 136.216694][ T7149] loop1: detected capacity change from 0 to 1024 [ 136.271117][ T7149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.337650][ T7149] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.501: bit already cleared for inode 15 [ 136.368891][ T7154] EXT4-fs error (device loop1): __ext4_new_inode:1075: comm syz.1.501: reserved inode found cleared - inode=1 [ 136.386312][ T7155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.502'. [ 136.455929][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.589137][ T5873] kye 0003:0458:501A.000C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 136.625052][ T5873] kye 0003:0458:501A.000C: unknown main item tag 0x0 [ 136.645782][ T5873] kye 0003:0458:501A.000C: unknown main item tag 0x0 [ 136.652579][ T5873] kye 0003:0458:501A.000C: unknown main item tag 0x0 [ 136.671171][ T5873] kye 0003:0458:501A.000C: unknown main item tag 0x0 [ 136.682934][ T5873] kye 0003:0458:501A.000C: unknown main item tag 0x0 [ 136.710474][ T5873] kye 0003:0458:501A.000C: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.2-1/input0 [ 136.753122][ T5873] kye 0003:0458:501A.000C: tablet-enabling feature report not found [ 136.774104][ T5873] kye 0003:0458:501A.000C: tablet enabling failed [ 136.814890][ T5873] usb 3-1: USB disconnect, device number 8 [ 136.834544][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 136.860104][ T7164] fido_id[7164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 137.042596][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.072290][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 137.082170][ T23] usb 2-1: config 1 has no interface number 0 [ 137.091804][ T23] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.108654][ T23] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 137.119869][ T23] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 137.142893][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.145314][ T7173] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 137.145314][ T7173] program syz.0.510 not setting count and/or reply_len properly [ 137.159289][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.181908][ T23] usb 2-1: Product: syz [ 137.188598][ T23] usb 2-1: Manufacturer: syz [ 137.193348][ T23] usb 2-1: SerialNumber: syz [ 137.301815][ T7177] loop0: detected capacity change from 0 to 512 [ 137.344611][ T7177] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 137.375587][ T7177] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 137.397271][ T7177] EXT4-fs (loop0): 1 truncate cleaned up [ 137.439854][ T7177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.600265][ T7177] EXT4-fs: user quota file already specified [ 137.729048][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.857463][ T23] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 137.874241][ T23] cdc_ncm 2-1:1.1: bind() failure [ 137.907218][ T23] usb 2-1: USB disconnect, device number 5 [ 137.944100][ T7190] sp0: Synchronizing with TNC [ 138.654153][ T5873] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 138.785724][ T7198] loop3: detected capacity change from 0 to 40427 [ 138.815383][ T7198] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 138.823400][ T7198] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 138.840195][ T7198] F2FS-fs (loop3): invalid crc value [ 138.845807][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 138.856072][ T5873] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.871192][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 138.878449][ T5873] usb 3-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 138.889482][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.906972][ T7198] F2FS-fs (loop3): Found nat_bits in checkpoint [ 138.935758][ T5873] usb 3-1: config 0 descriptor?? [ 139.006319][ T7215] loop1: detected capacity change from 0 to 512 [ 139.086050][ T7198] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 139.121372][ T7215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.166147][ T7198] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 139.234103][ T7215] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.267991][ T7204] loop0: detected capacity change from 0 to 32768 [ 139.313805][ T27] audit: type=1800 audit(1753199935.187:16): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.529" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 139.383914][ T7204] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.407092][ T5873] kye 0003:0458:5014.000D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 139.418868][ T5873] kye 0003:0458:5014.000D: unknown main item tag 0x0 [ 139.426793][ T5873] kye 0003:0458:5014.000D: unknown main item tag 0x0 [ 139.434116][ T5873] kye 0003:0458:5014.000D: unknown main item tag 0x0 [ 139.440987][ T5873] kye 0003:0458:5014.000D: unknown main item tag 0x0 [ 139.448435][ T5873] kye 0003:0458:5014.000D: unknown main item tag 0x0 [ 139.456482][ T5873] kye 0003:0458:5014.000D: unknown main item tag 0x0 [ 139.463373][ T5873] kye 0003:0458:5014.000D: unknown main item tag 0x0 [ 139.470765][ T5873] kye 0003:0458:5014.000D: unknown main item tag 0x0 [ 139.482792][ T5873] kye 0003:0458:5014.000D: hidraw0: USB HID v0.08 Device [HID 0458:5014] on usb-dummy_hcd.2-1/input0 [ 139.494079][ T5873] kye 0003:0458:5014.000D: tablet-enabling feature report not found [ 139.503777][ T5873] kye 0003:0458:5014.000D: tablet enabling failed [ 139.529137][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.655771][ T5874] usb 3-1: USB disconnect, device number 9 [ 139.807175][ T7204] XFS (loop0): Ending clean mount [ 139.951035][ T5787] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 141.010497][ T7262] loop2: detected capacity change from 0 to 512 [ 141.090424][ T7262] Quota error (device loop2): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 141.095340][ T7266] loop3: detected capacity change from 0 to 256 [ 141.113330][ T7262] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 141.124010][ T7262] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.546: Failed to acquire dquot type 1 [ 141.172778][ T7262] EXT4-fs (loop2): 1 truncate cleaned up [ 141.180293][ T7262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.193526][ T7262] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.200377][ T7266] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 141.261265][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.433919][ T7270] loop3: detected capacity change from 0 to 512 [ 141.441575][ T7270] EXT4-fs: Ignoring removed orlov option [ 141.459909][ T7270] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 141.490387][ T7270] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 141.507483][ T7270] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.549: corrupted in-inode xattr: e_value size too large [ 141.558873][ T7270] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.549: couldn't read orphan inode 15 (err -117) [ 141.590258][ T7275] loop2: detected capacity change from 0 to 512 [ 141.614036][ T7275] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 141.629193][ T7270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.667350][ T7275] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 141.693875][ T7275] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.550: corrupted in-inode xattr: e_value size too large [ 141.711123][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.794485][ T7275] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.550: couldn't read orphan inode 15 (err -117) [ 141.850377][ T7275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.031898][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.221822][ T7282] loop1: detected capacity change from 0 to 4096 [ 142.244856][ T7282] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 142.345292][ T7282] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 142.462151][ T7282] ntfs3: loop1: ino=1e, "file1" failed to parse mft record [ 142.492195][ T7282] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 142.753947][ T5874] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 142.789094][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 142.942316][ T7304] netlink: 204 bytes leftover after parsing attributes in process `syz.1.563'. [ 142.955987][ T7304] netlink: 'syz.1.563': attribute type 3 has an invalid length. [ 142.968764][ T5874] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.982780][ T5874] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.998807][ T5874] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 143.034290][ T5874] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.054018][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.062089][ T5874] usb 3-1: Product: syz [ 143.092595][ T5874] usb 3-1: Manufacturer: syz [ 143.116662][ T5874] usb 3-1: SerialNumber: syz [ 143.165925][ T7293] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 143.176085][ T5874] usb 3-1: bad CDC descriptors [ 143.510779][ T5797] usb 3-1: USB disconnect, device number 10 [ 143.907180][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'. [ 144.161616][ T7335] loop3: detected capacity change from 0 to 64 [ 144.211336][ T7335] MINIX-fs: bad superblock [ 144.263155][ T7339] loop0: detected capacity change from 0 to 1024 [ 144.403767][ T5874] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 144.614232][ T5874] usb 2-1: Using ep0 maxpacket: 8 [ 144.629326][ T5874] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 144.644329][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.652700][ T5874] usb 2-1: Product: syz [ 144.658554][ T5874] usb 2-1: Manufacturer: syz [ 144.663373][ T5874] usb 2-1: SerialNumber: syz [ 144.677919][ T5874] usb 2-1: config 0 descriptor?? [ 144.688147][ T5874] gspca_main: sq905-2.14.0 probing 2770:9120 [ 144.803791][ T23] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 144.935534][ T7335] loop3: detected capacity change from 0 to 32768 [ 144.960030][ T7335] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.578 (7335) [ 145.003848][ T7335] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.009434][ T23] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 145.021013][ T7335] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 145.024595][ T23] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 145.035870][ T7335] BTRFS info (device loop3): using free space tree [ 145.064181][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 145.074897][ T23] usb 3-1: config 1 has no interface number 0 [ 145.082256][ T23] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 145.095559][ T23] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 145.111734][ T5874] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 145.120951][ T5874] sq905: probe of 2-1:0.0 failed with error -71 [ 145.130604][ T5874] usb 2-1: USB disconnect, device number 6 [ 145.140629][ T23] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 145.160652][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.188469][ T7343] loop0: detected capacity change from 0 to 32768 [ 145.194640][ T7335] BTRFS info (device loop3): enabling ssd optimizations [ 145.201933][ T7335] BTRFS info (device loop3): auto enabling async discard [ 145.229151][ T23] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 145.366845][ T5799] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.527512][ T7343] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 145.798481][ T23] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 145.995248][ T5787] ocfs2: Unmounting device (7,0) on (node local) [ 146.052354][ T23] usb 3-1: USB disconnect, device number 11 [ 146.061122][ T23] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 146.292259][ T7374] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.453039][ T7379] CUSE: DEVNAME unspecified [ 146.544350][ T7382] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 146.556138][ T7382] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 146.557130][ T7384] loop0: detected capacity change from 0 to 256 [ 146.564592][ T7382] CPU: 1 PID: 7382 Comm: syz.1.591 Not tainted 6.6.99-syzkaller #0 [ 146.564616][ T7382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.564632][ T7382] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 146.564675][ T7382] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 49 d2 e0 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 28 d2 e0 f9 4d 8b 24 24 48 83 c3 [ 146.564699][ T7382] RSP: 0018:ffffc9000c21fa78 EFLAGS: 00010206 [ 146.564720][ T7382] RAX: 0000000000000005 RBX: ffff88802dc48400 RCX: 0000000000080000 [ 146.564735][ T7382] RDX: ffffc9000cf69000 RSI: 00000000000007da RDI: 00000000000007db [ 146.564748][ T7382] RBP: 0000000000000001 R08: ffff88814c63192f R09: 1ffff110298c6325 [ 146.564762][ T7382] R10: dffffc0000000000 R11: ffffed10298c6326 R12: 0000000000000028 [ 146.564776][ T7382] R13: dffffc0000000000 R14: ffff88814c631800 R15: dffffc0000000000 [ 146.564792][ T7382] FS: 00007fe6e34d16c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 146.564809][ T7382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 146.564823][ T7382] CR2: 0000001b2d81fffc CR3: 00000000601b4000 CR4: 00000000003506e0 [ 146.564842][ T7382] Call Trace: [ 146.564850][ T7382] [ 146.564861][ T7382] pcl818_detach+0x66/0xd0 [ 146.564887][ T7382] comedi_device_detach+0x131/0x6f0 [ 146.564924][ T7382] comedi_unlocked_ioctl+0xc35/0xf00 [ 146.564957][ T7382] ? comedi_poll+0x8c0/0x8c0 [ 146.565011][ T7382] ? __fget_files+0x28/0x4d0 [ 146.565044][ T7382] ? bpf_lsm_file_ioctl+0x9/0x10 [ 146.565064][ T7382] ? security_file_ioctl+0x80/0xa0 [ 146.565093][ T7382] ? comedi_poll+0x8c0/0x8c0 [ 146.565119][ T7382] __se_sys_ioctl+0xfd/0x170 [ 146.565146][ T7382] do_syscall_64+0x55/0xb0 [ 146.565169][ T7382] ? clear_bhb_loop+0x40/0x90 [ 146.565187][ T7382] ? clear_bhb_loop+0x40/0x90 [ 146.565207][ T7382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.565238][ T7382] RIP: 0033:0x7fe6e258e9a9 [ 146.565261][ T7382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.565277][ T7382] RSP: 002b:00007fe6e34d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.565298][ T7382] RAX: ffffffffffffffda RBX: 00007fe6e27b5fa0 RCX: 00007fe6e258e9a9 [ 146.565313][ T7382] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 146.565325][ T7382] RBP: 00007fe6e2610d69 R08: 0000000000000000 R09: 0000000000000000 [ 146.565336][ T7382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.565347][ T7382] R13: 0000000000000000 R14: 00007fe6e27b5fa0 R15: 00007ffcd2028af8 [ 146.565367][ T7382] [ 146.565377][ T7382] Modules linked in: [ 146.566882][ T7382] ---[ end trace 0000000000000000 ]--- [ 146.844455][ T7382] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 146.850084][ T7382] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 49 d2 e0 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 28 d2 e0 f9 4d 8b 24 24 48 83 c3 [ 146.870688][ T7382] RSP: 0018:ffffc9000c21fa78 EFLAGS: 00010206 [ 146.878562][ T7382] RAX: 0000000000000005 RBX: ffff88802dc48400 RCX: 0000000000080000 [ 146.887464][ T7382] RDX: ffffc9000cf69000 RSI: 00000000000007da RDI: 00000000000007db [ 146.895721][ T7382] RBP: 0000000000000001 R08: ffff88814c63192f R09: 1ffff110298c6325 [ 146.904929][ T7382] R10: dffffc0000000000 R11: ffffed10298c6326 R12: 0000000000000028 [ 146.912958][ T7382] R13: dffffc0000000000 R14: ffff88814c631800 R15: dffffc0000000000 [ 146.921037][ T7382] FS: 00007fe6e34d16c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 146.930279][ T7382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 146.936972][ T7382] CR2: 0000001b2d81fffc CR3: 00000000601b4000 CR4: 00000000003506e0 [ 146.945169][ T7382] Kernel panic - not syncing: Fatal exception [ 146.951564][ T7382] Kernel Offset: disabled [ 146.955899][ T7382] Rebooting in 86400 seconds..