last executing test programs: 3.18568118s ago: executing program 3 (id=362): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffffffffffe9a, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000400)) 3.056901679s ago: executing program 1 (id=364): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x34000}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x0) 2.999708473s ago: executing program 3 (id=365): openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) 2.116507854s ago: executing program 1 (id=373): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) read$alg(r1, &(0x7f0000000900)=""/21, 0x15) 1.876562681s ago: executing program 2 (id=374): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x4, 0x2c, 0x1, 0x8}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000001c0)=0x3f7, 0x4) recvmmsg(r0, &(0x7f000000b100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=""/203, 0xcb}}], 0x1, 0x2, 0x0) 1.852904742s ago: executing program 2 (id=375): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) read(r0, &(0x7f0000002340)=""/232, 0xe8) 1.831839814s ago: executing program 1 (id=376): r0 = socket$can_bcm(0x1d, 0x2, 0x2) read$FUSE(r0, &(0x7f000000a240)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) 1.652600586s ago: executing program 2 (id=378): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='scalable', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 1.543660523s ago: executing program 1 (id=380): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r1 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) poll(&(0x7f00000000c0)=[{r0, 0x10}, {r0, 0x600}], 0x2, 0x10000) wait4(r1, 0x0, 0x8, 0x0) 1.240215624s ago: executing program 0 (id=381): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80b42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000340)={0x81, 0x0, 0x3}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000100)={0x40000, 0x9000, 0x2, 0x0, 0x400}) 1.185317168s ago: executing program 3 (id=382): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.124894613s ago: executing program 3 (id=383): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xf3, 0xe1, 0x3ff, 0x10001, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0x3}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffc4b}, @timestamp={0x5, 0x2, 0xffffff07, 0x11}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 1.036538968s ago: executing program 0 (id=384): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) accept4(r0, &(0x7f0000000100)=@l2tp, &(0x7f0000000180)=0x80, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 927.870776ms ago: executing program 3 (id=385): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000698000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x334e8b}) 886.030688ms ago: executing program 0 (id=386): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @empty, 0x8}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x4000000000000d6, 0x4000845) syz_emit_ethernet(0x46, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="c9963525a3c5", @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "000002", 0x10, 0x11, 0x1, @private1, @local, {[], {0x4e1d, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x7}}}}}}}}, 0x0) 751.537958ms ago: executing program 0 (id=387): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="bb", 0x1}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x2179, 0x4) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40, 0x0) 750.595758ms ago: executing program 3 (id=388): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000140)=0xd8) 640.490815ms ago: executing program 2 (id=389): r0 = io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xc0a6, 0x1000, 0x1, 0x3e2}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r1, &(0x7f0000000040)="02", 0xfffffda3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 640.268846ms ago: executing program 0 (id=390): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x4db2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x42}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 555.813931ms ago: executing program 1 (id=391): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="d9fc66f20f2b9303000f090f01cbba4300ed66b9800000c00f326635004000000f30660f2f4cd866b93509000066b80080000066ba000000000f30026007b861000f00d0", 0x44}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 542.417752ms ago: executing program 0 (id=392): syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4421, &(0x7f0000004500)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) 352.426295ms ago: executing program 2 (id=393): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x80400d0) recvmmsg$unix(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000200)=""/252, 0xfc}], 0x1}}], 0x1, 0x10000, 0x0) 262.779222ms ago: executing program 1 (id=394): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000080)={[{@acl}, {@nodatacow}, {@flushoncommit}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@nodatasum}, {@compress_algo={'compress', 0x3d, 'no'}}, {@rescue={'rescue', 0x3d, 'usebackuproot'}}, {@max_inline={'max_inline', 0x3d, [0x45, 0x38, 0x67, 0x74, 0x65, 0x65]}}]}, 0x3, 0x512d, &(0x7f000000f380)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x20243, 0x14a) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x2b4602, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 0s ago: executing program 2 (id=395): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x2, 0xc, 0x6}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.170' (ED25519) to the list of known hosts. [ 74.243329][ T5751] cgroup: Unknown subsys name 'net' [ 74.383087][ T5751] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.766401][ T5751] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.217325][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.225987][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.235636][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.244723][ T5771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.253729][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.262204][ T5771] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.274056][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.276239][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.281823][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.290852][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.298886][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.306651][ T5771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.313310][ T5773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.322001][ T5771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.327302][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.335942][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.342998][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.356327][ T5771] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.356934][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.365386][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.376099][ T5773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.388008][ T5771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.396387][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.415155][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.813068][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 77.843312][ T5762] chnl_net:caif_netlink_parms(): no params data found [ 77.929444][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 77.976730][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 78.064013][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.075134][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.083187][ T5762] bridge_slave_0: entered allmulticast mode [ 78.091218][ T5762] bridge_slave_0: entered promiscuous mode [ 78.111065][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.118597][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.126750][ T5765] bridge_slave_0: entered allmulticast mode [ 78.134183][ T5765] bridge_slave_0: entered promiscuous mode [ 78.142100][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.150322][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.158262][ T5762] bridge_slave_1: entered allmulticast mode [ 78.165588][ T5762] bridge_slave_1: entered promiscuous mode [ 78.184705][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.192446][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.199975][ T5765] bridge_slave_1: entered allmulticast mode [ 78.206933][ T5765] bridge_slave_1: entered promiscuous mode [ 78.261885][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.270053][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.279617][ T5764] bridge_slave_0: entered allmulticast mode [ 78.288042][ T5764] bridge_slave_0: entered promiscuous mode [ 78.313523][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.321498][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.331197][ T5764] bridge_slave_1: entered allmulticast mode [ 78.340406][ T5764] bridge_slave_1: entered promiscuous mode [ 78.350419][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.363666][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.373983][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.383234][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.392521][ T5763] bridge_slave_0: entered allmulticast mode [ 78.403056][ T5763] bridge_slave_0: entered promiscuous mode [ 78.419812][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.428006][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.435466][ T5763] bridge_slave_1: entered allmulticast mode [ 78.442957][ T5763] bridge_slave_1: entered promiscuous mode [ 78.451914][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.472690][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.532778][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.547100][ T5762] team0: Port device team_slave_0 added [ 78.556849][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.578425][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.601446][ T5762] team0: Port device team_slave_1 added [ 78.619194][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.634338][ T5765] team0: Port device team_slave_0 added [ 78.669584][ T5765] team0: Port device team_slave_1 added [ 78.686863][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.694220][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.723265][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.736743][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.744339][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.772155][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.787050][ T5764] team0: Port device team_slave_0 added [ 78.804975][ T5764] team0: Port device team_slave_1 added [ 78.836589][ T5763] team0: Port device team_slave_0 added [ 78.851293][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.861728][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.889393][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.902746][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.910291][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.937293][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.952448][ T5763] team0: Port device team_slave_1 added [ 78.968250][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.975597][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.003281][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.025048][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.033074][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.061441][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.105700][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.113064][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.143005][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.172929][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.181999][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.212709][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.232410][ T5762] hsr_slave_0: entered promiscuous mode [ 79.240829][ T5762] hsr_slave_1: entered promiscuous mode [ 79.327314][ T5763] hsr_slave_0: entered promiscuous mode [ 79.334048][ T5763] hsr_slave_1: entered promiscuous mode [ 79.341432][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.349490][ T5763] Cannot create hsr debugfs directory [ 79.382142][ T5765] hsr_slave_0: entered promiscuous mode [ 79.388743][ T5765] hsr_slave_1: entered promiscuous mode [ 79.395531][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.404255][ T5765] Cannot create hsr debugfs directory [ 79.416433][ T5767] Bluetooth: hci1: command tx timeout [ 79.422617][ T5767] Bluetooth: hci3: command tx timeout [ 79.429617][ T5769] Bluetooth: hci0: command tx timeout [ 79.443842][ T5764] hsr_slave_0: entered promiscuous mode [ 79.450790][ T5764] hsr_slave_1: entered promiscuous mode [ 79.458990][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.467480][ T5764] Cannot create hsr debugfs directory [ 79.495674][ T5767] Bluetooth: hci2: command tx timeout [ 79.814333][ T5762] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.829233][ T5762] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.841676][ T5762] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.852236][ T5762] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.931925][ T5765] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.942031][ T5765] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.971540][ T5765] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.982621][ T5765] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.031946][ T5764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.064810][ T5764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.076581][ T5764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.089034][ T5764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.184975][ T5763] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.196905][ T5763] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.216647][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.228886][ T5763] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.238967][ T5763] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.295139][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.331179][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.339117][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.358436][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.366004][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.386053][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.435350][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.491300][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.499110][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.521975][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.539306][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.547363][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.607247][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.654479][ T4094] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.662023][ T4094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.676879][ T4094] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.684749][ T4094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.741352][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.811658][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.855321][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.862810][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.909631][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.917046][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.940478][ T5764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.993272][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.142892][ T5762] veth0_vlan: entered promiscuous mode [ 81.181432][ T5762] veth1_vlan: entered promiscuous mode [ 81.217405][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.294348][ T5762] veth0_macvtap: entered promiscuous mode [ 81.320504][ T5762] veth1_macvtap: entered promiscuous mode [ 81.404032][ T5765] veth0_vlan: entered promiscuous mode [ 81.424554][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.442021][ T5765] veth1_vlan: entered promiscuous mode [ 81.460375][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.486713][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.497034][ T5769] Bluetooth: hci3: command tx timeout [ 81.502981][ T5769] Bluetooth: hci0: command tx timeout [ 81.509654][ T5767] Bluetooth: hci1: command tx timeout [ 81.529857][ T5762] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.540002][ T5762] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.550096][ T5762] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.561025][ T5762] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.576512][ T5769] Bluetooth: hci2: command tx timeout [ 81.584134][ T5765] veth0_macvtap: entered promiscuous mode [ 81.594566][ T5765] veth1_macvtap: entered promiscuous mode [ 81.626600][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.679223][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.691021][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.703567][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.770758][ T5763] veth0_vlan: entered promiscuous mode [ 81.801220][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.812502][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.829738][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.841230][ T5765] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.851435][ T5765] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.861031][ T5765] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.870307][ T5765] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.910047][ T5763] veth1_vlan: entered promiscuous mode [ 81.917346][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.943727][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.983081][ T5764] veth0_vlan: entered promiscuous mode [ 82.033551][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.048700][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.067756][ T5764] veth1_vlan: entered promiscuous mode [ 82.089174][ T5763] veth0_macvtap: entered promiscuous mode [ 82.101174][ T5763] veth1_macvtap: entered promiscuous mode [ 82.130287][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.160251][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.230149][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.241237][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.255276][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.263268][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.274448][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.285956][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.303350][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.312031][ T5831] syz.2.3[5831]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.348493][ T5764] veth0_macvtap: entered promiscuous mode [ 82.365192][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.377786][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.389234][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.398505][ T5831] loop2: detected capacity change from 0 to 4096 [ 82.401098][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.420121][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.432921][ T5763] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.442565][ T5763] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.452316][ T5763] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.474994][ T5763] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.518584][ T5764] veth1_macvtap: entered promiscuous mode [ 82.622393][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.645640][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.656025][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.671123][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.681343][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.692331][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.708702][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.729511][ T5833] loop1: detected capacity change from 0 to 764 [ 82.737911][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.777733][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.793198][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.813884][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.853404][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.886209][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.912908][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.925086][ T5764] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.949088][ T5764] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.964996][ T5764] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.975149][ T5764] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.116854][ T4089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.130610][ T4089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.180627][ T4089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.197283][ T4089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.243415][ T4089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.264163][ T4089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.303080][ T4089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.313709][ T4089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.366658][ T5805] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.468804][ T3489] Bluetooth: hci4: Frame reassembly failed (-84) [ 83.480167][ T5839] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 83.496990][ T5841] loop3: detected capacity change from 0 to 512 [ 83.510091][ T5841] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 83.526665][ T5841] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.569497][ T5841] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.575791][ T5767] Bluetooth: hci1: command tx timeout [ 83.592666][ T5767] Bluetooth: hci0: command tx timeout [ 83.598778][ T5767] Bluetooth: hci3: command tx timeout [ 83.610851][ T5841] EXT4-fs (loop3): 1 truncate cleaned up [ 83.619672][ T5841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.626809][ T5805] usb 3-1: Using ep0 maxpacket: 8 [ 83.655697][ T5767] Bluetooth: hci2: command tx timeout [ 83.678256][ T5805] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 83.703129][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.713173][ T5805] usb 3-1: config 179 has no interface number 0 [ 83.741051][ T5805] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 83.781586][ T5805] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 83.811984][ T5805] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 83.829822][ T5805] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 83.839916][ T5845] loop3: detected capacity change from 0 to 4096 [ 83.842775][ T5805] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 83.873425][ T5845] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 83.882162][ T5805] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 83.910865][ T5805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.938321][ T5845] ntfs3: loop3: Failed to load $Extend (-22). [ 83.965702][ T5845] ntfs3: loop3: Failed to initialize $Extend. [ 83.991805][ T5837] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 84.068979][ T5847] loop1: detected capacity change from 0 to 2048 [ 84.144121][ T5847] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 84.171625][ T5847] UDF-fs: Scanning with blocksize 512 failed [ 84.174268][ T28] audit: type=1800 audit(1775722816.059:2): pid=5845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=33 res=0 errno=0 [ 84.272967][ T5847] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.491236][ T27] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input5 [ 84.597979][ T5850] loop3: detected capacity change from 0 to 512 [ 84.695994][ T5850] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.9: invalid indirect mapped block 4294967295 (level 0) [ 84.772825][ T5837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.791088][ T5837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.814537][ T5850] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.9: invalid indirect mapped block 4294967295 (level 1) [ 84.838270][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 84.847291][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 84.856602][ T27] usb 3-1: USB disconnect, device number 2 [ 84.873016][ T5850] EXT4-fs (loop3): 1 orphan inode deleted [ 84.883372][ T5850] EXT4-fs (loop3): 1 truncate cleaned up [ 84.891527][ T27] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 84.904937][ T5850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.013365][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.109411][ T5855] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.495767][ T5769] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 85.496013][ T5767] Bluetooth: hci4: command 0x1003 tx timeout [ 85.595597][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.636474][ T5829] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.657449][ T5769] Bluetooth: hci0: command tx timeout [ 85.657784][ T5767] Bluetooth: hci3: command tx timeout [ 85.663142][ T5771] Bluetooth: hci1: command tx timeout [ 85.736619][ T5769] Bluetooth: hci2: command tx timeout [ 85.826902][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 85.834816][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.858940][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.881492][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 85.891076][ T5829] usb 4-1: Using ep0 maxpacket: 32 [ 85.916256][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.926621][ T5829] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 85.939975][ T27] usb 2-1: config 0 descriptor?? [ 85.950950][ T27] hub 2-1:0.0: USB hub found [ 85.960347][ T5829] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 85.972380][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 85.981731][ T5829] usb 4-1: Product: syz [ 85.995678][ T5829] usb 4-1: Manufacturer: syz [ 86.000564][ T5829] usb 4-1: SerialNumber: syz [ 86.026585][ T5829] usb 4-1: config 0 descriptor?? [ 86.032832][ T5863] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 86.190445][ T27] hub 2-1:0.0: 1 port detected [ 86.344193][ T5798] usb 4-1: USB disconnect, device number 2 [ 86.456144][ T5873] loop2: detected capacity change from 0 to 32768 [ 86.473042][ T5873] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.18 (5873) [ 86.539896][ T5873] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 86.559555][ T5873] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 86.573672][ T5873] BTRFS info (device loop2): force clearing of disk cache [ 86.582813][ T5873] BTRFS info (device loop2): metadata ratio 0 [ 86.605013][ T5873] BTRFS info (device loop2): enabling ssd optimizations [ 86.631803][ T5873] BTRFS info (device loop2): using spread ssd allocation scheme [ 86.640491][ T5873] BTRFS info (device loop2): using free space tree [ 86.766253][ T5873] BTRFS info (device loop2): auto enabling async discard [ 86.799113][ T5873] BTRFS info (device loop2): rebuilding free space tree [ 86.902027][ T27] hub 2-1:0.0: activate --> -90 [ 86.906218][ T5878] loop0: detected capacity change from 0 to 32768 [ 86.951236][ T5878] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.20 (5878) [ 87.026313][ T5878] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 87.066596][ T5878] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 87.094615][ T5878] BTRFS info (device loop0): turning off barriers [ 87.117050][ T5829] usb 2-1: USB disconnect, device number 2 [ 87.125972][ T5878] BTRFS info (device loop0): setting nodatasum [ 87.151429][ T5878] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 87.197625][ T5878] BTRFS info (device loop0): use zstd compression, level 3 [ 87.226453][ T5878] BTRFS info (device loop0): using free space tree [ 87.767591][ T5762] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 87.936382][ T5763] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.753310][ T5896] loop3: detected capacity change from 0 to 40427 [ 88.840342][ T5896] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 88.896914][ T5896] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 88.993471][ T5896] F2FS-fs (loop3): invalid crc value [ 89.165495][ C1] sched: RT throttling activated [ 89.248351][ T5918] loop0: detected capacity change from 0 to 131072 [ 89.360016][ T5918] F2FS-fs (loop0): Found nat_bits in checkpoint [ 89.365676][ T5804] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.440276][ T5918] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 89.473808][ T5896] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 89.482389][ T5896] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 89.559401][ T28] audit: type=1804 audit(1775722821.439:3): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.24" name="/newroot/4/file1/bus" dev="loop0" ino=10 res=1 errno=0 [ 89.565103][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.625662][ T5829] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.646944][ T28] audit: type=1800 audit(1775722821.499:4): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.21" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 89.659006][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.718888][ T5804] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.769403][ T5804] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.769646][ T5764] syz-executor: attempt to access beyond end of device [ 89.769646][ T5764] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 89.789886][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.817465][ T5764] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 89.827884][ T5764] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 89.838904][ T5804] usb 2-1: config 0 descriptor?? [ 89.860264][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.873557][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.896727][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.946157][ T5829] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.989323][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.020862][ T5829] usb 3-1: config 0 descriptor?? [ 90.278982][ T5804] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 90.339724][ T5804] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 90.466303][ T5829] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x4 [ 90.490141][ T5829] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 90.559169][ T5804] usb 2-1: USB disconnect, device number 3 [ 90.585990][ T5829] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 90.679176][ T5829] usb 3-1: USB disconnect, device number 3 [ 90.784558][ T5940] fido_id[5940]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 90.940069][ T5939] loop3: detected capacity change from 0 to 32768 [ 90.954163][ T5939] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.29 (5939) [ 90.985179][ T5939] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.002699][ T5939] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 91.012386][ T5939] BTRFS info (device loop3): using free space tree [ 91.029081][ T5943] input: syz0 as /devices/virtual/input/input7 [ 91.101097][ T5939] BTRFS info (device loop3): enabling ssd optimizations [ 91.120908][ T5939] BTRFS info (device loop3): auto enabling async discard [ 91.342867][ T3489] Bluetooth: hci4: Frame reassembly failed (-84) [ 91.455109][ T5965] loop0: detected capacity change from 0 to 2048 [ 91.489199][ T5965] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.827377][ T3489] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 91.972708][ T5764] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.104324][ T5963] loop2: detected capacity change from 0 to 32768 [ 92.208511][ T5963] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 92.319357][ T9] cfg80211: failed to load regulatory.db [ 92.353117][ T5963] XFS (loop2): Ending clean mount [ 92.396474][ T28] audit: type=1800 audit(1775722824.289:5): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.31" name="file1" dev="loop0" ino=1415 res=0 errno=0 [ 92.457584][ T5965] syz.0.31 (5965) used greatest stack depth: 20368 bytes left [ 92.692051][ T5762] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 93.034985][ T5979] loop3: detected capacity change from 0 to 32768 [ 93.090397][ T5979] (syz.3.33,5979,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 93.161793][ T5987] syz.2.35 uses obsolete (PF_INET,SOCK_PACKET) [ 93.173549][ T5979] (syz.3.33,5979,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 93.232495][ T5979] JBD2: Ignoring recovery information on journal [ 93.333356][ T5979] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 93.343420][ T5769] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 93.350726][ T5771] Bluetooth: hci4: command 0x1003 tx timeout [ 93.498230][ T5985] loop0: detected capacity change from 0 to 32768 [ 93.554762][ T5985] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 93.648270][ T5985] XFS (loop0): Ending clean mount [ 93.829755][ T5763] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 94.430231][ T5764] ocfs2: Unmounting device (7,3) on (node local) [ 94.533768][ T6010] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 95.715662][ T3061] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.819910][ T6027] loop1: detected capacity change from 0 to 32768 [ 95.855315][ T6027] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 95.911598][ T6027] XFS (loop1): Ending clean mount [ 95.920196][ T5996] loop2: detected capacity change from 0 to 131072 [ 95.926143][ T3061] usb 1-1: Using ep0 maxpacket: 8 [ 95.937609][ T6027] XFS (loop1): Quotacheck needed: Please wait. [ 95.949986][ T3061] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 67, changing to 10 [ 95.978384][ T3061] usb 1-1: config 1 interface 0 has no altsetting 0 [ 95.985213][ T5996] F2FS-fs (loop2): invalid crc value [ 95.989767][ T3061] usb 1-1: string descriptor 0 read error: -22 [ 96.001299][ T3061] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.40 [ 96.015399][ T3061] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.027938][ T5996] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.082996][ T6027] XFS (loop1): Quotacheck: Done. [ 96.220243][ T5996] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 96.349291][ T5765] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 96.534038][ T3061] acrux 0003:1A34:0802.0003: invalid report_size -1149171161 [ 96.585674][ T3061] acrux 0003:1A34:0802.0003: item 0 4 1 7 parsing failed [ 96.621461][ T3061] acrux 0003:1A34:0802.0003: parse failed [ 96.649045][ T3061] acrux: probe of 0003:1A34:0802.0003 failed with error -22 [ 96.650898][ T6050] loop3: detected capacity change from 0 to 512 [ 96.799345][ T6050] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.55: invalid indirect mapped block 256 (level 2) [ 96.832420][ T5798] usb 1-1: USB disconnect, device number 2 [ 96.841539][ T6050] EXT4-fs (loop3): 2 truncates cleaned up [ 96.878302][ T6050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.910486][ T6054] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 96.945160][ T6050] ======================================================= [ 96.945160][ T6050] WARNING: The mand mount option has been deprecated and [ 96.945160][ T6050] and is ignored by this kernel. Remove the mand [ 96.945160][ T6050] option from the mount to silence this warning. [ 96.945160][ T6050] ======================================================= [ 97.043906][ T6050] overlayfs: failed to set uuid (/file0, err=-1); falling back to uuid=null. [ 97.055964][ T6050] overlayfs: failed to verify origin (/, ino=2, err=-1) [ 97.063856][ T6050] overlayfs: failed to verify upper root origin [ 97.174130][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.591579][ T5804] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.785705][ T5804] usb 4-1: Using ep0 maxpacket: 8 [ 97.793506][ T5804] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 97.802701][ T5804] usb 4-1: config 179 has no interface number 0 [ 97.815841][ T5804] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 97.845697][ T5804] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 97.869683][ T5804] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 97.896717][ T5804] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 97.935899][ T5804] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 97.962835][ T5804] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 97.973309][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.988832][ T6063] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.571146][ T6087] input: syz1 as /devices/virtual/input/input8 [ 98.744484][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 98.744490][ T5770] usb 4-1: USB disconnect, device number 3 [ 98.814888][ T6089] loop2: detected capacity change from 0 to 512 [ 98.835028][ T6089] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.889548][ T6089] EXT4-fs (loop2): 1 truncate cleaned up [ 98.909500][ T6089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.987113][ T28] audit: type=1800 audit(1775722830.879:6): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.66" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 99.046717][ T28] audit: type=1800 audit(1775722830.909:7): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.66" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 99.531268][ T6084] loop1: detected capacity change from 0 to 131072 [ 99.541856][ T5804] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 99.553079][ T6084] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 99.563697][ T6084] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 99.575808][ T5804] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input9 [ 99.588884][ T6084] F2FS-fs (loop1): invalid crc value [ 99.606648][ T5770] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 99.630944][ T6084] F2FS-fs (loop1): Found nat_bits in checkpoint [ 99.709427][ T6084] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 99.716752][ T6084] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 100.030405][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.310881][ T6114] loop2: detected capacity change from 0 to 16 [ 100.340765][ T6114] erofs: (device loop2): mounted with root inode @ nid 36. [ 100.592188][ T6118] loop2: detected capacity change from 0 to 128 [ 100.650653][ T6118] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 100.682317][ T6118] hpfs: filesystem error: improperly stopped [ 100.707367][ T6118] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 100.722865][ T6118] hpfs: You really don't want any checks? You are crazy... [ 100.730490][ T6118] hpfs: Code page index out of array [ 100.740625][ T6118] hpfs: code page support is disabled [ 100.748513][ T6118] hpfs: hpfs_map_4sectors(): unaligned read [ 100.761047][ T6118] hpfs: hpfs_map_4sectors(): unaligned read [ 100.767851][ T6118] hpfs: filesystem error: unable to find root dir [ 101.274079][ T6123] loop1: detected capacity change from 0 to 32768 [ 101.294574][ T6123] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 101.309375][ T6123] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 101.408138][ T6123] XFS (loop1): Ending clean mount [ 101.439856][ T6123] XFS (loop1): Quotacheck needed: Please wait. [ 101.538319][ T6123] XFS (loop1): Quotacheck: Done. [ 101.855854][ T5765] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 102.616127][ T6138] loop0: detected capacity change from 0 to 131072 [ 102.626703][ T6138] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 102.635815][ T6138] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 102.649702][ T6138] F2FS-fs (loop0): invalid crc value [ 102.693878][ T6138] F2FS-fs (loop0): Found nat_bits in checkpoint [ 102.755631][ T6138] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 102.763108][ T6138] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 103.668425][ T6172] loop3: detected capacity change from 0 to 8192 [ 103.734903][ T6172] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 103.841245][ T6172] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 103.887570][ T6172] REISERFS (device loop3): using ordered data mode [ 103.979199][ T6172] reiserfs: using flush barriers [ 103.999451][ T6180] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 104.009937][ T6172] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 104.082772][ T6172] REISERFS (device loop3): checking transaction log (loop3) [ 104.128524][ T6172] REISERFS (device loop3): Using r5 hash to sort names [ 104.157942][ T6172] REISERFS (device loop3): using 3.5.x disk format [ 104.212754][ T6172] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 104.479142][ T6186] loop1: detected capacity change from 0 to 4096 [ 104.517001][ T6190] input: syz0 as /devices/virtual/input/input10 [ 104.663614][ T6186] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 105.003502][ T6204] loop0: detected capacity change from 0 to 128 [ 105.045656][ T6204] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 105.069917][ T6204] sysv_free_block: flc_count > flc_size [ 105.106125][ T6204] sysv_free_block: flc_count > flc_size [ 105.122349][ T6204] sysv_free_block: flc_count > flc_size [ 105.129376][ T6204] sysv_free_block: flc_count > flc_size [ 105.136638][ T6204] sysv_free_block: flc_count > flc_size [ 105.143562][ T6204] sysv_free_block: flc_count > flc_size [ 105.144265][ T6202] loop2: detected capacity change from 0 to 8192 [ 105.150275][ T6204] sysv_free_block: flc_count > flc_size [ 105.176326][ T6204] sysv_free_block: flc_count > flc_size [ 105.205679][ T6204] sysv_free_block: flc_count > flc_size [ 105.222528][ T6204] sysv_free_block: flc_count > flc_size [ 105.274950][ T6204] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 105.382286][ T28] audit: type=1800 audit(1775722837.269:8): pid=6202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.94" name="file2" dev="loop2" ino=1048592 res=0 errno=0 [ 105.419757][ T6202] syz.2.94: attempt to access beyond end of device [ 105.419757][ T6202] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 105.454101][ T6202] Buffer I/O error on dev loop2, logical block 57847, async page read [ 105.548131][ T6201] syz.2.94: attempt to access beyond end of device [ 105.548131][ T6201] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 105.605803][ T6201] Buffer I/O error on dev loop2, logical block 57847, async page read [ 105.645769][ T6201] syz.2.94: attempt to access beyond end of device [ 105.645769][ T6201] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 105.692937][ T6201] Buffer I/O error on dev loop2, logical block 57847, async page read [ 105.731634][ T6213] syz.2.94: attempt to access beyond end of device [ 105.731634][ T6213] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 105.795699][ T6213] Buffer I/O error on dev loop2, logical block 57847, async page read [ 105.867219][ T6202] syz.2.94: attempt to access beyond end of device [ 105.867219][ T6202] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 105.915129][ T6227] loop0: detected capacity change from 0 to 128 [ 105.915770][ T6202] Buffer I/O error on dev loop2, logical block 57847, async page read [ 105.993699][ T6202] syz.2.94: attempt to access beyond end of device [ 105.993699][ T6202] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 106.020790][ T6227] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.022633][ T6202] Buffer I/O error on dev loop2, logical block 57847, async page read [ 106.036765][ T6227] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.076618][ T6202] syz.2.94: attempt to access beyond end of device [ 106.076618][ T6202] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 106.092436][ T6202] Buffer I/O error on dev loop2, logical block 57847, async page read [ 106.103147][ T6202] syz.2.94: attempt to access beyond end of device [ 106.103147][ T6202] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 106.119918][ T6202] Buffer I/O error on dev loop2, logical block 57847, async page read [ 106.133352][ T6201] syz.2.94: attempt to access beyond end of device [ 106.133352][ T6201] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 106.155611][ T3061] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.172014][ T5763] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.175600][ T6201] Buffer I/O error on dev loop2, logical block 57847, async page read [ 106.201874][ T6201] syz.2.94: attempt to access beyond end of device [ 106.201874][ T6201] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 106.218566][ T6201] Buffer I/O error on dev loop2, logical block 57847, async page read [ 106.357512][ T3061] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.375538][ T3061] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.405644][ T3061] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 106.423529][ T6214] loop3: detected capacity change from 0 to 32768 [ 106.432186][ T3061] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.446250][ T6214] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.96 (6214) [ 106.468702][ T3061] usb 2-1: config 0 descriptor?? [ 106.479101][ T6214] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.510205][ T6214] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 106.531242][ T6214] BTRFS info (device loop3): turning off barriers [ 106.544740][ T6214] BTRFS info (device loop3): setting nodatasum [ 106.556068][ T6214] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 106.567733][ T6214] BTRFS info (device loop3): use zstd compression, level 3 [ 106.595801][ T5829] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.605205][ T6214] BTRFS info (device loop3): using free space tree [ 106.810113][ T5829] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 106.831451][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.851826][ T5829] usb 1-1: Product: syz [ 106.862019][ T5829] usb 1-1: Manufacturer: syz [ 106.872783][ T5829] usb 1-1: SerialNumber: syz [ 106.904867][ T5829] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 107.004935][ T5764] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.012031][ T27] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 107.106163][ T3061] usb 2-1: string descriptor 0 read error: -22 [ 107.165774][ T5753] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (5753) [ 107.321712][ T3061] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0004/input/input11 [ 107.445362][ T3061] uclogic 0003:256C:006D.0004: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 107.661476][ T3061] usb 2-1: USB disconnect, device number 4 [ 107.706247][ T5798] usb 1-1: USB disconnect, device number 3 [ 107.801621][ T6259] loop3: detected capacity change from 0 to 8192 [ 107.828753][ T6259] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 107.847609][ T6259] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 107.858504][ T6259] REISERFS (device loop3): using ordered data mode [ 107.865235][ T6259] reiserfs: using flush barriers [ 107.872910][ T6259] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 107.890578][ T6259] REISERFS (device loop3): checking transaction log (loop3) [ 107.907058][ T6259] REISERFS (device loop3): Using r5 hash to sort names [ 107.927539][ T6259] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 108.299230][ T27] usb 1-1: Service connection timeout for: 256 [ 108.329941][ T27] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 108.359131][ T27] ath9k_htc: Failed to initialize the device [ 108.377686][ T6268] loop3: detected capacity change from 0 to 16 [ 108.391731][ T5798] usb 1-1: ath9k_htc: USB layer deinitialized [ 108.401781][ T6268] erofs: (device loop3): mounted with root inode @ nid 36. [ 108.631198][ T6262] loop2: detected capacity change from 0 to 32768 [ 108.649846][ T6272] loop1: detected capacity change from 0 to 4096 [ 108.668528][ T6274] mac80211_hwsim hwsim7 : renamed from wlan1 (while UP) [ 108.697060][ T6262] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 108.850508][ T6287] loop0: detected capacity change from 0 to 16 [ 108.865428][ T6287] erofs: (device loop0): mounted with root inode @ nid 36. [ 108.925737][ T6262] XFS (loop2): Ending clean mount [ 108.980958][ T6262] XFS (loop2): Quotacheck needed: Please wait. [ 109.046481][ T28] audit: type=1800 audit(1775722840.939:9): pid=6272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.112" name="file1" dev="loop1" ino=0 res=0 errno=0 [ 109.154266][ T28] audit: type=1800 audit(1775722840.969:10): pid=6272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.112" name="file1" dev="loop1" ino=0 res=0 errno=0 [ 109.178247][ T6262] XFS (loop2): Quotacheck: Done. [ 109.346895][ T5762] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.532002][ T43] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 109.566997][ T6299] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 109.816260][ T6302] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 110.214670][ T6317] ALSA: seq fatal error: cannot create timer (-16) [ 110.237955][ T6319] loop0: detected capacity change from 0 to 256 [ 110.291513][ T6319] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.432084][ T6319] FAT-fs (loop0): error, invalid FAT chain (i_pos 196, last_block 8200) [ 110.445552][ T6319] FAT-fs (loop0): Filesystem has been set read-only [ 110.820183][ T6323] loop2: detected capacity change from 0 to 32768 [ 110.839643][ T6323] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 110.986307][ T6333] Illegal XDP return value 4294967274 on prog (id 6) dev syz_tun, expect packet loss! [ 111.085118][ T5753] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 111.248561][ T6344] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.337117][ T5829] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.502795][ T5804] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.525587][ T5829] usb 4-1: Using ep0 maxpacket: 8 [ 111.533517][ T5829] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 111.534985][ T6351] loop0: detected capacity change from 0 to 4096 [ 111.545353][ T5829] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 111.560747][ T5829] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 111.574874][ T5829] usb 4-1: config 250 has no interface number 0 [ 111.587753][ T5829] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 111.605996][ T5829] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 111.629979][ T6354] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.637262][ T5829] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 28276, setting to 1024 [ 111.690426][ T6351] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 111.697593][ T5829] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 111.719821][ T5804] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 111.731759][ T5829] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 111.749479][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.785915][ T5804] usb 2-1: config 0 descriptor?? [ 111.787247][ T5829] usb 4-1: config 250 interface 228 has no altsetting 0 [ 111.807337][ T5804] cp210x 2-1:0.0: cp210x converter detected [ 111.817492][ T5829] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 111.822535][ T6357] loop2: detected capacity change from 0 to 512 [ 111.835712][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 111.854690][ T5829] usb 4-1: Product: syz [ 111.860046][ T5829] usb 4-1: SerialNumber: syz [ 111.890283][ T5829] hub 4-1:250.228: bad descriptor, ignoring hub [ 111.913094][ T5829] hub: probe of 4-1:250.228 failed with error -5 [ 111.967672][ T6357] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 112.016034][ T6357] EXT4-fs error (device loop2): ext4_iget_extra_inode:4732: inode #15: comm syz.2.144: corrupted in-inode xattr: e_value size too large [ 112.035628][ T6357] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.144: couldn't read orphan inode 15 (err -117) [ 112.069681][ T6357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.122937][ T5829] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 112.226953][ T5804] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 112.251359][ T5804] usb 2-1: cp210x converter now attached to ttyUSB0 [ 112.293622][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.398086][ T5829] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 112.442601][ T5804] usb 2-1: USB disconnect, device number 5 [ 112.471686][ T5804] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 112.519609][ T5804] cp210x 2-1:0.0: device disconnected [ 112.580463][ T6362] loop0: detected capacity change from 0 to 40427 [ 112.593773][ T6362] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 112.614801][ T6362] F2FS-fs (loop0): invalid crc value [ 112.637748][ T6362] F2FS-fs (loop0): Found nat_bits in checkpoint [ 112.694460][ T6362] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 112.815029][ T5763] bio_check_eod: 2019 callbacks suppressed [ 112.815045][ T5763] syz-executor: attempt to access beyond end of device [ 112.815045][ T5763] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 112.838381][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.849032][ T5763] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 113.035710][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 113.059142][ T27] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 113.085566][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.121183][ T27] usb 3-1: Product: syz [ 113.126912][ T27] usb 3-1: Manufacturer: syz [ 113.131988][ T27] usb 3-1: SerialNumber: syz [ 113.145524][ T28] audit: type=1326 audit(1775722845.019:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.1.149" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97daf9c819 code=0x0 [ 113.175891][ T27] usb 3-1: config 0 descriptor?? [ 113.253323][ T6377] netlink: 'syz.0.148': attribute type 1 has an invalid length. [ 113.290678][ C1] usblp0: nonzero read bulk status received: -71 [ 113.337873][ T5804] usb 4-1: USB disconnect, device number 4 [ 113.372344][ T5804] usblp0: removed [ 113.415040][ T27] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 113.815679][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 113.831129][ T6388] loop0: detected capacity change from 0 to 128 [ 113.842207][ T6388] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 113.899174][ T6388] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.035780][ T6391] capability: warning: `syz.3.154' uses deprecated v2 capabilities in a way that may be insecure [ 114.237811][ T27] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 114.259908][ T27] usb 3-1: USB disconnect, device number 4 [ 114.936845][ T6412] loop1: detected capacity change from 0 to 32768 [ 115.298674][ T6412] ERROR: (device loop1): dbAdjCtl: the maximum free buddy is not the old root [ 115.298674][ T6412] [ 115.312532][ T6412] ERROR: (device loop1): remounting filesystem as read-only [ 115.571002][ T6421] loop0: detected capacity change from 0 to 2048 [ 115.690632][ T6421] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 115.737002][ T6423] bridge_slave_0: left allmulticast mode [ 115.746183][ T6423] bridge_slave_0: left promiscuous mode [ 115.766709][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.802473][ T6424] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.822839][ T5755] udevd[5755]: incorrect nilfs2 checksum on /dev/loop0 [ 115.870439][ T6423] bridge_slave_1: left allmulticast mode [ 115.886378][ T6427] loop3: detected capacity change from 0 to 128 [ 115.899788][ T6423] bridge_slave_1: left promiscuous mode [ 115.936956][ T6427] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.939734][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.004642][ T6427] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.092281][ T6423] bond0: (slave bond_slave_0): Releasing backup interface [ 116.174676][ T6423] bond0: (slave bond_slave_1): Releasing backup interface [ 116.244992][ T5764] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.392106][ T6423] team0: Port device team_slave_0 removed [ 116.420355][ T6423] team0: Port device team_slave_1 removed [ 116.456499][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.502843][ T6423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.543157][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.572648][ T6423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.897690][ T6449] loop0: detected capacity change from 0 to 131072 [ 117.925404][ T6449] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 117.933713][ T6449] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 117.974774][ T6449] F2FS-fs (loop0): invalid crc value [ 118.014122][ T6449] F2FS-fs (loop0): Found nat_bits in checkpoint [ 118.067661][ T6449] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 118.074822][ T6449] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 118.122511][ T28] audit: type=1800 audit(1775722849.999:12): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.175" name="file2" dev="loop0" ino=8 res=0 errno=0 [ 119.535837][ T6467] loop2: detected capacity change from 0 to 1024 [ 119.558252][ T6467] EXT4-fs: inline encryption not supported [ 119.589870][ T6467] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.675686][ T6467] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.745802][ T6467] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 119.792011][ T6467] System zones: 0-1, 3-36 [ 119.808936][ T6469] loop1: detected capacity change from 0 to 1024 [ 119.820089][ T6469] EXT4-fs: Ignoring removed orlov option [ 119.844970][ T6467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.915910][ T6469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.240744][ T6469] EXT4-fs error (device loop1): __ext4_new_inode:1290: comm syz.1.182: failed to insert inode 15: doubly allocated? [ 120.297424][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.430902][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.505386][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 120.675658][ T5805] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 120.845627][ T5829] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 120.877514][ T5805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.900471][ T5805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.931661][ T5805] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 120.945902][ T5805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.978900][ T5805] usb 1-1: config 0 descriptor?? [ 121.060714][ T5829] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 121.072237][ T5829] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 121.083374][ T5829] usb 2-1: Product: syz [ 121.090030][ T5829] usb 2-1: Manufacturer: syz [ 121.105825][ T5829] usb 2-1: SerialNumber: syz [ 121.135819][ T5829] usb 2-1: config 0 descriptor?? [ 121.165250][ T5829] ch341 2-1:0.0: ch341-uart converter detected [ 121.457353][ T5805] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 121.481598][ T5805] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 121.495581][ T5804] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 121.509999][ T6492] loop3: detected capacity change from 0 to 40427 [ 121.533704][ T6492] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 121.549491][ T6492] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 121.564635][ T6492] F2FS-fs (loop3): invalid crc value [ 121.660557][ T5805] cp2112 0003:10C4:EA90.0005: error requesting version [ 121.687568][ T5805] cp2112: probe of 0003:10C4:EA90.0005 failed with error -71 [ 121.690306][ T5804] usb 3-1: Using ep0 maxpacket: 8 [ 121.698406][ T6492] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 121.703459][ T5804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.721325][ T5804] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 121.724135][ T5805] usb 1-1: USB disconnect, device number 4 [ 121.731745][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.733938][ T5804] usb 3-1: config 0 descriptor?? [ 121.749496][ T6492] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 121.870852][ T6492] syz.3.188: attempt to access beyond end of device [ 121.870852][ T6492] loop3: rw=2049, sector=53248, nr_sectors = 16 limit=40427 [ 121.914911][ T6492] syz.3.188: attempt to access beyond end of device [ 121.914911][ T6492] loop3: rw=2049, sector=53264, nr_sectors = 8 limit=40427 [ 121.938146][ T6492] syz.3.188: attempt to access beyond end of device [ 121.938146][ T6492] loop3: rw=2049, sector=53272, nr_sectors = 16 limit=40427 [ 121.980824][ T5804] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 122.002014][ T5764] syz-executor: attempt to access beyond end of device [ 122.002014][ T5764] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.027591][ T5764] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 122.409908][ T5829] ch341-uart ttyUSB0: failed to read break control: -71 [ 122.438952][ T5829] ch341-uart: probe of ttyUSB0 failed with error -71 [ 122.453189][ T27] usb 3-1: USB disconnect, device number 5 [ 122.476852][ T5829] usb 2-1: USB disconnect, device number 6 [ 122.495095][ T5829] ch341 2-1:0.0: device disconnected [ 122.972782][ T4089] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 123.018886][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 124.905969][ T5804] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.043693][ T6565] loop3: detected capacity change from 0 to 4096 [ 125.117662][ T5804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.163130][ T5804] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.217511][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.282655][ T5804] usb 1-1: config 0 descriptor?? [ 125.404518][ T6538] loop1: detected capacity change from 0 to 262144 [ 125.416289][ T6538] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 scanned by syz.1.203 (6538) [ 125.448027][ T6538] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 125.460420][ T6538] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 125.472652][ T6538] BTRFS info (device loop1): using free space tree [ 125.550386][ T5804] usbhid 1-1:0.0: can't add hid device: -71 [ 125.557414][ T5804] usbhid: probe of 1-1:0.0 failed with error -71 [ 125.570694][ T5804] usb 1-1: USB disconnect, device number 5 [ 125.597954][ T6538] BTRFS info (device loop1): enabling ssd optimizations [ 125.606115][ T6538] BTRFS info (device loop1): auto enabling async discard [ 125.748607][ T28] audit: type=1800 audit(1775722857.639:13): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.203" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 126.175671][ T5804] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 126.196654][ T5765] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 126.395657][ T5804] usb 1-1: Using ep0 maxpacket: 32 [ 126.430726][ T5804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.465549][ T5804] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 126.487172][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.524537][ T5804] usb 1-1: config 0 descriptor?? [ 126.539424][ T5804] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 126.572097][ T5753] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 10 /dev/loop1 scanned by udevd (5753) [ 126.580459][ T5804] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 126.709394][ T6589] futex_wake_op: syz.3.214 tries to shift op by -1; fix this program [ 126.866811][ T6597] netlink: 'syz.2.218': attribute type 1 has an invalid length. [ 126.947541][ T6597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.973660][ T6600] bond1: (slave geneve2): making interface the new active one [ 127.096339][ T5805] usb 1-1: USB disconnect, device number 6 [ 127.109044][ T6600] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 127.127287][ T5805] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 127.279530][ T6600] syz.2.218 (6600) used greatest stack depth: 20264 bytes left [ 127.448584][ T6604] loop1: detected capacity change from 0 to 2048 [ 127.514889][ T6604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.585024][ T6604] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.716181][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'. [ 127.904430][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.387891][ T6629] warning: `syz.1.226' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.544126][ T6639] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1574906631 (3149813262 ns) > initial count (1841593562 ns). Using initial count to start timer. [ 129.341542][ T6656] loop1: detected capacity change from 0 to 32768 [ 129.358657][ T6656] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.233 (6656) [ 129.395291][ T6656] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 129.411617][ T6656] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 129.428133][ T5805] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.449704][ T6656] BTRFS info (device loop1): using free space tree [ 129.524818][ T6656] BTRFS info (device loop1): enabling ssd optimizations [ 129.546707][ T6656] BTRFS info (device loop1): auto enabling async discard [ 129.637459][ T5805] usb 3-1: config 1 interface 0 has no altsetting 0 [ 129.659448][ T5805] usb 3-1: string descriptor 0 read error: -22 [ 129.675642][ T5805] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.40 [ 129.705532][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.825771][ T5765] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 130.064195][ T5753] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop1 scanned by udevd (5753) [ 130.159843][ T28] audit: type=1326 audit(1775722862.049:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.1.241" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97daf9c819 code=0x0 [ 130.283426][ T6696] loop3: detected capacity change from 0 to 64 [ 130.476850][ T5805] greenasia 0003:0E8F:0012.0006: global environment stack underflow [ 130.511527][ T5805] greenasia 0003:0E8F:0012.0006: item 0 4 1 11 parsing failed [ 130.537233][ T5805] greenasia 0003:0E8F:0012.0006: parse failed [ 130.544470][ T5805] greenasia: probe of 0003:0E8F:0012.0006 failed with error -22 [ 130.546241][ T28] audit: type=1800 audit(1775722862.429:15): pid=6696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.244" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 130.629929][ T28] audit: type=1800 audit(1775722862.499:16): pid=6696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.244" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 130.739335][ T5798] usb 3-1: USB disconnect, device number 6 [ 130.889817][ T6705] loop0: detected capacity change from 0 to 4096 [ 130.934472][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 132.001441][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805eb85400: rx timeout, send abort [ 132.502565][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021b95000: rx timeout, send abort [ 132.513545][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805eb85400: abort rx timeout. Force session deactivation [ 133.012280][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021b95000: abort rx timeout. Force session deactivation [ 133.262540][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.271490][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.346157][ T6785] input: syz1 as /devices/virtual/input/input12 [ 133.845414][ T6771] loop3: detected capacity change from 0 to 131072 [ 133.856713][ T6771] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 133.867410][ T6771] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 133.892797][ T6771] F2FS-fs (loop3): invalid crc value [ 133.911260][ T6771] F2FS-fs (loop3): Found nat_bits in checkpoint [ 133.977835][ T6771] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 133.985645][ T6771] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 134.103418][ T6795] bridge1: entered promiscuous mode [ 134.140326][ T6799] bridge0: port 1(gretap0) entered blocking state [ 134.151587][ T6799] bridge0: port 1(gretap0) entered disabled state [ 134.171308][ T6799] gretap0: entered allmulticast mode [ 134.193645][ T6799] gretap0: entered promiscuous mode [ 134.223175][ T6799] bridge0: port 1(gretap0) entered blocking state [ 134.232177][ T6799] bridge0: port 1(gretap0) entered forwarding state [ 134.279168][ T6801] gretap0: left allmulticast mode [ 134.296143][ T6801] gretap0: left promiscuous mode [ 134.302041][ T6801] bridge0: port 1(gretap0) entered disabled state [ 134.334252][ T6803] netlink: 20 bytes leftover after parsing attributes in process `syz.1.282'. [ 134.337579][ T965] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 134.560552][ T965] usb 1-1: config 1 has an invalid interface number: 6 but max is 1 [ 134.581639][ T965] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.598204][ T965] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 134.609038][ T965] usb 1-1: config 1 has no interface number 2 [ 134.617309][ T965] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.641310][ T965] usb 1-1: config 1 interface 6 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.685589][ T965] usb 1-1: config 1 interface 6 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.735673][ T965] usb 1-1: config 1 interface 6 has no altsetting 0 [ 134.752866][ T965] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.775829][ T965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.784866][ T965] usb 1-1: Product: syz [ 134.805437][ T965] usb 1-1: Manufacturer: syz [ 134.813688][ T965] usb 1-1: SerialNumber: syz [ 134.861039][ T965] usb 1-1: selecting invalid altsetting 1 [ 135.272928][ T965] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 135.284099][ T965] cdc_ncm 1-1:1.0: bind() failure [ 135.301132][ T965] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 135.317025][ T965] cdc_ncm 1-1:1.1: bind() failure [ 135.563318][ T965] usb 1-1: USB disconnect, device number 7 [ 135.793394][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'. [ 136.238524][ T5804] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 136.469211][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.503916][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.550504][ T5804] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 136.575598][ T5804] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 136.604561][ T5804] usb 2-1: Manufacturer: syz [ 136.625657][ T5804] usb 2-1: config 0 descriptor?? [ 136.903325][ T6869] loop0: detected capacity change from 0 to 64 [ 137.256419][ T6874] loop3: detected capacity change from 0 to 1024 [ 137.668848][ T11] hfsplus: b-tree write err: -5, ino 3 [ 137.695005][ T5804] uclogic 0003:256C:006D.0007: v1 frame probing failed: -71 [ 137.710004][ T5804] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 137.731328][ T5764] hfsplus: node 4:3 still has 2 user(s)! [ 137.738189][ T5804] uclogic: probe of 0003:256C:006D.0007 failed with error -71 [ 137.760116][ T5804] usb 2-1: USB disconnect, device number 7 [ 137.953522][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 137.967080][ T6891] netlink: 'syz.2.313': attribute type 18 has an invalid length. [ 137.982133][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 138.014657][ T6891] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.026027][ T6891] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.035949][ T6891] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.045709][ T6891] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.061832][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 138.076193][ T6891] netlink: 'syz.2.313': attribute type 18 has an invalid length. [ 138.086720][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 138.099429][ T6891] Zero length message leads to an empty skb [ 138.627049][ T965] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 138.771766][ T6916] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 138.849410][ T965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.895650][ T965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.946160][ T965] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.976647][ T965] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.006508][ T965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.033614][ T965] usb 2-1: config 0 descriptor?? [ 139.086113][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.327'. [ 139.132686][ T6925] loop3: detected capacity change from 0 to 2048 [ 139.197244][ T6925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.321785][ T6924] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 139.470575][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.503840][ T965] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 139.552321][ T965] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 139.601651][ T965] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 139.879807][ T5805] usb 2-1: USB disconnect, device number 8 [ 140.455801][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 140.593845][ T6975] loop1: detected capacity change from 0 to 1024 [ 140.615782][ T5798] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 140.628761][ T6975] hfsplus: can't free extent [ 140.646620][ T28] audit: type=1800 audit(1775722872.539:17): pid=6975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.345" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 140.675247][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.690840][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.707298][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 140.729239][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.743193][ T9] usb 3-1: config 0 descriptor?? [ 140.825878][ T5798] usb 1-1: Using ep0 maxpacket: 32 [ 140.841451][ T5798] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 140.859613][ T5798] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 140.870012][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 140.879188][ T5798] usb 1-1: Product: syz [ 140.895608][ T5798] usb 1-1: Manufacturer: syz [ 140.902426][ T5798] usb 1-1: SerialNumber: syz [ 140.931533][ T5798] usb 1-1: config 0 descriptor?? [ 140.937169][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 140.961783][ T6969] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 140.976024][ T5798] hub 1-1:0.0: bad descriptor, ignoring hub [ 140.982719][ T5798] hub: probe of 1-1:0.0 failed with error -5 [ 141.164791][ T9] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 141.201472][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0009/input/input15 [ 141.236382][ T5805] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 141.355124][ T9] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 141.415813][ T9] usb 3-1: USB disconnect, device number 7 [ 141.435661][ T5805] usb 2-1: Using ep0 maxpacket: 16 [ 141.465657][ T5805] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.485414][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.349'. [ 141.504117][ T5805] usb 2-1: config 0 interface 0 has no altsetting 0 [ 141.523435][ T6989] fido_id[6989]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 141.526636][ T5805] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 141.558681][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.576831][ T5805] usb 2-1: config 0 descriptor?? [ 141.615819][ T5829] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 141.633512][ T5829] usb 1-1: device reset changed ep0 maxpacket size! [ 141.644233][ T5829] usb 1-1: USB disconnect, device number 8 [ 142.027475][ T5829] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 142.069185][ T5805] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 142.285843][ T5829] usb 1-1: Using ep0 maxpacket: 16 [ 142.308373][ T5829] usb 1-1: config 0 has no interfaces? [ 142.348475][ T5829] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 142.367607][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.380535][ T5829] usb 1-1: Product: syz [ 142.390152][ T5829] usb 1-1: Manufacturer: syz [ 142.395420][ T5829] usb 1-1: SerialNumber: syz [ 142.413919][ T5829] usb 1-1: config 0 descriptor?? [ 142.593674][ T5804] usb 2-1: USB disconnect, device number 9 [ 142.689030][ T5829] usb 1-1: USB disconnect, device number 9 [ 142.788927][ T7013] syzkaller1: entered promiscuous mode [ 142.794819][ T7013] syzkaller1: entered allmulticast mode [ 143.535747][ T5804] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 143.739855][ T5804] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.755564][ T5804] usb 4-1: config 0 has no interface number 0 [ 143.762531][ T5804] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.774798][ T5804] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.786806][ T5804] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 143.796603][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.816879][ T5804] usb 4-1: config 0 descriptor?? [ 143.915894][ T7047] loop2: detected capacity change from 0 to 32768 [ 143.927069][ T7047] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 144.010390][ T5753] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 144.283415][ T5804] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.000B/input/input16 [ 144.444839][ T5804] holtek_kbd 0003:04D9:A055.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 144.506084][ T5804] usb 4-1: USB disconnect, device number 5 [ 144.730143][ T7064] fido_id[7064]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 145.363312][ T7095] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 145.933955][ T3489] Bluetooth: Error in BCSP hdr checksum [ 146.197019][ T4094] Bluetooth: Error in BCSP hdr checksum [ 146.350663][ T7109] loop0: detected capacity change from 0 to 32768 [ 146.411510][ T7109] JBD2: Ignoring recovery information on journal [ 146.449770][ T7109] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 146.580735][ T7127] [ 146.583265][ T7127] ====================================================== [ 146.590857][ T7127] WARNING: possible circular locking dependency detected [ 146.598273][ T7127] syzkaller #0 Not tainted [ 146.602888][ T7127] ------------------------------------------------------ [ 146.611149][ T7127] syz.0.392/7127 is trying to acquire lock: [ 146.617188][ T7118] loop1: detected capacity change from 0 to 32768 [ 146.617470][ T7127] ffff88805d29b120 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 146.635260][ T7127] [ 146.635260][ T7127] but task is already holding lock: [ 146.641329][ T7118] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 146.642848][ T7127] ffff88805d29b1b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x340 [ 146.665360][ T7127] [ 146.665360][ T7127] which lock already depends on the new lock. [ 146.665360][ T7127] [ 146.676048][ T7127] [ 146.676048][ T7127] the existing dependency chain (in reverse order) is: [ 146.685924][ T7127] [ 146.685924][ T7127] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 146.694801][ T7127] down_read+0x46/0x2e0 [ 146.699771][ T7127] ocfs2_init_acl+0x30a/0x770 [ 146.705343][ T7127] ocfs2_mknod+0x140f/0x2300 [ 146.711099][ T7127] ocfs2_create+0x196/0x430 [ 146.717488][ T7127] path_openat+0x12a0/0x3230 [ 146.723130][ T7127] do_filp_open+0x1f5/0x430 [ 146.728950][ T7127] do_sys_openat2+0x134/0x1d0 [ 146.734961][ T7127] __x64_sys_openat+0x139/0x160 [ 146.741386][ T7127] do_syscall_64+0x55/0xa0 [ 146.752345][ T7127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.759960][ T7127] [ 146.759960][ T7127] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 146.770673][ T7127] down_read+0x46/0x2e0 [ 146.775982][ T7127] ocfs2_start_trans+0x3a8/0x6f0 [ 146.781684][ T7127] ocfs2_modify_bh+0xe4/0x4c0 [ 146.787416][ T7127] ocfs2_local_read_info+0x1445/0x1800 [ 146.793688][ T7127] dquot_load_quota_sb+0x757/0xb80 [ 146.799785][ T7127] dquot_load_quota_inode+0x2dc/0x5d0 [ 146.806118][ T7127] ocfs2_enable_quotas+0x1c9/0x490 [ 146.812382][ T7127] ocfs2_fill_super+0x417d/0x5010 [ 146.818992][ T7127] mount_bdev+0x221/0x2d0 [ 146.825048][ T7127] legacy_get_tree+0xea/0x180 [ 146.831235][ T7127] vfs_get_tree+0x8c/0x280 [ 146.836375][ T7127] do_new_mount+0x24b/0xa40 [ 146.841743][ T7127] __se_sys_mount+0x2e7/0x3d0 [ 146.847471][ T7127] do_syscall_64+0x55/0xa0 [ 146.852955][ T7127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.859858][ T7127] [ 146.859858][ T7127] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 146.867454][ T7127] ocfs2_start_trans+0x2a9/0x6f0 [ 146.873177][ T7127] ocfs2_truncate_file+0x631/0x1440 [ 146.879425][ T7127] ocfs2_setattr+0x158d/0x1bc0 [ 146.885409][ T7127] notify_change+0xb0d/0xe10 [ 146.890962][ T7127] do_truncate+0x1b0/0x240 [ 146.896954][ T7127] path_openat+0x2a32/0x3230 [ 146.902260][ T7127] do_filp_open+0x1f5/0x430 [ 146.907533][ T7127] do_sys_openat2+0x134/0x1d0 [ 146.912742][ T7127] __x64_sys_openat+0x139/0x160 [ 146.918375][ T7127] do_syscall_64+0x55/0xa0 [ 146.924362][ T7127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.931128][ T7127] [ 146.931128][ T7127] -> #0 (&oi->ip_alloc_sem){+.+.}-{3:3}: [ 146.939031][ T7127] __lock_acquire+0x2df1/0x7d40 [ 146.944404][ T7127] lock_acquire+0x19e/0x420 [ 146.949627][ T7127] down_write+0x97/0x200 [ 146.955362][ T7127] ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 146.962125][ T7127] ocfs2_truncate_file+0xde5/0x1440 [ 146.968049][ T7127] ocfs2_setattr+0x158d/0x1bc0 [ 146.973599][ T7127] notify_change+0xb0d/0xe10 [ 146.978911][ T7127] do_truncate+0x1b0/0x240 [ 146.983850][ T7127] path_openat+0x2a32/0x3230 [ 146.989157][ T7127] do_filp_open+0x1f5/0x430 [ 146.994473][ T7127] do_sys_openat2+0x134/0x1d0 [ 147.000197][ T7127] __x64_sys_openat+0x139/0x160 [ 147.006111][ T7127] do_syscall_64+0x55/0xa0 [ 147.011329][ T7127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.018304][ T7127] [ 147.018304][ T7127] other info that might help us debug this: [ 147.018304][ T7127] [ 147.028932][ T7127] Chain exists of: [ 147.028932][ T7127] &oi->ip_alloc_sem --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 147.028932][ T7127] [ 147.043565][ T7127] Possible unsafe locking scenario: [ 147.043565][ T7127] [ 147.051715][ T7127] CPU0 CPU1 [ 147.057252][ T7127] ---- ---- [ 147.062696][ T7127] lock(&oi->ip_xattr_sem); [ 147.067357][ T7127] lock(&journal->j_trans_barrier); [ 147.075868][ T7127] lock(&oi->ip_xattr_sem); [ 147.083945][ T7127] lock(&oi->ip_alloc_sem); [ 147.088834][ T7127] [ 147.088834][ T7127] *** DEADLOCK *** [ 147.088834][ T7127] [ 147.097161][ T7127] 3 locks held by syz.0.392/7127: [ 147.102449][ T7127] #0: ffff88805cdb0418 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 147.112077][ T7127] #1: ffff88805d29b498 (&sb->s_type->i_mutex_key#25){+.+.}-{3:3}, at: do_truncate+0x19c/0x240 [ 147.123590][ T7127] #2: ffff88805d29b1b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x340 [ 147.134909][ T7127] [ 147.134909][ T7127] stack backtrace: [ 147.141192][ T7127] CPU: 1 PID: 7127 Comm: syz.0.392 Not tainted syzkaller #0 [ 147.149439][ T7127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 147.160367][ T7127] Call Trace: [ 147.163824][ T7127] [ 147.166839][ T7127] dump_stack_lvl+0x18c/0x250 [ 147.171791][ T7127] ? load_image+0x420/0x420 [ 147.176570][ T7127] ? show_regs_print_info+0x20/0x20 [ 147.182141][ T7127] ? print_circular_bug+0x12b/0x1a0 [ 147.187875][ T7127] check_noncircular+0x2fc/0x400 [ 147.193097][ T7127] ? print_deadlock_bug+0x5d0/0x5d0 [ 147.198288][ T7127] ? lockdep_lock+0xf5/0x230 [ 147.203256][ T7127] ? lockdep_unlock+0x146/0x2e0 [ 147.208527][ T7127] ? _find_first_zero_bit+0xd3/0x100 [ 147.214101][ T7127] __lock_acquire+0x2df1/0x7d40 [ 147.219259][ T7127] ? verify_lock_unused+0x140/0x140 [ 147.225178][ T7127] lock_acquire+0x19e/0x420 [ 147.229858][ T7127] ? ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 147.236367][ T7127] ? __might_sleep+0xe0/0xe0 [ 147.241043][ T7127] ? read_lock_is_recursive+0x20/0x20 [ 147.246589][ T7127] down_write+0x97/0x200 [ 147.250839][ T7127] ? ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 147.257185][ T7127] ? down_read_killable+0x340/0x340 [ 147.262643][ T7127] ? ocfs2_truncate_file+0xd0b/0x1440 [ 147.268352][ T7127] ? __lock_acquire+0x7d40/0x7d40 [ 147.274152][ T7127] ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 147.280859][ T7127] ? ocfs2_remove_refcount_tree+0xe50/0xe50 [ 147.287069][ T7127] ? up_write+0x1c3/0x410 [ 147.291498][ T7127] ocfs2_truncate_file+0xde5/0x1440 [ 147.296802][ T7127] ? ocfs2_simple_size_update+0x4a0/0x4a0 [ 147.302882][ T7127] ? do_raw_spin_unlock+0x121/0x230 [ 147.308447][ T7127] ? _raw_spin_unlock+0x28/0x40 [ 147.313384][ T7127] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 147.319289][ T7127] ? ocfs2_inode_lock_atime+0x530/0x530 [ 147.325195][ T7127] ? ocfs2_rw_lock+0x138/0x250 [ 147.330321][ T7127] ? dquot_initialize+0x20/0x20 [ 147.335458][ T7127] ? ocfs2_create_new_inode_locks+0x690/0x690 [ 147.341639][ T7127] ? setattr_prepare+0x1e6/0xac0 [ 147.346701][ T7127] ? jbd2_journal_begin_ordered_truncate+0xbb/0x150 [ 147.353929][ T7127] ocfs2_setattr+0x158d/0x1bc0 [ 147.358825][ T7127] ? ocfs2_extend_allocation+0x1840/0x1840 [ 147.364945][ T7127] ? ktime_get_coarse_real_ts64+0x3a/0x120 [ 147.371308][ T7127] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 147.377825][ T7127] ? ktime_get_coarse_real_ts64+0x110/0x120 [ 147.384612][ T7127] ? current_time+0x195/0x280 [ 147.390107][ T7127] ? inode_set_ctime_current+0x2e0/0x2e0 [ 147.396183][ T7127] ? evm_inode_setattr+0x94/0x6a0 [ 147.402073][ T7127] ? bpf_lsm_inode_setattr+0x9/0x10 [ 147.408038][ T7127] ? try_break_deleg+0x79/0x120 [ 147.413910][ T7127] ? ocfs2_extend_allocation+0x1840/0x1840 [ 147.419901][ T7127] notify_change+0xb0d/0xe10 [ 147.425222][ T7127] do_truncate+0x1b0/0x240 [ 147.430214][ T7127] ? put_page_bootmem+0x2c0/0x2c0 [ 147.435425][ T7127] ? apparmor_file_truncate+0x24a/0x2e0 [ 147.441080][ T7127] ? ima_bprm_check+0x200/0x200 [ 147.446294][ T7127] path_openat+0x2a32/0x3230 [ 147.451071][ T7127] ? verify_lock_unused+0x140/0x140 [ 147.456884][ T7127] ? do_filp_open+0x430/0x430 [ 147.462175][ T7127] ? __virt_addr_valid+0x18c/0x540 [ 147.467475][ T7127] do_filp_open+0x1f5/0x430 [ 147.471982][ T7127] ? vfs_tmpfile+0x490/0x490 [ 147.476920][ T7127] ? _raw_spin_unlock+0x28/0x40 [ 147.481975][ T7127] ? alloc_fd+0x58f/0x630 [ 147.487732][ T7127] do_sys_openat2+0x134/0x1d0 [ 147.492689][ T7127] ? do_sys_open+0xe0/0xe0 [ 147.497110][ T7127] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 147.503688][ T7127] ? lock_chain_count+0x20/0x20 [ 147.508944][ T7127] __x64_sys_openat+0x139/0x160 [ 147.514423][ T7127] do_syscall_64+0x55/0xa0 [ 147.519022][ T7127] ? clear_bhb_loop+0x40/0x90 [ 147.524043][ T7127] ? clear_bhb_loop+0x40/0x90 [ 147.529154][ T7127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.535565][ T7127] RIP: 0033:0x7f018059c819 [ 147.540180][ T7127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.561383][ T7127] RSP: 002b:00007f0181505028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 147.570693][ T7127] RAX: ffffffffffffffda RBX: 00007f0180816090 RCX: 00007f018059c819 [ 147.578955][ T7127] RDX: 000000000000275a RSI: 0000200000000000 RDI: ffffffffffffff9c [ 147.587650][ T7127] RBP: 00007f0180632c91 R08: 0000000000000000 R09: 0000000000000000 [ 147.596157][ T7127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.605195][ T7127] R13: 00007f0180816128 R14: 00007f0180816090 R15: 00007ffd922bd428 [ 147.614414][ T7127] [ 147.659089][ T5769] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 147.776881][ T5763] ocfs2: Unmounting device (7,0) on (node local)