last executing test programs: 3.117078655s ago: executing program 2 (id=256): r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x1ff, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) 2.581637773s ago: executing program 2 (id=260): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="9f01"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 2.342495086s ago: executing program 1 (id=264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000001000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a003400020202020202000008004a0008ac0f00100049"], 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000800) 2.234500578s ago: executing program 1 (id=267): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000600)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x3, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x8, @local, @rand_addr=0x64010100, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x5, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x1}]}}}}}}}, 0x0) 2.06357615s ago: executing program 1 (id=270): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x41f, &(0x7f000000a9c0)={0x0, 0x46b0}, &(0x7f000000aa40), &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) 1.905165542s ago: executing program 1 (id=273): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000004c0)) sendmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x80) 1.662375286s ago: executing program 1 (id=274): socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x3, r0, &(0x7f0000000080), 0x0) 1.466089439s ago: executing program 1 (id=275): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000400)={0x40, 0x16, 0x10, "a191a131cb863711825f3bfd17315622"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.263404132s ago: executing program 0 (id=279): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") 1.140040484s ago: executing program 0 (id=280): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) 1.062532985s ago: executing program 2 (id=283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x2) 878.477728ms ago: executing program 2 (id=285): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000e68e04"]) 820.052018ms ago: executing program 0 (id=287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x4c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}], @NL80211_ATTR_SSID={0x5, 0x34, @random='\a'}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2000, 0x0, 0x7, 0x0, {0x7f, 0x3, 0x0, 0x155}, 0x8, 0x800, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008800}, 0x40080) 713.72693ms ago: executing program 0 (id=288): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000005c0)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, 0x0) 684.4537ms ago: executing program 3 (id=289): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7, 0xfffffffffffffffb, 0x0, 0xa, 0x5, 0x1c, "ffffffff00000004ddb49a000000000000000000f8e50008000001000000800000000004001dff00e8a9a4b60007ffffff00000000000000299b00", "2809e8dbe108598948f8ffd54a07c21d7d3d458dd4992861ac00000080ffffffffffffff00", "90be8bf4bd00000000000000000000000000001000", [0x8000000000000000]}}) 620.964301ms ago: executing program 3 (id=290): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c8013000c800c00058008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f984967500002"], 0x270}}, 0x0) 609.988241ms ago: executing program 2 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 496.142083ms ago: executing program 0 (id=292): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000004480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x7351, 0x8001) ioctl$FITRIM(r0, 0x40406f06, &(0x7f00000000c0)={0x86, 0x7e4000, 0x20}) 495.794173ms ago: executing program 2 (id=293): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x5, 0x3, 0x9, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x58, 0x4, 0x0, 0x1000, 0x1, {0x6, 0xc, 0x4, 0x4}, 0x0, 0x0}}) 426.060024ms ago: executing program 3 (id=294): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000240)="ce010000009a697f65360c5e86dd", 0x0, 0x1fe7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 295.954066ms ago: executing program 3 (id=295): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000), &(0x7f0000000040)=0x8) 249.877287ms ago: executing program 3 (id=296): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001300)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x1}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x0) 162.144338ms ago: executing program 3 (id=297): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) open_by_handle_at(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="1453b8ded6a0cf2ba62664000000010000001500000010000400060000"], 0x60380) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x8}}, 0x20) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) ioctl$TIOCMGET(r5, 0x5415, 0x0) symlink(0x0, &(0x7f00000000c0)='./file1\x00') listen(r0, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, 0x0, 0x0) 0s ago: executing program 0 (id=298): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x58, r0, 0x801, 0x200000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x58}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts. [ 66.283322][ T5778] cgroup: Unknown subsys name 'net' [ 66.423396][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.774832][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.248815][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.257424][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.266763][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.274260][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.283098][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.291102][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.293787][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.299410][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.313087][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.313685][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.322609][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.328531][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.336253][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.342605][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.350440][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.357428][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.363309][ T5800] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.377748][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.400017][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.445193][ T5800] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.455310][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.455906][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.463744][ T5800] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.477222][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.854816][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 69.967287][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 69.986106][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 70.023411][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 70.088157][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.095499][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.103754][ T5788] bridge_slave_0: entered allmulticast mode [ 70.111747][ T5788] bridge_slave_0: entered promiscuous mode [ 70.149704][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.156940][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.164116][ T5788] bridge_slave_1: entered allmulticast mode [ 70.172009][ T5788] bridge_slave_1: entered promiscuous mode [ 70.260422][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.268027][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.275185][ T5791] bridge_slave_0: entered allmulticast mode [ 70.282318][ T5791] bridge_slave_0: entered promiscuous mode [ 70.290844][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.298132][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.305311][ T5791] bridge_slave_1: entered allmulticast mode [ 70.313601][ T5791] bridge_slave_1: entered promiscuous mode [ 70.333754][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.363329][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.370707][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.379037][ T5792] bridge_slave_0: entered allmulticast mode [ 70.385779][ T5792] bridge_slave_0: entered promiscuous mode [ 70.394830][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.413304][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.420578][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.428475][ T5793] bridge_slave_0: entered allmulticast mode [ 70.435216][ T5793] bridge_slave_0: entered promiscuous mode [ 70.453762][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.460995][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.468457][ T5792] bridge_slave_1: entered allmulticast mode [ 70.475146][ T5792] bridge_slave_1: entered promiscuous mode [ 70.494899][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.502417][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.509795][ T5793] bridge_slave_1: entered allmulticast mode [ 70.516621][ T5793] bridge_slave_1: entered promiscuous mode [ 70.525164][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.538724][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.570917][ T5788] team0: Port device team_slave_0 added [ 70.580189][ T5788] team0: Port device team_slave_1 added [ 70.623169][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.645461][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.657603][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.678300][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.700903][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.708003][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.734226][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.766371][ T5791] team0: Port device team_slave_0 added [ 70.781518][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.788699][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.814987][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.835763][ T5793] team0: Port device team_slave_0 added [ 70.844459][ T5791] team0: Port device team_slave_1 added [ 70.879091][ T5793] team0: Port device team_slave_1 added [ 70.907940][ T5792] team0: Port device team_slave_0 added [ 70.914447][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.922241][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.948485][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.973884][ T5792] team0: Port device team_slave_1 added [ 70.980421][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.987560][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.015884][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.038154][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.045160][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.071552][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.111382][ T5788] hsr_slave_0: entered promiscuous mode [ 71.117904][ T5788] hsr_slave_1: entered promiscuous mode [ 71.125064][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.132153][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.158397][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.186702][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.193694][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.219814][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.233082][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.240443][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.266559][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.342276][ T5793] hsr_slave_0: entered promiscuous mode [ 71.348691][ T5793] hsr_slave_1: entered promiscuous mode [ 71.355005][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.363420][ T5793] Cannot create hsr debugfs directory [ 71.396587][ T5800] Bluetooth: hci1: command tx timeout [ 71.411427][ T5791] hsr_slave_0: entered promiscuous mode [ 71.418107][ T5791] hsr_slave_1: entered promiscuous mode [ 71.424385][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.432430][ T5791] Cannot create hsr debugfs directory [ 71.475900][ T5794] Bluetooth: hci0: command tx timeout [ 71.477980][ T5800] Bluetooth: hci3: command tx timeout [ 71.514478][ T5792] hsr_slave_0: entered promiscuous mode [ 71.520891][ T5792] hsr_slave_1: entered promiscuous mode [ 71.528122][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.535994][ T5792] Cannot create hsr debugfs directory [ 71.556777][ T5800] Bluetooth: hci2: command tx timeout [ 71.722257][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.735127][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.865097][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.878774][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.897926][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.918310][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.967570][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.980795][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.991353][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.020049][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.072603][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.094989][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.125361][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.147502][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.193601][ T5792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.205403][ T5792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.217326][ T5792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.229144][ T5792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.330452][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.379127][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.442453][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.451738][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.459152][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.474658][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.481851][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.501887][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.552691][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.572472][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.597398][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.604523][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.616520][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.623674][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.639415][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.646612][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.669811][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.676992][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.725044][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.864286][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.919593][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.926795][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.990167][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.997377][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.257769][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.277708][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.302075][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.388903][ T5788] veth0_vlan: entered promiscuous mode [ 73.416341][ T5788] veth1_vlan: entered promiscuous mode [ 73.434597][ T5791] veth0_vlan: entered promiscuous mode [ 73.476507][ T5800] Bluetooth: hci1: command tx timeout [ 73.479334][ T5791] veth1_vlan: entered promiscuous mode [ 73.498791][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.526079][ T5788] veth0_macvtap: entered promiscuous mode [ 73.537337][ T5793] veth0_vlan: entered promiscuous mode [ 73.544140][ T5788] veth1_macvtap: entered promiscuous mode [ 73.556344][ T5800] Bluetooth: hci3: command tx timeout [ 73.562038][ T5794] Bluetooth: hci0: command tx timeout [ 73.569911][ T5793] veth1_vlan: entered promiscuous mode [ 73.623103][ T5791] veth0_macvtap: entered promiscuous mode [ 73.636301][ T5794] Bluetooth: hci2: command tx timeout [ 73.639065][ T5791] veth1_macvtap: entered promiscuous mode [ 73.652973][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.679289][ T5792] veth0_vlan: entered promiscuous mode [ 73.691604][ T5793] veth0_macvtap: entered promiscuous mode [ 73.713284][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.725525][ T5793] veth1_macvtap: entered promiscuous mode [ 73.762143][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.771781][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.780939][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.790112][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.813787][ T5792] veth1_vlan: entered promiscuous mode [ 73.823742][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.835361][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.848860][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.878792][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.891895][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.903533][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.915133][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.924246][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.934880][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.943811][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.971326][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.982543][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.992819][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.003356][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.014750][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.042253][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.052962][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.063242][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.073984][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.087678][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.126443][ T5793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.135181][ T5793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.144489][ T5793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.156258][ T5793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.190943][ T5792] veth0_macvtap: entered promiscuous mode [ 74.260303][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.260684][ T5792] veth1_macvtap: entered promiscuous mode [ 74.270574][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.357653][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.366533][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.373430][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.386703][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.397059][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.407582][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.418108][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.428608][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.440656][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.498705][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.498732][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.514059][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.528305][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.537171][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.548665][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.559015][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.569515][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.580480][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.603059][ T5792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.612814][ T5792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.624354][ T5792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.634873][ T5792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.652214][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.660788][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.768616][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.790962][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.850219][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.864578][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.939998][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.976646][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.977082][ T5882] syz.2.3[5882]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 75.013891][ T5882] loop2: detected capacity change from 0 to 64 [ 75.059178][ T5882] hfs: unable to locate alternate MDB [ 75.064883][ T5882] hfs: continuing without an alternate MDB [ 75.072559][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.096686][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.230899][ T5887] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.516404][ T5897] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.556556][ T5794] Bluetooth: hci1: command tx timeout [ 75.636885][ T5794] Bluetooth: hci0: command tx timeout [ 75.643794][ T5794] Bluetooth: hci3: command tx timeout [ 75.710134][ T5905] loop2: detected capacity change from 0 to 7 [ 75.710858][ T5903] bond0: entered promiscuous mode [ 75.718341][ T5794] Bluetooth: hci2: command tx timeout [ 75.731397][ T5903] bond_slave_0: entered promiscuous mode [ 75.739768][ T5905] Dev loop2: unable to read RDB block 7 [ 75.747160][ T5903] bond_slave_1: entered promiscuous mode [ 75.753052][ T5905] loop2: AHDI p1 p2 p3 [ 75.759550][ T5905] loop2: partition table partially beyond EOD, truncated [ 75.767497][ T5903] batadv_slave_0: entered promiscuous mode [ 75.774813][ T5905] loop2: p1 start 1601398130 is beyond EOD, truncated [ 75.785133][ T5903] hsr1: entered promiscuous mode [ 75.787298][ T5905] loop2: p2 start 1702059890 is beyond EOD, truncated [ 76.367057][ T5878] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.465812][ T5829] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.536628][ T5933] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.545768][ T5933] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.554529][ T5933] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.560268][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 76.563774][ T5933] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.569531][ T5933] Zero length message leads to an empty skb [ 76.626917][ T5878] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 76.637548][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.651227][ T5878] usb 3-1: config 0 descriptor?? [ 76.670977][ T5878] gspca_main: sunplus-2.14.0 probing 041e:400b [ 76.689533][ T5829] usb 4-1: Using ep0 maxpacket: 8 [ 76.704343][ T5829] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 76.718240][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.728172][ T5829] usb 4-1: Product: syz [ 76.732369][ T5829] usb 4-1: Manufacturer: syz [ 76.741110][ T5829] usb 4-1: SerialNumber: syz [ 76.765657][ T5829] usb 4-1: config 0 descriptor?? [ 76.785121][ T5829] gspca_main: sq930x-2.14.0 probing 2770:930c [ 77.021975][ T5944] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 77.048939][ T5944] CIFS mount error: No usable UNC path provided in device string! [ 77.048939][ T5944] [ 77.065621][ T5944] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 77.275930][ T5843] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.481618][ T5843] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 77.492066][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.504727][ T5878] gspca_sunplus: reg_w_riv err -71 [ 77.510148][ T5878] sunplus: probe of 3-1:0.0 failed with error -71 [ 77.524690][ T5843] usb 2-1: Product: syz [ 77.532074][ T5843] usb 2-1: Manufacturer: syz [ 77.536752][ T5857] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.555419][ T5878] usb 3-1: USB disconnect, device number 2 [ 77.565402][ T5843] usb 2-1: SerialNumber: syz [ 77.576345][ T5843] usb 2-1: config 0 descriptor?? [ 77.585855][ T5843] ch341 2-1:0.0: ch341-uart converter detected [ 77.614671][ T5829] gspca_sq930x: ucbus_write failed -71 [ 77.630317][ T5829] sq930x: probe of 4-1:0.0 failed with error -71 [ 77.637828][ T5794] Bluetooth: hci1: command tx timeout [ 77.648449][ T5829] usb 4-1: USB disconnect, device number 2 [ 77.716735][ T5794] Bluetooth: hci0: command tx timeout [ 77.716960][ T5800] Bluetooth: hci3: command tx timeout [ 77.739893][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.751298][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.761218][ T5857] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 77.770812][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.780984][ T5857] usb 1-1: config 0 descriptor?? [ 77.796160][ T5800] Bluetooth: hci2: command tx timeout [ 78.204448][ T5843] usb 2-1: failed to send control message: -71 [ 78.220778][ T5843] ch341-uart: probe of ttyUSB0 failed with error -71 [ 78.236464][ T5843] usb 2-1: USB disconnect, device number 2 [ 78.236977][ T5857] pyra 0003:1E7D:2CF6.0001: item fetching failed at offset 5/7 [ 78.253678][ T5843] ch341 2-1:0.0: device disconnected [ 78.259819][ T5857] pyra 0003:1E7D:2CF6.0001: parse failed [ 78.264222][ T5950] loop3: detected capacity change from 0 to 16 [ 78.266705][ T5857] pyra: probe of 0003:1E7D:2CF6.0001 failed with error -22 [ 78.322559][ T5950] erofs: (device loop3): mounted with root inode @ nid 36. [ 78.359738][ T5950] syz.3.28: attempt to access beyond end of device [ 78.359738][ T5950] loop3: rw=0, sector=48, nr_sectors = 16 limit=16 [ 78.377702][ T5950] syz.3.28: attempt to access beyond end of device [ 78.377702][ T5950] loop3: rw=0, sector=48, nr_sectors = 16 limit=16 [ 78.397482][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.484303][ T5843] usb 1-1: USB disconnect, device number 2 [ 78.615909][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 78.625006][ T27] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 78.635262][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.643369][ T27] usb 3-1: Product: syz [ 78.649130][ T27] usb 3-1: Manufacturer: syz [ 78.653839][ T27] usb 3-1: SerialNumber: syz [ 78.664196][ T27] usb 3-1: config 0 descriptor?? [ 78.678118][ T27] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 78.686682][ T27] usb 3-1: setting power ON [ 78.692158][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 78.710528][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 78.723282][ T27] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 78.735667][ T27] usb 3-1: media controller created [ 78.758925][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.791137][ T27] usb 3-1: selecting invalid altsetting 6 [ 78.797724][ T27] usb 3-1: digital interface selection failed (-22) [ 78.816688][ T27] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 78.831085][ T27] usb 3-1: setting power OFF [ 78.839554][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 78.860418][ T27] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 78.873635][ T27] (NULL device *): no alternate interface [ 78.902163][ T5948] dvb-usb: bulk message failed: -22 (3/0) [ 78.925858][ T5948] dvb-usb: bulk message failed: -22 (4/0) [ 78.953376][ T27] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 78.997599][ T27] usb 3-1: USB disconnect, device number 3 [ 79.493497][ T5985] vivid-000: ================= START STATUS ================= [ 79.502523][ T5985] vivid-000: Test Pattern: 75% Colorbar [ 79.508446][ T5985] vivid-000: Fill Percentage of Frame: 100 [ 79.514273][ T5985] vivid-000: Horizontal Movement: No Movement [ 79.520394][ T5985] vivid-000: Vertical Movement: No Movement [ 79.527011][ T5985] vivid-000: OSD Text Mode: All [ 79.527033][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 79.540896][ T5985] vivid-000: Show Border: false [ 79.545954][ T5985] vivid-000: Show Square: false [ 79.550837][ T5985] vivid-000: Sensor Flipped Horizontally: false [ 79.557164][ T5985] vivid-000: Sensor Flipped Vertically: false [ 79.563257][ T5985] vivid-000: Insert SAV Code in Image: false [ 79.571249][ T5985] vivid-000: Insert EAV Code in Image: false [ 79.577452][ T5985] vivid-000: Insert Video Guard Band: false [ 79.583377][ T5985] vivid-000: Reduced Framerate: false [ 79.588873][ T5985] vivid-000: Enable Capture Cropping: true [ 79.594692][ T5985] vivid-000: Enable Capture Composing: true [ 79.600622][ T5985] vivid-000: Enable Capture Scaler: true [ 79.606310][ T5985] vivid-000: Timestamp Source: End of Frame [ 79.612223][ T5985] vivid-000: Colorspace: sRGB [ 79.617049][ T5985] vivid-000: Transfer Function: Default [ 79.622650][ T5985] vivid-000: Y'CbCr Encoding: Default [ 79.628107][ T5985] vivid-000: HSV Encoding: Hue 0-179 [ 79.633428][ T5985] vivid-000: Quantization: Default [ 79.640331][ T5985] vivid-000: Apply Alpha To Red Only: false [ 79.646957][ T5985] vivid-000: Standard Aspect Ratio: 4x3 [ 79.652603][ T5985] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 79.671265][ T5985] vivid-000: DV Timings: 640x480p59 inactive [ 79.685271][ T5985] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 79.692975][ T5985] vivid-000: Maximum EDID Blocks: 2 [ 79.698431][ T5985] vivid-000: Limited RGB Range (16-235): false [ 79.704753][ T5985] vivid-000: Rx RGB Quantization Range: Automatic [ 79.712019][ T5985] vivid-000: Power Present: 0x00000001 [ 79.718227][ T5843] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.722746][ T5985] tpg source WxH: 640x360 (Y'CbCr) [ 79.731964][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 79.732629][ T5985] tpg field: 1 [ 79.741082][ T27] usb 4-1: unable to get BOS descriptor or descriptor too short [ 79.742266][ T27] usb 4-1: config 4 interface 0 has no altsetting 0 [ 79.749804][ T5985] tpg crop: 640x360@0x0 [ 79.764010][ T5985] tpg compose: 640x360@0x0 [ 79.770102][ T27] usb 4-1: string descriptor 0 read error: -22 [ 79.771595][ T5985] tpg colorspace: 8 [ 79.780451][ T5985] tpg transfer function: 0/0 [ 79.781514][ T27] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 79.785049][ T5985] tpg Y'CbCr encoding: 0/0 [ 79.794696][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.804009][ T5985] tpg quantization: 0/0 [ 79.812738][ T5985] tpg RGB range: 0/2 [ 79.819836][ T5985] vivid-000: ================== END STATUS ================== [ 79.826752][ T27] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 79.854623][ T27] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 79.886653][ T27] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 79.894732][ T27] usb 4-1: media controller created [ 79.910451][ T5843] usb 2-1: Using ep0 maxpacket: 8 [ 79.920108][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 79.936162][ T5843] usb 2-1: unable to get BOS descriptor or descriptor too short [ 79.953848][ T5843] usb 2-1: config 4 interface 0 has no altsetting 0 [ 79.973915][ T5843] usb 2-1: string descriptor 0 read error: -22 [ 79.985145][ T5843] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 79.999354][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.028593][ T5843] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 80.063112][ T5843] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 80.079642][ T5843] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 80.089023][ T5843] usb 2-1: media controller created [ 80.121950][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 80.325877][ T5857] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.526734][ T5857] usb 1-1: Using ep0 maxpacket: 16 [ 80.534254][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.540801][ T5878] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 80.545318][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.563780][ T5857] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 80.572955][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.583338][ T5857] usb 1-1: config 0 descriptor?? [ 80.751322][ T5878] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 80.761328][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 80.770799][ T5878] usb 3-1: Product: syz [ 80.775045][ T5878] usb 3-1: Manufacturer: syz [ 80.779839][ T5878] usb 3-1: SerialNumber: syz [ 80.798927][ T5878] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 81.008180][ T5857] apple 0003:05AC:024B.0002: unknown main item tag 0x6 [ 81.015166][ T5857] apple 0003:05AC:024B.0002: ignoring exceeding usage max [ 81.023623][ T5857] apple 0003:05AC:024B.0002: invalid report_size 18680 [ 81.030599][ T5857] apple 0003:05AC:024B.0002: item 0 2 1 7 parsing failed [ 81.038692][ T5857] apple 0003:05AC:024B.0002: parse failed [ 81.044548][ T5857] apple: probe of 0003:05AC:024B.0002 failed with error -22 [ 81.077242][ T27] zl10353_read_register: readreg error (reg=127, ret==0) [ 81.079950][ T5983] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 81.110531][ T5843] zl10353_read_register: readreg error (reg=127, ret==0) [ 81.151555][ T27] usb 4-1: USB disconnect, device number 3 [ 81.173777][ T5843] usb 2-1: USB disconnect, device number 3 [ 81.205305][ T5878] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 81.224885][ T5878] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 81.305909][ T5799] usb 1-1: USB disconnect, device number 3 [ 81.423081][ T27] usb 3-1: USB disconnect, device number 4 [ 81.813115][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 81.961923][ T787] cfg80211: failed to load regulatory.db [ 82.345617][ T28] audit: type=1326 audit(2000000000.400:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32f78e929 code=0x7ffc0000 [ 82.394692][ T28] audit: type=1326 audit(2000000000.400:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fe32f78e929 code=0x7ffc0000 [ 82.485807][ T28] audit: type=1326 audit(2000000000.400:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32f78e929 code=0x7ffc0000 [ 82.539248][ T28] audit: type=1326 audit(2000000000.400:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32f78e929 code=0x7ffc0000 [ 82.574178][ T6020] netlink: 84 bytes leftover after parsing attributes in process `syz.2.57'. [ 82.677251][ T6022] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 82.700677][ T6006] loop0: detected capacity change from 0 to 32768 [ 82.715892][ T6022] macvtap1: entered promiscuous mode [ 82.723168][ T6006] ======================================================= [ 82.723168][ T6006] WARNING: The mand mount option has been deprecated and [ 82.723168][ T6006] and is ignored by this kernel. Remove the mand [ 82.723168][ T6006] option from the mount to silence this warning. [ 82.723168][ T6006] ======================================================= [ 82.758978][ T6022] macvtap1: entered allmulticast mode [ 82.764528][ T6022] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 82.775324][ T6002] loop3: detected capacity change from 0 to 32768 [ 82.782318][ T6024] loop2: detected capacity change from 0 to 512 [ 82.814215][ T6024] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 82.845640][ T6002] JBD2: Ignoring recovery information on journal [ 82.919233][ T6002] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 82.956062][ T6024] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 83.001454][ T6024] System zones: 0-2, 18-18, 34-34 [ 83.009716][ T6002] (syz.3.48,6002,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 83.037610][ T6006] ERROR: (device loop0): dbAllocAG: allocation request is larger than the allocation group size [ 83.037610][ T6006] [ 83.097374][ T6024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.139989][ T6006] ERROR: (device loop0): remounting filesystem as read-only [ 83.158612][ T6024] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.176018][ T6006] ERROR: (device loop0): dbDiscardAG: -EIO [ 83.176018][ T6006] [ 83.188790][ T5791] ocfs2: Unmounting device (7,3) on (node local) [ 83.204573][ T6033] loop1: detected capacity change from 0 to 2048 [ 83.348240][ T6034] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.533824][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.597925][ T6033] NILFS error (device loop1): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 83.676060][ T6033] Remounting filesystem read-only [ 83.771573][ T6038] loop0: detected capacity change from 0 to 4096 [ 83.810169][ T5793] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 83.834350][ T6038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.851131][ T6040] loop2: detected capacity change from 0 to 256 [ 83.870464][ T5793] NILFS (loop1): discard dirty page: offset=0, ino=18 [ 83.892193][ T5793] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 83.900311][ T5793] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.909808][ T5793] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.918825][ T5793] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.918953][ T6038] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 83.929372][ T5793] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 83.943751][ T5793] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 83.951316][ T5793] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.961291][ T5793] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.970219][ T5793] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.980398][ T5793] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 83.987279][ T5793] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 83.994765][ T5793] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 84.002449][ T5793] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 84.010223][ T5793] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 84.022253][ T6040] FAT-fs (loop2): Directory bread(block 64) failed [ 84.040632][ T5793] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 84.057646][ T6040] FAT-fs (loop2): Directory bread(block 65) failed [ 84.067723][ T5793] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 84.092189][ T6040] FAT-fs (loop2): Directory bread(block 66) failed [ 84.100166][ T5793] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 84.118449][ T6040] FAT-fs (loop2): Directory bread(block 67) failed [ 84.134676][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.135242][ T5793] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 84.154333][ T6040] FAT-fs (loop2): Directory bread(block 68) failed [ 84.174501][ T6040] FAT-fs (loop2): Directory bread(block 69) failed [ 84.185516][ T5793] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 84.194757][ T6040] FAT-fs (loop2): Directory bread(block 70) failed [ 84.209461][ T5793] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 84.216384][ T6040] FAT-fs (loop2): Directory bread(block 71) failed [ 84.223029][ T6040] FAT-fs (loop2): Directory bread(block 72) failed [ 84.232739][ T5793] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 84.241271][ T5793] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 84.249256][ T6040] FAT-fs (loop2): Directory bread(block 73) failed [ 84.266833][ T5793] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 84.306645][ T5793] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 84.315574][ T5793] NILFS (loop1): discard dirty page: offset=65536, ino=3 [ 84.345930][ T5793] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 84.374175][ T6036] loop3: detected capacity change from 0 to 32768 [ 84.375183][ T5793] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 84.431445][ T5793] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 84.432611][ T6036] [ 84.432611][ T6036] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.432611][ T6036] [ 84.456041][ T5793] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 84.545840][ T5843] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.564483][ T6046] capability: warning: `syz.1.65' uses deprecated v2 capabilities in a way that may be insecure [ 84.583353][ T6036] ERROR: (device loop3): diWrite: ixpxd invalid [ 84.583353][ T6036] [ 84.636199][ T6036] ERROR: (device loop3): txCommit: [ 84.636199][ T6036] [ 84.729704][ T5843] usb 1-1: Using ep0 maxpacket: 16 [ 84.748807][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.769485][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.783684][ T5791] [ 84.783684][ T5791] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.783684][ T5791] [ 84.796385][ T5843] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 84.812280][ T5791] [ 84.812280][ T5791] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.812280][ T5791] [ 84.827348][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.858900][ T5843] usb 1-1: config 0 descriptor?? [ 84.945033][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 85.287041][ T5843] corsair 0003:1B1C:1B02.0003: invalid report_count 26673 [ 85.294222][ T5843] corsair 0003:1B1C:1B02.0003: item 0 2 1 9 parsing failed [ 85.315898][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 85.324401][ T5843] corsair 0003:1B1C:1B02.0003: parse failed [ 85.332689][ T5843] corsair: probe of 0003:1B1C:1B02.0003 failed with error -22 [ 85.513300][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.528394][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.531956][ T5843] usb 1-1: USB disconnect, device number 4 [ 85.539390][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.591075][ T27] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.610609][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.623809][ T27] usb 2-1: config 0 descriptor?? [ 85.654502][ T6072] sp0: Synchronizing with TNC [ 85.655955][ T5799] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 85.889414][ T5799] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.918311][ T5799] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.937425][ T5799] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.947111][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.955149][ T5799] usb 4-1: Product: syz [ 85.959499][ T5799] usb 4-1: Manufacturer: syz [ 85.964146][ T5799] usb 4-1: SerialNumber: syz [ 86.064438][ T27] plantronics 0003:047F:FFFF.0004: invalid report_size 2068630588 [ 86.080068][ T27] plantronics 0003:047F:FFFF.0004: item 0 4 1 7 parsing failed [ 86.110341][ T27] plantronics 0003:047F:FFFF.0004: parse failed [ 86.136582][ T27] plantronics: probe of 0003:047F:FFFF.0004 failed with error -22 [ 86.210521][ T5799] usb 4-1: 0:2 : does not exist [ 86.234971][ T5799] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 86.303474][ T5799] usb 4-1: USB disconnect, device number 4 [ 86.362388][ T5857] usb 2-1: USB disconnect, device number 4 [ 86.536114][ T5878] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 86.730212][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 86.738381][ T5878] usb 1-1: config 5 has an invalid interface number: 72 but max is 0 [ 86.747061][ T5878] usb 1-1: config 5 has no interface number 0 [ 86.753178][ T5878] usb 1-1: config 5 interface 72 has no altsetting 0 [ 86.771664][ T5878] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01cd, bcdDevice= 8.00 [ 86.786370][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.794630][ T5878] usb 1-1: Product: syz [ 86.799289][ T5878] usb 1-1: Manufacturer: syz [ 86.805110][ T5878] usb 1-1: SerialNumber: syz [ 87.054551][ T5878] ftdi_sio 1-1:5.72: FTDI USB Serial Device converter detected [ 87.087751][ T5878] usb 1-1: Detected FT4232H [ 87.100846][ T5878] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 87.121039][ T5878] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 87.168970][ T5878] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 87.209050][ T5878] usb 1-1: USB disconnect, device number 5 [ 87.232217][ T5878] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 87.257715][ T5878] ftdi_sio 1-1:5.72: device disconnected [ 87.448467][ T5799] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 87.482065][ T6104] loop3: detected capacity change from 0 to 1024 [ 87.484950][ T6106] tipc: Started in network mode [ 87.497422][ T6106] tipc: Node identity 40120000000000000000000000000001, cluster identity 4711 [ 87.508806][ T6106] tipc: Enabling of bearer rejected, failed to enable media [ 87.550836][ T6104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.645922][ T5799] usb 2-1: Using ep0 maxpacket: 8 [ 87.657614][ T6104] EXT4-fs (loop3): Online defrag not supported with bigalloc [ 87.661716][ T5799] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 87.676381][ T5799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.684639][ T5799] usb 2-1: Product: syz [ 87.688941][ T5799] usb 2-1: Manufacturer: syz [ 87.693555][ T5799] usb 2-1: SerialNumber: syz [ 87.701401][ T5799] usb 2-1: config 0 descriptor?? [ 87.726756][ T6113] loop2: detected capacity change from 0 to 256 [ 87.786588][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.916182][ T6117] loop3: detected capacity change from 0 to 512 [ 87.947189][ T5799] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 87.966166][ T6117] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.95: iget: bad i_size value: 38620345925642 [ 87.988104][ T6117] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.95: couldn't read orphan inode 15 (err -117) [ 88.016953][ T6117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.084204][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.145940][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 88.345865][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 88.352104][ T5799] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 88.368657][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.381639][ T5799] usb 2-1: USB disconnect, device number 5 [ 88.389938][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.402111][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 88.415093][ T27] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 88.424653][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.434769][ T27] usb 1-1: config 0 descriptor?? [ 88.465939][ T5857] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 88.505993][ T5836] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 88.645986][ T5857] usb 4-1: Using ep0 maxpacket: 32 [ 88.654307][ T5857] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.662504][ T5857] usb 4-1: config 0 has no interface number 0 [ 88.670936][ T5857] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 88.681368][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.689478][ T5857] usb 4-1: Product: syz [ 88.693661][ T5857] usb 4-1: Manufacturer: syz [ 88.698502][ T5857] usb 4-1: SerialNumber: syz [ 88.704706][ T5836] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.716960][ T5857] usb 4-1: config 0 descriptor?? [ 88.722671][ T5836] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.734737][ T5836] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.745087][ T5857] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 88.754576][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.762820][ T5857] usb 4-1: selecting invalid altsetting 1 [ 88.768666][ T5857] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 88.775883][ T5836] usb 3-1: Product: syz [ 88.780063][ T5836] usb 3-1: Manufacturer: syz [ 88.784651][ T5836] usb 3-1: SerialNumber: syz [ 88.792388][ T5857] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 88.810087][ T5857] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 88.818656][ T5857] usb 4-1: media controller created [ 88.839574][ T5857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.867416][ T27] HID 045e:07da: Invalid code 65791 type 1 [ 88.873453][ T27] HID 045e:07da: Invalid code 768 type 1 [ 88.880354][ T27] HID 045e:07da: Invalid code 769 type 1 [ 88.886106][ T27] HID 045e:07da: Invalid code 770 type 1 [ 88.891800][ T27] HID 045e:07da: Invalid code 771 type 1 [ 88.897529][ T27] HID 045e:07da: Invalid code 772 type 1 [ 88.915885][ T27] HID 045e:07da: Invalid code 773 type 1 [ 88.921648][ T27] HID 045e:07da: Invalid code 774 type 1 [ 88.930493][ T27] HID 045e:07da: Invalid code 775 type 1 [ 88.936263][ T27] HID 045e:07da: Invalid code 776 type 1 [ 88.973779][ T27] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input5 [ 89.025465][ T5836] usb 3-1: 0:2 : does not exist [ 89.042481][ T5836] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 89.121813][ T27] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 89.136181][ T5836] usb 3-1: USB disconnect, device number 5 [ 89.200013][ T27] usb 1-1: USB disconnect, device number 6 [ 89.271619][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.383061][ T6130] fido_id[6130]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 89.716135][ T5843] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 89.927795][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 89.934722][ T5843] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 89.942909][ T5843] usb 2-1: config 0 has no interface number 0 [ 89.950045][ T5843] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 89.961423][ T5843] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 89.973309][ T5857] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 89.976225][ T5843] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 89.986962][ T5857] zl10353_read_register: readreg error (reg=127, ret==-110) [ 89.990988][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 90.005351][ T5857] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 90.013167][ T5843] usb 2-1: Product: syz [ 90.017743][ T5843] usb 2-1: SerialNumber: syz [ 90.032966][ T787] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 90.041502][ T5843] usb 2-1: config 0 descriptor?? [ 90.050420][ T5843] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 90.059178][ T5843] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input6 [ 90.074490][ T5857] usb 4-1: USB disconnect, device number 5 [ 90.237968][ T787] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 90.246301][ T787] usb 3-1: config 0 has no interface number 0 [ 90.252427][ T787] usb 3-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 90.263515][ T787] usb 3-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 511, setting to 64 [ 90.278032][ T5800] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 90.287944][ T5800] Bluetooth: hci0: Injecting HCI hardware error event [ 90.296535][ T5794] Bluetooth: hci0: hardware error 0x00 [ 90.311947][ T787] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 90.320386][ T5836] usb 2-1: USB disconnect, device number 6 [ 90.321598][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 90.334170][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 90.343953][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.352054][ T787] usb 3-1: Product: syz [ 90.356458][ T787] usb 3-1: Manufacturer: syz [ 90.360101][ T5836] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 90.361057][ T787] usb 3-1: SerialNumber: syz [ 90.366981][ T787] usb 3-1: config 0 descriptor?? [ 90.381448][ T6136] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 90.391064][ T6136] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 90.474209][ T6142] tipc: Started in network mode [ 90.479534][ T6142] tipc: Node identity 5f00000000000000faffffffffffffff, cluster identity 4711 [ 90.609286][ T6146] Bluetooth: MGMT ver 1.22 [ 90.634668][ T6136] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 90.645174][ T6136] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 90.716042][ T6148] loop3: detected capacity change from 0 to 512 [ 90.747428][ T6150] netlink: 'syz.0.110': attribute type 1 has an invalid length. [ 90.789373][ T6148] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 90.851099][ T6152] loop0: detected capacity change from 0 to 512 [ 90.869731][ T6152] EXT4-fs: Ignoring removed orlov option [ 90.896227][ T6148] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 90.899522][ T6152] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.958326][ T6152] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.033767][ T6152] EXT4-fs (loop0): 1 orphan inode deleted [ 91.057033][ T6152] EXT4-fs (loop0): 1 truncate cleaned up [ 91.064054][ T6152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.092745][ T787] asix 3-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 91.105872][ T6152] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.0.111: path /24/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 91.137356][ T787] asix: probe of 3-1:0.239 failed with error -71 [ 91.145457][ T6152] EXT4-fs (loop0): Remounting filesystem read-only [ 91.153638][ T787] usb 3-1: USB disconnect, device number 6 [ 91.244385][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.553560][ T6169] netlink: 60 bytes leftover after parsing attributes in process `syz.3.117'. [ 91.580528][ T6169] netlink: 60 bytes leftover after parsing attributes in process `syz.3.117'. [ 91.592128][ T6168] netlink: 60 bytes leftover after parsing attributes in process `syz.3.117'. [ 92.042066][ T6191] loop2: detected capacity change from 0 to 64 [ 92.112810][ T6191] Trying to free block not in datazone [ 92.116482][ T787] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 92.145408][ T6191] Trying to free block not in datazone [ 92.267382][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'. [ 92.305851][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 92.319532][ T787] usb 2-1: config 0 interface 0 has no altsetting 0 [ 92.338533][ T787] usb 2-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.00 [ 92.361783][ T5794] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 92.362949][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.399087][ T787] usb 2-1: config 0 descriptor?? [ 92.485956][ T5836] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 92.530518][ T6206] loop3: detected capacity change from 0 to 1024 [ 92.578431][ T6206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.591164][ T6206] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.665255][ T6206] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: block 1: comm syz.3.134: lblock 1 mapped to illegal pblock 1 (length 15) [ 92.697928][ T5836] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.712248][ T5836] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 92.722878][ T5836] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 92.736347][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.739933][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.773655][ T5836] usb 1-1: config 0 descriptor?? [ 92.787760][ T5836] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 92.794447][ T5836] dvb-usb: bulk message failed: -22 (3/0) [ 92.835412][ T5836] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 92.840478][ T787] asus 0003:0B05:183D.0006: hidraw0: USB HID v0.01 Device [HID 0b05:183d] on usb-dummy_hcd.1-1/input0 [ 92.867032][ T5836] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 92.910220][ T787] asus 0003:0B05:183D.0006: Asus input not registered [ 92.916230][ T5836] usb 1-1: media controller created [ 92.923944][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.949626][ T787] asus: probe of 0003:0B05:183D.0006 failed with error -12 [ 92.963729][ T5836] dvb-usb: bulk message failed: -22 (6/0) [ 92.980620][ T5836] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 93.002034][ T6195] dibusb: i2c wr: len=108 is too big! [ 93.002034][ T6195] [ 93.023960][ T5836] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 93.066463][ T5836] dvb-usb: schedule remote query interval to 150 msecs. [ 93.091279][ T5836] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 93.125147][ T787] usb 2-1: USB disconnect, device number 7 [ 93.134784][ T5836] usb 1-1: USB disconnect, device number 7 [ 93.156216][ T5799] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 93.216963][ T5836] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 93.358171][ T5799] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 93.370108][ T5799] usb 4-1: config 0 has no interface number 0 [ 93.377446][ T5799] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.395403][ T5799] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 93.406720][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.414761][ T5799] usb 4-1: Product: syz [ 93.423430][ T5799] usb 4-1: Manufacturer: syz [ 93.428162][ T5799] usb 4-1: SerialNumber: syz [ 93.439778][ T5799] usb 4-1: config 0 descriptor?? [ 93.461267][ T5799] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 93.689744][ T5843] usb 4-1: USB disconnect, device number 6 [ 93.712293][ T5843] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 93.774108][ T6233] netlink: 48 bytes leftover after parsing attributes in process `syz.1.144'. [ 93.845941][ T5799] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 94.046972][ T5799] usb 3-1: Using ep0 maxpacket: 32 [ 94.052280][ T5836] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 94.061796][ T5799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.072724][ T5799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.082950][ T5799] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 94.092089][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.102571][ T5799] usb 3-1: config 0 descriptor?? [ 94.246038][ T5836] usb 1-1: Using ep0 maxpacket: 32 [ 94.263856][ T5836] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 94.275655][ T5836] usb 1-1: config 0 has no interface number 0 [ 94.286747][ T5836] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 94.296614][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.304642][ T5836] usb 1-1: Product: syz [ 94.309526][ T5836] usb 1-1: Manufacturer: syz [ 94.314583][ T5836] usb 1-1: SerialNumber: syz [ 94.321666][ T5836] usb 1-1: config 0 descriptor?? [ 94.330600][ T5836] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 94.339481][ T5836] usb 1-1: selecting invalid altsetting 1 [ 94.345262][ T5836] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 94.354727][ T5836] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 94.365360][ T5836] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 94.373866][ T5829] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 94.382957][ T5836] usb 1-1: media controller created [ 94.399782][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.446008][ T5794] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 94.527312][ T5843] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 94.545563][ T5799] smartjoyplus 0003:0925:8866.0007: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.2-1/input0 [ 94.562991][ T5799] smartjoyplus 0003:0925:8866.0007: no output reports found [ 94.599648][ T5829] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 94.611676][ T5829] usb 2-1: config 0 has no interface number 0 [ 94.617916][ T5829] usb 2-1: config 0 interface 106 has no altsetting 0 [ 94.629905][ T5829] usb 2-1: New USB device found, idVendor=413c, idProduct=8217, bcdDevice=b2.59 [ 94.640543][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.648705][ T5829] usb 2-1: Product: syz [ 94.653086][ T5829] usb 2-1: Manufacturer: syz [ 94.657801][ T5829] usb 2-1: SerialNumber: syz [ 94.664389][ T5829] usb 2-1: config 0 descriptor?? [ 94.719428][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.735836][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.745639][ T5843] usb 4-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 94.775380][ T5878] usb 3-1: USB disconnect, device number 7 [ 94.781311][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.805512][ T5843] usb 4-1: config 0 descriptor?? [ 94.897105][ T5829] usb 2-1: USB disconnect, device number 8 [ 95.228488][ T5843] apple 0003:05AC:0262.0008: unbalanced delimiter at end of report description [ 95.245347][ T5843] apple 0003:05AC:0262.0008: parse failed [ 95.251250][ T5843] apple: probe of 0003:05AC:0262.0008 failed with error -22 [ 95.469737][ T5843] usb 4-1: USB disconnect, device number 7 [ 95.479494][ T5836] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 95.490423][ T5836] zl10353_read_register: readreg error (reg=127, ret==-110) [ 95.500262][ T5836] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 95.579582][ T5836] usb 1-1: USB disconnect, device number 8 [ 95.674639][ T6252] IPv6: Can't replace route, no match found [ 95.756482][ T5829] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 95.940215][ T5829] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 95.961264][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.979835][ T5829] usb 2-1: Product: syz [ 95.990026][ T5829] usb 2-1: Manufacturer: syz [ 95.994679][ T5829] usb 2-1: SerialNumber: syz [ 96.022252][ T5829] usb 2-1: config 0 descriptor?? [ 96.282708][ T6265] loop0: detected capacity change from 0 to 512 [ 96.335930][ T6265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.418491][ T6265] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.429549][ T5836] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 96.477654][ T5829] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 96.485534][ T5829] usb 2-1: Firmware version (0.0) predates our first public release. [ 96.505028][ T5829] usb 2-1: Please update to version 0.2 or newer [ 96.548726][ T6265] EXT4-fs error (device loop0): __ext4_new_inode:1284: comm syz.0.159: failed to insert inode 16: doubly allocated? [ 96.625663][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.638685][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 96.655303][ T5836] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 96.674283][ T5836] usb 4-1: config 0 has no interface number 0 [ 96.685306][ T5836] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 96.750457][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.795914][ T5836] usb 4-1: Product: syz [ 96.815284][ T5836] usb 4-1: Manufacturer: syz [ 96.831888][ T5829] usb 2-1: USB disconnect, device number 9 [ 96.841762][ T5836] usb 4-1: SerialNumber: syz [ 96.884521][ T5836] usb 4-1: config 0 descriptor?? [ 96.950398][ T5836] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 96.970672][ T5836] usb 4-1: selecting invalid altsetting 1 [ 96.983250][ T5836] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 97.002785][ T5836] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 97.018407][ T5836] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 97.054757][ T5836] usb 4-1: media controller created [ 97.075873][ T5843] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 97.101391][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.146826][ T787] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 97.302642][ T5843] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 97.326744][ T5843] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 97.349655][ T5843] usb 3-1: config 0 interface 0 has no altsetting 0 [ 97.373479][ T787] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 97.383762][ T5843] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 97.395880][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.425924][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.442165][ T787] usb 1-1: config 0 descriptor?? [ 97.455295][ T5843] usb 3-1: config 0 descriptor?? [ 97.474358][ T6279] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 97.642866][ T6287] netlink: 'syz.1.165': attribute type 1 has an invalid length. [ 97.655060][ T6287] netlink: 'syz.1.165': attribute type 4 has an invalid length. [ 97.673533][ T787] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 97.674006][ T6287] netlink: 188 bytes leftover after parsing attributes in process `syz.1.165'. [ 97.692848][ T787] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 97.697366][ T6287] NCSI netlink: No device for ifindex 458760 [ 97.904320][ T787] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 97.925754][ T787] [drm] Initialized udl on minor 2 [ 97.936126][ T5843] logitech 0003:046D:CA04.0009: unknown main item tag 0x0 [ 97.943332][ T5843] logitech 0003:046D:CA04.0009: unknown main item tag 0x0 [ 97.985817][ T5843] logitech 0003:046D:CA04.0009: unknown main item tag 0x0 [ 97.993051][ T5843] logitech 0003:046D:CA04.0009: unknown main item tag 0x0 [ 98.015801][ T5843] logitech 0003:046D:CA04.0009: unknown main item tag 0x0 [ 98.023054][ T5843] logitech 0003:046D:CA04.0009: unknown main item tag 0x0 [ 98.045833][ T5843] logitech 0003:046D:CA04.0009: unknown main item tag 0x0 [ 98.053094][ T5843] logitech 0003:046D:CA04.0009: unknown main item tag 0x0 [ 98.089057][ T787] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 98.106288][ T5843] logitech 0003:046D:CA04.0009: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.2-1/input0 [ 98.120184][ T787] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 98.159387][ T5843] logitech 0003:046D:CA04.0009: no inputs found [ 98.184213][ T5843] usb 3-1: USB disconnect, device number 8 [ 98.197487][ T5836] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 98.226104][ T5836] zl10353_read_register: readreg error (reg=127, ret==-110) [ 98.257015][ T6263] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 98.300148][ T5878] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 98.332597][ T5878] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 98.340269][ T6290] fido_id[6290]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 98.350212][ T787] usb 1-1: USB disconnect, device number 9 [ 98.364229][ T5836] usb 4-1: USB disconnect, device number 8 [ 98.390039][ T5878] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 98.577155][ T6289] loop1: detected capacity change from 0 to 32768 [ 98.591986][ T6289] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.166 (6289) [ 98.639352][ T6289] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 98.650181][ T6289] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 98.661126][ T6289] BTRFS info (device loop1): using free space tree [ 98.835923][ T6289] BTRFS info (device loop1): enabling ssd optimizations [ 98.854950][ T6289] BTRFS info (device loop1): auto enabling async discard [ 99.153887][ T5793] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 99.501772][ T5878] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 99.703479][ T5878] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 99.733488][ T5878] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 99.765087][ T5878] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 99.784019][ T5878] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 99.807252][ T5878] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 99.852246][ T5878] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 99.874196][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 99.875216][ T6310] loop3: detected capacity change from 0 to 32768 [ 99.883137][ T5878] usb 1-1: Product: syz [ 99.883186][ T5878] usb 1-1: Manufacturer: syz [ 99.899919][ T5878] cdc_wdm 1-1:1.0: skipping garbage [ 99.924452][ T5878] cdc_wdm 1-1:1.0: skipping garbage [ 99.932919][ T5878] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 99.942603][ T6310] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.168 (6310) [ 99.962229][ T5878] cdc_wdm 1-1:1.0: Unknown control protocol [ 100.015813][ T6310] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.048379][ T6310] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 100.083170][ T6310] BTRFS info (device loop3): turning on async discard [ 100.098798][ T6310] BTRFS info (device loop3): using free space tree [ 100.151747][ T6324] loop1: detected capacity change from 0 to 8 [ 100.250818][ T6310] BTRFS info (device loop3): enabling ssd optimizations [ 100.324999][ T6324] SQUASHFS error: xz decompression failed, data probably corrupt [ 100.369350][ T6324] SQUASHFS error: Failed to read block 0x108: -5 [ 100.393122][ T6324] SQUASHFS error: Unable to read metadata cache entry [106] [ 100.400795][ T6324] SQUASHFS error: Unable to read inode 0x0 [ 100.452371][ T6310] BTRFS error (device loop3): balance: invalid convert metadata profile raid1c4 [ 100.656971][ T6343] warning: `syz.2.174' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.687954][ T5791] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.712766][ T5878] usb 1-1: USB disconnect, device number 10 [ 100.853975][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 102.067234][ T6370] loop0: detected capacity change from 0 to 2048 [ 102.142512][ T6370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.172125][ T6370] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.253051][ T6383] erspan0: entered promiscuous mode [ 102.281445][ T28] audit: type=1800 audit(2000000020.339:6): pid=6370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.183" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 102.330054][ T6370] fs-verity: sha512 using implementation "sha512-avx2" [ 102.511734][ T6391] loop2: detected capacity change from 0 to 512 [ 102.521678][ T6391] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.554673][ T6391] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.191: corrupted in-inode xattr: overlapping e_value [ 102.583716][ T6391] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.191: couldn't read orphan inode 15 (err -117) [ 102.624869][ T6391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.736119][ T6391] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.191: Directory hole found for htree leaf block 0 [ 102.794081][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.856382][ T6389] loop1: detected capacity change from 0 to 32768 [ 102.927785][ T6389] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 103.019865][ T6370] fs-verity (loop0, inode 13): Error -4 building Merkle tree [ 103.075450][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.124513][ T6389] XFS (loop1): Ending clean mount [ 103.178647][ T6389] XFS (loop1): Quotacheck needed: Please wait. [ 103.250664][ T3552] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x2b9/0x1140, inode 0x2443 dinode [ 103.274203][ T3552] XFS (loop1): Unmount and run xfs_repair [ 103.285877][ T3552] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 103.301300][ T3552] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 103.316430][ T3552] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 103.348227][ T3552] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 103.364277][ T6408] loop2: detected capacity change from 0 to 2048 [ 103.377035][ T3552] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 103.396257][ T3552] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 103.406983][ T6411] loop3: detected capacity change from 0 to 256 [ 103.420210][ T3552] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 54 01 7a fc ............T.z. [ 103.435795][ T6408] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.444774][ T6411] FAT-fs (loop3): Directory bread(block 1285) failed [ 103.465422][ T3552] 00000060: ff ff ff ff 4c 7b c2 21 00 00 00 00 00 00 00 04 ....L{.!........ [ 103.486234][ T6411] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 103.496080][ T3552] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08 ................ [ 103.578448][ T6389] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 103.789542][ T6413] loop0: detected capacity change from 0 to 4096 [ 103.796871][ T6416] loop3: detected capacity change from 0 to 256 [ 103.837423][ T6413] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 103.929956][ T5793] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 103.967187][ T6413] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 104.197045][ T28] audit: type=1800 audit(2000000022.249:7): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.196" name="file0" dev="loop0" ino=0 res=0 errno=0 [ 104.372931][ T6424] loop3: detected capacity change from 0 to 512 [ 104.383918][ T6424] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 104.438549][ T6424] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.201: iget: bad i_size value: -67835469387268086 [ 104.513597][ T6424] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.201: couldn't read orphan inode 15 (err -117) [ 104.567890][ T6424] EXT4-fs (loop3): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.604557][ T6428] netlink: 'syz.1.199': attribute type 11 has an invalid length. [ 104.605943][ T6424] ext2 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.682491][ T6429] loop0: detected capacity change from 0 to 4096 [ 104.737901][ T6424] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.201: Directory hole found for htree leaf block 0 [ 104.860301][ T5791] EXT4-fs (loop3): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 105.050892][ T6421] loop2: detected capacity change from 0 to 40427 [ 105.057610][ T5799] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 105.087316][ T6421] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 105.103844][ T6434] loop3: detected capacity change from 0 to 256 [ 105.112570][ T6421] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 105.124042][ T6421] F2FS-fs (loop2): heap/no_heap options were deprecated [ 105.156909][ T6421] F2FS-fs (loop2): invalid crc value [ 105.210459][ T6421] F2FS-fs (loop2): Found nat_bits in checkpoint [ 105.265226][ T5799] usb 2-1: Using ep0 maxpacket: 16 [ 105.278100][ T5799] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.296756][ T5799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.349616][ T5799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 105.370262][ T5799] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 105.381872][ T5799] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.445602][ T5799] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 105.462910][ T5799] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 105.481555][ T5799] usb 2-1: Manufacturer: syz [ 105.496893][ T5799] usb 2-1: config 0 descriptor?? [ 105.523206][ T6421] F2FS-fs (loop2): Start checkpoint disabled! [ 105.563300][ T6421] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 105.576284][ T6421] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 105.623616][ T6446] loop0: detected capacity change from 0 to 256 [ 105.661021][ T6446] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.726144][ T6446] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 105.753523][ T6446] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 105.895898][ T5799] rc_core: IR keymap rc-hauppauge not found [ 105.901852][ T5799] Registered IR keymap rc-empty [ 105.920889][ T5799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 105.965916][ T5799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 106.009443][ T5799] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 106.026916][ T3536] kworker/u4:9: attempt to access beyond end of device [ 106.026916][ T3536] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 106.048566][ T5799] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 106.071596][ T3536] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 106.079626][ T3536] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 106.099364][ T5799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 106.145389][ T5799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 106.196034][ T5799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 106.235872][ T5799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 106.245475][ T6443] loop3: detected capacity change from 0 to 40427 [ 106.279180][ T6443] F2FS-fs (loop3): Invalid Fs Meta Ino: node(3) meta(0) root(3) [ 106.287409][ T5799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 106.312613][ T6443] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 106.338578][ T6443] F2FS-fs (loop3): heap/no_heap options were deprecated [ 106.351605][ T5799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 106.383036][ T6455] syz_tun: entered promiscuous mode [ 106.390196][ T5799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 106.398141][ T6443] F2FS-fs (loop3): invalid crc value [ 106.418180][ T6443] F2FS-fs (loop3): Found nat_bits in checkpoint [ 106.446331][ T5799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 106.496029][ T5799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 106.545947][ T5799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 106.556424][ T6443] F2FS-fs (loop3): Start checkpoint disabled! [ 106.589890][ T5799] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 106.617331][ T6443] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 106.624418][ T6443] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 106.631715][ T5799] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 106.684501][ T5799] usb 2-1: USB disconnect, device number 10 [ 106.878892][ T6463] loop0: detected capacity change from 0 to 4096 [ 106.925388][ T6463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.965659][ T12] kworker/u4:1: attempt to access beyond end of device [ 106.965659][ T12] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 106.982079][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 106.989410][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 106.997978][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 107.031189][ T6463] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #15: comm syz.0.213: corrupted inode contents [ 107.068070][ T6463] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #15: comm syz.0.213: mark_inode_dirty error [ 107.122501][ T6463] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #15: comm syz.0.213: corrupted inode contents [ 107.186637][ T6463] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.213: mark_inode_dirty error [ 107.219245][ T6463] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #15: comm syz.0.213: corrupted inode contents [ 107.253455][ T6463] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.213: mark_inode_dirty error [ 107.265855][ T6463] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #15: comm syz.0.213: corrupted inode contents [ 107.304283][ T6463] EXT4-fs error (device loop0): ext4_truncate:4288: inode #15: comm syz.0.213: mark_inode_dirty error [ 107.344690][ T6463] EXT4-fs error (device loop0) in ext4_setattr:5645: Corrupt filesystem [ 107.437224][ T6463] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.563698][ T6461] loop2: detected capacity change from 0 to 32768 [ 107.623429][ T6461] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.209 (6461) [ 107.667444][ T6461] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.684267][ T6461] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 107.703840][ T6461] BTRFS info (device loop2): setting nodatacow, compression disabled [ 107.725793][ T6461] BTRFS info (device loop2): max_inline at 0 [ 107.735975][ T6461] BTRFS info (device loop2): turning off barriers [ 107.743843][ T6461] BTRFS info (device loop2): force zlib compression, level 3 [ 107.766034][ T6461] BTRFS info (device loop2): doing ref verification [ 107.783585][ T6461] BTRFS info (device loop2): force clearing of disk cache [ 107.796061][ T6461] BTRFS info (device loop2): enabling ssd optimizations [ 107.812594][ T6461] BTRFS info (device loop2): max_inline at 4096 [ 107.840136][ T6461] BTRFS info (device loop2): using free space tree [ 107.999540][ T6467] loop1: detected capacity change from 0 to 32768 [ 108.047051][ T6461] BTRFS info (device loop2): auto enabling async discard [ 108.054565][ T6467] (syz.1.215,6467,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.075987][ T6461] BTRFS info (device loop2): rebuilding free space tree [ 108.146751][ T6467] (syz.1.215,6467,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.281912][ T6467] JBD2: Ignoring recovery information on journal [ 108.448783][ T6467] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 108.597793][ T5788] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.785229][ T6490] loop3: detected capacity change from 0 to 32768 [ 108.865434][ T6491] loop0: detected capacity change from 0 to 32768 [ 108.882600][ T6490] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 108.973835][ T6491] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.061274][ T6490] XFS (loop3): Ending clean mount [ 109.104688][ T6490] XFS (loop3): Quotacheck needed: Please wait. [ 109.257136][ T6490] XFS (loop3): Quotacheck: Done. [ 109.288969][ T6491] XFS (loop0): Ending clean mount [ 109.308412][ T6491] XFS (loop0): Quotacheck needed: Please wait. [ 109.414906][ T6467] syz.1.215 (6467) used greatest stack depth: 18736 bytes left [ 109.477157][ T6491] XFS (loop0): Quotacheck: Done. [ 109.695157][ T5792] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.933962][ T5791] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 110.069573][ T5793] ocfs2: Unmounting device (7,1) on (node local) [ 110.245863][ T5799] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 110.486341][ T5799] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 110.494571][ T5799] usb 3-1: config 0 has no interface number 0 [ 110.516909][ T5799] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 110.536285][ T5799] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 110.564443][ T5799] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 110.585805][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.606946][ T5799] usb 3-1: config 0 descriptor?? [ 110.614227][ T6521] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 110.627159][ T6539] process 'syz.3.230' launched './file1' with NULL argv: empty string added [ 110.646241][ T5799] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 110.750385][ T5794] Bluetooth: Unknown LE signaling command 0x90 [ 110.759435][ T5794] Bluetooth: Wrong link type (-22) [ 110.857971][ T6545] loop1: detected capacity change from 0 to 256 [ 110.870118][ T6545] exfat: Deprecated parameter 'utf8' [ 110.931228][ T6545] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0b800a9a, utbl_chksum : 0xe619d30d) [ 110.951386][ T5829] usb 3-1: USB disconnect, device number 9 [ 110.957367][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 111.020829][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'. [ 111.191222][ T6552] netlink: 20 bytes leftover after parsing attributes in process `syz.1.236'. [ 111.212712][ T6553] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 111.244308][ T6552] nbd: socks must be embedded in a SOCK_ITEM attr [ 111.260063][ T5804] block nbd64: NBD_DISCONNECT [ 111.352632][ T6533] loop0: detected capacity change from 0 to 40427 [ 111.369370][ T6533] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 111.384272][ T6533] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 111.416627][ T6533] F2FS-fs (loop0): invalid crc value [ 111.454899][ T6533] F2FS-fs (loop0): Found nat_bits in checkpoint [ 111.493437][ T5804] udevd[5804]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 111.628662][ T6533] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 111.670087][ T6533] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 112.905342][ T6588] loop1: detected capacity change from 0 to 256 [ 112.942555][ T6588] exfat: Deprecated parameter 'utf8' [ 113.043876][ T5794] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 113.251005][ T6600] pim6reg: entered allmulticast mode [ 113.261741][ T6599] pim6reg: left allmulticast mode [ 113.402301][ T6604] loop2: detected capacity change from 0 to 2048 [ 113.426052][ T5829] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 113.442315][ T6604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.454721][ T6604] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.488109][ T28] audit: type=1800 audit(2000000031.549:8): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.254" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 113.492361][ T6604] fs-verity (loop2, inode 13): Error -22 reading file data [ 113.515989][ T5836] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 113.524772][ T6604] fs-verity (loop2, inode 13): Error -22 building Merkle tree [ 113.579648][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.606809][ T5799] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 113.621640][ T5829] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 113.643790][ T5829] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 113.654379][ T5829] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 113.664308][ T5829] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 113.676139][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 113.686454][ T5829] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 113.704338][ T5829] usb 1-1: string descriptor 0 read error: -22 [ 113.715055][ T5829] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 113.724508][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 113.736615][ T5836] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 113.750095][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.758391][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.769711][ T5829] usb 1-1: config 0 descriptor?? [ 113.776119][ T6596] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 113.785559][ T5836] usb 4-1: config 0 descriptor?? [ 113.797847][ T5829] hub 1-1:0.0: bad descriptor, ignoring hub [ 113.803930][ T5829] hub: probe of 1-1:0.0 failed with error -5 [ 113.818862][ T5829] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 113.830306][ T5799] usb 2-1: Using ep0 maxpacket: 32 [ 113.848553][ T5799] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 113.858447][ T5799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.886626][ C0] usb_acecad 1-1:0.0: can't resubmit intr, dummy_hcd.0-1/input0, status -1 [ 113.895945][ T5799] usb 2-1: config 0 descriptor?? [ 113.955525][ C0] usb_acecad 1-1:0.0: can't resubmit intr, dummy_hcd.0-1/input0, status -1 [ 114.015892][ T5836] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 114.056610][ T5836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.086865][ T5836] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 114.094849][ T5836] usb 4-1: media controller created [ 114.111920][ T5878] usb 1-1: USB disconnect, device number 11 [ 114.146548][ T5799] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 114.155357][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.178433][ T5799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.226434][ T5799] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 114.236288][ T5836] az6027: usb out operation failed. (-71) [ 114.245836][ T5799] usb 2-1: media controller created [ 114.252118][ T5836] az6027: usb out operation failed. (-71) [ 114.261910][ T5836] stb0899_attach: Driver disabled by Kconfig [ 114.281521][ T5836] az6027: no front-end attached [ 114.281521][ T5836] [ 114.296230][ T5836] az6027: usb out operation failed. (-71) [ 114.305783][ T5836] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 114.313608][ T5799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.325204][ T5836] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 114.358777][ T5836] dvb-usb: schedule remote query interval to 400 msecs. [ 114.369705][ T5836] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 114.383089][ T5799] az6027: usb out operation failed. (-71) [ 114.395140][ T5836] usb 4-1: USB disconnect, device number 9 [ 114.408196][ T5799] az6027: usb out operation failed. (-71) [ 114.434357][ T5799] stb0899_attach: Driver disabled by Kconfig [ 114.445937][ T5799] az6027: no front-end attached [ 114.445937][ T5799] [ 114.456876][ T5799] az6027: usb out operation failed. (-71) [ 114.462641][ T5799] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 114.515516][ T5799] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 114.551421][ T5799] dvb-usb: schedule remote query interval to 400 msecs. [ 114.561697][ T5836] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 114.575775][ T5799] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 114.601547][ T5799] usb 2-1: USB disconnect, device number 11 [ 114.759420][ T5799] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 115.295830][ T5799] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 115.417183][ T6638] syz.3.268[6638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.417321][ T6638] syz.3.268[6638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.505331][ T5799] usb 3-1: Using ep0 maxpacket: 16 [ 115.542315][ T5799] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.567243][ T5799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.596476][ T5799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 115.619841][ T5799] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 115.635524][ T28] audit: type=1326 audit(2000000033.699:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2421f858e7 code=0x7ffc0000 [ 115.651520][ T5799] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.704836][ T28] audit: type=1326 audit(2000000033.699:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2421f2ab19 code=0x7ffc0000 [ 115.735584][ T28] audit: type=1326 audit(2000000033.699:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2421f858e7 code=0x7ffc0000 [ 115.765101][ T6622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.770850][ T28] audit: type=1326 audit(2000000033.699:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2421f2ab19 code=0x7ffc0000 [ 115.784045][ T6622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.796777][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.833059][ T28] audit: type=1326 audit(2000000033.699:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2421f858e7 code=0x7ffc0000 [ 115.856820][ T5799] usb 3-1: string descriptor 0 read error: -71 [ 115.864411][ T5799] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 115.874044][ T5799] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 115.883141][ T28] audit: type=1326 audit(2000000033.699:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2421f2ab19 code=0x7ffc0000 [ 115.909966][ T28] audit: type=1326 audit(2000000033.699:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2421f858e7 code=0x7ffc0000 [ 115.933500][ T5799] usb 3-1: config 0 descriptor?? [ 115.941763][ T28] audit: type=1326 audit(2000000033.699:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2421f2ab19 code=0x7ffc0000 [ 115.944561][ T5799] usb 3-1: can't set config #0, error -71 [ 115.963755][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.969192][ T28] audit: type=1326 audit(2000000033.699:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2421f858e7 code=0x7ffc0000 [ 115.994526][ T5799] usb 3-1: USB disconnect, device number 10 [ 115.998808][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.209203][ T6658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.277'. [ 116.405889][ T5843] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 116.587683][ T5843] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 116.605751][ T5843] usb 2-1: config 0 has no interface number 0 [ 116.622463][ T5843] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 116.656726][ T5843] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 116.676794][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.685223][ T5843] usb 2-1: Product: syz [ 116.692881][ T5843] usb 2-1: Manufacturer: syz [ 116.705617][ T5843] usb 2-1: SerialNumber: syz [ 116.731239][ T5843] usb 2-1: config 0 descriptor?? [ 116.968176][ T6693] netlink: 'syz.3.290': attribute type 12 has an invalid length. [ 116.976207][ T6693] netlink: 'syz.3.290': attribute type 29 has an invalid length. [ 116.983977][ T6693] netlink: 'syz.3.290': attribute type 2 has an invalid length. [ 116.992395][ T6693] netlink: 'syz.3.290': attribute type 2 has an invalid length. [ 117.000548][ T6693] netlink: 'syz.3.290': attribute type 1 has an invalid length. [ 117.013377][ T6693] netlink: 'syz.3.290': attribute type 37 has an invalid length. [ 117.022036][ T6693] netlink: 'syz.3.290': attribute type 2 has an invalid length. [ 117.032375][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.336130][ T5799] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 117.362825][ T5843] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input12 [ 117.394946][ T6696] loop0: detected capacity change from 0 to 32768 [ 117.419772][ T6696] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 117.998029][ T5792] [ 118.000410][ T5792] ====================================================== [ 118.007486][ T5792] WARNING: possible circular locking dependency detected [ 118.014504][ T5792] 6.6.95-syzkaller #0 Not tainted [ 118.019596][ T5792] ------------------------------------------------------ [ 118.026594][ T5792] syz-executor/5792 is trying to acquire lock: [ 118.032732][ T5792] ffff88805bcc6d98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: __ocfs2_flush_truncate_log+0x351/0x10b0 [ 118.045865][ T5792] [ 118.045865][ T5792] but task is already holding lock: [ 118.053234][ T5792] ffff88805bc8c2d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x47/0x60 [ 118.065939][ T5792] [ 118.065939][ T5792] which lock already depends on the new lock. [ 118.065939][ T5792] [ 118.076423][ T5792] [ 118.076423][ T5792] the existing dependency chain (in reverse order) is: [ 118.085861][ T5792] [ 118.085861][ T5792] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 118.096485][ T5792] down_write+0x97/0x1f0 [ 118.101330][ T5792] __ocfs2_move_extents_range+0x1a65/0x3360 [ 118.107758][ T5792] ocfs2_move_extents+0x379/0x940 [ 118.113396][ T5792] ocfs2_ioctl_move_extents+0x4e1/0x6c0 [ 118.119639][ T5792] ocfs2_ioctl+0x195/0x750 [ 118.124570][ T5792] __se_sys_ioctl+0xfd/0x170 [ 118.129760][ T5792] do_syscall_64+0x55/0xb0 [ 118.134689][ T5792] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.141118][ T5792] [ 118.141118][ T5792] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 118.151630][ T5792] __lock_acquire+0x2ddb/0x7c80 [ 118.156997][ T5792] lock_acquire+0x197/0x410 [ 118.162008][ T5792] down_write+0x97/0x1f0 [ 118.166770][ T5792] __ocfs2_flush_truncate_log+0x351/0x10b0 [ 118.173086][ T5792] ocfs2_flush_truncate_log+0x4f/0x60 [ 118.178984][ T5792] ocfs2_sync_fs+0x117/0x310 [ 118.184612][ T5792] sync_filesystem+0x1c2/0x220 [ 118.189887][ T5792] generic_shutdown_super+0x6f/0x2b0 [ 118.195703][ T5792] kill_block_super+0x44/0x90 [ 118.200898][ T5792] deactivate_locked_super+0x97/0x100 [ 118.206777][ T5792] cleanup_mnt+0x429/0x4c0 [ 118.211704][ T5792] task_work_run+0x1ce/0x250 [ 118.216806][ T5792] exit_to_user_mode_loop+0xe6/0x110 [ 118.222610][ T5792] exit_to_user_mode_prepare+0xb1/0x140 [ 118.228664][ T5792] syscall_exit_to_user_mode+0x1a/0x50 [ 118.234634][ T5792] do_syscall_64+0x61/0xb0 [ 118.239561][ T5792] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.246027][ T5792] [ 118.246027][ T5792] other info that might help us debug this: [ 118.246027][ T5792] [ 118.256241][ T5792] Possible unsafe locking scenario: [ 118.256241][ T5792] [ 118.263674][ T5792] CPU0 CPU1 [ 118.269023][ T5792] ---- ---- [ 118.274374][ T5792] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 118.281655][ T5792] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 118.291460][ T5792] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 118.301275][ T5792] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 118.308586][ T5792] [ 118.308586][ T5792] *** DEADLOCK *** [ 118.308586][ T5792] [ 118.316721][ T5792] 2 locks held by syz-executor/5792: [ 118.321987][ T5792] #0: ffff8880253ee0e0 (&type->s_umount_key#57){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 118.332164][ T5792] #1: ffff88805bc8c2d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x47/0x60 [ 118.345377][ T5792] [ 118.345377][ T5792] stack backtrace: [ 118.351265][ T5792] CPU: 1 PID: 5792 Comm: syz-executor Not tainted 6.6.95-syzkaller #0 [ 118.359408][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.369542][ T5792] Call Trace: [ 118.372811][ T5792] [ 118.375746][ T5792] dump_stack_lvl+0x16c/0x230 [ 118.380421][ T5792] ? load_image+0x3b0/0x3b0 [ 118.384910][ T5792] ? show_regs_print_info+0x20/0x20 [ 118.390113][ T5792] ? print_circular_bug+0x12b/0x1a0 [ 118.395308][ T5792] check_noncircular+0x2bd/0x3c0 [ 118.400607][ T5792] ? print_deadlock_bug+0x5d0/0x5d0 [ 118.406273][ T5792] ? lockdep_lock+0xe0/0x220 [ 118.410957][ T5792] ? _find_first_zero_bit+0xd3/0x100 [ 118.416698][ T5792] __lock_acquire+0x2ddb/0x7c80 [ 118.421656][ T5792] ? ocfs2_get_system_file_inode+0x1e3/0x7b0 [ 118.427899][ T5792] ? __lock_acquire+0x7c80/0x7c80 [ 118.432912][ T5792] ? verify_lock_unused+0x140/0x140 [ 118.438113][ T5792] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 118.443758][ T5792] ? do_raw_spin_lock+0x121/0x2c0 [ 118.448874][ T5792] ? mutex_unlock+0x10/0x10 [ 118.453375][ T5792] lock_acquire+0x197/0x410 [ 118.457866][ T5792] ? __ocfs2_flush_truncate_log+0x351/0x10b0 [ 118.463844][ T5792] ? ocfs2_get_system_file_inode+0x1f1/0x7b0 [ 118.469814][ T5792] ? __might_sleep+0xe0/0xe0 [ 118.474392][ T5792] ? read_lock_is_recursive+0x20/0x20 [ 118.479754][ T5792] ? ocfs2_fast_symlink_read_folio+0x530/0x530 [ 118.485908][ T5792] ? __wake_up+0x11f/0x190 [ 118.490331][ T5792] down_write+0x97/0x1f0 [ 118.494688][ T5792] ? __ocfs2_flush_truncate_log+0x351/0x10b0 [ 118.500758][ T5792] ? down_read_killable+0x340/0x340 [ 118.505944][ T5792] ? _raw_write_unlock+0x28/0x40 [ 118.510868][ T5792] ? jbd2_journal_unlock_updates+0x84/0xe0 [ 118.516676][ T5792] __ocfs2_flush_truncate_log+0x351/0x10b0 [ 118.522481][ T5792] ? ocfs2_truncate_log_needs_flush+0x2e0/0x2e0 [ 118.528719][ T5792] ? read_lock_is_recursive+0x20/0x20 [ 118.534173][ T5792] ? down_write+0x162/0x1f0 [ 118.538752][ T5792] ? down_read_killable+0x340/0x340 [ 118.543937][ T5792] ? __rwlock_init+0x150/0x150 [ 118.548695][ T5792] ocfs2_flush_truncate_log+0x4f/0x60 [ 118.554235][ T5792] ocfs2_sync_fs+0x117/0x310 [ 118.558819][ T5792] ? ocfs2_put_super+0x1c0/0x1c0 [ 118.563745][ T5792] ? writeback_inodes_sb_nr+0x30/0x30 [ 118.569108][ T5792] ? get_nr_dirty_inodes+0x1d4/0x220 [ 118.574390][ T5792] sync_filesystem+0x1c2/0x220 [ 118.579148][ T5792] generic_shutdown_super+0x6f/0x2b0 [ 118.584529][ T5792] kill_block_super+0x44/0x90 [ 118.589195][ T5792] deactivate_locked_super+0x97/0x100 [ 118.594645][ T5792] cleanup_mnt+0x429/0x4c0 [ 118.599054][ T5792] task_work_run+0x1ce/0x250 [ 118.603996][ T5792] ? task_work_cancel+0x240/0x240 [ 118.609112][ T5792] ? exit_to_user_mode_loop+0x3b/0x110 [ 118.614564][ T5792] exit_to_user_mode_loop+0xe6/0x110 [ 118.619841][ T5792] exit_to_user_mode_prepare+0xb1/0x140 [ 118.625379][ T5792] syscall_exit_to_user_mode+0x1a/0x50 [ 118.630826][ T5792] do_syscall_64+0x61/0xb0 [ 118.635235][ T5792] ? clear_bhb_loop+0x40/0x90 [ 118.639900][ T5792] ? clear_bhb_loop+0x40/0x90 [ 118.644655][ T5792] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.650627][ T5792] RIP: 0033:0x7f0545d8fc57 [ 118.655129][ T5792] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 118.674727][ T5792] RSP: 002b:00007ffc05db7d08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 118.683343][ T5792] RAX: 0000000000000000 RBX: 00007f0545e10925 RCX: 00007f0545d8fc57 [ 118.691477][ T5792] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc05db7dc0 [ 118.699445][ T5792] RBP: 00007ffc05db7dc0 R08: 0000000000000000 R09: 0000000000000000 [ 118.707404][ T5792] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc05db8e50 [ 118.715366][ T5792] R13: 00007f0545e10925 R14: 000000000001cab0 R15: 00007ffc05db8e90 [ 118.723331][ T5792] [ 118.736984][ T5799] usb 3-1: Using ep0 maxpacket: 8 [ 118.739347][ T5878] usb 2-1: USB disconnect, device number 12 [ 118.760757][ T5799] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 118.770151][ T5799] usb 3-1: config 179 has no interface number 0 [ 118.777055][ T5799] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 118.789305][ T5799] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 118.792597][ T5792] ocfs2: Unmounting device (7,0) on (node local) [ 118.801779][ T5799] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 118.828628][ T5799] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 118.840411][ T5799] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 118.853990][ T5799] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 118.865231][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.876098][ T6697] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 119.144946][ T5799] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input13 [ 119.378093][ T5878] usb 3-1: USB disconnect, device number 11 [ 119.378199][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 119.392739][ T5878] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 119.392854][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending?