last executing test programs: 4.346037384s ago: executing program 0 (id=854): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) read(r0, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000327000/0x4000)=nil, 0x4000, 0x1}) 4.094688376s ago: executing program 0 (id=857): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000080)="116b41319ef13386d7fd40ac5cf9181c") 3.277789369s ago: executing program 2 (id=878): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x2) 2.634160196s ago: executing program 3 (id=874): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0xff908000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000fc0)) 2.400021097s ago: executing program 2 (id=876): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0xfffffffe, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000340)=""/50, 0x32}], 0x0, 0x2}, 0x20) 2.220685553s ago: executing program 2 (id=880): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec00000001090212"], 0x0) r0 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xade0, 0x400, 0x2, 0x157}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x3e}, 0x0, 0x80002001}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) 2.057172927s ago: executing program 1 (id=881): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000500)={{0xa, 0xe, 0x2, 0x3}, 'syz0\x00', 0x2f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.930410478s ago: executing program 1 (id=882): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x34, r2, 0x1, 0xff1f0000, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0) 1.79862879s ago: executing program 1 (id=884): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001200130628b57000fddbdf2506ff01fc4e244e2108000000f8ffffff010100000900000009000000810000006100000003000000", @ANYRES32=0x0, @ANYBLOB="050000"], 0x54}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setsig(0x4203, r0, 0xa, &(0x7f0000000000)={0xe, 0x9, 0x7}) 1.744043155s ago: executing program 3 (id=885): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000500)=ANY=[@ANYRES32=r0]) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000340)={0x2, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @dev}, {}]}) 1.637049025s ago: executing program 1 (id=886): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) getgroups(0x0, 0x0) write$cgroup_int(r1, &(0x7f0000004700)=0x9, 0x12) 1.636945295s ago: executing program 3 (id=887): setreuid(0xee01, 0xee01) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read$FUSE(r1, &(0x7f0000001040)={0x2020}, 0x2020) pidfd_getfd(r0, r0, 0x0) 1.570078101s ago: executing program 1 (id=888): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000010008500000022000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001600)={&(0x7f0000000340)="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", 0x0, 0x0, 0x0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.485635198s ago: executing program 1 (id=889): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000980)={0x0, 0xef, 0x4, &(0x7f0000000940)={0x15, "79b8142115db2c05f171f5306cf013f1e37ef9335bd9112c19fd2077a025abe98e"}}) 1.314735703s ago: executing program 0 (id=891): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0xfffffffe, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000340)=""/50, 0x32}], 0x0, 0x2}, 0x20) 1.225004171s ago: executing program 0 (id=892): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x40c00) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x2710, @local}, 0x10) shutdown(r0, 0x1) 1.173998756s ago: executing program 0 (id=893): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f5a, &(0x7f0000009040)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x28) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x7e4, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) 799.393759ms ago: executing program 4 (id=896): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000500)=ANY=[@ANYRES32=r0]) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000340)={0x2, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @dev}, {}]}) 768.973172ms ago: executing program 3 (id=897): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001200130628b57000fddbdf2506ff01fc4e244e2108000000f8ffffff010100000900000009000000810000006100000003000000", @ANYRES32=0x0, @ANYBLOB="050000"], 0x54}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setsig(0x4203, r0, 0xa, &(0x7f0000000000)={0xe, 0x9, 0x7}) 701.964998ms ago: executing program 4 (id=898): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) getgroups(0x0, 0x0) write$cgroup_int(r1, &(0x7f0000004700)=0x9, 0x12) 641.033153ms ago: executing program 4 (id=899): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @random="cbfa0177ebfd", 'team_slave_0\x00'}}, 0x1e) 624.894015ms ago: executing program 3 (id=900): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x3, 0x2, 0xf, 0x8}) 563.8812ms ago: executing program 2 (id=901): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x8) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x7) 465.545299ms ago: executing program 0 (id=902): syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0x3, 0x10100, 0x3, 0x171}, &(0x7f0000000380), &(0x7f0000000340)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfdfff010}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 421.809023ms ago: executing program 4 (id=903): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000040)=0xa5) 318.382112ms ago: executing program 4 (id=904): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0xfb}) 255.909288ms ago: executing program 2 (id=905): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000003c0)="b7790d7363831b023e7efe", 0x3, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 188.547144ms ago: executing program 4 (id=906): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") r0 = creat(&(0x7f0000000040)='./file1\x00', 0x102) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x8, 0x6, r0, 0x0, 0x0, 0x200000003, 0x0, 0x0, r0}]) 67.678314ms ago: executing program 2 (id=907): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) getdents64(r0, 0x0, 0x0) 0s ago: executing program 3 (id=908): bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x2e, 0x0, 0x1}, 0x28) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) kernel console output (not intermixed with test programs): DEV_CHANGE): wlan0: link becomes ready [ 65.340585][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.368861][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.406824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.441671][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.449532][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.481954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.546791][ T4255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.569656][ T4255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.593160][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.774516][ T4274] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.796270][ T4298] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15'. [ 65.831029][ T4298] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15'. [ 65.851581][ T4229] Bluetooth: hci1: command 0x0419 tx timeout [ 65.861751][ T4229] Bluetooth: hci2: command 0x0419 tx timeout [ 65.886576][ T4229] Bluetooth: hci3: command 0x0419 tx timeout [ 65.895980][ T4304] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15'. [ 65.906563][ T4229] Bluetooth: hci0: command 0x0419 tx timeout [ 65.933890][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 65.947561][ T4298] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15'. [ 66.021079][ T4274] usb 5-1: Using ep0 maxpacket: 8 [ 66.141215][ T4274] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 66.173249][ T4274] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 66.202446][ T4274] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 66.236948][ T4274] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.307022][ T4274] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 66.318643][ T4274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.328713][ T4325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24'. [ 66.519643][ T4334] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 66.540985][ T4227] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.602859][ T4338] syz.2.29 uses obsolete (PF_INET,SOCK_PACKET) [ 66.653766][ T4274] usb 5-1: GET_CAPABILITIES returned 0 [ 66.664356][ T4274] usbtmc 5-1:16.0: can't read capabilities [ 66.777167][ T4341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 66.781075][ T4227] usb 1-1: Using ep0 maxpacket: 32 [ 66.792290][ T4341] Zero length message leads to an empty skb [ 66.900426][ T4346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'. [ 66.921797][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.940928][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.984354][ T7] usb 5-1: USB disconnect, device number 2 [ 67.013169][ T4227] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 67.049071][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.098757][ T4227] usb 1-1: config 0 descriptor?? [ 67.125894][ T4351] device syzkaller1 entered promiscuous mode [ 67.602831][ T4227] zydacron 0003:13EC:0006.0001: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.0-1/input0 [ 67.761722][ T4380] loop2: detected capacity change from 0 to 1024 [ 67.877648][ T4314] loop0: detected capacity change from 0 to 512 [ 67.921941][ T4314] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 67.921941][ T4314] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 67.921941][ T4314] [ 67.994802][ T4314] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 68.042915][ T4314] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.151692][ T4314] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026019, mo2=0000] [ 68.289402][ T4376] loop4: detected capacity change from 0 to 32768 [ 68.329422][ T4314] EXT4-fs (loop0): 1 truncate cleaned up [ 68.349897][ T4255] Quota error (device loop0): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 68.372923][ T4314] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,noacl,max_batch_time=0x0000000000000006,nodelalloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 68.400658][ T4255] EXT4-fs error (device loop0): ext4_release_dquot:6270: comm kworker/u4:6: Failed to release dquot type 1 [ 68.524594][ T4274] usb 1-1: USB disconnect, device number 2 [ 68.802071][ T4255] attempt to access beyond end of device [ 68.802071][ T4255] loop4: rw=1, want=4680040, limit=32768 [ 68.833859][ T276] blkno = 8ed2c, nblocks = 1 [ 68.838944][ T276] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 68.838944][ T276] [ 68.868238][ T276] ERROR: (device loop4): remounting filesystem as read-only [ 69.120968][ T4417] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 69.667554][ T4440] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.978862][ T4454] IPv4: Oversized IP packet from 127.0.0.1 [ 69.987588][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 70.104706][ T4458] loop3: detected capacity change from 0 to 128 [ 70.168821][ T4430] loop2: detected capacity change from 0 to 32768 [ 70.216572][ T4458] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,noblock_validity,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none. [ 70.223401][ T4463] loop4: detected capacity change from 0 to 128 [ 70.239304][ T4274] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 70.252273][ T4458] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 70.329662][ T4430] XFS (loop2): Mounting V5 Filesystem [ 70.342776][ T4458] EXT4-fs error (device loop3): make_indexed_dir:2333: inode #2: block 18: comm syz.3.80: bad entry in directory: rec_len is smaller than minimal - offset=36, inode=128, rec_len=9, size=1000 fake=0 [ 70.365141][ T4463] ======================================================= [ 70.365141][ T4463] WARNING: The mand mount option has been deprecated and [ 70.365141][ T4463] and is ignored by this kernel. Remove the mand [ 70.365141][ T4463] option from the mount to silence this warning. [ 70.365141][ T4463] ======================================================= [ 70.380565][ T4430] XFS (loop2): Ending clean mount [ 70.449943][ T4430] XFS (loop2): Quotacheck needed: Please wait. [ 70.474902][ T4463] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.486355][ T4463] ext4 filesystem being mounted at /6/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.528242][ T4430] XFS (loop2): Quotacheck: Done. [ 70.541147][ T4274] usb 1-1: Using ep0 maxpacket: 8 [ 70.661172][ T4274] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 70.669717][ T4274] usb 1-1: config 0 has no interface number 0 [ 70.731338][ T4274] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 70.743224][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.749760][ T4480] loop3: detected capacity change from 0 to 512 [ 70.771774][ T4274] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 70.816303][ T4274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.839788][ T4274] usb 1-1: config 0 descriptor?? [ 70.851006][ T4480] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.892363][ T4191] XFS (loop2): Unmounting Filesystem [ 70.912522][ T4480] EXT4-fs (loop3): 1 truncate cleaned up [ 70.918336][ T4480] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000101,noload,,errors=continue. Quota mode: none. [ 70.946070][ T4274] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 71.004837][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 71.121253][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.132964][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.150961][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 71.165033][ T21] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 71.174727][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.187488][ T21] usb 2-1: config 0 descriptor?? [ 71.301706][ T4229] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.391002][ T4274] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.457499][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.464305][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.501699][ T4502] loop2: detected capacity change from 0 to 1024 [ 71.590983][ T4229] usb 4-1: Using ep0 maxpacket: 32 [ 71.604130][ T4502] EXT4-fs (loop2): Ignoring removed orlov option [ 71.613831][ T4502] EXT4-fs (loop2): inline encryption not supported [ 71.620772][ T4502] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 71.631024][ T4274] usb 5-1: Using ep0 maxpacket: 16 [ 71.632573][ T4502] EXT4-fs (loop2): invalid journal inode [ 71.643909][ T4502] EXT4-fs (loop2): can't get journal size [ 71.652083][ T4502] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,norecovery,inlinecrypt,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 71.711240][ T21] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input6 [ 71.752209][ T4274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.756634][ T4229] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 71.767606][ T4274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.773690][ T4229] usb 4-1: config 0 has no interface number 0 [ 71.800702][ T4229] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 71.805131][ T4274] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 71.818872][ T4229] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 71.827342][ T21] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 71.869911][ T4229] usb 4-1: config 0 interface 85 has no altsetting 0 [ 71.879885][ T4274] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 71.926303][ T4274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.957147][ T4508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.97'. [ 71.986216][ T4274] usb 5-1: config 0 descriptor?? [ 72.019610][ T1107] usb 2-1: USB disconnect, device number 2 [ 72.072162][ T4229] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 72.092366][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.129787][ T4229] usb 4-1: Product: syz [ 72.134589][ T4229] usb 4-1: Manufacturer: syz [ 72.140573][ T4229] usb 4-1: SerialNumber: syz [ 72.165774][ T4229] usb 4-1: config 0 descriptor?? [ 72.239934][ T7] usb 1-1: USB disconnect, device number 3 [ 72.295660][ T4515] ªªªªª»: renamed from veth0_vlan [ 72.512858][ T4274] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0003/input/input8 [ 72.532032][ T4522] loop2: detected capacity change from 0 to 1024 [ 72.559607][ T4274] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 72.631231][ T4229] appletouch 4-1:0.85: Failed to request geyser raw mode [ 72.650721][ T4229] appletouch: probe of 4-1:0.85 failed with error -5 [ 72.685035][ T4522] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 72.758107][ T4229] usb 4-1: USB disconnect, device number 2 [ 72.922281][ T7] usb 5-1: USB disconnect, device number 3 [ 73.151820][ T4536] device batadv_slave_1 entered promiscuous mode [ 73.160579][ T4535] device batadv_slave_1 left promiscuous mode [ 73.382449][ T4229] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.468085][ T4530] loop0: detected capacity change from 0 to 40427 [ 73.591542][ T4542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.112'. [ 73.604440][ T4530] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 73.641202][ T4530] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 73.661229][ T4229] usb 3-1: Using ep0 maxpacket: 8 [ 73.678253][ T4530] F2FS-fs (loop0): invalid crc value [ 73.758845][ T4530] F2FS-fs (loop0): Found nat_bits in checkpoint [ 73.821290][ T4229] usb 3-1: config 6 has an invalid interface number: 51 but max is 1 [ 73.844419][ T4229] usb 3-1: config 6 has no interface number 1 [ 73.869068][ T4229] usb 3-1: config 6 interface 0 has no altsetting 0 [ 73.893867][ T4229] usb 3-1: config 6 interface 51 has no altsetting 0 [ 73.951740][ T4530] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 73.978843][ T4530] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 74.114045][ T4229] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 74.138547][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.179950][ T4229] usb 3-1: Product: syz [ 74.194897][ T4229] usb 3-1: Manufacturer: syz [ 74.199954][ T4229] usb 3-1: SerialNumber: syz [ 74.309552][ T4556] loop1: detected capacity change from 0 to 256 [ 74.332285][ T4556] exfat: Deprecated parameter 'utf8' [ 74.348456][ T4556] exfat: Deprecated parameter 'namecase' [ 74.366156][ T4556] exfat: Deprecated parameter 'utf8' [ 74.452972][ T4556] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 74.650479][ T4229] xr_serial 3-1:6.51: xr_serial converter detected [ 74.721128][ T4229] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 74.744853][ T4229] xr_serial: probe of ttyUSB0 failed with error -71 [ 74.787944][ T4229] usb 3-1: USB disconnect, device number 2 [ 74.842835][ T4229] xr_serial 3-1:6.0: device disconnected [ 75.242855][ T4575] cgroup: fork rejected by pids controller in /syz0 [ 75.598969][ T4590] openvswitch: netlink: Actions may not be safe on all matching packets [ 76.091311][ T4254] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.254039][ T4254] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.396814][ T4254] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.532294][ T4254] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.671528][ T4599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'. [ 76.924559][ T4607] input: syz1 as /devices/virtual/input/input9 [ 77.965056][ T4598] chnl_net:caif_netlink_parms(): no params data found [ 78.487660][ T4598] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.524018][ T4598] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.562310][ T4598] device bridge_slave_0 entered promiscuous mode [ 78.582468][ T4598] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.589663][ T4598] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.661804][ T4598] device bridge_slave_1 entered promiscuous mode [ 78.821142][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 78.846072][ T4598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.894305][ T4598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.099508][ T4665] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.122401][ T4598] team0: Port device team_slave_0 added [ 79.171853][ T4598] team0: Port device team_slave_1 added [ 79.272438][ T4598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.279688][ T4598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.365887][ T4598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.402630][ T4598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.436349][ T4598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.530579][ T4598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.687553][ T4686] loop1: detected capacity change from 0 to 512 [ 79.802948][ T4686] EXT4-fs (loop1): Ignoring removed bh option [ 79.819996][ T4686] EXT4-fs (loop1): inline encryption not supported [ 79.837858][ T4686] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.041590][ T4686] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 80.062284][ T4598] device hsr_slave_0 entered promiscuous mode [ 80.075269][ T4686] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.156: bg 0: block 248: padding at end of block bitmap is not set [ 80.143125][ T4598] device hsr_slave_1 entered promiscuous mode [ 80.158189][ T4598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.192431][ T4598] Cannot create hsr debugfs directory [ 80.241359][ T4686] Quota error (device loop1): write_blk: dquota write failed [ 80.281026][ T4686] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 80.412597][ T4686] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.156: Failed to acquire dquot type 1 [ 80.523561][ T4254] device hsr_slave_0 left promiscuous mode [ 80.553403][ T4686] EXT4-fs (loop1): 1 truncate cleaned up [ 80.565902][ T4254] device hsr_slave_1 left promiscuous mode [ 80.581489][ T4686] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 80.598558][ T4254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.639926][ T4254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.667562][ T4254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.691112][ T4254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.721879][ T4254] device bridge_slave_1 left promiscuous mode [ 80.730238][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.814702][ T4254] device bridge_slave_0 left promiscuous mode [ 80.852721][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.891507][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 80.943183][ T4254] device veth1_macvtap left promiscuous mode [ 80.960627][ T4254] device veth0_macvtap left promiscuous mode [ 80.990587][ T4254] device veth1_vlan left promiscuous mode [ 81.020784][ T4254] device veth0_vlan left promiscuous mode [ 81.088642][ T4703] loop2: detected capacity change from 0 to 32768 [ 81.222379][ T4703] XFS (loop2): Mounting V5 Filesystem [ 81.363519][ T4703] XFS (loop2): Ending clean mount [ 81.392489][ T4703] XFS (loop2): Quotacheck needed: Please wait. [ 81.518333][ T4703] XFS (loop2): Quotacheck: Done. [ 81.678336][ T4191] XFS (loop2): Unmounting Filesystem [ 81.716622][ T13] cfg80211: failed to load regulatory.db [ 82.079099][ T4254] team0 (unregistering): Port device team_slave_1 removed [ 82.130485][ T4254] team0 (unregistering): Port device team_slave_0 removed [ 82.198559][ T4254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.251491][ T4254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.374736][ T4254] bond0 (unregistering): Released all slaves [ 82.484594][ T4686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 82.503871][ T4686] netlink: 'syz.1.156': attribute type 1 has an invalid length. [ 82.531323][ T4686] netlink: 'syz.1.156': attribute type 2 has an invalid length. [ 82.651416][ T4686] syz.1.156 (4686) used greatest stack depth: 20728 bytes left [ 82.981113][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 83.558942][ T4598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.659480][ T4598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.732966][ T4598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.753548][ T4765] netlink: 108 bytes leftover after parsing attributes in process `syz.1.171'. [ 83.784507][ T4598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.953312][ T4742] loop2: detected capacity change from 0 to 40427 [ 84.048511][ T4742] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 84.122397][ T4598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.133775][ T4742] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 84.189837][ T4598] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.248459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.270626][ T4742] F2FS-fs (loop2): Found nat_bits in checkpoint [ 84.311337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.382689][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.411808][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.461281][ T4689] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.468840][ T4689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.490230][ T4742] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 84.508372][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.528358][ T4742] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 84.537319][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.567989][ T4689] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.575640][ T4689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.671495][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.741589][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.772076][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.830376][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.861207][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.890255][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.908769][ T4793] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 84.908830][ T4793] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 84.932481][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.991040][ T4793] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 84.991068][ T4793] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 85.011959][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.029273][ T4793] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 85.029297][ T4793] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 85.054203][ T4793] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 85.070288][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 85.071768][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.174858][ T4598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.281912][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.310368][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.336373][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.372264][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.971603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.979698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.017493][ T4816] loop1: detected capacity change from 0 to 256 [ 86.070832][ T4598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.162213][ T4816] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 86.237058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.288393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.408825][ T4598] device veth0_vlan entered promiscuous mode [ 86.489819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.517670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.568114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.621656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.672907][ T4598] device veth1_vlan entered promiscuous mode [ 86.720966][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.871936][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.892293][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.963936][ T4598] device veth0_macvtap entered promiscuous mode [ 87.014135][ T4598] device veth1_macvtap entered promiscuous mode [ 87.101355][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.151463][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.190912][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.222591][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.263379][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.324657][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.367621][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.427022][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.453953][ T4598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.501928][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.510473][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.540450][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.584977][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.623138][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.662257][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.727043][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.766219][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.811034][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.864558][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.881767][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.915938][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.947173][ T4598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.983142][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.008014][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.049376][ T4598] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.081016][ T4598] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.090148][ T4598] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.132493][ T4598] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.440249][ T4255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.488052][ T4255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.527600][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.608687][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.627163][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.661195][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.211971][ T4942] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 90.211971][ T4942] The task syz.2.222 (4942) triggered the difference, watch for misbehavior. [ 90.878081][ T4963] device syzkaller1 entered promiscuous mode [ 91.185752][ T4939] loop1: detected capacity change from 0 to 32768 [ 91.192814][ T26] audit: type=1326 audit(1771937873.451:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.3.233" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69eeaa0629 code=0x0 [ 91.434187][ T4939] XFS (loop1): Mounting V5 Filesystem [ 91.658117][ T4939] XFS (loop1): Ending clean mount [ 91.673027][ T4939] XFS (loop1): Quotacheck needed: Please wait. [ 91.859287][ T4939] XFS (loop1): Quotacheck: Done. [ 92.064190][ T5010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 92.246929][ T4184] XFS (loop1): Unmounting Filesystem [ 92.838898][ T5009] loop0: detected capacity change from 0 to 32768 [ 92.890003][ T5009] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.240 (5009) [ 92.941559][ T5009] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 92.966560][ T5009] BTRFS info (device loop0): turning off barriers [ 92.980501][ T5009] BTRFS info (device loop0): setting nodatasum [ 93.030190][ T5009] BTRFS info (device loop0): force zlib compression, level 3 [ 93.048755][ T5009] BTRFS info (device loop0): ignoring bad roots [ 93.064567][ T5009] BTRFS info (device loop0): turning on barriers [ 93.074282][ T5009] BTRFS info (device loop0): unrecognized rescue option 'ignoremetacsums' [ 93.090727][ T5009] BTRFS error (device loop0): unrecognized rescue value ignoremetacsums [ 93.132358][ T5009] BTRFS error (device loop0): open_ctree failed: -22 [ 93.236831][ T5041] netlink: 104 bytes leftover after parsing attributes in process `syz.2.247'. [ 93.412046][ T4176] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4176) [ 93.446281][ T26] audit: type=1326 audit(1771937875.711:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.0.251" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb17367629 code=0x0 [ 93.469335][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 93.741165][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 93.756474][ T13] kernel write not supported for file /vbi5 (pid: 13 comm: kworker/0:1) [ 93.871422][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.883729][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.894644][ T7] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 93.904553][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.924327][ T7] usb 5-1: config 0 descriptor?? [ 93.962101][ T5063] input: syz1 as /devices/virtual/input/input10 [ 94.423225][ T7] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 94.440794][ T7] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 94.452657][ T7] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 94.460834][ T7] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 94.489819][ T7] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 94.501516][ T7] cm6533_jd 0003:0D8C:0022.0004: No inputs registered, leaving [ 94.539243][ T7] cm6533_jd 0003:0D8C:0022.0004: hiddev0,hidraw0: USB HID va6.05 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 94.735371][ T4227] usb 5-1: USB disconnect, device number 4 [ 95.145235][ T7] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 95.380950][ T4227] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.541401][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.561709][ T7] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.601135][ T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 95.631098][ T4227] usb 2-1: Using ep0 maxpacket: 16 [ 95.641395][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.818946][ T5126] loop2: detected capacity change from 0 to 16 [ 95.904161][ T5126] erofs: (device loop2): mounted with root inode @ nid 36. [ 95.913077][ T4227] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 95.945366][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.961114][ T7] usb 1-1: usb_control_msg returned -32 [ 95.971184][ T7] usbtmc 1-1:16.0: can't read capabilities [ 95.976139][ T4227] usb 2-1: Product: syz [ 95.994182][ T4227] usb 2-1: Manufacturer: syz [ 96.014382][ T4227] usb 2-1: SerialNumber: syz [ 96.078998][ T4227] usb 2-1: config 0 descriptor?? [ 96.510376][ T5139] input: syz0 as /devices/virtual/input/input11 [ 96.552556][ T4176] udevd[4176]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 96.582009][ T4227] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 96.631625][ T4227] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 96.681545][ T4227] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 96.707575][ T4227] usb 2-1: media controller created [ 96.764157][ T4227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.855669][ T5124] IPVS: You probably need to specify IP address on multicast interface. [ 96.895792][ T5124] IPVS: Error connecting to the multicast addr [ 97.403458][ T5159] device hsr0 entered promiscuous mode [ 97.413915][ T4227] zl10353_read_register: readreg error (reg=127, ret==0) [ 97.426629][ T5159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.294'. [ 97.434867][ T4227] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 97.468066][ T4227] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 97.477990][ T5159] device hsr_slave_0 left promiscuous mode [ 97.509869][ T5159] device hsr_slave_1 left promiscuous mode [ 97.525360][ T4227] usb 2-1: USB disconnect, device number 3 [ 97.628948][ T4227] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 97.656028][ T5159] device hsr0 left promiscuous mode [ 97.737300][ T5169] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 97.878926][ T7] usb 1-1: USB disconnect, device number 4 [ 98.012456][ T5177] loop0: detected capacity change from 0 to 2048 [ 98.047647][ T5179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.060996][ T5179] team0: Port device bond1 added [ 98.104148][ T5177] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.241036][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.477687][ T5191] netlink: 36 bytes leftover after parsing attributes in process `syz.3.307'. [ 98.481245][ T4230] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 98.621953][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.637988][ T5197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.309'. [ 98.642453][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.661207][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.674366][ T23] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.683811][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.694137][ T23] usb 3-1: config 0 descriptor?? [ 98.828274][ T5199] autofs4:pid:5199:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 98.885827][ T4230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.925801][ T4230] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 98.956854][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.987985][ T5209] loop3: detected capacity change from 0 to 512 [ 99.008247][ T4230] usb 5-1: config 0 descriptor?? [ 99.139365][ T5209] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 99.167155][ T5209] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.182937][ T23] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 99.209198][ T23] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 99.235240][ T23] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 99.243970][ T23] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 99.258146][ T23] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 99.272063][ T23] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 99.280036][ T23] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 99.293726][ T23] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 99.326877][ T5218] netlink: 2 bytes leftover after parsing attributes in process `syz.1.319'. [ 99.359298][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.376715][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.401280][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.419043][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.430794][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.442217][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.453664][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.461057][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 99.466581][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.484493][ T5218] device batadv_slave_1 entered promiscuous mode [ 99.503191][ T4230] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 99.521419][ T4230] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 99.529665][ T4230] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 99.557703][ T13] usb 3-1: USB disconnect, device number 3 [ 99.568515][ T4230] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 99.596022][ T4230] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 99.637727][ T4230] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 99.646250][ T4230] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 99.721218][ T4230] hid-picolcd 0003:04D8:C002.0006: No report with id 0x11 found [ 99.727031][ T5228] loop1: detected capacity change from 0 to 2048 [ 99.746368][ T4230] usb 5-1: USB disconnect, device number 5 [ 99.786538][ T5228] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 99.804122][ T5228] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 99.821577][ T5228] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 99.841287][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.869477][ T5228] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 99.871241][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 99.905031][ T5228] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 99.911266][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.921588][ T5228] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 99.948746][ T5228] UDF-fs: Scanning with blocksize 512 failed [ 99.957738][ T5228] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 99.969852][ T5228] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 99.982042][ T5228] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 99.994678][ T5228] UDF-fs: warning (device loop1): udf_fill_super: No fileset found [ 100.101233][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 100.139352][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 100.179453][ T23] usb 1-1: Product: syz [ 100.191058][ T23] usb 1-1: Manufacturer: syz [ 100.195806][ T23] usb 1-1: SerialNumber: syz [ 100.482683][ T23] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 100.501197][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 100.525187][ T5240] loop4: detected capacity change from 0 to 512 [ 100.691967][ T1107] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.789119][ T23] usb 1-1: USB disconnect, device number 5 [ 100.804580][ T23] usblp0: removed [ 100.951270][ T7] usb 2-1: config 1 has an invalid descriptor of length 51, skipping remainder of the config [ 100.966375][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.981055][ T1107] usb 3-1: Using ep0 maxpacket: 32 [ 101.071104][ T7] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 101.090705][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.111193][ T1107] usb 3-1: config 0 has an invalid interface number: 244 but max is 0 [ 101.120213][ T1107] usb 3-1: config 0 has no interface number 0 [ 101.126930][ T7] usb 2-1: SerialNumber: syz [ 101.150930][ T1107] usb 3-1: config 0 interface 244 has no altsetting 0 [ 101.311060][ T1107] usb 3-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 101.350994][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.359485][ T1107] usb 3-1: Product: syz [ 101.371634][ T1107] usb 3-1: Manufacturer: syz [ 101.376527][ T1107] usb 3-1: SerialNumber: syz [ 101.411938][ T1107] usb 3-1: config 0 descriptor?? [ 101.425785][ T7] usb 2-1: 0:2 : does not exist [ 101.462995][ T1107] snd_usb_toneport 3-1:0.244: Line 6 GuitarPort found [ 101.472418][ T7] usb 2-1: unit 48 not found! [ 101.561494][ T7] usb 2-1: USB disconnect, device number 4 [ 101.588567][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.682659][ T1107] snd_usb_toneport 3-1:0.244: cannot get proper max packet size [ 101.721351][ T1107] snd_usb_toneport 3-1:0.244: Line 6 GuitarPort now disconnected [ 101.747312][ T1107] snd_usb_toneport: probe of 3-1:0.244 failed with error -22 [ 101.917302][ T5263] process 'syz.4.335' launched './file0' with NULL argv: empty string added [ 101.934247][ T7] usb 3-1: USB disconnect, device number 4 [ 101.943081][ T5263] Invalid argument reading file caps for ./file0 [ 102.573270][ T5287] capability: warning: `syz.2.346' uses deprecated v2 capabilities in a way that may be insecure [ 102.980972][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 103.015003][ T5306] loop2: detected capacity change from 0 to 512 [ 103.050048][ T5310] loop4: detected capacity change from 0 to 2048 [ 103.117430][ T5306] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 103.143108][ T5306] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 103.164885][ T5306] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 103.181518][ T5306] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 103.190632][ T5306] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 103.225963][ T5306] EXT4-fs (loop2): orphan cleanup on readonly fs [ 103.246005][ T5306] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.355: bg 0: block 34: padding at end of block bitmap is not set [ 103.264351][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 103.302310][ T5310] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.320741][ T5306] Quota error (device loop2): write_blk: dquota write failed [ 103.343662][ T5310] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 103.373502][ T5306] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 103.391323][ T13] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 103.393166][ T5306] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.355: Failed to acquire dquot type 1 [ 103.399780][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.399806][ T13] usb 1-1: config 0 has no interface number 0 [ 103.412121][ T5310] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 103.445285][ T1107] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.456948][ T5310] EXT4-fs (loop4): This should not happen!! Data will be lost [ 103.456948][ T5310] [ 103.470038][ T5310] EXT4-fs (loop4): Total free blocks count 0 [ 103.477095][ T5310] EXT4-fs (loop4): Free/Dirty block details [ 103.484091][ T5310] EXT4-fs (loop4): free_blocks=2415919504 [ 103.490710][ T5310] EXT4-fs (loop4): dirty_blocks=48 [ 103.497318][ T5310] EXT4-fs (loop4): Block reservation details [ 103.505338][ T5310] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 103.552205][ T5306] EXT4-fs (loop2): 1 truncate cleaned up [ 103.571239][ T13] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 103.582644][ T5306] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,bsdgroups,barrier=0x0000000000000003,noblock_validity,,errors=continue. Quota mode: writeback. [ 103.583536][ T144] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 103.600752][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.630977][ T13] usb 1-1: Product: syz [ 103.640977][ T13] usb 1-1: Manufacturer: syz [ 103.651570][ T13] usb 1-1: SerialNumber: syz [ 103.665022][ T144] EXT4-fs (loop4): This should not happen!! Data will be lost [ 103.665022][ T144] [ 103.671928][ T13] usb 1-1: config 0 descriptor?? [ 103.701001][ T1107] usb 2-1: Using ep0 maxpacket: 16 [ 103.755025][ T13] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 103.788568][ T13] usb 1-1: No valid video chain found. [ 103.821257][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.867233][ T1107] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 103.893729][ T1107] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 103.903882][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.917138][ T1107] usb 2-1: config 0 descriptor?? [ 104.069372][ T4230] usb 1-1: USB disconnect, device number 6 [ 104.121044][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.380072][ T5338] loop4: detected capacity change from 0 to 32768 [ 104.398966][ T5338] xfs: Unknown parameter 'smackfstransmute' [ 104.435580][ T1107] kye 0003:0458:5010.0007: hidraw0: USB HID v0.0f Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 104.460994][ T1107] kye 0003:0458:5010.0007: tablet-enabling feature report not found [ 104.480651][ T1107] kye 0003:0458:5010.0007: tablet enabling failed [ 104.491911][ T5341] loop2: detected capacity change from 0 to 32768 [ 104.564257][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.605505][ T5341] JBD2: Ignoring recovery information on journal [ 104.618320][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.787588][ T5341] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 104.803218][ T4230] usb 2-1: USB disconnect, device number 5 [ 104.832979][ T23] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 104.853138][ T23] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 104.870118][ T23] usb 4-1: Manufacturer: syz [ 104.877609][ T23] usb 4-1: config 0 descriptor?? [ 105.127012][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 105.491863][ T5387] loop2: detected capacity change from 0 to 128 [ 105.521079][ T13] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 105.558197][ T5387] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 105.627375][ T5393] loop4: detected capacity change from 0 to 128 [ 105.682819][ T5393] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.695500][ T5393] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 105.714993][ T5395] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 105.821054][ T4230] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 105.922168][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.962827][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 105.984394][ T13] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 105.994932][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.011255][ T23] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #100: -71 [ 106.020504][ T23] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 106.037176][ T13] usb 1-1: config 0 descriptor?? [ 106.051762][ T23] uclogic 0003:256C:006D.0008: failed probing pen v1 parameters: -71 [ 106.067335][ T23] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 106.076122][ T23] uclogic: probe of 0003:256C:006D.0008 failed with error -71 [ 106.091520][ T23] usb 4-1: USB disconnect, device number 3 [ 106.227243][ T5408] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 106.241361][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.254180][ T4230] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 106.264766][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.298192][ T5410] Invalid argument reading file caps for ./file0 [ 106.300460][ T4230] usb 2-1: config 0 descriptor?? [ 106.525076][ T13] konepure 0003:1E7D:2DB4.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.0-1/input0 [ 106.768417][ T13] usb 1-1: USB disconnect, device number 7 [ 106.916428][ T4230] hid-rmi 0003:0461:4E72.000A: hidraw0: USB HID v10.00 Device [HID 0461:4e72] on usb-dummy_hcd.1-1/input0 [ 107.123397][ T5434] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.148089][ T13] usb 2-1: USB disconnect, device number 6 [ 107.222129][ T5434] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.640359][ T5451] netlink: 'syz.4.409': attribute type 2 has an invalid length. [ 107.976255][ T5461] device syzkaller1 entered promiscuous mode [ 108.388775][ T5493] cgroup: fork rejected by pids controller in /syz4 [ 109.101097][ T4229] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.378982][ T4229] usb 3-1: Using ep0 maxpacket: 16 [ 109.457172][ T1107] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 109.501233][ T4229] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 109.521077][ T4229] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.541144][ T4229] usb 3-1: config 0 has no interface number 0 [ 109.711333][ T4229] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 109.731809][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.750430][ T4229] usb 3-1: Product: syz [ 109.755327][ T4229] usb 3-1: Manufacturer: syz [ 109.760263][ T4229] usb 3-1: SerialNumber: syz [ 109.782106][ T4229] usb 3-1: config 0 descriptor?? [ 109.833280][ T4229] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 109.843938][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 109.861120][ T4229] usb 3-1: No valid video chain found. [ 109.871368][ T1107] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 109.885977][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.907882][ T1107] usb 4-1: config 0 descriptor?? [ 110.039587][ T5524] chnl_net:caif_netlink_parms(): no params data found [ 110.083106][ T4229] usb 3-1: USB disconnect, device number 5 [ 110.286925][ T5524] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.318548][ T5524] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.339091][ T5524] device bridge_slave_0 entered promiscuous mode [ 110.358838][ T5524] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.376902][ T5524] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.411216][ T5524] device bridge_slave_1 entered promiscuous mode [ 110.455417][ T1107] hid-rmi 0003:0461:4E72.000B: hidraw0: USB HID v10.00 Device [HID 0461:4e72] on usb-dummy_hcd.3-1/input0 [ 110.538247][ T5524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.573886][ T5524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.574909][ T5541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.442'. [ 110.733125][ T5524] team0: Port device team_slave_0 added [ 110.762123][ T5524] team0: Port device team_slave_1 added [ 110.788357][ T4231] usb 4-1: USB disconnect, device number 4 [ 110.854874][ T5547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 110.858945][ T5524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.906026][ T5524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.971224][ T5524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.008484][ T5524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.037871][ T5524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.103161][ T5524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.145446][ T5553] cgroup: fork rejected by pids controller in /syz2 [ 111.255051][ T5524] device hsr_slave_0 entered promiscuous mode [ 111.291506][ T5524] device hsr_slave_1 entered promiscuous mode [ 111.673487][ T1107] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 111.745449][ T4274] Bluetooth: hci4: command 0x0409 tx timeout [ 111.860827][ T5524] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.998832][ T5524] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.061186][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.061411][ T4689] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.093989][ T1107] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.138686][ T1107] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 112.152770][ T5524] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.178495][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.233302][ T4689] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.235083][ T1107] usb 4-1: config 0 descriptor?? [ 112.306056][ T5524] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.370236][ T4689] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.495497][ T4689] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.756299][ T1107] konepure 0003:1E7D:2DB4.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0 [ 112.767042][ T5571] loop1: detected capacity change from 0 to 32768 [ 112.896819][ T5571] XFS (loop1): Mounting V5 Filesystem [ 112.900117][ T5572] chnl_net:caif_netlink_parms(): no params data found [ 113.156236][ T5571] XFS (loop1): Starting recovery (logdev: internal) [ 113.266057][ T5524] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.297627][ T4232] usb 4-1: USB disconnect, device number 5 [ 113.336733][ T5571] XFS (loop1): Ending recovery (logdev: internal) [ 113.361806][ T5524] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.444974][ T5524] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.527166][ T5572] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.551309][ T5572] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.573233][ T5572] device bridge_slave_0 entered promiscuous mode [ 113.591866][ T5524] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.672218][ T5572] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.679721][ T5572] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.692124][ T5572] device bridge_slave_1 entered promiscuous mode [ 113.771333][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 113.970317][ T4184] XFS (loop1): Unmounting Filesystem [ 113.984407][ T5572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.038976][ T5572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.164592][ T5524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.184175][ T5572] team0: Port device team_slave_0 added [ 114.225030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.258443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.296189][ T5524] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.322760][ T5572] team0: Port device team_slave_1 added [ 114.370767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.411229][ T2345] Bluetooth: hci2: command 0x0409 tx timeout [ 114.422923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.459634][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.466823][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.565983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.581854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.612884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.647298][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.654678][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.711344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.752165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.804931][ T5572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.841135][ T5572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.910296][ T5572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.938387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.974315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.015551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.050570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.076621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.099192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.122596][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.142405][ T5572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.149654][ T5572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.191098][ T5612] netlink: 277 bytes leftover after parsing attributes in process `syz.0.467'. [ 115.221176][ T5572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.296668][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.321759][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.395075][ T5572] device hsr_slave_0 entered promiscuous mode [ 115.420428][ T5572] device hsr_slave_1 entered promiscuous mode [ 115.428964][ T5572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.455794][ T5572] Cannot create hsr debugfs directory [ 115.508789][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.851247][ T4274] Bluetooth: hci4: command 0x040f tx timeout [ 116.091068][ T1107] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 116.139825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.157689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.285086][ T5524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.451376][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.501462][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 116.511003][ T1107] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 116.539892][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.593721][ T1107] usb 1-1: config 0 descriptor?? [ 116.880182][ T5572] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 116.932828][ T5572] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 116.985714][ T5572] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 117.019226][ T5572] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 117.110080][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.123786][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.214668][ T1107] hid-rmi 0003:0461:4E72.000D: hidraw0: USB HID v10.00 Device [HID 0461:4e72] on usb-dummy_hcd.0-1/input0 [ 117.232782][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.254191][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.286584][ T5524] device veth0_vlan entered promiscuous mode [ 117.297456][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.312615][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.397703][ T5524] device veth1_vlan entered promiscuous mode [ 117.431693][ T5572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.437474][ T1107] usb 1-1: USB disconnect, device number 8 [ 117.507240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.529721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.569575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.597980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.627938][ T5572] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.649684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.698991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.732914][ T5524] device veth0_macvtap entered promiscuous mode [ 117.744006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.771512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.798150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.827845][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.835346][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.941614][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 117.967519][ T5524] device veth1_macvtap entered promiscuous mode [ 117.982184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.016639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.039470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.069360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.100660][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.108238][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.175698][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.231401][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.260993][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.292382][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.310929][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.332236][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.355756][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.380971][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.402604][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.417144][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.439303][ T5524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.469905][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.488437][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.519596][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.548548][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.581083][ T4274] Bluetooth: hci2: command 0x040f tx timeout [ 118.581784][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.637376][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.741211][ T5682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.802305][ T5682] team0: Port device bond1 added [ 118.872643][ T4689] device hsr_slave_0 left promiscuous mode [ 118.879947][ T4689] device hsr_slave_1 left promiscuous mode [ 118.935039][ T4689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.945015][ T4689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.972242][ T4689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.001046][ T4689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.017134][ T4689] device bridge_slave_1 left promiscuous mode [ 119.039489][ T4689] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.073581][ T4689] device bridge_slave_0 left promiscuous mode [ 119.079923][ T4689] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.144710][ T4689] device hsr_slave_0 left promiscuous mode [ 119.174505][ T4689] device hsr_slave_1 left promiscuous mode [ 119.201546][ T4689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.210710][ T4689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.251879][ T4689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.271304][ T4689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.292608][ T4689] device bridge_slave_1 left promiscuous mode [ 119.310095][ T4689] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.372899][ T4689] device veth1_macvtap left promiscuous mode [ 119.379423][ T4689] device veth0_macvtap left promiscuous mode [ 119.389286][ T4689] device veth1_vlan left promiscuous mode [ 119.432105][ T4689] device veth1_macvtap left promiscuous mode [ 119.439924][ T4689] device veth0_macvtap left promiscuous mode [ 119.447055][ T4689] device veth1_vlan left promiscuous mode [ 119.457105][ T4689] device veth0_vlan left promiscuous mode [ 120.017143][ T4689] team0 (unregistering): Port device team_slave_1 removed [ 120.038937][ T4689] team0 (unregistering): Port device team_slave_0 removed [ 120.056239][ T4689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.075981][ T4689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.201100][ T4689] bond0 (unregistering): Released all slaves [ 120.287252][ T4689] team0 (unregistering): Port device bond1 removed [ 120.306078][ T4689] bond1 (unregistering): Released all slaves [ 120.480425][ T4689] team0 (unregistering): Port device team_slave_1 removed [ 120.499621][ T4689] team0 (unregistering): Port device team_slave_0 removed [ 120.517815][ T4689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.540326][ T4689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.651319][ T4227] Bluetooth: hci2: command 0x0419 tx timeout [ 120.709652][ T4689] bond0 (unregistering): Released all slaves [ 120.757978][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.774399][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.790019][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.803226][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.825341][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.846680][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.866331][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.879284][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.899711][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.920910][ T5524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.938649][ T5572] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 120.966665][ T5572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.005574][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.056069][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.093992][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.175170][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.226871][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.261296][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.286523][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.317304][ T5524] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.344156][ T5524] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.374570][ T5524] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.390316][ T5524] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.393262][ T5717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.475'. [ 121.679850][ T5729] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 121.681591][ T4255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.711150][ T4230] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 121.822113][ T4255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.859502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.886943][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.914928][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.970662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 121.972298][ T4230] usb 1-1: Using ep0 maxpacket: 32 [ 122.056229][ T5740] loop3: detected capacity change from 0 to 2048 [ 122.144985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.153267][ T4230] usb 1-1: config 3 has an invalid interface number: 199 but max is 0 [ 122.177132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.197011][ T5740] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 122.197223][ T4230] usb 1-1: config 3 has no interface number 0 [ 122.245983][ T5740] UDF-fs: Scanning with blocksize 512 failed [ 122.246059][ T5572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.280611][ T4230] usb 1-1: config 3 interface 199 has no altsetting 0 [ 122.345172][ T5740] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.356276][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.383531][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.485721][ T4230] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=68.9e [ 122.510598][ T5572] device veth0_vlan entered promiscuous mode [ 122.521580][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.539772][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.550723][ T4230] usb 1-1: Product: syz [ 122.567588][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.576588][ T4230] usb 1-1: Manufacturer: syz [ 122.586404][ T4230] usb 1-1: SerialNumber: syz [ 122.599070][ T5572] device veth1_vlan entered promiscuous mode [ 122.625737][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.663931][ T4230] usb 1-1: bad CDC descriptors [ 122.691909][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.721931][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 122.922613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 123.011560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.012247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.013237][ T5722] udc-core: couldn't find an available UDC or it's busy [ 123.013254][ T5722] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 123.015810][ T4230] usb 1-1: USB disconnect, device number 9 [ 123.018417][ T5572] device veth0_macvtap entered promiscuous mode [ 123.094195][ T5572] device veth1_macvtap entered promiscuous mode [ 123.165262][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.165285][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.165297][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.165310][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.165323][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.165336][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.165347][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.165360][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.166764][ T5572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.181395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 123.182621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 123.183108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.183598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.189527][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.189552][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.189563][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.189577][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.189589][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.189603][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.189614][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.189628][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.192043][ T5572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.206225][ T5572] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.206264][ T5572] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.206290][ T5572] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.206316][ T5572] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.221304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.221999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.327714][ T5785] loop4: detected capacity change from 0 to 512 [ 123.379863][ T5785] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 123.399266][ T5785] EXT4-fs error (device loop4): mb_free_blocks:1876: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 123.401621][ T5785] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #11: comm syz.4.491: corrupted inode contents [ 123.411326][ T5785] EXT4-fs error (device loop4): ext4_dirty_inode:6058: inode #11: comm syz.4.491: mark_inode_dirty error [ 123.687161][ T4255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.764674][ T5785] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.491: invalid indirect mapped block 1 (level 1) [ 123.865499][ T5785] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #11: comm syz.4.491: corrupted inode contents [ 123.891420][ T5785] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 123.931454][ T4255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.948411][ T5785] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #11: comm syz.4.491: corrupted inode contents [ 123.991857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.041471][ T4254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.049520][ T4254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.069777][ T5785] EXT4-fs error (device loop4): ext4_truncate:4279: inode #11: comm syz.4.491: mark_inode_dirty error [ 124.142402][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.179401][ T5796] loop0: detected capacity change from 0 to 8192 [ 124.186500][ T5785] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 124.249201][ T5785] EXT4-fs (loop4): 1 truncate cleaned up [ 124.275008][ T5785] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,noquota,,errors=continue. Quota mode: none. [ 124.370524][ T5796] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 124.451341][ T5796] REISERFS (device loop0): using ordered data mode [ 124.457997][ T5796] reiserfs: using flush barriers [ 124.553076][ T5796] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 124.621838][ T5796] REISERFS (device loop0): checking transaction log (loop0) [ 124.679383][ T26] audit: type=1800 audit(1771937906.941:4): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.491" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 124.730608][ T5785] Invalid ELF header magic: != ELF [ 125.003864][ T5839] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 125.080216][ T5796] REISERFS (device loop0): Using tea hash to sort names [ 125.109611][ T5796] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 125.204482][ T5796] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 125.534785][ T5851] loop4: detected capacity change from 0 to 4096 [ 125.675945][ T5796] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 125.724373][ T5796] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 6) not found (pos 2) [ 125.823854][ T5865] netlink: 36 bytes leftover after parsing attributes in process `syz.2.517'. [ 125.918392][ T5865] netlink: 36 bytes leftover after parsing attributes in process `syz.2.517'. [ 126.163768][ T5869] loop4: detected capacity change from 0 to 512 [ 126.237689][ T5872] loop5: detected capacity change from 0 to 4215 [ 126.306846][ T5874] loop5: detected capacity change from 4215 to 4391 [ 126.319674][ T5869] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 126.377074][ T5869] System zones: 0-2, 18-18, 34-35 [ 126.470509][ T5869] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.576556][ T5869] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.886929][ T5889] loop0: detected capacity change from 0 to 32768 [ 127.906700][ T5909] loop4: detected capacity change from 0 to 128 [ 127.983432][ T5909] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.009821][ T5889] (syz.0.526,5889,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 128.092058][ T5889] (syz.0.526,5889,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 128.108398][ T5909] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.149606][ T5916] netlink: 'syz.2.536': attribute type 4 has an invalid length. [ 128.232421][ T5889] JBD2: Ignoring recovery information on journal [ 128.400811][ T5889] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 128.415607][ T5922] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 128.490137][ T5927] loop3: detected capacity change from 0 to 512 [ 128.559328][ T4689] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.619878][ T5927] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 128.644004][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.661061][ T5927] System zones: 0-2, 18-18, 34-35 [ 128.685339][ T5929] device bridge_slave_1 left promiscuous mode [ 128.701249][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.730772][ T5929] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 128.761216][ T5927] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.799280][ T4598] ocfs2: Unmounting device (7,0) on (node local) [ 128.857039][ T5927] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.946023][ T5937] device macvlan2 entered promiscuous mode [ 129.011635][ T5937] device macvlan3 entered promiscuous mode [ 129.225668][ T5943] loop3: detected capacity change from 0 to 128 [ 129.288404][ T5943] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 129.722065][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.549'. [ 130.071105][ T4230] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 130.089370][ T5972] netlink: 'syz.0.558': attribute type 4 has an invalid length. [ 130.103953][ T5972] netlink: 'syz.0.558': attribute type 4 has an invalid length. [ 130.127177][ T5972] netlink: 'syz.0.558': attribute type 7 has an invalid length. [ 130.142448][ T5972] netlink: 197204 bytes leftover after parsing attributes in process `syz.0.558'. [ 130.184832][ T5976] loop8: detected capacity change from 0 to 8 [ 130.218038][ T5976] Dev loop8: unable to read RDB block 8 [ 130.239291][ T5976] loop8: unable to read partition table [ 130.246167][ T4227] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 130.265792][ T5976] loop8: partition table beyond EOD, truncated [ 130.277984][ T5976] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 130.292161][ T5982] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.563'. [ 130.341693][ T4230] usb 4-1: Using ep0 maxpacket: 16 [ 130.471483][ T4230] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.511025][ T4230] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.541050][ T4227] usb 5-1: Using ep0 maxpacket: 16 [ 130.672071][ T4227] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.694521][ T4227] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.705448][ T4230] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.728687][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.741960][ T4230] usb 4-1: Product: syz [ 130.747091][ T4230] usb 4-1: Manufacturer: syz [ 130.753358][ T4230] usb 4-1: SerialNumber: syz [ 130.792557][ T6003] input: syz1 as /devices/virtual/input/input13 [ 130.839739][ T6005] netlink: 'syz.1.572': attribute type 4 has an invalid length. [ 130.921218][ T4227] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.950166][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.989380][ T4227] usb 5-1: Product: syz [ 131.004653][ T4227] usb 5-1: Manufacturer: syz [ 131.009404][ T4227] usb 5-1: SerialNumber: syz [ 131.241339][ T4230] usb 4-1: 0:2 : does not exist [ 131.551117][ T4227] usb 5-1: 0:2 : does not exist [ 131.598515][ T4227] usb 5-1: USB disconnect, device number 6 [ 131.697332][ T4230] usb 4-1: USB disconnect, device number 6 [ 131.891895][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 131.920612][ T6042] loop1: detected capacity change from 0 to 1024 [ 132.076585][ T6042] attempt to access beyond end of device [ 132.076585][ T6042] loop1: rw=0, want=5780, limit=1024 [ 132.137916][ T6042] Buffer I/O error on dev loop1, logical block 2889, async page read [ 132.191135][ T6042] attempt to access beyond end of device [ 132.191135][ T6042] loop1: rw=0, want=5780, limit=1024 [ 132.271776][ T6042] Buffer I/O error on dev loop1, logical block 2889, async page read [ 132.320240][ T26] audit: type=1800 audit(1771937914.581:5): pid=6042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.588" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 132.347174][ T4230] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 132.458618][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.484011][ T6057] device bridge_slave_1 left promiscuous mode [ 132.496508][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.545443][ T6057] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 132.601135][ T4230] usb 5-1: Using ep0 maxpacket: 16 [ 132.741808][ T4230] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.780904][ T4230] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.812275][ T5599] libceph: connect (1)[c::]:6789 error -101 [ 132.819541][ T5599] libceph: mon0 (1)[c::]:6789 connect error [ 132.821015][ T4230] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 132.834643][ T5599] libceph: connect (1)[c::]:6789 error -101 [ 132.846568][ T5599] libceph: mon0 (1)[c::]:6789 connect error [ 132.901325][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.912632][ T4230] usb 5-1: config 0 interface 0 has no altsetting 0 [ 132.919648][ T4230] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 132.938408][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.949777][ T4230] usb 5-1: config 0 descriptor?? [ 133.113222][ T2345] libceph: connect (1)[c::]:6789 error -101 [ 133.130348][ T2345] libceph: mon0 (1)[c::]:6789 connect error [ 133.380671][ T6063] loop3: detected capacity change from 0 to 32768 [ 133.416975][ T6063] (syz.3.598,6063,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 133.443823][ T4230] hid (null): unknown global tag 0xd [ 133.451564][ T6063] (syz.3.598,6063,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 133.561623][ T6063] JBD2: Ignoring recovery information on journal [ 133.573427][ T6061] ceph: No mds server is up or the cluster is laggy [ 133.652756][ T2345] libceph: connect (1)[c::]:6789 error -101 [ 133.659055][ T2345] libceph: mon0 (1)[c::]:6789 connect error [ 133.708218][ T4230] usb 5-1: USB disconnect, device number 7 [ 133.728480][ T6063] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 133.966646][ T4185] ocfs2: Unmounting device (7,3) on (node local) [ 134.346351][ T6087] loop8: detected capacity change from 0 to 8 [ 134.395339][ T6087] Dev loop8: unable to read RDB block 8 [ 134.414320][ T6091] device macvlan2 entered promiscuous mode [ 134.422300][ T6087] loop8: unable to read partition table [ 134.441729][ T6087] loop8: partition table beyond EOD, truncated [ 134.461510][ T6087] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 134.489629][ T6091] device macvlan3 entered promiscuous mode [ 134.501152][ T4230] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 134.761278][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 134.891485][ T4230] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.909632][ T4230] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.127035][ T4230] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.146823][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.179162][ T4230] usb 1-1: Product: syz [ 135.193554][ T4230] usb 1-1: Manufacturer: syz [ 135.213186][ T4230] usb 1-1: SerialNumber: syz [ 135.732757][ T4230] usb 1-1: 0:2 : does not exist [ 135.851419][ T6118] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 136.111109][ T1107] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 136.116592][ T6128] netlink: 20 bytes leftover after parsing attributes in process `syz.4.622'. [ 136.151268][ T6128] netlink: 'syz.4.622': attribute type 26 has an invalid length. [ 136.160772][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.622'. [ 136.176941][ T4230] usb 1-1: USB disconnect, device number 10 [ 136.251211][ T2345] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 136.471360][ T1107] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 136.490674][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.511028][ T1107] usb 2-1: config 0 descriptor?? [ 136.671595][ T2345] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 136.683083][ T2345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.695375][ T2345] usb 4-1: config 0 descriptor?? [ 136.771038][ T4230] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 136.772037][ T2345] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 136.993533][ T1107] elan 0003:04F3:0755.000F: unknown main item tag 0x1 [ 137.017162][ T1107] elan 0003:04F3:0755.000F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 137.151042][ T4230] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 137.162130][ T4230] usb 3-1: config 0 has no interface number 0 [ 137.211364][ T2345] cpia1 4-1:0.0: unexpected state after lo power cmd: cb [ 137.234001][ T1107] usb 2-1: USB disconnect, device number 7 [ 137.321076][ T4230] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 137.338429][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.356396][ T4230] usb 3-1: Product: syz [ 137.362141][ T4230] usb 3-1: Manufacturer: syz [ 137.368087][ T4230] usb 3-1: SerialNumber: syz [ 137.386656][ T4230] usb 3-1: config 0 descriptor?? [ 137.421268][ T2345] gspca_cpia1: usb_control_msg 01, error -32 [ 137.500174][ T6173] loop8: detected capacity change from 0 to 7 [ 137.516478][ T6173] Dev loop8: unable to read RDB block 7 [ 137.526585][ T6173] loop8: unable to read partition table [ 137.539818][ T6173] loop8: partition table beyond EOD, truncated [ 137.547017][ T6173] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 137.687023][ T2345] gspca_cpia1: usb_control_msg 02, error -71 [ 137.717125][ T2345] gspca_cpia1: usb_control_msg 05, error -71 [ 137.729121][ T2345] cpia1 4-1:0.0: unexpected systemstate: cb [ 137.773722][ T2345] usb 4-1: USB disconnect, device number 7 [ 137.985139][ T6189] IPv6: sit1: Disabled Multicast RS [ 138.091348][ T4230] asix 3-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 138.104132][ T4230] asix: probe of 3-1:0.251 failed with error -524 [ 138.132753][ T4231] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 138.319337][ T2345] usb 3-1: USB disconnect, device number 6 [ 138.511227][ T4231] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 138.529913][ T4231] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 138.550563][ T4231] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 138.569399][ T4231] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 138.589971][ T4231] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 138.731053][ T4231] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 138.744544][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 138.761052][ T4231] usb 5-1: Product: syz [ 138.765965][ T4231] usb 5-1: Manufacturer: syz [ 138.822073][ T4231] cdc_wdm 5-1:1.0: skipping garbage [ 138.827603][ T4231] cdc_wdm 5-1:1.0: skipping garbage [ 138.881302][ T4231] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 138.887373][ T4231] cdc_wdm 5-1:1.0: Unknown control protocol [ 139.102492][ T4230] usb 5-1: USB disconnect, device number 8 [ 139.111138][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 139.119386][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 139.125756][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 139.141726][ T6219] loop8: detected capacity change from 0 to 8 [ 139.181452][ T6219] Dev loop8: unable to read RDB block 8 [ 139.201533][ T6219] loop8: unable to read partition table [ 139.225853][ T6219] loop8: partition table beyond EOD, truncated [ 139.256973][ T6219] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 139.257731][ T6224] program syz.3.664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.459139][ T6226] loop8: detected capacity change from 0 to 7 [ 139.480967][ T4176] Dev loop8: unable to read RDB block 7 [ 139.487347][ T4176] loop8: unable to read partition table [ 139.500132][ T4176] loop8: partition table beyond EOD, truncated [ 139.516093][ T6226] Dev loop8: unable to read RDB block 7 [ 139.523600][ T6226] loop8: unable to read partition table [ 139.529776][ T6226] loop8: partition table beyond EOD, truncated [ 139.545782][ T6226] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 139.719319][ T6232] loop0: detected capacity change from 0 to 128 [ 139.741068][ T2345] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 140.100613][ T6250] tap0: tun_chr_ioctl cmd 1074025675 [ 140.107863][ T6250] tap0: persist enabled [ 140.163475][ T6252] tap0: tun_chr_ioctl cmd 1074025675 [ 140.171735][ T2345] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 140.187486][ T6252] tap0: persist disabled [ 140.195626][ T2345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.245235][ T2345] usb 3-1: config 0 descriptor?? [ 140.255950][ T6256] loop4: detected capacity change from 0 to 128 [ 140.313045][ T2345] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 140.751099][ T2345] cpia1 3-1:0.0: unexpected state after lo power cmd: cb [ 140.871060][ T4227] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 140.981130][ T2345] gspca_cpia1: usb_control_msg 01, error -32 [ 141.241098][ T2345] gspca_cpia1: usb_control_msg 02, error -71 [ 141.241353][ T4227] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.262181][ T4227] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 141.271296][ T2345] gspca_cpia1: usb_control_msg 05, error -71 [ 141.276464][ T4227] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 141.280014][ T2345] cpia1 3-1:0.0: unexpected systemstate: cb [ 141.296524][ T4227] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 141.296556][ T4227] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 141.339051][ T2345] usb 3-1: USB disconnect, device number 7 [ 141.365892][ T6278] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 141.400008][ T6278] CIFS: Unable to determine destination address [ 141.431223][ T4227] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 141.444742][ T6278] loop3: detected capacity change from 0 to 4096 [ 141.451713][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.459993][ T4227] usb 2-1: Product: syz [ 141.465748][ T4227] usb 2-1: Manufacturer: syz [ 141.513038][ T4227] cdc_wdm 2-1:1.0: skipping garbage [ 141.519918][ T4227] cdc_wdm 2-1:1.0: skipping garbage [ 141.527625][ T4227] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 141.534601][ T4227] cdc_wdm 2-1:1.0: Unknown control protocol [ 141.772607][ T4227] usb 2-1: USB disconnect, device number 8 [ 141.790906][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 141.798012][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 141.804742][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 142.005044][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.695'. [ 142.136895][ T6290] bond0: (slave bond_slave_1): Releasing backup interface [ 142.186595][ T6298] loop0: detected capacity change from 0 to 128 [ 142.313311][ T6298] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.331491][ T6298] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.597053][ T6309] netlink: 20 bytes leftover after parsing attributes in process `syz.4.704'. [ 142.752760][ T6319] program syz.0.705 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.913550][ T6327] netlink: 75 bytes leftover after parsing attributes in process `syz.3.710'. [ 143.211697][ T6341] loop4: detected capacity change from 0 to 128 [ 143.383791][ T6341] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.478485][ T6341] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.722672][ T6370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.728'. [ 143.968007][ T4232] kernel write not supported for file /input/mouse0 (pid: 4232 comm: kworker/0:6) [ 144.237366][ T6388] loop2: detected capacity change from 0 to 1024 [ 144.436576][ T6388] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,noquota,resuid=0x0000000000000000,journal_dev=0x0000000000000008,grpjquota=,. Quota mode: none. [ 144.601059][ T6388] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.647776][ T6400] loop0: detected capacity change from 0 to 2048 [ 144.772309][ T6400] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.994571][ T6378] loop1: detected capacity change from 0 to 40427 [ 145.024109][ T4231] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 145.077600][ T6378] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 145.101759][ T6378] F2FS-fs (loop1): invalid crc value [ 145.150045][ T6378] F2FS-fs (loop1): Found nat_bits in checkpoint [ 145.270955][ T4231] usb 4-1: Using ep0 maxpacket: 16 [ 145.298046][ T6378] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 145.521797][ T4184] attempt to access beyond end of device [ 145.521797][ T4184] loop1: rw=2049, want=45104, limit=40427 [ 145.551269][ T4231] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 145.554274][ T6425] loop0: detected capacity change from 0 to 1024 [ 145.560499][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.601043][ T4231] usb 4-1: Product: syz [ 145.605556][ T4231] usb 4-1: Manufacturer: syz [ 145.620750][ T4231] usb 4-1: SerialNumber: syz [ 145.642545][ T4231] usb 4-1: config 0 descriptor?? [ 145.662481][ T4274] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 145.685877][ T4231] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 145.941711][ T4254] hfsplus: b-tree write err: -5, ino 3 [ 146.031387][ T4274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 146.058849][ T4274] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 146.085142][ T4274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.148991][ T4274] usb 5-1: config 0 descriptor?? [ 146.177550][ T6418] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 146.310462][ T6439] netlink: 11 bytes leftover after parsing attributes in process `syz.2.757'. [ 146.327400][ T6439] netlink: 24 bytes leftover after parsing attributes in process `syz.2.757'. [ 146.338533][ T6439] netlink: 24 bytes leftover after parsing attributes in process `syz.2.757'. [ 146.442384][ T6444] loop2: detected capacity change from 0 to 128 [ 146.544729][ T6446] loop0: detected capacity change from 0 to 1024 [ 146.563731][ T5572] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 146.594844][ T5572] FAT-fs (loop2): Filesystem has been set read-only [ 146.619113][ T6446] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,noquota,resuid=0x0000000000000000,journal_dev=0x0000000000000008,grpjquota=,. Quota mode: none. [ 146.638464][ T6446] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.672745][ T4274] elan 0003:04F3:0755.0010: unknown main item tag 0x0 [ 146.680150][ T4274] elan 0003:04F3:0755.0010: unknown main item tag 0x0 [ 146.727866][ T4274] elan 0003:04F3:0755.0010: unknown main item tag 0x0 [ 146.738283][ T4274] elan 0003:04F3:0755.0010: unknown main item tag 0x0 [ 146.746432][ T4274] elan 0003:04F3:0755.0010: unknown main item tag 0x0 [ 146.757613][ T4274] elan 0003:04F3:0755.0010: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 146.772174][ T4231] ssu100: probe of 4-1:0.0 failed with error -71 [ 146.793045][ T4231] usb 4-1: USB disconnect, device number 8 [ 146.885747][ T2345] usb 5-1: USB disconnect, device number 9 [ 147.161319][ T6455] loop1: detected capacity change from 0 to 1024 [ 147.211156][ T6455] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 147.224829][ T6455] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 147.235385][ T6455] EXT4-fs (loop1): orphan cleanup on readonly fs [ 147.243542][ T6455] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.764: Inode bitmap for bg 0 marked uninitialized [ 147.266850][ T6455] EXT4-fs (loop1): Remounting filesystem read-only [ 147.274220][ T6455] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000080,errors=remount-ro,inode_readahead_blks=0x0000000000800000,lazytime,. Quota mode: writeback. [ 147.334684][ T6455] EXT4-fs (loop1): shut down requested (1) [ 147.666634][ T6473] bond1 (unregistering): Released all slaves [ 147.939768][ T6486] loop4: detected capacity change from 0 to 128 [ 148.120360][ T6486] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 148.153187][ T6484] loop0: detected capacity change from 0 to 40427 [ 148.164035][ T6486] hpfs: filesystem error: improperly stopped [ 148.171638][ T6486] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 148.179698][ T6486] hpfs: You really don't want any checks? You are crazy... [ 148.188455][ T6486] hpfs: hpfs_map_sector(): read error [ 148.194260][ T6486] hpfs: code page support is disabled [ 148.199430][ T6490] loop3: detected capacity change from 0 to 2048 [ 148.207523][ T6484] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 148.207577][ T6484] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 148.209994][ T6484] F2FS-fs (loop0): invalid crc value [ 148.232817][ T6486] hpfs: hpfs_map_4sectors(): unaligned read [ 148.239312][ T6486] hpfs: hpfs_map_4sectors(): unaligned read [ 148.248467][ T6486] hpfs: filesystem error: unable to find root dir [ 148.277789][ T6484] F2FS-fs (loop0): Found nat_bits in checkpoint [ 148.328229][ T6486] hpfs: hpfs_map_4sectors(): unaligned read [ 148.338625][ T6484] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 148.346322][ T6484] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 148.401328][ T6490] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.657147][ T6506] netlink: 11 bytes leftover after parsing attributes in process `syz.3.785'. [ 148.741800][ T6506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.785'. [ 148.751824][ T6506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.785'. [ 149.159546][ T6530] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 149.161998][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 149.192574][ T6530] hpfs: filesystem error: improperly stopped [ 149.213915][ T6530] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 149.225489][ C0] blk_update_request: I/O error, dev loop6, sector 1032 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 149.239011][ C0] blk_update_request: I/O error, dev loop6, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 63 prio class 0 [ 149.239197][ T6530] hpfs: You really don't want any checks? You are crazy... [ 149.252962][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.270409][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.311347][ T6530] hpfs: hpfs_map_sector(): read error [ 149.318008][ T6530] hpfs: code page support is disabled [ 149.364953][ T6530] hpfs: hpfs_map_4sectors(): unaligned read [ 149.373724][ T6530] hpfs: hpfs_map_4sectors(): unaligned read [ 149.421010][ T6530] hpfs: filesystem error: unable to find root dir [ 149.499104][ T6540] netlink: 104 bytes leftover after parsing attributes in process `syz.3.801'. [ 149.593436][ T6530] hpfs: hpfs_map_4sectors(): unaligned read [ 149.763799][ T6544] set_capacity_and_notify: 2 callbacks suppressed [ 149.763818][ T6544] loop3: detected capacity change from 0 to 4096 [ 149.771455][ T1107] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 149.876037][ T6544] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 149.906243][ T6544] ntfs3: loop3: Failed to load $Extend. [ 149.983218][ T26] audit: type=1800 audit(1771937932.251:6): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.803" name="file2" dev="loop3" ino=31 res=0 errno=0 [ 150.014784][ T6536] loop4: detected capacity change from 0 to 32768 [ 150.146532][ T6536] XFS (loop4): Mounting V5 Filesystem [ 150.191269][ T1107] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.206020][ T1107] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 150.232679][ T6536] XFS (loop4): Ending clean mount [ 150.279474][ T26] audit: type=1800 audit(1771937932.541:7): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.799" name="bus" dev="loop4" ino=6153 res=0 errno=0 [ 150.359574][ T5524] XFS (loop4): Unmounting Filesystem [ 150.408022][ T1107] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.433067][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.442500][ T1107] usb 3-1: Product: syz [ 150.454587][ T1107] usb 3-1: Manufacturer: syz [ 150.459611][ T1107] usb 3-1: SerialNumber: syz [ 150.506099][ T1107] cdc_mbim 3-1:1.0: skipping garbage [ 150.721304][ T6542] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 150.728667][ T6570] loop3: detected capacity change from 0 to 2048 [ 150.871696][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'. [ 151.241568][ T6598] netlink: 60 bytes leftover after parsing attributes in process `syz.1.816'. [ 151.300323][ T6598] netlink: 60 bytes leftover after parsing attributes in process `syz.1.816'. [ 151.425458][ T6597] loop0: detected capacity change from 0 to 8192 [ 151.453048][ T6542] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 151.481244][ T1107] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 151.489780][ T1107] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 151.523830][ T6597] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 151.571533][ T6597] REISERFS (device loop0): using ordered data mode [ 151.579114][ T6597] reiserfs: using flush barriers [ 151.587730][ T6597] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 151.605886][ T6597] REISERFS (device loop0): checking transaction log (loop0) [ 151.623932][ T6616] input: syz1 as /devices/virtual/input/input14 [ 151.641363][ T6597] REISERFS (device loop0): Using r5 hash to sort names [ 151.649763][ T6597] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 151.701690][ T1107] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 151.739422][ T1107] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 151.909839][ T1107] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, a6:62:3f:d8:0e:06 [ 151.967861][ T1107] usb 3-1: USB disconnect, device number 8 [ 152.022099][ T1107] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 152.733091][ T4232] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 153.131612][ T4232] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.142657][ T1107] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 153.168380][ T4232] usb 1-1: config 0 has no interfaces? [ 153.185364][ T4232] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 153.208768][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.241948][ T4232] usb 1-1: config 0 descriptor?? [ 153.430997][ T1107] usb 3-1: Using ep0 maxpacket: 16 [ 153.438564][ T6646] loop1: detected capacity change from 0 to 40427 [ 153.482179][ T6646] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 153.528579][ T5599] usb 1-1: USB disconnect, device number 11 [ 153.543343][ T6646] F2FS-fs (loop1): invalid crc value [ 153.601068][ T6646] F2FS-fs (loop1): Found nat_bits in checkpoint [ 153.676590][ T6674] loop4: detected capacity change from 0 to 8192 [ 153.723946][ T6674] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 153.734564][ T6674] REISERFS (device loop4): using ordered data mode [ 153.741900][ T6674] reiserfs: using flush barriers [ 153.748269][ T6646] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 153.756903][ T6674] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 153.774596][ T1107] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 153.790984][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.791371][ T6674] REISERFS (device loop4): checking transaction log (loop4) [ 153.799957][ T1107] usb 3-1: Product: syz [ 153.818024][ T1107] usb 3-1: Manufacturer: syz [ 153.822972][ T1107] usb 3-1: SerialNumber: syz [ 153.829932][ T1107] r8152-cfgselector 3-1: config 0 descriptor?? [ 153.847995][ T6674] REISERFS (device loop4): Using r5 hash to sort names [ 153.867952][ T6674] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 153.951722][ T4184] attempt to access beyond end of device [ 153.951722][ T4184] loop1: rw=2049, want=45104, limit=40427 [ 153.992292][ T6672] loop3: detected capacity change from 0 to 32768 [ 154.174687][ T6672] XFS (loop3): Mounting V5 Filesystem [ 154.303823][ T6659] kAFS: No cell specified [ 154.323598][ T6692] netlink: 104 bytes leftover after parsing attributes in process `syz.0.846'. [ 154.345294][ T6672] XFS (loop3): Ending clean mount [ 154.351451][ T1107] r8152-cfgselector 3-1: Unknown version 0x0000 [ 154.361174][ T1107] r8152-cfgselector 3-1: bad CDC descriptors [ 154.412522][ T6695] bond1 (unregistering): Released all slaves [ 154.435710][ T26] audit: type=1800 audit(1771937936.701:8): pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.840" name="bus" dev="loop3" ino=6153 res=0 errno=0 [ 154.462470][ T1107] r8152-cfgselector 3-1: Unknown version 0x0000 [ 154.517885][ T1107] r8152-cfgselector 3-1: USB disconnect, device number 9 [ 154.583003][ T4185] XFS (loop3): Unmounting Filesystem [ 154.623696][ T6702] loop0: detected capacity change from 0 to 512 [ 154.735346][ T6702] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.847: inode has both inline data and extents flags [ 154.815703][ T6702] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.847: couldn't read orphan inode 15 (err -117) [ 154.848557][ T6702] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.195031][ T6718] netlink: 'syz.2.853': attribute type 4 has an invalid length. [ 155.532426][ T6737] netlink: 'syz.2.860': attribute type 1 has an invalid length. [ 155.740959][ T1107] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 155.758783][ T6745] loop1: detected capacity change from 0 to 512 [ 155.788736][ T6745] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 155.827356][ T6745] EXT4-fs (loop1): 1 orphan inode deleted [ 155.845482][ T6745] EXT4-fs (loop1): 1 truncate cleaned up [ 155.853420][ T6745] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 155.881984][ T6745] EXT4-fs (loop1): shut down requested (1) [ 155.960103][ T6751] loop9: detected capacity change from 0 to 7 [ 155.985464][ T6751] Dev loop9: unable to read RDB block 7 [ 156.004726][ T6751] loop9: unable to read partition table [ 156.011850][ T1107] usb 1-1: Using ep0 maxpacket: 32 [ 156.039917][ T6751] loop9: partition table beyond EOD, truncated [ 156.057749][ T6753] loop1: detected capacity change from 0 to 1024 [ 156.075146][ T6751] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 156.111964][ T6753] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 156.129938][ T6753] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.165573][ T1107] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 156.202489][ T1107] usb 1-1: config 0 interface 0 has no altsetting 0 [ 156.222811][ T1107] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 156.251573][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.267101][ T6753] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 156.289625][ T6758] netlink: 'syz.3.868': attribute type 4 has an invalid length. [ 156.301053][ T6753] System zones: 0-1, 3-36 [ 156.320174][ T1107] usb 1-1: config 0 descriptor?? [ 156.360094][ T6753] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 156.362455][ T6732] loop4: detected capacity change from 0 to 32768 [ 156.479498][ T6732] XFS (loop4): Mounting V5 Filesystem [ 156.482285][ T6766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.869'. [ 156.569697][ T6732] XFS (loop4): Ending clean mount [ 156.753215][ T5524] XFS (loop4): Unmounting Filesystem [ 157.030044][ T6783] netlink: 'syz.1.875': attribute type 1 has an invalid length. [ 157.166727][ T1107] corsair-cpro 0003:1B1C:0C10.0011: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 157.409332][ T1107] corsair-cpro: probe of 0003:1B1C:0C10.0011 failed with error -61 [ 157.430409][ T6797] input: syz0 as /devices/virtual/input/input15 [ 157.445868][ T6797] input: failed to attach handler leds to device input15, error: -6 [ 157.537009][ T4232] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 157.617935][ T1107] usb 1-1: USB disconnect, device number 12 [ 157.957331][ T4232] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.973960][ T4232] usb 3-1: config 0 has no interfaces? [ 157.993425][ T4232] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 158.015094][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.033382][ T4232] usb 3-1: config 0 descriptor?? [ 158.138019][ T6819] loop4: detected capacity change from 0 to 512 [ 158.196069][ T6819] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.890: inode has both inline data and extents flags [ 158.221418][ T6819] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.890: couldn't read orphan inode 15 (err -117) [ 158.238990][ T6819] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.310998][ T4231] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 158.317170][ T1107] usb 3-1: USB disconnect, device number 10 [ 158.429048][ T4196] Bluetooth: hci2: link tx timeout [ 158.435217][ T4196] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 158.500446][ T6828] tipc: Started in network mode [ 158.507574][ T6828] tipc: Node identity ac1414aa, cluster identity 4711 [ 158.519064][ T6828] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 158.527104][ T6828] tipc: Enabled bearer , priority 10 [ 158.591126][ T4231] usb 2-1: Using ep0 maxpacket: 16 [ 158.622904][ T4196] Bluetooth: hci2: link tx timeout [ 158.628349][ T4196] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 158.653332][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 158.711192][ T4231] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.747272][ T6826] loop0: detected capacity change from 0 to 32768 [ 158.748947][ T4231] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.791065][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 158.823674][ T4231] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 158.884027][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.931041][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 158.967516][ T6844] loop3: detected capacity change from 0 to 1024 [ 159.071039][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 159.094575][ T6844] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 159.117717][ T6844] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.169433][ T6844] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 159.187966][ T6844] System zones: 0-1, 3-36 [ 159.211267][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 159.245499][ T6844] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 159.324522][ T6854] loop4: detected capacity change from 0 to 2048 [ 159.351050][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 159.414561][ T4231] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 159.470961][ T6854] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.491054][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 159.508248][ T6862] loop2: detected capacity change from 0 to 512 [ 159.559127][ T6862] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 159.612205][ T6817] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 159.624587][ T6817] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 159.633264][ T6817] CPU: 1 PID: 6817 Comm: syz.1.889 Not tainted syzkaller #0 [ 159.640840][ T6817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 159.642571][ T6864] capability: warning: `syz.3.908' uses 32-bit capabilities (legacy support in use) [ 159.651297][ T6817] RIP: 0010:mcp_smbus_xfer+0x59/0x1070 [ 159.651332][ T6817] Code: c3 a8 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 56 c1 55 fa 48 8b 1b 48 89 d8 48 c1 e8 03 48 89 44 24 08 <42> 80 3c 38 00 74 08 48 89 df e8 38 c1 55 fa 4c 8b 3b 4d 8d a7 70 [ 159.651348][ T6817] RSP: 0018:ffffc900030df9a0 EFLAGS: 00010246 [ 159.651367][ T6817] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 159.681359][ T4196] Bluetooth: hci2: link tx timeout [ 159.687752][ T6817] RDX: ffffc90004f59000 RSI: 0000000000000416 RDI: 0000000000000417 [ 159.687771][ T6817] RBP: 00000000000000ef R08: 00000000000000ef R09: 0000000000000004 [ 159.687784][ T6817] R10: dffffc0000000000 R11: fffffbfff1b13b86 R12: dffffc0000000000 [ 159.694291][ T4196] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 159.702629][ T6817] R13: 0000000000000000 R14: 0000000000000004 R15: dffffc0000000000 [ 159.702647][ T6817] FS: 00007f172fb886c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 159.702665][ T6817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.765237][ T6817] CR2: 000000110c41fb47 CR3: 000000004e2cb000 CR4: 00000000003506e0 [ 159.773241][ T6817] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 159.781429][ T6817] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 159.787972][ T6862] EXT4-fs (loop2): 1 orphan inode deleted [ 159.790215][ T6817] Call Trace: [ 159.790229][ T6817] [ 159.790238][ T6817] __i2c_smbus_xfer+0x7b4/0x1dc0 [ 159.790266][ T6817] ? mcp_i2c_xfer+0x420/0x420 [ 159.796716][ T6862] EXT4-fs (loop2): 1 truncate cleaned up [ 159.800051][ T6817] ? i2c_smbus_write_i2c_block_data+0x1d0/0x1d0 [ 159.800084][ T6817] ? rt_mutex_lock_nested+0x1a4/0x210 [ 159.800105][ T6817] ? i2c_smbus_xfer+0x120/0x3b0 [ 159.800121][ T6817] ? rwsem_down_read_slowpath+0x9d0/0x9d0 [ 159.800144][ T6817] ? __might_fault+0xb7/0x110 [ 159.804048][ T6862] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 159.808301][ T6817] i2c_smbus_xfer+0x272/0x3b0 [ 159.808327][ T6817] ? i2c_smbus_read_byte+0x1d0/0x1d0 [ 159.808344][ T6817] ? __might_fault+0xb3/0x110 [ 159.853032][ T6862] EXT4-fs (loop2): shut down requested (1) [ 159.868093][ T6817] i2cdev_ioctl_smbus+0x432/0x680 [ 159.868130][ T6817] ? i2cdev_ioctl_rdwr+0x6d0/0x6d0 [ 159.868149][ T6817] ? __might_fault+0xb3/0x110 [ 159.868170][ T6817] ? _copy_from_user+0x111/0x170 [ 159.909876][ T6817] i2cdev_ioctl+0x583/0x7b0 [ 159.914883][ T6817] ? i2cdev_write+0x120/0x120 [ 159.919903][ T6817] ? bpf_lsm_file_ioctl+0x5/0x10 [ 159.924853][ T6817] ? security_file_ioctl+0x7c/0xa0 [ 159.930138][ T6817] ? i2cdev_write+0x120/0x120 [ 159.935449][ T6817] __se_sys_ioctl+0xfa/0x170 [ 159.940362][ T6817] do_syscall_64+0x4c/0xa0 [ 159.945160][ T6817] ? clear_bhb_loop+0x30/0x80 [ 159.950707][ T6817] ? clear_bhb_loop+0x30/0x80 [ 159.955601][ T6817] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.961491][ T6817] RIP: 0033:0x7f173192e629 [ 159.965903][ T6817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.985998][ T6817] RSP: 002b:00007f172fb88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.994624][ T6817] RAX: ffffffffffffffda RBX: 00007f1731ba7fa0 RCX: 00007f173192e629 [ 160.002680][ T6817] RDX: 0000200000000980 RSI: 0000000000000720 RDI: 0000000000000004 [ 160.010734][ T6817] RBP: 00007f17319c4b39 R08: 0000000000000000 R09: 0000000000000000 [ 160.018700][ T6817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.026866][ T6817] R13: 00007f1731ba8038 R14: 00007f1731ba7fa0 R15: 00007ffc498e1bd8 [ 160.035443][ T6817] [ 160.038805][ T6817] Modules linked in: [ 160.063268][ T4227] tipc: Node number set to 2886997162 [ 160.073781][ T6817] ---[ end trace 47c643430985e756 ]--- [ 160.079704][ T6817] RIP: 0010:mcp_smbus_xfer+0x59/0x1070 [ 160.086072][ T6817] Code: c3 a8 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 56 c1 55 fa 48 8b 1b 48 89 d8 48 c1 e8 03 48 89 44 24 08 <42> 80 3c 38 00 74 08 48 89 df e8 38 c1 55 fa 4c 8b 3b 4d 8d a7 70 [ 160.108143][ T6817] RSP: 0018:ffffc900030df9a0 EFLAGS: 00010246 [ 160.120068][ T6817] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 160.129006][ T6817] RDX: ffffc90004f59000 RSI: 0000000000000416 RDI: 0000000000000417 [ 160.137950][ T6817] RBP: 00000000000000ef R08: 00000000000000ef R09: 0000000000000004 [ 160.149473][ T6817] R10: dffffc0000000000 R11: fffffbfff1b13b86 R12: dffffc0000000000 [ 160.160373][ T6817] R13: 0000000000000000 R14: 0000000000000004 R15: dffffc0000000000 [ 160.169784][ T6817] FS: 00007f172fb886c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 160.179909][ T6817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.186971][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 160.194341][ T6817] CR2: 000000110c41fb47 CR3: 000000004e2cb000 CR4: 00000000003506e0 [ 160.202810][ T6817] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 160.230992][ T6817] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 160.239361][ T6817] Kernel panic - not syncing: Fatal exception [ 160.246251][ T6817] Kernel Offset: disabled [ 160.250583][ T6817] Rebooting in 86400 seconds..