last executing test programs: 54.948056236s ago: executing program 2 (id=1317): prlimit64(0x0, 0x7, &(0x7f0000000380)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) 54.64893932s ago: executing program 2 (id=1322): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0xa5cf, 0x4) read(r0, &(0x7f0000002240)=""/4107, 0x100b) 54.323663584s ago: executing program 2 (id=1335): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x9, 0x20000003, 0x1, 0xffffffffffffffff, 0x20}, 0x48) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 54.005432339s ago: executing program 2 (id=1328): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) syz_mount_image$msdos(&(0x7f0000000400), &(0x7f0000001cc0)='.\x00', 0x1aca4b8, &(0x7f0000000a80)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRESHEX, @ANYRES32=r0], 0xb, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000440)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x141042, 0x0) 53.301601178s ago: executing program 2 (id=1334): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e21, @empty}}, 0x1, 0x8}, 0x90) 52.557494378s ago: executing program 2 (id=1339): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) ioctl$SNAPSHOT_FREE(r0, 0x3305) 52.154053064s ago: executing program 32 (id=1339): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) ioctl$SNAPSHOT_FREE(r0, 0x3305) 2.348764758s ago: executing program 1 (id=1737): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) r1 = dup(r0) connect$802154_dgram(r1, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14) write$cgroup_int(r1, 0x0, 0x0) 2.183323881s ago: executing program 1 (id=1740): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x2, 0x6, 0x1, 0xa8, 0x40, 0x3, 0x8, 0x1, 0x1, 0x78, 0x8, 0x9f, 0x5}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x4, 0x0) 1.945682264s ago: executing program 1 (id=1743): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x41) 1.816021426s ago: executing program 1 (id=1746): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d8fd8149af9faf44ad5b7b6ad1c94490d970e81143918946b559ce53bffdfdc795aac1209898e5826eda1962cf6e3c4c0ade52151923a70cb6eacfc"], 0x1, 0x177, &(0x7f0000000240)="$eJzsmD9PwkAYxp9rEaIx0dlFE0mAwdIWNTo4MDto4r+4SaQStIiBDsLmp3D2EzgTFxI/hg7q5IKbk0NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8Wx7un+8uU8lrHcA4kkjI+Ue9X6Mp9a2Jl8xNee3q3Hy6bbVXlwfXEwB8/+vPjwFo53V4Mvf9t3cn5bgJrae3oCEj9Q4EDKn3oGFbagcCu1IfKroa1BvGQdl1jP2qWwyEGQQrCHYQcoP765wJFJX9CeV6vdE8KriuU/tBMax/nbyGFWV/6vvq9sZU+mdBgyV1DgIbUi8h0e1N1BLl/FOx/vr6L5+fgoLir4m+P/kXAinFn2KKf2S9ykm23mjOlSuFklNyjm07t2jOm+aCnQ2NKIqf+N9o6E9jyvojH9TGRRynBc+rWVHs5XYU33PceOh/GtKzUS7knEr4PZgUM8GQ1mVOCCGEEEIIIYQQQggh3840RPgXdAj2elj9GgAA//+j/Hgy") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 1.667394968s ago: executing program 4 (id=1747): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r1, 0xff, 0x1, &(0x7f0000000000)="4feb", 0x2) syz_emit_ethernet(0x36, &(0x7f0000000140)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @remote}, @timestamp_reply}}}}, 0x0) 1.635380698s ago: executing program 3 (id=1748): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r2}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r2}}}], 0x28}}], 0x1, 0x4000001) 1.619645758s ago: executing program 1 (id=1749): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='scalable\x00', 0x5) shutdown(r0, 0x2) 1.608227768s ago: executing program 5 (id=1750): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000308040800000000000000000a00000205000300210000000900010073797a310000000004000480140004800800014000000400080001"], 0x40}, 0x1, 0x0, 0x0, 0x8000080}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018"], 0x4c}}, 0x4000804) 1.585307689s ago: executing program 4 (id=1751): syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000680), 0x3e, 0x51b, &(0x7f0000000700)="$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") syz_mount_image$exfat(&(0x7f0000002000), &(0x7f0000005840)='./bus\x00', 0x1000806, &(0x7f00000016c0)=ANY=[], 0x9, 0x1508, &(0x7f0000002040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000003c0)='./bus\x00', 0x0) renameat2(r0, &(0x7f0000000300)='./bus\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x4) 1.47266842s ago: executing program 3 (id=1752): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x10}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.369656472s ago: executing program 5 (id=1753): io_setup(0x7, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000001740)=[&(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1, r2, &(0x7f0000000100)="02", 0x1}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x8, 0xff, r1, 0x0, 0x0, 0x6, 0x0, 0x2}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.171198504s ago: executing program 3 (id=1754): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) readv(0xffffffffffffffff, &(0x7f0000000400), 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="5fc5e0cc89c3068519a1a4d35631da3ac1da1498ccbed34b45633d4cecc0ce311f7adfa5ee00b0ede9ce477b0717355c8145c254b208e7b26c8704f414550ccfcd9f78ef990092397d833e4961136c5ad068266b4af5edbd182a21f3"], 0xff, 0x2b1, &(0x7f0000000100)="$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") ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/28) 1.147852645s ago: executing program 1 (id=1755): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @main=@item_4={0x3, 0x0, 0x8, "b775e7cd"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @local=@item_012={0x1, 0x2, 0x7, ')'}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000040)={0x3, 0x200, 0x2}) 824.914249ms ago: executing program 0 (id=1756): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000480)={0x9c6, 0x9, 0x0, 'queue1\x00', 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) 789.807229ms ago: executing program 3 (id=1757): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xee01}, {}, {0x0, 0x1, 0xfffffffffffffffe}}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0xf000000}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @random="36abf5eb0d32", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 713.637651ms ago: executing program 5 (id=1758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01f7ee3fac00bfdbdf25150000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) 673.583271ms ago: executing program 4 (id=1759): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r2, r3, 0x3, 0x5, 0x4, 0x5, {0xfffffffe, 0x5, 0x5, 0xa, 0xa, 0x9, 0x2, 0x5, 0xb, 0x6, 0x7, 0x8, 0xf046, 0xfffe, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}}) 662.121961ms ago: executing program 0 (id=1760): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) r1 = syz_io_uring_setup(0xd3, &(0x7f0000000480)={0x0, 0x0, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 565.624193ms ago: executing program 3 (id=1761): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1ce, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 496.325934ms ago: executing program 0 (id=1762): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) unshare(0x2a020400) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) 492.120564ms ago: executing program 5 (id=1763): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 369.588105ms ago: executing program 4 (id=1764): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x24, @long}, 0x14, &(0x7f0000000200)={0x0}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x23, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 353.882685ms ago: executing program 3 (id=1765): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0xc8) 308.141496ms ago: executing program 0 (id=1766): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x0, 0x0, 0x9, 0x1, 0x457, 0x9, 0x9, 0x1, 0x1, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000240)={0x1, &(0x7f0000001040)=[{}]}) 185.516847ms ago: executing program 5 (id=1767): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x2ffb, 0x0, 0x0, 0x0, 0x0) 185.250807ms ago: executing program 4 (id=1768): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) eventfd(0x401) r0 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5afa, 0x100, 0x22, 0x335}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 69.731899ms ago: executing program 0 (id=1769): r0 = socket(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 67.158169ms ago: executing program 5 (id=1770): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2208050, &(0x7f0000000140)=ANY=[], 0x1, 0x1520, &(0x7f0000011680)="$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") r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r0, 0xffffffffffffffff, 0x2) getdents(r0, 0x0, 0x0) getdents(r0, 0x0, 0x0) 6.49675ms ago: executing program 4 (id=1771): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 0s ago: executing program 0 (id=1772): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): un ntfsfix and/or chkdsk. [ 131.160021][ T4851] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 131.171122][ T4851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.182751][ T6208] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 131.222792][ T6208] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 131.236857][ T4851] usb 2-1: config 0 descriptor?? [ 131.262335][ T6208] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 131.301422][ T6208] ntfs: volume version 3.1. [ 131.330414][ T6208] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 131.448164][ T4851] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 131.470521][ T4851] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 131.494079][ T4851] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 131.508247][ T4851] usb 2-1: media controller created [ 131.560979][ T4851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.660603][ T4851] az6027: usb out operation failed. (-71) [ 131.677546][ T4851] az6027: usb out operation failed. (-71) [ 131.701397][ T4851] stb0899_attach: Driver disabled by Kconfig [ 131.728813][ T4851] az6027: no front-end attached [ 131.728813][ T4851] [ 131.773845][ T4851] az6027: usb out operation failed. (-71) [ 131.812097][ T4851] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 131.836419][ T4851] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 131.899104][ T4851] dvb-usb: schedule remote query interval to 400 msecs. [ 131.912110][ T6241] device vlan2 entered promiscuous mode [ 131.920963][ T6241] device team0 entered promiscuous mode [ 131.927874][ T6241] device team_slave_0 entered promiscuous mode [ 131.930431][ T4851] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 131.934934][ T6241] device team_slave_1 entered promiscuous mode [ 131.950741][ T6241] team0: Device vlan2 is already an upper device of the team interface [ 131.988867][ T4851] usb 2-1: USB disconnect, device number 7 [ 132.054700][ T4851] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 132.077959][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.708'. [ 132.189015][ T6247] loop2: detected capacity change from 0 to 512 [ 132.261126][ T6247] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 132.322408][ T6247] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 132.359515][ T6247] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.710: corrupted in-inode xattr [ 132.391604][ T6255] loop4: detected capacity change from 0 to 256 [ 132.399978][ T6253] loop1: detected capacity change from 0 to 8192 [ 132.427003][ T6253] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 132.472512][ T6247] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.710: couldn't read orphan inode 15 (err -117) [ 132.485360][ T6255] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.501957][ T6247] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 132.518843][ T6253] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 132.559231][ T6253] REISERFS (device loop1): using ordered data mode [ 132.570775][ T6253] reiserfs: using flush barriers [ 132.593148][ T6253] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 132.610708][ T6255] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 132.675687][ T6255] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 132.689636][ T6253] REISERFS (device loop1): checking transaction log (loop1) [ 132.775142][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.781569][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.821616][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 132.951483][ T6253] REISERFS (device loop1): Using tea hash to sort names [ 132.986552][ T6253] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 133.578077][ T4262] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 133.588355][ T4262] CPU: 0 PID: 4262 Comm: kworker/u5:4 Not tainted 6.1.142-syzkaller #0 [ 133.596615][ T4262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.606668][ T4262] Workqueue: hci1 hci_rx_work [ 133.611361][ T4262] Call Trace: [ 133.614631][ T4262] [ 133.617557][ T4262] dump_stack_lvl+0x168/0x22e [ 133.622236][ T4262] ? show_regs_print_info+0x12/0x12 [ 133.627434][ T4262] ? load_image+0x3b0/0x3b0 [ 133.631937][ T4262] sysfs_create_dir_ns+0x252/0x280 [ 133.637045][ T4262] ? hci_rx_work+0x3eb/0xd40 [ 133.641631][ T4262] ? sysfs_warn_dup+0xa0/0xa0 [ 133.646312][ T4262] ? do_raw_spin_unlock+0x11d/0x230 [ 133.651509][ T4262] kobject_add_internal+0x6b8/0xc80 [ 133.656708][ T4262] kobject_add+0x152/0x210 [ 133.661126][ T4262] ? kobject_init+0x1d0/0x1d0 [ 133.665799][ T4262] ? klist_children_get+0x50/0x50 [ 133.670823][ T4262] ? get_device_parent+0x121/0x3f0 [ 133.675930][ T4262] device_add+0x483/0xfb0 [ 133.680259][ T4262] ? kmem_cache_free+0xf7/0x290 [ 133.685119][ T4262] hci_conn_add_sysfs+0xd1/0x1e0 [ 133.690064][ T4262] le_conn_complete_evt+0xd1d/0x1320 [ 133.695356][ T4262] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 133.701597][ T4262] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 133.707230][ T4262] ? skb_pull_data+0xf7/0x200 [ 133.711903][ T4262] hci_le_conn_complete_evt+0x183/0x440 [ 133.717473][ T4262] ? hci_remote_host_features_evt+0x270/0x270 [ 133.723539][ T4262] hci_event_packet+0x791/0x1210 [ 133.728495][ T4262] ? bis_list+0x280/0x280 [ 133.732818][ T4262] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 133.738714][ T4262] ? kcov_remote_start+0x4c7/0x7e0 [ 133.743818][ T4262] ? nf_ct_l4proto_log_invalid+0x34/0x206 [ 133.749705][ T4262] ? hci_send_to_monitor+0x9c/0x4a0 [ 133.754907][ T4262] hci_rx_work+0x3eb/0xd40 [ 133.759316][ T4262] ? _raw_spin_unlock+0x40/0x40 [ 133.764180][ T4262] ? process_one_work+0x7a1/0x1160 [ 133.769284][ T4262] process_one_work+0x898/0x1160 [ 133.774225][ T4262] ? worker_detach_from_pool+0x240/0x240 [ 133.779859][ T4262] ? _raw_spin_lock_irq+0xab/0xe0 [ 133.784878][ T4262] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 133.790246][ T4262] ? kthread_data+0x4b/0xc0 [ 133.794749][ T4262] worker_thread+0xaa2/0x1250 [ 133.799440][ T4262] kthread+0x29d/0x330 [ 133.803502][ T4262] ? worker_clr_flags+0x1a0/0x1a0 [ 133.808520][ T4262] ? kthread_blkcg+0xd0/0xd0 [ 133.813108][ T4262] ret_from_fork+0x1f/0x30 [ 133.817528][ T4262] [ 133.820593][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.842318][ T4262] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 133.855821][ T4262] Bluetooth: hci1: failed to register connection device [ 133.928083][ T6291] loop3: detected capacity change from 0 to 512 [ 134.004524][ T6291] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 134.019656][ T6291] EXT4-fs (loop3): invalid journal inode [ 134.033262][ T6291] EXT4-fs (loop3): can't get journal size [ 134.049927][ T6298] loop4: detected capacity change from 0 to 256 [ 134.080115][ T6291] EXT4-fs (loop3): 1 truncate cleaned up [ 134.102313][ T6291] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 134.126137][ T6298] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.156844][ T6291] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 4095 (only 1 groups) [ 134.203680][ T6303] loop2: detected capacity change from 0 to 2048 [ 134.211909][ T6298] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 134.298098][ T6298] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 134.342462][ T6306] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.399137][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 134.656611][ T6315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.736'. [ 134.690438][ T6316] loop1: detected capacity change from 0 to 1024 [ 134.713586][ T6315] device team0 entered promiscuous mode [ 134.746947][ T6316] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 134.757825][ T6315] device team_slave_0 entered promiscuous mode [ 134.774191][ T6315] device team_slave_1 entered promiscuous mode [ 134.792244][ T6316] EXT4-fs (loop1): invalid journal inode [ 134.798088][ T6316] EXT4-fs (loop1): can't get journal size [ 134.830858][ T6315] device batadv_slave_1 entered promiscuous mode [ 134.849515][ T6316] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #2: comm syz.1.737: blocks 48-48 from inode overlap system zone [ 134.946096][ T6316] EXT4-fs (loop1): failed to initialize system zone (-117) [ 134.998500][ T6316] EXT4-fs (loop1): mount failed [ 135.332374][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.347422][ T6332] loop2: detected capacity change from 0 to 2048 [ 135.396142][ T6332] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.891496][ T6319] loop4: detected capacity change from 0 to 40427 [ 135.915067][ T6345] loop3: detected capacity change from 0 to 32768 [ 135.932574][ T6345] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.750 (6345) [ 135.982842][ T6345] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 135.993132][ T6345] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 135.994171][ T6319] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 136.001780][ T6345] BTRFS info (device loop3): setting nodatacow, compression disabled [ 136.001848][ T6345] BTRFS info (device loop3): force clearing of disk cache [ 136.026773][ T6348] loop2: detected capacity change from 0 to 4096 [ 136.033339][ T6345] BTRFS info (device loop3): setting datacow [ 136.039363][ T6345] BTRFS info (device loop3): doing ref verification [ 136.046051][ T6345] BTRFS info (device loop3): disabling free space tree [ 136.053061][ T6345] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 136.057722][ T6348] __ntfs_error: 69 callbacks suppressed [ 136.057738][ T6348] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 136.062532][ T6345] BTRFS info (device loop3): use zstd compression, level 3 [ 136.062562][ T6345] BTRFS info (device loop3): enabling ssd optimizations [ 136.062576][ T6345] BTRFS info (device loop3): using spread ssd allocation scheme [ 136.062593][ T6345] BTRFS info (device loop3): not using ssd optimizations [ 136.062606][ T6345] BTRFS info (device loop3): not using spread ssd allocation scheme [ 136.064566][ T6319] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x2 [ 136.129347][ T6348] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 136.143503][ T6348] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 136.158442][ T6348] ntfs: volume version 3.1. [ 136.211292][ T6319] F2FS-fs (loop4): invalid crc value [ 136.343242][ T6345] BTRFS info (device loop3): rebuilding free space tree [ 136.355280][ T6319] F2FS-fs (loop4): Found nat_bits in checkpoint [ 136.369300][ T4263] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 136.383177][ T6345] BTRFS info (device loop3): disabling free space tree [ 136.390234][ T6345] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 136.400707][ T6345] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 136.757295][ T6319] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 136.782829][ T6374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'. [ 136.818758][ T6374] IPVS: Error joining to the multicast group [ 136.826865][ T6345] BTRFS warning (device loop3: state M): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 136.839092][ T6345] BTRFS info (device loop3: state M): trying to use backup root at mount time [ 136.848076][ T6345] BTRFS info (device loop3: state M): enabling auto defrag [ 136.855401][ T6345] BTRFS info (device loop3: state M): turning on sync discard [ 136.862930][ T6345] BTRFS info (device loop3: state M): enabling free space tree [ 136.870612][ T6345] BTRFS warning (device loop3: state M): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 136.882264][ T6345] BTRFS info (device loop3: state M): trying to use backup root at mount time [ 136.891148][ T6345] BTRFS warning (device loop3: state M): remount supports changing free space tree only from ro to rw [ 136.964125][ T6319] syz.4.738: attempt to access beyond end of device [ 136.964125][ T6319] loop4: rw=2049, sector=53248, nr_sectors = 256 limit=40427 [ 137.167300][ T4258] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 137.180014][ T6376] loop2: detected capacity change from 0 to 2048 [ 137.291754][ T6382] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.335467][ T26] audit: type=1800 audit(1885609960.592:470): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.754" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 137.599424][ T4244] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop3 scanned by udevd (4244) [ 138.832259][ T5079] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 139.023798][ T5079] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.038583][ T5079] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 139.063231][ T5079] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.084342][ T5079] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 139.137942][ T5079] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 139.149376][ T5079] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 139.161090][ T5079] usb 5-1: Manufacturer: syz [ 139.190659][ T5079] usb 5-1: config 0 descriptor?? [ 139.268539][ T6424] device batadv_slave_1 entered promiscuous mode [ 139.283390][ T6423] device batadv_slave_1 left promiscuous mode [ 139.592252][ T5079] rc_core: IR keymap rc-hauppauge not found [ 139.604987][ T5079] Registered IR keymap rc-empty [ 139.642336][ T5079] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 139.682307][ T5079] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 139.695787][ T6438] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=io+mem:owns=io+mem [ 139.715597][ T6438] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 139.722879][ T5079] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 139.760584][ T5079] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 139.796534][ T5079] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 139.832361][ T5079] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 139.882277][ T5079] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 139.912594][ T5079] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 139.942344][ T5079] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 139.972408][ T4262] Bluetooth: hci1: command 0x0406 tx timeout [ 139.972460][ T5079] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 140.032441][ T5079] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 140.072342][ T5079] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 140.102321][ T5079] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 140.132970][ T5079] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 140.163486][ T5079] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 140.174166][ T5079] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 140.204465][ T5079] usb 5-1: USB disconnect, device number 6 [ 140.405062][ T6453] loop2: detected capacity change from 0 to 1024 [ 140.415296][ T6456] loop3: detected capacity change from 0 to 2048 [ 140.477125][ T6453] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 140.489261][ T6457] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.517558][ T26] audit: type=1800 audit(1885609963.772:471): pid=6456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.786" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 140.536940][ T6453] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 140.597452][ T6453] JBD2: no valid journal superblock found [ 140.638337][ T6453] EXT4-fs (loop2): error loading journal [ 140.988155][ T6463] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 141.226045][ T6470] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=io+mem:owns=io+mem [ 141.262383][ T6470] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 141.298568][ T6455] loop1: detected capacity change from 0 to 40427 [ 141.340120][ T6455] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 141.399823][ T6455] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x2 [ 141.461795][ T6455] F2FS-fs (loop1): invalid crc value [ 141.549155][ T6455] F2FS-fs (loop1): Found nat_bits in checkpoint [ 141.693281][ T6455] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 141.720687][ T4300] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 141.827294][ T6455] syz.1.796: attempt to access beyond end of device [ 141.827294][ T6455] loop1: rw=2049, sector=53248, nr_sectors = 256 limit=40427 [ 141.912523][ T4300] usb 3-1: Using ep0 maxpacket: 32 [ 141.920064][ T4300] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 141.941698][ T4300] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.984890][ T4300] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.032000][ T4300] usb 3-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 142.061824][ T4300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.092967][ T4300] usb 3-1: Product: syz [ 142.097198][ T4300] usb 3-1: Manufacturer: syz [ 142.101808][ T4300] usb 3-1: SerialNumber: syz [ 142.141888][ T4300] usb 3-1: config 0 descriptor?? [ 142.153298][ T4300] rndis_wlan 3-1:0.0: skipping garbage [ 142.160142][ T4300] usb 3-1: bad CDC descriptors [ 142.166554][ T4300] rndis_host 3-1:0.0: skipping garbage [ 142.173708][ T4300] usb 3-1: bad CDC descriptors [ 142.178931][ T4300] cdc_acm 3-1:0.0: skipping garbage [ 142.184661][ T4300] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 142.192573][ T4300] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 142.199090][ T4300] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 142.379375][ T6481] netlink: 27 bytes leftover after parsing attributes in process `syz.2.798'. [ 142.406588][ T14] usb 3-1: USB disconnect, device number 9 [ 143.386992][ T5152] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 143.572254][ T5152] usb 1-1: Using ep0 maxpacket: 32 [ 143.579224][ T5152] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 143.599482][ T6540] loop2: detected capacity change from 0 to 256 [ 143.612272][ T5152] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.643462][ T5152] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.728543][ T5152] usb 1-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 143.755858][ T5152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.770035][ T5152] usb 1-1: Product: syz [ 143.777583][ T5152] usb 1-1: Manufacturer: syz [ 143.810628][ T5152] usb 1-1: SerialNumber: syz [ 143.829091][ T5152] usb 1-1: config 0 descriptor?? [ 143.862576][ T5152] rndis_wlan 1-1:0.0: skipping garbage [ 143.883891][ T5152] usb 1-1: bad CDC descriptors [ 143.889773][ T5152] rndis_host 1-1:0.0: skipping garbage [ 143.901469][ T5152] usb 1-1: bad CDC descriptors [ 143.907226][ T5152] cdc_acm 1-1:0.0: skipping garbage [ 143.912535][ T5152] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 143.920357][ T5152] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 143.926849][ T5152] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 143.999272][ T6548] netlink: 132 bytes leftover after parsing attributes in process `syz.2.825'. [ 144.113384][ T6526] netlink: 27 bytes leftover after parsing attributes in process `syz.0.827'. [ 144.147133][ T5152] usb 1-1: USB disconnect, device number 8 [ 144.287197][ T6563] loop4: detected capacity change from 0 to 512 [ 144.309199][ T6563] EXT4-fs: Ignoring removed i_version option [ 144.371731][ T6563] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 144.435481][ T6563] EXT4-fs (loop4): 1 truncate cleaned up [ 144.441241][ T6563] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 144.488160][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 144.703564][ T4255] Bluetooth: hci0: command 0x0401 tx timeout [ 144.755652][ T6573] loop4: detected capacity change from 0 to 256 [ 144.773890][ T6571] loop1: detected capacity change from 0 to 1024 [ 144.849168][ T6571] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 145.124613][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 145.356114][ T5079] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 145.587615][ T5079] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 145.614758][ T5079] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.626277][ T4262] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 145.632263][ T5079] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.656935][ T5079] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 145.720491][ T5079] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 145.750467][ T5079] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 145.802714][ T5079] usb 5-1: Manufacturer: syz [ 145.822691][ T5079] usb 5-1: config 0 descriptor?? [ 145.836098][ T6600] loop1: detected capacity change from 0 to 512 [ 145.892754][ T6600] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 145.984874][ T6600] EXT4-fs (loop1): 1 truncate cleaned up [ 145.997978][ T6600] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 146.164906][ T6600] fscrypt (loop1, inode 18): Mutually exclusive encryption flags (0x14) [ 146.257693][ T5079] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 146.274434][ T5079] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 146.296190][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 146.313802][ T5079] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 146.330486][ T6614] loop3: detected capacity change from 0 to 256 [ 146.607201][ T5562] usb 5-1: USB disconnect, device number 7 [ 146.656129][ T6616] fido_id[6616]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 147.005826][ T6632] loop1: detected capacity change from 0 to 16 [ 147.029918][ T6632] erofs: (device loop1): mounted with root inode @ nid 36. [ 147.055431][ T6632] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-95] [ 147.817609][ T6648] loop2: detected capacity change from 0 to 512 [ 147.919660][ T6648] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 147.997942][ T6648] EXT4-fs (loop2): 1 truncate cleaned up [ 148.015381][ T6648] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 148.085836][ T6648] fscrypt (loop2, inode 18): Mutually exclusive encryption flags (0x14) [ 148.094702][ T4300] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 148.218789][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 148.294499][ T4300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.333982][ T4300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.355983][ T4300] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.402271][ T4300] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.432247][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.487880][ T4300] usb 5-1: config 0 descriptor?? [ 148.903685][ T4300] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 148.928478][ T4300] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 148.945068][ T4300] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 149.114848][ C1] sd 0:0:1:0: [sda] tag#7284 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 149.125372][ C1] sd 0:0:1:0: [sda] tag#7284 CDB: Read(6) 08 00 9f d1 fe de [ 149.841150][ T6690] loop1: detected capacity change from 0 to 64 [ 149.987404][ T4252] hfs: walked past end of dir [ 150.004452][ T4252] hfs: walked past end of dir [ 150.692386][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 151.029500][ T5079] usb 5-1: USB disconnect, device number 8 [ 151.452746][ T6747] loop3: detected capacity change from 0 to 1024 [ 151.472339][ T6747] EXT4-fs: Ignoring removed nobh option [ 151.472465][ T6725] loop4: detected capacity change from 0 to 32768 [ 151.482991][ T6747] EXT4-fs: inline encryption not supported [ 151.511213][ T6747] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 151.538893][ T6725] XFS (loop4): Mounting V5 Filesystem [ 151.550291][ T6747] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 151.608109][ T6747] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.910: Allocating blocks 385-513 which overlap fs metadata [ 151.631425][ T6725] XFS (loop4): Ending clean mount [ 151.648652][ T6747] EXT4-fs (loop3): pa ffff88807566ee00: logic 16, phys. 129, len 24 [ 151.657485][ T6747] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 151.730200][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 151.765294][ T4259] XFS (loop4): Unmounting Filesystem [ 152.129224][ T4262] block nbd2: Receive control failed (result -32) [ 152.129465][ T6742] block nbd2: shutting down sockets [ 152.423394][ T6776] loop1: detected capacity change from 0 to 1024 [ 152.503139][ T6776] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.742448][ T5152] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 152.757345][ T6787] vivid-000: disconnect [ 152.769780][ T6787] vivid-000: reconnect [ 152.927227][ T5152] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 152.953391][ T5152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.974882][ T5152] usb 1-1: config 0 descriptor?? [ 152.994926][ T5152] cp210x 1-1:0.0: cp210x converter detected [ 153.390553][ T5152] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 153.406155][ T6808] program syz.1.933 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.624661][ T5152] usb 1-1: cp210x converter now attached to ttyUSB0 [ 153.831821][ T4300] usb 1-1: USB disconnect, device number 9 [ 153.855921][ T4300] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 153.876895][ T4300] cp210x 1-1:0.0: device disconnected [ 153.972281][ T4255] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 153.972318][ T4260] Bluetooth: hci5: command 0x1003 tx timeout [ 154.151263][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.944'. [ 154.292516][ T4309] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 154.484064][ T4309] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.520704][ T4309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 154.540593][ T4309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 154.589262][ T4309] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 154.592283][ T14] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 154.631620][ T4309] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 154.671565][ T4309] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 154.696381][ T4309] usb 2-1: Manufacturer: syz [ 154.711607][ T4309] usb 2-1: config 0 descriptor?? [ 154.794042][ T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.809125][ T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.819438][ T14] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 154.833779][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 154.842022][ T14] usb 5-1: SerialNumber: syz [ 155.036299][ T6854] netlink: 116 bytes leftover after parsing attributes in process `syz.3.953'. [ 155.074845][ T14] usb 5-1: 0:2 : does not exist [ 155.093007][ T14] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 155.102406][ T4309] rc_core: IR keymap rc-hauppauge not found [ 155.118383][ T14] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 155.120862][ T4309] Registered IR keymap rc-empty [ 155.146413][ T4309] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 155.172359][ T4255] Bluetooth: hci0: command 0x0401 tx timeout [ 155.172533][ T4262] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 155.192377][ T4309] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 155.201012][ T14] usb 5-1: USB disconnect, device number 9 [ 155.214837][ T6849] loop2: detected capacity change from 0 to 40427 [ 155.221758][ T4587] udevd[4587]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.248382][ T4309] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 155.269659][ T6849] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 155.282472][ T5152] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 155.303276][ T6849] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 155.304015][ T4309] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 155.322484][ T6849] F2FS-fs (loop2): invalid crc value [ 155.344197][ T6849] F2FS-fs (loop2): Found nat_bits in checkpoint [ 155.358911][ T4309] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 155.412532][ T4309] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 155.421814][ T6849] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 155.440522][ T6849] F2FS-fs (loop2): Start checkpoint disabled! [ 155.461052][ T6849] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 155.462453][ T4309] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 155.484723][ T5152] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.506238][ T6849] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 155.522326][ T4309] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 155.526871][ T5152] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.559180][ T5152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.567554][ T4309] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 155.580777][ T5152] usb 1-1: Product: syz [ 155.593604][ T5152] usb 1-1: Manufacturer: syz [ 155.598259][ T5152] usb 1-1: SerialNumber: syz [ 155.612469][ T4309] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 155.636269][ T5152] usb 1-1: selecting invalid altsetting 1 [ 155.662503][ T4309] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 155.692292][ T4309] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 155.732859][ T4309] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 155.762272][ T4309] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 155.809492][ T4335] kworker/u4:6: attempt to access beyond end of device [ 155.809492][ T4335] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 155.825819][ T4309] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 155.842261][ T4309] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 155.897944][ T4309] usb 2-1: USB disconnect, device number 8 [ 155.898305][ T6856] loop3: detected capacity change from 0 to 32768 [ 156.054164][ T5152] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 156.071138][ T5152] cdc_ncm 1-1:1.0: bind() failure [ 156.118264][ T5152] usb 1-1: USB disconnect, device number 10 [ 156.150575][ T6856] XFS (loop3): Mounting V5 Filesystem [ 156.304850][ T6856] XFS (loop3): Ending clean mount [ 156.316082][ T6856] XFS (loop3): Quotacheck needed: Please wait. [ 156.408347][ T6856] XFS (loop3): Quotacheck: Done. [ 156.471547][ T26] audit: type=1800 audit(1885609979.722:472): pid=6856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.954" name="bus" dev="loop3" ino=9291 res=0 errno=0 [ 156.612534][ T4258] XFS (loop3): Unmounting Filesystem [ 156.831440][ T6888] loop2: detected capacity change from 0 to 128 [ 156.972293][ T5151] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 157.116030][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.967'. [ 157.172435][ T5151] usb 5-1: Using ep0 maxpacket: 32 [ 157.193420][ T5151] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 157.218001][ T5151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.248787][ T5151] usb 5-1: config 0 descriptor?? [ 157.292598][ T6898] loop1: detected capacity change from 0 to 128 [ 157.337669][ T6898] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 157.392402][ T6898] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 157.492360][ T5151] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 157.508134][ T5151] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 157.546719][ T5151] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 157.566550][ T5151] usb 5-1: media controller created [ 157.589369][ T5151] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.606544][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 157.693971][ T5151] az6027: usb out operation failed. (-71) [ 157.705418][ T5151] az6027: usb out operation failed. (-71) [ 157.730837][ T5151] stb0899_attach: Driver disabled by Kconfig [ 157.745934][ T5151] az6027: no front-end attached [ 157.745934][ T5151] [ 157.776858][ T5151] az6027: usb out operation failed. (-71) [ 157.795485][ T5151] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 157.821384][ T5151] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 157.874727][ T5151] dvb-usb: schedule remote query interval to 400 msecs. [ 157.898333][ T5151] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 157.904800][ T6915] bridge0: port 3(gretap0) entered blocking state [ 157.947609][ T5151] usb 5-1: USB disconnect, device number 10 [ 157.962686][ T6915] bridge0: port 3(gretap0) entered disabled state [ 158.007097][ T6915] device gretap0 entered promiscuous mode [ 158.037991][ T5151] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 158.072767][ T6915] bridge0: port 3(gretap0) entered blocking state [ 158.079308][ T6915] bridge0: port 3(gretap0) entered forwarding state [ 158.127987][ T6920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.980'. [ 158.161939][ T14] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.179210][ T14] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.212074][ T5152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.244675][ T6923] loop1: detected capacity change from 0 to 256 [ 158.338853][ T6923] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 158.412466][ T5151] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.506283][ T6929] loop4: detected capacity change from 0 to 256 [ 158.542354][ T5151] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.595107][ T6929] FAT-fs (loop4): Directory bread(block 64) failed [ 158.612121][ T6929] FAT-fs (loop4): Directory bread(block 65) failed [ 158.630418][ T6929] FAT-fs (loop4): Directory bread(block 66) failed [ 158.682326][ T6929] FAT-fs (loop4): Directory bread(block 67) failed [ 158.713288][ T6929] FAT-fs (loop4): Directory bread(block 68) failed [ 158.758431][ T6929] FAT-fs (loop4): Directory bread(block 69) failed [ 158.841630][ T6929] FAT-fs (loop4): Directory bread(block 70) failed [ 158.861868][ T6929] FAT-fs (loop4): Directory bread(block 71) failed [ 158.878056][ T6929] FAT-fs (loop4): Directory bread(block 72) failed [ 158.889252][ T6939] device syzkaller1 entered promiscuous mode [ 158.895787][ T6929] FAT-fs (loop4): Directory bread(block 73) failed [ 159.388072][ T35] kworker/u4:2: attempt to access beyond end of device [ 159.388072][ T35] loop4: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 160.119607][ T6969] loop3: detected capacity change from 0 to 2048 [ 160.138745][ T6969] EXT4-fs: Ignoring removed orlov option [ 160.149550][ T6969] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.195971][ T6969] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 160.712277][ T4300] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 160.851462][ T6988] device syzkaller1 entered promiscuous mode [ 160.902300][ T4300] usb 2-1: Using ep0 maxpacket: 32 [ 160.909570][ T4300] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 160.919053][ T4300] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.929730][ T4300] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.956653][ T4300] usb 2-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 160.975925][ T4300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.994421][ T4300] usb 2-1: Product: syz [ 161.004836][ T4300] usb 2-1: Manufacturer: syz [ 161.015158][ T4300] usb 2-1: SerialNumber: syz [ 161.038093][ T4300] usb 2-1: config 0 descriptor?? [ 161.055108][ T4300] rndis_wlan 2-1:0.0: skipping garbage [ 161.060848][ T4300] usb 2-1: bad CDC descriptors [ 161.088951][ T4300] rndis_host 2-1:0.0: skipping garbage [ 161.111603][ T4300] usb 2-1: bad CDC descriptors [ 161.120497][ T4300] cdc_acm 2-1:0.0: skipping garbage [ 161.130517][ T4300] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 161.145189][ T4300] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 161.154000][ T4300] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 161.271740][ T6984] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1002'. [ 161.314136][ T4300] usb 2-1: USB disconnect, device number 9 [ 161.362346][ T5151] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 161.487365][ T6997] process '/newroot/209/file0' started with executable stack [ 161.562337][ T5151] usb 3-1: Using ep0 maxpacket: 32 [ 161.569233][ T5151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.600779][ T5151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.641272][ T5151] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 161.659433][ T5151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.684903][ T5151] usb 3-1: config 0 descriptor?? [ 162.113866][ T5151] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 162.292284][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.292398][ T6975] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 162.427269][ T4300] usb 3-1: USB disconnect, device number 10 [ 162.688171][ T7018] loop1: detected capacity change from 0 to 2048 [ 162.723531][ T7018] EXT4-fs: Ignoring removed orlov option [ 162.732404][ T7018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.781240][ T7018] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 163.142256][ T7023] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 163.142776][ T7030] program syz.1.1017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.509753][ T7040] loop4: detected capacity change from 0 to 1024 [ 163.668313][ T7040] hfsplus: xattr searching failed [ 163.696251][ T7040] hfsplus: xattr searching failed [ 163.709444][ T7040] hfsplus: xattr searching failed [ 164.715554][ T7070] loop2: detected capacity change from 0 to 4096 [ 164.763912][ T7070] EXT4-fs: inline encryption not supported [ 164.873785][ T7070] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 164.966402][ T7070] EXT4-fs (loop2): shut down requested (2) [ 165.103081][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 165.266848][ T7087] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 165.815493][ T7101] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1050'. [ 165.862934][ T7103] overlayfs: filesystem on './file1' not supported as upperdir [ 166.140021][ T7107] loop2: detected capacity change from 0 to 4096 [ 166.867308][ T7134] loop2: detected capacity change from 0 to 1024 [ 166.941485][ T7134] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 166.959941][ T7134] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.101986][ T7134] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 167.128516][ T7134] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 167.146762][ T7134] EXT4-fs (loop2): This should not happen!! Data will be lost [ 167.146762][ T7134] [ 167.157935][ T7134] EXT4-fs (loop2): Total free blocks count 0 [ 167.170194][ T7134] EXT4-fs (loop2): Free/Dirty block details [ 167.182088][ T7134] EXT4-fs (loop2): free_blocks=4293918720 [ 167.193189][ T7134] EXT4-fs (loop2): dirty_blocks=16 [ 167.198360][ T7134] EXT4-fs (loop2): Block reservation details [ 167.209402][ T7134] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 167.660040][ T7137] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 167.682655][ T7137] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 167.700855][ T7137] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 167.724451][ T7137] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 167.740556][ T7137] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 167.760828][ T7137] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 167.790530][ T7137] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 167.805597][ T7137] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 167.811616][ T7137] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 167.842430][ T7137] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 167.857767][ T7137] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 167.879579][ T7137] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 167.896135][ T7142] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 28 [ 167.904054][ T7137] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 167.949488][ T7137] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 167.980240][ T7137] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 168.330012][ T7152] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 168.550269][ T7158] loop2: detected capacity change from 0 to 1024 [ 168.721869][ T7158] hfsplus: xattr searching failed [ 168.770521][ T7158] hfsplus: xattr searching failed [ 168.800615][ T7158] hfsplus: xattr searching failed [ 169.012423][ T4262] Bluetooth: hci0: command 0x0c1a tx timeout [ 169.048639][ T7176] loop2: detected capacity change from 0 to 256 [ 169.123304][ T7176] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.152581][ T4300] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 169.173572][ T7176] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 169.194303][ T7176] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 169.355232][ T4300] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 169.376574][ T4300] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.414901][ T4300] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 169.442064][ T4300] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.494177][ T4300] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 169.532267][ T4300] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 169.559636][ T4300] usb 1-1: Product: syz [ 169.572030][ T4300] usb 1-1: Manufacturer: syz [ 169.602001][ T4300] cdc_wdm 1-1:1.0: skipping garbage [ 169.616668][ T4300] cdc_wdm 1-1:1.0: skipping garbage [ 169.638307][ T4300] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 169.652317][ T4300] cdc_wdm 1-1:1.0: Unknown control protocol [ 169.732382][ T4262] Bluetooth: hci1: command 0x0c1a tx timeout [ 169.804429][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1087'. [ 169.816004][ T4262] Bluetooth: hci2: command 0x0c1a tx timeout [ 169.893845][ T4262] Bluetooth: hci3: command 0x0c1a tx timeout [ 169.977608][ T4262] Bluetooth: hci4: command 0x0c1a tx timeout [ 170.066691][ T4309] usb 1-1: USB disconnect, device number 11 [ 170.228697][ T7191] loop2: detected capacity change from 0 to 1024 [ 170.245313][ T7191] EXT4-fs (loop2): Test dummy encryption mode enabled [ 170.291056][ T7191] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 170.530788][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 170.729340][ T7199] loop2: detected capacity change from 0 to 512 [ 170.769518][ T7199] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 170.827600][ T7199] EXT4-fs (loop2): 1 truncate cleaned up [ 170.846302][ T7199] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 171.060439][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 171.092325][ T4262] Bluetooth: hci0: command 0x0406 tx timeout [ 171.172294][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.442342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 171.574382][ T7204] loop4: detected capacity change from 0 to 32768 [ 171.637996][ T7204] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.679335][ T7204] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 171.688540][ T7204] BTRFS info (device loop4): force clearing of disk cache [ 171.709576][ T7204] BTRFS info (device loop4): enabling auto defrag [ 171.736762][ T7204] BTRFS info (device loop4): max_inline at 0 [ 171.779282][ T7204] BTRFS info (device loop4): enabling disk space caching [ 171.792294][ T7204] BTRFS info (device loop4): disk space caching is enabled [ 171.812607][ T4262] Bluetooth: hci1: command 0x0406 tx timeout [ 171.892358][ T4262] Bluetooth: hci2: command 0x0406 tx timeout [ 171.972269][ T4262] Bluetooth: hci3: command 0x0406 tx timeout [ 172.041480][ T7204] BTRFS info (device loop4): enabling ssd optimizations [ 172.052601][ T4262] Bluetooth: hci4: command 0x0406 tx timeout [ 172.059886][ T7204] BTRFS info (device loop4): rebuilding free space tree [ 172.121513][ T7204] BTRFS info (device loop4): disabling free space tree [ 172.148462][ T7204] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 172.172316][ T7204] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 172.203162][ T4309] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 172.408256][ T4309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 172.448526][ T4309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 172.502468][ T5173] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 172.516748][ T4309] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.571225][ T4309] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.576457][ T4259] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 172.613976][ T4309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.653217][ T4309] usb 4-1: config 0 descriptor?? [ 172.658903][ T7230] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 173.082406][ T4300] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 173.120138][ T4309] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 173.136408][ T4309] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 173.176107][ T4309] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 173.274040][ T4300] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 173.292213][ T4300] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.322292][ T4300] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 173.362676][ T4300] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.405023][ T4300] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 173.454269][ T4300] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 173.474658][ T7253] usb 4-1: USB disconnect, device number 5 [ 173.492337][ T4300] usb 3-1: Product: syz [ 173.496670][ T4300] usb 3-1: Manufacturer: syz [ 173.554710][ T4300] cdc_wdm 3-1:1.0: skipping garbage [ 173.570229][ T4300] cdc_wdm 3-1:1.0: skipping garbage [ 173.598995][ T4300] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 173.610790][ T4300] cdc_wdm 3-1:1.0: Unknown control protocol [ 173.976273][ T4300] usb 3-1: USB disconnect, device number 11 [ 175.246214][ T7278] loop2: detected capacity change from 0 to 32768 [ 175.279166][ T7278] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1115 (7278) [ 175.317506][ T7278] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 175.338343][ T7278] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 175.357613][ T7278] BTRFS info (device loop2): force clearing of disk cache [ 175.382301][ T7278] BTRFS info (device loop2): enabling auto defrag [ 175.388915][ T7278] BTRFS info (device loop2): max_inline at 0 [ 175.412350][ T7278] BTRFS info (device loop2): enabling disk space caching [ 175.432273][ T7278] BTRFS info (device loop2): disk space caching is enabled [ 175.823708][ T7278] BTRFS info (device loop2): enabling ssd optimizations [ 175.831912][ T7278] BTRFS info (device loop2): rebuilding free space tree [ 175.850463][ T7278] BTRFS info (device loop2): disabling free space tree [ 175.866976][ T7278] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 175.882243][ T7278] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 176.125986][ T51] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 176.196177][ T4263] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 176.220750][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1122'. [ 176.487545][ T4587] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 14 /dev/loop2 scanned by udevd (4587) [ 176.632292][ T4300] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 176.843339][ T4300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 176.867086][ T4308] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 176.892219][ T4300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 176.924740][ T4300] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 176.959073][ T4300] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.969405][ T4300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.987609][ T4300] usb 2-1: config 0 descriptor?? [ 176.993728][ T7312] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 177.073837][ T4308] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.098570][ T4308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 177.145503][ T4308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 177.185998][ T4308] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 177.200658][ T4308] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 177.215699][ T4308] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 177.226291][ T4308] usb 3-1: Manufacturer: syz [ 177.233421][ T4308] usb 3-1: config 0 descriptor?? [ 177.430486][ T4300] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 177.465715][ T4300] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 177.504312][ T4300] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 177.552292][ T4308] rc_core: IR keymap rc-hauppauge not found [ 177.559561][ T4308] Registered IR keymap rc-empty [ 177.582804][ T4308] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 177.622548][ T4308] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 177.682854][ T4308] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 177.719650][ T4308] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 177.774640][ T14] usb 2-1: USB disconnect, device number 10 [ 177.789770][ T4308] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 177.882313][ T4308] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 177.932305][ T4308] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 177.962267][ T4308] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 177.992350][ T4308] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 178.022291][ T4308] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 178.056302][ T4308] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 178.092308][ T4308] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 178.127859][ T4308] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 178.165761][ T4308] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 178.207874][ T4308] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 178.220164][ T4308] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 178.238363][ T4308] usb 3-1: USB disconnect, device number 12 [ 178.612625][ T5562] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 178.813992][ T5562] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.831444][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1135'. [ 178.836280][ T5562] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.880805][ T5562] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.912288][ T5562] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.932385][ T5562] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.960525][ T5562] usb 4-1: config 0 descriptor?? [ 178.989088][ T7358] device vlan2 entered promiscuous mode [ 179.014830][ T7358] device dummy0 entered promiscuous mode [ 179.400695][ T5562] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd [ 179.428830][ T5562] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 179.458715][ T5562] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 179.727947][ T5562] usb 4-1: USB disconnect, device number 6 [ 180.132340][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.161999][ T7383] loop4: detected capacity change from 0 to 512 [ 180.179285][ T7383] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 180.213039][ T7383] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0102] [ 180.223227][ T7383] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.1149: corrupted in-inode xattr [ 180.246615][ T7383] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1149: couldn't read orphan inode 15 (err -117) [ 180.272524][ T7383] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 180.350320][ T7383] EXT4-fs error (device loop4): ext4_check_dx_root:2266: inode #2: comm syz.4.1149: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 180.436551][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 180.872286][ T7392] loop4: detected capacity change from 0 to 32768 [ 180.898165][ T7392] XFS: noikeep mount option is deprecated. [ 180.932625][ T4260] Bluetooth: hci0: command 0x0406 tx timeout [ 180.938773][ T4260] Bluetooth: hci1: command 0x0406 tx timeout [ 180.945540][ T4262] Bluetooth: hci2: command 0x0406 tx timeout [ 180.945559][ T4255] Bluetooth: hci3: command 0x0406 tx timeout [ 181.056191][ T7392] XFS (loop4): Mounting V5 Filesystem [ 181.210178][ T7392] XFS (loop4): Ending clean mount [ 181.223844][ T7392] XFS (loop4): Quotacheck needed: Please wait. [ 181.478155][ T7392] XFS (loop4): Quotacheck: Done. [ 181.626681][ T4259] XFS (loop4): Unmounting Filesystem [ 181.682328][ T4308] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 181.883432][ T4308] usb 1-1: Using ep0 maxpacket: 8 [ 181.906259][ T4308] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 181.930754][ T4308] usb 1-1: config 179 has no interface number 0 [ 181.942344][ T4308] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 181.979749][ T4308] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 181.998440][ T4308] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 182.012106][ T4308] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 182.032338][ T4308] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 182.076490][ T4308] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 182.090952][ T4308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.109701][ T7414] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 182.282999][ T7425] loop2: detected capacity change from 0 to 2048 [ 182.346739][ T7425] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.378803][ T4308] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input21 [ 182.561108][ T7414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.611411][ T7414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.859685][ T4308] usb 1-1: USB disconnect, device number 12 [ 182.865732][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 182.865776][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 183.530307][ T7429] loop4: detected capacity change from 0 to 40427 [ 183.553540][ T7429] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 183.572477][ T7429] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 183.594834][ T7429] F2FS-fs (loop4): invalid crc value [ 183.626415][ T7429] F2FS-fs (loop4): Found nat_bits in checkpoint [ 183.642261][ T4309] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 183.798794][ T7429] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 183.832279][ T7429] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 183.832330][ T4309] usb 2-1: Using ep0 maxpacket: 32 [ 183.877925][ T4309] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 183.898460][ T4309] usb 2-1: config 0 has no interface number 0 [ 183.913645][ T4309] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 183.924303][ T4309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.933668][ T4309] usb 2-1: Product: syz [ 183.939588][ T4309] usb 2-1: Manufacturer: syz [ 183.946144][ T4309] usb 2-1: SerialNumber: syz [ 183.965509][ T4309] usb 2-1: config 0 descriptor?? [ 184.011687][ T4309] smsc95xx v2.0.0 [ 184.134153][ T7475] mmap: syz.0.1182 (7475) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 184.696610][ T7490] loop2: detected capacity change from 0 to 128 [ 184.709216][ T7490] EXT4-fs: Ignoring removed oldalloc option [ 184.737188][ T7490] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 184.756954][ T7490] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.770591][ T7494] loop4: detected capacity change from 0 to 512 [ 184.786993][ T7494] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.802539][ T5151] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 184.810297][ T7494] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 184.835956][ T7494] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 184.862282][ T7494] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.1189: inode #15: comm syz.4.1189: iget: illegal inode # [ 184.882912][ T7494] EXT4-fs (loop4): Remounting filesystem read-only [ 184.889662][ T7494] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1189: couldn't read orphan inode 15 (err -117) [ 184.905269][ T7494] EXT4-fs (loop4): Remounting filesystem read-only [ 184.911876][ T7494] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 184.912523][ T5562] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 184.931352][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 184.940395][ T7494] EXT4-fs (loop4): shut down requested (1) [ 185.005096][ T4309] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 185.022597][ T5151] usb 4-1: Using ep0 maxpacket: 8 [ 185.022950][ T4309] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 185.033748][ T5151] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 185.067078][ T4309] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 185.082265][ T5151] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 185.089588][ T4309] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 185.102430][ T5151] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 185.111495][ T4309] usb 2-1: USB disconnect, device number 11 [ 185.124032][ T5151] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 185.139447][ T5151] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.153909][ T5151] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 185.163588][ T5562] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 185.163916][ T5151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.176084][ T5562] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 185.199544][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 185.206908][ T5562] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 185.216309][ T5562] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.237231][ T5562] usb 1-1: Product: syz [ 185.241453][ T5562] usb 1-1: Manufacturer: syz [ 185.246658][ T5562] usb 1-1: SerialNumber: syz [ 185.282296][ T5562] usb 1-1: config 0 descriptor?? [ 185.302752][ T7488] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 185.310067][ T7488] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 185.338111][ T7501] loop2: detected capacity change from 0 to 512 [ 185.377861][ T7501] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.387590][ T7503] loop4: detected capacity change from 0 to 512 [ 185.402803][ T7501] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 185.413164][ T5151] usb 4-1: usb_control_msg returned -32 [ 185.419691][ T5151] usbtmc 4-1:16.0: can't read capabilities [ 185.439279][ T7503] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 185.447363][ T7501] EXT4-fs (loop2): 1 truncate cleaned up [ 185.454507][ T7501] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 185.464643][ T7503] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.499556][ T26] audit: type=1800 audit(1885610264.743:473): pid=7501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1193" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 185.538931][ T7501] EXT4-fs (loop2): shut down requested (0) [ 185.553621][ T7488] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 185.606387][ T7488] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 185.682867][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 185.830025][ T7511] usbtmc 4-1:16.0: stb usb_control_msg returned -32 [ 185.859119][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 185.869971][ T4309] usb 4-1: USB disconnect, device number 7 [ 186.115130][ T7523] loop4: detected capacity change from 0 to 512 [ 186.128467][ T7523] ext4: Bad value for 'sb' [ 186.488358][ T5562] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 186.528904][ T5562] usb 1-1: USB disconnect, device number 13 [ 186.531546][ T7528] loop2: detected capacity change from 0 to 32768 [ 186.552643][ T7530] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 186.568685][ T7530] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 186.580697][ T7528] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 186.791761][ T4587] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 187.437139][ T7550] loop2: detected capacity change from 0 to 512 [ 187.493170][ T7550] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 187.546664][ T7550] EXT4-fs (loop2): 1 truncate cleaned up [ 187.611522][ T7550] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 187.761058][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1215'. [ 187.783949][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 187.790210][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1215'. [ 187.819274][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.837754][ T7557] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1215'. [ 187.875383][ T7557] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1215'. [ 188.188383][ T14] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 188.412378][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 188.424617][ T14] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 188.471097][ T14] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 188.501880][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.519888][ T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 188.545032][ T14] usb 3-1: config 1 has no interface number 0 [ 188.561485][ T14] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 188.582315][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.678303][ T14] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 188.878605][ T14] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 188.888547][ T14] snd_usb_pod 3-1:1.1: invalid control EP [ 188.909616][ T14] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 188.930581][ T14] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 188.967601][ T14] snd_usb_pod: probe of 3-1:1.1 failed with error -22 [ 189.091914][ T14] usb 3-1: USB disconnect, device number 13 [ 189.497867][ T7571] loop4: detected capacity change from 0 to 32768 [ 189.599832][ T7571] XFS (loop4): Mounting V5 Filesystem [ 189.800480][ T7571] XFS (loop4): Ending clean mount [ 189.824388][ T7571] XFS (loop4): Quotacheck needed: Please wait. [ 189.921333][ T7571] XFS (loop4): Quotacheck: Done. [ 190.057444][ T14] kernel write not supported for file /vcs (pid: 14 comm: kworker/0:1) [ 190.128265][ T26] audit: type=1804 audit(1885610269.373:474): pid=7571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1221" name="/newroot/241/file0/bus" dev="loop4" ino=9290 res=1 errno=0 [ 190.535404][ T4259] XFS (loop4): Unmounting Filesystem [ 190.973651][ T7638] fuse: Bad value for 'fd' [ 190.982425][ T7638] fuse: Bad value for 'fd' [ 191.416807][ T7651] loop4: detected capacity change from 0 to 256 [ 191.929275][ T7647] loop2: detected capacity change from 0 to 32768 [ 192.130201][ T7647] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 192.371847][ T4263] ocfs2: Unmounting device (7,2) on (node local) [ 193.262416][ T14] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 193.310400][ T7694] loop4: detected capacity change from 0 to 1024 [ 193.463878][ T14] usb 3-1: config 0 has no interfaces? [ 193.470702][ T14] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 193.510644][ T14] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 193.544265][ T14] usb 3-1: Manufacturer: syz [ 193.559425][ T14] usb 3-1: config 0 descriptor?? [ 193.808677][ T5079] usb 3-1: USB disconnect, device number 14 [ 194.220477][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.226864][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.277228][ T7715] loop4: detected capacity change from 0 to 512 [ 194.336886][ T7715] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1278: casefold flag without casefold feature [ 194.380752][ T7715] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1278: couldn't read orphan inode 15 (err -117) [ 194.437645][ T7715] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 194.598256][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 195.277464][ T26] audit: type=1326 audit(1885610274.523:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7740 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99838e929 code=0x7ffc0000 [ 195.340260][ T26] audit: type=1326 audit(1885610274.523:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7740 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd99838e929 code=0x7ffc0000 [ 195.422291][ T26] audit: type=1326 audit(1885610274.523:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7740 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99838e929 code=0x7ffc0000 [ 195.522227][ T26] audit: type=1326 audit(1885610274.523:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7740 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99838e929 code=0x7ffc0000 [ 195.598620][ T26] audit: type=1326 audit(1885610274.523:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7740 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd99838e929 code=0x7ffc0000 [ 195.702480][ T26] audit: type=1326 audit(1885610274.533:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7740 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99838e929 code=0x7ffc0000 [ 195.810789][ T26] audit: type=1326 audit(1885610274.533:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7740 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99838e929 code=0x7ffc0000 [ 195.954906][ T26] audit: type=1326 audit(1885610274.533:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7740 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fd99838e929 code=0x7ffc0000 [ 196.064075][ T26] audit: type=1326 audit(1885610274.533:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7740 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99838e929 code=0x7ffc0000 [ 196.187010][ T26] audit: type=1326 audit(1885610274.533:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7740 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99838e929 code=0x7ffc0000 [ 197.083512][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1306'. [ 197.341507][ T7794] loop4: detected capacity change from 0 to 128 [ 197.389595][ T7792] can0: slcan on ttyS3. [ 197.488154][ T7792] can0 (unregistered): slcan off ttyS3. [ 197.494093][ T7794] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 197.559682][ T7794] ext4 filesystem being mounted at /263/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 198.240848][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 198.462021][ T7833] loop4: detected capacity change from 0 to 1024 [ 198.701764][ T4335] hfsplus: b-tree write err: -5, ino 4 [ 199.174274][ T7855] loop2: detected capacity change from 0 to 1024 [ 199.236805][ T7855] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 199.312092][ T7862] EXT4-fs error (device loop2): __ext4_remount:6623: comm syz.2.1328: Abort forced by user [ 199.424742][ T7862] EXT4-fs (loop2): Remounting filesystem read-only [ 199.442963][ T7862] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 199.783608][ T4263] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 199.814781][ T4263] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 200.301262][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 200.507223][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.780121][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.944234][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.962457][ T7896] netlink: 'syz.1.1341': attribute type 11 has an invalid length. [ 201.177160][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.254004][ T7899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1343'. [ 201.710995][ T4255] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 201.724357][ T4255] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 201.734209][ T4255] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 201.756850][ T4255] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 201.766404][ T4255] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 201.773939][ T4255] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 201.971787][ T7920] loop4: detected capacity change from 0 to 2048 [ 202.111540][ T7924] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.065445][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1359'. [ 203.265811][ T7912] chnl_net:caif_netlink_parms(): no params data found [ 203.822661][ T4260] Bluetooth: hci4: command 0x0409 tx timeout [ 204.151243][ T7912] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.169145][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.190594][ T7912] device bridge_slave_0 entered promiscuous mode [ 204.198048][ T7991] loop4: detected capacity change from 0 to 512 [ 204.261871][ T7912] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.307821][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.364581][ T7991] __quota_error: 13 callbacks suppressed [ 204.364597][ T7991] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 204.388074][ T7912] device bridge_slave_1 entered promiscuous mode [ 204.478223][ T7991] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 204.488654][ T7991] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.1373: Failed to acquire dquot type 1 [ 204.669620][ T7991] EXT4-fs (loop4): 1 truncate cleaned up [ 204.687943][ T7991] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 204.724483][ T7991] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.003376][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 205.127863][ T7912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.158199][ T51] device team0 left promiscuous mode [ 205.173964][ T51] device team_slave_0 left promiscuous mode [ 205.213699][ T51] device team_slave_1 left promiscuous mode [ 205.288337][ T51] device batadv_slave_1 left promiscuous mode [ 205.355515][ T51] device hsr_slave_0 left promiscuous mode [ 205.376492][ T51] device hsr_slave_1 left promiscuous mode [ 205.406470][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.426349][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.449633][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.461482][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.499896][ T51] device bridge_slave_1 left promiscuous mode [ 205.518622][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.552280][ T5151] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 205.579053][ T51] device bridge_slave_0 left promiscuous mode [ 205.610114][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.761013][ T5151] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.771449][ T5151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 205.812268][ T5151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 205.817156][ T51] device veth1_macvtap left promiscuous mode [ 205.825736][ T5151] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 205.859716][ T51] device veth0_macvtap left promiscuous mode [ 205.879325][ T5151] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 205.879737][ T51] device veth1_vlan left promiscuous mode [ 205.889057][ T5151] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 205.902853][ T4260] Bluetooth: hci4: command 0x041b tx timeout [ 205.915300][ T5151] usb 1-1: Manufacturer: syz [ 205.922069][ T5151] usb 1-1: config 0 descriptor?? [ 205.929709][ T51] device veth0_vlan left promiscuous mode [ 206.379341][ T5151] rc_core: IR keymap rc-hauppauge not found [ 206.389843][ T5151] Registered IR keymap rc-empty [ 206.424240][ T5151] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 206.452595][ T5151] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 206.493015][ T5151] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 206.509699][ T5151] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input23 [ 206.562355][ T5151] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 206.596516][ T5151] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 206.653634][ T5151] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 206.668685][ T8046] virtiofs: Unknown parameter 'always 1 V3 [ 206.668685][ T8046] 010000E0 1 0:00000000 0 [ 206.668685][ T8046] 20 batadv0 : 1 V3 [ 206.668685][ T8046] 010000E0 1 0:00000000 0 [ 206.668685][ T8046] 23 veth0 : 1 V3 [ 206.668685][ T8046] 010000E0 1 0:00000000 0 [ 206.668685][ T8046] 24 veth1 : 1 V3 [ 206.668685][ T8046] 010000E0 1 0:00000000 0 [ 206.668685][ T8046] 25 wg0 : 1 V3 [ 206.668685][ T8046] 010000E0 1 0:00000000 0 [ 206.668685][ T8046] 26 wg1 : 1 V3 [ 206.668685][ T8046] 010000E0 1 0:00000000 0 [ 206.668685][ T8046] 27 wg2 : 1 V3 [ 206.668685][ T8046] 010000E0 1 0:00000000 0 [ 206.668685][ T8046] 28 veth0_to_bridge: 1 V3 [ 206.668685][ T8046] 010000E0 1 0:00000000 0 [ 206.668685][ T8046] 29 bridge_slave_0: 1 V3 [ 206.668685][ T8046] 010000E0 1 0:00000000 0 [ 206.729143][ T5151] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 206.824394][ T5151] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 206.872363][ T5151] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 206.936836][ T5151] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 206.987408][ T5151] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.048090][ T5151] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.092905][ T5151] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.159893][ T5151] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 207.186128][ T5151] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 207.265388][ T5151] usb 1-1: USB disconnect, device number 14 [ 207.674407][ T951] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 207.733922][ T51] team0 (unregistering): Port device team_slave_1 removed [ 207.783380][ T51] team0 (unregistering): Port device team_slave_0 removed [ 207.842040][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.876119][ T951] usb 2-1: Using ep0 maxpacket: 8 [ 207.887145][ T951] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 207.900578][ T951] usb 2-1: config 0 has no interface number 0 [ 207.915155][ T951] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 207.926145][ T951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.935329][ T951] usb 2-1: Product: syz [ 207.935838][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.939642][ T951] usb 2-1: Manufacturer: syz [ 207.953036][ T951] usb 2-1: SerialNumber: syz [ 207.964258][ T951] usb 2-1: config 0 descriptor?? [ 207.988734][ T4260] Bluetooth: hci4: command 0x040f tx timeout [ 208.084568][ T951] msi2500 2-1:0.246: Registered as swradio24 [ 208.090616][ T951] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 208.221812][ T951] usb 2-1: USB disconnect, device number 12 [ 208.656507][ T51] bond0 (unregistering): Released all slaves [ 208.739794][ T7912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.873858][ T7912] team0: Port device team_slave_0 added [ 208.923754][ T7912] team0: Port device team_slave_1 added [ 208.941777][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.949005][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.976233][ T7912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.990068][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.000169][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.027327][ T7912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.131134][ T7912] device hsr_slave_0 entered promiscuous mode [ 209.138319][ T7912] device hsr_slave_1 entered promiscuous mode [ 209.151247][ T7912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.159108][ T7912] Cannot create hsr debugfs directory [ 209.436468][ T7912] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 209.460838][ T7912] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 209.492981][ T7912] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 209.505755][ T7912] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 209.653803][ T7912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.680375][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.688663][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.699647][ T7912] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.717273][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.726846][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.738676][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.747733][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.759586][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.781088][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.791660][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.808944][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.816135][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.836738][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.864876][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.886652][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.906897][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.921094][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.946232][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.960544][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.983690][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.997315][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.011289][ T7912] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.028276][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.037157][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.052061][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.062154][ T4260] Bluetooth: hci4: command 0x0419 tx timeout [ 210.350620][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.360101][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.377571][ T7912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.753968][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.768923][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.795060][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.804083][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.815378][ T7912] device veth0_vlan entered promiscuous mode [ 210.822816][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.831145][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.845478][ T7912] device veth1_vlan entered promiscuous mode [ 210.870713][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 210.881449][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 210.897148][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.909561][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.926090][ T7912] device veth0_macvtap entered promiscuous mode [ 210.940823][ T7912] device veth1_macvtap entered promiscuous mode [ 210.964921][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.976493][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.986760][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.998062][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.008672][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.024582][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.036716][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.050978][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.064621][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.076811][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.087534][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.104520][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.115031][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.124965][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.135486][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.145370][ T7912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.156541][ T7912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.168136][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.180082][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 211.189063][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 211.197442][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.206627][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.216613][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.225566][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.238271][ T7912] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.247184][ T7912] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.256255][ T7912] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.265871][ T7912] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.359528][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.382348][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.416769][ T8049] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.424270][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.433347][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.452042][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.906197][ T8143] loop4: detected capacity change from 0 to 64 [ 211.963918][ T8140] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 212.003928][ T35] Bluetooth: hci5: Frame reassembly failed (-84) [ 212.960152][ T4309] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 213.004310][ T8170] loop5: detected capacity change from 0 to 4096 [ 213.043311][ T8170] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 213.163837][ T4309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.201101][ T4309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.226102][ T4309] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.302900][ T4309] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.362893][ T4309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.363441][ T8170] ntfs: (device loop5): parse_options(): NLS character set macgreÿ not found. Using previous one utf8. [ 213.388982][ T4309] usb 5-1: config 0 descriptor?? [ 213.451395][ T8170] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 213.481666][ T8170] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 213.559762][ T8187] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1414'. [ 213.578993][ T8170] ntfs: volume version 3.1. [ 213.602891][ T8187] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1414'. [ 213.617381][ T8187] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1414'. [ 213.832576][ T4309] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 213.868152][ T4309] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 213.901354][ T4309] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 213.972459][ T4255] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 214.073825][ T8201] input: syz1 as /devices/virtual/input/input25 [ 214.144748][ T4309] usb 5-1: USB disconnect, device number 11 [ 214.332659][ T8199] fido_id[8199]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 214.439789][ T8189] syz.0.1415 (8189) used greatest stack depth: 18976 bytes left [ 214.896450][ T8227] loop4: detected capacity change from 0 to 1024 [ 214.939369][ T8229] device macsec0 entered promiscuous mode [ 214.992515][ T8229] device macsec1 entered promiscuous mode [ 215.033571][ T8227] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 215.082065][ T8227] hfsplus: xattr searching failed [ 215.111105][ T8232] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 216.019962][ T4300] kernel read not supported for file /rfkill (pid: 4300 comm: kworker/1:5) [ 216.938371][ T26] audit: type=1326 audit(1885610296.183:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.1.1443" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f00eef8e929 code=0x0 [ 217.072470][ T7] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 217.286298][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 217.295310][ T7] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 217.329500][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.368361][ T7] usb 5-1: Product: syz [ 217.373117][ T7] usb 5-1: Manufacturer: syz [ 217.377737][ T7] usb 5-1: SerialNumber: syz [ 217.398499][ T7] usb 5-1: config 0 descriptor?? [ 217.691933][ T8353] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 217.712525][ T4300] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 217.818681][ T7] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 217.831917][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 217.880542][ T7] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 217.922204][ T7] usb 5-1: media controller created [ 217.986940][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.030345][ T8325] dtv5100: wlen = 0, aborting. [ 218.074438][ T7] zl10353_read_register: readreg error (reg=127, ret==0) [ 218.081552][ T7] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 218.167063][ T7] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 218.216850][ T7] usb 5-1: USB disconnect, device number 12 [ 218.323299][ T7] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 218.662215][ T4300] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 218.772710][ T5562] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 218.832224][ T4309] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 218.862298][ T4300] usb 4-1: Using ep0 maxpacket: 8 [ 218.874141][ T4300] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 218.888299][ T4300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.896675][ T4300] usb 4-1: Product: syz [ 218.901136][ T4300] usb 4-1: Manufacturer: syz [ 218.907588][ T4300] usb 4-1: SerialNumber: syz [ 218.921499][ T4300] usb 4-1: config 0 descriptor?? [ 218.932033][ T4300] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 219.012279][ T4309] usb 1-1: Using ep0 maxpacket: 8 [ 219.019394][ T4309] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 219.040384][ T4309] usb 1-1: config 0 has no interface number 0 [ 219.054648][ T4309] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 219.069333][ T4309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.078207][ T4309] usb 1-1: Product: syz [ 219.080732][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1461'. [ 219.082765][ T4309] usb 1-1: Manufacturer: syz [ 219.096587][ T4309] usb 1-1: SerialNumber: syz [ 219.103651][ T4309] usb 1-1: config 0 descriptor?? [ 219.207249][ T4309] msi2500 1-1:0.246: Registered as swradio24 [ 219.216505][ T4309] msi2500 1-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 219.400794][ T4309] usb 1-1: USB disconnect, device number 15 [ 219.920950][ T4255] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 219.931727][ T4255] CPU: 1 PID: 4255 Comm: kworker/u5:2 Not tainted 6.1.142-syzkaller #0 [ 219.940011][ T4255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.940530][ T951] usb 4-1: USB disconnect, device number 8 [ 219.950069][ T4255] Workqueue: hci0 hci_rx_work [ 219.950154][ T4255] Call Trace: [ 219.950163][ T4255] [ 219.950172][ T4255] dump_stack_lvl+0x168/0x22e [ 219.971575][ T4255] ? show_regs_print_info+0x12/0x12 [ 219.976819][ T4255] ? load_image+0x3b0/0x3b0 [ 219.981363][ T4255] sysfs_create_dir_ns+0x252/0x280 [ 219.986508][ T4255] ? hci_rx_work+0x3eb/0xd40 [ 219.991127][ T4255] ? sysfs_warn_dup+0xa0/0xa0 [ 219.995839][ T4255] ? do_raw_spin_unlock+0x11d/0x230 [ 220.001091][ T4255] kobject_add_internal+0x6b8/0xc80 [ 220.006323][ T4255] kobject_add+0x152/0x210 [ 220.010770][ T4255] ? kobject_init+0x1d0/0x1d0 [ 220.015478][ T4255] ? klist_children_get+0x50/0x50 [ 220.020535][ T4255] ? get_device_parent+0x121/0x3f0 [ 220.025691][ T4255] device_add+0x483/0xfb0 [ 220.030056][ T4255] ? kmem_cache_free+0xf7/0x290 [ 220.034946][ T4255] hci_conn_add_sysfs+0xd1/0x1e0 [ 220.039900][ T4255] le_conn_complete_evt+0xd1d/0x1320 [ 220.045192][ T4255] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 220.051429][ T4255] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 220.057067][ T4255] ? skb_pull_data+0xf7/0x200 [ 220.061742][ T4255] hci_le_conn_complete_evt+0x183/0x440 [ 220.067375][ T4255] ? hci_remote_host_features_evt+0x270/0x270 [ 220.073442][ T4255] hci_event_packet+0x791/0x1210 [ 220.078505][ T4255] ? bis_list+0x280/0x280 [ 220.082850][ T4255] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 220.088757][ T4255] ? kcov_remote_start+0x4c7/0x7e0 [ 220.093869][ T4255] ? nf_ct_l4proto_log_invalid+0x34/0x206 [ 220.099587][ T4255] ? hci_send_to_monitor+0x9c/0x4a0 [ 220.104782][ T4255] hci_rx_work+0x3eb/0xd40 [ 220.109203][ T4255] ? _raw_spin_unlock+0x40/0x40 [ 220.114085][ T4255] ? process_one_work+0x7a1/0x1160 [ 220.119212][ T4255] process_one_work+0x898/0x1160 [ 220.124159][ T4255] ? worker_detach_from_pool+0x240/0x240 [ 220.129792][ T4255] ? _raw_spin_lock_irq+0xab/0xe0 [ 220.134889][ T4255] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 220.140260][ T4255] ? kthread_data+0x4b/0xc0 [ 220.144769][ T4255] worker_thread+0xaa2/0x1250 [ 220.149455][ T4255] kthread+0x29d/0x330 [ 220.153515][ T4255] ? worker_clr_flags+0x1a0/0x1a0 [ 220.158531][ T4255] ? kthread_blkcg+0xd0/0xd0 [ 220.163120][ T4255] ret_from_fork+0x1f/0x30 [ 220.167555][ T4255] [ 220.174750][ T4255] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 220.189132][ T4255] Bluetooth: hci0: failed to register connection device [ 220.728386][ T8424] vivid-001: disconnect [ 220.768231][ T8423] vivid-001: reconnect [ 220.802295][ T4300] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 221.025214][ T4300] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.052265][ T4300] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.092469][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 221.125827][ T4300] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 221.145992][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 221.179290][ T4300] usb 5-1: SerialNumber: syz [ 221.440610][ T4300] usb 5-1: 0:2 : does not exist [ 221.481156][ T4300] usb 5-1: USB disconnect, device number 13 [ 221.743151][ T4587] udevd[4587]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.962249][ T4322] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 222.153941][ T4322] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 222.185473][ T4322] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 222.216067][ T4322] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 222.262568][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.299740][ T8442] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 222.655822][ T4322] usb 4-1: USB disconnect, device number 9 [ 223.732318][ T5562] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 223.923949][ T5562] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 223.942232][ T5562] usb 5-1: config 0 interface 0 has no altsetting 0 [ 223.969189][ T5562] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 224.011879][ T5562] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 224.030652][ T5562] usb 5-1: Product: syz [ 224.040784][ T5562] usb 5-1: Manufacturer: syz [ 224.050563][ T5562] usb 5-1: SerialNumber: syz [ 224.065155][ T5562] usb 5-1: config 0 descriptor?? [ 224.083979][ T5562] usb 5-1: selecting invalid altsetting 0 [ 224.112403][ T26] audit: type=1326 audit(1885610303.363:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8489 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2898e929 code=0x7ffc0000 [ 224.186359][ T26] audit: type=1326 audit(1885610303.393:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8489 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2898e929 code=0x7ffc0000 [ 224.230147][ T26] audit: type=1326 audit(1885610303.393:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8489 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbc2898e929 code=0x7ffc0000 [ 224.257936][ T26] audit: type=1326 audit(1885610303.393:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8489 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2898e929 code=0x7ffc0000 [ 224.319471][ T951] usb 5-1: USB disconnect, device number 14 [ 224.351741][ T26] audit: type=1326 audit(1885610303.393:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8489 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2898e929 code=0x7ffc0000 [ 224.392220][ T26] audit: type=1326 audit(1885610303.393:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8489 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fbc2898e929 code=0x7ffc0000 [ 224.426172][ T26] audit: type=1326 audit(1885610303.393:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8489 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2898e929 code=0x7ffc0000 [ 224.488707][ T26] audit: type=1326 audit(1885610303.393:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8489 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2898e929 code=0x7ffc0000 [ 224.634942][ T26] audit: type=1326 audit(1885610303.393:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8489 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc2898e929 code=0x7ffc0000 [ 224.688066][ T26] audit: type=1326 audit(1885610303.393:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8489 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2898e929 code=0x7ffc0000 [ 225.353155][ T8525] bridge0: port 3(vlan2) entered blocking state [ 225.389282][ T8525] bridge0: port 3(vlan2) entered disabled state [ 225.418757][ T8525] device vlan2 entered promiscuous mode [ 225.437007][ T8525] bridge0: mtu less than device minimum [ 225.857159][ T8538] loop5: detected capacity change from 0 to 256 [ 225.966854][ T8538] FAT-fs (loop5): Directory bread(block 64) failed [ 226.001654][ T8538] FAT-fs (loop5): Directory bread(block 65) failed [ 226.029043][ T8538] FAT-fs (loop5): Directory bread(block 66) failed [ 226.045034][ T8538] FAT-fs (loop5): Directory bread(block 67) failed [ 226.067230][ T8538] FAT-fs (loop5): Directory bread(block 68) failed [ 226.103620][ T8538] FAT-fs (loop5): Directory bread(block 69) failed [ 226.110331][ T8538] FAT-fs (loop5): Directory bread(block 70) failed [ 226.180166][ T8538] FAT-fs (loop5): Directory bread(block 71) failed [ 226.189625][ T8544] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1519'. [ 226.211635][ T8538] FAT-fs (loop5): Directory bread(block 72) failed [ 226.239332][ T8538] FAT-fs (loop5): Directory bread(block 73) failed [ 226.798253][ T8557] loop4: detected capacity change from 0 to 512 [ 226.810411][ T8557] EXT4-fs: Ignoring removed i_version option [ 226.836358][ T8557] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.877244][ T8557] EXT4-fs (loop4): Test dummy encryption mode enabled [ 226.924301][ T8557] EXT4-fs (loop4): orphan cleanup on readonly fs [ 226.957375][ T8557] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.1523: inode #13: comm syz.4.1523: iget: illegal inode # [ 226.982367][ T4309] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 227.027974][ T8557] EXT4-fs (loop4): Remounting filesystem read-only [ 227.034580][ T8557] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1523: couldn't read orphan inode 13 (err -117) [ 227.056951][ T8557] EXT4-fs (loop4): Remounting filesystem read-only [ 227.068769][ T8557] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 227.131115][ T8557] EXT4-fs (loop4): shut down requested (1) [ 227.187889][ T4309] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 227.224442][ T4309] usb 4-1: config 0 interface 0 has no altsetting 0 [ 227.252976][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 227.254223][ T4309] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 227.318847][ T4309] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 227.340570][ T4309] usb 4-1: Product: syz [ 227.365149][ T4309] usb 4-1: Manufacturer: syz [ 227.372397][ T4309] usb 4-1: SerialNumber: syz [ 227.396958][ T4309] usb 4-1: config 0 descriptor?? [ 227.418860][ T4309] usb 4-1: selecting invalid altsetting 0 [ 227.682969][ T4309] usb 4-1: USB disconnect, device number 10 [ 227.890133][ T8589] loop5: detected capacity change from 0 to 1024 [ 227.918446][ T8589] EXT4-fs: Ignoring removed nobh option [ 227.944907][ T8589] EXT4-fs: Ignoring removed oldalloc option [ 228.028841][ T8589] EXT4-fs: Ignoring removed bh option [ 228.076922][ T8589] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c119, mo2=0102] [ 228.089674][ T8589] System zones: 0-1, 3-12 [ 228.116740][ T8589] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 228.329864][ T7912] EXT4-fs (loop5): unmounting filesystem. [ 229.410713][ T8623] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 229.944283][ T8644] device veth0 entered promiscuous mode [ 229.978452][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1556'. [ 230.173098][ T951] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 230.374818][ T951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.420039][ T951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.464248][ T951] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 230.506400][ T951] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 230.525678][ T951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.560377][ T951] usb 4-1: config 0 descriptor?? [ 230.648416][ T8665] loop4: detected capacity change from 0 to 256 [ 230.716393][ T8665] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 230.981685][ T951] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 231.023200][ T951] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 231.232020][ T8663] loop5: detected capacity change from 0 to 32768 [ 231.288795][ T4309] usb 4-1: USB disconnect, device number 11 [ 231.367960][ T8678] fido_id[8678]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 231.394554][ T8663] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 231.489618][ T8663] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 231.801495][ T8692] loop9: detected capacity change from 0 to 1 [ 231.857222][ T7912] ocfs2: Unmounting device (7,5) on (node local) [ 231.872565][ T8692] Dev loop9: unable to read RDB block 1 [ 231.930599][ T8692] loop9: unable to read partition table [ 231.958489][ T8692] loop9: partition table beyond EOD, truncated [ 232.005494][ T8692] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 232.839756][ T8728] loop5: detected capacity change from 0 to 1024 [ 232.913702][ T8728] hfsplus: failed to load root directory [ 232.959150][ T7] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 233.173286][ T7] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 233.205486][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.230412][ T8735] device veth0 entered promiscuous mode [ 233.251008][ T7] usb 5-1: config 0 descriptor?? [ 233.256655][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1585'. [ 233.720857][ T7] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0010/input/input26 [ 233.819769][ T7] sony 0003:054C:03D5.0010: input,hidraw0: USB HID v1.01 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 233.872336][ T4322] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 233.937445][ T5562] usb 5-1: USB disconnect, device number 15 [ 234.074502][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.106066][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.147157][ T4322] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 234.173518][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.210025][ T4322] usb 1-1: config 0 descriptor?? [ 234.222084][ T8755] fido_id[8755]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 234.648881][ T4322] uclogic 0003:5543:0522.0011: No inputs registered, leaving [ 234.682704][ T4322] uclogic 0003:5543:0522.0011: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.0-1/input0 [ 234.860287][ T8753] loop5: detected capacity change from 0 to 32768 [ 234.888444][ T14] usb 1-1: USB disconnect, device number 16 [ 234.989966][ T8753] XFS (loop5): Mounting V5 Filesystem [ 235.074137][ T8771] fido_id[8771]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 235.145740][ T8753] XFS (loop5): Ending clean mount [ 235.220987][ T8753] XFS (loop5): Quotacheck needed: Please wait. [ 235.273558][ T5562] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 235.348297][ T8753] XFS (loop5): Quotacheck: Done. [ 235.442630][ T8753] XFS (loop5): User initiated shutdown received. [ 235.469428][ T8753] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 235.483545][ T5562] usb 2-1: Using ep0 maxpacket: 16 [ 235.491161][ T5562] usb 2-1: config 0 interface 0 has no altsetting 0 [ 235.539521][ T5562] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 235.558493][ T8753] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 235.589891][ T5562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.634353][ T5562] usb 2-1: config 0 descriptor?? [ 235.753785][ T7912] XFS (loop5): Unmounting Filesystem [ 236.258300][ T4322] usb 2-1: USB disconnect, device number 13 [ 236.680656][ T8821] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1605'. [ 236.903189][ T8830] binder: 8829:8830 ioctl c0306201 0 returned -14 [ 237.385791][ T8843] delete_channel: no stack [ 237.862315][ T5151] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 238.064014][ T5151] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 238.102155][ T5151] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 238.120722][ T5151] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 238.150943][ T5151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.160683][ T8866] loop4: detected capacity change from 0 to 8192 [ 238.175026][ T8855] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 238.223381][ T8866] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 238.258496][ T8866] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 238.293768][ T8866] REISERFS (device loop4): using ordered data mode [ 238.342254][ T8866] reiserfs: using flush barriers [ 238.348426][ T8866] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 238.365634][ T8866] REISERFS (device loop4): checking transaction log (loop4) [ 238.475093][ T5151] usb 1-1: USB disconnect, device number 17 [ 238.539483][ T8866] REISERFS (device loop4): Using tea hash to sort names [ 238.557874][ T8866] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 238.718566][ T8886] loop8: detected capacity change from 0 to 5 [ 239.516883][ T3624] udevd[3624]: worker [4587] terminated by signal 33 (Unknown signal 33) [ 239.571109][ T3624] udevd[3624]: worker [4587] failed while handling '/devices/virtual/block/loop0' [ 240.134647][ T8933] loop5: detected capacity change from 0 to 4096 [ 240.232297][ T7] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 240.244288][ T8939] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 240.327964][ T8941] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input28 [ 240.442276][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 240.486294][ T7] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 240.507124][ T7] usb 5-1: config 0 has no interface number 0 [ 240.527081][ T7] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 240.567221][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.607682][ T7] usb 5-1: Product: syz [ 240.611889][ T7] usb 5-1: Manufacturer: syz [ 240.638326][ T7] usb 5-1: SerialNumber: syz [ 240.687131][ T7] usb 5-1: config 0 descriptor?? [ 240.745222][ T8952] program syz.1.1646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.766751][ T7] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 240.856824][ T8954] loop5: detected capacity change from 0 to 2048 [ 240.917040][ T7] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 240.944386][ T5079] kernel write not supported for file /sequencer (pid: 5079 comm: kworker/1:16) [ 240.982076][ T7] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 241.121184][ T8929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.171916][ T8929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.392522][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 241.411219][ T7] usb 5-1: USB disconnect, device number 16 [ 241.510756][ T7] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 241.564702][ T7] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 241.606850][ T7] quatech2 5-1:0.51: device disconnected [ 241.810438][ T8979] device lo entered promiscuous mode [ 241.821053][ T8976] device lo left promiscuous mode [ 242.442189][ T4322] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 242.577237][ T8995] loop5: detected capacity change from 0 to 512 [ 242.620392][ T8995] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 242.631178][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.634353][ T8995] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 242.658024][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.686068][ T4322] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.712483][ T4322] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.729815][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.750318][ T4322] usb 4-1: config 0 descriptor?? [ 242.786418][ T7912] EXT4-fs (loop5): unmounting filesystem. [ 243.166140][ T4322] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 243.202600][ T4322] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 243.344924][ T9019] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1673'. [ 243.456550][ T9023] (syz.4.1675,9023,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 244.162202][ T7] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 244.310923][ T9042] loop5: detected capacity change from 0 to 512 [ 244.352418][ T4308] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 244.363186][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 244.375047][ T7] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 244.386335][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.387238][ T9042] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 244.404450][ T7] usb 5-1: Product: syz [ 244.408708][ T7] usb 5-1: Manufacturer: syz [ 244.413825][ T7] usb 5-1: SerialNumber: syz [ 244.426201][ T7] usb 5-1: config 0 descriptor?? [ 244.452675][ T9042] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 244.472360][ T9042] System zones: 0-1, 15-15, 18-18, 34-34 [ 244.486487][ C0] plantronics 0003:047F:FFFF.0013: usb_submit_urb(ctrl) failed: -1 [ 244.501605][ T951] usb 4-1: USB disconnect, device number 12 [ 244.511266][ T9042] EXT4-fs (loop5): orphan cleanup on readonly fs [ 244.546228][ T9042] __quota_error: 4 callbacks suppressed [ 244.546242][ T9042] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 244.562293][ T4308] usb 2-1: Using ep0 maxpacket: 8 [ 244.570525][ T4308] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 244.579645][ T9042] EXT4-fs warning (device loop5): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 244.579912][ T4308] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.605398][ T4308] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.610831][ T9042] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 244.615409][ T4308] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 244.640187][ T7] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 244.657886][ T9042] EXT4-fs (loop5): 1 truncate cleaned up [ 244.658233][ T4308] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.665723][ T9042] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 244.696423][ T4308] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 244.716297][ T4308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.748104][ T9042] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 244.804108][ T7912] EXT4-fs (loop5): unmounting filesystem. [ 244.952540][ T4308] usb 2-1: usb_control_msg returned -32 [ 244.958231][ T4308] usbtmc 2-1:16.0: can't read capabilities [ 245.046389][ T7] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 245.070136][ T7] usb 5-1: USB disconnect, device number 17 [ 245.449632][ T9056] usbtmc 2-1:16.0: INITIATE_CLEAR returned 0 [ 245.457492][ T9047] loop5: detected capacity change from 0 to 32768 [ 245.473937][ T4322] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 245.490932][ T9047] XFS (loop5): Mounting V5 Filesystem [ 245.528486][ T9047] XFS (loop5): Ending clean mount [ 245.639333][ T7912] XFS (loop5): Unmounting Filesystem [ 245.650823][ T7] usb 2-1: USB disconnect, device number 14 [ 245.684742][ T4322] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 245.719999][ T4322] usb 1-1: config 0 has no interface number 0 [ 245.762331][ T4322] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 245.773239][ T9068] use of bytesused == 0 is deprecated and will be removed in the future, [ 245.773335][ T9068] use the actual size instead. [ 245.816384][ T4322] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 245.835363][ T4322] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 245.848119][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.870518][ T4322] usb 1-1: config 0 descriptor?? [ 245.917838][ T9053] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 245.940328][ T4322] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 246.011292][ T9073] loop4: detected capacity change from 0 to 128 [ 246.111686][ T9073] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 246.130995][ T9073] ext4 filesystem being mounted at /340/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 246.345281][ T951] usb 1-1: USB disconnect, device number 18 [ 246.345332][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 246.420899][ T9079] loop5: detected capacity change from 0 to 256 [ 246.934372][ T9083] loop5: detected capacity change from 0 to 64 [ 246.972121][ C1] sched: RT throttling activated [ 246.994901][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 247.320860][ T9088] netlink: 'syz.4.1699': attribute type 1 has an invalid length. [ 247.362339][ T9088] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1699'. [ 247.386837][ T9093] loop5: detected capacity change from 0 to 128 [ 247.446959][ T9093] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 247.506062][ T9093] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 247.695874][ T5173] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 248.152337][ T4322] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 248.384292][ T4322] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.402234][ T4322] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.423630][ T4322] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 248.436417][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.464879][ T4322] usb 4-1: Product: syz [ 248.469098][ T4322] usb 4-1: Manufacturer: syz [ 248.482166][ T4322] usb 4-1: SerialNumber: syz [ 248.645470][ T4308] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 248.654429][ T9121] loop5: detected capacity change from 0 to 40427 [ 248.680540][ T9121] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 248.688646][ T9121] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 248.708579][ T4322] usb 4-1: 0:2 : does not exist [ 248.717862][ T9121] F2FS-fs (loop5): invalid crc value [ 248.728526][ T4322] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 248.740593][ T9121] F2FS-fs (loop5): Found nat_bits in checkpoint [ 248.763526][ T4322] usb 4-1: USB disconnect, device number 13 [ 248.852274][ T4308] usb 2-1: Using ep0 maxpacket: 16 [ 248.865581][ T4308] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.897039][ T4308] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.920427][ T4308] usb 2-1: config 0 interface 0 has no altsetting 0 [ 248.935002][ T4308] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 248.942498][ T9121] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 248.951165][ T9121] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 248.952428][ T4308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.990685][ T4308] usb 2-1: config 0 descriptor?? [ 249.013747][ T4244] udevd[4244]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.191020][ T26] audit: type=1326 audit(1885610328.433:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958bd8e929 code=0x7ffc0000 [ 249.281919][ T26] audit: type=1326 audit(1885610328.443:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f958bd8e929 code=0x7ffc0000 [ 249.339352][ T26] audit: type=1326 audit(1885610328.443:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958bd8e929 code=0x7ffc0000 [ 249.390073][ T26] audit: type=1326 audit(1885610328.443:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f958bd8e929 code=0x7ffc0000 [ 249.423010][ T26] audit: type=1326 audit(1885610328.443:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958bd8e929 code=0x7ffc0000 [ 249.460409][ T4308] hid (null): global environment stack underflow [ 249.479698][ T4308] hid (null): invalid report_size 156968280 [ 249.498248][ T4308] hid (null): unknown global tag 0xc [ 249.521579][ T26] audit: type=1326 audit(1885610328.443:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f958bd8e929 code=0x7ffc0000 [ 249.598792][ T26] audit: type=1326 audit(1885610328.473:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958bd8e929 code=0x7ffc0000 [ 249.620887][ T9151] loop4: detected capacity change from 0 to 512 [ 249.649276][ T9151] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 249.727914][ T26] audit: type=1326 audit(1885610328.483:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f958bd8e929 code=0x7ffc0000 [ 249.771215][ T26] audit: type=1326 audit(1885610328.497:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958bd8e929 code=0x7ffc0000 [ 249.771387][ T9151] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.1724: bad orphan inode 131083 [ 249.794068][ T26] audit: type=1326 audit(1885610328.497:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958bd8e929 code=0x7ffc0000 [ 249.794111][ T26] audit: type=1800 audit(1885610328.567:523): pid=9121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1714" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 249.848014][ T4322] usb 2-1: USB disconnect, device number 15 [ 250.038528][ T9151] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 250.113187][ T9160] netlink: 'syz.0.1730': attribute type 11 has an invalid length. [ 250.440651][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 251.304834][ T4255] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 251.495518][ T9205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1750'. [ 251.509321][ T9204] loop4: detected capacity change from 0 to 512 [ 251.663828][ T9216] input: syz0 as /devices/virtual/input/input29 [ 251.677256][ T9204] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #16: comm syz.4.1751: corrupted inode contents [ 251.730126][ T9204] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #16: comm syz.4.1751: mark_inode_dirty error [ 251.784832][ T9204] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #16: comm syz.4.1751: corrupted inode contents [ 251.812564][ T9204] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.1751: mark_inode_dirty error [ 251.873039][ T9204] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #16: comm syz.4.1751: corrupted inode contents [ 251.959317][ T9204] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 252.009575][ T9204] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #16: comm syz.4.1751: corrupted inode contents [ 252.028715][ T9204] EXT4-fs error (device loop4): ext4_truncate:4312: inode #16: comm syz.4.1751: mark_inode_dirty error [ 252.041709][ T9193] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 252.059820][ T9204] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 252.076187][ T9204] EXT4-fs (loop4): 1 truncate cleaned up [ 252.098779][ T9204] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 252.101192][ T8276] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 252.111441][ T9204] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.187533][ T8276] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:19: Failed to release dquot type 1 [ 252.232515][ T4308] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 252.249015][ T9204] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.1751: iget: bad i_size value: 1407374883557376 [ 252.330026][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 252.455333][ T4308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.483381][ T4308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.525698][ T4308] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 252.575719][ T4308] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.610765][ T4308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.632930][ T4308] usb 2-1: config 0 descriptor?? [ 252.792322][ T9244] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input30 [ 253.039225][ T9258] loop5: detected capacity change from 0 to 256 [ 253.062049][ T4308] usbhid 2-1:0.0: can't add hid device: -71 [ 253.083741][ T4308] usbhid: probe of 2-1:0.0 failed with error -71 [ 253.099090][ T4308] usb 2-1: USB disconnect, device number 16 [ 253.107703][ T9258] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 253.127898][ T9258] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 253.160743][ T9258] exFAT-fs (loop5): error, invalid access to FAT free cluster (entry 0x00000006) [ 253.203209][ T9260] block nbd4: shutting down sockets [ 253.212354][ T9258] exFAT-fs (loop5): Filesystem has been set read-only [ 253.268482][ T9258] exFAT-fs (loop5): error, invalid access to FAT free cluster (entry 0x00000006) [ 253.378109][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 253.401455][ T9218] EXT4-fs (loop1): unmounting filesystem. [ 253.468849][ T9243] EXT4-fs (loop3): unmounting filesystem. [ 254.319141][ T8268] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.492484][ T8268] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.745661][ T8268] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.927137][ T8268] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.656123][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.662453][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.674077][ T8268] bridge0: port 3(gretap0) entered disabled state [ 255.696777][ T8268] device gretap0 left promiscuous mode [ 255.702296][ T8268] bridge0: port 3(gretap0) entered disabled state [ 256.116555][ T8268] device hsr_slave_0 left promiscuous mode [ 256.122776][ T8268] device hsr_slave_1 left promiscuous mode [ 256.130916][ T8268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.138449][ T8268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.146281][ T8268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.154213][ T8268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.161812][ T8268] device bridge_slave_1 left promiscuous mode [ 256.168076][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.176765][ T8268] device bridge_slave_0 left promiscuous mode [ 256.185578][ T8268] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.211703][ T8268] device veth1_macvtap left promiscuous mode [ 256.217955][ T8268] device veth0_macvtap left promiscuous mode [ 256.224152][ T8268] device veth1_vlan left promiscuous mode [ 256.229937][ T8268] device veth0_vlan left promiscuous mode [ 256.796761][ T8268] device team_slave_1 left promiscuous mode [ 256.807233][ T8268] team0 (unregistering): Port device team_slave_1 removed [ 256.865549][ T8268] device team_slave_0 left promiscuous mode [ 256.872255][ T8268] team0 (unregistering): Port device team_slave_0 removed [ 256.930698][ T8268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.986699][ T8268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.618230][ T8268] bond0 (unregistering): Released all slaves [ 258.147744][ T8268] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.236217][ T8268] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.313980][ T8268] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.393235][ T8268] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.507825][ T8268] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.518598][ T8268] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.616676][ T8268] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.627480][ T8268] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.694952][ T8268] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.706627][ T8268] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.781567][ T8268] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.792363][ T8268] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.909933][ T8268] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.985362][ T8268] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.059861][ T8268] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.133377][ T8268] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.231595][ T8268] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.308321][ T8268] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.382896][ T8268] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.464641][ T8268] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.490680][ T8268] bridge0: port 3(gretap0) entered disabled state [ 260.540837][ T8268] device gretap0 left promiscuous mode [ 260.546555][ T8268] bridge0: port 3(gretap0) entered disabled state [ 261.761748][ T8268] device hsr_slave_0 left promiscuous mode [ 261.768318][ T8268] device hsr_slave_1 left promiscuous mode [ 261.776132][ T8268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.783665][ T8268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.791269][ T8268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.798822][ T8268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.807087][ T8268] device vlan2 left promiscuous mode [ 261.812599][ T8268] bridge0: port 3(vlan2) entered disabled state [ 261.819788][ T8268] device bridge_slave_1 left promiscuous mode [ 261.826188][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.836031][ T8268] device bridge_slave_0 left promiscuous mode [ 261.842184][ T8268] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.853106][ T8268] device hsr_slave_0 left promiscuous mode [ 261.859435][ T8268] device hsr_slave_1 left promiscuous mode [ 261.865921][ T8268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.873327][ T8268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.880938][ T8268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.888547][ T8268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.896213][ T8268] device bridge_slave_1 left promiscuous mode [ 261.902359][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.910736][ T8268] device bridge_slave_0 left promiscuous mode [ 261.917288][ T8268] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.931757][ T8268] device hsr_slave_0 left promiscuous mode [ 261.938121][ T8268] device hsr_slave_1 left promiscuous mode [ 261.944588][ T8268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.951992][ T8268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.959658][ T8268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.967159][ T8268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.974844][ T8268] device bridge_slave_1 left promiscuous mode [ 261.980993][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.989013][ T8268] device bridge_slave_0 left promiscuous mode [ 261.995385][ T8268] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.006619][ T8268] device hsr_slave_0 left promiscuous mode [ 262.012975][ T8268] device hsr_slave_1 left promiscuous mode [ 262.019355][ T8268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.026913][ T8268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.034683][ T8268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.042081][ T8268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.049722][ T8268] device bridge_slave_1 left promiscuous mode [ 262.056377][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.064934][ T8268] device bridge_slave_0 left promiscuous mode [ 262.071113][ T8268] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.138731][ T8268] device veth1_macvtap left promiscuous mode [ 262.145065][ T8268] device veth0_macvtap left promiscuous mode [ 262.151183][ T8268] device veth1_vlan left promiscuous mode [ 262.157217][ T8268] device veth0_vlan left promiscuous mode [ 262.165894][ T8268] device veth1_macvtap left promiscuous mode [ 262.171936][ T8268] device veth0_macvtap left promiscuous mode [ 262.180166][ T8268] device veth1_vlan left promiscuous mode [ 262.186110][ T8268] device veth0_vlan left promiscuous mode [ 262.195997][ T8268] device veth1_macvtap left promiscuous mode [ 262.202500][ T8268] device veth0_macvtap left promiscuous mode [ 262.208622][ T8268] device veth1_vlan left promiscuous mode [ 262.214528][ T8268] device veth0_vlan left promiscuous mode [ 262.221367][ T8268] device veth1_macvtap left promiscuous mode [ 262.227734][ T8268] device veth0_macvtap left promiscuous mode [ 262.234518][ T8268] device veth1_vlan left promiscuous mode [ 262.240312][ T8268] device veth0_vlan left promiscuous mode [ 263.012375][ T8268] team0 (unregistering): Port device team_slave_1 removed [ 263.067938][ T8268] team0 (unregistering): Port device team_slave_0 removed [ 263.121551][ T8268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.187264][ T8268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface