last executing test programs: 5.968464448s ago: executing program 2 (id=528): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 5.860236129s ago: executing program 2 (id=529): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={r2, @in6={{0xa, 0x4e23, 0x6, @empty, 0xb}}, 0x5fd6, 0x4}, 0x90) 5.739955341s ago: executing program 1 (id=531): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, 0x8) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) 5.652197383s ago: executing program 2 (id=532): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1) r1 = dup(0xffffffffffffffff) write$UHID_INPUT(r1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0a056020"], 0xd) 5.614585013s ago: executing program 2 (id=534): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x3000002, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) 5.16831019s ago: executing program 2 (id=539): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x14d802, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x183142, 0x2f) ftruncate(r2, 0x2007ffc) sendfile(r1, r2, 0x0, 0x800000009) 4.980357273s ago: executing program 2 (id=542): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x7) 4.249855634s ago: executing program 1 (id=554): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x20050800) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r2}, 0x8) 4.128198096s ago: executing program 1 (id=555): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x40, 0xc, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0x8, 0x9}}}}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 2.463212562s ago: executing program 0 (id=567): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4f, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x7, 0x2, 0x8}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 2.309094975s ago: executing program 0 (id=569): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) 2.248973525s ago: executing program 1 (id=570): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x10) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.196052517s ago: executing program 0 (id=572): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x2020) 2.144397617s ago: executing program 1 (id=573): syz_open_dev$hidraw(&(0x7f0000000080), 0x6, 0x40000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) close(0x3) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x5, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xc, 0xbe6a, 0x81}, {0x6, 0x24, 0x1a, 0x401, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xfa, 0x4, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x0, 0xd8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3, 0x4, 0x1}}}}}}}]}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) 2.130565587s ago: executing program 0 (id=574): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r3}) 2.052023739s ago: executing program 0 (id=575): r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100003afe0620e6040b000001010203010902241654030310000904140002a024260009050602ff0300000009058202"], 0x0) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000e00)={0x14, 0x0, &(0x7f0000000dc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x48) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 776.312688ms ago: executing program 3 (id=586): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x1c) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10, 0x0}, 0x0) 755.555749ms ago: executing program 3 (id=587): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000001f80)=0x2, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) 705.293189ms ago: executing program 3 (id=588): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 369.535215ms ago: executing program 0 (id=589): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) syz_usb_connect(0x3, 0x50, &(0x7f0000000540)=ANY=[@ANYBLOB="12010003305abd40b8222564ae080102030109023e0001ae0510020904b20800020a0006052406000005240000000d240f010200000008000180090524"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) 360.291385ms ago: executing program 3 (id=590): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x3}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x34000}], 0x1}}], 0x1, 0x0) 225.524527ms ago: executing program 3 (id=591): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r0, r0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) 92.75µs ago: executing program 1 (id=592): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x3b2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c0}, 0x50) 0s ago: executing program 3 (id=593): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x3, 0x8000000003c) unshare(0x400) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. [ 83.260611][ T5762] cgroup: Unknown subsys name 'net' [ 83.426697][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.125708][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.137075][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.139217][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.158327][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.159919][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.166645][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.185075][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.192527][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.192935][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.207644][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.216628][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.223971][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.224785][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.233234][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.241059][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.246142][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.253376][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.260413][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.273063][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.274364][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.281346][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.289850][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.301838][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.317758][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.333114][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.873646][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 87.931988][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 87.984769][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 88.113649][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 88.131612][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.139458][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.146885][ T5777] bridge_slave_0: entered allmulticast mode [ 88.154399][ T5777] bridge_slave_0: entered promiscuous mode [ 88.198615][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.205772][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.213187][ T5777] bridge_slave_1: entered allmulticast mode [ 88.220915][ T5777] bridge_slave_1: entered promiscuous mode [ 88.261757][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.269130][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.276314][ T5779] bridge_slave_0: entered allmulticast mode [ 88.283824][ T5779] bridge_slave_0: entered promiscuous mode [ 88.331131][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.338938][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.346098][ T5779] bridge_slave_1: entered allmulticast mode [ 88.353550][ T5779] bridge_slave_1: entered promiscuous mode [ 88.372111][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.379495][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.386659][ T5778] bridge_slave_0: entered allmulticast mode [ 88.393847][ T5778] bridge_slave_0: entered promiscuous mode [ 88.403836][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.416349][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.448214][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.455479][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.463008][ T5778] bridge_slave_1: entered allmulticast mode [ 88.470175][ T5778] bridge_slave_1: entered promiscuous mode [ 88.512384][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.538988][ T5777] team0: Port device team_slave_0 added [ 88.558917][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.596220][ T5777] team0: Port device team_slave_1 added [ 88.630066][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.643025][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.664418][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.672247][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.680225][ T5780] bridge_slave_0: entered allmulticast mode [ 88.687211][ T5780] bridge_slave_0: entered promiscuous mode [ 88.698110][ T5779] team0: Port device team_slave_0 added [ 88.729041][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.736209][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.743846][ T5780] bridge_slave_1: entered allmulticast mode [ 88.751880][ T5780] bridge_slave_1: entered promiscuous mode [ 88.760864][ T5779] team0: Port device team_slave_1 added [ 88.792332][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.799520][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.826204][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.888413][ T5778] team0: Port device team_slave_0 added [ 88.895055][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.902443][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.929359][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.948103][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.955086][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.981109][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.995871][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.009502][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.020673][ T5778] team0: Port device team_slave_1 added [ 89.043199][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.050300][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.076924][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.119557][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.126559][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.152689][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.203415][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.210760][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.237026][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.253142][ T5777] hsr_slave_0: entered promiscuous mode [ 89.259903][ T5777] hsr_slave_1: entered promiscuous mode [ 89.270547][ T5780] team0: Port device team_slave_0 added [ 89.311634][ T5779] hsr_slave_0: entered promiscuous mode [ 89.318397][ T5779] hsr_slave_1: entered promiscuous mode [ 89.324798][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.332817][ T5779] Cannot create hsr debugfs directory [ 89.341061][ T5780] team0: Port device team_slave_1 added [ 89.388384][ T5783] Bluetooth: hci3: command tx timeout [ 89.388402][ T50] Bluetooth: hci1: command tx timeout [ 89.388674][ T50] Bluetooth: hci0: command tx timeout [ 89.394134][ T5783] Bluetooth: hci2: command tx timeout [ 89.442656][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.450169][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.477134][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.544995][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.553034][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.579780][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.594854][ T5778] hsr_slave_0: entered promiscuous mode [ 89.601612][ T5778] hsr_slave_1: entered promiscuous mode [ 89.608017][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.615623][ T5778] Cannot create hsr debugfs directory [ 89.815861][ T5780] hsr_slave_0: entered promiscuous mode [ 89.822764][ T5780] hsr_slave_1: entered promiscuous mode [ 89.829285][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.836870][ T5780] Cannot create hsr debugfs directory [ 90.049532][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.061850][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.092029][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.108994][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.170653][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.196707][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.210453][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.223084][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.304687][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.314860][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.325685][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.344421][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.443424][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.454960][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.474744][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.486093][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.529589][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.602098][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.633916][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.641358][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.691666][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.698897][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.746655][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.833518][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.844810][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.861723][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.894936][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.911600][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.918820][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.943580][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.950840][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.984164][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.991420][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.016520][ T1071] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.023777][ T1071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.044977][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.075552][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.083351][ T1071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.143691][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.151016][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.335126][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.468947][ T5791] Bluetooth: hci0: command tx timeout [ 91.470216][ T50] Bluetooth: hci3: command tx timeout [ 91.474508][ T5791] Bluetooth: hci1: command tx timeout [ 91.487217][ T5783] Bluetooth: hci2: command tx timeout [ 91.503671][ T5779] veth0_vlan: entered promiscuous mode [ 91.541063][ T5779] veth1_vlan: entered promiscuous mode [ 91.652453][ T5779] veth0_macvtap: entered promiscuous mode [ 91.685152][ T5779] veth1_macvtap: entered promiscuous mode [ 91.697328][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.756233][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.795801][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.849364][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.859412][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.868720][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.878528][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.893749][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.912397][ T5778] veth0_vlan: entered promiscuous mode [ 91.942809][ T5778] veth1_vlan: entered promiscuous mode [ 91.962873][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.066979][ T5778] veth0_macvtap: entered promiscuous mode [ 92.109639][ T1071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.122295][ T5778] veth1_macvtap: entered promiscuous mode [ 92.128421][ T1071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.174127][ T5780] veth0_vlan: entered promiscuous mode [ 92.192919][ T23] cfg80211: failed to load regulatory.db [ 92.216561][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.225946][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.256961][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.273441][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.285932][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.297263][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.310196][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.322787][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.334511][ T5780] veth1_vlan: entered promiscuous mode [ 92.363714][ T5777] veth0_vlan: entered promiscuous mode [ 92.401060][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.414663][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.426271][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.435576][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.450098][ T5777] veth1_vlan: entered promiscuous mode [ 92.641263][ T5780] veth0_macvtap: entered promiscuous mode [ 92.641554][ T5846] syz.3.4[5846]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.654222][ T5780] veth1_macvtap: entered promiscuous mode [ 92.698633][ T5777] veth0_macvtap: entered promiscuous mode [ 92.729315][ T1071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.746699][ T5777] veth1_macvtap: entered promiscuous mode [ 92.750502][ T1071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.820480][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.832460][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.843074][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.855042][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.868839][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.892078][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.908478][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.939813][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.952111][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.963830][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.976526][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.989730][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.005731][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.022821][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.034326][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.045329][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.055845][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.068289][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.091897][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.128735][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.149116][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.169319][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.187662][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.213067][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.245367][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.256951][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.267898][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.281659][ T5846] loop3: detected capacity change from 0 to 32768 [ 93.286904][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.299559][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.312512][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.364521][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.368373][ T5846] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.4 (5846) [ 93.373730][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.396660][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.407523][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.484262][ T5846] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 93.540517][ T5846] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 93.550083][ T5783] Bluetooth: hci3: command tx timeout [ 93.550142][ T5791] Bluetooth: hci0: command tx timeout [ 93.558735][ T5846] BTRFS info (device loop3): setting nodatasum [ 93.567185][ T50] Bluetooth: hci1: command tx timeout [ 93.573401][ T5783] Bluetooth: hci2: command tx timeout [ 93.582434][ T5846] BTRFS info (device loop3): doing ref verification [ 93.592063][ T5846] BTRFS info (device loop3): use zlib compression, level 3 [ 93.605030][ T5846] BTRFS info (device loop3): force clearing of disk cache [ 93.627879][ T5846] BTRFS info (device loop3): doing ref verification [ 93.665187][ T5846] BTRFS info (device loop3): using free space tree [ 93.748902][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.770564][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.829359][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.868234][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.876291][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.891667][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.936945][ T5846] BTRFS info (device loop3): enabling ssd optimizations [ 93.957349][ T5846] BTRFS info (device loop3): auto enabling async discard [ 94.023878][ T5846] BTRFS info (device loop3): rebuilding free space tree [ 94.041308][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.069947][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.562234][ T5779] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 94.992508][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.228697][ T5824] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.265141][ T27] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 95.365887][ T27] usb 3-1: config 0 has no interface number 0 [ 95.475466][ T27] usb 3-1: config 0 interface 98 has no altsetting 0 [ 95.483686][ T5824] usb 4-1: Using ep0 maxpacket: 16 [ 95.523437][ T5824] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.617966][ T27] usb 3-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 95.627094][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.633254][ T5783] Bluetooth: hci2: command tx timeout [ 95.641179][ T50] Bluetooth: hci1: command tx timeout [ 95.641194][ T5824] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.646618][ T50] Bluetooth: hci3: command tx timeout [ 95.662345][ T5783] Bluetooth: hci0: command tx timeout [ 95.709750][ T27] usb 3-1: Product: syz [ 95.714015][ T27] usb 3-1: Manufacturer: syz [ 95.727695][ T5824] usb 4-1: config 0 interface 0 has no altsetting 0 [ 95.734403][ T5824] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 95.743655][ T27] usb 3-1: SerialNumber: syz [ 95.754194][ T27] usb 3-1: config 0 descriptor?? [ 95.759773][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.834788][ T5824] usb 4-1: config 0 descriptor?? [ 96.115611][ T27] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 96.130530][ T5894] loop3: detected capacity change from 0 to 256 [ 96.166183][ T5894] ======================================================= [ 96.166183][ T5894] WARNING: The mand mount option has been deprecated and [ 96.166183][ T5894] and is ignored by this kernel. Remove the mand [ 96.166183][ T5894] option from the mount to silence this warning. [ 96.166183][ T5894] ======================================================= [ 96.427086][ T5955] loop1: detected capacity change from 0 to 1024 [ 96.504235][ T5955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.526696][ T5824] hid (null): unknown global tag 0xc [ 96.532256][ T5824] hid (null): report_id 1196726220 is invalid [ 96.540692][ T5824] hid (null): unknown global tag 0xe [ 96.546064][ T5824] hid (null): global environment stack underflow [ 96.609912][ T27] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 96.692161][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.813135][ T5823] usb 4-1: USB disconnect, device number 2 [ 97.012161][ T5965] ipvlan2: entered promiscuous mode [ 97.053131][ T27] usb 3-1: failed to restore interface 98 altsetting 4 (error=-71) [ 97.086119][ T27] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 97.098697][ T27] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 97.114585][ T5824] usb 3-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 97.145860][ T5824] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 97.163142][ T27] usb 3-1: USB disconnect, device number 2 [ 97.261339][ T5967] sit0: entered promiscuous mode [ 97.289500][ T5967] netlink: 'syz.1.19': attribute type 1 has an invalid length. [ 97.308554][ T5967] netlink: 1 bytes leftover after parsing attributes in process `syz.1.19'. [ 97.758749][ T5973] block nbd1: shutting down sockets [ 97.905959][ T5978] loop0: detected capacity change from 0 to 1024 [ 97.927096][ T5978] EXT4-fs: Ignoring removed oldalloc option [ 97.956780][ T5978] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 97.994479][ T5980] syz.2.25 uses obsolete (PF_INET,SOCK_PACKET) [ 98.040058][ T5978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.191948][ T28] audit: type=1804 audit(1750191203.063:2): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.24" name="/newroot/8/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 98.286199][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.470924][ T5976] loop3: detected capacity change from 0 to 32768 [ 98.505138][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 98.517233][ T5976] XFS: ikeep mount option is deprecated. [ 98.564304][ T5822] IPVS: starting estimator thread 0... [ 98.681969][ T5976] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 98.727769][ T5994] IPVS: using max 18 ests per chain, 43200 per kthread [ 98.913751][ T6006] loop1: detected capacity change from 0 to 1024 [ 99.005078][ T5976] XFS (loop3): Ending clean mount [ 99.049900][ T6006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.076565][ T5976] XFS (loop3): Quotacheck needed: Please wait. [ 99.127922][ T6006] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.231626][ T6006] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 99.256036][ T5976] XFS (loop3): Quotacheck: Done. [ 99.386597][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.663746][ T5779] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 99.889814][ T5823] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.090378][ T5823] usb 2-1: Using ep0 maxpacket: 8 [ 100.111053][ T5823] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 100.136682][ T5823] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.146909][ T5823] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.164059][ T5823] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.169041][ T6030] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.174707][ T5823] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.213300][ T5823] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.223931][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.357804][ T787] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.456215][ T5823] usb 2-1: GET_CAPABILITIES returned 0 [ 100.466085][ T5823] usbtmc 2-1:16.0: can't read capabilities [ 100.550353][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 100.561026][ T787] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 100.570374][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.582825][ T787] usb 1-1: config 0 descriptor?? [ 100.748241][ T27] usb 2-1: USB disconnect, device number 2 [ 100.816335][ T6040] process 'syz.2.46' launched './file0' with NULL argv: empty string added [ 100.848153][ T787] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 100.881485][ T787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 100.920451][ T787] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 100.953546][ T787] usb 1-1: media controller created [ 101.034993][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.082450][ T787] az6027: usb out operation failed. (-71) [ 101.090259][ T787] az6027: usb out operation failed. (-71) [ 101.096272][ T787] stb0899_attach: Driver disabled by Kconfig [ 101.124323][ T787] az6027: no front-end attached [ 101.124323][ T787] [ 101.146479][ T787] az6027: usb out operation failed. (-71) [ 101.156523][ T6043] loop8: detected capacity change from 0 to 7 [ 101.167032][ T787] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 101.178935][ T5794] Dev loop8: unable to read RDB block 7 [ 101.197610][ T5794] loop8: unable to read partition table [ 101.203611][ T5794] loop8: partition table beyond EOD, truncated [ 101.211139][ T787] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 101.232613][ T6043] Dev loop8: unable to read RDB block 7 [ 101.246358][ T6043] loop8: unable to read partition table [ 101.258287][ T6043] loop8: partition table beyond EOD, truncated [ 101.259066][ T787] dvb-usb: schedule remote query interval to 400 msecs. [ 101.280969][ T787] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 101.285235][ T6043] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 101.304481][ T787] usb 1-1: USB disconnect, device number 2 [ 101.322848][ T6045] loop3: detected capacity change from 0 to 256 [ 101.371741][ T6045] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 101.505545][ T787] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 101.847598][ T1189] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.037997][ T1189] usb 3-1: Using ep0 maxpacket: 8 [ 102.049691][ T1189] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.077518][ T1189] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 102.105958][ T1189] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 102.138202][ T1189] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 102.158072][ T1189] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 102.181502][ T1189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.216280][ T1189] hub 3-1:1.0: bad descriptor, ignoring hub [ 102.230367][ T1189] hub: probe of 3-1:1.0 failed with error -5 [ 102.248319][ T1189] cdc_wdm 3-1:1.0: skipping garbage [ 102.253654][ T1189] cdc_wdm 3-1:1.0: skipping garbage [ 102.283051][ T1189] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 102.298176][ T1189] cdc_wdm 3-1:1.0: Unknown control protocol [ 102.641775][ T6063] loop0: detected capacity change from 0 to 32768 [ 102.756279][ T6063] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 102.779834][ T23] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 102.877492][ T28] audit: type=1800 audit(1750191207.743:3): pid=6063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.55" name="file1" dev="loop0" ino=17059 res=0 errno=0 [ 102.897985][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.966080][ T6063] syz.0.55 (6063) used greatest stack depth: 18736 bytes left [ 103.114962][ T5778] ocfs2: Unmounting device (7,0) on (node local) [ 103.241922][ T6070] loop1: detected capacity change from 0 to 32768 [ 103.295515][ T6070] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 103.387917][ T787] usb 3-1: USB disconnect, device number 3 [ 103.394744][ T28] audit: type=1326 audit(1750191208.263:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e978e929 code=0x7ffc0000 [ 103.421288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 103.440186][ T28] audit: type=1326 audit(1750191208.263:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e978e929 code=0x7ffc0000 [ 103.463018][ T28] audit: type=1326 audit(1750191208.263:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f68e978e929 code=0x7ffc0000 [ 103.485118][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.505407][ T28] audit: type=1326 audit(1750191208.293:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e978e929 code=0x7ffc0000 [ 103.545543][ T28] audit: type=1326 audit(1750191208.293:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e978e929 code=0x7ffc0000 [ 103.567488][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.574387][ T6070] XFS (loop1): Ending clean mount [ 103.587359][ T28] audit: type=1326 audit(1750191208.423:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f68e978e929 code=0x7ffc0000 [ 103.627767][ T6070] XFS (loop1): Quotacheck needed: Please wait. [ 103.734129][ T6070] XFS (loop1): Quotacheck: Done. [ 103.742977][ T28] audit: type=1326 audit(1750191208.423:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e978e929 code=0x7ffc0000 [ 103.827567][ T28] audit: type=1326 audit(1750191208.423:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e978e929 code=0x7ffc0000 [ 103.933889][ T28] audit: type=1326 audit(1750191208.463:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f68e978e929 code=0x7ffc0000 [ 104.055214][ T28] audit: type=1326 audit(1750191208.463:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f68e972ab19 code=0x7ffc0000 [ 104.097121][ T5780] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 104.119572][ T6092] loop2: detected capacity change from 0 to 1024 [ 104.140739][ T6092] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 104.165064][ T6092] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #3: block 1: comm syz.2.63: lblock 1 mapped to illegal pblock 1 (length 1) [ 104.200594][ T6092] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.63: Failed to acquire dquot type 0 [ 104.250627][ T6092] EXT4-fs error (device loop2): ext4_free_blocks:6681: comm syz.2.63: Freeing blocks not in datazone - block = 0, count = 4096 [ 104.276210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 104.345947][ T6092] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.63: Invalid inode bitmap blk 0 in block_group 0 [ 104.398776][ T1079] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 104.449048][ T1079] EXT4-fs error (device loop2): ext4_release_dquot:6974: comm kworker/u4:6: Failed to release dquot type 0 [ 104.456823][ T6092] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 104.482429][ T6092] EXT4-fs (loop2): 1 orphan inode deleted [ 104.515176][ T6092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.629039][ T6092] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.657982][ T5142] udevd[5142]: worker [5794] terminated by signal 33 (Unknown signal 33) [ 104.975407][ T6103] tipc: Started in network mode [ 104.980713][ T6103] tipc: Node identity 2000007, cluster identity 4711 [ 104.993914][ T6103] tipc: Node number set to 33554439 [ 105.205092][ T6111] loop3: detected capacity change from 0 to 2048 [ 105.241534][ T6111] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.356244][ T6097] loop0: detected capacity change from 0 to 32768 [ 105.429160][ T6097] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 105.662983][ T5778] ocfs2: Unmounting device (7,0) on (node local) [ 107.355960][ T6164] loop3: detected capacity change from 0 to 32768 [ 107.377317][ T6164] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 107.412327][ T6164] XFS (loop3): Ending clean mount [ 107.621988][ T5779] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 108.501473][ T6186] loop3: detected capacity change from 0 to 32768 [ 108.605095][ T6186] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 108.651538][ T28] kauditd_printk_skb: 148 callbacks suppressed [ 108.651553][ T28] audit: type=1800 audit(1750191213.523:159): pid=6186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.92" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 108.746739][ T28] audit: type=1804 audit(1750191213.613:160): pid=6200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.92" name="/newroot/18/file1/file1" dev="loop3" ino=17058 res=1 errno=0 [ 109.233373][ T28] audit: type=1800 audit(1750191214.103:161): pid=6200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.92" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 109.372215][ T5779] ocfs2: Unmounting device (7,3) on (node local) [ 109.477986][ T6213] block nbd0: shutting down sockets [ 110.568112][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.118'. [ 110.678215][ T6242] Zero length message leads to an empty skb [ 110.904833][ T28] audit: type=1326 audit(1750191215.773:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299e18e929 code=0x7ffc0000 [ 110.963451][ T28] audit: type=1326 audit(1750191215.773:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299e18e929 code=0x7ffc0000 [ 111.009064][ T28] audit: type=1326 audit(1750191215.803:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f299e18e929 code=0x7ffc0000 [ 111.036201][ T28] audit: type=1326 audit(1750191215.803:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299e18e929 code=0x7ffc0000 [ 111.059688][ T28] audit: type=1326 audit(1750191215.803:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299e18e929 code=0x7ffc0000 [ 111.083227][ T28] audit: type=1326 audit(1750191215.803:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f299e18e929 code=0x7ffc0000 [ 111.106433][ T28] audit: type=1326 audit(1750191215.843:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6254 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f299e1c11e5 code=0x7ffc0000 [ 111.145876][ T6257] netlink: 'syz.3.124': attribute type 16 has an invalid length. [ 111.154746][ T5825] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.169066][ T6257] netlink: 'syz.3.124': attribute type 3 has an invalid length. [ 111.197321][ T6257] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.124'. [ 111.268451][ T6261] warning: `syz.2.126' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.348516][ T5825] usb 1-1: Using ep0 maxpacket: 8 [ 111.364672][ T5825] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 111.384138][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.397504][ T5825] usb 1-1: Product: syz [ 111.401953][ T5825] usb 1-1: Manufacturer: syz [ 111.406786][ T5825] usb 1-1: SerialNumber: syz [ 111.409732][ T6264] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 111.422030][ T5825] usb 1-1: config 0 descriptor?? [ 111.441246][ T5825] gspca_main: sq930x-2.14.0 probing 2770:930c [ 111.925415][ T6275] @: renamed from vlan0 (while UP) [ 112.032788][ T6278] loop1: detected capacity change from 0 to 2048 [ 112.067173][ T6278] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 112.100702][ T6279] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.153903][ T6278] NILFS error (device loop1): nilfs_readdir: zero-length directory entry [ 112.167562][ T6278] Remounting filesystem read-only [ 112.507651][ T5825] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 112.516915][ T5825] sq930x: probe of 1-1:0.0 failed with error -71 [ 112.525450][ T5825] usb 1-1: USB disconnect, device number 3 [ 112.629799][ T6281] loop1: detected capacity change from 0 to 40427 [ 112.657082][ T6281] F2FS-fs (loop1): invalid crc value [ 112.663880][ T6286] loop3: detected capacity change from 0 to 512 [ 112.672407][ T6281] F2FS-fs (loop1): Found nat_bits in checkpoint [ 112.679006][ T6286] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 112.707564][ T6286] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.741872][ T6286] EXT4-fs (loop3): 1 truncate cleaned up [ 112.756078][ T6286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.798137][ T6281] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 112.879232][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.928710][ T6281] syz.1.133: attempt to access beyond end of device [ 112.928710][ T6281] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 112.956659][ T6281] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 113.240418][ T6305] sctp: [Deprecated]: syz.0.142 (pid 6305) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.240418][ T6305] Use struct sctp_sack_info instead [ 113.430016][ T6307] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 113.619383][ T6300] loop2: detected capacity change from 0 to 32768 [ 113.659756][ T6300] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 113.672177][ T6300] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 113.731262][ T6322] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.749255][ T6300] XFS (loop2): Ending clean mount [ 113.776633][ T6300] XFS (loop2): Quotacheck needed: Please wait. [ 113.795599][ T5825] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 113.827511][ T5825] XFS (loop2): Unmount and run xfs_repair [ 113.833385][ T5825] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 113.849861][ T5825] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 113.862277][ T5825] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 113.872681][ T5825] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 113.889788][ T5825] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 113.902154][ T5825] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 113.928599][ T5825] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 113.936968][ T6328] loop3: detected capacity change from 0 to 1024 [ 113.952096][ T5825] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.964687][ T5825] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.978044][ T1079] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74 [ 114.003338][ T6328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.015741][ T6328] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.026856][ T6300] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 114.088568][ T6300] XFS (loop2): User initiated shutdown received. [ 114.112413][ T6300] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 114.157825][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.177582][ T6300] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 114.260223][ T5777] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 114.279446][ T6338] netlink: 'syz.1.151': attribute type 1 has an invalid length. [ 114.995144][ T6362] loop3: detected capacity change from 0 to 512 [ 115.004135][ T6362] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.030418][ T6362] EXT4-fs (loop3): 1 truncate cleaned up [ 115.045151][ T6362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.147347][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.396808][ T6398] loop3: detected capacity change from 0 to 16 [ 116.440175][ T6398] erofs: (device loop3): mounted with root inode @ nid 36. [ 116.627532][ T5779] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46 [ 116.642432][ T5779] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 116.665642][ T5779] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 116.954714][ T6417] loop3: detected capacity change from 0 to 2048 [ 116.970207][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 116.985329][ T6421] ipvlan3: entered promiscuous mode [ 117.019130][ T6417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.046707][ T6422] veth1_to_bond: entered allmulticast mode [ 117.049363][ T6417] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.068175][ T6422] veth1_to_bond: entered promiscuous mode [ 117.077693][ T6419] veth1_to_bond: left promiscuous mode [ 117.083819][ T6419] veth1_to_bond: left allmulticast mode [ 117.163639][ T6417] fs-verity: sha512 using implementation "sha512-avx2" [ 117.223556][ T6426] loop1: detected capacity change from 0 to 64 [ 117.343944][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.613734][ T6436] loop2: detected capacity change from 0 to 256 [ 117.672206][ T6436] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.707959][ T54] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 117.782553][ T6438] loop3: detected capacity change from 0 to 2048 [ 117.839993][ T6438] loop3: p1 < > p3 [ 117.852332][ T6438] loop3: p3 size 134217728 extends beyond EOD, truncated [ 117.863470][ T6443] loop2: detected capacity change from 0 to 512 [ 117.887565][ T54] usb 2-1: Using ep0 maxpacket: 8 [ 117.899211][ T54] usb 2-1: config 7 has an invalid interface number: 1 but max is 0 [ 117.902651][ T6443] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.921657][ T54] usb 2-1: config 7 has no interface number 0 [ 117.932542][ T54] usb 2-1: config 7 interface 1 has no altsetting 0 [ 117.950724][ T54] usb 2-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=c1.87 [ 117.963861][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.967793][ T6443] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 117.972117][ T54] usb 2-1: Product: syz [ 117.984227][ T54] usb 2-1: Manufacturer: syz [ 117.988996][ T54] usb 2-1: SerialNumber: syz [ 117.999798][ T6443] EXT4-fs (loop2): orphan cleanup on readonly fs [ 118.007566][ T6443] __quota_error: 9 callbacks suppressed [ 118.007580][ T6443] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 118.027733][ T6443] EXT4-fs warning (device loop2): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.079640][ T6443] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 118.135196][ T6443] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.194: bg 0: block 40: padding at end of block bitmap is not set [ 118.183659][ T6443] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 118.221146][ T54] usb 2-1: bad CDC descriptors [ 118.246491][ T6443] EXT4-fs (loop2): 1 truncate cleaned up [ 118.256457][ T6443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.279739][ T54] usb 2-1: bad CDC descriptors [ 118.285104][ T54] cdc_acm 2-1:7.1: Zero length descriptor references [ 118.306377][ T54] cdc_acm: probe of 2-1:7.1 failed with error -22 [ 118.318984][ T54] usb 2-1: USB disconnect, device number 3 [ 118.375284][ T6443] EXT4-fs error (device loop2): ext4_get_link:104: inode #16: comm syz.2.194: bad symlink. [ 118.393282][ T6443] EXT4-fs error (device loop2): ext4_get_link:104: inode #16: comm syz.2.194: bad symlink. [ 118.466196][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.745226][ T6465] loop3: detected capacity change from 0 to 2048 [ 118.752919][ T6465] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.783423][ T6465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.888621][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.227566][ T23] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 119.337486][ T787] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.434513][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.451616][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.462125][ T23] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 119.477312][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.488421][ T23] usb 2-1: config 0 descriptor?? [ 119.581734][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.602251][ T787] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 119.627901][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.643532][ T6485] loop2: detected capacity change from 0 to 1024 [ 119.669439][ T787] usb 1-1: config 0 descriptor?? [ 119.938529][ T6483] loop3: detected capacity change from 0 to 32768 [ 119.950356][ T23] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 120.003283][ T6483] JBD2: Ignoring recovery information on journal [ 120.084465][ T6483] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 120.193312][ T787] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 120.225398][ T787] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0003/input/input6 [ 120.243485][ T6483] syz.3.208 (6483) used greatest stack depth: 18160 bytes left [ 120.274212][ T5779] ocfs2: Unmounting device (7,3) on (node local) [ 120.274877][ T27] usb 2-1: USB disconnect, device number 4 [ 120.291636][ T6491] loop2: detected capacity change from 0 to 128 [ 120.315874][ T6491] EXT4-fs: Ignoring removed oldalloc option [ 120.359540][ T6491] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 120.374580][ T787] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 120.375508][ T6491] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.554571][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.634115][ T6494] loop3: detected capacity change from 0 to 2048 [ 120.665194][ T6494] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.685167][ T54] usb 1-1: USB disconnect, device number 4 [ 120.927536][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 121.142507][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.154139][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.165339][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.182201][ T27] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.194722][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.210785][ T27] usb 3-1: config 0 descriptor?? [ 121.535192][ T6528] loop1: detected capacity change from 0 to 64 [ 121.642475][ T27] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 121.687084][ T27] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 121.960046][ T787] usb 3-1: USB disconnect, device number 4 [ 122.158331][ T6553] loop3: detected capacity change from 0 to 512 [ 122.177894][ T6553] EXT4-fs: Ignoring removed nobh option [ 122.193835][ T6553] EXT4-fs: Ignoring removed oldalloc option [ 122.213669][ T6553] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 122.232552][ T6553] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 122.421783][ T6560] loop3: detected capacity change from 0 to 128 [ 122.458365][ T28] audit: type=1800 audit(1750191227.333:178): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.242" name="file2" dev="loop3" ino=1048593 res=0 errno=0 [ 122.491518][ T6559] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 122.503461][ T6559] FAT-fs (loop3): Filesystem has been set read-only [ 122.513604][ T6559] syz.3.242: attempt to access beyond end of device [ 122.513604][ T6559] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 122.536109][ T6559] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 122.548108][ T6559] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 122.568786][ T6560] syz.3.242: attempt to access beyond end of device [ 122.568786][ T6560] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 122.587332][ T6560] syz.3.242: attempt to access beyond end of device [ 122.587332][ T6560] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 122.608001][ T6560] syz.3.242: attempt to access beyond end of device [ 122.608001][ T6560] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 122.627838][ T6560] syz.3.242: attempt to access beyond end of device [ 122.627838][ T6560] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 122.853024][ T6572] loop3: detected capacity change from 0 to 512 [ 122.864330][ T6572] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002] [ 122.872613][ T6572] System zones: 1-12 [ 122.879480][ T6572] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.248: corrupted in-inode xattr: invalid ea_ino [ 122.895424][ T6572] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.248: couldn't read orphan inode 15 (err -117) [ 122.911887][ T6572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.948053][ T6576] netlink: 'syz.0.249': attribute type 6 has an invalid length. [ 122.978446][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.302517][ T6585] capability: warning: `syz.1.253' uses 32-bit capabilities (legacy support in use) [ 123.790825][ T6601] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 124.046159][ T6599] loop2: detected capacity change from 0 to 16384 [ 124.068624][ T6599] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 124.077349][ T6599] UDF-fs: Scanning with blocksize 512 failed [ 124.103698][ T6599] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 124.116353][ T6599] UDF-fs: Scanning with blocksize 1024 failed [ 124.129278][ T6599] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 124.136974][ T6599] UDF-fs: Scanning with blocksize 2048 failed [ 124.163131][ T6599] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.201910][ C1] operation not supported error, dev loop2, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 124.202677][ T6605] loop3: detected capacity change from 0 to 512 [ 124.263151][ T6605] EXT4-fs error (device loop3): ext4_quota_enable:7129: comm syz.3.262: inode #9652224: comm syz.3.262: iget: illegal inode # [ 124.287347][ T6605] EXT4-fs (loop3): Remounting filesystem read-only [ 124.319941][ T6605] EXT4-fs warning (device loop3): ext4_enable_quotas:7173: Failed to enable quota tracking (type=2, err=-117, ino=9652224). Please run e2fsck to fix. [ 124.448277][ T6605] EXT4-fs (loop3): mount failed [ 124.560766][ T6605] loop3: detected capacity change from 0 to 128 [ 124.588037][ T6605] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.856350][ T28] audit: type=1326 audit(1750191229.723:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.0.268" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68e978e929 code=0x0 [ 124.905643][ T6619] loop3: detected capacity change from 0 to 2048 [ 124.929023][ T6619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.950842][ T6619] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.097171][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.291657][ T6636] loop3: detected capacity change from 0 to 512 [ 125.310692][ T6636] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 125.332611][ T6636] EXT4-fs (loop3): 1 truncate cleaned up [ 125.340284][ T6636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.544190][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.802963][ T6637] loop1: detected capacity change from 0 to 32768 [ 125.867121][ T6637] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 126.043973][ T6637] XFS (loop1): Ending clean mount [ 126.057505][ T28] audit: type=1326 audit(1750191230.913:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe145d8e929 code=0x7ffc0000 [ 126.073630][ T6637] XFS (loop1): Quotacheck needed: Please wait. [ 126.126225][ T28] audit: type=1326 audit(1750191230.913:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe145d8e929 code=0x7ffc0000 [ 126.167216][ T6637] XFS (loop1): Quotacheck: Done. [ 126.177569][ T28] audit: type=1326 audit(1750191230.953:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe145d8e929 code=0x7ffc0000 [ 126.231956][ T28] audit: type=1326 audit(1750191230.953:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe145d8e929 code=0x7ffc0000 [ 126.266574][ T6672] netlink: 76 bytes leftover after parsing attributes in process `syz.3.287'. [ 126.296464][ T28] audit: type=1326 audit(1750191230.953:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe145d8e929 code=0x7ffc0000 [ 126.352724][ T28] audit: type=1326 audit(1750191230.963:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe145d8e929 code=0x7ffc0000 [ 126.381064][ T28] audit: type=1326 audit(1750191230.963:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe145d8e929 code=0x7ffc0000 [ 126.408515][ T28] audit: type=1326 audit(1750191230.973:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe145d8e929 code=0x7ffc0000 [ 126.433146][ T5780] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 126.438248][ T28] audit: type=1326 audit(1750191230.973:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe145d8e929 code=0x7ffc0000 [ 126.483896][ T6678] loop2: detected capacity change from 0 to 64 [ 126.489914][ T6677] loop3: detected capacity change from 0 to 512 [ 126.553916][ T6677] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.678787][ T6678] minix_free_block (loop2:1): bit already cleared [ 126.685604][ T6678] minix_free_block (loop2:4): bit already cleared [ 126.712590][ T6678] minix_free_block (loop2:3): bit already cleared [ 126.728988][ T6677] EXT4-fs warning (device loop3): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 126.757487][ T6678] minix_free_block (loop2:2): bit already cleared [ 126.764002][ T6678] minix_free_block (loop2:1): bit already cleared [ 126.879022][ T5779] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 127.315495][ T6704] binder: 6703:6704 ioctl c0306201 200000000680 returned -14 [ 127.567645][ T6692] loop1: detected capacity change from 0 to 40427 [ 127.587558][ T6692] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 127.594600][ T6692] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 127.606739][ T6692] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x7ffff [ 127.621360][ T6692] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 127.631980][ T6692] F2FS-fs (loop1): invalid crc value [ 127.650475][ T6692] F2FS-fs (loop1): Found nat_bits in checkpoint [ 127.748824][ T6692] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 127.755944][ T6692] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 127.883599][ T6692] syz.1.296: attempt to access beyond end of device [ 127.883599][ T6692] loop1: rw=2049, sector=45096, nr_sectors = 136 limit=40427 [ 127.920167][ T6725] tipc: Enabled bearer , priority 10 [ 127.929978][ T6692] syz.1.296: attempt to access beyond end of device [ 127.929978][ T6692] loop1: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 128.027135][ T5780] syz-executor: attempt to access beyond end of device [ 128.027135][ T5780] loop1: rw=2049, sector=45232, nr_sectors = 8 limit=40427 [ 128.085502][ T5780] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 128.202726][ T6734] loop2: detected capacity change from 0 to 1024 [ 128.379377][ T5926] hfsplus: b-tree write err: -5, ino 4 [ 128.468461][ T6740] loop3: detected capacity change from 0 to 256 [ 128.505444][ T6740] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.533857][ T6740] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 128.622435][ T6740] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xddfd5d26, utbl_chksum : 0xe619d30d) [ 128.703554][ T6740] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 128.713154][ T6740] exFAT-fs (loop3): Filesystem has been set read-only [ 128.720199][ T6740] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 128.740316][ T6747] loop2: detected capacity change from 0 to 1024 [ 128.748834][ T6747] EXT4-fs: Ignoring removed nobh option [ 128.763313][ T6747] EXT4-fs: Ignoring removed bh option [ 128.773326][ T6747] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.785611][ T6747] EXT4-fs warning (device loop2): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 128.785611][ T6747] [ 128.987102][ T6754] loop3: detected capacity change from 0 to 512 [ 129.034225][ T6754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 129.063179][ T6754] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.130458][ T6749] loop1: detected capacity change from 0 to 32768 [ 129.145703][ T6749] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.310 (6749) [ 129.178687][ T6749] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 129.193863][ T6749] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 129.207833][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 129.217081][ T6749] BTRFS info (device loop1): using free space tree [ 129.324712][ T6749] BTRFS info (device loop1): enabling ssd optimizations [ 129.337464][ T6749] BTRFS info (device loop1): auto enabling async discard [ 129.673533][ T6755] loop2: detected capacity change from 0 to 40427 [ 129.694274][ T6755] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 129.703845][ T6755] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 129.717534][ T6755] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff [ 129.724759][ T5780] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 129.735719][ T6755] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8 [ 129.762971][ T6755] F2FS-fs (loop2): invalid crc value [ 129.784249][ T6755] F2FS-fs (loop2): Found nat_bits in checkpoint [ 129.910570][ T6755] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 129.918424][ T6755] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 130.055577][ T6755] syz.2.319: attempt to access beyond end of device [ 130.055577][ T6755] loop2: rw=2049, sector=45096, nr_sectors = 136 limit=40427 [ 130.084944][ T6755] syz.2.319: attempt to access beyond end of device [ 130.084944][ T6755] loop2: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 130.167774][ T5777] syz-executor: attempt to access beyond end of device [ 130.167774][ T5777] loop2: rw=2049, sector=45232, nr_sectors = 8 limit=40427 [ 130.194582][ T5777] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 130.264565][ T6792] loop1: detected capacity change from 0 to 1024 [ 130.391309][ T5936] hfsplus: b-tree write err: -5, ino 4 [ 131.362500][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 131.469396][ T6819] loop3: detected capacity change from 0 to 256 [ 131.506083][ T6819] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d) [ 131.564133][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 131.564150][ T28] audit: type=1800 audit(1750191236.423:193): pid=6819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.338" name="file1" dev="loop3" ino=1048595 res=0 errno=0 [ 132.086186][ T6832] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 132.871918][ T6848] program syz.0.350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.952524][ T6839] loop1: detected capacity change from 0 to 32768 [ 133.047841][ T6839] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 133.107482][ T28] audit: type=1800 audit(1750191237.973:194): pid=6839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.347" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 133.153548][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.167533][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.189069][ T28] audit: type=1804 audit(1750191238.063:195): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.347" name="/newroot/87/file1/file1" dev="loop1" ino=17058 res=1 errno=0 [ 133.367585][ T54] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.560517][ T54] usb 4-1: Using ep0 maxpacket: 16 [ 133.590536][ T54] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 133.608220][ T54] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.640141][ T54] usb 4-1: config 0 has no interface number 0 [ 133.649958][ T28] audit: type=1800 audit(1750191238.523:196): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.347" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 133.674392][ T54] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 133.698424][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.712509][ T54] usb 4-1: Product: syz [ 133.726934][ T54] usb 4-1: Manufacturer: syz [ 133.731745][ T54] usb 4-1: SerialNumber: syz [ 133.753544][ T54] usb 4-1: config 0 descriptor?? [ 133.765793][ T54] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 133.780364][ T54] usb 4-1: No valid video chain found. [ 133.831041][ T5780] ocfs2: Unmounting device (7,1) on (node local) [ 133.996006][ T54] usb 4-1: USB disconnect, device number 3 [ 134.312401][ T6880] loop2: detected capacity change from 0 to 1024 [ 134.340755][ T6880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.505433][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.630204][ T6888] netlink: 'syz.1.366': attribute type 22 has an invalid length. [ 134.985245][ T6898] loop3: detected capacity change from 0 to 4096 [ 135.025002][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.373'. [ 135.458953][ T6911] input: syz1 as /devices/virtual/input/input7 [ 136.105245][ T6915] loop1: detected capacity change from 0 to 32768 [ 136.286205][ T6933] loop3: detected capacity change from 0 to 16 [ 136.299400][ T6915] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 136.299400][ T6915] [ 136.315103][ T6933] erofs: (device loop3): mounted with root inode @ nid 36. [ 136.342640][ T6933] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 136.944782][ T6943] loop2: detected capacity change from 0 to 32768 [ 136.968292][ T6943] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 136.992747][ T28] audit: type=1800 audit(1750191241.863:197): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.388" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 137.037561][ T1189] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 137.061239][ T28] audit: type=1804 audit(1750191241.933:198): pid=6954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.388" name="/newroot/85/file1/file1" dev="loop2" ino=17058 res=1 errno=0 [ 137.227803][ T1189] usb 4-1: Using ep0 maxpacket: 16 [ 137.250091][ T1189] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 137.270915][ T1189] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 137.287080][ T1189] usb 4-1: Product: syz [ 137.296286][ T1189] usb 4-1: Manufacturer: syz [ 137.307797][ T1189] usb 4-1: SerialNumber: syz [ 137.315060][ T1189] usb 4-1: config 0 descriptor?? [ 137.621402][ T1189] usb 4-1: USB disconnect, device number 4 [ 137.703247][ T6958] netlink: 104 bytes leftover after parsing attributes in process `syz.1.394'. [ 137.722366][ T28] audit: type=1800 audit(1750191242.593:199): pid=6954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.388" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 137.863803][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 139.278872][ T6982] loop1: detected capacity change from 0 to 32768 [ 139.332373][ T6982] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 139.382427][ T28] audit: type=1800 audit(1750191244.253:200): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.406" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 139.460680][ T28] audit: type=1804 audit(1750191244.333:201): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.406" name="/newroot/104/file1/file1" dev="loop1" ino=17058 res=1 errno=0 [ 139.648717][ T1189] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 139.693946][ T28] audit: type=1800 audit(1750191244.563:202): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.406" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 139.781459][ T5780] ocfs2: Unmounting device (7,1) on (node local) [ 139.847538][ T1189] usb 4-1: Using ep0 maxpacket: 32 [ 139.908757][ T1189] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 139.927672][ T1189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.948780][ T1189] usb 4-1: config 0 descriptor?? [ 140.164212][ T1189] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 140.176710][ T1189] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.194677][ T1189] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 140.202733][ T1189] usb 4-1: media controller created [ 140.236237][ T1189] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.377657][ T1189] az6027: usb out operation failed. (-71) [ 140.397543][ T1189] az6027: usb out operation failed. (-71) [ 140.403369][ T1189] stb0899_attach: Driver disabled by Kconfig [ 140.417451][ T1189] az6027: no front-end attached [ 140.417451][ T1189] [ 140.427860][ T1189] az6027: usb out operation failed. (-71) [ 140.437548][ T1189] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 140.445973][ T1189] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 140.481149][ T1189] dvb-usb: schedule remote query interval to 400 msecs. [ 140.488269][ T1189] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 140.499607][ T1189] usb 4-1: USB disconnect, device number 5 [ 140.542416][ T1189] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 140.656009][ T7018] loop1: detected capacity change from 0 to 32768 [ 140.674419][ T7018] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.725861][ T7018] XFS (loop1): Ending clean mount [ 140.733210][ T7018] XFS (loop1): Quotacheck needed: Please wait. [ 140.768876][ T7018] XFS (loop1): Quotacheck: Done. [ 140.810306][ T28] audit: type=1800 audit(1750191245.683:203): pid=7018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.420" name="bus" dev="loop1" ino=9290 res=0 errno=0 [ 140.862012][ T5780] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.993984][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'. [ 141.009383][ T7033] ipvlan2: entered promiscuous mode [ 141.014808][ T7033] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 141.027608][ T7033] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 141.034569][ T28] audit: type=1326 audit(1750191245.903:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.2.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299e18e929 code=0x7fc00000 [ 141.051798][ T7033] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 141.653895][ T7056] macvlan1: entered promiscuous mode [ 141.661781][ T7056] ipvlan0: entered promiscuous mode [ 141.669363][ T7056] ipvlan0: left promiscuous mode [ 141.674809][ T7056] macvlan1: left promiscuous mode [ 141.688814][ T54] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.858759][ T5822] kernel write not supported for file /223/attr/exec (pid: 5822 comm: kworker/1:4) [ 141.895026][ T54] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 141.926190][ T54] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 141.938139][ T54] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 141.967890][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.012639][ T7044] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 142.087773][ T54] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 142.401869][ T54] usb 1-1: USB disconnect, device number 5 [ 142.687591][ T7089] loop3: detected capacity change from 0 to 512 [ 142.696735][ T7089] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 142.715931][ T7089] EXT4-fs (loop3): 1 truncate cleaned up [ 142.722673][ T7089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.788215][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.013042][ T28] audit: type=1326 audit(1750191247.883:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299e18e929 code=0x7ffc0000 [ 143.058834][ T28] audit: type=1326 audit(1750191247.883:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299e18e929 code=0x7ffc0000 [ 143.098210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 143.129408][ T28] audit: type=1326 audit(1750191247.913:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f299e18e929 code=0x7ffc0000 [ 143.185063][ T28] audit: type=1326 audit(1750191247.913:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299e18e929 code=0x7ffc0000 [ 143.237184][ T28] audit: type=1326 audit(1750191247.913:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299e18e929 code=0x7ffc0000 [ 143.365860][ T28] audit: type=1326 audit(1750191247.923:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f299e18e929 code=0x7ffc0000 [ 143.497468][ T28] audit: type=1326 audit(1750191247.923:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299e18e929 code=0x7ffc0000 [ 143.587471][ T28] audit: type=1326 audit(1750191247.923:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299e18e929 code=0x7ffc0000 [ 143.650445][ T7105] loop3: detected capacity change from 0 to 128 [ 143.683095][ T7105] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.697657][ T28] audit: type=1326 audit(1750191247.933:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f299e18e929 code=0x7ffc0000 [ 143.801010][ T28] audit: type=1326 audit(1750191247.933:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f299e12ab19 code=0x7ffc0000 [ 143.960705][ T5936] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 144.019594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 144.297950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 144.367689][ T23] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 144.562046][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.576628][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.586622][ T23] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 144.602577][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.613392][ T23] usb 4-1: config 0 descriptor?? [ 144.667999][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 144.880425][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 144.892847][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.909423][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.929400][ T27] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.947162][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.955577][ T27] usb 3-1: Product: syz [ 144.960050][ T27] usb 3-1: Manufacturer: syz [ 144.964728][ T27] usb 3-1: SerialNumber: syz [ 145.046311][ T23] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 145.188857][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 145.201983][ T27] usb 3-1: cannot find UAC_HEADER [ 145.233245][ T27] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 145.252534][ T27] usb 3-1: USB disconnect, device number 5 [ 145.329263][ T54] usb 4-1: USB disconnect, device number 6 [ 146.116867][ T7140] loop3: detected capacity change from 0 to 2048 [ 146.152392][ T7133] loop2: detected capacity change from 0 to 32768 [ 146.159062][ T7141] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.199973][ T7133] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 146.267634][ T7133] XFS (loop2): Ending clean mount [ 146.291739][ T7133] XFS (loop2): Quotacheck needed: Please wait. [ 146.420007][ T7133] XFS (loop2): Quotacheck: Done. [ 146.620548][ T5777] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 147.464850][ T7169] loop1: detected capacity change from 0 to 2048 [ 147.521559][ T7169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.570171][ T7169] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 147.600252][ T7169] EXT4-fs (loop1): Remounting filesystem read-only [ 147.706960][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.932085][ T7190] loop2: detected capacity change from 0 to 512 [ 147.939489][ T7190] EXT4-fs: quotafile must be on filesystem root [ 148.136918][ T7195] loop2: detected capacity change from 0 to 4096 [ 148.561466][ T5936] tipc: Subscription rejected, illegal request [ 148.638432][ T7212] loop3: detected capacity change from 0 to 2048 [ 148.671691][ T7212] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.694292][ T28] kauditd_printk_skb: 212 callbacks suppressed [ 148.694308][ T28] audit: type=1800 audit(1750191253.563:427): pid=7212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.483" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 149.021729][ T7225] loop1: detected capacity change from 0 to 128 [ 149.048747][ T7223] pim6reg1: entered allmulticast mode [ 149.212355][ T28] audit: type=1326 audit(1750191254.073:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe145d8e929 code=0x7ffc0000 [ 149.250736][ T28] audit: type=1326 audit(1750191254.073:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe145d8e929 code=0x7ffc0000 [ 149.337579][ T28] audit: type=1326 audit(1750191254.083:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe145d8e929 code=0x7ffc0000 [ 149.381895][ T28] audit: type=1326 audit(1750191254.153:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe145d8e929 code=0x7ffc0000 [ 149.404983][ T28] audit: type=1326 audit(1750191254.153:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe145d8e929 code=0x7ffc0000 [ 149.407130][ T7234] loop2: detected capacity change from 0 to 2048 [ 149.427755][ T28] audit: type=1326 audit(1750191254.183:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe145d8e929 code=0x7ffc0000 [ 149.449588][ T7236] netlink: 'syz.1.493': attribute type 29 has an invalid length. [ 149.459421][ T28] audit: type=1326 audit(1750191254.183:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe145d2ab19 code=0x7ffc0000 [ 149.493024][ T28] audit: type=1326 audit(1750191254.183:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe145d8e929 code=0x7ffc0000 [ 149.502263][ T7234] EXT4-fs: Ignoring removed nobh option [ 149.524161][ T7236] netlink: 'syz.1.493': attribute type 29 has an invalid length. [ 149.558955][ T28] audit: type=1326 audit(1750191254.183:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe145d8e929 code=0x7ffc0000 [ 149.566681][ T7234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.611843][ T7236] netlink: 'syz.1.493': attribute type 29 has an invalid length. [ 149.694904][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.937493][ T1189] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 150.087311][ T7248] loop2: detected capacity change from 0 to 32768 [ 150.095473][ T7248] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.496 (7248) [ 150.118069][ T7248] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 150.128822][ T7255] loop1: detected capacity change from 0 to 256 [ 150.137163][ T7248] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 150.140527][ T1189] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 150.146563][ T7248] BTRFS info (device loop2): force clearing of disk cache [ 150.159243][ T1189] usb 1-1: config 0 has no interface number 0 [ 150.161870][ T7248] BTRFS info (device loop2): turning on sync discard [ 150.175803][ T7248] BTRFS info (device loop2): force zlib compression, level 3 [ 150.176895][ T1189] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 150.183674][ T7248] BTRFS info (device loop2): turning off discard [ 150.199220][ T1189] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 150.205401][ T7255] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 150.210016][ T1189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.230157][ T7248] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 150.240236][ T7248] BTRFS info (device loop2): use zstd compression, level 3 [ 150.247122][ T1189] usb 1-1: config 0 descriptor?? [ 150.258600][ T1189] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input9 [ 150.271037][ T7248] BTRFS info (device loop2): disabling free space tree [ 150.295684][ T7255] exFAT-fs (loop1): error, invalid size(size(6940) > aligned(9223372036854777344) [ 150.295684][ T7255] [ 150.308277][ T7255] exFAT-fs (loop1): Filesystem has been set read-only [ 150.363287][ T7248] BTRFS info (device loop2): enabling ssd optimizations [ 150.505493][ T1189] usb 1-1: USB disconnect, device number 6 [ 151.041642][ T7282] loop1: detected capacity change from 0 to 128 [ 151.064294][ T7282] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.092313][ T7282] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 151.157555][ T7282] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 151.247767][ T7248] BTRFS info (device loop2: state M): allowing degraded mounts [ 151.255432][ T7248] BTRFS info (device loop2: state M): turning on flush-on-commit [ 151.285620][ T7248] BTRFS info (device loop2: state M): force clearing of disk cache [ 151.295125][ T7248] BTRFS info (device loop2: state M): turning on sync discard [ 151.303681][ T7248] BTRFS info (device loop2: state M): not using ssd optimizations [ 151.312087][ T7248] BTRFS info (device loop2: state M): setting nodatasum [ 151.320085][ T7248] BTRFS info (device loop2: state M): rebuilding free space tree [ 151.377074][ T5780] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.434150][ T5777] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.847986][ T7295] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 152.042903][ T7303] Invalid ELF header len 8 [ 152.498922][ T7299] loop1: detected capacity change from 0 to 32768 [ 152.536578][ T7299] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 152.743579][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.526'. [ 152.744091][ T7299] XFS (loop1): Starting recovery (logdev: internal) [ 152.841654][ T7299] XFS (loop1): Ending recovery (logdev: internal) [ 153.041343][ T5780] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 153.229634][ T7353] sctp: [Deprecated]: syz.0.535 (pid 7353) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.229634][ T7353] Use struct sctp_sack_info instead [ 153.999328][ T7377] netlink: 76 bytes leftover after parsing attributes in process `syz.3.546'. [ 154.733833][ T7400] Driver unsupported XDP return value 0 on prog (id 88) dev N/A, expect packet loss! [ 154.908849][ T5825] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 154.970393][ T7391] loop3: detected capacity change from 0 to 40427 [ 154.985183][ T7391] F2FS-fs (loop3): invalid crc value [ 154.993717][ T7391] F2FS-fs (loop3): Found nat_bits in checkpoint [ 155.061403][ T7391] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 155.098428][ T5825] usb 2-1: Using ep0 maxpacket: 8 [ 155.106871][ T5825] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 155.115458][ T5825] usb 2-1: config 179 has no interface number 0 [ 155.121964][ T5825] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 155.133191][ T5825] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 155.144624][ T5825] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 155.156035][ T5825] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 155.168096][ T5825] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 155.188613][ T5825] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 155.200167][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.213820][ T7398] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.303182][ T5779] syz-executor: attempt to access beyond end of device [ 155.303182][ T5779] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 155.329007][ T5779] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 155.479843][ T5825] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input10 [ 155.675694][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.702523][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.935514][ T54] usb 2-1: USB disconnect, device number 5 [ 155.935636][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 155.951051][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 155.953033][ T54] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 156.188777][ T7421] loop2: detected capacity change from 0 to 7 [ 156.222799][ T7421] Dev loop2: unable to read RDB block 7 [ 156.228587][ T7421] loop2: AHDI p1 p2 p3 [ 156.232834][ T7421] loop2: partition table partially beyond EOD, truncated [ 156.241746][ T7421] loop2: p1 start 1601398130 is beyond EOD, truncated [ 156.249518][ T7421] loop2: p2 start 1702059890 is beyond EOD, truncated [ 156.616804][ T7435] loop3: detected capacity change from 0 to 1024 [ 156.860943][ T7445] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000005 [ 156.926788][ T7447] loop3: detected capacity change from 0 to 512 [ 156.935375][ T7447] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 156.952824][ T7447] EXT4-fs (loop3): 1 truncate cleaned up [ 156.958694][ T54] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 156.967779][ T7447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.992793][ T7447] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 157.001423][ T23] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 157.033396][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.158907][ T54] usb 2-1: Using ep0 maxpacket: 8 [ 157.166784][ T54] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.177504][ T54] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 157.186967][ T54] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 157.198825][ T54] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 157.210597][ T54] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 157.221550][ T23] usb 1-1: config index 0 descriptor too short (expected 5668, got 36) [ 157.235172][ T23] usb 1-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 157.244069][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.252204][ T23] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 157.265128][ T23] usb 1-1: config 3 has no interface number 0 [ 157.274745][ T54] hub 2-1:1.0: bad descriptor, ignoring hub [ 157.284808][ T23] usb 1-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 157.296292][ T54] hub: probe of 2-1:1.0 failed with error -5 [ 157.308312][ T54] cdc_wdm 2-1:1.0: skipping garbage [ 157.313582][ T54] cdc_wdm 2-1:1.0: skipping garbage [ 157.319480][ T23] usb 1-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 157.332842][ T54] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 157.339025][ T54] cdc_wdm 2-1:1.0: Unknown control protocol [ 157.347721][ T23] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 157.358896][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.366945][ T23] usb 1-1: Product: syz [ 157.371354][ T23] usb 1-1: Manufacturer: syz [ 157.375992][ T23] usb 1-1: SerialNumber: syz [ 157.384333][ T7441] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 157.491181][ T7457] loop3: detected capacity change from 0 to 256 [ 157.499034][ T7457] exfat: Deprecated parameter 'utf8' [ 157.528165][ T7457] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 157.605547][ T23] usb-storage 1-1:3.20: USB Mass Storage device detected [ 157.629416][ T23] usb-storage 1-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 157.807245][ T23] scsi host1: usb-storage 1-1:3.20 [ 157.817933][ T5825] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 157.826891][ T23] usb 1-1: USB disconnect, device number 7 [ 158.244540][ T7476] mmap: syz.3.588 (7476) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 158.347949][ T9] usb 2-1: USB disconnect, device number 6 [ 158.707595][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 158.760205][ T5824] ------------[ cut here ]------------ [ 158.767563][ T5824] sysfs group 'power' not found for kobject 'ueagle-atm!eagleII.fw' [ 158.788109][ T5824] WARNING: CPU: 1 PID: 5824 at fs/sysfs/group.c:284 sysfs_remove_group+0x178/0x2a0 [ 158.797711][ T5824] Modules linked in: [ 158.801708][ T5824] CPU: 1 PID: 5824 Comm: kworker/1:5 Not tainted 6.6.93-syzkaller #0 [ 158.809893][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.820189][ T5824] Workqueue: events request_firmware_work_func [ 158.826452][ T5824] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 158.832407][ T5824] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 ca d2 c9 ff 49 8b 17 48 c7 c7 40 bc ba 8a 48 89 de e8 b8 91 3b ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b2 2d 71 ff [ 158.852132][ T5824] RSP: 0018:ffffc900049ff800 EFLAGS: 00010246 [ 158.858321][ T5824] RAX: cbed941b744a9900 RBX: ffffffff8b2147e0 RCX: ffff88805e575a00 [ 158.866350][ T5824] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 158.875707][ T5824] RBP: dffffc0000000000 R08: ffffc900049ff407 R09: 1ffff9200093fe80 [ 158.884080][ T5824] R10: dffffc0000000000 R11: fffff5200093fe81 R12: 1ffffffff1642900 [ 158.892237][ T5824] R13: 0000000000000001 R14: ffff88801aff90f8 R15: ffff8881462fb008 [ 158.895369][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 158.900278][ T5824] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 158.900346][ T5824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.900362][ T5824] CR2: 00007fe146ae56c0 CR3: 000000000cb30000 CR4: 00000000003506e0 [ 158.900381][ T5824] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 158.900395][ T5824] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 158.900409][ T5824] Call Trace: [ 158.900419][ T5824] [ 158.910500][ T9] usb 1-1: config 174 has an invalid interface number: 178 but max is 0 [ 158.917131][ T5824] ? sysfs_unmerge_group+0x10d/0x130 [ 158.917172][ T5824] device_del+0x251/0x900 [ 158.917199][ T5824] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 158.931212][ T9] usb 1-1: config 174 has an invalid descriptor of length 0, skipping remainder of the config [ 158.931862][ T5824] ? kill_device+0x160/0x160 [ 158.942683][ T9] usb 1-1: config 174 has no interface number 0 [ 158.947899][ T5824] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 158.947943][ T5824] ? _raw_spin_unlock+0x40/0x40 [ 158.947976][ T5824] ? complete_all+0x2d/0x1d0 [ 158.948000][ T5824] ? __fw_load_abort+0x8b/0x1a0 [ 158.948027][ T5824] firmware_fallback_sysfs+0x682/0x940 [ 158.948066][ T5824] _request_firmware+0xed9/0x1510 [ 158.948108][ T5824] ? request_firmware+0x50/0x50 [ 158.954181][ T9] usb 1-1: config 174 interface 178 has no altsetting 0 [ 158.954332][ T5824] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 158.975158][ T9] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.ae [ 158.979546][ T5824] ? read_lock_is_recursive+0x20/0x20 [ 158.996384][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.001480][ T5824] request_firmware_work_func+0xb0/0x1b0 [ 159.001522][ T5824] ? process_scheduled_works+0x957/0x15b0 [ 159.045169][ T9] usb 1-1: Product: syz [ 159.050931][ T5824] process_scheduled_works+0xa45/0x15b0 [ 159.050999][ T5824] ? assign_work+0x400/0x400 [ 159.051033][ T5824] ? assign_work+0x39e/0x400 [ 159.065282][ T9] usb 1-1: Manufacturer: syz [ 159.065526][ T5824] worker_thread+0xa55/0xfc0 [ 159.077101][ T9] usb 1-1: SerialNumber: syz [ 159.080668][ T5824] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 159.125381][ T5824] ? _raw_spin_unlock+0x40/0x40 [ 159.130360][ T5824] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 159.136390][ T5824] kthread+0x2fa/0x390 [ 159.140623][ T5824] ? pr_cont_work+0x560/0x560 [ 159.145477][ T5824] ? kthread_blkcg+0xd0/0xd0 [ 159.150360][ T5824] ret_from_fork+0x48/0x80 [ 159.154848][ T5824] ? kthread_blkcg+0xd0/0xd0 [ 159.159588][ T5824] ret_from_fork_asm+0x11/0x20 [ 159.164450][ T5824] [ 159.167640][ T5824] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 159.174950][ T5824] CPU: 1 PID: 5824 Comm: kworker/1:5 Not tainted 6.6.93-syzkaller #0 [ 159.183040][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.193135][ T5824] Workqueue: events request_firmware_work_func [ 159.199338][ T5824] Call Trace: [ 159.202658][ T5824] [ 159.205618][ T5824] dump_stack_lvl+0x16c/0x230 [ 159.210339][ T5824] ? show_regs_print_info+0x20/0x20 [ 159.215591][ T5824] ? load_image+0x3b0/0x3b0 [ 159.220143][ T5824] panic+0x2c0/0x710 [ 159.224080][ T5824] ? bpf_jit_dump+0xd0/0xd0 [ 159.228624][ T5824] ? ret_from_fork_asm+0x11/0x20 [ 159.233591][ T5824] __warn+0x2e0/0x470 [ 159.237595][ T5824] ? sysfs_remove_group+0x178/0x2a0 [ 159.242909][ T5824] ? sysfs_remove_group+0x178/0x2a0 [ 159.248129][ T5824] report_bug+0x2be/0x4f0 [ 159.252499][ T5824] ? sysfs_remove_group+0x178/0x2a0 [ 159.257723][ T5824] ? sysfs_remove_group+0x178/0x2a0 [ 159.262939][ T5824] ? sysfs_remove_group+0x17a/0x2a0 [ 159.268160][ T5824] handle_bug+0xcf/0x120 [ 159.272430][ T5824] exc_invalid_op+0x1a/0x50 [ 159.276971][ T5824] asm_exc_invalid_op+0x1a/0x20 [ 159.281877][ T5824] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 159.287745][ T5824] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 ca d2 c9 ff 49 8b 17 48 c7 c7 40 bc ba 8a 48 89 de e8 b8 91 3b ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b2 2d 71 ff [ 159.307380][ T5824] RSP: 0018:ffffc900049ff800 EFLAGS: 00010246 [ 159.313516][ T5824] RAX: cbed941b744a9900 RBX: ffffffff8b2147e0 RCX: ffff88805e575a00 [ 159.321517][ T5824] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 159.329513][ T5824] RBP: dffffc0000000000 R08: ffffc900049ff407 R09: 1ffff9200093fe80 [ 159.337500][ T5824] R10: dffffc0000000000 R11: fffff5200093fe81 R12: 1ffffffff1642900 [ 159.345487][ T5824] R13: 0000000000000001 R14: ffff88801aff90f8 R15: ffff8881462fb008 [ 159.353503][ T5824] ? sysfs_unmerge_group+0x10d/0x130 [ 159.358820][ T5824] device_del+0x251/0x900 [ 159.363190][ T5824] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 159.369132][ T5824] ? kill_device+0x160/0x160 [ 159.373743][ T5824] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 159.379665][ T5824] ? _raw_spin_unlock+0x40/0x40 [ 159.384654][ T5824] ? complete_all+0x2d/0x1d0 [ 159.389281][ T5824] ? __fw_load_abort+0x8b/0x1a0 [ 159.394274][ T5824] firmware_fallback_sysfs+0x682/0x940 [ 159.399950][ T5824] _request_firmware+0xed9/0x1510 [ 159.405022][ T5824] ? request_firmware+0x50/0x50 [ 159.409896][ T5824] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 159.415905][ T5824] ? read_lock_is_recursive+0x20/0x20 [ 159.421315][ T5824] request_firmware_work_func+0xb0/0x1b0 [ 159.426986][ T5824] ? process_scheduled_works+0x957/0x15b0 [ 159.432738][ T5824] process_scheduled_works+0xa45/0x15b0 [ 159.438337][ T5824] ? assign_work+0x400/0x400 [ 159.442959][ T5824] ? assign_work+0x39e/0x400 [ 159.447578][ T5824] worker_thread+0xa55/0xfc0 [ 159.452225][ T5824] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 159.458151][ T5824] ? _raw_spin_unlock+0x40/0x40 [ 159.463038][ T5824] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 159.468979][ T5824] kthread+0x2fa/0x390 [ 159.473067][ T5824] ? pr_cont_work+0x560/0x560 [ 159.477763][ T5824] ? kthread_blkcg+0xd0/0xd0 [ 159.482396][ T5824] ret_from_fork+0x48/0x80 [ 159.486833][ T5824] ? kthread_blkcg+0xd0/0xd0 [ 159.491447][ T5824] ret_from_fork_asm+0x11/0x20 [ 159.496255][ T5824] [ 159.499620][ T5824] Kernel Offset: disabled [ 159.504037][ T5824] Rebooting in 86400 seconds..