last executing test programs: 3.437763701s ago: executing program 0 (id=807): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) 3.086633857s ago: executing program 0 (id=811): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.610361475s ago: executing program 0 (id=816): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0xd427, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 2.446437038s ago: executing program 0 (id=818): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x802, &(0x7f00000006c0)={[{@gid}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@keep_last_dots}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@errors_continue}]}, 0x29, 0x1506, &(0x7f0000001800)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.265235561s ago: executing program 1 (id=821): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) 1.926343797s ago: executing program 1 (id=824): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e58, &(0x7f0000000040), 0x22, 0x65f, &(0x7f0000002980)="$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") setuid(0xee00) symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 1.899532327s ago: executing program 0 (id=825): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000001c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6865617274626561743d6e6f6e652c6c6f63616c666c6f636b732c696e6f646536342c6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f61636c2c6e6f61636c2c6572726f72733d636f6e74696e75652c00edc97523793b5022d016bb24c65ba594abbd38fd9c301bfa101e61d574eb5cc84215aa20846b6f33df6281eaedb4b4afaaacd321e4df0d16b4f5a8a992efe2554b52ec9c980e5544cd4b8df3e1ba594d07e0bfe3471c164430a36b7ebddc35caf2959224d8330f1807117fc520d8ff5660c5691afd66a8e397bb802ed69df198008fb799cc37"], 0x1, 0x470e, &(0x7f0000008f40)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1260a9, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000c40)) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000022, &(0x7f0000000340)='heartbeat=none') 1.877062808s ago: executing program 3 (id=826): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") mount$tmpfs(0x0, 0x0, 0x0, 0x820061, &(0x7f0000000200)={[{@size}]}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) 1.520803584s ago: executing program 2 (id=828): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10}, 0x94) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) 1.330310537s ago: executing program 2 (id=829): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 1.271731068s ago: executing program 3 (id=830): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000006380)={0x0, @in6={{0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x2052}}, 0x6, 0x0, 0xaa11, 0x81, 0x11}, &(0x7f0000000400)=0x98) 1.1344729s ago: executing program 2 (id=831): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) times(0x0) 992.109802ms ago: executing program 1 (id=832): unshare(0x26000400) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, 0x0, 0x0) 954.835603ms ago: executing program 2 (id=833): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0xfd, 0x0, 0x5}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0x9}}], 0x18}}], 0x1, 0x0) 686.381458ms ago: executing program 2 (id=834): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000240)={0x78, 0x0, r1, {0x2000000007, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x55, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x1ff, 0xa000, 0xa0000000, 0x0, r2, 0x0, 0x0, 0x1000000}}}, 0x78) 678.367408ms ago: executing program 1 (id=835): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) io_uring_setup(0x4e9e, &(0x7f0000000000)={0x0, 0xa071, 0x846, 0x4, 0x12f}) 444.748902ms ago: executing program 2 (id=836): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x5, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) 444.518942ms ago: executing program 3 (id=837): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) 443.749312ms ago: executing program 1 (id=844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x916}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}}, 0x0) 321.244634ms ago: executing program 3 (id=838): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fallocate(r0, 0x4, 0x7, 0xffffffff) 142.256327ms ago: executing program 1 (id=839): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x301, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffea, 0x2a, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xca}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x3}, @main=@item_4={0x3, 0x0, 0xa, "94ae1104"}, @global]}}, 0x0}, 0x0) 127.711177ms ago: executing program 3 (id=840): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000400000014000200fc0100000000000000000000000000000800040000000000140006"], 0x44}}, 0x0) 36.974369ms ago: executing program 0 (id=841): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x1016, &(0x7f0000003080)=""/4118, 0x40f00}, 0x94) 0s ago: executing program 3 (id=842): r0 = socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x1000000, 0x4, 0x6}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.90' (ED25519) to the list of known hosts. [ 94.300062][ T5778] cgroup: Unknown subsys name 'net' [ 94.443188][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 96.208578][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.108875][ T27] cfg80211: failed to load regulatory.db [ 98.175020][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.188808][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.201809][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.217063][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.231073][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.240298][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.249864][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.257558][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.266244][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.275064][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.283713][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.286243][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.296808][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.300272][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.306753][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.313336][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.320943][ T5804] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 98.327013][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.334992][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.343143][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 98.356681][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.365035][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 98.375895][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.425325][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.969813][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 99.052175][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 99.141699][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 99.171803][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.179194][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.187126][ T5788] bridge_slave_0: entered allmulticast mode [ 99.194589][ T5788] bridge_slave_0: entered promiscuous mode [ 99.214827][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 99.232839][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.240391][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.247923][ T5788] bridge_slave_1: entered allmulticast mode [ 99.255437][ T5788] bridge_slave_1: entered promiscuous mode [ 99.394917][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.404588][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.411815][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.422170][ T5792] bridge_slave_0: entered allmulticast mode [ 99.429492][ T5792] bridge_slave_0: entered promiscuous mode [ 99.462155][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.489825][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.497947][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.505412][ T5792] bridge_slave_1: entered allmulticast mode [ 99.512979][ T5792] bridge_slave_1: entered promiscuous mode [ 99.582488][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.590239][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.597638][ T5793] bridge_slave_0: entered allmulticast mode [ 99.605213][ T5793] bridge_slave_0: entered promiscuous mode [ 99.613072][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.620689][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.628209][ T5793] bridge_slave_1: entered allmulticast mode [ 99.635579][ T5793] bridge_slave_1: entered promiscuous mode [ 99.646476][ T5788] team0: Port device team_slave_0 added [ 99.670435][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.680443][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.687889][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.696060][ T5795] bridge_slave_0: entered allmulticast mode [ 99.703613][ T5795] bridge_slave_0: entered promiscuous mode [ 99.711993][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.719339][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.726701][ T5795] bridge_slave_1: entered allmulticast mode [ 99.734364][ T5795] bridge_slave_1: entered promiscuous mode [ 99.755498][ T5788] team0: Port device team_slave_1 added [ 99.775807][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.824873][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.876802][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.901778][ T5792] team0: Port device team_slave_0 added [ 99.912632][ T5792] team0: Port device team_slave_1 added [ 99.930932][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.946242][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.957859][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.965886][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.992143][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.006174][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.013307][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.040230][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.108248][ T5793] team0: Port device team_slave_0 added [ 100.144474][ T5795] team0: Port device team_slave_0 added [ 100.152751][ T5793] team0: Port device team_slave_1 added [ 100.160111][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.167364][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.193634][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.206731][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.213795][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.239980][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.255140][ T5795] team0: Port device team_slave_1 added [ 100.336211][ T5788] hsr_slave_0: entered promiscuous mode [ 100.342949][ T5788] hsr_slave_1: entered promiscuous mode [ 100.352459][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.359610][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.387270][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.412291][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.419590][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.419841][ T5798] Bluetooth: hci2: command tx timeout [ 100.446042][ T50] Bluetooth: hci0: command tx timeout [ 100.452169][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.494003][ T50] Bluetooth: hci1: command tx timeout [ 100.494060][ T5798] Bluetooth: hci3: command tx timeout [ 100.511547][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.519007][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.545175][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.556873][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.564146][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.590338][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.622636][ T5792] hsr_slave_0: entered promiscuous mode [ 100.629287][ T5792] hsr_slave_1: entered promiscuous mode [ 100.635966][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.643959][ T5792] Cannot create hsr debugfs directory [ 100.743016][ T5795] hsr_slave_0: entered promiscuous mode [ 100.750860][ T5795] hsr_slave_1: entered promiscuous mode [ 100.757915][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.765919][ T5795] Cannot create hsr debugfs directory [ 100.795902][ T5793] hsr_slave_0: entered promiscuous mode [ 100.802340][ T5793] hsr_slave_1: entered promiscuous mode [ 100.809729][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.817549][ T5793] Cannot create hsr debugfs directory [ 101.229961][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.248427][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.262337][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.273275][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.352080][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.370320][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.383868][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.395162][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.512056][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.532970][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.557368][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.568321][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.642802][ T5795] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.664254][ T5795] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.676774][ T5795] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.705060][ T5795] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.736839][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.778411][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.826927][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.837990][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.870500][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.877956][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.890049][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.897418][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.921080][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.928393][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.973541][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.980779][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.132070][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.173409][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.228619][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.262645][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.285019][ T3438] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.292248][ T3438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.341649][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.348990][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.367927][ T3438] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.375386][ T3438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.427913][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.435160][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.493647][ T5798] Bluetooth: hci0: command tx timeout [ 102.505771][ T5798] Bluetooth: hci2: command tx timeout [ 102.573922][ T5798] Bluetooth: hci3: command tx timeout [ 102.579422][ T5798] Bluetooth: hci1: command tx timeout [ 102.669660][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.729526][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.868616][ T5788] veth0_vlan: entered promiscuous mode [ 102.952125][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.980410][ T5788] veth1_vlan: entered promiscuous mode [ 103.026522][ T5793] veth0_vlan: entered promiscuous mode [ 103.068296][ T5793] veth1_vlan: entered promiscuous mode [ 103.112106][ T5788] veth0_macvtap: entered promiscuous mode [ 103.121647][ T5792] veth0_vlan: entered promiscuous mode [ 103.137103][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.166861][ T5788] veth1_macvtap: entered promiscuous mode [ 103.183168][ T5792] veth1_vlan: entered promiscuous mode [ 103.211573][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.224847][ T5793] veth0_macvtap: entered promiscuous mode [ 103.247638][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.271456][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.281804][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.291506][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.301183][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.318239][ T5793] veth1_macvtap: entered promiscuous mode [ 103.369671][ T5792] veth0_macvtap: entered promiscuous mode [ 103.417360][ T5795] veth0_vlan: entered promiscuous mode [ 103.426898][ T5792] veth1_macvtap: entered promiscuous mode [ 103.446387][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.458052][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.470066][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.491426][ T5795] veth1_vlan: entered promiscuous mode [ 103.507292][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.518000][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.529690][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.542416][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.555407][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.565409][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.575894][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.588671][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.629562][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.641243][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.651819][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.664028][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.676479][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.686773][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.706321][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.715952][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.719468][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.725335][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.741360][ T5793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.761346][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.778673][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.788203][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.797189][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.860469][ T5795] veth0_macvtap: entered promiscuous mode [ 103.880011][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.897878][ T5795] veth1_macvtap: entered promiscuous mode [ 103.900074][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.039419][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.052376][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.064560][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.075137][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.085879][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.097521][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.109614][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.158747][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.178181][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.188321][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.214181][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.232435][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.243286][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.266402][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.277146][ T3463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.290201][ T3463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.308839][ T5795] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.318035][ T5795] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.328808][ T5795] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.339225][ T5795] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.369618][ T3463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.380783][ T3463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.418666][ T3463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.428414][ T3463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.531962][ T2879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.541767][ T2879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.573778][ T5798] Bluetooth: hci2: command tx timeout [ 104.574718][ T50] Bluetooth: hci0: command tx timeout [ 104.655039][ T50] Bluetooth: hci3: command tx timeout [ 104.655116][ T5798] Bluetooth: hci1: command tx timeout [ 104.730150][ T2879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.749308][ T2879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.776362][ T5888] syz.3.4[5888]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 104.802189][ T5888] loop3: detected capacity change from 0 to 256 [ 104.818167][ T5888] exfat: Deprecated parameter 'namecase' [ 104.828056][ T5888] exfat: Deprecated parameter 'utf8' [ 104.887018][ T5888] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 104.946338][ T3438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.961677][ T5892] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 104.969368][ T3438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.116568][ T5894] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7'. [ 105.574017][ T2128] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.583453][ T5902] loop1: detected capacity change from 0 to 4096 [ 105.621326][ T5902] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 105.715031][ T5902] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 105.798873][ T2128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.843594][ T2128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.860769][ T2128] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.901500][ T2128] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 105.925276][ T2128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.972450][ T2128] usb 1-1: config 0 descriptor?? [ 106.017197][ T5913] Bluetooth: MGMT ver 1.22 [ 106.072408][ T5912] netlink: 332 bytes leftover after parsing attributes in process `syz.3.15'. [ 106.444751][ T2128] dragonrise 0003:0079:0011.0001: unknown main item tag 0x0 [ 106.506196][ T2128] dragonrise 0003:0079:0011.0001: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.0-1/input0 [ 106.657085][ T5798] Bluetooth: hci0: command tx timeout [ 106.657103][ T50] Bluetooth: hci2: command tx timeout [ 106.733692][ T5798] Bluetooth: hci3: command tx timeout [ 106.744566][ T5798] Bluetooth: hci1: command tx timeout [ 106.804238][ T55] usb 1-1: USB disconnect, device number 2 [ 107.070486][ T5936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25'. [ 107.440911][ T5950] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.32'. [ 107.552779][ T5953] loop0: detected capacity change from 0 to 256 [ 107.598675][ T5779] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.813603][ T5779] usb 4-1: Using ep0 maxpacket: 8 [ 107.835418][ T5779] usb 4-1: unable to get BOS descriptor or descriptor too short [ 107.884086][ T5779] usb 4-1: config 10 has an invalid interface number: 223 but max is 2 [ 107.892452][ T5779] usb 4-1: config 10 has an invalid interface number: 79 but max is 2 [ 107.910797][ T5964] mmap: syz.1.39 (5964) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.917007][ T5779] usb 4-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 107.953645][ T5779] usb 4-1: config 10 has 2 interfaces, different from the descriptor's value: 3 [ 107.967578][ T5779] usb 4-1: config 10 has no interface number 0 [ 107.983882][ T5779] usb 4-1: config 10 has no interface number 1 [ 108.003844][ T5779] usb 4-1: config 10 interface 223 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 108.027528][ T5779] usb 4-1: config 10 interface 79 altsetting 73 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 108.050098][ T5779] usb 4-1: config 10 interface 79 altsetting 73 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 108.064552][ T5779] usb 4-1: config 10 interface 223 has no altsetting 0 [ 108.071473][ T5779] usb 4-1: config 10 interface 79 has no altsetting 0 [ 108.082486][ T5779] usb 4-1: New USB device found, idVendor=2013, idProduct=025d, bcdDevice=a3.4b [ 108.092837][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.114027][ T5779] usb 4-1: Product: syz [ 108.118286][ T5779] usb 4-1: Manufacturer: syz [ 108.122929][ T5779] usb 4-1: SerialNumber: syz [ 108.133791][ T5837] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.337706][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.359042][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.390116][ T5837] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 108.400836][ T5779] dvb-usb: found a 'PCTV 2002e SE' in cold state, will try to load a firmware [ 108.447300][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.466365][ T5779] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 108.476221][ T5779] dib0700: firmware download failed at 7 with -22 [ 108.496847][ T5837] usb 3-1: config 0 descriptor?? [ 108.503800][ T5779] dvb-usb: found a 'PCTV 2002e SE' in cold state, will try to load a firmware [ 108.519574][ T5976] loop0: detected capacity change from 0 to 128 [ 108.520005][ T5779] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 108.536353][ T5779] dib0700: firmware download failed at 7 with -22 [ 108.580147][ T5779] usb 4-1: USB disconnect, device number 2 [ 108.662070][ T5976] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 108.717595][ T5976] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.819466][ T5984] loop1: detected capacity change from 0 to 64 [ 108.956752][ T5793] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.159088][ T5837] hid-led: probe of 0003:27B8:01ED.0002 failed with error -71 [ 109.212155][ T5837] usb 3-1: USB disconnect, device number 2 [ 109.246609][ T5993] loop0: detected capacity change from 0 to 1024 [ 109.420251][ T39] hfsplus: b-tree write err: -5, ino 4 [ 110.044676][ T6013] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.091158][ T6015] netlink: 44 bytes leftover after parsing attributes in process `syz.3.63'. [ 110.139389][ T6018] loop1: detected capacity change from 0 to 1024 [ 110.146125][ T6015] netlink: 31 bytes leftover after parsing attributes in process `syz.3.63'. [ 110.182156][ T6015] netlink: 'syz.3.63': attribute type 4 has an invalid length. [ 110.581728][ T6029] loop2: detected capacity change from 0 to 512 [ 110.622739][ T6029] EXT4-fs: Ignoring removed bh option [ 110.651045][ T6029] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.686159][ T6028] loop1: detected capacity change from 0 to 2048 [ 110.700425][ T6029] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 110.737813][ T6029] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.774424][ T6028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.851995][ T6029] EXT4-fs (loop2): 1 truncate cleaned up [ 110.884007][ T6029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.020871][ T6028] EXT4-fs (loop1): can't enable nombcache during remount [ 111.087475][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.196862][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.376245][ T6046] loop1: detected capacity change from 0 to 256 [ 111.390459][ T6033] loop3: detected capacity change from 0 to 32768 [ 111.425615][ T6033] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.71 (6033) [ 111.538135][ T6033] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 111.559991][ T6033] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 111.574267][ T6033] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 111.586001][ T6033] BTRFS info (device loop3): use zstd compression, level 3 [ 111.634334][ T6033] BTRFS info (device loop3): using free space tree [ 111.675984][ T6049] loop2: detected capacity change from 0 to 512 [ 111.714446][ T6049] ======================================================= [ 111.714446][ T6049] WARNING: The mand mount option has been deprecated and [ 111.714446][ T6049] and is ignored by this kernel. Remove the mand [ 111.714446][ T6049] option from the mount to silence this warning. [ 111.714446][ T6049] ======================================================= [ 111.919311][ T6033] BTRFS info (device loop3): enabling ssd optimizations [ 111.919365][ T6033] BTRFS info (device loop3): auto enabling async discard [ 112.048821][ T6049] EXT4-fs (loop2): Test dummy encryption mode enabled [ 112.054196][ T2128] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.087754][ T6049] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 112.112518][ T6049] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 112.135990][ T6049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.264188][ T2128] usb 1-1: Using ep0 maxpacket: 8 [ 112.288720][ T2128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.310092][ T2128] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 112.353906][ T2128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.391398][ T2128] usb 1-1: config 0 descriptor?? [ 112.406720][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.587928][ T6076] loop2: detected capacity change from 0 to 512 [ 112.604355][ T6076] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.688516][ T6076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 112.731945][ T6076] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.841630][ T2128] megaworld 0003:07B5:0312.0003: item fetching failed at offset 10/11 [ 112.874386][ T2128] megaworld 0003:07B5:0312.0003: parse failed [ 112.880605][ T2128] megaworld: probe of 0003:07B5:0312.0003 failed with error -22 [ 112.949447][ T6076] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 112.966464][ T6076] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 112.978381][ T6076] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.81: Failed to acquire dquot type 0 [ 113.102393][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 113.104104][ T9] usb 1-1: USB disconnect, device number 3 [ 113.837507][ T5792] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 114.167008][ T6100] loop2: detected capacity change from 0 to 4096 [ 114.293766][ T5779] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 114.369175][ T6100] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 114.498566][ T5779] usb 1-1: Using ep0 maxpacket: 32 [ 114.511637][ T5779] usb 1-1: config 0 interface 0 has no altsetting 0 [ 114.522598][ T5779] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 114.540380][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.559441][ T5779] usb 1-1: Product: syz [ 114.564048][ T5779] usb 1-1: Manufacturer: syz [ 114.568699][ T5779] usb 1-1: SerialNumber: syz [ 114.606340][ T5779] usb 1-1: config 0 descriptor?? [ 114.673679][ T5880] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 114.754538][ T6110] warning: `syz.3.97' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 114.856049][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.880405][ T5880] usb 2-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 114.900554][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.916742][ T5880] usb 2-1: config 0 descriptor?? [ 115.046874][ T5779] gs_usb 1-1:0.0: Configuring for 225 interfaces [ 115.059711][ T5779] gs_usb 1-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 115.084390][ T5779] gs_usb: probe of 1-1:0.0 failed with error -22 [ 115.282203][ T5837] usb 1-1: USB disconnect, device number 4 [ 115.350067][ T5880] hid (null): report_id 0 is invalid [ 115.407453][ T5880] nzxt-smart2 0003:1E71:2019.0004: report_id 0 is invalid [ 115.439457][ T5880] nzxt-smart2 0003:1E71:2019.0004: item 0 4 1 8 parsing failed [ 115.451542][ T5880] nzxt-smart2: probe of 0003:1E71:2019.0004 failed with error -22 [ 115.566830][ T6128] loop2: detected capacity change from 0 to 64 [ 115.603155][ T5880] usb 2-1: USB disconnect, device number 2 [ 115.603178][ T6130] loop3: detected capacity change from 0 to 64 [ 116.071072][ T6139] loop3: detected capacity change from 0 to 512 [ 116.079585][ T6139] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.106409][ T6140] loop2: detected capacity change from 0 to 256 [ 116.116068][ T6139] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 116.134499][ T6139] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.111: invalid indirect mapped block 2683928664 (level 1) [ 116.144206][ T6140] exfat: Deprecated parameter 'utf8' [ 116.154454][ T6140] exfat: Deprecated parameter 'utf8' [ 116.160411][ T6140] exfat: Deprecated parameter 'utf8' [ 116.166786][ T6140] exfat: Deprecated parameter 'utf8' [ 116.190251][ T6140] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d) [ 116.223587][ T6139] EXT4-fs (loop3): Remounting filesystem read-only [ 116.242954][ T6139] EXT4-fs (loop3): 1 truncate cleaned up [ 116.263230][ T6139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.384653][ T6139] EXT4-fs warning (device loop3): ext4_resize_begin:74: won't resize using backup superblock at 1 [ 116.523956][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.268686][ T6149] loop1: detected capacity change from 0 to 32768 [ 117.308833][ T6149] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.114 (6149) [ 117.344920][ T6149] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 117.364000][ T6149] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 117.383676][ T6149] BTRFS info (device loop1): force zlib compression, level 3 [ 117.395040][ T6149] BTRFS info (device loop1): force clearing of disk cache [ 117.411309][ T6149] BTRFS info (device loop1): setting nodatasum [ 117.419817][ T6149] BTRFS info (device loop1): allowing degraded mounts [ 117.429490][ T6151] loop2: detected capacity change from 0 to 32768 [ 117.436266][ T6149] BTRFS info (device loop1): enabling disk space caching [ 117.473823][ T6149] BTRFS info (device loop1): disk space caching is enabled [ 117.587765][ T6151] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 117.650302][ T6149] BTRFS info (device loop1): auto enabling async discard [ 117.695795][ T6149] BTRFS info (device loop1): rebuilding free space tree [ 117.847643][ T6149] BTRFS info (device loop1): disabling free space tree [ 117.873384][ T6149] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 117.896054][ T6149] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 117.985520][ T5795] ocfs2: Unmounting device (7,2) on (node local) [ 118.164595][ T6149] BTRFS info (device loop1): balance: start -d -m [ 118.205108][ T6149] BTRFS info (device loop1): balance: canceled [ 118.464976][ T6167] loop0: detected capacity change from 0 to 32768 [ 118.492627][ T5788] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 118.535603][ T6194] capability: warning: `syz.3.126' uses 32-bit capabilities (legacy support in use) [ 118.639132][ T6196] loop2: detected capacity change from 0 to 164 [ 118.982344][ T28] audit: type=1326 audit(1753347464.268:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.0.129" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f201ff8e9a9 code=0x0 [ 119.177210][ T6205] netlink: 'syz.2.131': attribute type 1 has an invalid length. [ 119.727170][ T6217] pimreg3: entered allmulticast mode [ 120.225946][ T6207] loop1: detected capacity change from 0 to 32768 [ 120.310336][ T6207] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.396950][ T6243] netlink: 'syz.3.148': attribute type 153 has an invalid length. [ 120.578586][ T6207] XFS (loop1): Ending clean mount [ 120.622736][ T6207] XFS (loop1): Quotacheck needed: Please wait. [ 120.647611][ T6252] loop0: detected capacity change from 0 to 22 [ 120.680571][ T6252] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 120.723264][ T6252] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 120.744035][ T55] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.779540][ T6207] XFS (loop1): Quotacheck: Done. [ 120.956458][ T55] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 120.995572][ T55] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.022739][ T5788] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 121.028726][ T55] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.090192][ T55] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.102210][ T55] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.119606][ T55] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.138559][ T55] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.154675][ T55] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.165281][ T55] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.183344][ T55] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.240476][ T55] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.267998][ T55] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.318036][ T55] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.344760][ T55] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.356997][ T55] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.380382][ T55] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.404154][ T55] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.413458][ T55] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.438928][ T55] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.465579][ T55] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.478263][ T55] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.513603][ T55] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.533645][ T55] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.552307][ T55] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.555082][ T6266] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 121.595440][ T55] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.614079][ T55] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 121.625281][ T55] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 121.649193][ T55] usb 4-1: Product: syz [ 121.668539][ T55] usb 4-1: Manufacturer: syz [ 121.673336][ T55] usb 4-1: SerialNumber: syz [ 121.736192][ T55] usb 4-1: config 0 descriptor?? [ 121.772028][ T55] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 122.183823][ T5837] usb 4-1: USB disconnect, device number 3 [ 122.209102][ T5837] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 123.181314][ T6282] loop1: detected capacity change from 0 to 32768 [ 123.216982][ T6276] loop0: detected capacity change from 0 to 40427 [ 123.284387][ T6282] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 123.329251][ T6280] loop2: detected capacity change from 0 to 32768 [ 123.371821][ T6282] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 123.386621][ T6276] F2FS-fs (loop0): invalid crc value [ 123.426328][ T6280] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 123.464275][ T6276] F2FS-fs (loop0): Found nat_bits in checkpoint [ 123.509557][ T6282] XFS (loop1): Ending clean mount [ 123.539825][ T6282] XFS (loop1): Quotacheck needed: Please wait. [ 123.648544][ T6280] XFS (loop2): Ending clean mount [ 123.648690][ T6276] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 123.669101][ T6280] XFS (loop2): Quotacheck needed: Please wait. [ 123.679402][ T6282] XFS (loop1): Quotacheck: Done. [ 123.791360][ T6280] XFS (loop2): Quotacheck: Done. [ 124.002707][ T5795] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 124.030742][ T5788] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 124.130262][ T5793] syz-executor: attempt to access beyond end of device [ 124.130262][ T5793] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 124.165608][ T5793] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 124.544271][ T6320] capability: warning: `syz.2.174' uses deprecated v2 capabilities in a way that may be insecure [ 124.849684][ T6316] loop3: detected capacity change from 0 to 32768 [ 124.869471][ T6316] XFS (loop3): Invalid device [./file0], error=-15 [ 124.915565][ T6325] netlink: 96 bytes leftover after parsing attributes in process `syz.2.176'. [ 124.935891][ T6325] netlink: 64 bytes leftover after parsing attributes in process `syz.2.176'. [ 125.078423][ T6327] loop0: detected capacity change from 0 to 2048 [ 125.114485][ T6327] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 125.238275][ T6251] udevd[6251]: incorrect nilfs2 checksum on /dev/loop0 [ 125.282636][ T6333] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.758039][ T6337] tmpfs: Cannot enable quota on remount [ 125.770447][ T6339] netlink: 368 bytes leftover after parsing attributes in process `syz.1.171'. [ 126.643110][ T6369] sp0: Synchronizing with TNC [ 126.687395][ T6368] [U] è [ 126.793918][ T5880] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.003964][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 127.016847][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.016885][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.016925][ T5880] usb 1-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 127.016948][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.019386][ T5880] usb 1-1: config 0 descriptor?? [ 127.169595][ T6383] loop2: detected capacity change from 0 to 2048 [ 127.187980][ T6383] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 127.239959][ T6385] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.462782][ T5880] logitech-hidpp-device 0003:046D:C343.0005: unbalanced delimiter at end of report description [ 127.499639][ T5880] logitech-hidpp-device 0003:046D:C343.0005: hidpp_probe:parse failed [ 127.532771][ T5880] logitech-hidpp-device: probe of 0003:046D:C343.0005 failed with error -22 [ 127.582072][ T6389] loop2: detected capacity change from 0 to 16 [ 127.608750][ T6389] erofs: (device loop2): mounted with root inode @ nid 36. [ 127.687629][ T28] audit: type=1800 audit(1753347472.978:3): pid=6389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.203" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 127.710043][ T5880] usb 1-1: USB disconnect, device number 5 [ 128.121419][ T6405] loop3: detected capacity change from 0 to 256 [ 128.201368][ T6405] FAT-fs (loop3): Directory bread(block 64) failed [ 128.223805][ T6405] FAT-fs (loop3): Directory bread(block 65) failed [ 128.230603][ T6405] FAT-fs (loop3): Directory bread(block 66) failed [ 128.263822][ T6405] FAT-fs (loop3): Directory bread(block 67) failed [ 128.281154][ T6405] FAT-fs (loop3): Directory bread(block 68) failed [ 128.303178][ T6405] FAT-fs (loop3): Directory bread(block 69) failed [ 128.333868][ T6405] FAT-fs (loop3): Directory bread(block 70) failed [ 128.340485][ T6405] FAT-fs (loop3): Directory bread(block 71) failed [ 128.379861][ T6405] FAT-fs (loop3): Directory bread(block 72) failed [ 128.399519][ T6405] FAT-fs (loop3): Directory bread(block 73) failed [ 128.459627][ T6411] loop0: detected capacity change from 0 to 2048 [ 128.533992][ T6414] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.702341][ T6411] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 128.752881][ T6411] Remounting filesystem read-only [ 128.953116][ T5793] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 128.976928][ T5793] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 129.003599][ T5793] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 129.013933][ T5793] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 129.030792][ T5793] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 129.063625][ T5793] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 129.072840][ T5793] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 129.093590][ T5793] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 129.102078][ T5793] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 129.139437][ T5793] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 129.170192][ T5793] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 129.194011][ T5793] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 129.200828][ T5793] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 129.233711][ T5793] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 129.243802][ T5793] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 129.251308][ T5793] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 129.285123][ T6426] loop3: detected capacity change from 0 to 2048 [ 129.290948][ T5793] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 129.301684][ T5793] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 129.320732][ T5793] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 129.374464][ T5793] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 129.392723][ T6429] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.414870][ T5793] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 129.448281][ T5793] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 129.491629][ T5793] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 129.511363][ T28] audit: type=1800 audit(1753347474.798:4): pid=6426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.223" name="file1" dev="loop3" ino=2097152 res=0 errno=0 [ 129.512836][ T5793] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 129.587303][ T5793] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 129.587335][ T5793] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 129.587369][ T5793] NILFS (loop0): discard dirty page: offset=65536, ino=3 [ 129.587388][ T5793] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 129.587407][ T5793] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 129.587426][ T5793] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 129.587444][ T5793] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 129.647965][ T6409] loop1: detected capacity change from 0 to 40427 [ 129.667647][ T6409] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 129.667690][ T6409] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 129.733186][ T6409] F2FS-fs (loop1): invalid crc value [ 129.836878][ T6436] loop0: detected capacity change from 0 to 128 [ 129.859828][ T6409] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.026437][ T6409] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 130.044882][ T6409] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 130.379376][ T2879] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 130.447526][ T2879] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 130.574378][ T6454] loop0: detected capacity change from 0 to 2048 [ 130.918079][ T6454] loop0: detected capacity change from 0 to 2048 [ 130.954235][ T6466] netlink: 11 bytes leftover after parsing attributes in process `syz.3.239'. [ 131.516564][ T6480] netlink: 'syz.3.245': attribute type 1 has an invalid length. [ 131.673866][ T5880] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.884339][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 131.895965][ T5880] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 131.930591][ T5880] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 131.955124][ T5880] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 131.980602][ T5880] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.030494][ T5880] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 132.057997][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.093693][ T5880] usb 1-1: Product: syz [ 132.107574][ T5880] usb 1-1: Manufacturer: syz [ 132.120598][ T5880] usb 1-1: SerialNumber: syz [ 132.140971][ T6476] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 132.185531][ T5880] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 132.209997][ T5880] usbtest 1-1:1.0: Linux user mode ISO test driver [ 132.231579][ T5880] usbtest 1-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 132.328551][ T6502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.254'. [ 132.503708][ T6506] netlink: 'syz.1.255': attribute type 10 has an invalid length. [ 132.521206][ T5880] usb 1-1: USB disconnect, device number 6 [ 132.828015][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 133.911840][ T6547] netlink: 56 bytes leftover after parsing attributes in process `syz.1.268'. [ 133.965265][ T6547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.268'. [ 134.121134][ T6552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.270'. [ 134.274314][ T6556] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.271' resets device [ 134.275610][ T6523] loop3: detected capacity change from 0 to 32768 [ 134.413985][ T6523] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.586272][ T6533] loop2: detected capacity change from 0 to 32768 [ 134.630943][ T6533] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.729942][ T6523] XFS (loop3): Ending clean mount [ 134.822652][ T6533] XFS (loop2): Ending clean mount [ 134.889298][ T6533] XFS (loop2): Quotacheck needed: Please wait. [ 135.024412][ T5792] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.063173][ T6533] XFS (loop2): Quotacheck: Done. [ 135.418752][ T5795] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.633610][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 135.842858][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 135.872981][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.923842][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.963738][ T23] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 136.025512][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.129988][ T23] usb 1-1: config 0 descriptor?? [ 136.140656][ T6602] loop2: detected capacity change from 0 to 16 [ 136.215821][ T6602] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 136.593492][ C0] sched: RT throttling activated [ 136.682860][ T23] apple 0003:05AC:024B.0006: unknown main item tag 0x6 [ 136.727875][ T23] apple 0003:05AC:024B.0006: ignoring exceeding usage max [ 136.789680][ T23] apple 0003:05AC:024B.0006: invalid report_size 16640 [ 136.842475][ T23] apple 0003:05AC:024B.0006: item 0 2 1 7 parsing failed [ 136.876873][ T23] apple 0003:05AC:024B.0006: parse failed [ 136.879012][ T6595] loop1: detected capacity change from 0 to 131072 [ 136.904104][ T6606] nbd: must specify a size in bytes for the device [ 136.911289][ T6595] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name [ 136.919897][ T6595] F2FS-fs (loop1): Unrecognized mount option "discard_Ynit=section" or missing value [ 136.928259][ T23] apple: probe of 0003:05AC:024B.0006 failed with error -22 [ 137.002356][ T23] usb 1-1: USB disconnect, device number 7 [ 137.901655][ T6625] loop2: detected capacity change from 0 to 4096 [ 137.974939][ T6625] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 137.986014][ T6636] loop3: detected capacity change from 0 to 16 [ 138.007314][ T6636] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 138.025645][ T6635] loop1: detected capacity change from 0 to 1024 [ 138.068650][ T5800] udevd[5800]: incorrect cramfs checksum on /dev/loop3 [ 138.221476][ T5800] udevd[5800]: incorrect cramfs checksum on /dev/loop3 [ 138.289210][ T3463] hfsplus: b-tree write err: -5, ino 4 [ 138.706994][ T6641] loop3: detected capacity change from 0 to 4096 [ 138.762650][ T6641] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 138.903956][ T6641] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 138.955661][ T6641] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 139.060108][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.067731][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.124344][ T6641] ntfs3: loop3: ino=5, "/" directory corrupted [ 139.282073][ T6654] loop1: detected capacity change from 0 to 4096 [ 139.299372][ T6659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.309'. [ 139.628673][ T28] audit: type=1800 audit(1753347484.918:5): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.307" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 140.523921][ T6681] loop1: detected capacity change from 0 to 64 [ 140.577066][ T6665] loop2: detected capacity change from 0 to 32768 [ 141.321962][ T6699] loop2: detected capacity change from 0 to 16 [ 141.358635][ T6699] erofs: (device loop2): mounted with root inode @ nid 36. [ 141.553025][ T6703] loop1: detected capacity change from 0 to 64 [ 141.904163][ T6710] loop1: detected capacity change from 0 to 64 [ 141.949160][ T6689] loop0: detected capacity change from 0 to 32768 [ 141.957025][ T6710] hfs: unable to locate alternate MDB [ 141.962928][ T6710] hfs: continuing without an alternate MDB [ 141.992434][ T6689] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.324 (6689) [ 142.046200][ T6689] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 142.080951][ T6689] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 142.104054][ T6689] BTRFS info (device loop0): using free space tree [ 142.244843][ T6689] BTRFS info (device loop0): enabling ssd optimizations [ 142.264039][ T6689] BTRFS info (device loop0): auto enabling async discard [ 142.285230][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.337'. [ 142.353850][ T6731] block nbd0: not configured, cannot reconfigure [ 142.424635][ T55] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 142.519192][ T5793] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 142.639685][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 142.659232][ T55] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 142.668160][ T6740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.340'. [ 142.682525][ T55] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 142.693261][ T55] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 142.716306][ T55] usb 4-1: config 0 has no interface number 0 [ 142.722600][ T55] usb 4-1: config 0 has no interface number 1 [ 142.765238][ T55] usb 4-1: too many endpoints for config 0 interface 164 altsetting 124: 110, using maximum allowed: 30 [ 142.819398][ T28] audit: type=1326 audit(1753347488.108:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.0.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201ff8e9a9 code=0x7ffc0000 [ 142.843771][ T55] usb 4-1: config 0 interface 164 altsetting 124 has 0 endpoint descriptors, different from the interface descriptor's value: 110 [ 142.873224][ T55] usb 4-1: config 0 interface 50 has no altsetting 0 [ 142.881646][ T28] audit: type=1326 audit(1753347488.108:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.0.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201ff8e9a9 code=0x7ffc0000 [ 142.904101][ T55] usb 4-1: config 0 interface 164 has no altsetting 0 [ 142.914315][ T6744] netlink: 76 bytes leftover after parsing attributes in process `syz.2.342'. [ 142.933119][ T28] audit: type=1326 audit(1753347488.158:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.0.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f201ff8e9a9 code=0x7ffc0000 [ 142.934216][ T55] usb 4-1: New USB device found, idVendor=0baf, idProduct=00f6, bcdDevice=a8.4a [ 142.985123][ T28] audit: type=1326 audit(1753347488.158:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.0.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201ff8e9a9 code=0x7ffc0000 [ 143.043596][ T28] audit: type=1326 audit(1753347488.158:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.0.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201ff8e9a9 code=0x7ffc0000 [ 143.067657][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.110606][ T55] usb 4-1: Product: syz [ 143.118996][ T55] usb 4-1: Manufacturer: syz [ 143.143547][ T55] usb 4-1: SerialNumber: syz [ 143.168881][ T55] usb 4-1: config 0 descriptor?? [ 143.197483][ T55] usb 4-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I [ 143.386061][ T6752] syz.1.346 (6752) used obsolete PPPIOCDETACH ioctl [ 143.386267][ T55] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 143.761297][ T6764] delete_channel: no stack [ 143.893380][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.355'. [ 144.106192][ T55] usb 4-1: device descriptor read/64, error -71 [ 144.224788][ T6781] loop1: detected capacity change from 0 to 2048 [ 144.240092][ T6781] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 144.278305][ T6781] NILFS (loop1): mounting unchecked fs [ 144.314256][ T6251] udevd[6251]: incorrect nilfs2 checksum on /dev/loop1 [ 144.347302][ T6781] NILFS (loop1): recovery complete [ 144.373675][ T6785] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.395179][ T55] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 144.808442][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'. [ 144.853933][ T55] usb 4-1: failed to restore interface 50 altsetting 4 (error=-71) [ 144.885887][ T55] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 144.909518][ T55] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 144.919754][ T9] usb 4-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 144.939560][ T9] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 144.962963][ T55] usb 4-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I [ 144.983566][ T55] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 145.009832][ T55] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 145.014863][ T6799] loop1: detected capacity change from 0 to 764 [ 145.047765][ T55] usb 4-1: USB disconnect, device number 4 [ 145.427771][ T6791] loop2: detected capacity change from 0 to 32768 [ 145.452979][ T6791] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.363 (6791) [ 145.527630][ T6791] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 145.554443][ T6791] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 145.593867][ T6791] BTRFS info (device loop2): using free space tree [ 145.813746][ T6791] BTRFS info (device loop2): enabling ssd optimizations [ 145.860229][ T6791] BTRFS info (device loop2): auto enabling async discard [ 146.064307][ T55] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 146.137538][ T6835] loop1: detected capacity change from 0 to 256 [ 146.150211][ T6835] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfb920961, utbl_chksum : 0xe619d30d) [ 146.263799][ T55] usb 1-1: Using ep0 maxpacket: 16 [ 146.267353][ T55] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 146.267386][ T55] usb 1-1: config 0 has no interface number 0 [ 146.267472][ T55] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 146.267504][ T55] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 146.269726][ T55] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 146.269759][ T55] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 146.269783][ T55] usb 1-1: Product: syz [ 146.269800][ T55] usb 1-1: SerialNumber: syz [ 146.282969][ T55] usb 1-1: config 0 descriptor?? [ 146.290871][ T55] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 146.306714][ T55] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input5 [ 146.308819][ T5795] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 146.581157][ T6839] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.646341][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 146.648273][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 146.648462][ T2128] usb 1-1: USB disconnect, device number 8 [ 146.648502][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 146.648522][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 146.679017][ T2128] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 146.983968][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.379'. [ 147.325201][ T6853] loop1: detected capacity change from 0 to 1024 [ 147.371463][ T6853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.434957][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 147.486652][ T6862] loop2: detected capacity change from 0 to 4096 [ 147.608269][ T6862] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 147.638872][ T6862] ntfs3: loop2: Failed to load $Extend (-22). [ 147.660340][ T6862] ntfs3: loop2: Failed to initialize $Extend. [ 147.674022][ T8] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 147.700294][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.724750][ T8] usb 4-1: config 0 descriptor?? [ 147.749776][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.834462][ T28] audit: type=1800 audit(1753347493.128:11): pid=6862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.389" name="file2" dev="loop2" ino=31 res=0 errno=0 [ 148.169156][ T8] ath6kl: Unsupported hardware version: 0x0 [ 148.213965][ T8] ath6kl: Failed to init ath6kl core: -22 [ 148.247616][ T8] ath6kl_usb: probe of 4-1:0.0 failed with error -22 [ 148.442391][ T8] usb 4-1: USB disconnect, device number 5 [ 149.370707][ T6874] loop0: detected capacity change from 0 to 40427 [ 149.414110][ T6874] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x7 [ 149.442995][ T6874] F2FS-fs (loop0): invalid crc value [ 149.479966][ T6874] F2FS-fs (loop0): Found nat_bits in checkpoint [ 149.686797][ T6911] loop1: detected capacity change from 0 to 4096 [ 149.711004][ T6874] F2FS-fs (loop0): Start checkpoint disabled! [ 149.727387][ T6911] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 149.783599][ T6874] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 149.864995][ T6911] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 149.871669][ T6911] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 150.034331][ T6911] ntfs3: loop1: ino=1e, "file1" encrypted i/o not supported [ 150.043633][ T28] audit: type=1800 audit(1753347495.328:12): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.404" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 150.079254][ T6911] ntfs3: loop1: ino=1e, "file1" encrypted i/o not supported [ 150.198160][ T12] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 150.263757][ T5788] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 150.296959][ T5788] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 150.321894][ T5788] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 150.337592][ T3438] kworker/u4:8: attempt to access beyond end of device [ 150.337592][ T3438] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 150.351796][ T12] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 150.385708][ T3438] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 150.398422][ T3438] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 150.574515][ T6933] loop2: detected capacity change from 0 to 1024 [ 150.629967][ T6933] hfsplus: bad catalog entry type [ 150.671918][ T3463] hfsplus: b-tree write err: -5, ino 4 [ 151.000718][ T6943] IPVS: Error joining to the multicast group [ 151.261530][ T6951] loop1: detected capacity change from 0 to 64 [ 151.307601][ T6951] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 151.757142][ T6963] loop3: detected capacity change from 0 to 512 [ 151.821195][ T6963] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 151.884017][ T6963] EXT4-fs (loop3): orphan cleanup on readonly fs [ 151.946016][ T6963] EXT4-fs error (device loop3): ext4_quota_enable:7129: inode #15: comm syz.3.423: iget: bad i_size value: 360287970189639690 [ 152.008451][ T6963] EXT4-fs error (device loop3): ext4_quota_enable:7132: comm syz.3.423: Bad quota inode: 15, type: 2 [ 152.039560][ T6963] EXT4-fs warning (device loop3): ext4_enable_quotas:7173: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 152.063256][ T6963] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 152.081549][ T6963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.225360][ T6963] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 152.260061][ T6977] binder: 6976:6977 ioctl c00c620f 200000000500 returned -22 [ 152.284790][ T6963] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 152.355811][ T6963] EXT4-fs error (device loop3): ext4_quota_enable:7129: inode #15: comm syz.3.423: iget: bad i_size value: 360287970189639690 [ 152.420152][ T6963] EXT4-fs error (device loop3): ext4_quota_enable:7132: comm syz.3.423: Bad quota inode: 15, type: 2 [ 152.435470][ T6963] EXT4-fs warning (device loop3): ext4_enable_quotas:7173: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 152.480725][ T6949] loop2: detected capacity change from 0 to 40427 [ 152.571022][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.585296][ T6949] F2FS-fs (loop2): Found nat_bits in checkpoint [ 152.752199][ T6990] loop0: detected capacity change from 0 to 1024 [ 152.760146][ T6949] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 153.102566][ T6999] loop0: detected capacity change from 0 to 256 [ 153.161344][ T5795] syz-executor: attempt to access beyond end of device [ 153.161344][ T5795] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 153.178475][ T5795] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 153.250794][ T6995] loop1: detected capacity change from 0 to 4096 [ 153.303076][ T6995] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 153.696376][ T5798] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 153.709133][ T5798] Bluetooth: hci2: Injecting HCI hardware error event [ 153.718934][ T50] Bluetooth: hci2: hardware error 0x00 [ 154.396989][ T7006] loop0: detected capacity change from 0 to 32768 [ 155.083731][ T7012] loop3: detected capacity change from 0 to 32768 [ 155.148167][ T7012] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 155.263695][ T7012] XFS (loop3): Ending clean mount [ 155.268100][ T7014] loop1: detected capacity change from 0 to 32768 [ 155.400372][ T7018] loop2: detected capacity change from 0 to 32768 [ 155.482321][ T7018] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 155.601520][ T7018] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 155.632013][ T5792] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 155.853613][ T50] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 155.975343][ T7037] loop0: detected capacity change from 0 to 512 [ 156.055693][ T7037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 156.059392][ T5795] ocfs2: Unmounting device (7,2) on (node local) [ 156.113822][ T7037] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.252496][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 156.655442][ T7049] loop2: detected capacity change from 0 to 256 [ 157.232270][ T7059] loop0: detected capacity change from 0 to 16 [ 157.257132][ T7059] erofs: (device loop0): mounted with root inode @ nid 36. [ 157.301896][ T28] audit: type=1800 audit(1753347502.588:13): pid=7059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.455" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 157.322216][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.512468][ T7065] netlink: 'syz.1.465': attribute type 5 has an invalid length. [ 158.281090][ T7090] loop1: detected capacity change from 0 to 512 [ 158.306485][ T7088] loop0: detected capacity change from 0 to 4096 [ 158.426840][ T7090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 158.474503][ T7090] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.629314][ T28] audit: type=1800 audit(1753347503.908:14): pid=7088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.463" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 158.751727][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 159.170971][ T7081] loop3: detected capacity change from 0 to 32768 [ 159.249429][ T7081] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 159.493335][ T7083] loop2: detected capacity change from 0 to 32768 [ 159.563171][ T7083] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 159.755899][ T7081] XFS (loop3): Ending clean mount [ 159.772917][ T7081] XFS (loop3): Quotacheck needed: Please wait. [ 159.801820][ T7083] XFS (loop2): Ending clean mount [ 159.916587][ T7081] XFS (loop3): Quotacheck: Done. [ 160.116593][ T5795] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 160.197331][ T5792] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 161.034359][ T7153] printk: syz.2.480 (7153): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 161.121465][ T7157] loop0: detected capacity change from 0 to 1024 [ 161.139366][ T7157] hfsplus: unable to parse mount options [ 162.184961][ T7163] loop1: detected capacity change from 0 to 32768 [ 162.192999][ T7167] loop2: detected capacity change from 0 to 32768 [ 162.256932][ T7165] loop0: detected capacity change from 0 to 32768 [ 162.292099][ T7167] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 162.309986][ T7163] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 162.324012][ T7165] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 162.479855][ T7167] XFS (loop2): Ending clean mount [ 162.622371][ T7163] XFS (loop1): Ending clean mount [ 162.636912][ T7165] XFS (loop0): Ending clean mount [ 162.670499][ T7165] XFS (loop0): Quotacheck needed: Please wait. [ 162.709164][ T5795] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 162.871233][ T7165] XFS (loop0): Quotacheck: Done. [ 162.918294][ T5788] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 163.196696][ T5793] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 163.478936][ T7205] loop3: detected capacity change from 0 to 1024 [ 164.673652][ T5880] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 164.674965][ T7223] loop1: detected capacity change from 0 to 32768 [ 164.709894][ T7223] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 164.750170][ T7223] XFS (loop1): Ending clean mount [ 164.873670][ T5880] usb 1-1: Using ep0 maxpacket: 32 [ 164.881463][ T5788] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 164.891164][ T5880] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 164.913689][ T5880] usb 1-1: config 0 has an invalid interface number: 164 but max is 0 [ 164.922014][ T5880] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 164.942849][ T5880] usb 1-1: config 0 has no interface number 0 [ 164.949348][ T5880] usb 1-1: config 0 has no interface number 1 [ 164.955581][ T5880] usb 1-1: too many endpoints for config 0 interface 164 altsetting 124: 110, using maximum allowed: 30 [ 164.967037][ T5880] usb 1-1: config 0 interface 164 altsetting 124 has 0 endpoint descriptors, different from the interface descriptor's value: 110 [ 164.989201][ T5880] usb 1-1: config 0 interface 50 has no altsetting 0 [ 165.006597][ T5880] usb 1-1: config 0 interface 164 has no altsetting 0 [ 165.020927][ T5880] usb 1-1: New USB device found, idVendor=0baf, idProduct=00f6, bcdDevice=a8.4a [ 165.033649][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.041799][ T5880] usb 1-1: Product: syz [ 165.046164][ T5880] usb 1-1: Manufacturer: syz [ 165.050890][ T5880] usb 1-1: SerialNumber: syz [ 165.058785][ T5880] usb 1-1: config 0 descriptor?? [ 165.071172][ T5880] usb 1-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I [ 165.248788][ T5880] usb 1-1: reset high-speed USB device number 9 using dummy_hcd [ 165.393354][ T7244] loop3: detected capacity change from 0 to 40427 [ 165.402294][ T7244] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 165.409157][ T7244] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 165.431236][ T7244] F2FS-fs (loop3): Found nat_bits in checkpoint [ 165.501129][ T7244] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 165.508759][ T7244] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 165.622574][ T5792] syz-executor: attempt to access beyond end of device [ 165.622574][ T5792] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.640361][ T5792] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 165.963628][ T5880] usb 1-1: device descriptor read/64, error -71 [ 166.263623][ T5880] usb 1-1: reset high-speed USB device number 9 using dummy_hcd [ 166.270582][ T7252] loop3: detected capacity change from 0 to 512 [ 166.329362][ T7252] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 166.345785][ T7250] loop2: detected capacity change from 0 to 32768 [ 166.354109][ T7252] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 166.365584][ T7252] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.510: Corrupt directory, running e2fsck is recommended [ 166.385499][ T7252] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -12 [ 166.394272][ T7252] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.510: corrupted in-inode xattr: invalid ea_ino [ 166.436863][ T7250] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 166.495284][ T7252] EXT4-fs (loop3): Remounting filesystem read-only [ 166.515225][ T7252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.549752][ T7250] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 166.661258][ T7252] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 166.717107][ T5880] usb 1-1: failed to restore interface 50 altsetting 4 (error=-71) [ 166.730496][ T5795] ocfs2: Unmounting device (7,2) on (node local) [ 166.736388][ T5880] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 166.752797][ T5880] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 166.773295][ T5880] usb 1-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I [ 166.784895][ T5880] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 166.792783][ T5880] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 166.802746][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.812201][ T5880] usb 1-1: USB disconnect, device number 9 [ 167.113411][ T7266] loop2: detected capacity change from 0 to 65 [ 167.129577][ T7266] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 167.617695][ T7270] loop2: detected capacity change from 0 to 4096 [ 167.635976][ T7270] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 167.950564][ T7264] loop1: detected capacity change from 0 to 40427 [ 167.972088][ T7264] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 167.982357][ T7264] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 168.020715][ T7264] F2FS-fs (loop1): invalid crc value [ 168.063148][ T7264] F2FS-fs (loop1): Found nat_bits in checkpoint [ 168.208901][ T7264] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 168.226361][ T7264] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 168.238571][ T7272] loop0: detected capacity change from 0 to 32768 [ 168.258502][ T7272] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.518 (7272) [ 168.303677][ T7272] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 168.327442][ T7272] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 168.353689][ T7272] BTRFS info (device loop0): use zlib compression, level 3 [ 168.383359][ T7272] BTRFS info (device loop0): using free space tree [ 168.673840][ T7272] BTRFS info (device loop0): enabling ssd optimizations [ 168.681076][ T7272] BTRFS info (device loop0): auto enabling async discard [ 169.116896][ T5793] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 169.357583][ T7285] loop2: detected capacity change from 0 to 32768 [ 169.392396][ T7285] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.520 (7285) [ 169.458468][ T7285] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.518251][ T7285] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 169.572413][ T7285] BTRFS info (device loop2): using free space tree [ 169.697890][ T7310] loop1: detected capacity change from 0 to 2048 [ 169.793709][ T7310] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.873902][ T7285] BTRFS info (device loop2): enabling ssd optimizations [ 169.880936][ T7285] BTRFS info (device loop2): auto enabling async discard [ 169.925879][ T7310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.145705][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.211997][ T5795] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 170.269300][ T7333] loop3: detected capacity change from 0 to 512 [ 170.319696][ T7333] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.387579][ T7333] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.487354][ T7333] EXT4-fs error (device loop3): __ext4_iget:5053: inode #11: block 1: comm syz.3.528: invalid block [ 170.544165][ T7333] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.528: couldn't read orphan inode 11 (err -117) [ 170.635828][ T7333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.664140][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 170.786586][ T7343] loop0: detected capacity change from 0 to 164 [ 170.864015][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 170.885494][ T27] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 170.907909][ T27] usb 2-1: config 0 has an invalid interface number: 164 but max is 0 [ 170.945905][ T27] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 170.954430][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.977052][ T27] usb 2-1: config 0 has no interface number 0 [ 170.983388][ T27] usb 2-1: config 0 has no interface number 1 [ 171.008859][ T27] usb 2-1: too many endpoints for config 0 interface 164 altsetting 124: 110, using maximum allowed: 30 [ 171.050734][ T27] usb 2-1: config 0 interface 164 altsetting 124 has 0 endpoint descriptors, different from the interface descriptor's value: 110 [ 171.116447][ T27] usb 2-1: config 0 interface 50 has no altsetting 0 [ 171.123233][ T27] usb 2-1: config 0 interface 164 has no altsetting 0 [ 171.133445][ T27] usb 2-1: New USB device found, idVendor=0baf, idProduct=00f6, bcdDevice=a8.4a [ 171.148934][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.157337][ T27] usb 2-1: Product: syz [ 171.161574][ T27] usb 2-1: Manufacturer: syz [ 171.166291][ T27] usb 2-1: SerialNumber: syz [ 171.174100][ T27] usb 2-1: config 0 descriptor?? [ 171.186345][ T27] usb 2-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I [ 171.363924][ T27] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 171.633616][ T5880] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 171.691163][ T7363] netlink: 48 bytes leftover after parsing attributes in process `syz.2.542'. [ 171.802556][ T7357] loop3: detected capacity change from 0 to 32768 [ 171.811019][ T7357] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.539 (7357) [ 171.825820][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.844612][ T5880] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 171.855482][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.867327][ T5880] usb 1-1: config 0 descriptor?? [ 171.890983][ T7357] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.902372][ T7357] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 171.912645][ T7357] BTRFS info (device loop3): using free space tree [ 171.962786][ T7357] BTRFS info (device loop3): enabling ssd optimizations [ 171.975918][ T7357] BTRFS info (device loop3): auto enabling async discard [ 172.061193][ T5792] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 172.083850][ T27] usb 2-1: device descriptor read/64, error -71 [ 172.351719][ T5880] elecom 0003:056E:00FF.0007: hidraw0: USB HID v0.00 Device [HID 056e:00ff] on usb-dummy_hcd.0-1/input0 [ 172.393648][ T27] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 172.529613][ T5880] usb 1-1: USB disconnect, device number 10 [ 172.822803][ T27] usb 2-1: failed to restore interface 50 altsetting 4 (error=-71) [ 172.831276][ T27] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 172.840527][ T27] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 172.851994][ T27] usb 2-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I [ 172.863009][ T27] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 172.871357][ T27] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 172.882300][ T27] usb 2-1: USB disconnect, device number 3 [ 173.250255][ T7389] loop2: detected capacity change from 0 to 8192 [ 173.285853][ T7389] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 173.324411][ T7389] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 173.335109][ T7389] REISERFS (device loop2): using ordered data mode [ 173.362506][ T7389] reiserfs: using flush barriers [ 173.416674][ T7389] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 173.434694][ T7389] REISERFS (device loop2): checking transaction log (loop2) [ 173.541994][ T7401] loop0: detected capacity change from 0 to 512 [ 173.597321][ T7401] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.683405][ T7401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 173.748645][ T7401] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.767289][ T7389] REISERFS (device loop2): Using tea hash to sort names [ 173.797401][ T7389] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 173.898464][ T7401] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 173.947853][ T7401] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 173.968380][ T7401] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.550: Failed to acquire dquot type 0 [ 174.090264][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 174.699270][ T7409] loop3: detected capacity change from 0 to 32768 [ 174.759881][ T7409] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.944100][ T7409] XFS (loop3): Ending clean mount [ 174.970052][ T7409] XFS (loop3): Quotacheck needed: Please wait. [ 175.125423][ T7409] XFS (loop3): Quotacheck: Done. [ 175.388593][ T5792] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.866458][ T7436] loop1: detected capacity change from 0 to 32768 [ 175.888657][ T7436] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.560 (7436) [ 175.921737][ T7436] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 175.956793][ T7436] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 175.967304][ T7436] BTRFS info (device loop1): using free space tree [ 176.072465][ T7436] BTRFS info (device loop1): enabling ssd optimizations [ 176.111361][ T7436] BTRFS info (device loop1): auto enabling async discard [ 176.241894][ T5788] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 176.519332][ T6251] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (6251) [ 176.619963][ T7469] loop3: detected capacity change from 0 to 65 [ 176.667369][ T7469] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 176.903620][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 177.093219][ T7472] loop1: detected capacity change from 0 to 4096 [ 177.103798][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 177.117222][ T27] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.149679][ T7459] loop0: detected capacity change from 0 to 32768 [ 177.151019][ T27] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.205873][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 177.206171][ T7459] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 177.227821][ T27] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 177.240202][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.264473][ T27] usb 3-1: config 0 descriptor?? [ 177.297705][ T7472] ntfs3: loop1: failed to convert "0080" to cp775 [ 177.342306][ T7472] ntfs3: loop1: failed to convert name for inode 1e. [ 177.535202][ T7459] XFS (loop0): Ending clean mount [ 177.577929][ T7459] XFS (loop0): Quotacheck needed: Please wait. [ 177.709099][ T27] steelseries 0003:1038:1410.0008: missing HID_OUTPUT_REPORT 0 [ 177.738566][ T7459] XFS (loop0): Quotacheck: Done. [ 177.919509][ T55] usb 3-1: USB disconnect, device number 4 [ 178.028179][ T5793] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 178.373396][ T7486] loop3: detected capacity change from 0 to 32768 [ 178.426902][ T7486] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 178.498973][ T7486] XFS (loop3): Ending clean mount [ 178.520675][ T7486] XFS (loop3): Quotacheck needed: Please wait. [ 178.615721][ T7486] XFS (loop3): Quotacheck: Done. [ 178.772833][ T5792] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 179.073413][ T28] audit: type=1326 audit(1753347524.358:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7504 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856578e9a9 code=0x7ffc0000 [ 179.170077][ T28] audit: type=1326 audit(1753347524.388:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7504 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f856578e9a9 code=0x7ffc0000 [ 179.221669][ T28] audit: type=1326 audit(1753347524.388:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7504 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856578e9a9 code=0x7ffc0000 [ 179.303849][ T28] audit: type=1326 audit(1753347524.388:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7504 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856578e9a9 code=0x7ffc0000 [ 179.602705][ T7519] loop0: detected capacity change from 0 to 1024 [ 179.682741][ T7503] loop2: detected capacity change from 0 to 40427 [ 179.705886][ T7503] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 179.759295][ T7503] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 179.808303][ T7503] F2FS-fs (loop2): invalid crc value [ 179.817349][ T39] hfsplus: b-tree write err: -5, ino 4 [ 179.885877][ T7503] F2FS-fs (loop2): Found nat_bits in checkpoint [ 180.071467][ T7503] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 180.081983][ T7503] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 180.124852][ T28] audit: type=1800 audit(1753347525.418:19): pid=7503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.577" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 180.588265][ T7545] loop0: detected capacity change from 0 to 512 [ 180.719767][ T7545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.774260][ T7545] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.889039][ T7545] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.597: bg 0: block 145: padding at end of block bitmap is not set [ 181.073920][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.422989][ T7569] overlayfs: missing 'lowerdir' [ 181.602801][ T7573] loop2: detected capacity change from 0 to 512 [ 181.613204][ T7573] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 181.658525][ T7573] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 181.677505][ T7558] loop1: detected capacity change from 0 to 32768 [ 181.700048][ T7573] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.607: corrupted in-inode xattr: overlapping e_value [ 181.722009][ T7573] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.607: couldn't read orphan inode 15 (err -117) [ 181.752743][ T7573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.760158][ T7558] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 181.790896][ T28] audit: type=1326 audit(1753347527.078:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7576 comm="syz.3.608" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43e7f8e9a9 code=0x0 [ 181.847498][ T28] audit: type=1800 audit(1753347527.118:21): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.607" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 181.949311][ T5788] ocfs2: Unmounting device (7,1) on (node local) [ 181.963247][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.198045][ T7582] loop2: detected capacity change from 0 to 4096 [ 182.211356][ T7582] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 182.295641][ T7582] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 182.307915][ T7582] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 182.349255][ T7582] ntfs3: loop2: ino=5, "/" directory corrupted [ 183.241199][ T7589] loop2: detected capacity change from 0 to 32768 [ 183.320665][ T7589] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 183.584208][ T7589] XFS (loop2): Ending clean mount [ 183.615431][ T7589] XFS (loop2): Quotacheck needed: Please wait. [ 183.731969][ T7589] XFS (loop2): Quotacheck: Done. [ 183.979068][ T5795] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 184.194525][ T7601] loop3: detected capacity change from 0 to 32768 [ 184.249933][ T7612] loop1: detected capacity change from 0 to 40427 [ 184.291503][ T7612] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 184.339588][ T7601] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 184.373193][ T7612] F2FS-fs (loop1): invalid crc value [ 184.457542][ T7624] loop2: detected capacity change from 0 to 512 [ 184.461263][ T7612] F2FS-fs (loop1): Found nat_bits in checkpoint [ 184.573647][ T7624] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 184.624039][ T7624] EXT4-fs warning (device loop2): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 184.671059][ T7612] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 184.700351][ T7624] EXT4-fs (loop2): mount failed [ 184.730207][ T5792] ocfs2: Unmounting device (7,3) on (node local) [ 184.791014][ T7612] syz.1.622: attempt to access beyond end of device [ 184.791014][ T7612] loop1: rw=524288, sector=45072, nr_sectors = 24 limit=40427 [ 184.804796][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'. [ 184.827667][ T7632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.627'. [ 184.838049][ T7632] netlink: 'syz.0.627': attribute type 19 has an invalid length. [ 184.874569][ T7612] syz.1.622: attempt to access beyond end of device [ 184.874569][ T7612] loop1: rw=0, sector=45072, nr_sectors = 8 limit=40427 [ 184.923553][ T28] audit: type=1800 audit(1753347530.208:22): pid=7612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.622" name="/" dev="loop1" ino=8 res=0 errno=0 [ 185.947889][ T7658] loop3: detected capacity change from 0 to 128 [ 185.992296][ T7660] loop0: detected capacity change from 0 to 512 [ 186.025254][ T7660] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 186.065741][ T7664] loop2: detected capacity change from 0 to 512 [ 186.074008][ T7660] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 186.075967][ T7658] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.172077][ T7660] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.642: corrupted in-inode xattr: overlapping e_value [ 186.184329][ T7658] ext4 filesystem being mounted at /162/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 186.192546][ T7664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.241384][ T7660] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.642: couldn't read orphan inode 15 (err -117) [ 186.300382][ T7664] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.312918][ T7660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.411093][ T28] audit: type=1800 audit(1753347531.698:23): pid=7660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.642" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 186.463991][ T5792] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.465157][ T7664] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.643: bg 0: block 145: padding at end of block bitmap is not set [ 186.606302][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.637143][ T7675] loop3: detected capacity change from 0 to 128 [ 186.710152][ T7675] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 186.755454][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.073579][ T5837] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 187.073989][ T7680] loop1: detected capacity change from 0 to 8192 [ 187.109137][ T7680] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 187.145522][ T7680] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 187.177985][ T7680] REISERFS (device loop1): using ordered data mode [ 187.198152][ T7688] loop3: detected capacity change from 0 to 512 [ 187.211125][ T7680] reiserfs: using flush barriers [ 187.229135][ T7680] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 187.275660][ T7688] EXT4-fs (loop3): Test dummy encryption mode enabled [ 187.283662][ T5837] usb 1-1: Using ep0 maxpacket: 16 [ 187.296421][ T5837] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.321254][ T7688] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #11: comm syz.3.652: iget: bad extra_isize 31 (inode size 256) [ 187.334583][ T5837] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.334618][ T5837] usb 1-1: config 0 interface 0 has no altsetting 0 [ 187.334658][ T5837] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 187.349321][ T7680] REISERFS (device loop1): checking transaction log (loop1) [ 187.354732][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.381071][ T7688] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.652: couldn't read orphan inode 11 (err -117) [ 187.391198][ T7690] loop2: detected capacity change from 0 to 2048 [ 187.394548][ T5837] usb 1-1: config 0 descriptor?? [ 187.458400][ T7688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.555790][ T7690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.609701][ T7680] REISERFS (device loop1): Using tea hash to sort names [ 187.623172][ T7680] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 187.659792][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.742374][ T7690] MPI: mpi too large (113288 bits) [ 187.870878][ T5837] redragon 0003:0C45:760B.0009: item fetching failed at offset 0/4 [ 187.876056][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.917498][ T5837] redragon: probe of 0003:0C45:760B.0009 failed with error -22 [ 188.101637][ T5837] usb 1-1: USB disconnect, device number 11 [ 188.443813][ T55] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 188.633652][ T55] usb 2-1: Using ep0 maxpacket: 32 [ 188.647519][ T55] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 188.675049][ T55] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 188.695114][ T55] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.728959][ T55] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 188.749724][ T55] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 188.766310][ T55] usb 2-1: Product: syz [ 188.772860][ T55] usb 2-1: Manufacturer: syz [ 188.780945][ T55] usb 2-1: SerialNumber: syz [ 188.800024][ T55] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input6 [ 188.837939][ T7722] Bluetooth: MGMT ver 1.22 [ 189.003013][ T7726] lo: entered promiscuous mode [ 189.024557][ T7725] lo: left promiscuous mode [ 189.087226][ T55] usb 2-1: USB disconnect, device number 4 [ 189.205215][ T55] appletouch 2-1:1.0: input: appletouch disconnected [ 189.418900][ T7736] loop3: detected capacity change from 0 to 512 [ 189.453693][ T7736] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 189.485615][ T7736] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 189.535448][ T7736] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.673: corrupted in-inode xattr: overlapping e_value [ 189.572675][ T7736] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.673: couldn't read orphan inode 15 (err -117) [ 189.610315][ T7736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.764711][ T28] audit: type=1800 audit(1753347535.058:24): pid=7736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.673" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 189.904206][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.112525][ T7756] loop3: detected capacity change from 0 to 128 [ 190.523728][ T55] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 190.572500][ T7772] loop1: detected capacity change from 0 to 512 [ 190.596278][ T7772] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 190.633669][ T7772] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 190.678650][ T7772] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.689: corrupted in-inode xattr: overlapping e_value [ 190.700580][ T7772] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.689: couldn't read orphan inode 15 (err -117) [ 190.753847][ T55] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 190.779487][ T7772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.802493][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.834702][ T55] usb 1-1: Product: syz [ 190.838960][ T55] usb 1-1: Manufacturer: syz [ 190.858018][ T55] usb 1-1: SerialNumber: syz [ 190.866096][ T7782] netlink: 52 bytes leftover after parsing attributes in process `syz.2.694'. [ 190.872081][ T28] audit: type=1800 audit(1753347536.158:25): pid=7772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.689" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 190.895661][ T7782] netlink: 'syz.2.694': attribute type 1 has an invalid length. [ 190.934361][ T55] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 190.982451][ T8] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 191.052323][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.224313][ T7787] loop2: detected capacity change from 0 to 512 [ 191.304073][ T7787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.383223][ T7787] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.534692][ T55] usb 1-1: USB disconnect, device number 12 [ 191.616041][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.642255][ T7783] loop3: detected capacity change from 0 to 32768 [ 191.657535][ T7783] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.693 (7783) [ 191.692149][ T7783] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 191.724312][ T7783] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 191.748817][ T7783] BTRFS info (device loop3): force zlib compression, level 3 [ 191.758820][ T5837] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 191.770439][ T7783] BTRFS info (device loop3): force clearing of disk cache [ 191.782569][ T7783] BTRFS info (device loop3): setting nodatasum [ 191.793005][ T7783] BTRFS info (device loop3): allowing degraded mounts [ 191.809429][ T7783] BTRFS info (device loop3): enabling disk space caching [ 191.820684][ T7783] BTRFS info (device loop3): disk space caching is enabled [ 191.917080][ T7783] BTRFS info (device loop3): auto enabling async discard [ 191.932742][ T7783] BTRFS info (device loop3): rebuilding free space tree [ 191.970084][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.998640][ T5837] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.051025][ T5837] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 192.061847][ T7783] BTRFS info (device loop3): disabling free space tree [ 192.069979][ T7783] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 192.080142][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.088433][ T7783] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 192.102937][ T5837] usb 2-1: config 0 descriptor?? [ 192.234964][ T7815] loop2: detected capacity change from 0 to 512 [ 192.244458][ T7815] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 192.308489][ T7815] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 192.334558][ T8] usb 1-1: Service connection timeout for: 256 [ 192.340870][ T8] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 192.356962][ T7783] BTRFS info (device loop3): balance: start -d -m [ 192.366435][ T8] ath9k_htc: Failed to initialize the device [ 192.376573][ T7815] EXT4-fs (loop2): 1 truncate cleaned up [ 192.384098][ T55] usb 1-1: ath9k_htc: USB layer deinitialized [ 192.398730][ T7815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.423138][ T7783] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 192.567997][ T5837] lenovo 0003:17EF:6067.000A: unknown main item tag 0xd [ 192.589591][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.596538][ T5837] lenovo 0003:17EF:6067.000A: hidraw0: USB HID v0.01 Device [HID 17ef:6067] on usb-dummy_hcd.1-1/input0 [ 192.783284][ T7783] BTRFS info (device loop3): balance: canceled [ 192.786052][ T5837] usb 2-1: USB disconnect, device number 5 [ 192.828019][ T7827] loop2: detected capacity change from 0 to 256 [ 192.842997][ T7823] fido_id[7823]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 192.892821][ T5792] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 192.912568][ T7827] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 193.753889][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 193.763695][ T7847] loop0: detected capacity change from 0 to 512 [ 193.797819][ T7847] EXT4-fs: Ignoring removed orlov option [ 193.883675][ T7847] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 193.939820][ T7847] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 193.953616][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 193.984922][ T8] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.988929][ T7847] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.712: corrupted in-inode xattr: e_value size too large [ 193.996360][ T8] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.059827][ T7847] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.712: couldn't read orphan inode 15 (err -117) [ 194.064547][ T8] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.098718][ T7847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.113511][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 194.125345][ T8] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 194.182426][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.229615][ T8] usb 3-1: config 0 descriptor?? [ 194.441914][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.588408][ T7868] netlink: 24 bytes leftover after parsing attributes in process `syz.3.718'. [ 194.689494][ T8] lenovo 0003:17EF:60EE.000B: unknown main item tag 0xe [ 194.765079][ T8] lenovo 0003:17EF:60EE.000B: hidraw0: USB HID vff.fd Device [HID 17ef:60ee] on usb-dummy_hcd.2-1/input0 [ 194.887022][ T8] lenovo 0003:17EF:60EE.000B: Failed to switch middle button: -71 [ 194.891441][ T7880] loop3: detected capacity change from 0 to 512 [ 194.904164][ T8] lenovo 0003:17EF:60EE.000B: Fn-lock setting failed: -71 [ 194.929342][ T8] lenovo 0003:17EF:60EE.000B: Sensitivity setting failed: -71 [ 194.962159][ T7880] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 194.995852][ T8] usb 3-1: USB disconnect, device number 5 [ 195.087316][ T7880] EXT4-fs (loop3): 1 truncate cleaned up [ 195.089953][ T7881] fido_id[7881]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 195.132046][ T7880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.359309][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.711120][ T7902] loop1: detected capacity change from 0 to 1024 [ 195.817803][ T7902] hfsplus: bad catalog entry type [ 195.864902][ T7910] usb usb8: usbfs: process 7910 (syz.0.731) did not claim interface 0 before use [ 195.963917][ T3463] hfsplus: b-tree write err: -5, ino 4 [ 196.096822][ T7917] loop3: detected capacity change from 0 to 256 [ 196.155659][ T7917] FAT-fs (loop3): Directory bread(block 1285) failed [ 196.291162][ T7917] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 196.764966][ T7937] loop0: detected capacity change from 0 to 512 [ 196.804536][ T7937] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.741: bad orphan inode 15 [ 196.825379][ T7937] ext4_test_bit(bit=14, block=5) = 0 [ 196.832092][ T7937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.969149][ T7945] netlink: 36 bytes leftover after parsing attributes in process `syz.3.746'. [ 197.030063][ T7951] loop2: detected capacity change from 0 to 16 [ 197.058476][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.108985][ T7951] erofs: (device loop2): mounted with root inode @ nid 36. [ 197.633619][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 197.829218][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 197.847454][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 197.868394][ T8] usb 3-1: config 12 has an invalid interface number: 184 but max is 0 [ 197.903884][ T8] usb 3-1: config 12 has no interface number 0 [ 197.921303][ T8] usb 3-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 197.968550][ T8] usb 3-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 197.983725][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.992402][ T8] usb 3-1: Product: syz [ 198.006746][ T8] usb 3-1: Manufacturer: syz [ 198.012097][ T8] usb 3-1: SerialNumber: syz [ 198.288191][ T8] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 198.399539][ T7988] loop3: detected capacity change from 0 to 1024 [ 198.524376][ T8] usb 3-1: USB disconnect, device number 6 [ 198.628073][ T5806] udevd[5806]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.694013][ T7992] loop1: detected capacity change from 0 to 1024 [ 198.785944][ T7998] loop0: detected capacity change from 0 to 64 [ 198.915398][ T3463] hfsplus: b-tree write err: -5, ino 4 [ 199.096493][ T28] audit: type=1326 audit(1753347544.388:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.0.772" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f201ff8e9a9 code=0x0 [ 199.118002][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.469213][ T8016] loop3: detected capacity change from 0 to 64 [ 199.778463][ T8024] loop3: detected capacity change from 0 to 4096 [ 199.941438][ T28] audit: type=1800 audit(1753347545.228:27): pid=8024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.781" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 200.497995][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.505057][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.522807][ T8021] loop1: detected capacity change from 0 to 32768 [ 200.554548][ T8021] (syz.1.779,8021,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 200.607962][ T8021] (syz.1.779,8021,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 200.614420][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 200.708460][ T8021] JBD2: Ignoring recovery information on journal [ 200.825825][ T8] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 200.839677][ T8] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 200.870966][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.871514][ T8021] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 200.924309][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.943542][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.961863][ T8] usb 4-1: Product: syz [ 200.976879][ T8] usb 4-1: Manufacturer: syz [ 200.981563][ T8] usb 4-1: SerialNumber: syz [ 201.338268][ T5788] ocfs2: Unmounting device (7,1) on (node local) [ 201.457684][ T8] usb 4-1: 0:2 : does not exist [ 201.517849][ T8] usb 4-1: USB disconnect, device number 6 [ 201.554267][ T8065] loop0: detected capacity change from 0 to 512 [ 201.586030][ T6251] udevd[6251]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.340714][ T8087] loop1: detected capacity change from 0 to 2364 [ 202.873053][ T8079] loop2: detected capacity change from 0 to 32768 [ 202.885020][ T8099] loop1: detected capacity change from 0 to 512 [ 202.937621][ T8099] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 202.982854][ T8099] EXT4-fs warning (device loop1): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 203.015330][ T8099] EXT4-fs (loop1): mount failed [ 203.247595][ T8109] loop0: detected capacity change from 0 to 256 [ 203.274939][ T8109] exfat: Deprecated parameter 'namecase' [ 203.377052][ T8109] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 203.698224][ T8120] netlink: 'syz.2.823': attribute type 10 has an invalid length. [ 203.725386][ T8120] netlink: 'syz.2.823': attribute type 19 has an invalid length. [ 203.733208][ T8120] netlink: 156 bytes leftover after parsing attributes in process `syz.2.823'. [ 203.780818][ T8122] loop1: detected capacity change from 0 to 1024 [ 203.800903][ T8124] loop3: detected capacity change from 0 to 512 [ 203.829767][ T8122] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 203.863796][ T8124] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 203.873696][ T8124] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 203.923929][ T8124] EXT4-fs (loop3): 1 truncate cleaned up [ 203.931017][ T8124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.976610][ T8122] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.824: Invalid block bitmap block 0 in block_group 0 [ 204.055618][ T8122] Quota error (device loop1): write_blk: dquota write failed [ 204.093714][ T8122] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 204.120501][ T8122] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.824: Failed to acquire dquot type 0 [ 204.135456][ T8124] EXT4-fs: group quota file already specified [ 204.150245][ T8122] EXT4-fs error (device loop1): ext4_free_blocks:6681: comm syz.1.824: Freeing blocks not in datazone - block = 0, count = 4096 [ 204.205812][ T8122] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.824: Invalid inode bitmap blk 0 in block_group 0 [ 204.243801][ T3047] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-7 [ 204.263674][ T3047] EXT4-fs error (device loop1): ext4_release_dquot:6974: comm kworker/u4:7: Failed to release dquot type 0 [ 204.276367][ T8122] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 204.293955][ T8122] EXT4-fs (loop1): 1 orphan inode deleted [ 204.304911][ T8122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.309213][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.546687][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.729494][ T8126] loop0: detected capacity change from 0 to 32768 [ 204.765226][ T8126] (syz.0.825,8126,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 204.832071][ T8126] (syz.0.825,8126,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 204.916554][ T8126] (syz.0.825,8126,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 204.966062][ T8147] CUSE: info not properly terminated [ 205.018069][ T8126] JBD2: Ignoring recovery information on journal [ 205.117337][ T8126] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 205.525826][ T5793] ocfs2: Unmounting device (7,0) on (node local) [ 205.616924][ T2128] usb 1-1: [UEAGLE-ATM] firmware is not available [ 205.616936][ T5850] usb 4-1: [UEAGLE-ATM] firmware is not available [ 205.616994][ T9] ------------[ cut here ]------------ [ 205.624594][ T5779] usb 2-1: [UEAGLE-ATM] firmware is not available [ 205.631134][ T9] sysfs group 'power' not found for kobject 'ueagle-atm!eagleI.fw' [ 205.651992][ T5880] usb 2-1: [UEAGLE-ATM] firmware is not available [ 205.653949][ T9] WARNING: CPU: 0 PID: 9 at fs/sysfs/group.c:284 sysfs_remove_group+0x178/0x2a0 [ 205.663663][ T23] usb 1-1: [UEAGLE-ATM] firmware is not available [ 205.667662][ T9] Modules linked in: [ 205.678017][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.6.100-syzkaller #0 [ 205.686205][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.696579][ T9] Workqueue: events request_firmware_work_func [ 205.702818][ T9] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 205.708751][ T9] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 4a d2 c9 ff 49 8b 17 48 c7 c7 80 b3 ba 8a 48 89 de e8 88 01 3d ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 22 8c 72 ff [ 205.729311][ T9] RSP: 0018:ffffc900000e7800 EFLAGS: 00010246 [ 205.733708][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 205.735927][ T9] RAX: 1ffde2c3327d1900 RBX: ffffffff8b214da0 RCX: ffff88801a278000 [ 205.751094][ T9] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 205.759224][ T9] RBP: dffffc0000000000 R08: ffffffff90da3567 R09: 1ffffffff21b46ac [ 205.767336][ T9] R10: dffffc0000000000 R11: fffffbfff21b46ad R12: 1ffffffff16429b8 [ 205.775509][ T9] R13: 0000000000000001 R14: ffff88805edb4d90 R15: ffff88802b569008 [ 205.783827][ T9] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 205.792880][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.799636][ T9] CR2: 00007f43e81b7bac CR3: 000000006231c000 CR4: 00000000003506f0 [ 205.807724][ T9] Call Trace: [ 205.811041][ T9] [ 205.814119][ T9] ? sysfs_unmerge_group+0x10d/0x130 [ 205.819460][ T9] device_del+0x251/0x900 [ 205.823906][ T9] ? kill_device+0x160/0x160 [ 205.829151][ T9] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 205.835370][ T9] ? _raw_spin_unlock+0x40/0x40 [ 205.840456][ T9] ? complete_all+0xd0/0x1d0 [ 205.845210][ T9] firmware_fallback_sysfs+0x682/0x940 [ 205.850759][ T9] _request_firmware+0xed9/0x1510 [ 205.856142][ T9] ? request_firmware+0x50/0x50 [ 205.861106][ T9] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 205.867351][ T9] ? read_lock_is_recursive+0x20/0x20 [ 205.872813][ T9] request_firmware_work_func+0xb0/0x1b0 [ 205.878585][ T9] ? process_scheduled_works+0x957/0x15b0 [ 205.884420][ T9] process_scheduled_works+0xa45/0x15b0 [ 205.890167][ T9] ? assign_work+0x400/0x400 [ 205.894939][ T9] ? assign_work+0x39e/0x400 [ 205.899605][ T9] worker_thread+0xa55/0xfc0 [ 205.904374][ T9] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 205.910373][ T9] ? _raw_spin_unlock+0x40/0x40 [ 205.915388][ T9] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 205.921371][ T9] kthread+0x2fa/0x390 [ 205.925568][ T9] ? pr_cont_work+0x560/0x560 [ 205.930939][ T9] ? kthread_blkcg+0xd0/0xd0 [ 205.935907][ T9] ret_from_fork+0x48/0x80 [ 205.940401][ T9] ? kthread_blkcg+0xd0/0xd0 [ 205.943902][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 205.945119][ T9] ret_from_fork_asm+0x11/0x20 [ 205.953139][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 205.954964][ T9] [ 205.954980][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 205.954990][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.6.100-syzkaller #0 [ 205.955011][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.955024][ T9] Workqueue: events request_firmware_work_func [ 205.955061][ T9] Call Trace: [ 205.955069][ T9] [ 205.955076][ T9] dump_stack_lvl+0x16c/0x230 [ 205.955106][ T9] ? show_regs_print_info+0x20/0x20 [ 205.955129][ T9] ? load_image+0x3b0/0x3b0 [ 205.955176][ T9] panic+0x2c0/0x710 [ 205.955211][ T9] ? bpf_jit_dump+0xd0/0xd0 [ 205.955257][ T9] ? ret_from_fork_asm+0x11/0x20 [ 205.955291][ T9] __warn+0x2e0/0x470 [ 205.955316][ T9] ? sysfs_remove_group+0x178/0x2a0 [ 205.955338][ T9] ? sysfs_remove_group+0x178/0x2a0 [ 205.955359][ T9] report_bug+0x2be/0x4f0 [ 205.955388][ T9] ? sysfs_remove_group+0x178/0x2a0 [ 205.955412][ T9] ? sysfs_remove_group+0x178/0x2a0 [ 205.955435][ T9] ? sysfs_remove_group+0x17a/0x2a0 [ 205.955456][ T9] handle_bug+0xcf/0x120 [ 205.955484][ T9] exc_invalid_op+0x1a/0x50 [ 205.955511][ T9] asm_exc_invalid_op+0x1a/0x20 [ 205.955546][ T9] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 205.955569][ T9] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 4a d2 c9 ff 49 8b 17 48 c7 c7 80 b3 ba 8a 48 89 de e8 88 01 3d ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 22 8c 72 ff [ 205.955590][ T9] RSP: 0018:ffffc900000e7800 EFLAGS: 00010246 [ 205.955610][ T9] RAX: 1ffde2c3327d1900 RBX: ffffffff8b214da0 RCX: ffff88801a278000 [ 205.955628][ T9] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 205.955642][ T9] RBP: dffffc0000000000 R08: ffffffff90da3567 R09: 1ffffffff21b46ac [ 205.955658][ T9] R10: dffffc0000000000 R11: fffffbfff21b46ad R12: 1ffffffff16429b8 [ 205.955675][ T9] R13: 0000000000000001 R14: ffff88805edb4d90 R15: ffff88802b569008 [ 205.955711][ T9] ? sysfs_unmerge_group+0x10d/0x130 [ 205.955738][ T9] device_del+0x251/0x900 [ 205.955783][ T9] ? kill_device+0x160/0x160 [ 205.955812][ T9] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 205.955848][ T9] ? _raw_spin_unlock+0x40/0x40 [ 205.955884][ T9] ? complete_all+0xd0/0x1d0 [ 205.955914][ T9] firmware_fallback_sysfs+0x682/0x940 [ 205.955965][ T9] _request_firmware+0xed9/0x1510 [ 205.956022][ T9] ? request_firmware+0x50/0x50 [ 205.956058][ T9] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 205.956088][ T9] ? read_lock_is_recursive+0x20/0x20 [ 205.956120][ T9] request_firmware_work_func+0xb0/0x1b0 [ 205.956161][ T9] ? process_scheduled_works+0x957/0x15b0 [ 205.956189][ T9] process_scheduled_works+0xa45/0x15b0 [ 205.956261][ T9] ? assign_work+0x400/0x400 [ 205.956297][ T9] ? assign_work+0x39e/0x400 [ 205.956330][ T9] worker_thread+0xa55/0xfc0 [ 205.956358][ T9] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 205.956394][ T9] ? _raw_spin_unlock+0x40/0x40 [ 205.956424][ T9] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 205.956482][ T9] kthread+0x2fa/0x390 [ 205.956502][ T9] ? pr_cont_work+0x560/0x560 [ 205.956530][ T9] ? kthread_blkcg+0xd0/0xd0 [ 205.956551][ T9] ret_from_fork+0x48/0x80 [ 205.956577][ T9] ? kthread_blkcg+0xd0/0xd0 [ 205.956600][ T9] ret_from_fork_asm+0x11/0x20 [ 205.956648][ T9] [ 205.966674][ T9] Kernel Offset: disabled