last executing test programs: 3.955817319s ago: executing program 0 (id=3650): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 3.874270177s ago: executing program 0 (id=3652): r0 = add_key$keyring(&(0x7f0000001100), &(0x7f0000001140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$revoke(0x3, r0) keyctl$KEYCTL_WATCH_KEY(0xb, r0, 0xffffffffffffffff, 0x0) 3.810511834s ago: executing program 1 (id=3654): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) r0 = getpgid(0x0) setpriority(0x0, r0, 0x0) 3.681707008s ago: executing program 1 (id=3656): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c0780a402a1101007f9e0102030109022400010000000009040000020a6bc50009f40522000000000009059232"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009c147010861246205bb4018203010902240001000000000904000002ff0401000905"], 0x0) 3.68096112s ago: executing program 0 (id=3666): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000ecc5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.419634329s ago: executing program 3 (id=3690): keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000040)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa\xff\xff\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) 2.29377868s ago: executing program 3 (id=3681): mlockall(0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000003, 0x5d031, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x7, &(0x7f00000005c0)=0x3, &(0x7f0000000680)=0x1) 2.215900533s ago: executing program 3 (id=3682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000028000480240001800b00010072656a6563740000140002800800014000000000050002000000000008000b40000000000900010073797a300000000014000000110001"], 0xd8}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="195df410d42477b6d4f11b3286dd60aac4e000442c00fe800000000000000000000000000000fe8000000000000000000800000000002b0088"], 0x0) 2.026679232s ago: executing program 3 (id=3695): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)={0x18, r1, 0x1, 0x0, 0x0, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) 1.959417173s ago: executing program 3 (id=3686): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x45, {0x45, 0x0, "3b651763da0333ddbb3c8e9187148f258ce1c51708e13e0962e15c69cc465ec4c94d51a60f84a4bfa30c43ce1055c03a0000000000000000d7129a6ccb2addb0dc0445"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.433492812s ago: executing program 4 (id=3700): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f757365725f78617474722c00ad180473920acf86b29615467897026a7d6c238f430bf00453c3844d06bcfe71c83c4b837a159d475402d6343453"], 0x0, 0x17c, &(0x7f0000000240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x18) 1.374504476s ago: executing program 4 (id=3701): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2208412, &(0x7f0000000b40)=ANY=[], 0x1, 0x5557, &(0x7f0000006440)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 1.199205205s ago: executing program 1 (id=3702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000028000480240001800b00010072656a6563740000140002800800014000000000050002000000000008000b40000000000900010073797a300000000014000000110001"], 0xd8}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="195df410d42477b6d4f11b3286dd60aac4e000442c00fe800000000000000000000000000000fe8000000000000000000800000000002b0088"], 0x0) 1.145914s ago: executing program 1 (id=3703): futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0x10b, 0x1, 0x0, &(0x7f0000000040), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000)=0x1, 0x0) 789.640875ms ago: executing program 4 (id=3705): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @printk={@x}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 717.082033ms ago: executing program 2 (id=3707): syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) ioctl$HIDIOCGRDESC(r0, 0x40305829, &(0x7f00000002c0)) 678.573081ms ago: executing program 2 (id=3708): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = msgget(0x2, 0x0) msgsnd(r0, 0x0, 0x0, 0x800) 562.715834ms ago: executing program 2 (id=3709): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x218018, &(0x7f0000000100)=ANY=[@ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f72676574006769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d", @ANYRESOCT=0x0, @ANYBLOB='uid='], 0xff, 0xc2d, &(0x7f00000001c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x80046c40, 0x0) 556.388206ms ago: executing program 0 (id=3710): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000600), 0x0, 0x5e7, &(0x7f0000000c00)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) 338.224949ms ago: executing program 0 (id=3711): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0xfffffffffffffe32, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x17, &(0x7f0000000000), 0x10) 337.926404ms ago: executing program 2 (id=3712): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)={0x0, "83ef331da5a4ccba747fe49ffb4fbd10379cc28c4a41ab8b8edf28edf79b35e1bceab3e066580d9c7e32a7ce5faacef7d6e07a1e1b54dfc89787a208cf4fddf1"}, 0x48, 0xfffffffffffffffd) keyctl$search(0xa, r1, &(0x7f00000007c0)='logon\x00', &(0x7f0000000800)={'syz', 0x2}, r0) 324.682203ms ago: executing program 4 (id=3713): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @loopback, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0xffffffffffffff27, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 238.853764ms ago: executing program 1 (id=3714): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 231.568145ms ago: executing program 3 (id=3716): syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKROGET(r0, 0x125f, 0x0) 205.590019ms ago: executing program 4 (id=3717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f0000000480)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 140.207326ms ago: executing program 1 (id=3718): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 74.525347ms ago: executing program 4 (id=3719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xfff}]}}}}}}}, 0x0) 74.270788ms ago: executing program 2 (id=3720): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_vlan\x00', 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@rand_addr, @dev={0xac, 0x14, 0x14, 0x36}}, 0xc) 13.93244ms ago: executing program 2 (id=3721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xd132}) write$cgroup_subtree(r0, 0x0, 0x6e8a) 0s ago: executing program 0 (id=3722): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x100, 0x1}) kernel console output (not intermixed with test programs): ] audit: type=1326 audit(1728498006.289:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15021 comm="syz.3.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f2e174fa7 code=0x7ffc0000 [ 289.961852][T15005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.982476][ T29] audit: type=1326 audit(1728498006.289:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15021 comm="syz.3.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f2e119959 code=0x7ffc0000 [ 289.990728][ T5244] usb 5-1: device not accepting address 37, error -71 [ 290.027874][T15005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.151703][T15038] loop3: detected capacity change from 0 to 256 [ 290.168503][T15038] FAT-fs (loop3): Directory bread(block 64) failed [ 290.190892][T15038] FAT-fs (loop3): Directory bread(block 65) failed [ 290.198822][T15038] FAT-fs (loop3): Directory bread(block 66) failed [ 290.207731][T15038] FAT-fs (loop3): Directory bread(block 67) failed [ 290.214473][T15038] FAT-fs (loop3): Directory bread(block 68) failed [ 290.227687][T15038] FAT-fs (loop3): Directory bread(block 69) failed [ 290.234985][T15038] FAT-fs (loop3): Directory bread(block 70) failed [ 290.241117][T15040] loop1: detected capacity change from 0 to 1024 [ 290.241577][T15038] FAT-fs (loop3): Directory bread(block 71) failed [ 290.271507][T15038] FAT-fs (loop3): Directory bread(block 72) failed [ 290.278232][T15038] FAT-fs (loop3): Directory bread(block 73) failed [ 290.393926][T15038] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 290.795588][T15072] openvswitch: netlink: Actions may not be safe on all matching packets [ 290.924792][T15044] loop1: detected capacity change from 0 to 40427 [ 290.932594][T15044] F2FS-fs (loop1): build fault injection attr: rate: 694, type: 0x1fffff [ 290.946783][T15044] F2FS-fs (loop1): invalid crc value [ 290.957072][T15044] F2FS-fs (loop1): Found nat_bits in checkpoint [ 291.024780][T15044] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 291.055393][T15044] F2FS-fs (loop1): Stopped filesystem due to reason: 0 [ 291.345070][T15079] loop2: detected capacity change from 0 to 32768 [ 291.399030][T15079] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 291.418600][T15079] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 291.477804][T15102] loop1: detected capacity change from 0 to 1024 [ 291.483834][T15079] XFS (loop2): Ending clean mount [ 291.492188][T15079] XFS (loop2): Quotacheck needed: Please wait. [ 291.516813][T15079] XFS (loop2): Quotacheck: Done. [ 291.523510][T15102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.590692][T15089] loop3: detected capacity change from 0 to 32768 [ 291.598897][ T7618] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 291.609985][T11574] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.685995][T15110] loop1: detected capacity change from 0 to 256 [ 291.733211][T15110] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 291.762887][T15110] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 291.795119][T15110] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 291.917162][T15116] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3170'. [ 291.996120][T15108] loop4: detected capacity change from 0 to 32768 [ 292.049549][T15108] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 292.109154][T15108] XFS (loop4): Ending clean mount [ 292.163517][ T7780] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 292.168835][T15140] netlink: 'syz.2.3176': attribute type 1 has an invalid length. [ 292.513350][T15138] loop1: detected capacity change from 0 to 40427 [ 292.524785][T15138] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 292.524813][T15138] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 292.544050][T15138] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 292.546501][T15138] F2FS-fs (loop1): Found nat_bits in checkpoint [ 292.606161][T15138] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 292.606190][T15138] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 292.636875][T15138] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 292.736538][T15146] loop2: detected capacity change from 0 to 32768 [ 293.078644][T15180] loop1: detected capacity change from 0 to 256 [ 293.101674][T15180] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 293.124942][T15182] program syz.4.3194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.127685][T15180] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 293.151705][T15184] openvswitch: netlink: Actions may not be safe on all matching packets [ 293.224997][T15188] openvswitch: netlink: Actions may not be safe on all matching packets [ 293.332042][T15166] loop3: detected capacity change from 0 to 32768 [ 293.388565][T15166] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 293.432082][T15166] XFS (loop3): Ending clean mount [ 293.462414][T15186] loop1: detected capacity change from 0 to 32768 [ 293.471344][T11162] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 293.480172][ T8] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 293.551212][T15200] loop4: detected capacity change from 0 to 4096 [ 293.558783][T15200] ntfs3: Unknown parameter 'gad' [ 293.639645][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 293.646386][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.646420][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.646445][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 293.646471][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 293.646505][ T8] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 293.646531][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.647875][ T8] usb 3-1: config 0 descriptor?? [ 293.959105][T15224] loop4: detected capacity change from 0 to 128 [ 293.977176][T15226] loop1: detected capacity change from 0 to 256 [ 293.984285][T15224] adfs: Invalid uid '0x00000000ffffffff' [ 294.059025][ T8] hid-u2fzero 0003:10C4:8ACF.004A: unknown main item tag 0x0 [ 294.072720][ T8] hid-u2fzero 0003:10C4:8ACF.004A: unknown main item tag 0x0 [ 294.090322][ T8] hid-u2fzero 0003:10C4:8ACF.004A: unknown main item tag 0x0 [ 294.102874][ T8] hid-u2fzero 0003:10C4:8ACF.004A: unknown main item tag 0x0 [ 294.110383][ T8] hid-u2fzero 0003:10C4:8ACF.004A: unknown main item tag 0x0 [ 294.145498][ T8] hid-u2fzero 0003:10C4:8ACF.004A: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.2-1/input0 [ 294.163471][ T8] hid-u2fzero 0003:10C4:8ACF.004A: U2F Zero LED initialised [ 294.188982][ T8] hid-u2fzero 0003:10C4:8ACF.004A: U2F Zero RNG initialised [ 294.270852][ T8] usb 3-1: USB disconnect, device number 32 [ 294.454897][ T5244] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 294.516073][T15223] loop3: detected capacity change from 0 to 40427 [ 294.536313][T15223] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 294.544802][T15223] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 294.576014][T15223] F2FS-fs (loop3): Found nat_bits in checkpoint [ 294.614287][ T5244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.625521][ T5244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.646189][ T5244] usb 2-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 294.662862][ T5244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.672503][ T5244] usb 2-1: config 0 descriptor?? [ 294.703102][T15223] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 294.710293][T15223] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 294.898554][T15248] loop4: detected capacity change from 0 to 32768 [ 295.162503][T15264] loop4: detected capacity change from 0 to 1024 [ 295.227455][ T2552] hfsplus: found bad thread record in catalog [ 295.233916][ T2552] hfsplus: found bad thread record in catalog [ 295.266223][T15269] loop4: detected capacity change from 0 to 256 [ 295.273230][T15269] exfat: Deprecated parameter 'utf8' [ 295.278810][T15269] exfat: Deprecated parameter 'utf8' [ 295.284409][T15269] exfat: Deprecated parameter 'utf8' [ 295.295839][T15269] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 295.347866][ T9] usb 2-1: USB disconnect, device number 31 [ 295.354058][ T8] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 295.512743][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 295.526160][ T8] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 295.543310][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.561499][ T8] usb 4-1: Product: syz [ 295.567082][ T8] usb 4-1: Manufacturer: syz [ 295.571759][ T8] usb 4-1: SerialNumber: syz [ 295.579897][ T8] usb 4-1: config 0 descriptor?? [ 295.587026][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 295.662332][T15277] loop4: detected capacity change from 0 to 32768 [ 295.670655][T15277] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3233 (15277) [ 295.690921][T15277] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 295.701475][T15277] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 295.729932][T15294] loop2: detected capacity change from 0 to 256 [ 295.739081][T15294] FAT-fs (loop2): Directory bread(block 1285) failed [ 295.749171][T15294] FAT-fs (loop2): Directory bread(block 1285) failed [ 295.789534][T15303] loop2: detected capacity change from 0 to 256 [ 295.809870][T15303] FAT-fs (loop2): Directory bread(block 64) failed [ 295.816654][T15303] FAT-fs (loop2): Directory bread(block 65) failed [ 295.819389][T15277] BTRFS info (device loop4): rebuilding free space tree [ 295.828204][T15303] FAT-fs (loop2): Directory bread(block 66) failed [ 295.836585][T15277] BTRFS info (device loop4): disabling free space tree [ 295.837340][T15303] FAT-fs (loop2): Directory bread(block 67) failed [ 295.844510][T15277] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 295.850404][T15303] FAT-fs (loop2): Directory bread(block 68) failed [ 295.861084][T15277] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 295.878375][T15303] FAT-fs (loop2): Directory bread(block 69) failed [ 295.885085][T15303] FAT-fs (loop2): Directory bread(block 70) failed [ 295.891720][T15303] FAT-fs (loop2): Directory bread(block 71) failed [ 295.898349][T15303] FAT-fs (loop2): Directory bread(block 72) failed [ 295.905018][T15303] FAT-fs (loop2): Directory bread(block 73) failed [ 295.992475][T15312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3245'. [ 295.997598][T15310] loop1: detected capacity change from 0 to 4096 [ 296.009916][T15310] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 296.037930][T15310] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 296.071497][T11574] ntfs3(loop1): ino=1a, ntfs_sync_fs failed, -22. [ 296.320551][T15277] btrfs: Deprecated parameter 'usebackuproot' [ 296.327040][T15277] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 296.336859][T15277] BTRFS info (device loop4 state M): turning on sync discard [ 296.344368][T15277] BTRFS info (device loop4 state M): force clearing of disk cache [ 296.352209][T15277] BTRFS info (device loop4 state M): trying to use backup root at mount time [ 296.361120][T15277] BTRFS info (device loop4 state M): force zlib compression, level 3 [ 296.384475][T15316] loop1: detected capacity change from 0 to 32768 [ 296.393123][ T7780] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 296.402832][ T8] usb 4-1: reset high-speed USB device number 35 using dummy_hcd [ 296.434740][T15316] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 296.477754][T15316] XFS (loop1): Ending clean mount [ 296.516027][T11574] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 296.556891][ T8] usb 4-1: device firmware changed [ 296.562297][ T8] gspca_se401: read req failed req 0x06 error -19 [ 296.571840][ T8] usb 4-1: USB disconnect, device number 35 [ 296.712736][ T8] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 296.872767][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 296.882370][ T8] usb 4-1: string descriptor 0 read error: -22 [ 296.888857][ T8] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 296.898730][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.907625][ T8] usb 4-1: config 0 descriptor?? [ 296.914172][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 297.666750][T15331] loop2: detected capacity change from 0 to 512 [ 297.711455][T15338] loop1: detected capacity change from 0 to 256 [ 297.733460][T15338] exfat: Deprecated parameter 'utf8' [ 297.759068][T15338] exfat: Deprecated parameter 'utf8' [ 297.779651][T15338] exfat: Deprecated parameter 'utf8' [ 297.863042][T15338] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 297.891204][T15331] EXT4-fs (loop2): 1 orphan inode deleted [ 297.907067][T15331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.912276][ T8] gspca_se401: read req failed req 0x06 error -19 [ 297.965114][ T8] usb 4-1: USB disconnect, device number 36 [ 298.052911][ T7618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.065326][T15347] loop1: detected capacity change from 0 to 4096 [ 298.099264][T15343] loop4: detected capacity change from 0 to 32768 [ 298.121031][T15343] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3251 (15343) [ 298.138609][T15343] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 298.163929][T15343] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 298.183660][T15343] BTRFS info (device loop4): using free-space-tree [ 298.212411][T15347] ntfs3(loop1): failed to convert "0000" to iso8859-14 [ 298.222925][T15345] loop3: detected capacity change from 0 to 32768 [ 298.230758][T15347] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 298.238350][T15347] ntfs3(loop1): failed to convert name for inode 1e. [ 298.301557][T15345] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 298.330194][T15343] BTRFS info (device loop4): setting incompat feature flag for DEFAULT_SUBVOL (0x2) [ 298.368008][T15345] XFS (loop3): Ending clean mount [ 298.379132][ T7780] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 298.408746][T15349] loop2: detected capacity change from 0 to 32768 [ 298.418614][T11162] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 298.419770][T15349] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3254 (15349) [ 298.444975][T15349] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 298.455817][T15349] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 298.464655][T15349] BTRFS info (device loop2): disk space caching is enabled [ 298.472423][T15349] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 298.862985][T15349] BTRFS info (device loop2): rebuilding free space tree [ 298.923089][T15349] BTRFS info (device loop2): disabling free space tree [ 298.927252][T15416] openvswitch: netlink: Actions may not be safe on all matching packets [ 298.930883][T15349] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 298.948640][T15349] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 299.062537][ T7618] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 299.090132][T15397] loop3: detected capacity change from 0 to 40427 [ 299.100451][T15397] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 299.108589][T15397] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 299.156772][T15397] F2FS-fs (loop3): invalid crc value [ 299.228694][T15397] F2FS-fs (loop3): Found nat_bits in checkpoint [ 299.367305][T15397] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 299.384354][T15397] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 299.455342][T11162] syz-executor: attempt to access beyond end of device [ 299.455342][T11162] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 299.494911][T11162] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 299.715132][T15420] loop1: detected capacity change from 0 to 40427 [ 299.724067][T15420] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 299.731944][T15420] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 299.824048][T15420] F2FS-fs (loop1): Found nat_bits in checkpoint [ 299.883205][T15444] loop2: detected capacity change from 0 to 32768 [ 299.962903][T15444] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3285 (15444) [ 299.981552][T15444] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 299.992106][T15444] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 300.003115][T15444] BTRFS info (device loop2): using free-space-tree [ 300.006314][T15420] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 300.016786][T15420] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 300.091666][T15444] BTRFS info (device loop2): rebuilding free space tree [ 300.154810][T15480] loop3: detected capacity change from 0 to 128 [ 300.166080][T15444] BTRFS info (device loop2): balance: start -s [ 300.173894][T15480] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 300.184459][T15444] BTRFS info (device loop2): left=0, need=98304, flags=2 [ 300.191532][T15444] BTRFS info (device loop2): space_info SYSTEM has 0 free, is not full [ 300.200147][T15444] BTRFS info (device loop2): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 300.213884][T15444] BTRFS info (device loop2): global_block_rsv: size 1441792 reserved 1441792 [ 300.222742][T15444] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 300.230396][T15444] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 300.238085][T15444] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0 [ 300.246167][T15444] BTRFS info (device loop2): delayed_refs_rsv: size 0 reserved 0 [ 300.255980][T15444] BTRFS info (device loop2): relocating block group 1048576 flags system [ 300.300338][T15480] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.315340][T15444] BTRFS info (device loop2): balance: ended with status: 0 [ 300.371008][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 300.371026][ T29] audit: type=1800 audit(1728498016.969:217): pid=15480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3293" name="bus" dev="loop3" ino=115 res=0 errno=0 [ 300.414557][T15489] Bluetooth: MGMT ver 1.23 [ 300.422606][ T7618] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 300.694859][T15498] loop1: detected capacity change from 0 to 128 [ 301.367856][T15530] loop1: detected capacity change from 0 to 32768 [ 301.407493][T15530] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3316 (15530) [ 301.457002][T15530] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 301.468063][T15530] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 301.474245][T15555] loop3: detected capacity change from 0 to 32768 [ 301.480008][T15530] BTRFS info (device loop1): using free-space-tree [ 301.485067][T15555] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3327 (15555) [ 301.506917][T15555] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 301.517267][T15555] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 301.526103][T15555] BTRFS info (device loop3): using free-space-tree [ 301.596898][T11574] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 301.611758][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.724040][T11162] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 301.745314][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.868009][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.966755][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.084680][ T35] bridge_slave_1: left allmulticast mode [ 302.090361][ T35] bridge_slave_1: left promiscuous mode [ 302.100031][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.109088][ T35] bridge_slave_0: left allmulticast mode [ 302.115050][ T35] bridge_slave_0: left promiscuous mode [ 302.120694][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.257903][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.284654][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.304805][ T35] bond0 (unregistering): Released all slaves [ 302.359162][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.373701][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.380918][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.390706][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.398135][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 302.408038][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.413843][ T4626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.422266][ T4626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.429742][ T4626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.439421][ T4626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.446943][ T4626] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 302.454299][ T4626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.548995][T15607] chnl_net:caif_netlink_parms(): no params data found [ 302.578194][ T35] hsr_slave_0: left promiscuous mode [ 302.584095][ T35] hsr_slave_1: left promiscuous mode [ 302.589719][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.597354][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.605016][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.612394][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.621846][ T35] veth1_macvtap: left promiscuous mode [ 302.627516][ T35] veth0_macvtap: left promiscuous mode [ 302.633114][ T35] veth1_vlan: left promiscuous mode [ 302.639366][ T35] veth0_vlan: left promiscuous mode [ 302.765980][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.774790][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.782079][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.790723][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.804904][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 302.812860][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.870133][ T4626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.877591][ T4626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.890721][ T4626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.898445][ T4626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.906024][ T4626] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 302.914073][ T4626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.915099][ T35] team0 (unregistering): Port device team_slave_1 removed [ 302.932330][ T35] team0 (unregistering): Port device team_slave_0 removed [ 303.076329][T15607] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.086373][T15607] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.093739][T15607] bridge_slave_0: entered allmulticast mode [ 303.100472][T15607] bridge_slave_0: entered promiscuous mode [ 303.108080][T15607] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.115250][T15607] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.122342][T15607] bridge_slave_1: entered allmulticast mode [ 303.130473][T15607] bridge_slave_1: entered promiscuous mode [ 303.144208][T15630] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3343'. [ 303.180557][T15609] chnl_net:caif_netlink_parms(): no params data found [ 303.211209][T15607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.218220][T15633] loop4: detected capacity change from 0 to 4096 [ 303.226019][T15607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.242974][T15635] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 303.268388][T15633] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 303.288162][T15633] Remounting filesystem read-only [ 303.293264][T15633] NILFS error (device loop4): nilfs_readdir: bad page in #2 [ 303.310007][T15607] team0: Port device team_slave_0 added [ 303.318046][T15607] team0: Port device team_slave_1 added [ 303.375184][T15607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.384619][T15607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.410873][T15607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.441595][T15607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.448836][T15607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.475944][T15607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.496482][T15609] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.503739][T15609] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.510882][T15609] bridge_slave_0: entered allmulticast mode [ 303.517426][T15609] bridge_slave_0: entered promiscuous mode [ 303.525203][T15609] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.532422][T15609] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.540098][T15609] bridge_slave_1: entered allmulticast mode [ 303.547412][T15609] bridge_slave_1: entered promiscuous mode [ 303.586217][T15607] hsr_slave_0: entered promiscuous mode [ 303.592503][T15607] hsr_slave_1: entered promiscuous mode [ 303.599152][T15607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.606846][T15607] Cannot create hsr debugfs directory [ 303.620841][T15609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.631848][T15609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.691294][T15609] team0: Port device team_slave_0 added [ 303.717525][T15609] team0: Port device team_slave_1 added [ 303.775978][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.795115][T15609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.802085][T15609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.828374][T15609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.847840][T15620] chnl_net:caif_netlink_parms(): no params data found [ 303.859798][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.878051][T15609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.885236][T15609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.911270][T15609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.939574][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.978667][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.004706][T15622] chnl_net:caif_netlink_parms(): no params data found [ 304.042613][T15620] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.050415][T15620] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.057861][T15620] bridge_slave_0: entered allmulticast mode [ 304.064769][T15620] bridge_slave_0: entered promiscuous mode [ 304.073891][T15609] hsr_slave_0: entered promiscuous mode [ 304.080057][T15609] hsr_slave_1: entered promiscuous mode [ 304.087159][T15609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.094821][T15609] Cannot create hsr debugfs directory [ 304.121590][T15620] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.130959][T15620] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.138166][T15620] bridge_slave_1: entered allmulticast mode [ 304.145620][T15620] bridge_slave_1: entered promiscuous mode [ 304.179557][T15620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.209094][T15620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.260790][T15622] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.268246][T15622] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.275427][T15622] bridge_slave_0: entered allmulticast mode [ 304.282000][T15622] bridge_slave_0: entered promiscuous mode [ 304.294294][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.307982][T15620] team0: Port device team_slave_0 added [ 304.315368][T15620] team0: Port device team_slave_1 added [ 304.321200][T15622] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.328648][T15622] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.336489][T15622] bridge_slave_1: entered allmulticast mode [ 304.343129][T15622] bridge_slave_1: entered promiscuous mode [ 304.382838][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.395585][T15620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.402523][T15620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.428825][T15620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.440804][T15620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.449263][T15620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.475601][T15620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.483009][ T5238] Bluetooth: hci1: command tx timeout [ 304.486509][ T4626] Bluetooth: hci0: command tx timeout [ 304.502586][T15622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.515051][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.539354][T15622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.590419][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.604786][T15622] team0: Port device team_slave_0 added [ 304.622604][T15622] team0: Port device team_slave_1 added [ 304.629869][T15607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 304.641155][T15620] hsr_slave_0: entered promiscuous mode [ 304.647754][T15620] hsr_slave_1: entered promiscuous mode [ 304.653786][T15620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.661323][T15620] Cannot create hsr debugfs directory [ 304.689384][T15607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 304.716148][T15622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.723674][T15622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.749826][T15622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.760868][T15607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 304.771578][T15607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 304.782990][T15622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.789935][T15622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.816117][T15622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.858283][T15622] hsr_slave_0: entered promiscuous mode [ 304.864578][T15622] hsr_slave_1: entered promiscuous mode [ 304.871265][T15622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.879383][T15622] Cannot create hsr debugfs directory [ 304.883904][ T4626] Bluetooth: hci4: command tx timeout [ 304.901803][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.965549][ T5238] Bluetooth: hci5: command tx timeout [ 304.984127][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.043827][T15607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.058957][T15607] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.068706][ T2552] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.075827][ T2552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.090125][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.104918][ T2552] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.111984][ T2552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.177940][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.228198][T15607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.257515][T15607] veth0_vlan: entered promiscuous mode [ 305.275442][T15607] veth1_vlan: entered promiscuous mode [ 305.286371][ T35] bridge_slave_1: left allmulticast mode [ 305.292028][ T35] bridge_slave_1: left promiscuous mode [ 305.298647][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.307390][ T35] bridge_slave_0: left allmulticast mode [ 305.313427][ T35] bridge_slave_0: left promiscuous mode [ 305.319065][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.328462][ T35] bridge_slave_1: left allmulticast mode [ 305.334420][ T35] bridge_slave_1: left promiscuous mode [ 305.340056][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.348282][ T35] bridge_slave_0: left allmulticast mode [ 305.355024][ T35] bridge_slave_0: left promiscuous mode [ 305.360666][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.369188][ T35] bridge_slave_1: left allmulticast mode [ 305.375001][ T35] bridge_slave_1: left promiscuous mode [ 305.381204][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.389819][ T35] bridge_slave_0: left allmulticast mode [ 305.395689][ T35] bridge_slave_0: left promiscuous mode [ 305.401323][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.676920][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.688176][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.697936][ T35] bond0 (unregistering): Released all slaves [ 305.708608][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.721504][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.731240][ T35] bond0 (unregistering): Released all slaves [ 305.742820][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.753361][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.763241][ T35] bond0 (unregistering): Released all slaves [ 305.795708][T15607] veth0_macvtap: entered promiscuous mode [ 305.804699][T15607] veth1_macvtap: entered promiscuous mode [ 305.822431][T15607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.833072][T15607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.844620][T15607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.855250][T15607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.865253][T15607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.875733][T15607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.885684][T15607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.898940][T15607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.908869][T15607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.919401][T15607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.931206][T15607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.941475][ T35] Êü: left promiscuous mode [ 305.955796][T15607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.966586][T15607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.977043][T15607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.988454][T15607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.998970][T15607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.009674][T15607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.019667][T15607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.030146][T15607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.040040][T15607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.050515][T15607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.061436][T15607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.073886][ T35] tipc: Disabling bearer [ 306.079447][ T35] tipc: Left network mode [ 306.081323][T15607] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.092832][T15607] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.102178][T15607] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.111510][T15607] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.157630][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.172299][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.191643][ T2935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.200422][ T2935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.259964][T15661] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3335'. [ 306.269213][T15661] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3335'. [ 306.413227][T15669] Bluetooth: MGMT ver 1.23 [ 306.555100][T15609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 306.563411][ T4626] Bluetooth: hci0: command tx timeout [ 306.568825][ T4626] Bluetooth: hci1: command tx timeout [ 306.571999][T15609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 306.587414][T15609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 306.597177][T15609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 306.614555][ T35] hsr_slave_0: left promiscuous mode [ 306.620434][ T35] hsr_slave_1: left promiscuous mode [ 306.628054][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.638483][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.649201][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.658941][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.671691][ T35] hsr_slave_0: left promiscuous mode [ 306.679595][ T35] hsr_slave_1: left promiscuous mode [ 306.687046][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.696633][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.707065][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.717080][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.729983][ T35] hsr_slave_0: left promiscuous mode [ 306.737850][ T35] hsr_slave_1: left promiscuous mode [ 306.745267][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.755005][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.763443][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.770915][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.789342][ T35] veth1_macvtap: left promiscuous mode [ 306.798888][ T35] veth0_macvtap: left promiscuous mode [ 306.805838][ T35] veth1_vlan: left promiscuous mode [ 306.811457][ T35] veth0_vlan: left promiscuous mode [ 306.822171][ T35] veth1_macvtap: left promiscuous mode [ 306.827835][ T35] veth0_macvtap: left promiscuous mode [ 306.837970][ T35] veth1_vlan: left promiscuous mode [ 306.843366][ T35] veth0_vlan: left promiscuous mode [ 306.850388][ T35] veth1_macvtap: left promiscuous mode [ 306.859735][ T35] veth0_macvtap: left promiscuous mode [ 306.865445][ T35] veth1_vlan: left promiscuous mode [ 306.870780][ T35] veth0_vlan: left promiscuous mode [ 306.962928][ T4626] Bluetooth: hci4: command tx timeout [ 307.043535][ T4626] Bluetooth: hci5: command tx timeout [ 307.071843][ T35] team0 (unregistering): Port device team_slave_1 removed [ 307.084947][ T35] team0 (unregistering): Port device team_slave_0 removed [ 307.208644][ T35] team0 (unregistering): Port device team_slave_1 removed [ 307.220822][ T35] team0 (unregistering): Port device team_slave_0 removed [ 307.340315][ T35] team0 (unregistering): Port device team_slave_1 removed [ 307.353706][ T35] team0 (unregistering): Port device team_slave_0 removed [ 308.094584][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.101901][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.111595][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.120330][ T5250] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.132806][ T5250] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.139879][ T5250] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.147274][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.154966][ T5250] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.155027][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 308.172080][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 308.185251][ T5245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.192854][ T5245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 308.200060][ T5245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 308.209234][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.224414][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.231999][ T5235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.239635][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 308.247608][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.409429][ T5250] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 308.417325][ T5250] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 308.440466][ T5250] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 308.451634][ T5250] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 308.459212][ T5250] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 308.466448][ T5250] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 308.547683][T15694] chnl_net:caif_netlink_parms(): no params data found [ 308.608597][ T35] IPVS: stop unused estimator thread 0... [ 308.642255][T15696] chnl_net:caif_netlink_parms(): no params data found [ 308.649282][ T5250] Bluetooth: hci0: command tx timeout [ 308.759045][T15694] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.766249][T15694] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.773684][T15694] bridge_slave_0: entered allmulticast mode [ 308.780160][T15694] bridge_slave_0: entered promiscuous mode [ 308.819669][T15694] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.826864][T15694] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.834673][T15694] bridge_slave_1: entered allmulticast mode [ 308.841077][T15694] bridge_slave_1: entered promiscuous mode [ 308.852514][T15698] chnl_net:caif_netlink_parms(): no params data found [ 308.879270][T15696] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.886700][T15696] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.894435][T15696] bridge_slave_0: entered allmulticast mode [ 308.900951][T15696] bridge_slave_0: entered promiscuous mode [ 308.924153][T15694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.936345][T15696] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.943564][T15696] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.950678][T15696] bridge_slave_1: entered allmulticast mode [ 308.958419][T15696] bridge_slave_1: entered promiscuous mode [ 308.964324][ T5250] Bluetooth: hci2: command 0x0405 tx timeout [ 308.984885][T15694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.034176][T15701] chnl_net:caif_netlink_parms(): no params data found [ 309.056430][T15694] team0: Port device team_slave_0 added [ 309.064040][T15696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.075666][T15696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.102262][T15694] team0: Port device team_slave_1 added [ 309.121675][T15698] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.129149][T15698] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.136590][T15698] bridge_slave_0: entered allmulticast mode [ 309.143358][T15698] bridge_slave_0: entered promiscuous mode [ 309.156843][T15698] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.164054][T15698] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.171849][T15698] bridge_slave_1: entered allmulticast mode [ 309.178764][T15698] bridge_slave_1: entered promiscuous mode [ 309.208992][T15694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.216149][T15694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.242352][T15694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.254406][T15694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.261354][T15694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.288098][T15694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.312749][T15696] team0: Port device team_slave_0 added [ 309.331471][T15698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.341743][T15696] team0: Port device team_slave_1 added [ 309.363995][T15701] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.371074][T15701] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.378792][T15701] bridge_slave_0: entered allmulticast mode [ 309.385703][T15701] bridge_slave_0: entered promiscuous mode [ 309.401641][T15698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.423129][T15701] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.430232][T15701] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.437394][T15701] bridge_slave_1: entered allmulticast mode [ 309.444282][T15701] bridge_slave_1: entered promiscuous mode [ 309.462392][T15696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.469601][T15696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.495932][T15696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.521906][T15694] hsr_slave_0: entered promiscuous mode [ 309.528265][T15694] hsr_slave_1: entered promiscuous mode [ 309.543908][T15696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.550859][T15696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.576730][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.583843][T15696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.597517][T15701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.608944][T15701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.626224][T15698] team0: Port device team_slave_0 added [ 309.642595][T15698] team0: Port device team_slave_1 added [ 309.686867][T15698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.694352][T15698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.720759][T15698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.736560][T15701] team0: Port device team_slave_0 added [ 309.752951][T15698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.759908][T15698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.786148][T15698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.797950][T15701] team0: Port device team_slave_1 added [ 309.829226][T15701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.836428][T15701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.862299][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.869081][T15701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.882939][T15701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.890365][T15701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.916462][T15701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.931971][T15696] hsr_slave_0: entered promiscuous mode [ 309.938245][T15696] hsr_slave_1: entered promiscuous mode [ 309.944589][T15696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.952147][T15696] Cannot create hsr debugfs directory [ 310.009326][T15701] hsr_slave_0: entered promiscuous mode [ 310.015720][T15701] hsr_slave_1: entered promiscuous mode [ 310.021662][T15701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.032275][T15701] Cannot create hsr debugfs directory [ 310.052228][T15698] hsr_slave_0: entered promiscuous mode [ 310.058449][T15698] hsr_slave_1: entered promiscuous mode [ 310.064545][T15698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.072111][T15698] Cannot create hsr debugfs directory [ 310.164861][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.201477][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.243361][ T5238] Bluetooth: hci3: command tx timeout [ 310.249036][ T5238] Bluetooth: hci1: command tx timeout [ 310.286035][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.323452][ T5238] Bluetooth: hci4: command tx timeout [ 310.336783][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.482794][ T5238] Bluetooth: hci5: command tx timeout [ 310.617641][ T35] bridge_slave_1: left allmulticast mode [ 310.623425][ T35] bridge_slave_1: left promiscuous mode [ 310.629051][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.637283][ T35] bridge_slave_0: left allmulticast mode [ 310.643400][ T35] bridge_slave_0: left promiscuous mode [ 310.649056][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.657525][ T35] bridge_slave_1: left allmulticast mode [ 310.663313][ T35] bridge_slave_1: left promiscuous mode [ 310.669011][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.677130][ T35] bridge_slave_0: left allmulticast mode [ 310.682895][ T35] bridge_slave_0: left promiscuous mode [ 310.688630][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.697338][ T35] bridge_slave_1: left allmulticast mode [ 310.703182][ T35] bridge_slave_1: left promiscuous mode [ 310.709001][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.717452][ T35] bridge_slave_0: left allmulticast mode [ 310.726112][ T35] bridge_slave_0: left promiscuous mode [ 310.731743][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.739151][ T5250] Bluetooth: hci0: command tx timeout [ 310.746983][ T35] bridge_slave_1: left allmulticast mode [ 310.753165][ T35] bridge_slave_1: left promiscuous mode [ 310.759251][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.767204][ T35] bridge_slave_0: left allmulticast mode [ 310.773001][ T35] bridge_slave_0: left promiscuous mode [ 310.778785][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.095976][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.106010][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.116006][ T35] bond0 (unregistering): Released all slaves [ 311.125981][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.137722][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.147332][ T35] bond0 (unregistering): Released all slaves [ 311.158755][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.169107][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.179067][ T35] bond0 (unregistering): Released all slaves [ 311.188262][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.199354][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.209125][ T35] bond0 (unregistering): Released all slaves [ 311.295760][ T35] IPVS: stopping master sync thread 12180 ... [ 311.410069][ T35] hsr_slave_0: left promiscuous mode [ 311.416077][ T35] hsr_slave_1: left promiscuous mode [ 311.422007][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.429614][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.441483][ T35] hsr_slave_0: left promiscuous mode [ 311.447522][ T35] hsr_slave_1: left promiscuous mode [ 311.454097][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.461580][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.471419][ T35] hsr_slave_0: left promiscuous mode [ 311.477296][ T35] hsr_slave_1: left promiscuous mode [ 311.483135][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.490544][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.498138][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.505837][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.515967][ T35] hsr_slave_0: left promiscuous mode [ 311.521660][ T35] hsr_slave_1: left promiscuous mode [ 311.527979][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.535714][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.547149][ T35] veth1_macvtap: left promiscuous mode [ 311.553085][ T35] veth0_macvtap: left promiscuous mode [ 311.558679][ T35] veth1_vlan: left promiscuous mode [ 311.564008][ T35] veth0_vlan: left promiscuous mode [ 311.654382][ T35] team0 (unregistering): Port device team_slave_1 removed [ 311.668645][ T35] team0 (unregistering): Port device team_slave_0 removed [ 311.762288][ T35] team0 (unregistering): Port device team_slave_1 removed [ 311.778266][ T35] team0 (unregistering): Port device team_slave_0 removed [ 311.829566][ T35] pimreg (unregistering): left allmulticast mode [ 311.891382][ T35] team0 (unregistering): Port device team_slave_1 removed [ 311.908718][ T35] team0 (unregistering): Port device team_slave_0 removed [ 312.007797][ T35] team0 (unregistering): Port device team_slave_1 removed [ 312.019835][ T35] team0 (unregistering): Port device team_slave_0 removed [ 312.322897][ T5250] Bluetooth: hci1: command tx timeout [ 312.325395][ T5238] Bluetooth: hci3: command tx timeout [ 312.402831][ T5238] Bluetooth: hci4: command tx timeout [ 312.563028][ T5238] Bluetooth: hci5: command tx timeout [ 312.643293][T15694] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 312.652167][T15694] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 312.661137][T15694] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 312.671049][T15694] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 312.696224][T15696] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 312.711805][T15696] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 312.727876][T15696] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 312.741267][T15696] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 312.773397][T15698] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 312.797982][T15698] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 312.815738][T15701] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 312.824928][T15698] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 312.833598][T15698] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 312.844488][T15701] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 312.858113][T15701] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 312.868445][T15701] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 312.900632][T15694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.916864][T15694] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.955812][ T2552] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.962954][ T2552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.984493][ T2552] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.991568][ T2552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.012431][T15696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.069999][T15696] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.079835][T15701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.109200][T15698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.119354][ T2935] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.126553][ T2935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.138504][T15701] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.178336][ T2552] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.185488][ T2552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.195443][ T2552] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.202544][ T2552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.223377][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.230467][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.259305][T15698] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.275460][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.282550][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.306673][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.313794][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.348092][T15701] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 313.365367][T15701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.391079][T15694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.451386][T15694] veth0_vlan: entered promiscuous mode [ 313.473069][T15694] veth1_vlan: entered promiscuous mode [ 313.528987][T15694] veth0_macvtap: entered promiscuous mode [ 313.566002][T15696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.580827][T15694] veth1_macvtap: entered promiscuous mode [ 313.604970][T15694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.618003][T15694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.628134][T15694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.640814][T15694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.651564][T15694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.668104][T15694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.678972][T15694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.689077][T15694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.701090][T15694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.712035][T15694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.727983][T15694] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.736801][T15694] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.746190][T15694] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.754982][T15694] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.776075][T15701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.793881][T15698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.814347][T15696] veth0_vlan: entered promiscuous mode [ 313.840641][T15696] veth1_vlan: entered promiscuous mode [ 313.882199][T15701] veth0_vlan: entered promiscuous mode [ 313.889872][ T2552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.902055][ T2552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.920020][T15701] veth1_vlan: entered promiscuous mode [ 313.951291][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.961643][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.975409][T15696] veth0_macvtap: entered promiscuous mode [ 313.991132][T15696] veth1_macvtap: entered promiscuous mode [ 314.008173][T15701] veth0_macvtap: entered promiscuous mode [ 314.024801][T15696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.038587][T15696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.064333][T15696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.077345][T15696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.090951][T15696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.103987][T15696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.115239][T15696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.124791][T15701] veth1_macvtap: entered promiscuous mode [ 314.146949][T15701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.158065][T15701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.172136][T15701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.186916][T15701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.197679][T15701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.208509][T15701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.221498][T15701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.235210][T15701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.257607][T15701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.283591][T15696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.294584][T15696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.304874][T15696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.315684][T15696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.326090][T15696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.337038][T15696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.349943][T15696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.363640][T15698] veth0_vlan: entered promiscuous mode [ 314.369631][T15701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.380205][T15701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.390248][T15701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.401027][T15701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.411098][ T5238] Bluetooth: hci3: command tx timeout [ 314.411148][ T5238] Bluetooth: hci1: command tx timeout [ 314.422728][T15701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.433254][T15701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.443380][T15701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.453928][T15701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.464972][T15701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.477948][T15696] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.487024][ T5250] Bluetooth: hci4: command tx timeout [ 314.499151][T15696] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.508492][T15696] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.519970][T15696] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.541831][T15701] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.550774][T15701] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.559574][T15701] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.568592][T15701] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.580398][T15698] veth1_vlan: entered promiscuous mode [ 314.644072][ T5250] Bluetooth: hci5: command tx timeout [ 314.682396][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.682403][ T7886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.682419][ T7886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.708411][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.742582][T15698] veth0_macvtap: entered promiscuous mode [ 314.750050][ T7886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.758756][ T7886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.768769][T15698] veth1_macvtap: entered promiscuous mode [ 314.778226][T15767] loop2: detected capacity change from 0 to 32768 [ 314.785673][ T7886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.797989][ T7886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.814864][T15767] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 314.815349][T15698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.841066][T15698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.853592][T15698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.856624][T15767] (syz.2.3368,15767,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 314.864554][T15698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.891870][T15698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.908622][T15698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.918639][T15698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.929891][T15698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.939789][T15698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.950263][T15698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.961211][T15698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.975391][T15698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.986229][T15698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.988983][T15694] ocfs2: Unmounting device (7,2) on (node local) [ 314.997363][T15698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.014575][T15698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.027232][T15698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.038943][T15698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.054710][T15698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.069414][T15698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.080295][T15698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.093172][T15698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.107781][T15698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.133595][T15775] loop2: detected capacity change from 0 to 64 [ 315.157486][T15698] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.166715][T15698] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.175979][T15698] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.185124][T15698] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.273807][ T2552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.288628][ T2552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.308115][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.345062][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.348435][T15785] netlink: 'syz.1.3378': attribute type 11 has an invalid length. [ 315.369154][T15785] netlink: 'syz.1.3378': attribute type 11 has an invalid length. [ 315.386346][T15781] loop2: detected capacity change from 0 to 4096 [ 315.408820][T15785] netlink: 209800 bytes leftover after parsing attributes in process `syz.1.3378'. [ 315.725311][T15819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3393'. [ 315.793288][ T1177] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 315.794960][T15822] loop2: detected capacity change from 0 to 2048 [ 315.818322][T15827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3396'. [ 315.876901][T15831] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3398'. [ 315.947739][ T1177] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.958884][ T1177] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.969404][ T1177] usb 2-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 315.979182][ T1177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.988754][ T1177] usb 2-1: config 0 descriptor?? [ 316.057782][T15844] loop3: detected capacity change from 0 to 256 [ 316.066088][T15844] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 316.076994][T15844] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 316.088809][T15844] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 316.096575][T15844] UDF-fs: Scanning with blocksize 512 failed [ 316.104730][T15844] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 316.108699][T15846] loop2: detected capacity change from 0 to 1024 [ 316.116364][T15844] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 316.133180][T15846] hfsplus: walked past end of dir [ 316.185043][T15848] loop2: detected capacity change from 0 to 256 [ 316.298932][T15858] loop2: detected capacity change from 0 to 64 [ 316.404954][ T1177] asus 0003:0B05:1822.004C: unknown main item tag 0x0 [ 316.418564][ T1177] asus 0003:0B05:1822.004C: unknown main item tag 0x0 [ 316.437749][ T1177] asus 0003:0B05:1822.004C: hidraw0: USB HID v0.00 Device [HID 0b05:1822] on usb-dummy_hcd.1-1/input0 [ 316.467178][ T1177] asus 0003:0B05:1822.004C: Asus input not registered [ 316.481465][ T1177] asus 0003:0B05:1822.004C: probe with driver asus failed with error -12 [ 316.491282][ T5250] Bluetooth: hci1: command tx timeout [ 316.499997][ T5250] Bluetooth: hci3: command tx timeout [ 316.551754][T15874] loop4: detected capacity change from 0 to 1024 [ 316.563017][ T5238] Bluetooth: hci4: command tx timeout [ 316.572977][T15874] hfsplus: walked past end of dir [ 316.614601][T15876] loop2: detected capacity change from 0 to 256 [ 316.629386][T15876] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 316.655850][T15876] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 316.669439][T15876] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 316.679018][T15876] UDF-fs: Scanning with blocksize 512 failed [ 316.694573][ T51] usb 2-1: USB disconnect, device number 32 [ 316.707595][T15876] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 316.709198][T15883] loop4: detected capacity change from 0 to 2048 [ 316.721265][T15876] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 316.736125][ T5238] Bluetooth: hci5: command tx timeout [ 316.757621][T15883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.800887][T15698] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.840092][T15892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3424'. [ 316.991825][T15904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3429'. [ 317.007100][T15902] loop4: detected capacity change from 0 to 2048 [ 317.124152][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.131668][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.167831][T15900] loop3: detected capacity change from 0 to 32768 [ 317.175569][T15900] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3437 (15900) [ 317.190324][T15900] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 317.200568][T15900] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 317.210192][T15900] BTRFS info (device loop3): using free-space-tree [ 317.228156][T15900] BTRFS info (device loop3): rebuilding free space tree [ 317.326021][T15931] loop4: detected capacity change from 0 to 64 [ 317.347071][T15932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3435'. [ 317.375560][T15701] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 317.423114][T15936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3440'. [ 317.805798][T15968] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3453'. [ 318.084363][T15952] loop1: detected capacity change from 0 to 32768 [ 318.092359][T15952] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3448 (15952) [ 318.116297][T15952] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 318.126560][T15952] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 318.135556][T15952] BTRFS info (device loop1): using free-space-tree [ 318.213263][T16010] loop3: detected capacity change from 0 to 64 [ 318.271661][T16022] loop3: detected capacity change from 0 to 256 [ 318.331520][T15696] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 318.619273][T16054] loop1: detected capacity change from 0 to 256 [ 318.930063][T16058] loop4: detected capacity change from 0 to 32768 [ 318.941035][T16058] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3489 (16058) [ 318.958422][T16058] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 318.962431][T16056] loop2: detected capacity change from 0 to 40427 [ 318.970259][T16058] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 318.979005][T16056] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1fffff [ 318.984874][T16058] BTRFS info (device loop4): using free-space-tree [ 319.003043][T16056] F2FS-fs (loop2): invalid crc value [ 319.010176][T16056] F2FS-fs (loop2): Found nat_bits in checkpoint [ 319.050793][T16056] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 319.069231][ T29] audit: type=1800 audit(1728498035.669:218): pid=16056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3500" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 319.095166][T15694] syz-executor: attempt to access beyond end of device [ 319.095166][T15694] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 319.110538][T15694] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 319.165519][T15698] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 319.294853][T16084] netlink: 'syz.4.3492': attribute type 11 has an invalid length. [ 319.308055][T16084] netlink: 'syz.4.3492': attribute type 11 has an invalid length. [ 319.315960][T16084] netlink: 209800 bytes leftover after parsing attributes in process `syz.4.3492'. [ 319.466757][T16089] loop3: detected capacity change from 0 to 4096 [ 319.482873][T16089] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 319.519912][T16089] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 319.836539][T16086] loop1: detected capacity change from 0 to 32768 [ 319.849390][T16119] vivid-002: ================= START STATUS ================= [ 319.857287][T16119] vivid-002: Radio HW Seek Mode: Bounded [ 319.863230][T16119] vivid-002: Radio Programmable HW Seek: false [ 319.869464][T16119] vivid-002: RDS Rx I/O Mode: Block I/O [ 319.872597][T16086] JBD2: Ignoring recovery information on journal [ 319.875383][T16119] vivid-002: Generate RBDS Instead of RDS: false [ 319.887903][T16119] vivid-002: RDS Reception: true [ 319.892923][T16119] vivid-002: RDS Program Type: 0 inactive [ 319.898694][T16119] vivid-002: RDS PS Name: inactive [ 319.904020][T16119] vivid-002: RDS Radio Text: inactive [ 319.909531][T16119] vivid-002: RDS Traffic Announcement: false inactive [ 319.917247][T16119] vivid-002: RDS Traffic Program: false inactive [ 319.917495][T16086] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 319.927849][T16119] vivid-002: RDS Music: false inactive [ 319.938814][T16119] vivid-002: ================== END STATUS ================== [ 320.037887][T16131] netlink: 'syz.3.3517': attribute type 11 has an invalid length. [ 320.046272][T15696] ocfs2: Unmounting device (7,1) on (node local) [ 320.046321][T16131] netlink: 'syz.3.3517': attribute type 11 has an invalid length. [ 320.154649][ T8] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 320.164966][T16139] loop1: detected capacity change from 0 to 128 [ 320.307884][T16145] loop2: detected capacity change from 0 to 4096 [ 320.316473][T16145] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 320.332711][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 320.341758][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.348862][T16152] loop1: detected capacity change from 0 to 256 [ 320.359073][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.369738][ T8] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 320.377215][T16145] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 320.387607][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.430408][ T8] usb 5-1: config 0 descriptor?? [ 320.694592][ T5331] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 320.712717][ T5312] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 320.846348][ T8] cp2112 0003:10C4:EA90.004D: unbalanced delimiter at end of report description [ 320.855909][ T8] cp2112 0003:10C4:EA90.004D: parse failed [ 320.861779][ T8] cp2112 0003:10C4:EA90.004D: probe with driver cp2112 failed with error -22 [ 320.866521][ T5331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.873844][ T5312] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 320.882726][ T5331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.893180][ T5312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.900499][ T5331] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 320.911347][ T5312] usb 4-1: config 0 descriptor?? [ 320.917839][ T5331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.931713][ T5331] usb 2-1: config 0 descriptor?? [ 320.936885][ T5312] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 320.945538][ T5312] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 321.056624][ T51] usb 5-1: USB disconnect, device number 39 [ 321.157747][ T5312] usb 4-1: USB disconnect, device number 37 [ 321.344404][ T5331] steelseries 0003:1038:12B6.004E: unbalanced delimiter at end of report description [ 321.355855][ T5331] steelseries 0003:1038:12B6.004E: probe with driver steelseries failed with error -22 [ 321.482821][ T8] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 321.558851][ T5331] usb 2-1: USB disconnect, device number 33 [ 321.632950][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 321.639820][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 321.651081][ T8] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.668210][ T8] usb 3-1: config 1 interface 0 has no altsetting 0 [ 321.688329][ T8] usb 3-1: string descriptor 0 read error: -22 [ 321.695239][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 321.715364][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.737114][ T8] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input44 [ 322.032761][ T5331] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 322.196075][ T5331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.214674][ T5331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.244027][ T5331] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 322.269469][ T5331] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 322.289279][ T5331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.308732][ T5331] usb 4-1: config 0 descriptor?? [ 322.364721][ T4673] bcm5974 3-1:1.0: could not read from device [ 322.374675][ T4673] bcm5974 3-1:1.0: could not read from device [ 322.384064][ T5312] usb 3-1: USB disconnect, device number 33 [ 322.393907][ T4673] bcm5974 3-1:1.0: could not read from device [ 322.668147][T16181] warn_alloc: 3 callbacks suppressed [ 322.668170][T16181] syz.4.3540: vmalloc error: size 3633152, failed to allocated page array size 7096, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 322.696853][T16181] CPU: 1 UID: 0 PID: 16181 Comm: syz.4.3540 Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 322.707124][T16181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 322.717192][T16181] Call Trace: [ 322.720479][T16181] [ 322.723420][T16181] dump_stack_lvl+0x241/0x360 [ 322.728121][T16181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.733338][T16181] ? __pfx__printk+0x10/0x10 [ 322.737953][T16181] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 322.744389][T16181] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 322.750913][T16181] warn_alloc+0x278/0x410 [ 322.755270][T16181] ? __pfx_warn_alloc+0x10/0x10 [ 322.760154][T16181] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 322.766342][T16181] ? __get_vm_area_node+0x23d/0x270 [ 322.771565][T16181] __vmalloc_node_range_noprof+0x691/0x13f0 [ 322.777496][T16181] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 322.783504][T16181] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 322.789862][T16181] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 322.796045][T16181] ? __get_vm_area_node+0x23d/0x270 [ 322.801268][T16181] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 322.807192][T16181] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 322.813368][T16181] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 322.819124][T16181] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 322.825472][T16181] ? rcu_is_watching+0x15/0xb0 [ 322.830254][T16181] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 322.835741][T16181] ? __kvmalloc_node_noprof+0x72/0x190 [ 322.841236][T16181] __kvmalloc_node_noprof+0x142/0x190 [ 322.846638][T16181] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 322.852815][T16181] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 322.858820][T16181] ? tpg_update_mv_step+0x361/0x4f0 [ 322.864253][T16181] vivid_update_format_cap+0x133c/0x2090 [ 322.869926][T16181] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 322.875943][T16181] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 322.881793][T16181] __video_do_ioctl+0xc23/0xdd0 [ 322.886714][T16181] ? __pfx___video_do_ioctl+0x10/0x10 [ 322.892109][T16181] ? __might_fault+0xc6/0x120 [ 322.896815][T16181] video_usercopy+0x89b/0x1180 [ 322.901615][T16181] ? __pfx___video_do_ioctl+0x10/0x10 [ 322.907038][T16181] ? __pfx_video_usercopy+0x10/0x10 [ 322.912324][T16181] ? __fget_files+0x29/0x470 [ 322.916963][T16181] ? __fget_files+0x3f3/0x470 [ 322.921669][T16181] v4l2_ioctl+0x189/0x1e0 [ 322.926128][T16181] ? __pfx_v4l2_ioctl+0x10/0x10 [ 322.931010][T16181] __se_sys_ioctl+0xf9/0x170 [ 322.935617][T16181] do_syscall_64+0xf3/0x230 [ 322.940144][T16181] ? clear_bhb_loop+0x35/0x90 [ 322.944847][T16181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.950759][T16181] RIP: 0033:0x7f224a37dff9 [ 322.955194][T16181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.973073][T16195] loop1: detected capacity change from 0 to 32768 [ 322.974794][T16181] RSP: 002b:00007f224b0d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.974820][T16181] RAX: ffffffffffffffda RBX: 00007f224a535f80 RCX: 00007f224a37dff9 [ 322.984350][T16195] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3558 (16195) [ 322.989594][T16181] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 322.989614][T16181] RBP: 00007f224a3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 323.026250][T16181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.034218][T16181] R13: 0000000000000000 R14: 00007f224a535f80 R15: 00007ffd35fc08f8 [ 323.042197][T16181] [ 323.052340][T16181] Mem-Info: [ 323.054037][ T5331] kye 0003:0458:0087.004F: item fetching failed at offset 0/2 [ 323.063290][ T5331] kye 0003:0458:0087.004F: parse failed [ 323.068891][ T5331] kye 0003:0458:0087.004F: probe with driver kye failed with error -22 [ 323.080287][T16181] active_anon:12027 inactive_anon:0 isolated_anon:0 [ 323.080287][T16181] active_file:1181 inactive_file:43617 isolated_file:0 [ 323.080287][T16181] unevictable:768 dirty:265 writeback:0 [ 323.080287][T16181] slab_reclaimable:10761 slab_unreclaimable:102921 [ 323.080287][T16181] mapped:24743 shmem:9453 pagetables:844 [ 323.080287][T16181] sec_pagetables:0 bounce:0 [ 323.080287][T16181] kernel_misc_reclaimable:0 [ 323.080287][T16181] free:1272023 free_pcp:3578 free_cma:0 [ 323.090196][T16195] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 323.126650][T16181] Node 0 active_anon:48108kB inactive_anon:0kB active_file:4724kB inactive_file:174392kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98972kB dirty:1056kB writeback:0kB shmem:36276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10292kB pagetables:3376kB sec_pagetables:0kB all_unreclaimable? no [ 323.148427][T16195] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 323.180780][T16195] BTRFS info (device loop1): disk space caching is enabled [ 323.181562][T16181] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 323.188775][T16195] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 323.226924][T16181] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.264754][T16181] lowmem_reserve[]: 0 2463 2464 0 0 [ 323.270021][T16181] Node 0 DMA32 free:1152624kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:47772kB inactive_anon:0kB active_file:4724kB inactive_file:173812kB unevictable:1536kB writepending:1052kB present:3129332kB managed:2550456kB mlocked:0kB bounce:0kB free_pcp:852kB local_pcp:268kB free_cma:0kB [ 323.271091][ T8] usb 4-1: USB disconnect, device number 38 [ 323.311799][T16181] lowmem_reserve[]: 0 0 0 0 0 [ 323.319790][T16181] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:580kB unevictable:0kB writepending:4kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 323.348298][T16181] lowmem_reserve[]: 0 0 0 0 0 [ 323.353102][T16181] Node 1 Normal free:3933088kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:492kB local_pcp:492kB free_cma:0kB [ 323.382376][T16181] lowmem_reserve[]: 0 0 0 0 0 [ 323.387325][T16181] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 323.400168][T16181] Node 0 DMA32: 7*4kB (M) 82*8kB (UME) 346*16kB (UME) 38*32kB (UME) 102*64kB (UME) 73*128kB (UME) 45*256kB (UM) 15*512kB (UME) 10*1024kB (UME) 17*2048kB (UME) 260*4096kB (UM) = 1152524kB [ 323.420100][T16181] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 323.431725][T16181] Node 1 Normal: 63*4kB (UE) 53*8kB (UME) 39*16kB (UME) 176*32kB (UME) 94*64kB (UME) 29*128kB (UME) 23*256kB (UME) 10*512kB (UM) 4*1024kB (UME) 3*2048kB (ME) 951*4096kB (UM) = 3933204kB [ 323.450222][ T51] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 323.450413][T16181] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.461706][T16195] BTRFS info (device loop1): rebuilding free space tree [ 323.467500][T16181] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 323.467522][T16181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.467539][T16181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 323.467556][T16181] 54132 total pagecache pages [ 323.467566][T16181] 0 pages in swap cache [ 323.467574][T16181] Free swap = 124352kB [ 323.482792][T16195] BTRFS info (device loop1): disabling free space tree [ 323.484361][T16181] Total swap = 124996kB [ 323.493621][T16195] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 323.502833][T16181] 2097051 pages RAM [ 323.511553][T16195] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 323.512423][T16181] 0 pages HighMem/MovableOnly [ 323.557227][T16181] 427651 pages reserved [ 323.561410][T16181] 0 pages cma reserved [ 323.590829][T15696] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 323.612728][ T51] usb 3-1: Using ep0 maxpacket: 16 [ 323.619058][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.644895][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.664354][ T51] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 323.673616][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.683229][ T51] usb 3-1: config 0 descriptor?? [ 324.032297][T16226] loop1: detected capacity change from 0 to 4096 [ 324.117045][ T51] cp2112 0003:10C4:EA90.0050: unbalanced delimiter at end of report description [ 324.139322][ T51] cp2112 0003:10C4:EA90.0050: parse failed [ 324.142735][ T1177] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 324.163200][ T51] cp2112 0003:10C4:EA90.0050: probe with driver cp2112 failed with error -22 [ 324.326590][ T51] usb 3-1: USB disconnect, device number 34 [ 324.351967][ T1177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.375436][ T1177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.398226][T16231] mkiss: ax0: crc mode is auto. [ 324.405735][ T1177] usb 4-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 324.424868][ T1177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.444327][ T1177] usb 4-1: config 0 descriptor?? [ 324.863403][ T1177] asus 0003:0B05:1822.0051: unknown main item tag 0x0 [ 324.872956][ T1177] asus 0003:0B05:1822.0051: unknown main item tag 0x0 [ 324.892261][ T1177] asus 0003:0B05:1822.0051: hidraw0: USB HID v0.00 Device [HID 0b05:1822] on usb-dummy_hcd.3-1/input0 [ 324.913070][ T1177] asus 0003:0B05:1822.0051: Asus input not registered [ 324.931300][ T1177] asus 0003:0B05:1822.0051: probe with driver asus failed with error -12 [ 325.094757][ T1177] usb 4-1: USB disconnect, device number 39 [ 325.172693][ T5312] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 325.345244][ T5312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.371439][ T5312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.394807][ T5312] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 325.422748][ T5312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.442354][ T5312] usb 3-1: config 0 descriptor?? [ 325.542836][ T1177] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 325.661024][T16253] loop4: detected capacity change from 0 to 32768 [ 325.705110][ T1177] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.718348][T16253] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 325.729386][ T1177] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.740550][ T1177] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 325.758920][ T1177] usb 2-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 325.768930][ T1177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.803357][ T1177] usb 2-1: config 0 descriptor?? [ 325.807920][T16253] XFS (loop4): Ending clean mount [ 325.847525][T15698] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 325.919251][ T5312] steelseries 0003:1038:12B6.0052: unbalanced delimiter at end of report description [ 325.940778][ T5312] steelseries 0003:1038:12B6.0052: probe with driver steelseries failed with error -22 [ 325.955540][T16255] loop3: detected capacity change from 0 to 32768 [ 325.968509][T16255] JBD2: Ignoring recovery information on journal [ 325.989412][T16255] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 326.034192][T15701] ocfs2: Unmounting device (7,3) on (node local) [ 326.106357][T16269] loop4: detected capacity change from 0 to 256 [ 326.149151][ T5312] usb 3-1: USB disconnect, device number 35 [ 326.160031][T16271] netlink: 'syz.3.3570': attribute type 1 has an invalid length. [ 326.218168][ T1177] kye 0003:0458:0087.0053: item fetching failed at offset 0/2 [ 326.226328][ T1177] kye 0003:0458:0087.0053: parse failed [ 326.231935][ T1177] kye 0003:0458:0087.0053: probe with driver kye failed with error -22 [ 326.298119][T16285] loop3: detected capacity change from 0 to 1024 [ 326.314618][T16285] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 326.327501][T16285] System zones: 0-1, 3-12 [ 326.333266][T16285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.377365][T15701] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.430512][ T1177] usb 2-1: USB disconnect, device number 34 [ 326.526463][T16287] loop4: detected capacity change from 0 to 32768 [ 326.534233][T16287] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3581 (16287) [ 326.549911][T16287] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 326.562530][T16287] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 326.571398][T16287] BTRFS info (device loop4): disk space caching is enabled [ 326.579854][T16287] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 326.683539][T16287] BTRFS info (device loop4): rebuilding free space tree [ 326.705900][T16287] BTRFS info (device loop4): disabling free space tree [ 326.725834][T16287] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 326.737278][T16287] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 326.988920][T16311] loop2: detected capacity change from 0 to 32768 [ 326.998124][T15698] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 327.010756][T16314] loop1: detected capacity change from 0 to 256 [ 327.040074][T16318] netlink: 'syz.0.3587': attribute type 1 has an invalid length. [ 327.057341][T16311] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 327.122739][T16311] XFS (loop2): Ending clean mount [ 327.290802][T15694] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 327.584402][T16331] loop4: detected capacity change from 0 to 32768 [ 327.617464][T16345] __nla_validate_parse: 1 callbacks suppressed [ 327.617496][T16345] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3598'. [ 327.619120][T16346] loop2: detected capacity change from 0 to 256 [ 327.641023][T16331] (syz.4.3586,16331,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 327.655346][T16331] (syz.4.3586,16331,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 327.676920][T16350] netlink: 'syz.3.3600': attribute type 29 has an invalid length. [ 327.700057][T16350] netlink: 'syz.3.3600': attribute type 29 has an invalid length. [ 327.715804][T16331] JBD2: Ignoring recovery information on journal [ 327.744043][T16331] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 327.821361][T16359] netlink: 209800 bytes leftover after parsing attributes in process `syz.0.3603'. [ 327.823539][T15698] ocfs2: Unmounting device (7,4) on (node local) [ 327.932697][ T940] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 327.966786][T16369] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3604'. [ 328.102683][ T940] usb 2-1: Using ep0 maxpacket: 16 [ 328.113769][ T940] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 328.121772][ T940] usb 2-1: config 0 has no interface number 0 [ 328.143093][ T940] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 328.162682][ T940] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 328.182715][ T1177] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 328.191276][ T940] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 328.212689][ T940] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 328.221401][ T940] usb 2-1: Product: syz [ 328.232690][ T940] usb 2-1: SerialNumber: syz [ 328.238438][ T940] usb 2-1: config 0 descriptor?? [ 328.246879][ T940] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 328.255332][ T940] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input45 [ 328.334510][ T1177] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 328.348763][ T1177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 328.360407][ T1177] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 328.373572][ T1177] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.395606][ T1177] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 328.412684][ T1177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.421348][ T1177] usb 4-1: Product: syz [ 328.442654][ T1177] usb 4-1: Manufacturer: syz [ 328.447315][ T1177] usb 4-1: SerialNumber: syz [ 328.453289][ T1177] usb 4-1: config 0 descriptor?? [ 328.476282][ T1177] redrat3 4-1:0.0: Couldn't find all endpoints [ 328.493371][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 328.500581][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 328.507757][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 328.514983][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 328.522615][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 328.529713][ T1177] usb 2-1: USB disconnect, device number 35 [ 328.529800][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 328.529827][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 328.649820][ T1177] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 328.708616][ T8] usb 4-1: USB disconnect, device number 40 [ 329.172767][ T1177] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 329.214740][T16373] loop2: detected capacity change from 0 to 2048 [ 329.244068][T16373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.326309][T15694] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.343282][ T1177] usb 4-1: Using ep0 maxpacket: 16 [ 329.354842][ T1177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 329.382769][ T1177] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 329.402922][ T1177] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 329.427751][ T1177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 329.451161][ T1177] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 329.466184][ T1177] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 329.476238][ T1177] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 329.489518][T16377] loop4: detected capacity change from 0 to 32768 [ 329.496891][ T1177] usb 4-1: Product: syz [ 329.501084][ T1177] usb 4-1: Manufacturer: syz [ 329.507532][ T1177] usb 4-1: SerialNumber: syz [ 329.514963][ T1177] usb 4-1: config 0 descriptor?? [ 329.522177][ T1177] usb 4-1: NFC: intf ffff88807b445000 id ffffffff8f31e7e0 [ 329.559312][ T1177] nfcmrvl 4-1:0.0: NFC: registered with nci successfully [ 329.620137][T16375] loop1: detected capacity change from 0 to 32768 [ 329.641859][T16375] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 329.667247][T16375] XFS (loop1): Ending clean mount [ 329.704976][T15696] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 329.709498][T16394] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3614'. [ 329.720796][T16396] netlink: 'syz.4.3615': attribute type 29 has an invalid length. [ 329.733909][T16396] netlink: 'syz.4.3615': attribute type 29 has an invalid length. [ 329.769829][ T51] usb 4-1: USB disconnect, device number 41 [ 329.778425][ T51] usb 4-1: NFC: intf ffff88807b445000 [ 329.827929][T16398] loop1: detected capacity change from 0 to 256 [ 329.867984][T16402] loop4: detected capacity change from 0 to 16 [ 329.877017][T16402] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 329.895042][T16402] syz.4.3618: attempt to access beyond end of device [ 329.895042][T16402] md133: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 329.975925][T16412] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 329.986096][T16412] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 330.242713][T16414] loop2: detected capacity change from 0 to 32768 [ 330.395053][T16424] netlink: 'syz.4.3627': attribute type 1 has an invalid length. [ 330.422748][T16424] netlink: 9384 bytes leftover after parsing attributes in process `syz.4.3627'. [ 330.438217][T16426] could not open pipe file descriptor [ 330.454519][T16416] loop1: detected capacity change from 0 to 32768 [ 330.478254][T16416] (syz.1.3624,16416,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 330.505617][T16416] (syz.1.3624,16416,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 330.591088][T16416] JBD2: Ignoring recovery information on journal [ 330.705830][T16416] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 330.770905][T16422] loop3: detected capacity change from 0 to 32768 [ 330.810939][T15696] ocfs2: Unmounting device (7,1) on (node local) [ 330.835252][T16422] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 330.959538][T16422] XFS (loop3): Ending clean mount [ 330.969285][T16422] XFS (loop3): Quotacheck needed: Please wait. [ 330.970565][T16458] loop4: detected capacity change from 0 to 512 [ 331.007607][T16441] loop2: detected capacity change from 0 to 32768 [ 331.017088][T16441] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3635 (16441) [ 331.018984][T16460] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 331.044682][T16460] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 331.067229][T16422] XFS (loop3): Quotacheck: Done. [ 331.072696][T16441] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 331.083491][T16441] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 331.087344][T16458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.092120][T16441] BTRFS info (device loop2): using free-space-tree [ 331.121510][T16458] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.164628][T16472] nbd: illegal input index 67108864 [ 331.183287][T15701] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 331.195058][T16475] loop1: detected capacity change from 0 to 64 [ 331.208590][T15698] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.213151][T16478] could not open pipe file descriptor [ 331.356407][ T29] audit: type=1326 audit(1728498047.949:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16491 comm="syz.0.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4003d74fa7 code=0x7ffc0000 [ 331.379324][ T29] audit: type=1326 audit(1728498047.949:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16491 comm="syz.0.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4003d19959 code=0x7ffc0000 [ 331.402167][ T29] audit: type=1326 audit(1728498047.949:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16491 comm="syz.0.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4003d74fa7 code=0x7ffc0000 [ 331.425004][ T29] audit: type=1326 audit(1728498047.949:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16491 comm="syz.0.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4003d19959 code=0x7ffc0000 [ 331.447505][ T29] audit: type=1326 audit(1728498047.949:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16491 comm="syz.0.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4003d74fa7 code=0x7ffc0000 [ 331.469961][ T29] audit: type=1326 audit(1728498047.949:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16491 comm="syz.0.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4003d19959 code=0x7ffc0000 [ 331.492503][ T29] audit: type=1326 audit(1728498047.949:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16491 comm="syz.0.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4003d74fa7 code=0x7ffc0000 [ 331.515589][ T29] audit: type=1326 audit(1728498047.949:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16491 comm="syz.0.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4003d19959 code=0x7ffc0000 [ 331.538459][ T29] audit: type=1326 audit(1728498047.949:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16491 comm="syz.0.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4003d74fa7 code=0x7ffc0000 [ 331.560816][ T29] audit: type=1326 audit(1728498047.949:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16491 comm="syz.0.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4003d19959 code=0x7ffc0000 [ 331.655944][T15694] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 331.837522][T16512] loop3: detected capacity change from 0 to 32768 [ 331.846455][T16512] (syz.3.3657,16512,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 331.860127][T16512] (syz.3.3657,16512,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 331.879191][T16512] JBD2: Ignoring recovery information on journal [ 331.882808][ T5331] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 331.906278][T16512] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 331.956286][T15701] ocfs2: Unmounting device (7,3) on (node local) [ 332.008392][T16524] loop4: detected capacity change from 0 to 256 [ 332.028759][T16524] FAT-fs (loop4): Directory bread(block 64) failed [ 332.036517][T16524] FAT-fs (loop4): Directory bread(block 65) failed [ 332.045209][T16524] FAT-fs (loop4): Directory bread(block 66) failed [ 332.051875][T16524] FAT-fs (loop4): Directory bread(block 67) failed [ 332.059184][T16524] FAT-fs (loop4): Directory bread(block 68) failed [ 332.068377][T16524] FAT-fs (loop4): Directory bread(block 69) failed [ 332.076728][T16524] FAT-fs (loop4): Directory bread(block 70) failed [ 332.076830][ T5331] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 332.085572][T16524] FAT-fs (loop4): Directory bread(block 71) failed [ 332.102018][T16524] FAT-fs (loop4): Directory bread(block 72) failed [ 332.112248][T16524] FAT-fs (loop4): Directory bread(block 73) failed [ 332.113335][ T5284] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 332.126525][ T5331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 332.147934][T16524] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 332.152347][ T5331] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 332.170604][ T5331] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.194172][ T5331] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 332.203382][ T5331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.212453][ T5331] usb 2-1: Product: syz [ 332.216792][ T5331] usb 2-1: Manufacturer: syz [ 332.222188][ T5331] usb 2-1: SerialNumber: syz [ 332.229078][ T5331] usb 2-1: config 0 descriptor?? [ 332.240143][ T5331] redrat3 2-1:0.0: Couldn't find all endpoints [ 332.471279][ T5331] usb 2-1: USB disconnect, device number 36 [ 332.513363][ T5284] usb 3-1: device not accepting address 36, error -71 [ 332.521972][T16542] loop4: detected capacity change from 0 to 32768 [ 332.529448][T16542] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3670 (16542) [ 332.545258][T16542] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 332.555703][T16542] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 332.564785][T16542] BTRFS info (device loop4): using free-space-tree [ 332.613457][T15698] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 332.633447][T16563] loop3: detected capacity change from 0 to 256 [ 332.641290][T16563] MINIX-fs: mounting file system with errors, running fsck is recommended [ 332.703655][T16565] loop3: detected capacity change from 0 to 16 [ 332.710925][T16565] erofs: (device loop3): mounted with root inode @ nid 36. [ 332.789982][T16572] loop2: detected capacity change from 0 to 256 [ 332.806119][T16573] loop4: detected capacity change from 0 to 1024 [ 332.827679][T16572] FAT-fs (loop2): Directory bread(block 64) failed [ 332.836827][T16572] FAT-fs (loop2): Directory bread(block 65) failed [ 332.844353][T16572] FAT-fs (loop2): Directory bread(block 66) failed [ 332.850997][T16572] FAT-fs (loop2): Directory bread(block 67) failed [ 332.857859][T16572] FAT-fs (loop2): Directory bread(block 68) failed [ 332.864836][T16572] FAT-fs (loop2): Directory bread(block 69) failed [ 332.871429][T16572] FAT-fs (loop2): Directory bread(block 70) failed [ 332.880845][T16572] FAT-fs (loop2): Directory bread(block 71) failed [ 332.891397][T16572] FAT-fs (loop2): Directory bread(block 72) failed [ 332.900376][T16572] FAT-fs (loop2): Directory bread(block 73) failed [ 332.931883][T16572] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 332.939707][ T5331] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 333.140143][T16577] loop4: detected capacity change from 0 to 32768 [ 333.153545][T16577] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 333.164087][ T5331] usb 2-1: Using ep0 maxpacket: 16 [ 333.170735][ T5331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 333.180647][ T5331] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 333.190426][ T5331] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 333.202263][ T5331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 333.212658][ T5331] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 333.227414][ T5331] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 333.237574][ T5331] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 333.245950][ T5331] usb 2-1: Product: syz [ 333.254109][ T5331] usb 2-1: Manufacturer: syz [ 333.258738][ T5331] usb 2-1: SerialNumber: syz [ 333.264967][ T5331] usb 2-1: config 0 descriptor?? [ 333.265884][T15698] ocfs2: Unmounting device (7,4) on (node local) [ 333.275512][ T5331] usb 2-1: NFC: intf ffff88805f453000 id ffffffff8f31e7e0 [ 333.326548][ T5331] nfcmrvl 2-1:0.0: NFC: registered with nci successfully [ 333.408981][T16604] loop2: detected capacity change from 0 to 256 [ 333.416903][T16604] MINIX-fs: mounting file system with errors, running fsck is recommended [ 333.468892][T16608] loop2: detected capacity change from 0 to 1024 [ 333.497423][ T5331] usb 2-1: USB disconnect, device number 37 [ 333.504079][ T5331] usb 2-1: NFC: intf ffff88805f453000 [ 333.551503][T16612] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3693'. [ 333.603010][ T940] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 333.749367][T16616] netlink: 'syz.4.3697': attribute type 1 has an invalid length. [ 333.754007][ T940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 333.774403][ T940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.785886][ T940] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 333.800913][ T940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.812033][ T940] usb 4-1: config 0 descriptor?? [ 333.839175][T16623] loop4: detected capacity change from 0 to 16 [ 333.849968][T16623] erofs: (device loop4): mounted with root inode @ nid 36. [ 334.066055][T16624] loop2: detected capacity change from 0 to 32768 [ 334.105494][T16624] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 334.173749][T15694] ocfs2: Unmounting device (7,2) on (node local) [ 334.249421][ T940] elecom 0003:056E:00FE.0054: unknown main item tag 0x0 [ 334.272744][ T940] elecom 0003:056E:00FE.0054: unknown main item tag 0x6 [ 334.282808][ T940] elecom 0003:056E:00FE.0054: unknown main item tag 0x5 [ 334.289836][ T940] elecom 0003:056E:00FE.0054: unknown main item tag 0x4 [ 334.296977][ T940] elecom 0003:056E:00FE.0054: unknown main item tag 0x0 [ 334.304042][ T940] elecom 0003:056E:00FE.0054: unknown main item tag 0x0 [ 334.311031][ T940] elecom 0003:056E:00FE.0054: unknown main item tag 0x0 [ 334.318291][ T940] elecom 0003:056E:00FE.0054: unknown main item tag 0x0 [ 334.325324][ T940] elecom 0003:056E:00FE.0054: unknown main item tag 0x0 [ 334.332205][T16626] loop4: detected capacity change from 0 to 40427 [ 334.332356][ T940] elecom 0003:056E:00FE.0054: unknown main item tag 0x0 [ 334.340146][T16626] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 334.348771][ T940] elecom 0003:056E:00FE.0054: unknown global tag 0xd [ 334.353594][T16626] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 334.355247][T16626] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 334.365393][ T940] elecom 0003:056E:00FE.0054: item 0 4 1 13 parsing failed [ 334.373232][T16626] F2FS-fs (loop4): Found nat_bits in checkpoint [ 334.376198][ T940] elecom 0003:056E:00FE.0054: probe with driver elecom failed with error -22 [ 334.419321][T16626] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 334.426614][T16626] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 334.445422][T16626] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 334.485048][ T940] usb 4-1: USB disconnect, device number 42 [ 334.827872][T16651] loop2: detected capacity change from 0 to 2048 [ 341.062629][ C1] sched: DL replenish lagged too much [ 392.460188][ T83] ================================================================== [ 392.468310][ T83] BUG: KASAN: null-ptr-deref in drop_buffers+0x6f/0x710 [ 392.475277][ T83] Read of size 4 at addr 0000000000000060 by task kswapd0/83 [ 392.482656][ T83] [ 392.484986][ T83] CPU: 0 UID: 0 PID: 83 Comm: kswapd0 Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 392.494727][ T83] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 392.504802][ T83] Call Trace: [ 392.508112][ T83] [ 392.511053][ T83] dump_stack_lvl+0x241/0x360 [ 392.515783][ T83] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.521020][ T83] ? __pfx__printk+0x10/0x10 [ 392.525636][ T83] ? _printk+0xd5/0x120 [ 392.529820][ T83] print_report+0xe8/0x550 [ 392.534268][ T83] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 392.540647][ T83] ? __virt_addr_valid+0x58/0x530 [ 392.545699][ T83] ? drop_buffers+0x6f/0x710 [ 392.550317][ T83] kasan_report+0x143/0x180 [ 392.554866][ T83] ? drop_buffers+0x6f/0x710 [ 392.559486][ T83] kasan_check_range+0x282/0x290 [ 392.564451][ T83] drop_buffers+0x6f/0x710 [ 392.568899][ T83] try_to_free_buffers+0x295/0x5f0 [ 392.574042][ T83] ? __pfx___might_resched+0x10/0x10 [ 392.579362][ T83] ? __pfx_try_to_free_buffers+0x10/0x10 [ 392.585028][ T83] ? filemap_release_folio+0x2b5/0x4b0 [ 392.590517][ T83] shrink_folio_list+0x240c/0x8cc0 [ 392.595688][ T83] ? __pfx_shrink_folio_list+0x10/0x10 [ 392.601201][ T83] ? __pfx_walk_pud_range+0x10/0x10 [ 392.606429][ T83] ? cgroup_rstat_updated+0x13b/0xc60 [ 392.611837][ T83] ? deref_stack_reg+0x17c/0x210 [ 392.616802][ T83] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 392.622568][ T83] ? stack_trace_save+0x118/0x1d0 [ 392.627615][ T83] ? unwind_next_frame+0x18e6/0x22d0 [ 392.632918][ T83] ? deref_stack_reg+0x17c/0x210 [ 392.637879][ T83] ? memcg_rstat_updated+0x154/0x2f0 [ 392.643198][ T83] ? __mod_memcg_lruvec_state+0x2b0/0x3b0 [ 392.648957][ T83] ? memcg_rstat_updated+0x19/0x2f0 [ 392.654192][ T83] ? rcu_is_watching+0x15/0xb0 [ 392.658986][ T83] evict_folios+0x549b/0x7b50 [ 392.663726][ T83] ? __pfx_evict_folios+0x10/0x10 [ 392.668779][ T83] ? lock_release+0xbf/0xa30 [ 392.673390][ T83] ? __pfx_lock_release+0x10/0x10 [ 392.678437][ T83] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 392.684809][ T83] ? zone_watermark_ok+0x31/0x80 [ 392.689780][ T83] ? should_abort_scan+0x40c/0x4d0 [ 392.694931][ T83] try_to_shrink_lruvec+0x9ab/0xbb0 [ 392.700165][ T83] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 392.705914][ T83] ? rcu_is_watching+0x15/0xb0 [ 392.710707][ T83] ? __pfx_lock_release+0x10/0x10 [ 392.715755][ T83] shrink_one+0x3b9/0x850 [ 392.720118][ T83] ? shrink_node+0x3560/0x3df0 [ 392.724905][ T83] shrink_node+0x37b2/0x3df0 [ 392.729535][ T83] ? shrink_node+0x3560/0x3df0 [ 392.734330][ T83] ? rcu_is_watching+0x15/0xb0 [ 392.739118][ T83] ? percpu_ref_put+0x19/0x180 [ 392.743913][ T83] ? lock_release+0xbf/0xa30 [ 392.748524][ T83] ? __pfx_lock_acquire+0x10/0x10 [ 392.753569][ T83] ? lock_release+0xbf/0xa30 [ 392.758182][ T83] ? __pfx_lock_release+0x10/0x10 [ 392.763233][ T83] ? __pfx_lock_release+0x10/0x10 [ 392.768282][ T83] ? psi_memstall_enter+0x38f/0x530 [ 392.773512][ T83] ? __pfx_shrink_node+0x10/0x10 [ 392.778472][ T83] ? css_next_child+0xbd/0x210 [ 392.783273][ T83] ? mem_cgroup_iter+0x3d/0x420 [ 392.788162][ T83] kswapd+0x1ca3/0x3700 [ 392.792360][ T83] ? kswapd+0xbf1/0x3700 [ 392.796646][ T83] ? __pfx_kswapd+0x10/0x10 [ 392.801181][ T83] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 392.807194][ T83] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 392.813564][ T83] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 392.819922][ T83] ? __pfx_autoremove_wake_function+0x10/0x10 [ 392.826022][ T83] ? __kthread_parkme+0x169/0x1d0 [ 392.831086][ T83] ? __pfx_kswapd+0x10/0x10 [ 392.835614][ T83] kthread+0x2f0/0x390 [ 392.839704][ T83] ? __pfx_kswapd+0x10/0x10 [ 392.844235][ T83] ? __pfx_kthread+0x10/0x10 [ 392.848851][ T83] ret_from_fork+0x4b/0x80 [ 392.853300][ T83] ? __pfx_kthread+0x10/0x10 [ 392.857910][ T83] ret_from_fork_asm+0x1a/0x30 [ 392.862710][ T83] [ 392.865744][ T83] ==================================================================