last executing test programs: 57.384457109s ago: executing program 2 (id=238): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r0, r2, 0x25, 0x2, @val=@netkit}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000200", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x5}}}}}}}, 0x0) 57.201243227s ago: executing program 2 (id=240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) 56.76126071s ago: executing program 2 (id=242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x2}, 0x1c, 0x0}, 0x20008814) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0x2}]}}}}}}}, 0x0) 55.601855174s ago: executing program 2 (id=249): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x8002, &(0x7f0000002640)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec590d6e84de0249d09f31ef580c3d00000000", @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYBLOB="cf471237cad394d297c8d0af15ba4f618729772a2fa0657378c837becbd04116d132bbd963c91ff06e999f0e53904405bcb4f8717c6ae3fabbf96600a2f85e09496cbbdd0902d66d5f55cc66aa99624c4ead0d5ed71f9c8471890b8b8eb8036913d4d4d5c57c43177f3d1411094700b604d46f1a50276a709521802a19b37e93cbeb143e60132fb4e9d378373c3695", @ANYRESHEX, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="91da1f179432e1b6149f3968cad0c4c600cc0c891f4190862df589dfad391419327f9ceeb4b7138398851cf764bb49e584d0a3e1c002b328f08ec9efa8ede8fd737787e5242d7ca64b101a22a7bde67f7983de7ae7c9fd5c521c77109e8c93a5f0c150129a688c6922625725a4587b7d5573e0efc81c69d559932a784356f233e24dc3ecb7b490b0e9985472f18c6a2d7cc00e781d049cc6fb21455b22551ce9c1455125f5bd3e1de827430e0c9de53d87b3a6416c1f25a2", @ANYBLOB="4b6172dee9b39955816f94d0f5e92fc6303fbcb1e84b5cf3f87c85741b4f45503c270fe4c27f6c1545cc81276fa17dc485b989aa82ec4268442b9dc25f5c99122b7ab46b927bef3991fbd1b0459c36a2bfec7d441af041a5fa5eb08144d8bdca84c21eb121b0af", @ANYRES32], 0x1, 0x1b4, &(0x7f00000008c0)="$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") mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 55.328980931s ago: executing program 2 (id=251): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r1, 0x0, &(0x7f0000000440)=""/236}, 0x20) 53.969958695s ago: executing program 2 (id=256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x1c, r1, 0x805, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 53.472266204s ago: executing program 32 (id=256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x1c, r1, 0x805, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 6.069325483s ago: executing program 3 (id=413): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001840)=""/198, 0xc6}], 0x1, 0x33, 0xfffffffd) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 5.745940725s ago: executing program 3 (id=417): syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x35e4, 0x3180, 0x1, 0x40024e}, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191c, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x8, 0x3, 0x0, 0x2ab, 0x4, 0x4, 0x4, 0x3c5b, 0x1, 0x1ff, 0x7, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0xffffffff, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x17, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0x6, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x40009, 0x2, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x400003, 0x9, 0x100, 0x42, 0x4400004], [0x6, 0x6, 0x81000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x1000008, 0x5, 0x8001, 0x7, 0x38, 0x800203, 0x1fe, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x800, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120002, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x10, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1001, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x80, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0xfffffffe, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x10, 0x0, 0x4, 0x5, 0xb19, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.57781967s ago: executing program 0 (id=423): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000fc00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0x1}, 0x50) 4.398078598s ago: executing program 0 (id=426): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x80040007, 0x0, 0x0, 0x41100, 0x18}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 4.313586846s ago: executing program 0 (id=428): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x4b, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0xc0010020, 0x0, 0x7}]}) 3.788545508s ago: executing program 0 (id=432): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) fanotify_init(0x8, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getrusage(0x0, &(0x7f0000000640)) 3.526054184s ago: executing program 0 (id=434): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) write$rfkill(r0, &(0x7f0000000180)={0xfffffc31, 0x7, 0x0, 0x1}, 0x8) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000240)) chown(&(0x7f0000000080)='./file1\x00', 0xffffffffffffffff, 0x0) 3.325322624s ago: executing program 1 (id=436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "1e"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 3.135650192s ago: executing program 1 (id=437): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x8, 0x0, @fd=r0, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x7a96, 0x0, 0x8, 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @private=0xa010100}}, 0x24) 3.021522393s ago: executing program 1 (id=438): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 2.838029151s ago: executing program 1 (id=440): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x4b, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0xc0010020, 0x0, 0x7}]}) 2.581619767s ago: executing program 3 (id=441): r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x1004014, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.528358882s ago: executing program 1 (id=442): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2.359813509s ago: executing program 3 (id=444): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) bind$can_raw(r0, &(0x7f0000000080), 0x10) 2.153314578s ago: executing program 3 (id=446): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x8, 0x0, @fd=r0, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x7a96, 0x0, 0x8, 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @private=0xa010100}}, 0x24) 2.152325138s ago: executing program 0 (id=447): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x4000010) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r1, &(0x7f0000001f80)=""/4082, 0xff2) 2.023926511s ago: executing program 1 (id=449): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$xfs(&(0x7f000000c740), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000300), 0x1, 0xc758, &(0x7f0000018f40)="$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") r0 = open(&(0x7f000000ac80)='./bus\x00', 0x6827e, 0x1e5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000040)={0x0, 0x66}, 0x1, 0x0, 0x0, 0x20044005}, 0x4004804) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000250001000002"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) accept4$unix(r0, &(0x7f0000000400), &(0x7f0000000100)=0x6e, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x80) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',codepage=cp869,umask=00000000000000000000401,part=0x0000000000002420,iocharset=maccenteuro,dir_umask=00000000000000000000220,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x4, 0x337, &(0x7f0000000540)="$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") dup(r4) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000200000f00000004070000000000000002000000420000000c00000000000000000000000000002e00bdec9c56a74fe5"], 0x0, 0x45, 0x0, 0x1}, 0x28) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f0000000040)="3f031c000302140006001e00890000004a1b7880610cc945000088a800008100000081000000", 0x26, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r6, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 2.022260442s ago: executing program 3 (id=450): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000f060101"], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 1.794079444s ago: executing program 4 (id=451): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x7, 0x0, 0x0, 0x101}]}) r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000180)=0x7) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0x6a52) 1.624904211s ago: executing program 4 (id=452): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000700)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xca, 0x0, 0x1000}}}}}}, 0x0) 1.451629278s ago: executing program 4 (id=453): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xa1e}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.150040517s ago: executing program 4 (id=454): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x2, @empty, 0xc}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 1.079535174s ago: executing program 4 (id=455): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x4}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) read(r0, &(0x7f00000002c0)=""/200, 0x39) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 0s ago: executing program 4 (id=456): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$xfs(&(0x7f000000c740), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000300), 0x1, 0xc758, &(0x7f0000018f40)="$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") r0 = open(&(0x7f000000ac80)='./bus\x00', 0x6827e, 0x1e5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) accept4$unix(r0, &(0x7f0000000400), &(0x7f0000000100)=0x6e, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x80) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',codepage=cp869,umask=00000000000000000000401,part=0x0000000000002420,iocharset=maccenteuro,dir_umask=00000000000000000000220,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x4, 0x337, &(0x7f0000000540)="$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") dup(r4) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000200000f00000004070000000000000002000000420000000c00000000000000000000000000002e00bdec9c56a74fe5dfb2"], 0x0, 0x45, 0x0, 0x1}, 0x28) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f0000000040)="3f031c000302140006001e00890000004a1b7880610cc945000088a8000081000000", 0x22, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r6, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.108' (ED25519) to the list of known hosts. [ 83.341461][ T5776] cgroup: Unknown subsys name 'net' [ 83.507494][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.244516][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.574869][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.599557][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.608403][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.631156][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.640761][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.643156][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.649438][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.657369][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.663164][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.671200][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.684378][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.693834][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.703572][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.716364][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.724721][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.732212][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.738703][ T5801] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.752698][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.760535][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.765170][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.775072][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.788611][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.790933][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.805296][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.447072][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 88.540132][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 88.579070][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 88.639028][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 88.713929][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.721462][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.729236][ T5795] bridge_slave_0: entered allmulticast mode [ 88.736350][ T5795] bridge_slave_0: entered promiscuous mode [ 88.780560][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.788030][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.795259][ T5795] bridge_slave_1: entered allmulticast mode [ 88.803104][ T5795] bridge_slave_1: entered promiscuous mode [ 88.869937][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.877157][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.884466][ T5787] bridge_slave_0: entered allmulticast mode [ 88.892419][ T5787] bridge_slave_0: entered promiscuous mode [ 88.900265][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.908336][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.915596][ T5794] bridge_slave_0: entered allmulticast mode [ 88.923262][ T5794] bridge_slave_0: entered promiscuous mode [ 88.959483][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.966654][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.974103][ T5787] bridge_slave_1: entered allmulticast mode [ 88.982011][ T5787] bridge_slave_1: entered promiscuous mode [ 89.001518][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.009512][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.016718][ T5794] bridge_slave_1: entered allmulticast mode [ 89.023930][ T5794] bridge_slave_1: entered promiscuous mode [ 89.045775][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.098652][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.108055][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.115186][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.123267][ T5788] bridge_slave_0: entered allmulticast mode [ 89.130492][ T5788] bridge_slave_0: entered promiscuous mode [ 89.140633][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.147900][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.155203][ T5788] bridge_slave_1: entered allmulticast mode [ 89.162905][ T5788] bridge_slave_1: entered promiscuous mode [ 89.173376][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.185411][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.198056][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.249516][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.289202][ T5795] team0: Port device team_slave_0 added [ 89.319291][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.345198][ T5794] team0: Port device team_slave_0 added [ 89.354356][ T5795] team0: Port device team_slave_1 added [ 89.371795][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.408112][ T5794] team0: Port device team_slave_1 added [ 89.460051][ T5787] team0: Port device team_slave_0 added [ 89.471845][ T5788] team0: Port device team_slave_0 added [ 89.493562][ T5787] team0: Port device team_slave_1 added [ 89.513922][ T5788] team0: Port device team_slave_1 added [ 89.521371][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.529425][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.556862][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.571406][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.578481][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.604656][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.629287][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.636285][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.663571][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.677166][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.684498][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.710840][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.776213][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.783436][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.810386][ T51] Bluetooth: hci2: command tx timeout [ 89.810828][ T5792] Bluetooth: hci1: command tx timeout [ 89.816266][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.849344][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.856536][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.882806][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.888024][ T5792] Bluetooth: hci0: command tx timeout [ 89.894251][ T51] Bluetooth: hci3: command tx timeout [ 89.902392][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.911888][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.938716][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.976413][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.983536][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.009498][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.045184][ T5794] hsr_slave_0: entered promiscuous mode [ 90.052284][ T5794] hsr_slave_1: entered promiscuous mode [ 90.071549][ T5795] hsr_slave_0: entered promiscuous mode [ 90.079745][ T5795] hsr_slave_1: entered promiscuous mode [ 90.086074][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.094151][ T5795] Cannot create hsr debugfs directory [ 90.226375][ T5787] hsr_slave_0: entered promiscuous mode [ 90.233333][ T5787] hsr_slave_1: entered promiscuous mode [ 90.240557][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.249088][ T5787] Cannot create hsr debugfs directory [ 90.277233][ T5788] hsr_slave_0: entered promiscuous mode [ 90.284030][ T5788] hsr_slave_1: entered promiscuous mode [ 90.290664][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.299739][ T5788] Cannot create hsr debugfs directory [ 90.678411][ T5795] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.693281][ T5795] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.703877][ T5795] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.716490][ T5795] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.795517][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.810162][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.828350][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.839584][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.921925][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.934553][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.973460][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.986216][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.064842][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.077259][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.099772][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.110826][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.130389][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.214756][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.253545][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.261011][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.286294][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.293486][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.323797][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.383533][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.412990][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.420206][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.465418][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.502307][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.509524][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.554513][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.576804][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.620878][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.628172][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.675157][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.682412][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.704484][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.754985][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.762244][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.797617][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.804867][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.871113][ T51] Bluetooth: hci2: command tx timeout [ 91.876691][ T51] Bluetooth: hci1: command tx timeout [ 91.948439][ T51] Bluetooth: hci3: command tx timeout [ 91.953936][ T51] Bluetooth: hci0: command tx timeout [ 92.079331][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.212752][ T5795] veth0_vlan: entered promiscuous mode [ 92.245629][ T5795] veth1_vlan: entered promiscuous mode [ 92.283321][ T28] cfg80211: failed to load regulatory.db [ 92.380864][ T5795] veth0_macvtap: entered promiscuous mode [ 92.397505][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.425844][ T5795] veth1_macvtap: entered promiscuous mode [ 92.457296][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.489861][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.520534][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.530658][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.560605][ T5795] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.571213][ T5795] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.580118][ T5795] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.591180][ T5795] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.618752][ T5787] veth0_vlan: entered promiscuous mode [ 92.685470][ T5787] veth1_vlan: entered promiscuous mode [ 92.735409][ T5788] veth0_vlan: entered promiscuous mode [ 92.755137][ T5794] veth0_vlan: entered promiscuous mode [ 92.785731][ T5788] veth1_vlan: entered promiscuous mode [ 92.804162][ T5794] veth1_vlan: entered promiscuous mode [ 92.853610][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.863187][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.922411][ T5787] veth0_macvtap: entered promiscuous mode [ 92.944016][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.953952][ T5787] veth1_macvtap: entered promiscuous mode [ 92.960172][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.983032][ T5788] veth0_macvtap: entered promiscuous mode [ 93.016380][ T5788] veth1_macvtap: entered promiscuous mode [ 93.033330][ T5794] veth0_macvtap: entered promiscuous mode [ 93.054922][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.066250][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.085698][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.126467][ T5794] veth1_macvtap: entered promiscuous mode [ 93.174477][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.191402][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.202318][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.220150][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.236374][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.249074][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.261794][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.273371][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.289709][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.299190][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.309498][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.320378][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.344448][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.355197][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.365598][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.376948][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.390892][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.403517][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.413393][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.422678][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.433541][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.475305][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.486312][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.497199][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.509094][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.520257][ T5847] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.523050][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.539027][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.554092][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.591965][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.604591][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.614957][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.627272][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.637850][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.648775][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.660297][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.708655][ T5847] usb 4-1: Using ep0 maxpacket: 32 [ 93.721790][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.736215][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.738161][ T5847] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 93.746250][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.761037][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.765585][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.809304][ T5847] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 93.823262][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.834443][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.883974][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.912865][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.947990][ T51] Bluetooth: hci2: command tx timeout [ 93.948181][ T5792] Bluetooth: hci1: command tx timeout [ 93.965194][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.988623][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.028196][ T5792] Bluetooth: hci3: command tx timeout [ 94.029534][ T51] Bluetooth: hci0: command tx timeout [ 94.058312][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.074733][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.083710][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.115516][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.158840][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.174963][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.368133][ T5882] syz.0.1[5882]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.557076][ T5882] loop0: detected capacity change from 0 to 8192 [ 94.592214][ T5882] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 94.608841][ T5882] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 94.619484][ T5882] REISERFS (device loop0): using ordered data mode [ 94.626331][ T5882] reiserfs: using flush barriers [ 94.636610][ T5882] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.660007][ T5882] REISERFS (device loop0): checking transaction log (loop0) [ 94.668261][ T5798] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 94.715970][ T5882] REISERFS (device loop0): Using r5 hash to sort names [ 94.778951][ T5882] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 94.876026][ T5847] gspca_nw80x: reg_w err -71 [ 94.881187][ T5847] nw80x: probe of 4-1:3.0 failed with error -71 [ 94.890912][ T5798] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 94.901562][ T5847] usb 4-1: USB disconnect, device number 2 [ 94.928504][ T5798] usb 2-1: config 0 has no interface number 0 [ 94.934712][ T5798] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 94.987294][ T5798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.028573][ T5798] usb 2-1: config 0 descriptor?? [ 95.060596][ T5798] usb 2-1: selecting invalid altsetting 1 [ 95.090196][ T5798] dvb_ttusb_budget: ttusb_init_controller: error [ 95.096756][ T5798] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 95.274720][ T5798] DVB: Unable to find symbol cx22700_attach() [ 95.383085][ T5898] loop0: detected capacity change from 0 to 47 [ 95.400654][ T5898] ======================================================= [ 95.400654][ T5898] WARNING: The mand mount option has been deprecated and [ 95.400654][ T5898] and is ignored by this kernel. Remove the mand [ 95.400654][ T5898] option from the mount to silence this warning. [ 95.400654][ T5898] ======================================================= [ 95.436607][ T5798] DVB: Unable to find symbol tda10046_attach() [ 95.455562][ T5798] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 95.491013][ T5798] usb 2-1: USB disconnect, device number 2 [ 95.638676][ T5847] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.848464][ T5847] usb 3-1: Using ep0 maxpacket: 16 [ 95.860584][ T5847] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 95.884452][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.900203][ T5847] usb 3-1: Product: syz [ 95.914711][ T5847] usb 3-1: Manufacturer: syz [ 95.924125][ T5847] usb 3-1: SerialNumber: syz [ 95.943492][ T5847] usb 3-1: config 0 descriptor?? [ 95.962561][ T5847] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 95.988013][ T5847] usb 3-1: Detected FT232H [ 96.032520][ T51] Bluetooth: hci2: command tx timeout [ 96.032545][ T5792] Bluetooth: hci1: command tx timeout [ 96.073024][ T5908] loop3: detected capacity change from 0 to 64 [ 96.107943][ T5792] Bluetooth: hci0: command tx timeout [ 96.118099][ T5792] Bluetooth: hci3: command tx timeout [ 96.185770][ T5847] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 96.656447][ T5847] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 96.777955][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.783775][ T5926] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.883631][ T5847] usb 3-1: USB disconnect, device number 2 [ 96.894343][ T5928] loop1: detected capacity change from 0 to 128 [ 96.934441][ T5847] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 96.954675][ T5847] ftdi_sio 3-1:0.0: device disconnected [ 96.960501][ T27] audit: type=1800 audit(1761595318.118:2): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.20" name="file1" dev="loop1" ino=1048592 res=0 errno=0 [ 96.975009][ T5928] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 96.993336][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 97.006286][ T5928] FAT-fs (loop1): Filesystem has been set read-only [ 97.013354][ T5928] syz.1.20: attempt to access beyond end of device [ 97.013354][ T5928] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 97.014149][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.027330][ T5877] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.044308][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.051968][ T5928] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 97.056481][ T8] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 97.077408][ T5928] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 97.091468][ T5929] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 97.093302][ T5928] syz.1.20: attempt to access beyond end of device [ 97.093302][ T5928] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.100235][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.123525][ T27] audit: type=1800 audit(1761595318.288:3): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.20" name="file2" dev="loop1" ino=1048593 res=0 errno=0 [ 97.125623][ T5929] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 97.162873][ T8] usb 4-1: config 0 descriptor?? [ 97.185982][ T5928] syz.1.20 (5928) used greatest stack depth: 20304 bytes left [ 97.239995][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.257022][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.278551][ T5877] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.297115][ T5877] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.318465][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.347140][ T5877] usb 1-1: config 0 descriptor?? [ 97.640004][ T8] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 97.647182][ T8] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 97.656172][ T8] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 97.666622][ T8] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 97.678941][ T8] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 97.687876][ T5847] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.691311][ T8] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 97.797054][ T5877] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 97.865295][ T5877] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 97.901434][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.921617][ T5847] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 97.937774][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.968987][ T5847] usb 2-1: config 0 descriptor?? [ 97.990430][ T5916] i2c i2c-1: unsupported multi-msg i2c transaction [ 98.021599][ T5877] usb 4-1: USB disconnect, device number 3 [ 98.076096][ T5939] loop2: detected capacity change from 0 to 128 [ 98.223752][ T5833] usb 1-1: USB disconnect, device number 2 [ 98.415902][ T5847] wacom 0003:056A:00D0.0003: unknown main item tag 0x0 [ 98.430538][ T5847] wacom 0003:056A:00D0.0003: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 98.455804][ T5847] wacom 0003:056A:00D0.0003: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.1-1/input0 [ 98.472888][ T5847] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D0.0003/input/input6 [ 98.693749][ T5847] usb 2-1: USB disconnect, device number 3 [ 98.957792][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.137879][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 99.168356][ T9] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 99.176522][ T9] usb 4-1: config 0 has no interface number 0 [ 99.195899][ T9] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 99.202939][ T5954] loop0: detected capacity change from 0 to 32768 [ 99.231635][ T9] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 99.252617][ T9] usb 4-1: config 0 interface 41 has no altsetting 0 [ 99.276040][ T9] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 99.296836][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.327866][ T9] usb 4-1: Product: syz [ 99.332257][ T9] usb 4-1: Manufacturer: syz [ 99.336904][ T9] usb 4-1: SerialNumber: syz [ 99.345941][ T9] usb 4-1: config 0 descriptor?? [ 99.348582][ T5954] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 99.351923][ T5950] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 99.390747][ T5950] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 99.410871][ T5962] syz.2.29 uses obsolete (PF_INET,SOCK_PACKET) [ 99.545576][ T5954] XFS (loop0): Ending clean mount [ 99.563179][ T5954] XFS (loop0): Quotacheck needed: Please wait. [ 99.620257][ T5792] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15 [ 99.646868][ T5954] XFS (loop0): Quotacheck: Done. [ 99.677991][ T5847] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.706233][ T5950] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 99.715541][ T5950] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 99.870124][ T5787] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 99.887807][ T5847] usb 2-1: Using ep0 maxpacket: 16 [ 99.910322][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.930537][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.957314][ T5847] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 99.982673][ T5847] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 99.994022][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.006829][ T5847] usb 2-1: config 0 descriptor?? [ 100.086345][ T5972] loop2: detected capacity change from 0 to 256 [ 100.127899][ T5972] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.149967][ T9] Error reading MAC address [ 100.155651][ T5972] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 100.164938][ T5950] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 100.194274][ T5950] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 100.238815][ T5972] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 100.428638][ T9] sr9700 4-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 100.478262][ T5847] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 100.483320][ T9] usb 4-1: USB disconnect, device number 4 [ 100.507655][ T5847] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 100.552123][ T5847] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 100.569465][ T5847] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 100.596795][ T5847] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 100.614827][ T5847] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 100.634109][ T5977] loop2: detected capacity change from 0 to 64 [ 100.670122][ T5963] netlink: 'syz.1.30': attribute type 2 has an invalid length. [ 100.674695][ T5979] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.691173][ T5963] netlink: 244 bytes leftover after parsing attributes in process `syz.1.30'. [ 100.719308][ T5847] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 100.738031][ T5847] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 100.749557][ T27] audit: type=1800 audit(1761595321.908:4): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.35" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 100.819409][ T5840] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 100.849188][ T5847] usb 2-1: USB disconnect, device number 4 [ 100.858102][ T5840] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 100.910699][ T5840] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 100.955453][ T5840] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 101.036477][ T5983] loop2: detected capacity change from 0 to 1024 [ 101.058810][ T5983] EXT4-fs: Ignoring removed nobh option [ 101.081278][ T5983] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 101.246184][ T5983] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz.2.37: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 101.282316][ T5983] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.37: couldn't read orphan inode 11 (err -117) [ 101.302878][ T5983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.402759][ T5983] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.37: Invalid block bitmap block 0 in block_group 0 [ 101.459027][ T5983] Quota error (device loop2): write_blk: dquota write failed [ 101.487359][ T5983] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 101.515179][ T5994] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.37: Invalid block bitmap block 0 in block_group 0 [ 101.567807][ T5983] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.37: Failed to acquire dquot type 0 [ 101.683382][ T38] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm kworker/u4:2: Invalid inode table block 8589934593 in block_group 0 [ 101.752054][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.762103][ T5999] Bluetooth: MGMT ver 1.22 [ 101.776703][ T5999] loop3: detected capacity change from 0 to 8 [ 101.785083][ T5999] squashfs: Unknown parameter '' [ 101.973959][ T6001] netlink: 'syz.2.42': attribute type 28 has an invalid length. [ 102.059680][ T5990] loop0: detected capacity change from 0 to 32768 [ 102.088073][ T5990] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 102.131762][ T5990] XFS (loop0): Ending clean mount [ 102.173301][ T5990] XFS (loop0): User initiated shutdown received. [ 102.183087][ T5990] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 102.206451][ T5990] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 102.226751][ T5990] XFS (loop0): Error -5 reserving per-AG metadata reserve pool. [ 102.270675][ T5787] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 102.310027][ T5840] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 102.511714][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.527747][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.574304][ T5840] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.594103][ T5840] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.630132][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.651025][ T5840] usb 4-1: config 0 descriptor?? [ 103.101270][ T5840] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 103.138076][ T5840] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 103.221263][ T6017] loop1: detected capacity change from 0 to 40427 [ 103.247247][ T6017] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 103.273613][ T6017] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 103.302315][ T6019] loop0: detected capacity change from 0 to 40427 [ 103.344296][ T6019] F2FS-fs (loop0): invalid crc value [ 103.374122][ T6019] F2FS-fs (loop0): Found nat_bits in checkpoint [ 103.389863][ T6017] F2FS-fs (loop1): Found nat_bits in checkpoint [ 103.498791][ T5847] usb 4-1: USB disconnect, device number 5 [ 103.582941][ T6019] F2FS-fs (loop0): Start checkpoint disabled! [ 103.599664][ T6017] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 103.628657][ T6017] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 103.651230][ T6019] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 104.463889][ T6035] loop3: detected capacity change from 0 to 256 [ 104.520962][ T6017] syz.1.48 (6017): drop_caches: 2 [ 104.583489][ T6035] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 104.673875][ T11] kworker/u4:0: attempt to access beyond end of device [ 104.673875][ T11] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 104.724068][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 105.625455][ T6037] loop2: detected capacity change from 0 to 32768 [ 105.800814][ T6037] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 105.824408][ T969] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 106.053725][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.087045][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.101684][ T969] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 106.112123][ T969] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 106.122633][ T969] usb 4-1: Manufacturer: syz [ 106.130920][ T969] usb 4-1: config 0 descriptor?? [ 106.144078][ T5794] ocfs2: Unmounting device (7,2) on (node local) [ 106.547891][ T5840] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 106.574074][ T969] cougar 0003:060B:700A.0006: unknown main item tag 0x0 [ 106.583501][ T969] cougar 0003:060B:700A.0006: unknown main item tag 0x0 [ 106.598023][ T969] cougar 0003:060B:700A.0006: unknown main item tag 0x0 [ 106.615431][ T969] cougar 0003:060B:700A.0006: unknown main item tag 0x0 [ 106.622945][ T969] cougar 0003:060B:700A.0006: unknown main item tag 0x0 [ 106.649393][ T969] cougar 0003:060B:700A.0006: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 106.747400][ T5840] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 106.761736][ T6076] loop2: detected capacity change from 0 to 1024 [ 106.775080][ T5840] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 106.792247][ T5840] usb 2-1: config 0 has no interface number 0 [ 106.808012][ T6076] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.821261][ T5840] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 106.854760][ T6076] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 106.857802][ T5840] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 106.872793][ T969] usb 4-1: USB disconnect, device number 6 [ 106.883168][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.893108][ T6076] EXT4-fs (loop2): orphan cleanup on readonly fs [ 106.900931][ T5840] usb 2-1: config 0 descriptor?? [ 106.906739][ T6068] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 106.930545][ T6076] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.67: Invalid inode table block 0 in block_group 0 [ 106.968325][ T6076] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 106.980817][ T6076] EXT4-fs error (device loop2): ext4_quota_write:7322: inode #3: comm syz.2.67: mark_inode_dirty error [ 107.040385][ T6076] Quota error (device loop2): write_blk: dquota write failed [ 107.063917][ T6076] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 107.090247][ T6076] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.67: Failed to acquire dquot type 0 [ 107.105198][ T6076] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.67: Invalid inode table block 0 in block_group 0 [ 107.135592][ T6076] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 107.143579][ T6072] loop0: detected capacity change from 0 to 32768 [ 107.147590][ T6076] EXT4-fs error (device loop2): ext4_ext_truncate:4451: inode #15: comm syz.2.67: mark_inode_dirty error [ 107.168605][ T6076] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.67: Invalid inode table block 0 in block_group 0 [ 107.190629][ T6076] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 107.206199][ T6076] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 107.216365][ T6076] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.67: Invalid inode table block 0 in block_group 0 [ 107.235752][ T6072] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 107.246053][ T6076] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 107.271619][ T6076] EXT4-fs error (device loop2): ext4_truncate:4294: inode #15: comm syz.2.67: mark_inode_dirty error [ 107.284672][ T6076] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 107.326859][ T6076] EXT4-fs (loop2): 1 truncate cleaned up [ 107.361018][ T6076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.532510][ T6076] EXT4-fs (loop2): shut down requested (1) [ 107.579223][ T5840] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input10 [ 107.672532][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.713450][ T6084] loop3: detected capacity change from 0 to 1024 [ 107.726674][ T6084] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.761495][ T6084] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.848369][ T6084] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.915675][ T6084] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.68: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 107.954886][ T6084] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.68: couldn't read orphan inode 11 (err -117) [ 107.987233][ T6084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.004332][ T9] usb 2-1: USB disconnect, device number 5 [ 108.008310][ C1] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 108.081147][ T6084] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.68: Invalid block bitmap block 0 in block_group 0 [ 108.096962][ T6084] Quota error (device loop3): write_blk: dquota write failed [ 108.104028][ T5787] ocfs2: Unmounting device (7,0) on (node local) [ 108.116230][ T6084] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 108.127341][ T6084] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.68: Failed to acquire dquot type 0 [ 108.148376][ T6090] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz.3.68: Invalid inode table block 8589934593 in block_group 0 [ 108.209868][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.247087][ T38] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm kworker/u4:2: Invalid inode table block 8589934593 in block_group 0 [ 108.281630][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.408250][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 108.415980][ T8] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 108.428593][ T8] usb 3-1: config 0 has no interface number 0 [ 108.441716][ T8] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 108.451296][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.459973][ T8] usb 3-1: Product: syz [ 108.464336][ T8] usb 3-1: Manufacturer: syz [ 108.470597][ T8] usb 3-1: SerialNumber: syz [ 108.480994][ T8] usb 3-1: config 0 descriptor?? [ 108.490677][ T8] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 108.630895][ T6096] loop3: detected capacity change from 0 to 4096 [ 108.647887][ T6096] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 108.667981][ T5877] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 108.710683][ T8] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 108.736130][ T8] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 108.776869][ T6096] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 108.870126][ T5877] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 108.893569][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.899334][ T6099] capability: warning: `syz.3.72' uses 32-bit capabilities (legacy support in use) [ 108.930247][ T5877] usb 1-1: config 0 descriptor?? [ 108.947797][ T969] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 108.962400][ T5877] cp210x 1-1:0.0: cp210x converter detected [ 109.039806][ T5795] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 109.128296][ T969] usb 2-1: Using ep0 maxpacket: 32 [ 109.144937][ T969] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 109.154409][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.157624][ T5833] usb 3-1: USB disconnect, device number 3 [ 109.162655][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 109.176331][ T969] usb 2-1: config 0 descriptor?? [ 109.217456][ T5833] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 109.236031][ T5833] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 109.255364][ T5833] quatech2 3-1:0.51: device disconnected [ 109.404505][ T969] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 109.414649][ T5877] usb 1-1: cp210x converter now attached to ttyUSB0 [ 109.418549][ T969] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 109.438893][ T969] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 109.446127][ T969] usb 2-1: media controller created [ 109.468110][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 109.482930][ T969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.611225][ T969] az6027: usb out operation failed. (-71) [ 109.622935][ T969] az6027: usb out operation failed. (-71) [ 109.628907][ T969] stb0899_attach: Driver disabled by Kconfig [ 109.636348][ T969] az6027: no front-end attached [ 109.636348][ T969] [ 109.639595][ T5833] usb 1-1: USB disconnect, device number 3 [ 109.656674][ T969] az6027: usb out operation failed. (-71) [ 109.662664][ T969] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 109.668859][ T5833] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 109.677251][ T969] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 109.682472][ T5833] cp210x 1-1:0.0: device disconnected [ 109.693761][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 109.705603][ T8] usb 4-1: config 0 has no interfaces? [ 109.715658][ T8] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 109.736548][ T969] dvb-usb: schedule remote query interval to 400 msecs. [ 109.749500][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.759762][ T969] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 109.789881][ T8] usb 4-1: config 0 descriptor?? [ 109.816442][ T969] usb 2-1: USB disconnect, device number 6 [ 109.899573][ T969] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 110.049044][ T9] usb 4-1: USB disconnect, device number 7 [ 110.415754][ T6111] loop1: detected capacity change from 0 to 2048 [ 110.420022][ T6107] loop2: detected capacity change from 0 to 32768 [ 110.448971][ T6111] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.488305][ T6107] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 110.578487][ T969] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.772072][ T969] usb 1-1: Using ep0 maxpacket: 8 [ 110.808653][ T969] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.823283][ T969] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.845385][ T969] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.856654][ T969] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.863974][ T6107] XFS (loop2): Ending clean mount [ 110.869956][ T969] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.886952][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.895952][ T6107] XFS (loop2): Quotacheck needed: Please wait. [ 110.992262][ T6107] XFS (loop2): Quotacheck: Done. [ 111.128819][ T969] usb 1-1: GET_CAPABILITIES returned 0 [ 111.157601][ T969] usbtmc 1-1:16.0: can't read capabilities [ 111.178562][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 111.354011][ T5794] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 111.392811][ T5833] usb 1-1: USB disconnect, device number 4 [ 111.412877][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 111.445290][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 111.459782][ T9] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 111.487820][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.496281][ T9] usb 2-1: Product: syz [ 111.508366][ T9] usb 2-1: Manufacturer: syz [ 111.513167][ T9] usb 2-1: SerialNumber: syz [ 111.548773][ T9] usb 2-1: config 0 descriptor?? [ 111.563051][ T6124] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 111.579113][ T6124] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 111.833149][ T6124] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 111.863157][ T6124] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 112.193709][ T6148] warning: `syz.2.92' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.355821][ T6152] netlink: 20 bytes leftover after parsing attributes in process `syz.3.94'. [ 112.567040][ T6159] loop3: detected capacity change from 0 to 128 [ 112.580264][ T6159] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.612827][ T6159] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.712910][ T9] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 112.744699][ T9] usb 2-1: USB disconnect, device number 7 [ 112.806701][ T3487] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 113.051065][ T6167] loop0: detected capacity change from 0 to 4096 [ 113.094813][ T6169] loop3: detected capacity change from 0 to 8192 [ 113.134581][ T6169] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 113.160327][ T6171] loop2: detected capacity change from 0 to 2048 [ 113.173697][ T6173] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.188614][ T6169] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 113.202386][ T6169] REISERFS (device loop3): using ordered data mode [ 113.209632][ T6169] reiserfs: using flush barriers [ 113.233842][ T6169] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 113.248307][ T6174] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.272291][ T6169] REISERFS (device loop3): checking transaction log (loop3) [ 113.329560][ T6169] REISERFS (device loop3): Using r5 hash to sort names [ 113.358210][ T6169] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 113.408938][ T27] audit: type=1800 audit(1761595334.578:5): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.102" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 114.011399][ T6188] loop3: detected capacity change from 0 to 64 [ 114.105610][ T6192] loop0: detected capacity change from 0 to 8 [ 114.110756][ T5792] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 114.122072][ T5792] Bluetooth: hci2: Injecting HCI hardware error event [ 114.130621][ T51] Bluetooth: hci2: hardware error 0x00 [ 114.308879][ T6194] loop3: detected capacity change from 0 to 2048 [ 114.343087][ T6194] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 114.369849][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.396201][ T6196] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.413392][ T6197] netlink: 'syz.0.110': attribute type 4 has an invalid length. [ 114.573698][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 114.606000][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 114.627327][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.640075][ T8] usb 3-1: Product: syz [ 114.644316][ T8] usb 3-1: Manufacturer: syz [ 114.652829][ T8] usb 3-1: SerialNumber: syz [ 114.672779][ T8] usb 3-1: config 0 descriptor?? [ 115.381254][ T5847] usb 3-1: USB disconnect, device number 4 [ 115.439014][ T6211] loop3: detected capacity change from 0 to 4096 [ 115.632326][ T6212] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.723586][ T6209] loop0: detected capacity change from 0 to 65536 [ 115.784534][ T6209] XFS (loop0): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 115.888767][ T6209] XFS (loop0): Ending clean mount [ 116.187927][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 116.951326][ T5787] XFS (loop0): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 117.244412][ T6230] loop2: detected capacity change from 0 to 65536 [ 117.309941][ T6230] XFS (loop2): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 117.399849][ T6230] XFS (loop2): Ending clean mount [ 117.497842][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 117.668527][ T6227] loop3: detected capacity change from 0 to 32768 [ 117.693237][ T6227] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.117 (6227) [ 118.065317][ T8] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 118.213320][ T8] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 118.307998][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 118.317076][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 118.396406][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 118.448226][ T5794] XFS (loop2): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 118.505619][ T8] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 118.515458][ T8] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 118.527839][ T6227] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 118.544130][ T8] usb 2-1: Product: syz [ 118.553663][ T8] usb 2-1: Manufacturer: syz [ 118.568735][ T6227] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 118.595281][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 118.625110][ T6227] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 118.636999][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 118.649441][ T8] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 118.655427][ T8] cdc_wdm 2-1:1.0: Unknown control protocol [ 118.667995][ T6227] BTRFS info (device loop3): use zstd compression, level 3 [ 118.675309][ T6227] BTRFS info (device loop3): using free space tree [ 118.824804][ T969] usb 2-1: USB disconnect, device number 8 [ 118.929079][ T6227] BTRFS info (device loop3): enabling ssd optimizations [ 118.968345][ T6227] BTRFS info (device loop3): auto enabling async discard [ 119.115923][ T27] audit: type=1800 audit(1761595340.278:6): pid=6227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.117" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 120.020557][ T5795] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 120.087690][ C1] sched: RT throttling activated [ 120.132756][ T6260] loop0: detected capacity change from 0 to 131072 [ 120.186940][ T6260] F2FS-fs (loop0): invalid crc value [ 120.234418][ T6260] F2FS-fs (loop0): Found nat_bits in checkpoint [ 120.309174][ T6260] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 120.904415][ T6268] loop1: detected capacity change from 0 to 32768 [ 121.000768][ T6268] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 121.255593][ T6288] loop2: detected capacity change from 0 to 256 [ 121.340702][ T6268] XFS (loop1): Ending clean mount [ 121.421138][ T6268] XFS (loop1): Quotacheck needed: Please wait. [ 121.591438][ T6268] XFS (loop1): Quotacheck: Done. [ 121.860804][ T6282] loop3: detected capacity change from 0 to 32768 [ 121.887031][ T5788] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 121.915540][ T6282] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.125 (6282) [ 121.990276][ T6282] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 122.040423][ T6282] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 122.077864][ T6282] BTRFS info (device loop3): force zlib compression, level 3 [ 122.097744][ T6282] BTRFS info (device loop3): force clearing of disk cache [ 122.104951][ T6282] BTRFS info (device loop3): setting nodatasum [ 122.134290][ T6282] BTRFS info (device loop3): allowing degraded mounts [ 122.177737][ T6282] BTRFS info (device loop3): enabling disk space caching [ 122.184860][ T6282] BTRFS info (device loop3): disk space caching is enabled [ 122.458247][ T6299] loop1: detected capacity change from 0 to 512 [ 122.551125][ T6299] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2249: inode #15: comm syz.1.128: corrupted in-inode xattr: invalid ea_ino [ 122.645131][ T6282] BTRFS info (device loop3): auto enabling async discard [ 122.657886][ T6299] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.128: couldn't read orphan inode 15 (err -117) [ 122.709223][ T6282] BTRFS info (device loop3): rebuilding free space tree [ 122.749719][ T6299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.818155][ T6292] loop2: detected capacity change from 0 to 65536 [ 122.893851][ T6292] XFS (loop2): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 122.971516][ T6322] sctp: [Deprecated]: syz.0.126 (pid 6322) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.971516][ T6322] Use struct sctp_sack_info instead [ 123.001428][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.011109][ T6282] BTRFS info (device loop3): disabling free space tree [ 123.011275][ T6282] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 123.011344][ T6282] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 123.083291][ T6292] XFS (loop2): Ending clean mount [ 123.363462][ T6326] process 'syz.0.131' launched './file1' with NULL argv: empty string added [ 123.678108][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 124.032071][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 124.127941][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 124.164037][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.205765][ T5794] XFS (loop2): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 124.214617][ T9] usb 2-1: Product: syz [ 124.225364][ T9] usb 2-1: Manufacturer: syz [ 124.251080][ T9] usb 2-1: SerialNumber: syz [ 124.266132][ T5795] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 124.289476][ T9] usb 2-1: config 0 descriptor?? [ 124.646122][ T6336] loop3: detected capacity change from 0 to 64 [ 124.944585][ T8] usb 2-1: USB disconnect, device number 9 [ 124.973493][ T6338] loop0: detected capacity change from 0 to 512 [ 125.106764][ T6338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.137120][ T6341] loop2: detected capacity change from 0 to 512 [ 125.173257][ T6341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.204725][ T6341] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.375243][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.477257][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.762864][ T6352] loop3: detected capacity change from 0 to 2048 [ 125.776557][ T6348] loop2: detected capacity change from 0 to 4096 [ 125.788505][ T6348] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 125.809644][ T6352] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.903840][ T27] audit: type=1800 audit(1761595347.068:7): pid=6352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.139" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 125.972220][ T6348] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 126.223649][ T5794] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 126.595239][ T6357] loop1: detected capacity change from 0 to 65536 [ 126.603943][ T969] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.635893][ T6357] XFS (loop1): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 126.696111][ T6357] XFS (loop1): Ending clean mount [ 126.977769][ T969] usb 1-1: Using ep0 maxpacket: 16 [ 126.985292][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.007755][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.587377][ T6373] syzkaller1: entered promiscuous mode [ 127.613927][ T6373] syzkaller1: entered allmulticast mode [ 127.665565][ T969] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 127.675450][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.684053][ T5788] XFS (loop1): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 127.708192][ T969] usb 1-1: config 0 descriptor?? [ 127.746206][ T6359] loop2: detected capacity change from 0 to 32768 [ 127.766145][ T6359] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.142 (6359) [ 127.836741][ T6359] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 127.848362][ T6359] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 127.863027][ T6359] BTRFS info (device loop2): force zlib compression, level 3 [ 127.898634][ T6359] BTRFS info (device loop2): force clearing of disk cache [ 127.905866][ T6359] BTRFS info (device loop2): setting nodatasum [ 127.958427][ T6359] BTRFS info (device loop2): allowing degraded mounts [ 127.965359][ T6359] BTRFS info (device loop2): enabling disk space caching [ 128.017815][ T6359] BTRFS info (device loop2): disk space caching is enabled [ 128.159213][ T6359] BTRFS info (device loop2): auto enabling async discard [ 128.182019][ T969] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 128.189570][ T6359] BTRFS info (device loop2): rebuilding free space tree [ 128.206001][ T969] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 128.214200][ T969] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 128.222267][ T969] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 128.229775][ T969] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 128.237882][ T6359] BTRFS info (device loop2): disabling free space tree [ 128.244879][ T6359] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 128.257231][ T969] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 128.277750][ T6359] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 128.369597][ T6354] i2c i2c-1: unsupported multi-msg i2c transaction [ 128.452590][ T5847] usb 1-1: USB disconnect, device number 5 [ 128.631031][ T5794] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 129.206962][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 129.397751][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 129.405231][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.425532][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 129.449703][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.477811][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.507730][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.527726][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.773636][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 129.788238][ T9] usbtmc 3-1:16.0: can't read capabilities [ 129.916014][ T6412] loop0: detected capacity change from 0 to 512 [ 130.002769][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.002889][ T6412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.013943][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.033835][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.043004][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.054437][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.063929][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.073453][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.082613][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.092319][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.101469][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.110693][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.128204][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.137381][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.140914][ T6412] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.146491][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.166571][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.175921][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.188437][ T6403] loop3: detected capacity change from 0 to 40427 [ 130.252857][ T5877] usb 3-1: USB disconnect, device number 5 [ 130.274475][ T6402] loop1: detected capacity change from 0 to 40427 [ 130.293278][ T6402] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 130.304498][ T6403] F2FS-fs (loop3): Found nat_bits in checkpoint [ 130.317921][ T6402] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 130.359181][ T6402] F2FS-fs (loop1): invalid crc value [ 130.387207][ T6402] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.457429][ T6403] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 130.521352][ T6412] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 130.540639][ T6402] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 130.558679][ T6402] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 130.658660][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.665886][ T6403] syz.3.150: attempt to access beyond end of device [ 130.665886][ T6403] loop3: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 130.690842][ T27] audit: type=1804 audit(1761595351.848:8): pid=6426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.150" name="/newroot/42/file0/file1" dev="loop3" ino=10 res=1 errno=0 [ 130.796600][ T5795] syz-executor: attempt to access beyond end of device [ 130.796600][ T5795] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 130.850617][ T5795] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 131.148064][ T5847] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.343087][ T5847] usb 1-1: Using ep0 maxpacket: 8 [ 131.377776][ T5847] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 131.429637][ T5847] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 131.458741][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.502662][ T5847] usb 1-1: Product: syz [ 131.506906][ T5847] usb 1-1: Manufacturer: syz [ 131.533541][ T5847] usb 1-1: SerialNumber: syz [ 131.585448][ T5847] usb 1-1: config 0 descriptor?? [ 131.628005][ T5847] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 131.666079][ T5847] usb 1-1: setting power ON [ 131.672277][ T6436] loop2: detected capacity change from 0 to 40427 [ 131.699350][ T5847] dvb-usb: bulk message failed: -22 (2/0) [ 131.733448][ T5847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 131.754422][ T6436] F2FS-fs (loop2): invalid crc value [ 131.781711][ T6436] F2FS-fs (loop2): Found nat_bits in checkpoint [ 131.789098][ T5847] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 131.789179][ T5847] usb 1-1: media controller created [ 131.843755][ T6432] dvb-usb: bulk message failed: -22 (3/0) [ 131.869554][ T6436] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 131.880745][ T6432] cxusb: i2c rd: len=169 is too big! [ 131.880745][ T6432] [ 131.892238][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.922009][ T6443] cxusb: i2c rd: len=4096 is too big! [ 131.922009][ T6443] [ 131.977581][ T5847] usb 1-1: selecting invalid altsetting 6 [ 131.987940][ T27] audit: type=1800 audit(1761595353.138:9): pid=6436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.161" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 132.008492][ T5847] usb 1-1: digital interface selection failed (-22) [ 132.015141][ T5847] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 132.080897][ T5847] usb 1-1: setting power OFF [ 132.097215][ T5847] dvb-usb: bulk message failed: -22 (2/0) [ 132.106661][ T5847] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 132.129889][ T5847] (NULL device *): no alternate interface [ 132.136300][ T5794] syz-executor: attempt to access beyond end of device [ 132.136300][ T5794] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.189844][ T5794] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 132.241418][ T5847] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 132.294303][ T5847] usb 1-1: USB disconnect, device number 6 [ 132.770865][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.787740][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.802956][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.819408][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.835802][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.854600][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.871126][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.887556][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.902910][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.918968][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.935384][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.954390][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.977969][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 132.993371][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 133.007571][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 133.022541][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 133.042240][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 133.062663][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 133.078368][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 133.083036][ T6456] Bluetooth: MGMT ver 1.22 [ 133.096112][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 133.110349][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 133.125732][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 133.141163][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 133.160259][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 133.175894][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 133.191116][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 133.199081][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 133.207010][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 133.215084][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 133.223060][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 133.231056][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 133.238919][ T5833] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 133.247439][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.255839][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.276301][ T5833] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 133.384920][ T6457] fido_id[6457]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 133.567421][ T6453] loop0: detected capacity change from 0 to 40427 [ 133.587368][ T6453] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 133.596243][ T6453] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 133.643923][ T6453] F2FS-fs (loop0): Found nat_bits in checkpoint [ 133.761482][ T6453] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 133.772174][ T6453] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 133.820547][ T969] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 133.842388][ T5833] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 134.037839][ T969] usb 3-1: Using ep0 maxpacket: 32 [ 134.037957][ T5833] usb 2-1: Using ep0 maxpacket: 8 [ 134.066958][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.069108][ T5833] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.095344][ T5833] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.106774][ T5833] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.117113][ T5833] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.123284][ T969] usb 3-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 134.130697][ T5833] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.148746][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.169820][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.209003][ T969] usb 3-1: config 0 descriptor?? [ 134.245113][ T6461] loop3: detected capacity change from 0 to 40427 [ 134.391649][ T5833] usb 2-1: GET_CAPABILITIES returned 0 [ 134.397228][ T5833] usbtmc 2-1:16.0: can't read capabilities [ 134.586932][ T6453] syz.0.166 (6453): drop_caches: 2 [ 134.627344][ T6461] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 134.645968][ T6461] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 134.662887][ T969] wacom 0003:056A:005B.0009: unknown main item tag 0x0 [ 134.685520][ T969] wacom 0003:056A:005B.0009: unknown main item tag 0x0 [ 134.690552][ T6461] F2FS-fs (loop3): invalid crc value [ 134.707253][ T969] wacom 0003:056A:005B.0009: unknown main item tag 0x0 [ 134.707574][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.723453][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.726944][ T969] wacom 0003:056A:005B.0009: unknown main item tag 0x0 [ 134.732580][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.747743][ T969] wacom 0003:056A:005B.0009: unknown main item tag 0x0 [ 134.759375][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.763198][ T6461] F2FS-fs (loop3): Found nat_bits in checkpoint [ 134.768510][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.768569][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.768883][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.802300][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.811447][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.821433][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.830574][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.839698][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.848830][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.857934][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.867055][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.876170][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 134.894811][ T969] wacom 0003:056A:005B.0009: hidraw0: USB HID v0.00 Device [HID 056a:005b] on usb-dummy_hcd.2-1/input0 [ 134.923873][ T969] usb 3-1: USB disconnect, device number 6 [ 134.935625][ T6461] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 134.942941][ T6461] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 134.958441][ T5847] usb 2-1: USB disconnect, device number 10 [ 135.084537][ T6473] fido_id[6473]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 135.651028][ T6477] loop1: detected capacity change from 0 to 128 [ 135.719505][ T6477] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.754356][ T6477] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.797787][ T5847] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 135.977392][ T5788] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.987780][ T5847] usb 1-1: Using ep0 maxpacket: 32 [ 136.021599][ T5847] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 136.037795][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.056159][ T5847] usb 1-1: Product: syz [ 136.061065][ T5847] usb 1-1: Manufacturer: syz [ 136.065737][ T5847] usb 1-1: SerialNumber: syz [ 136.100130][ T5847] usb 1-1: config 0 descriptor?? [ 136.378296][ T6483] loop3: detected capacity change from 0 to 32768 [ 136.405325][ T6483] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.171 (6483) [ 136.457319][ T6483] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 136.488010][ T6483] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 136.507575][ T6483] BTRFS info (device loop3): using free space tree [ 136.524225][ T5847] airspy 1-1:0.0: Board ID: 00 [ 136.539803][ T5847] airspy 1-1:0.0: Firmware version: [ 136.567572][ T6479] loop2: detected capacity change from 0 to 32768 [ 136.648131][ T6479] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 136.668560][ T6483] BTRFS info (device loop3): enabling ssd optimizations [ 136.675677][ T6483] BTRFS info (device loop3): auto enabling async discard [ 136.819313][ T6479] XFS (loop2): Ending clean mount [ 136.840618][ T6485] loop1: detected capacity change from 0 to 32768 [ 136.998245][ T27] audit: type=1800 audit(1761595358.158:10): pid=6485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.174" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 137.137884][ T5847] airspy 1-1:0.0: usb_control_msg() failed -71 request 12 [ 137.172590][ T5794] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 137.225050][ T5847] airspy 1-1:0.0: Registered as swradio24 [ 137.241354][ T5847] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 137.253325][ T5795] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 137.354421][ T5847] usb 1-1: USB disconnect, device number 7 [ 137.717098][ T5800] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 10 /dev/loop3 scanned by udevd (5800) [ 137.793837][ T6514] syzkaller1: entered promiscuous mode [ 137.824158][ T6514] syzkaller1: entered allmulticast mode [ 138.159034][ T6522] binder: 6521:6522 ioctl c0306201 2000000000c0 returned -14 [ 138.538054][ T6525] loop3: detected capacity change from 0 to 4096 [ 138.560675][ T6525] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 138.659631][ T6525] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 138.916885][ T6520] loop0: detected capacity change from 0 to 32768 [ 139.128210][ T6520] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 139.228327][ T6532] loop1: detected capacity change from 0 to 32768 [ 139.237801][ T6532] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.183 (6532) [ 139.264433][ T6520] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 139.276929][ T6532] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 139.287208][ T6532] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 139.297350][ T6532] BTRFS info (device loop1): using free space tree [ 139.437384][ T6526] loop2: detected capacity change from 0 to 32768 [ 139.482220][ T6526] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.179 (6526) [ 139.493669][ T6532] BTRFS info (device loop1): enabling ssd optimizations [ 139.503270][ T6532] BTRFS info (device loop1): auto enabling async discard [ 139.674179][ T6520] (syz.0.178,6520,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 139.697994][ T6532] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 139.742761][ T5802] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (5802) [ 139.771700][ T6520] syz.0.178 (6520) used greatest stack depth: 19248 bytes left [ 139.963375][ T5788] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.039427][ T5787] ocfs2: Unmounting device (7,0) on (node local) [ 140.233852][ T6556] loop3: detected capacity change from 0 to 65536 [ 140.368226][ T6556] XFS (loop3): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 140.468540][ T6556] XFS (loop3): Ending clean mount [ 140.659719][ T6569] syzkaller1: entered promiscuous mode [ 140.706045][ T6569] syzkaller1: entered allmulticast mode [ 141.754662][ T5795] XFS (loop3): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 142.211267][ T6559] loop2: detected capacity change from 0 to 40427 [ 142.247919][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 142.270231][ T6559] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.381274][ T6559] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 142.461338][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 142.473544][ T9] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 142.499627][ T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 142.522258][ T6559] syz.2.187: attempt to access beyond end of device [ 142.522258][ T6559] loop2: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 142.541542][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 142.554452][ T9] usb 1-1: config 1 has no interface number 0 [ 142.563178][ T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.584716][ T27] audit: type=1804 audit(1761595363.748:11): pid=6559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.187" name="/newroot/51/file0/file1" dev="loop2" ino=10 res=1 errno=0 [ 142.618015][ T9] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 142.641363][ T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 142.655451][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.668741][ T5794] syz-executor: attempt to access beyond end of device [ 142.668741][ T5794] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 142.683438][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 142.697247][ T5794] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 142.817956][ T5840] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 142.891045][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 143.007780][ T5840] usb 4-1: Using ep0 maxpacket: 16 [ 143.023583][ T5840] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 178, changing to 11 [ 143.048848][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 143.055574][ T5840] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 143.097912][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.111121][ T5840] usb 4-1: config 0 descriptor?? [ 143.177519][ T6584] loop1: detected capacity change from 0 to 32768 [ 143.264251][ T6584] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 143.308053][ T6584] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 143.315826][ T9] usb 1-1: USB disconnect, device number 8 [ 143.326507][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 143.456359][ T6584] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 143.493737][ T5877] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 143.502281][ T5877] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 143.568095][ T5840] hid (null): global environment stack underflow [ 143.574567][ T5840] hid (null): unknown global tag 0xd [ 143.605690][ T5840] hid (null): unknown global tag 0x86 [ 143.612968][ T5840] hid (null): unknown global tag 0x90 [ 143.621949][ T5840] hid (null): unknown global tag 0xe3 [ 143.627454][ T5840] hid (null): unknown global tag 0xc [ 143.636435][ T5877] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 134ms [ 143.645000][ T5840] hid (null): invalid report_size 249916996 [ 143.661982][ T5877] gfs2: fsid=syz:syz.0: jid=0: Done [ 143.679767][ T6584] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 143.696005][ T6594] loop2: detected capacity change from 0 to 1024 [ 143.829328][ T5877] usb 4-1: USB disconnect, device number 8 [ 144.036495][ T6601] loop2: detected capacity change from 0 to 2048 [ 144.074134][ T6601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.092008][ T6601] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.199058][ T6601] fs-verity: sha512 using implementation "sha512-avx2" [ 144.322670][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.582045][ T6611] input: syz0 as /devices/virtual/input/input15 [ 144.999352][ T6616] loop2: detected capacity change from 0 to 32768 [ 145.067446][ T6616] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 145.112883][ T6616] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature [ 145.130510][ T6616] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 145.140469][ T6616] OCFS2: File system is now read-only. [ 145.145994][ T6616] (syz.2.202,6616,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 145.154453][ T6616] (syz.2.202,6616,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 145.162312][ T6616] (syz.2.202,6616,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 145.171760][ T6616] (syz.2.202,6616,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 145.180238][ T6616] (syz.2.202,6616,1):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 145.188495][ T6616] (syz.2.202,6616,1):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 145.196628][ T6616] (syz.2.202,6616,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 145.205682][ T6616] (syz.2.202,6616,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 145.214544][ T6616] (syz.2.202,6616,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 145.225061][ T6616] (syz.2.202,6616,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 145.235965][ T6616] (syz.2.202,6616,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 145.244773][ T6616] (syz.2.202,6616,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 145.254167][ T6616] (syz.2.202,6616,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 145.263490][ T6616] (syz.2.202,6616,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 145.272656][ T6616] (syz.2.202,6616,1):ocfs2_lock_allocators:2672 ERROR: status = -30 [ 145.282198][ T6616] (syz.2.202,6616,1):ocfs2_extend_allocation:592 ERROR: status = -30 [ 145.290897][ T6616] (syz.2.202,6616,1):ocfs2_allocate_unwritten_extents:1498 ERROR: status = -30 [ 145.299972][ T6616] (syz.2.202,6616,1):__ocfs2_change_file_space:2044 ERROR: status = -30 [ 145.378120][ T6624] syzkaller1: entered promiscuous mode [ 145.386277][ T6624] syzkaller1: entered allmulticast mode [ 145.412309][ T5794] (syz-executor,5794,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 145.458732][ T5794] ocfs2: Unmounting device (7,2) on (node local) [ 145.895017][ T6632] loop3: detected capacity change from 0 to 1024 [ 146.102560][ T6632] hfsplus: catalog searching failed [ 146.145622][ T3435] hfsplus: b-tree write err: -5, ino 3 [ 146.169755][ T5795] hfsplus: node 4:3 still has 1 user(s)! [ 146.676367][ T6626] loop1: detected capacity change from 0 to 65536 [ 146.729682][ T6626] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 146.783037][ T6637] loop3: detected capacity change from 0 to 32768 [ 146.857591][ T6626] XFS (loop1): Ending clean mount [ 147.194297][ T5788] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 147.453976][ T6651] loop2: detected capacity change from 0 to 65536 [ 147.495461][ T6653] loop0: detected capacity change from 0 to 2048 [ 147.527520][ T6651] XFS (loop2): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 147.567028][ T6653] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 147.588897][ T6653] UDF-fs: Scanning with blocksize 512 failed [ 147.666327][ T6653] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.722394][ T6651] XFS (loop2): Ending clean mount [ 147.739997][ T5847] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 147.935286][ T5847] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 147.967794][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.012553][ T5847] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 148.026435][ T5847] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 148.057175][ T5847] usb 4-1: Manufacturer: syz [ 148.459115][ T5847] usb 4-1: config 0 descriptor?? [ 148.811357][ T5794] XFS (loop2): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 148.871192][ T5847] rc_core: IR keymap rc-hauppauge not found [ 148.877178][ T5847] Registered IR keymap rc-empty [ 148.899869][ T5847] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 148.914220][ T5847] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input16 [ 148.959237][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 148.967524][ T6670] loop0: detected capacity change from 0 to 512 [ 149.011758][ T5847] usb 4-1: USB disconnect, device number 9 [ 149.052454][ T6670] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 149.504756][ T6673] loop0: detected capacity change from 0 to 256 [ 149.523236][ T6673] exfat: Deprecated parameter 'utf8' [ 149.593411][ T6673] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 149.984208][ T6680] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 150.164050][ T6687] loop3: detected capacity change from 0 to 1024 [ 150.298709][ T6687] hfsplus: xattr searching failed [ 150.339607][ T6687] hfsplus: xattr searching failed [ 150.345917][ T6687] hfsplus: xattr searching failed [ 150.632326][ T6689] loop3: detected capacity change from 0 to 2048 [ 150.661312][ T6689] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 150.683058][ T6689] NILFS (loop3): mounting unchecked fs [ 150.733723][ T6689] NILFS (loop3): recovery complete [ 150.740171][ T5802] udevd[5802]: incorrect nilfs2 checksum on /dev/loop3 [ 150.769359][ T6690] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.815561][ T6683] loop1: detected capacity change from 0 to 32768 [ 150.862546][ T6683] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.224 (6683) [ 150.919109][ T6683] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.934108][ T6683] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 150.949265][ T6683] BTRFS info (device loop1): using free space tree [ 151.060802][ T6681] loop2: detected capacity change from 0 to 40427 [ 151.078995][ T6681] F2FS-fs (loop2): Wrong NAT boundary, start(2560) end(3840) blocks(1024) [ 151.088243][ T6681] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 151.117539][ T6683] BTRFS info (device loop1): enabling ssd optimizations [ 151.127456][ T6681] F2FS-fs (loop2): invalid crc value [ 151.132935][ T6683] BTRFS info (device loop1): auto enabling async discard [ 151.178468][ T6681] F2FS-fs (loop2): Found nat_bits in checkpoint [ 151.209532][ T6686] loop0: detected capacity change from 0 to 40427 [ 151.249606][ T6686] F2FS-fs (loop0): invalid crc value [ 151.256472][ T6709] vivid-001: ================= START STATUS ================= [ 151.284104][ T6686] F2FS-fs (loop0): Found nat_bits in checkpoint [ 151.297325][ T6709] vivid-001: Radio HW Seek Mode: Bounded [ 151.325437][ T6709] vivid-001: Radio Programmable HW Seek: false [ 151.345796][ T6709] vivid-001: RDS Rx I/O Mode: Block I/O [ 151.362337][ T6709] vivid-001: Generate RBDS Instead of RDS: false [ 151.395598][ T5788] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.406392][ T6709] vivid-001: RDS Reception: true [ 151.419054][ T6709] vivid-001: RDS Program Type: 0 inactive [ 151.424894][ T6709] vivid-001: RDS PS Name: inactive [ 151.458438][ T6681] F2FS-fs (loop2): Start checkpoint disabled! [ 151.485584][ T6686] F2FS-fs (loop0): Start checkpoint disabled! [ 151.487849][ T6709] vivid-001: RDS Radio Text: [ 151.497798][ T6681] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 151.499719][ T6709] [ 151.502546][ T6681] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 151.527118][ T6686] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 151.592348][ T6681] syz.2.220: attempt to access beyond end of device [ 151.592348][ T6681] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 151.609059][ T6709] inactive [ 151.612551][ T6709] vivid-001: RDS Traffic Announcement: false inactive [ 151.629187][ T6709] vivid-001: RDS Traffic Program: false inactive [ 151.649712][ T6709] vivid-001: RDS Music: false inactive [ 151.671726][ T6709] vivid-001: ================== END STATUS ================== [ 151.758968][ T6686] syz.0.226: attempt to access beyond end of device [ 151.758968][ T6686] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 151.982621][ T3487] kworker/u4:8: attempt to access beyond end of device [ 151.982621][ T3487] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 152.096603][ T6720] loop1: detected capacity change from 0 to 1024 [ 152.211043][ T3487] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 152.274556][ T3487] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 152.370719][ T12] kworker/u4:1: attempt to access beyond end of device [ 152.370719][ T12] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 152.466144][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 152.490123][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 152.644211][ T11] hfsplus: b-tree write err: -5, ino 4 [ 153.236550][ T6719] loop3: detected capacity change from 0 to 131072 [ 153.245017][ T6719] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 153.253271][ T6719] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 153.275066][ T6719] F2FS-fs (loop3): invalid crc value [ 153.324778][ T6719] F2FS-fs (loop3): Found nat_bits in checkpoint [ 153.376695][ T6719] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 153.384370][ T6719] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 153.697152][ T6732] loop1: detected capacity change from 0 to 256 [ 153.771758][ T6732] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 154.047827][ T5877] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 154.160829][ T6740] capability: warning: `syz.1.239' uses deprecated v2 capabilities in a way that may be insecure [ 154.213687][ T6742] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 154.241979][ T5877] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 154.267856][ T5877] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 154.297984][ T5877] usb 1-1: config 0 interface 0 has no altsetting 0 [ 154.315774][ T5877] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 154.337736][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 154.357980][ T5877] usb 1-1: Product: syz [ 154.362318][ T5877] usb 1-1: Manufacturer: syz [ 154.366956][ T5877] usb 1-1: SerialNumber: syz [ 154.401760][ T5877] usb 1-1: config 0 descriptor?? [ 154.417049][ T5877] hub 1-1:0.0: bad descriptor, ignoring hub [ 154.430472][ T5877] hub: probe of 1-1:0.0 failed with error -5 [ 154.445018][ T5877] usb 1-1: selecting invalid altsetting 0 [ 155.079522][ T6735] usb 1-1: reset high-speed USB device number 9 using dummy_hcd [ 155.660332][ T6761] loop1: detected capacity change from 0 to 65536 [ 155.685283][ T6767] loop2: detected capacity change from 0 to 256 [ 155.757333][ T6761] XFS (loop1): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 155.780144][ T9] usb 1-1: USB disconnect, device number 9 [ 155.975639][ T6761] XFS (loop1): Ending clean mount [ 157.051767][ T5788] XFS (loop1): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 157.441776][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.610222][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.769691][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.819698][ T6787] loop3: detected capacity change from 0 to 40427 [ 157.836688][ T6787] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 157.843246][ T6787] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 157.864864][ T6787] F2FS-fs (loop3): invalid crc value [ 157.884818][ T6791] loop1: detected capacity change from 0 to 512 [ 157.911050][ T6791] EXT4-fs: Ignoring removed orlov option [ 158.004942][ T6791] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 158.020516][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.096121][ T6791] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 158.125638][ T6791] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2249: inode #15: comm syz.1.255: corrupted in-inode xattr: e_value size too large [ 158.267067][ T6791] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.255: couldn't read orphan inode 15 (err -117) [ 158.300694][ T6791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.383846][ T6787] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 158.413110][ T6787] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 158.528212][ T6787] syz.3.254: attempt to access beyond end of device [ 158.528212][ T6787] loop3: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 158.612112][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.658178][ T5795] syz-executor: attempt to access beyond end of device [ 158.658178][ T5795] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 158.737992][ T5795] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 158.779454][ T6796] loop0: detected capacity change from 0 to 32768 [ 158.842375][ T6796] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.258 (6796) [ 158.960419][ T6796] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 158.997877][ T6796] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 159.006599][ T6796] BTRFS info (device loop0): using free space tree [ 159.212316][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 159.224300][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 159.233480][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 159.458105][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 159.467099][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 159.477977][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 159.526271][ T6796] BTRFS info (device loop0): enabling ssd optimizations [ 159.597987][ T6796] BTRFS info (device loop0): auto enabling async discard [ 159.811899][ T6820] loop1: detected capacity change from 0 to 65536 [ 159.944643][ T6820] XFS (loop1): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 159.971264][ T5787] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.241839][ T6820] XFS (loop1): Ending clean mount [ 161.413155][ T6837] loop3: detected capacity change from 0 to 32768 [ 161.486721][ T6837] JBD2: Ignoring recovery information on journal [ 161.490923][ T5788] XFS (loop1): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 161.549533][ T51] Bluetooth: hci3: command tx timeout [ 161.637284][ T6837] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 162.158213][ T27] audit: type=1800 audit(1761595383.228:12): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.260" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 162.444346][ T6858] loop0: detected capacity change from 0 to 65536 [ 162.501817][ T5795] ocfs2: Unmounting device (7,3) on (node local) [ 162.532211][ T6858] XFS (loop0): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 162.716590][ T6858] XFS (loop0): Ending clean mount [ 162.879108][ T6871] loop1: detected capacity change from 0 to 64 [ 163.627892][ T51] Bluetooth: hci3: command tx timeout [ 163.726667][ T5787] XFS (loop0): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 163.901074][ T6883] input: syz1 as /devices/virtual/input/input17 [ 164.012461][ T6807] chnl_net:caif_netlink_parms(): no params data found [ 164.057980][ T5847] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 164.258074][ T5847] usb 4-1: config 0 has no interfaces? [ 164.263710][ T5847] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 164.296576][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.325919][ T5847] usb 4-1: config 0 descriptor?? [ 164.458965][ T11] hsr_slave_0: left promiscuous mode [ 164.475069][ T11] hsr_slave_1: left promiscuous mode [ 164.496929][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.518242][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.538195][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.562181][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.578915][ T11] bridge_slave_1: left allmulticast mode [ 164.594387][ T11] bridge_slave_1: left promiscuous mode [ 164.603047][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.650793][ T11] bridge_slave_0: left allmulticast mode [ 164.666841][ T11] bridge_slave_0: left promiscuous mode [ 164.690851][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.826107][ T11] veth1_macvtap: left promiscuous mode [ 164.866337][ T11] veth0_macvtap: left promiscuous mode [ 164.877497][ T11] veth1_vlan: left promiscuous mode [ 164.917545][ T11] veth0_vlan: left promiscuous mode [ 165.152447][ T6902] loop1: detected capacity change from 0 to 65536 [ 165.243024][ T6902] XFS (loop1): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 165.315038][ T6902] XFS (loop1): Ending clean mount [ 165.869684][ T51] Bluetooth: hci3: command tx timeout [ 166.307298][ T5788] XFS (loop1): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 167.503562][ T6831] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 167.532040][ T11] team0 (unregistering): Port device team_slave_1 removed [ 167.617735][ T11] team0 (unregistering): Port device team_slave_0 removed [ 167.689715][ T6831] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 167.699464][ T6831] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.716808][ T6831] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 167.728239][ T6831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 167.735529][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.736587][ T6831] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.753373][ T6831] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 167.764942][ T6831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 167.796429][ T6831] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.807215][ T6831] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 167.844865][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.847630][ T6831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 167.862593][ T6831] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.872737][ T6933] loop0: detected capacity change from 0 to 32768 [ 167.881327][ T6831] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 167.897176][ T6933] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.278 (6933) [ 167.909747][ T6831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 167.948084][ T6831] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.957135][ T51] Bluetooth: hci3: command tx timeout [ 167.958934][ T6831] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 167.977595][ T6933] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 167.988084][ T6933] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 167.996986][ T6933] BTRFS info (device loop0): turning off barriers [ 168.005487][ T6933] BTRFS info (device loop0): setting nodatasum [ 168.012202][ T6831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 168.019585][ T6933] BTRFS info (device loop0): use zlib compression, level 3 [ 168.027085][ T6933] BTRFS info (device loop0): using free space tree [ 168.036320][ T6831] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 168.059055][ T6831] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 168.070648][ T6831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 168.085663][ T6831] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 168.120465][ T6831] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 168.156999][ T6831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 168.170060][ T6831] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 168.211404][ T6831] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 168.232898][ T6831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 168.265353][ T6831] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 168.291655][ T6831] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 168.307961][ T6831] usb 2-1: Product: syz [ 168.316136][ T6831] usb 2-1: Manufacturer: syz [ 168.321005][ T6831] usb 2-1: SerialNumber: syz [ 168.358375][ T6831] usb 2-1: config 0 descriptor?? [ 168.397063][ T6831] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 168.670939][ T5787] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 168.719263][ T5833] usb 2-1: USB disconnect, device number 11 [ 168.731638][ T5833] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 169.356620][ T11] bond0 (unregistering): Released all slaves [ 169.621279][ T6807] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.630169][ T6807] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.638384][ T6807] bridge_slave_0: entered allmulticast mode [ 169.646230][ T6807] bridge_slave_0: entered promiscuous mode [ 169.656002][ T6807] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.663639][ T6807] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.672278][ T6807] bridge_slave_1: entered allmulticast mode [ 169.681156][ T6807] bridge_slave_1: entered promiscuous mode [ 169.776296][ T6807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.802313][ T6807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.849024][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 169.888895][ T6807] team0: Port device team_slave_0 added [ 169.906741][ T6807] team0: Port device team_slave_1 added [ 170.041895][ T6807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.064978][ T6807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.096154][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.111066][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.122684][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.136014][ T6807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.157064][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.168443][ T6807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.175485][ T6807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.203081][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.213094][ T6807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.225347][ T8] usb 2-1: config 0 descriptor?? [ 170.299122][ T5847] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 170.374201][ T6807] hsr_slave_0: entered promiscuous mode [ 170.384131][ T6807] hsr_slave_1: entered promiscuous mode [ 170.499985][ T5847] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.518090][ T5847] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.536393][ T5847] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 170.567959][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 170.576053][ T5847] usb 1-1: SerialNumber: syz [ 170.671126][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xe [ 170.697905][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 170.706263][ T8] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 170.744597][ T8] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 170.841419][ T5847] usb 1-1: 0:2 : does not exist [ 170.878667][ T5833] usb 4-1: USB disconnect, device number 10 [ 170.932520][ T5847] usb 1-1: USB disconnect, device number 10 [ 171.019888][ T6807] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 171.038754][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.073488][ T6807] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.075210][ T6831] usb 2-1: USB disconnect, device number 12 [ 171.092918][ T6807] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.196262][ T6807] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 171.318814][ T6807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.369162][ T6807] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.391197][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.398430][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.436549][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.443812][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.118885][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 172.183667][ T6807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.337798][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 172.345227][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 172.375825][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.412126][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.438827][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.448994][ C1] sd 0:0:1:0: [sda] tag#2120 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 172.449074][ C1] sd 0:0:1:0: [sda] tag#2120 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 172.531943][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.568289][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 172.598124][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.853051][ T9] usb 4-1: usb_control_msg returned -32 [ 172.863149][ T9] usbtmc 4-1:16.0: can't read capabilities [ 173.006380][ T6807] veth0_vlan: entered promiscuous mode [ 173.028663][ T6807] veth1_vlan: entered promiscuous mode [ 173.084463][ T6807] veth0_macvtap: entered promiscuous mode [ 173.104507][ T6807] veth1_macvtap: entered promiscuous mode [ 173.137183][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.163768][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.186905][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.202040][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.212915][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.227780][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.242315][ T7038] usbtmc 4-1:16.0: control status returned 0 [ 173.244212][ T6807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.282692][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.301387][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.314777][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.332143][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.342094][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.357100][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.379595][ T6807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.406746][ T6807] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.422376][ T6807] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.432622][ T6807] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.441616][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 173.449694][ T6807] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.452721][ T5833] usb 4-1: USB disconnect, device number 11 [ 173.638176][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.646074][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.653762][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 173.668427][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.686808][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 173.705477][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.727881][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.744392][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.745161][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 173.774915][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.775449][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.037892][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 174.052727][ T9] usbtmc 2-1:16.0: can't read capabilities [ 174.270427][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 174.333215][ T7060] loop4: detected capacity change from 0 to 8192 [ 174.339644][ T9] usb 2-1: USB disconnect, device number 13 [ 174.389879][ T7060] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 174.404984][ T7060] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 174.421817][ T7060] REISERFS (device loop4): using ordered data mode [ 174.433991][ T7060] reiserfs: using flush barriers [ 174.474318][ T7060] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 174.556648][ T7064] Illegal XDP return value 36 on prog (id 19) dev syz_tun, expect packet loss! [ 174.575201][ T7060] REISERFS (device loop4): checking transaction log (loop4) [ 174.607464][ T7060] REISERFS (device loop4): Using r5 hash to sort names [ 174.654573][ T7060] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 174.854073][ T7073] loop3: detected capacity change from 0 to 512 [ 175.172404][ T7078] loop4: detected capacity change from 0 to 1024 [ 175.756312][ T7077] loop1: detected capacity change from 0 to 65536 [ 175.822714][ T7077] XFS (loop1): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 175.936130][ T7066] loop0: detected capacity change from 0 to 32768 [ 175.969124][ T7077] XFS (loop1): Ending clean mount [ 176.023431][ T7066] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.298 (7066) [ 176.252950][ T7066] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 176.631043][ T7066] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 176.747294][ T7066] BTRFS info (device loop0): using free space tree [ 176.966258][ T5788] XFS (loop1): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 177.080372][ T7066] BTRFS info (device loop0): enabling ssd optimizations [ 177.106813][ T7066] BTRFS info (device loop0): auto enabling async discard [ 177.360485][ T27] audit: type=1800 audit(1761595398.518:13): pid=7066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.298" name="file3" dev="loop0" ino=261 res=0 errno=0 [ 177.381539][ T7066] fs-verity: sha256 using implementation "sha256-avx2" [ 177.457818][ T5847] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 177.637272][ T7066] BTRFS info (device loop0): setting compat-ro feature flag for VERITY (0x4) [ 177.696151][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.738077][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.821605][ T5847] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.907852][ T5847] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.964662][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.035272][ T5847] usb 4-1: config 0 descriptor?? [ 178.113844][ T7127] loop4: detected capacity change from 0 to 65536 [ 178.183292][ T7127] XFS (loop4): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 178.287400][ T5787] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 178.416519][ T7127] XFS (loop4): Ending clean mount [ 178.518488][ T5847] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 178.558486][ T5847] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 179.379264][ T5847] usb 4-1: USB disconnect, device number 12 [ 179.487248][ T6807] XFS (loop4): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 179.543265][ T7145] fido_id[7145]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 179.747885][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 179.971197][ T8] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 180.005992][ T8] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.047153][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.083893][ T8] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 180.128416][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.165877][ T8] usb 1-1: config 0 descriptor?? [ 180.601667][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 180.619188][ T9] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 180.652743][ T8] waltop 0003:172F:0501.000E: collection stack underflow [ 180.670357][ T8] waltop 0003:172F:0501.000E: item 0 1 0 12 parsing failed [ 180.698649][ T8] waltop: probe of 0003:172F:0501.000E failed with error -22 [ 180.907499][ T8] usb 1-1: USB disconnect, device number 11 [ 181.718197][ T7185] loop3: detected capacity change from 0 to 512 [ 181.724105][ T7188] loop0: detected capacity change from 0 to 256 [ 181.754923][ T7188] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.822578][ T7188] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 181.843448][ T7185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.885090][ T7188] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 181.968511][ T7185] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.110724][ T7185] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #2: comm syz.3.315: corrupted inode contents [ 182.184510][ T7185] EXT4-fs error (device loop3): ext4_dirty_inode:6120: inode #2: comm syz.3.315: mark_inode_dirty error [ 182.295084][ T7185] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #2: comm syz.3.315: corrupted inode contents [ 182.416286][ T7185] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.315: mark_inode_dirty error [ 182.458760][ T7205] loop4: detected capacity change from 0 to 128 [ 182.639542][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.648960][ T5847] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 182.873647][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.898611][ T5847] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 182.940275][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.961574][ T5847] usb 1-1: config 0 descriptor?? [ 183.095320][ T7210] loop4: detected capacity change from 0 to 8192 [ 183.389397][ T5847] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 183.446285][ T5847] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000F/input/input18 [ 183.561203][ T7226] loop1: detected capacity change from 0 to 47 [ 183.612275][ T7203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.651031][ T7203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.732146][ T7229] loop4: detected capacity change from 0 to 1024 [ 183.775022][ T5847] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 183.846893][ T7230] syz.1.324: attempt to access beyond end of device [ 183.846893][ T7230] loop1: rw=2049, sector=48, nr_sectors = 2 limit=47 [ 183.877017][ T27] audit: type=1800 audit(1761595405.038:14): pid=7229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.325" name="file2" dev="loop4" ino=22 res=0 errno=0 [ 183.898223][ T7230] Buffer I/O error on dev loop1, logical block 24, lost async page write [ 183.907430][ T7230] syz.1.324: attempt to access beyond end of device [ 183.907430][ T7230] loop1: rw=2049, sector=50, nr_sectors = 2 limit=47 [ 183.961812][ T7234] loop3: detected capacity change from 0 to 256 [ 183.972611][ T7234] exfat: Deprecated parameter 'utf8' [ 184.009933][ T7234] exfat: Deprecated parameter 'namecase' [ 184.043215][ T9] usb 1-1: USB disconnect, device number 12 [ 184.062785][ T7230] Buffer I/O error on dev loop1, logical block 25, lost async page write [ 184.094488][ T7230] syz.1.324: attempt to access beyond end of device [ 184.094488][ T7230] loop1: rw=2049, sector=52, nr_sectors = 2 limit=47 [ 184.116938][ T7234] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 184.157946][ T7230] Buffer I/O error on dev loop1, logical block 26, lost async page write [ 184.262894][ T49] hfsplus: b-tree write err: -5, ino 4 [ 184.281672][ T7235] fido_id[7235]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 184.327034][ T11] kworker/u4:0: attempt to access beyond end of device [ 184.327034][ T11] loop1: rw=1, sector=54, nr_sectors = 2 limit=47 [ 184.366727][ T11] Buffer I/O error on dev loop1, logical block 27, lost async page write [ 184.585554][ T7242] loop1: detected capacity change from 0 to 1024 [ 184.732580][ T7242] hfsplus: request for non-existent node 262144 in B*Tree [ 184.753481][ T7242] hfsplus: request for non-existent node 262144 in B*Tree [ 184.837069][ T7247] hfsplus: request for non-existent node 262144 in B*Tree [ 184.905945][ T7247] hfsplus: request for non-existent node 262144 in B*Tree [ 185.384036][ T7246] loop0: detected capacity change from 0 to 65536 [ 185.424214][ T7246] XFS (loop0): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 185.502849][ T7255] loop1: detected capacity change from 0 to 8192 [ 185.506756][ T7246] XFS (loop0): Ending clean mount [ 185.543502][ T7255] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 185.570561][ T7255] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 185.603511][ T7255] REISERFS (device loop1): using ordered data mode [ 185.696157][ T7255] reiserfs: using flush barriers [ 185.755553][ T7255] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 185.788375][ T7255] REISERFS (device loop1): checking transaction log (loop1) [ 186.211777][ T7255] REISERFS (device loop1): Using r5 hash to sort names [ 186.258198][ T7255] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 186.364920][ T7239] loop4: detected capacity change from 0 to 32768 [ 186.503896][ T5787] XFS (loop0): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 186.507474][ T7255] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "ÿî§<< G4š¶mÿ±â½ÆuÆÌëê0º‰wÆ2ÝK×]<ýÌàÈŒÏðÿD|ÙÊÞÔ«öWgéÛ½{XA¨Î>®\µ«ý}O´LqQÞ·¸ùχ [ 186.507474][ T7255] ðOÉQ±•Çý6ÿÛÐb" [ 186.540450][ T7239] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 186.775179][ T7239] XFS (loop4): Ending clean mount [ 186.831292][ T7239] XFS (loop4): Quotacheck needed: Please wait. [ 186.953260][ T7239] XFS (loop4): Quotacheck: Done. [ 187.141318][ T7239] XFS (loop4): User initiated shutdown received. [ 187.209823][ T7239] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 187.225063][ T7239] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 187.325698][ T6807] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 187.718071][ T7291] loop3: detected capacity change from 0 to 4096 [ 187.818638][ T7291] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 187.872897][ T7291] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 187.955223][ T7291] ntfs: volume version 3.1. [ 188.177815][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 188.389926][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.419649][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.440012][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 188.459756][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.474841][ T7306] loop3: detected capacity change from 0 to 1024 [ 188.489192][ T9] usb 1-1: config 0 descriptor?? [ 188.495687][ T7306] EXT4-fs: inline encryption not supported [ 188.513805][ T7306] EXT4-fs: Ignoring removed nobh option [ 188.524566][ T7306] EXT4-fs: Ignoring removed bh option [ 188.541893][ T7306] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 188.580722][ T7285] loop1: detected capacity change from 0 to 32768 [ 188.630037][ T7306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.685878][ T7285] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 188.834440][ T7302] loop4: detected capacity change from 0 to 32768 [ 188.848329][ T7302] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.342 (7302) [ 188.877746][ T7302] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.893478][ T7302] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 188.907227][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.924625][ T7302] BTRFS info (device loop4): setting nodatasum [ 188.932887][ T7302] BTRFS info (device loop4): force zlib compression, level 3 [ 188.951326][ T7285] XFS (loop1): Ending clean mount [ 188.958273][ T7302] BTRFS info (device loop4): enabling ssd optimizations [ 188.965297][ T7302] BTRFS info (device loop4): allowing degraded mounts [ 189.006054][ T9] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 189.017330][ T7285] XFS (loop1): Quotacheck needed: Please wait. [ 189.042141][ T9] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 189.063575][ T7302] BTRFS info (device loop4): using free space tree [ 189.169423][ T7285] XFS (loop1): Quotacheck: Done. [ 189.205126][ T9] cp2112 0003:10C4:EA90.0010: Part Number: 0x82 Device Version: 0xFE [ 189.531451][ T7302] BTRFS info (device loop4): Snapshot src from another FS [ 189.601681][ T9] cp2112 0003:10C4:EA90.0010: error setting SMBus config [ 189.611628][ T7344] loop3: detected capacity change from 0 to 1764 [ 189.621426][ T5788] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 189.634502][ T7302] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.634790][ T9] cp2112: probe of 0003:10C4:EA90.0010 failed with error -71 [ 189.662888][ T9] usb 1-1: USB disconnect, device number 13 [ 190.604512][ T7360] loop0: detected capacity change from 0 to 256 [ 190.941798][ T7367] loop0: detected capacity change from 0 to 1024 [ 190.957333][ T7367] EXT4-fs: Ignoring removed nobh option [ 190.963338][ T7367] EXT4-fs: inline encryption not supported [ 190.974233][ T7367] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 191.011721][ T7367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.043917][ T7372] loop3: detected capacity change from 0 to 512 [ 191.095961][ T7367] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4031: comm syz.0.356: Allocating blocks 385-513 which overlap fs metadata [ 191.126385][ T7367] EXT4-fs (loop0): pa ffff88807729d000: logic 16, phys. 129, len 24 [ 191.135380][ T7367] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 191.162233][ T7372] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.357: bad orphan inode 11862016 [ 191.178130][ T7372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 191.192447][ T7372] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.250560][ T7354] loop4: detected capacity change from 0 to 32768 [ 191.272856][ T7354] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.349 (7354) [ 191.314186][ T7354] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 191.316488][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.339637][ T7354] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 191.363209][ T7354] BTRFS info (device loop4): use zlib compression, level 3 [ 191.372471][ T7354] BTRFS info (device loop4): enabling ssd optimizations [ 191.380970][ T7354] BTRFS info (device loop4): using spread ssd allocation scheme [ 191.391279][ T7354] BTRFS info (device loop4): using free space tree [ 191.481614][ T7354] BTRFS info (device loop4): auto enabling async discard [ 191.533295][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 191.587014][ T27] audit: type=1800 audit(1761595412.748:15): pid=7354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.349" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 191.773396][ T6807] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 192.054450][ T7397] loop3: detected capacity change from 0 to 4096 [ 192.168565][ T7397] NILFS (loop3): invalid segment: Checksum error in segment payload [ 192.209431][ T7397] NILFS (loop3): trying rollback from an earlier position [ 192.321255][ T7397] NILFS (loop3): recovery complete [ 192.437048][ T7403] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.599899][ T7400] loop1: detected capacity change from 0 to 65536 [ 192.679624][ T7400] XFS (loop1): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 192.927890][ T7400] XFS (loop1): Ending clean mount [ 193.657252][ T7395] loop0: detected capacity change from 0 to 32768 [ 193.722655][ T7395] XFS: noikeep mount option is deprecated. [ 193.943881][ T7395] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 193.961430][ T5788] XFS (loop1): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 193.974055][ T7430] loop3: detected capacity change from 0 to 8 [ 194.213047][ T7395] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 194.318586][ T7395] XFS (loop0): Starting recovery (logdev: internal) [ 194.401311][ T7395] XFS (loop0): Ending recovery (logdev: internal) [ 194.736722][ T7439] XFS (loop0): Metadata corruption detected at xfs_btree_lookup_get_block+0x516/0x640, xfs_bnobt block 0x8 [ 194.756409][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.767138][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.837001][ T7439] XFS (loop0): Unmount and run xfs_repair [ 194.876717][ T7416] loop4: detected capacity change from 0 to 32768 [ 194.904959][ T7441] XFS (loop0): Internal error ltbno + ltlen > bno at line 1957 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_free_ag_extent+0xe46/0x1390 [ 194.993737][ T7416] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.361 (7416) [ 195.020557][ T7441] CPU: 0 PID: 7441 Comm: syz.0.360 Not tainted syzkaller #0 [ 195.027941][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 195.038236][ T7441] Call Trace: [ 195.041554][ T7441] [ 195.044529][ T7441] dump_stack_lvl+0x16c/0x230 [ 195.049263][ T7441] ? __xfs_printk+0x90/0x90 [ 195.053822][ T7441] ? show_regs_print_info+0x20/0x20 [ 195.059077][ T7441] ? xfs_alloc_check_irec+0x10b/0x1c0 [ 195.064535][ T7441] ? xfs_alloc_get_rec+0x286/0x3a0 [ 195.069814][ T7441] xfs_corruption_error+0x122/0x170 [ 195.075083][ T7441] ? xfs_free_ag_extent+0xe46/0x1390 [ 195.080440][ T7441] xfs_free_ag_extent+0xe84/0x1390 [ 195.085618][ T7441] ? xfs_free_ag_extent+0xe46/0x1390 [ 195.091009][ T7441] ? xfs_free_agfl_block+0x320/0x320 [ 195.096400][ T7441] __xfs_free_extent+0x31d/0x4c0 [ 195.101393][ T7441] ? xfs_setattr_size+0x656/0xaf0 [ 195.106467][ T7441] ? xfs_vn_setattr+0x259/0x300 [ 195.111376][ T7441] ? xfs_free_extent_fix_freelist+0x230/0x230 [ 195.117534][ T7441] xfs_trans_free_extent+0x387/0x920 [ 195.122932][ T7441] ? xfs_efi_item_free+0xb0/0xb0 [ 195.128116][ T7441] ? rcu_is_watching+0x15/0xb0 [ 195.132945][ T7441] xfs_extent_free_finish_item+0x26/0xb0 [ 195.138635][ T7441] ? xfs_extent_free_create_done+0x150/0x150 [ 195.144757][ T7441] xfs_defer_finish_noroll+0xf55/0x1e00 [ 195.150369][ T7441] ? xfs_defer_finish+0x1c/0x180 [ 195.155373][ T7441] ? xfs_da3_node_add+0xaa0/0xaa0 [ 195.160478][ T7441] ? __might_sleep+0xe0/0xe0 [ 195.165124][ T7441] xfs_defer_finish+0x1c/0x180 [ 195.169949][ T7441] xfs_itruncate_extents_flags+0x2b5/0x8c0 [ 195.175819][ T7441] ? xfs_iunlink_remove+0x7f0/0x7f0 [ 195.181078][ T7441] ? down_write_nested+0x169/0x1f0 [ 195.186282][ T7441] ? xfs_trans_log_inode+0x11f/0x190 [ 195.191628][ T7441] xfs_setattr_size+0x656/0xaf0 [ 195.196643][ T7441] ? setattr_prepare+0x1e6/0xac0 [ 195.201653][ T7441] ? trace_xfs_setattr+0x1c0/0x1c0 [ 195.206817][ T7441] ? rcu_is_watching+0x15/0xb0 [ 195.211643][ T7441] ? xfs_vn_setattr_size+0x157/0x180 [ 195.216984][ T7441] xfs_vn_setattr+0x259/0x300 [ 195.221725][ T7441] ? xfs_iflags_set+0x50/0x50 [ 195.226448][ T7441] ? evm_inode_setattr+0x94/0x6a0 [ 195.228252][ T7438] loop3: detected capacity change from 0 to 65536 [ 195.231505][ T7441] ? bpf_lsm_inode_setattr+0x9/0x10 [ 195.243190][ T7441] ? try_break_deleg+0x79/0x120 [ 195.248103][ T7441] ? xfs_iflags_set+0x50/0x50 [ 195.252836][ T7441] notify_change+0xb0d/0xe10 [ 195.257507][ T7441] do_truncate+0x19b/0x220 [ 195.261989][ T7441] ? put_page_bootmem+0x2c0/0x2c0 [ 195.267067][ T7441] ? apparmor_file_truncate+0x23f/0x2d0 [ 195.272688][ T7441] ? ima_bprm_check+0x1f0/0x1f0 [ 195.277601][ T7441] path_openat+0x298c/0x3190 [ 195.282259][ T7441] ? __kasan_slab_alloc+0x6c/0x80 [ 195.287329][ T7441] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.293454][ T7441] ? verify_lock_unused+0x140/0x140 [ 195.298705][ T7441] ? do_filp_open+0x3d0/0x3d0 [ 195.303434][ T7441] ? __virt_addr_valid+0x18c/0x540 [ 195.308616][ T7441] do_filp_open+0x1c5/0x3d0 [ 195.313162][ T7441] ? vfs_tmpfile+0x490/0x490 [ 195.317909][ T7441] ? _raw_spin_unlock+0x28/0x40 [ 195.322789][ T7441] ? alloc_fd+0x58f/0x630 [ 195.327159][ T7441] do_sys_openat2+0x12c/0x1c0 [ 195.331857][ T7441] ? _raw_spin_unlock+0x40/0x40 [ 195.336733][ T7441] ? do_sys_open+0xe0/0xe0 [ 195.341175][ T7441] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 195.347182][ T7441] ? lock_chain_count+0x20/0x20 [ 195.352053][ T7441] ? lock_chain_count+0x20/0x20 [ 195.356924][ T7441] __x64_sys_openat+0x139/0x160 [ 195.361804][ T7441] do_syscall_64+0x55/0xb0 [ 195.366243][ T7441] ? clear_bhb_loop+0x40/0x90 [ 195.370939][ T7441] ? clear_bhb_loop+0x40/0x90 [ 195.375643][ T7441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.381563][ T7441] RIP: 0033:0x7f58c2d8efc9 [ 195.386005][ T7441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.405648][ T7441] RSP: 002b:00007f58c3cb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 195.414101][ T7441] RAX: ffffffffffffffda RBX: 00007f58c2fe6180 RCX: 00007f58c2d8efc9 [ 195.422092][ T7441] RDX: 0000000000000202 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 195.430083][ T7441] RBP: 00007f58c2e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 195.438094][ T7441] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 195.446119][ T7441] R13: 00007f58c2fe6218 R14: 00007f58c2fe6180 R15: 00007fff7caee2a8 [ 195.454124][ T7441] [ 195.465304][ T7441] XFS (loop0): Corruption detected. Unmount and run xfs_repair [ 195.498634][ T7416] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 195.523398][ T7438] XFS (loop3): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 195.537286][ T7416] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 195.578682][ T7416] BTRFS info (device loop4): enabling auto defrag [ 195.585212][ T7416] BTRFS info (device loop4): use no compression [ 195.594692][ T7416] BTRFS info (device loop4): force clearing of disk cache [ 195.602984][ T7416] BTRFS info (device loop4): max_inline at 4096 [ 195.611978][ T7438] XFS (loop3): Ending clean mount [ 195.618743][ T7441] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x182e/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 195.635466][ T7441] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 195.641597][ T7416] BTRFS info (device loop4): disabling free space tree [ 195.742841][ T7416] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 195.820571][ T7416] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 195.874369][ T7416] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 195.887025][ T5787] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 195.887465][ T7416] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 195.905543][ T7416] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 195.929034][ T7416] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 196.255297][ T7416] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 196.402919][ T7416] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 196.488641][ T7416] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 196.554025][ T7416] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 196.615378][ T7416] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 196.648436][ T7416] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 196.686794][ T5795] XFS (loop3): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 196.717791][ T7416] BTRFS error (device loop4): open_ctree failed: -12 [ 197.542509][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 197.578046][ T969] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 197.775590][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 197.791469][ T8] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 197.799785][ T969] usb 5-1: Using ep0 maxpacket: 32 [ 197.810550][ T969] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 197.819640][ T8] usb 2-1: config 0 has no interface number 0 [ 197.825880][ T969] usb 5-1: config 0 has no interface number 0 [ 197.844545][ T8] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 197.859757][ T969] usb 5-1: config 0 interface 184 has no altsetting 0 [ 197.903064][ T8] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 197.919680][ T969] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 197.933496][ T969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.945879][ T969] usb 5-1: Product: syz [ 197.951882][ T8] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 197.967008][ T969] usb 5-1: Manufacturer: syz [ 197.972921][ T8] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 197.984983][ T969] usb 5-1: SerialNumber: syz [ 197.993686][ T969] usb 5-1: config 0 descriptor?? [ 197.999331][ T8] usb 2-1: Product: syz [ 198.003550][ T8] usb 2-1: SerialNumber: syz [ 198.012514][ T969] smsc75xx v1.0.0 [ 198.021114][ T8] usb 2-1: config 0 descriptor?? [ 198.042438][ T8] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 198.061777][ T8] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input19 [ 198.338441][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 198.642281][ T969] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 198.665044][ T969] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 198.776016][ T8] usb 2-1: USB disconnect, device number 14 [ 198.798876][ T7496] loop3: detected capacity change from 0 to 32768 [ 198.831098][ T8] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 198.866235][ T7496] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 198.914696][ T969] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 198.935085][ T969] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 198.965941][ T7511] loop0: detected capacity change from 0 to 8192 [ 198.994200][ T969] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 199.040671][ T7511] FAT-fs (loop0): bogus logical sector size 155 [ 199.047555][ T969] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 199.065455][ T7511] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 199.108098][ T969] usb 5-1: USB disconnect, device number 2 [ 199.156184][ T7511] FAT-fs (loop0): Can't find a valid FAT filesystem [ 199.173663][ T7496] XFS (loop3): Ending clean mount [ 199.206263][ T7496] XFS (loop3): Quotacheck needed: Please wait. [ 199.333838][ T7496] XFS (loop3): Quotacheck: Done. [ 199.532122][ T5795] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 199.598664][ T7533] batadv_slave_1: entered promiscuous mode [ 199.636021][ T7531] batadv_slave_1: left promiscuous mode [ 200.285735][ T7545] syzkaller1: entered promiscuous mode [ 200.293757][ T7545] syzkaller1: entered allmulticast mode [ 200.428878][ T5833] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 200.631247][ T5833] usb 4-1: Using ep0 maxpacket: 8 [ 200.653923][ T5833] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 200.673589][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.688385][ T5833] usb 4-1: Product: syz [ 200.697748][ T5833] usb 4-1: Manufacturer: syz [ 200.709470][ T5833] usb 4-1: SerialNumber: syz [ 200.944308][ T5833] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 201.291764][ T7587] loop4: detected capacity change from 0 to 512 [ 201.331674][ T7587] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.391: inode has both inline data and extents flags [ 201.374721][ T7587] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.391: couldn't read orphan inode 15 (err -117) [ 201.478043][ T7587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.711070][ T6807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.771129][ T6089] usb 4-1: USB disconnect, device number 13 [ 201.809509][ T6089] usblp0: removed [ 201.900823][ T7610] tipc: Started in network mode [ 201.906085][ T7610] tipc: Node identity ac14140f, cluster identity 4711 [ 201.934396][ T7610] tipc: New replicast peer: 255.255.255.255 [ 201.953591][ T7610] tipc: Enabled bearer , priority 10 [ 202.820833][ T7614] loop0: detected capacity change from 0 to 32768 [ 202.910240][ T7614] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 203.029211][ T7614] XFS (loop0): Ending clean mount [ 203.045121][ T7614] XFS (loop0): Quotacheck needed: Please wait. [ 203.062038][ T6089] tipc: Node number set to 2886997007 [ 203.133841][ T7614] XFS (loop0): Quotacheck: Done. [ 203.295503][ T7614] XFS (loop0): User initiated shutdown received. [ 203.295565][ T7614] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 203.295616][ T7614] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 203.373040][ T5787] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 204.330613][ T7650] loop4: detected capacity change from 0 to 32768 [ 204.390397][ T7650] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 204.556125][ T7650] syz.4.404 (7650) used greatest stack depth: 18736 bytes left [ 204.662933][ T6807] ocfs2: Unmounting device (7,4) on (node local) [ 205.770421][ T7714] loop1: detected capacity change from 0 to 1024 [ 205.798837][ T7714] EXT4-fs: Ignoring removed nobh option [ 205.804496][ T7714] EXT4-fs: inline encryption not supported [ 205.833373][ T7714] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 205.877242][ T7714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.191528][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.565927][ T7733] sit0: entered promiscuous mode [ 206.603007][ T7733] team0: Device sit0 is of different type [ 206.994718][ T7729] loop1: detected capacity change from 0 to 32768 [ 207.080410][ T7729] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 207.226978][ T27] audit: type=1326 audit(1761595428.388:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aadb8efc9 code=0x7ffc0000 [ 207.285400][ T27] audit: type=1326 audit(1761595428.388:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5aadb8efc9 code=0x7ffc0000 [ 207.343605][ T27] audit: type=1326 audit(1761595428.388:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aadb8efc9 code=0x7ffc0000 [ 207.385031][ T5788] ocfs2: Unmounting device (7,1) on (node local) [ 207.417153][ T27] audit: type=1326 audit(1761595428.388:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aadb8efc9 code=0x7ffc0000 [ 207.498810][ T27] audit: type=1326 audit(1761595428.388:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5aadb8efc9 code=0x7ffc0000 [ 208.090457][ T27] audit: type=1326 audit(1761595429.258:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aadb8efc9 code=0x7ffc0000 [ 208.148198][ T27] audit: type=1326 audit(1761595429.298:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aadb8efc9 code=0x7ffc0000 [ 208.546732][ T7760] loop0: detected capacity change from 0 to 40427 [ 208.567381][ T7760] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 208.576847][ T7760] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 208.588804][ T7760] F2FS-fs (loop0): invalid crc value [ 208.611927][ T7760] F2FS-fs (loop0): Found nat_bits in checkpoint [ 208.807183][ T5847] kernel write not supported for file bpf-prog (pid: 5847 comm: kworker/1:6) [ 208.823915][ T7760] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 208.848281][ T7760] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 209.656506][ T969] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 209.877853][ T969] usb 4-1: Using ep0 maxpacket: 32 [ 209.890380][ T969] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 209.907749][ T969] usb 4-1: config 0 has no interface number 0 [ 209.930638][ T7798] loop1: detected capacity change from 0 to 65536 [ 209.935195][ T969] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 209.972726][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.003882][ T969] usb 4-1: Product: syz [ 210.012107][ T7798] XFS (loop1): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 210.020629][ T969] usb 4-1: Manufacturer: syz [ 210.053337][ T969] usb 4-1: SerialNumber: syz [ 210.115878][ T969] usb 4-1: config 0 descriptor?? [ 210.151558][ T969] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 210.245190][ T7798] XFS (loop1): Ending clean mount [ 210.352375][ T969] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 210.435092][ T969] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 211.125056][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 211.155575][ T6089] usb 4-1: USB disconnect, device number 14 [ 211.230243][ T6089] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 211.312776][ T5157] udevd[5157]: worker [5802] terminated by signal 33 (Unknown signal 33) [ 211.328421][ T5157] udevd[5157]: worker [5802] failed while handling '/devices/virtual/block/loop1' [ 211.354434][ T6089] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 211.362254][ T5788] XFS (loop1): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 211.428529][ T6089] quatech2 4-1:0.51: device disconnected [ 212.111974][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 212.114087][ T5103] Bluetooth: hci1: command 0x0406 tx timeout [ 212.626685][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.843005][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.973511][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.062490][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.245544][ T12] tipc: Disabling bearer [ 213.253372][ T12] tipc: Left network mode [ 214.372221][ T12] hsr_slave_0: left promiscuous mode [ 214.379388][ T12] hsr_slave_1: left promiscuous mode [ 214.385380][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.393451][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.402981][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.410555][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.420899][ T12] bridge_slave_1: left allmulticast mode [ 214.426693][ T12] bridge_slave_1: left promiscuous mode [ 214.433403][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.447810][ T12] bridge_slave_0: left allmulticast mode [ 214.454176][ T12] bridge_slave_0: left promiscuous mode [ 214.460345][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.490760][ T12] veth1_macvtap: left promiscuous mode [ 214.496407][ T12] veth0_macvtap: left promiscuous mode [ 214.502201][ T12] veth1_vlan: left promiscuous mode [ 214.507588][ T12] veth0_vlan: left promiscuous mode [ 215.217143][ T12] team0 (unregistering): Port device team_slave_1 removed [ 215.283154][ T12] team0 (unregistering): Port device team_slave_0 removed [ 215.342160][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.402797][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.069003][ T12] bond0 (unregistering): Released all slaves [ 216.610502][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.690874][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.813155][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.905433][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.143646][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.235561][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.312195][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.422326][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.139504][ T12] hsr_slave_0: left promiscuous mode [ 219.145828][ T12] hsr_slave_1: left promiscuous mode [ 219.157326][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.176882][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.185156][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.196117][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.205413][ T12] bridge_slave_1: left allmulticast mode [ 219.216572][ T12] bridge_slave_1: left promiscuous mode [ 219.223165][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.238320][ T12] bridge_slave_0: left allmulticast mode [ 219.244052][ T12] bridge_slave_0: left promiscuous mode [ 219.257901][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.286326][ T12] hsr_slave_0: left promiscuous mode [ 219.296075][ T12] hsr_slave_1: left promiscuous mode [ 219.302565][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.314575][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.323570][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.331528][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.341962][ T12] bridge_slave_1: left allmulticast mode [ 219.347713][ T12] bridge_slave_1: left promiscuous mode [ 219.353447][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.364525][ T12] bridge_slave_0: left allmulticast mode [ 219.371155][ T12] bridge_slave_0: left promiscuous mode [ 219.377990][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.426570][ T12] veth1_macvtap: left promiscuous mode [ 219.432282][ T12] veth0_macvtap: left promiscuous mode [ 219.439044][ T12] veth1_vlan: left promiscuous mode [ 219.444374][ T12] veth0_vlan: left promiscuous mode [ 219.451471][ T12] veth1_macvtap: left promiscuous mode [ 219.457028][ T12] veth0_macvtap: left promiscuous mode [ 219.462793][ T12] veth1_vlan: left promiscuous mode [ 219.468502][ T12] veth0_vlan: left promiscuous mode [ 220.273101][ T12] team0 (unregistering): Port device team_slave_1 removed [ 220.336022][ T12] team0 (unregistering): Port device team_slave_0 removed [ 220.402491][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.466595][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.151672][ T12] bond0 (unregistering): Released all slaves