last executing test programs: 3.944358011s ago: executing program 3 (id=786): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000380)={"1b8000", 0x0, 0x5, 0x2, 0x0, 0x0, "f759e10000001000000000fc6300", '\x00', "0300", "17ff00", ["8bada940edff000a00", "c2fed6800000006906528660", "000000ff0000000000000020", "0000000000000000000100"]}) syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000008c0)={"8a25d7dd", 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000200000081", "0000c5d7", "69c7c4a9", "f7bf0700", ["00d2eeff00f700", "275f27336422fe2a553ae850", "5d6fe9214703bf778b51f8e0", "4973dce60c23634573635a16"]}) 3.341155176s ago: executing program 1 (id=795): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x9000, 0x3, &(0x7f000029d000/0x9000)=nil) 2.991256235s ago: executing program 4 (id=798): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000140)=0x7, 0x4) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="aa", 0x1}], 0x1}}], 0x3b, 0x4048044) 2.979900585s ago: executing program 1 (id=799): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f000000d680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) setuid(0xee00) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000001c0)={&(0x7f0000000100)='blkio.bfq.empty_time\x00', &(0x7f0000000140)='workdir'}) 2.78837358s ago: executing program 4 (id=800): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x3c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_KEYS={0x4}]}, 0x3c}}, 0x20004800) 2.576917315s ago: executing program 4 (id=803): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 2.418809819s ago: executing program 3 (id=805): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f00000006c0)="9daaac999f69c48373a1ee570000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.37934543s ago: executing program 4 (id=806): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x3c, r0, 0x8de13c6b70ae92c3, 0x70bd26, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x7b, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbb}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.304378472s ago: executing program 2 (id=807): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x3, 0x100000001, 0x1000}}, 0x30) 2.200227254s ago: executing program 3 (id=808): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000800, &(0x7f0000000340)=ANY=[], 0x1, 0x241, &(0x7f00000005c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, 0x0, 0x0) 2.134247486s ago: executing program 2 (id=809): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_newnexthop={0x58, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x1122334455667788}}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x1}}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x1}}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv4_newnexthop={0x58, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x1122334455667788}}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x1}}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x1}}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000), 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv4_getnexthop={0x18, 0x6a, 0x301}, 0x18}}, 0x0) 2.106675497s ago: executing program 4 (id=810): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000380)={0x0, 0x12, 0x49, "91c3ef79d854db9e8bcf214cebcaee23c628f5d91cd84fed33136d34fa663a7efffd27372d28d6b2b2c70769b67918f2e583885117cd00e45b360e8f046a1c0ba7f333003d1531fc17"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.750473596s ago: executing program 2 (id=811): unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0}, 0x94) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 1.709578607s ago: executing program 1 (id=812): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$cgroup(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1020020, &(0x7f0000000040)={[{@cpuset_v2_mode}]}) 1.709442707s ago: executing program 3 (id=813): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x800, 0x0, 0x2, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x2, 0x0, 0x5, 0x0, 0x1}, 0x20) 1.419514964s ago: executing program 3 (id=815): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r0, &(0x7f0000000070)='syz.', 0x4) 1.392692884s ago: executing program 0 (id=816): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000040)={[{@gid}, {}, {@nls={'nls', 0x3d, 'euc-jp'}}]}, 0x1, 0x5ed, &(0x7f0000001440)="$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") ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000080)="5e8f72776b5a565ee8462a59215b63ea5c3adb725d582f4f9d2377780e33d286a0cf2f7131c18ca88b0e04bfb2c93bc588f58295adb17f1c3af829135e453bd796c2b86d866fa73547d3a117753015be9793957aafb8b1c3d1197ec81dba777b59d1cbf1f0c2f202dd967c3a88a26a26d2df234d3b6e8dc3df7ec15b930c9a16d2afd86f3f8720427ddc5f5f4c4df9914cf943c96a7e12312dbe8329153bfac5b849f40508bc58e2e1f6d846be5a4a86cef9391346b23a02fc5b77b033fe845157a362829fc4470ca1511dbf8e16b11fe81de85b80b00b849fc0b848db682dbc01ebd38d5e7e446265a652b09a74662a45f18f728e88642196a5c8939cf9dc4a") mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 1.092349162s ago: executing program 3 (id=817): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0xb5, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0xe, 0x1, {0x22, 0x26}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xf, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b40)={0x2c, &(0x7f0000000880)={0x40, 0x35, 0x26, {0x26, 0x31, "aa27f10161b71a9d938b5548f75799c3ab3473faadba68caa4d15bb44b654f94bde0ddba"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 964.725295ms ago: executing program 1 (id=818): syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa08c56, &(0x7f00000015c0)={[{@fat=@showexec}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@shortname_lower}, {@numtail}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_mixed}, {@rodir}, {@numtail}]}, 0x7f, 0x2bb, &(0x7f0000001300)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 949.338086ms ago: executing program 0 (id=819): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x3200002, &(0x7f0000000080)={[{@norecovery}, {@quota}]}, 0x3, 0x617, &(0x7f0000000bc0)="$eJzs3c9rXNUeAPDvnUnSpCkvaXi8Z13YgEgL2qRJWwniot1KCfUHbnRhbNJam7ahiWiq0BTqRhA3IoIguLD+F1rstivd6MKNKykElboTHLkz9yaZZCY/JslMyXw+MJ0558ydc24n33vPnDnnTgBtazD9pxBxKCJmkoi+ZGGprCOywsHK8x7++cH59JZEqfTy7wORZHn585PsvjfbuDsifvg+iYHi2npn529cnpienrqepYfnrswMz87fOHbpysTFqYtTV0efHR07dfLU2Mjxhvbr5tqsv87efvvdvo/GX/v6i7+TkW9+GU/idLyQPXHlfuyUwRgs/58ka4t6x3a6shYpZn8npVKplOclHa1tE5uXv3+dEfH/6ItiLL95ffHhiy1tHLCrSknl2A20o6Sh+O/Z+YYATZb3A/LP9qs/Bxda0isBmmHxTGUAYG38d1TGBqO7PDaw/2ESK4d1kohobGSu2oGIuH9v/PaFe+O3Y5fG4YDaFm5FxGO14j8px39/dEd/Of4LVfGf9gvOZfdp/ksN1l9+ze7ltPiH5qnEf/e68R914v+N9P5mJYbfbKj27pWJt3qq4r+n0V0CAAAAAACAtnX3TEQ8s/T9f9fy92+Fpfk/UWP+T29EnN6B+gdXpdd+/194sAPVADUsnol4vub830I++7e/uGIJa390JhcuTU8dj4j/RMTR6NyXpkfWqePYxwOf1ysbzOb/5be0/vvZXMCsHQ869lVvMzkxN7GNXQYyi7ei+HjN+b/J0vk/qXH+T48MM5usY+CpO+fqlW0c/8BuKX0VcaTm+X/5qhXJ+tfnGC73B4bzXsFaT7z/ybf16m80/l1iArZv8VbE/vXjvz9Zeb2e2a3XcWK+o1SvrNH+f1fySvmqQl1Z3nsTc3PXRyK6krPFNLcqf3TrbYa9KI+HPF7S+D/65HL8F2uM/9Xq//dExMKq107+qF5TnPvfP72/1muP/j+0Thr/k1s6/2/9weid/u/q1b+58//J8rn+aJZj/A8qPsvDtKuzKr9GOHbUKmp6gwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgDyhExIFICkNLjwuFoaGI3oj4b+wvTF+bnXv6wrV3rk6mZeXf/y/kv/TbV0kn+e//969Ij65Kn4iIgxHxabGnnB46f216stU7DwAAAAAAAAAAAAAAAAAAAI+I3jrr/1O/FVvdOmDXdbS6AUDL1Ij/H1vRDqD5nP+hfYl/aF/iH9qX+If2Jf6hfa0f/6+PNa0hQNM5/0P7Ev8AAAAAALCnHDx89+ckIhae6ynfUl1ZWWdLWwbstkID2zguwN7gEj/Qvkz9gfalLw8kG5R3191ooy3XM3N+GxsDAAAAAAAAAAAAQNs5csj6f2hXjaz/B/YG6/+hfeXr/w+3uB1A8/mMD8QGK/lrrv/fcKsVfNAAAAAAAAAAAAAAgG2bnb9xeWJ6euq6B682sFU+q3mbtf/0ZWt2uVQq3Uyb/6i8BTv/IMlmqDel0nwqfPP3tGszO5iv9dvcK689Vuxr0jEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo9m8AAAD//2fcIYk=") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x4}, [], {0x10, 0x7}}, 0x24, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000200)='./bus\x00', 0x4482c, 0x0, 0x3, 0x0, &(0x7f0000000680)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 646.741743ms ago: executing program 0 (id=820): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000080)="9316b152d54c83b6833b1963e42fac4dc064d0a746eaf6478ebc011ea13204590c4e9f43ff1cd929963d7ca190d59807b05228", 0x33}], 0x1}}], 0x1, 0x0) 618.771914ms ago: executing program 2 (id=821): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x60, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x24, 0x1, {{0x1d, 0x0, 0x4, 0x7fff, 0x800, 0x6795}, {0xa, 0x2, 0x7ff, 0x8, 0x40, 0xffffff81}, 0x3, 0xd6d2, 0xd11}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) 511.523277ms ago: executing program 1 (id=822): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 432.385929ms ago: executing program 0 (id=823): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 419.733629ms ago: executing program 2 (id=824): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', r2, 0x3f00, 0x20, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010100, @empty=0xe0}}}}) 275.027263ms ago: executing program 0 (id=825): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) writev(r0, &(0x7f0000002140)=[{&(0x7f0000000040)='T01\n', 0x4}], 0x1) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) 199.321095ms ago: executing program 1 (id=826): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000000)=r1, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@in6={0xa, 0x4ea3, 0x0, @loopback={0xffffff7f00000000}}, 0x80, 0x0}, 0x0) 182.660635ms ago: executing program 4 (id=827): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x3, 0x1, 0xd}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x80, 0x380000, @dev={0xfe, 0x80, '\x00', 0x13}, 0x10}, 0x1c) 28.281029ms ago: executing program 2 (id=828): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="fea709030600000000c196dd632b", 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=829): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='add syz0 127.0.0.1:7', 0x14) kernel console output (not intermixed with test programs): 0 entered promiscuous mode [ 80.541522][ T4276] device hsr_slave_1 entered promiscuous mode [ 80.550200][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.570889][ T4281] team0: Port device team_slave_0 added [ 80.579040][ T4274] team0: Port device team_slave_0 added [ 80.586854][ T4287] team0: Port device team_slave_0 added [ 80.596225][ T4287] team0: Port device team_slave_1 added [ 80.610677][ T4281] team0: Port device team_slave_1 added [ 80.618202][ T4274] team0: Port device team_slave_1 added [ 80.669426][ T4275] team0: Port device team_slave_0 added [ 80.681789][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.690953][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.717412][ T4287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.743005][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.750492][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.777156][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.790578][ T4275] team0: Port device team_slave_1 added [ 80.802195][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.809593][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.835737][ T4287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.847898][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.854927][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.881189][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.896377][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.903555][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.930039][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.963832][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.971094][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.997342][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.042204][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.049353][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.075604][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.088529][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.095535][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.122617][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.122876][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 81.136138][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 81.197257][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 81.207787][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 81.214048][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 81.222259][ T4274] device hsr_slave_0 entered promiscuous mode [ 81.229299][ T4274] device hsr_slave_1 entered promiscuous mode [ 81.235904][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.243940][ T4274] Cannot create hsr debugfs directory [ 81.284608][ T4281] device hsr_slave_0 entered promiscuous mode [ 81.291882][ T4281] device hsr_slave_1 entered promiscuous mode [ 81.299157][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.306763][ T4281] Cannot create hsr debugfs directory [ 81.329331][ T4287] device hsr_slave_0 entered promiscuous mode [ 81.336290][ T4287] device hsr_slave_1 entered promiscuous mode [ 81.343252][ T4287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.351174][ T4287] Cannot create hsr debugfs directory [ 81.420083][ T4275] device hsr_slave_0 entered promiscuous mode [ 81.426943][ T4275] device hsr_slave_1 entered promiscuous mode [ 81.433916][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.441737][ T4275] Cannot create hsr debugfs directory [ 81.693571][ T4276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.730995][ T4276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.754182][ T4276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.763580][ T4276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.820672][ T4281] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.831395][ T4281] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.842231][ T4281] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.864828][ T4281] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.931443][ T4274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.945559][ T4274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.956013][ T4274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.970747][ T4274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.062462][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.092402][ T4287] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.129066][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.136447][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.147345][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.156151][ T4287] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.182010][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.193296][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.203754][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.211134][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.222213][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.232196][ T4287] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.250101][ T4287] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.271579][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.284493][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.293434][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.300633][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.310474][ T4275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.329014][ T4275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.343439][ T4275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.352569][ T4275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.365381][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.399990][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.412957][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.422906][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.466672][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.479419][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.490543][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.499959][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.511513][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.521130][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.540234][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.548657][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.568246][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.590900][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.599922][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.613410][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.636681][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.646429][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.661312][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.674940][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.706538][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.720033][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.741731][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.748982][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.792883][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.802152][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.814138][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.826310][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.833593][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.849307][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.858465][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.868046][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.879157][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.889346][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.901644][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.910579][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.917779][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.933364][ T4287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.967953][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.976839][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.986090][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.995412][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.055773][ T4287] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.064615][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.081027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.094984][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.102208][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.116525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.133798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.142891][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.157889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.166599][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.183147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.192850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.200765][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 83.212997][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 83.230559][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.249935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.262277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.272705][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.278494][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 83.281854][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 83.286565][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 83.298911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.314477][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.323917][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.331138][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.361855][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.372286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.381044][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.389502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.398476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.407980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.416640][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.429697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.439769][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.448789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.461292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.472911][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.480135][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.501834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.514602][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.526298][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.556166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.609655][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.619658][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.626938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.650664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.681015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.698081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.716392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.744997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.756870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.789563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.804049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.813730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.828538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.843336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.853677][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.860927][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.874717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.883805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.899793][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.906954][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.934240][ T4287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.948945][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.978551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.006303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.028212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.039733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.050682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.107286][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.121831][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.138353][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.153030][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.165782][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.180955][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.192730][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.205086][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.216375][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.230396][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.291221][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.300156][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.309541][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.321425][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.333030][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.362262][ T4276] device veth0_vlan entered promiscuous mode [ 84.375906][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.385023][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.392915][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.404262][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.426495][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.487223][ T4276] device veth1_vlan entered promiscuous mode [ 84.508578][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.523892][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.553391][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.593327][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.617642][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.638506][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.685979][ T4281] device veth0_vlan entered promiscuous mode [ 84.699958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.718978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.752670][ T4276] device veth0_macvtap entered promiscuous mode [ 84.783398][ T4281] device veth1_vlan entered promiscuous mode [ 84.830699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.845560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.866047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.875512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.885772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.902950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.925849][ T4276] device veth1_macvtap entered promiscuous mode [ 84.982801][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.013500][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.028313][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.038647][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.060600][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.079651][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.102481][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.128794][ T4281] device veth0_macvtap entered promiscuous mode [ 85.149144][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.161706][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.176173][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.188602][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.226631][ T4276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.238500][ T4276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.252936][ T4276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.262105][ T4276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.277970][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 85.284048][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 85.316223][ T4281] device veth1_macvtap entered promiscuous mode [ 85.351274][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.358517][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 85.364828][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 85.370956][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 85.383572][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.418015][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.438516][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.494841][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.508101][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.523508][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.534244][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.545230][ T4287] device veth0_vlan entered promiscuous mode [ 85.557969][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.574577][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.592671][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.613566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.621285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.629845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.638910][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.648019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.656838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.671957][ T4287] device veth1_vlan entered promiscuous mode [ 85.694414][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.704726][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.716989][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.732885][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.744930][ T4281] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.754414][ T4281] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.768558][ T4281] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.778960][ T4281] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.805242][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.814919][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.824490][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.834540][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.845467][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.856378][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.875472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.885978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.894985][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.906848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.943355][ T4287] device veth0_macvtap entered promiscuous mode [ 85.988095][ T4274] device veth0_vlan entered promiscuous mode [ 86.007705][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.015769][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.048007][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.064203][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.074451][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.087729][ T4287] device veth1_macvtap entered promiscuous mode [ 86.105894][ T4274] device veth1_vlan entered promiscuous mode [ 86.168995][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.176901][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.189744][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.203498][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.216674][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.229212][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.243721][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.261115][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.269493][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.278048][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.286516][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.295375][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.304198][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.313288][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.323067][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.331843][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.347389][ T4275] device veth0_vlan entered promiscuous mode [ 86.359084][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.374181][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.385559][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.396651][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.412877][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.436783][ T4275] device veth1_vlan entered promiscuous mode [ 86.449163][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.459696][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.469749][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.493109][ T4274] device veth0_macvtap entered promiscuous mode [ 86.502897][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.512262][ T4287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.522250][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.532127][ T4287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.541261][ T4287] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.550201][ T4287] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.566558][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.583391][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.593112][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.603957][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.621593][ T4274] device veth1_macvtap entered promiscuous mode [ 86.686013][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.703335][ T4359] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.719175][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.765396][ T4275] device veth0_macvtap entered promiscuous mode [ 86.798862][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.806761][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.818895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.836312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.846628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.860678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.888036][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.900634][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.914745][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.929339][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.939516][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.950308][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.963569][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.972187][ T4275] device veth1_macvtap entered promiscuous mode [ 86.987606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.005713][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.016675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.040248][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.058994][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.084083][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.117212][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.144486][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.167188][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.188789][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.209577][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.252784][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.277377][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.286237][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.350338][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.359160][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 87.365255][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 87.387822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.429160][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.440731][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 87.446817][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 87.453094][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 87.480815][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.497451][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.508224][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.520309][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.531019][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.542975][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.553715][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.565859][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.583106][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.598671][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.607457][ T2123] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.618768][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.636930][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.648064][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.658856][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.668942][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.680182][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.690123][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.702715][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.720772][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.772813][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.788213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.807170][ T2123] usb 2-1: Using ep0 maxpacket: 8 [ 87.819293][ T2123] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 87.841962][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.851793][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.860643][ T2123] usb 2-1: config 2 has no interface number 0 [ 87.877129][ T2123] usb 2-1: config 2 interface 31 has no altsetting 0 [ 87.886092][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.905279][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.915982][ T2123] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 87.935904][ T2123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.952709][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.965276][ T2123] usb 2-1: Product: syz [ 87.977251][ T2123] usb 2-1: Manufacturer: syz [ 87.982009][ T2123] usb 2-1: SerialNumber: syz [ 87.993975][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.028669][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.162557][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.201631][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.249768][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.270806][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.284557][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.295100][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.388489][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.402435][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.424680][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.435208][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.458135][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.480927][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.525069][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.539316][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.566325][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.648964][ T2123] ch9200: probe of 2-1:2.31 failed with error -22 [ 88.683916][ T2123] usb 2-1: USB disconnect, device number 2 [ 88.705792][ T4372] loop3: detected capacity change from 0 to 2048 [ 88.740918][ T4372] ======================================================= [ 88.740918][ T4372] WARNING: The mand mount option has been deprecated and [ 88.740918][ T4372] and is ignored by this kernel. Remove the mand [ 88.740918][ T4372] option from the mount to silence this warning. [ 88.740918][ T4372] ======================================================= [ 88.963931][ T4381] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.165718][ T4384] x_tables: ip_tables: CT.0 target: invalid size 40 (kernel) != (user) 0 [ 89.179408][ T4386] loop2: detected capacity change from 0 to 256 [ 89.225794][ T4386] exfat: Deprecated parameter 'utf8' [ 89.245049][ T4386] exfat: Deprecated parameter 'utf8' [ 89.283848][ T4386] exfat: Deprecated parameter 'namecase' [ 89.339143][ T4386] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 89.523985][ T4393] loop1: detected capacity change from 0 to 512 [ 89.603256][ T4393] FAT-fs (loop1): bogus logical sector size 1 [ 89.635126][ T4393] FAT-fs (loop1): Can't find a valid FAT filesystem [ 89.715116][ T4393] netlink: 'syz.1.13': attribute type 16 has an invalid length. [ 89.746798][ T4393] netlink: 'syz.1.13': attribute type 3 has an invalid length. [ 89.776976][ T4393] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.13'. [ 89.889378][ T4399] loop4: detected capacity change from 0 to 1024 [ 90.051014][ T4399] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 90.350756][ T4388] loop0: detected capacity change from 0 to 40427 [ 90.411903][ T4388] F2FS-fs (loop0): invalid crc value [ 90.436264][ T4388] F2FS-fs (loop0): Found nat_bits in checkpoint [ 90.489298][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 90.607275][ T4388] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 90.658203][ T4410] loop1: detected capacity change from 0 to 8192 [ 90.696512][ T4410] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.756275][ T4417] loop4: detected capacity change from 0 to 16 [ 90.822151][ T4417] erofs: (device loop4): mounted with root inode @ nid 36. [ 90.895876][ T4417] overlayfs: failed to get redirect (-117) [ 91.049840][ T4287] syz-executor: attempt to access beyond end of device [ 91.049840][ T4287] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 91.229849][ T4406] loop2: detected capacity change from 0 to 32768 [ 91.404462][ T26] audit: type=1800 audit(1786096212.237:2): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.17" name="file3" dev="loop2" ino=5 res=0 errno=0 [ 91.769629][ T14] cfg80211: failed to load regulatory.db [ 91.929883][ T4431] loop3: detected capacity change from 0 to 64 [ 92.179308][ T4435] loop1: detected capacity change from 0 to 512 [ 92.287489][ T4435] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.31: bg 0: block 393: padding at end of block bitmap is not set [ 92.366026][ T4281] hfs: node 4:3 still has 1 user(s)! [ 92.396122][ T4435] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 92.484112][ T4435] EXT4-fs (loop1): 2 truncates cleaned up [ 92.551738][ T4446] Bluetooth: MGMT ver 1.22 [ 92.567712][ T4435] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 92.626753][ T26] audit: type=1800 audit(1786096213.457:3): pid=4435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.31" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 92.829401][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 93.030388][ T2123] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.227224][ T2123] usb 3-1: Using ep0 maxpacket: 16 [ 93.235039][ T2123] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.263881][ T2123] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.305943][ T2123] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 93.346549][ T2123] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 93.376962][ T2123] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.417727][ T2123] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 93.457117][ T2123] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 93.475475][ T2123] usb 3-1: Manufacturer: syz [ 93.496577][ T2123] usb 3-1: config 0 descriptor?? [ 93.787219][ T4457] loop0: detected capacity change from 0 to 32768 [ 93.814480][ T4459] loop1: detected capacity change from 0 to 32768 [ 93.858673][ T4459] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.38 (4459) [ 93.904539][ T26] audit: type=1800 audit(1786096214.737:4): pid=4457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.39" name="file3" dev="loop0" ino=5 res=0 errno=0 [ 93.936679][ T4459] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 93.958876][ T4459] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 94.007267][ T2123] rc_core: IR keymap rc-hauppauge not found [ 94.016721][ T2123] Registered IR keymap rc-empty [ 94.017268][ T4459] BTRFS info (device loop1): using free space tree [ 94.039812][ T2123] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.117323][ T2123] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.162223][ T2123] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 94.175108][ T4470] loop4: detected capacity change from 0 to 512 [ 94.185642][ T4470] EXT4-fs: Ignoring removed orlov option [ 94.191510][ T4470] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.219585][ T2123] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 94.255165][ T4470] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.41: corrupted in-inode xattr [ 94.264710][ T2123] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.307517][ T2123] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.356822][ T4470] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.41: couldn't read orphan inode 15 (err -117) [ 94.369014][ T2123] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.405706][ T4459] BTRFS info (device loop1): enabling ssd optimizations [ 94.413180][ T2123] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.447391][ T2123] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.448519][ T4470] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 94.487206][ T2123] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.517398][ T2123] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.587255][ T2123] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.627248][ T2123] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.657257][ T2123] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.700455][ T2123] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 94.735316][ T2123] mceusb 3-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 94.790071][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 94.809776][ T2123] usb 3-1: USB disconnect, device number 2 [ 94.847450][ T4276] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 96.011611][ T14] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 96.208583][ T14] usb 2-1: not running at top speed; connect to a high speed hub [ 96.231861][ T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 96.289636][ T14] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 96.299431][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.316672][ T4523] loop0: detected capacity change from 0 to 256 [ 96.323395][ T14] usb 2-1: Product: syz [ 96.327661][ T14] usb 2-1: Manufacturer: syz [ 96.332297][ T14] usb 2-1: SerialNumber: syz [ 96.362608][ T14] oti6858 2-1:1.0: oti6858 converter detected [ 96.415331][ T14] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 96.802158][ T14] usb 2-1: USB disconnect, device number 3 [ 96.838680][ T14] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 96.866388][ T14] oti6858 2-1:1.0: device disconnected [ 97.180930][ T4532] loop0: detected capacity change from 0 to 256 [ 97.235135][ T4532] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 97.292344][ T4520] loop4: detected capacity change from 0 to 32768 [ 97.376592][ T26] audit: type=1800 audit(1786096218.207:5): pid=4520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.54" name="file3" dev="loop4" ino=5 res=0 errno=0 [ 97.952582][ T4321] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.005029][ T4357] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.189417][ T4321] usb 1-1: Using ep0 maxpacket: 32 [ 98.218892][ T4357] usb 2-1: Using ep0 maxpacket: 32 [ 98.226139][ T4321] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 98.235098][ T4321] usb 1-1: config 0 has no interface number 0 [ 98.242648][ T4357] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 98.252123][ T4357] usb 2-1: config 0 has no interface number 0 [ 98.258903][ T4357] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.296553][ T4357] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.296800][ T4321] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 98.316458][ T4357] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 98.325883][ T4357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.334456][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.343838][ T4321] usb 1-1: Product: syz [ 98.351472][ T4357] usb 2-1: config 0 descriptor?? [ 98.356592][ T4321] usb 1-1: Manufacturer: syz [ 98.362321][ T4321] usb 1-1: SerialNumber: syz [ 98.401454][ T4321] usb 1-1: config 0 descriptor?? [ 98.438724][ T4321] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 98.641097][ T4321] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 98.703966][ T4321] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 98.978217][ T4357] uclogic 0003:28BD:0094.0001: pen parameters not found [ 98.988844][ T4445] Set syz0 is full, maxelem 65536 reached [ 98.995600][ T4357] uclogic 0003:28BD:0094.0001: interface is invalid, ignoring [ 99.041493][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 99.050074][ T4316] usb 1-1: USB disconnect, device number 2 [ 99.081182][ T4316] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 99.134283][ T4316] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 99.165502][ T4556] loop2: detected capacity change from 0 to 4096 [ 99.187675][ T4316] quatech2 1-1:0.51: device disconnected [ 99.191631][ T4556] ntfs: (device loop2): parse_options(): The disable_sparse option requires a boolean argument. [ 99.208181][ T14] usb 2-1: USB disconnect, device number 4 [ 99.625040][ T4564] loop3: detected capacity change from 0 to 1024 [ 99.757334][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.961589][ T14] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 99.985900][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.011281][ T4570] loop1: detected capacity change from 0 to 4096 [ 100.020492][ T14] usb 3-1: Product: syz [ 100.024724][ T14] usb 3-1: Manufacturer: syz [ 100.032769][ T14] usb 3-1: SerialNumber: syz [ 100.052466][ T14] usb 3-1: config 0 descriptor?? [ 100.067980][ T4575] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.084368][ T14] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 100.137965][ T4570] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 8189 already freed [ 100.166440][ T4570] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 100.306495][ T4578] loop3: detected capacity change from 0 to 16 [ 100.372644][ T4578] erofs: (device loop3): mounted with root inode @ nid 36. [ 100.484955][ T4578] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.776874][ T4589] loop3: detected capacity change from 0 to 512 [ 100.899433][ T14] usb 3-1: USB disconnect, device number 3 [ 100.908731][ T4589] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.86: inode has both inline data and extents flags [ 101.031959][ T4589] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.86: couldn't read orphan inode 15 (err -117) [ 101.108283][ T4589] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 101.161673][ T4601] device bridge0 entered promiscuous mode [ 101.193236][ T26] audit: type=1800 audit(1786096222.027:6): pid=4589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.86" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 101.213880][ T4601] device macsec1 entered promiscuous mode [ 101.324332][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 101.786107][ T4618] capability: warning: `syz.3.97' uses 32-bit capabilities (legacy support in use) [ 101.862229][ T4618] program syz.3.97 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.807844][ T4620] loop0: detected capacity change from 0 to 32768 [ 102.890503][ T4646] loop2: detected capacity change from 0 to 1024 [ 102.903901][ T4646] EXT4-fs: Ignoring removed bh option [ 102.963830][ T4620] XFS (loop0): Mounting V5 Filesystem [ 102.984126][ T4646] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 103.021348][ T4646] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.125695][ T4646] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 3: comm syz.2.109: lblock 3 mapped to illegal pblock 3 (length 3) [ 103.144202][ T4620] XFS (loop0): Ending clean mount [ 103.149287][ T4659] EXT4-fs error (device loop2): ext4_ext_remove_space:2945: inode #15: comm syz.2.109: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 103.253398][ T4646] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 103.282079][ T4659] EXT4-fs error (device loop2) in ext4_setattr:5695: Corrupt filesystem [ 103.301611][ T4646] EXT4-fs (loop2): This should not happen!! Data will be lost [ 103.301611][ T4646] [ 103.507924][ T2907] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 103.529637][ T4287] XFS (loop0): Unmounting Filesystem [ 103.553811][ T2907] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 103.577292][ T2907] EXT4-fs (loop2): This should not happen!! Data will be lost [ 103.577292][ T2907] [ 103.658739][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 103.813703][ T4666] loop1: detected capacity change from 0 to 16 [ 103.880738][ T4668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 103.928673][ T4666] erofs: (device loop1): mounted with root inode @ nid 36. [ 104.583626][ T4687] loop1: detected capacity change from 0 to 1024 [ 104.667435][ T4687] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 104.787293][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.816933][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 105.007157][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 105.014198][ T7] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.045636][ T7] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.087528][ T7] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 105.118268][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 105.148695][ T7] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 105.178805][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.206810][ T7] usb 5-1: config 0 descriptor?? [ 105.303740][ T4703] loop3: detected capacity change from 0 to 512 [ 105.324411][ T4703] EXT4-fs: Ignoring removed oldalloc option [ 105.449284][ T4706] Illegal XDP return value 4294967294 on prog (id 11) dev N/A, expect packet loss! [ 105.460867][ T4703] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 105.504559][ T4703] EXT4-fs (loop3): orphan cleanup on readonly fs [ 105.569951][ T4703] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 105.626559][ T7] hid (null): invalid report_size -2146972904 [ 105.643618][ T7] hid (null): unknown global tag 0xd [ 105.652896][ T7] hid (null): invalid report_count 32517 [ 105.667675][ T4703] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 105.697466][ T4703] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.126: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 105.723717][ T4703] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.126: couldn't read orphan inode 13 (err -117) [ 105.756610][ T4703] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 105.780706][ T4714] loop2: detected capacity change from 0 to 1024 [ 105.807500][ T4703] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.126: deleted inode referenced: 12 [ 105.828853][ T7] usb 5-1: USB disconnect, device number 2 [ 105.835409][ T4714] hfsplus: failed to load root directory [ 105.906963][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 105.917624][ T4356] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.227604][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.324661][ T4728] loop1: detected capacity change from 0 to 1024 [ 106.415917][ T4728] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 106.447142][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.463132][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.486585][ T14] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 106.518422][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 106.534814][ T14] usb 1-1: SerialNumber: syz [ 106.620347][ T4731] loop4: detected capacity change from 0 to 256 [ 106.720210][ T4731] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fe4a43c, utbl_chksum : 0xe619d30d) [ 106.761948][ T14] usb 1-1: 0:2 : does not exist [ 106.795395][ T14] usb 1-1: USB disconnect, device number 3 [ 106.947260][ T4501] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 107.041942][ T4356] udevd[4356]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.149212][ T4501] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 107.165699][ T4501] usb 3-1: config 0 interface 0 has no altsetting 0 [ 107.173180][ T4501] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 107.184977][ T4501] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.205062][ T4501] usb 3-1: config 0 descriptor?? [ 107.211008][ T4733] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 107.641183][ T4501] uclogic 0003:2179:0053.0003: interface is invalid, ignoring [ 107.858385][ T14] usb 3-1: USB disconnect, device number 4 [ 107.935700][ T4764] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 108.139120][ T4768] loop1: detected capacity change from 0 to 512 [ 108.230863][ T4768] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.515118][ T4775] loop0: detected capacity change from 0 to 4096 [ 108.571360][ T4775] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 108.858125][ T4786] loop2: detected capacity change from 0 to 64 [ 108.984823][ T4287] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 109.056678][ T4287] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 109.085892][ T4287] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 109.369525][ T4797] loop3: detected capacity change from 0 to 1024 [ 109.532433][ T4321] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.737318][ T4321] usb 3-1: Using ep0 maxpacket: 8 [ 109.748044][ T4321] usb 3-1: too many endpoints for config 0 interface 0 altsetting 251: 223, using maximum allowed: 30 [ 109.790197][ T4321] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.842439][ T4321] usb 3-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 109.884214][ T4321] usb 3-1: config 0 interface 0 has no altsetting 0 [ 109.907496][ T4321] usb 3-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 109.947397][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.959013][ T4321] usb 3-1: config 0 descriptor?? [ 109.983615][ T4813] program syz.3.176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.260204][ T4822] i2c i2c-0: delete_device: Extra parameters [ 110.372853][ T4321] smartjoyplus 0003:6666:8802.0004: unknown main item tag 0x0 [ 110.395345][ T4321] smartjoyplus 0003:6666:8802.0004: collection stack underflow [ 110.438887][ T4321] smartjoyplus 0003:6666:8802.0004: item 0 2 0 12 parsing failed [ 110.468488][ T4321] smartjoyplus 0003:6666:8802.0004: parse failed [ 110.495815][ T4321] smartjoyplus: probe of 0003:6666:8802.0004 failed with error -22 [ 110.543986][ T4829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'. [ 110.574011][ T4321] usb 3-1: USB disconnect, device number 5 [ 111.454110][ T4857] netlink: 44 bytes leftover after parsing attributes in process `syz.3.194'. [ 111.616115][ T4861] loop1: detected capacity change from 0 to 512 [ 112.143898][ T4850] loop4: detected capacity change from 0 to 32768 [ 112.177351][ T4317] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.243310][ T4879] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 112.250296][ T4879] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 112.269829][ T4850] XFS (loop4): Mounting V5 Filesystem [ 112.377248][ T4317] usb 1-1: Using ep0 maxpacket: 32 [ 112.390868][ T4317] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 112.400467][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.410605][ T4317] usb 1-1: config 0 descriptor?? [ 112.462567][ T4850] XFS (loop4): Ending clean mount [ 112.495286][ T4850] XFS (loop4): Quotacheck needed: Please wait. [ 112.606671][ T4850] XFS (loop4): Quotacheck: Done. [ 112.619365][ T4886] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.634416][ T4317] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 112.658147][ T4888] netlink: 20 bytes leftover after parsing attributes in process `syz.3.206'. [ 112.677602][ T4317] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 112.714667][ T4317] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 112.732765][ T4317] usb 1-1: media controller created [ 112.775913][ T4317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.864314][ T4317] az6027: usb out operation failed. (-71) [ 112.899037][ T4317] az6027: usb out operation failed. (-71) [ 112.910236][ T4317] stb0899_attach: Driver disabled by Kconfig [ 112.916404][ T4317] az6027: no front-end attached [ 112.916404][ T4317] [ 112.928461][ T4317] az6027: usb out operation failed. (-71) [ 112.935469][ T4317] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 112.943395][ T4274] XFS (loop4): Unmounting Filesystem [ 112.950103][ T4317] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 112.963082][ T4317] dvb-usb: schedule remote query interval to 400 msecs. [ 112.981642][ T4317] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 113.071318][ T4317] usb 1-1: USB disconnect, device number 4 [ 113.206059][ T4317] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 113.352969][ T4895] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.496921][ T4899] loop3: detected capacity change from 0 to 512 [ 113.510035][ T4898] loop4: detected capacity change from 0 to 1024 [ 113.540790][ T4899] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.554671][ T4898] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 113.595731][ T4898] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 113.636824][ T4899] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 113.658958][ T4898] EXT4-fs error (device loop4): ext4_get_journal_inode:5762: inode #5: comm syz.4.208: unexpected bad inode w/o EXT4_IGET_BAD [ 113.690786][ T4905] loop0: detected capacity change from 0 to 512 [ 113.703391][ T4899] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.772937][ T4898] EXT4-fs (loop4): no journal found [ 113.807062][ T4898] EXT4-fs (loop4): can't get journal size [ 113.850715][ T4898] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 113.972973][ T4898] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1458: inode #12: block 16: comm syz.4.208: path /42/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 114.108425][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 114.346567][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 114.377129][ T33] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 114.589484][ T33] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.620292][ T33] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 114.657134][ T33] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 114.703909][ T33] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 114.747075][ T33] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 114.774262][ T4932] loop4: detected capacity change from 0 to 1024 [ 114.801993][ T33] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 114.842735][ T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.867103][ T33] usb 3-1: Product: syz [ 114.871337][ T33] usb 3-1: Manufacturer: syz [ 114.906453][ T33] usb 3-1: SerialNumber: syz [ 114.941150][ T4917] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 114.958671][ T33] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 114.966392][ T33] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 87 [ 115.007134][ T33] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 7 [ 115.019896][ T33] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 115.062181][ T33] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 115.086039][ T33] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 85 [ 115.110122][ T33] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 5 [ 115.142665][ T33] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 115.174554][ T33] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 83 [ 115.190155][ T4936] tipc: Started in network mode [ 115.190207][ T4936] tipc: Node identity ac14140f, cluster identity 4711 [ 115.190969][ T4936] tipc: New replicast peer: 255.255.255.255 [ 115.192687][ T4936] tipc: Enabled bearer , priority 10 [ 115.209193][ T33] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 115.209273][ T33] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 3 [ 115.209332][ T33] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 4 [ 115.209380][ T33] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 86 [ 115.209427][ T33] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 115.235909][ T33] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 115.644052][ T4941] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 115.671095][ T7] usb 3-1: USB disconnect, device number 6 [ 115.691608][ T7] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 115.739446][ T7] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 115.780535][ T7] keyspan 3-1:1.0: device disconnected [ 116.294634][ T4952] loop3: detected capacity change from 0 to 512 [ 116.309547][ T7] tipc: Node number set to 2886997007 [ 116.411351][ T4954] loop2: detected capacity change from 0 to 16 [ 116.474531][ T4954] erofs: (device loop2): mounted with root inode @ nid 36. [ 117.000332][ T4964] loop3: detected capacity change from 0 to 4096 [ 117.032419][ T4964] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 117.135024][ T4964] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 118.127086][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.333066][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.343343][ T14] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.362845][ T7] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.391065][ T4978] mkiss: ax0: crc mode is auto. [ 118.406613][ T7] usb 3-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice=30.11 [ 118.422116][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.434363][ T4997] loop3: detected capacity change from 0 to 128 [ 118.443085][ T7] usb 3-1: Product: syz [ 118.462547][ T7] usb 3-1: Manufacturer: syz [ 118.469293][ T7] usb 3-1: SerialNumber: syz [ 118.501223][ T7] r8152 3-1:1.0: Expected endpoints are not found [ 118.519151][ T4997] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 118.538124][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 118.548365][ T14] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.613572][ T4997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.633190][ T14] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.660827][ T14] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 118.701558][ T14] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 118.718532][ T7] r8152-cfgselector 3-1: Unknown version 0x0000 [ 118.745445][ T7] r8152-cfgselector 3-1: USB disconnect, device number 7 [ 118.765042][ T14] usb 5-1: Product: syz [ 118.781251][ T14] usb 5-1: Manufacturer: syz [ 118.810496][ T14] hub 5-1:4.0: USB hub found [ 119.013182][ T14] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 119.173251][ T5003] netlink: 48 bytes leftover after parsing attributes in process `syz.1.252'. [ 119.337659][ T14] usb 5-1: USB disconnect, device number 3 [ 119.559605][ T5011] loop2: detected capacity change from 0 to 512 [ 119.622020][ T5011] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 119.645703][ T5011] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 119.700512][ T5011] EXT4-fs (loop2): 1 truncate cleaned up [ 119.706269][ T5011] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 119.913580][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 119.921195][ T4930] Set syz0 is full, maxelem 65536 reached [ 121.267364][ T5035] mkiss: ax0: crc mode is auto. [ 121.633415][ T5065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 121.674032][ T5054] loop3: detected capacity change from 0 to 32768 [ 121.772940][ T5054] JBD2: Ignoring recovery information on journal [ 121.858772][ T5054] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 122.003551][ T5069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 122.391087][ T4281] ocfs2: Unmounting device (7,3) on (node local) [ 122.857220][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.030845][ T5076] loop1: detected capacity change from 0 to 32768 [ 123.068438][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 123.081857][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.112743][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.129520][ T14] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.139012][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.147667][ T14] usb 1-1: Product: syz [ 123.153865][ T14] usb 1-1: Manufacturer: syz [ 123.161740][ T14] usb 1-1: SerialNumber: syz [ 123.192227][ T5076] XFS (loop1): Mounting V5 Filesystem [ 123.295707][ T5076] XFS (loop1): Ending clean mount [ 123.335350][ T5076] XFS (loop1): Quotacheck needed: Please wait. [ 123.393089][ T14] usb 1-1: 0:2 : does not exist [ 123.412096][ T14] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 123.446001][ T5076] XFS (loop1): Quotacheck: Done. [ 123.485492][ T14] usb 1-1: USB disconnect, device number 5 [ 123.606033][ T4276] XFS (loop1): Unmounting Filesystem [ 123.783603][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.544042][ T5104] loop4: detected capacity change from 0 to 8 [ 125.522128][ T5049] Set syz0 is full, maxelem 65536 reached [ 125.702475][ T5126] clocksource: Switched to clocksource acpi_pm [ 125.900210][ T5130] loop2: detected capacity change from 0 to 64 [ 126.077416][ T14] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 126.299388][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.313896][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.340405][ T14] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 126.366761][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 126.389185][ T14] usb 4-1: SerialNumber: syz [ 126.483963][ T5124] loop1: detected capacity change from 0 to 32768 [ 126.577196][ T4316] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 126.596218][ T5124] XFS (loop1): Mounting V5 Filesystem [ 126.633979][ T14] usb 4-1: 0:2 : does not exist [ 126.645463][ T14] usb 4-1: unit 0 not found! [ 126.777187][ T14] usb 4-1: USB disconnect, device number 2 [ 126.785097][ T4316] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 126.824448][ T4356] udevd[4356]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.847054][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.866244][ T4316] usb 1-1: Product: syz [ 126.875605][ T4316] usb 1-1: Manufacturer: syz [ 126.885833][ T4316] usb 1-1: SerialNumber: syz [ 126.918014][ T5124] XFS (loop1): Ending clean mount [ 126.941766][ T4316] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 127.081246][ T4276] XFS (loop1): Unmounting Filesystem [ 127.169969][ T4316] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 127.982074][ T4357] usb 1-1: USB disconnect, device number 6 [ 128.283038][ T5183] loop3: detected capacity change from 0 to 256 [ 128.477174][ T4316] usb 1-1: Service connection timeout for: 256 [ 128.489279][ T4316] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 128.529759][ T4316] ath9k_htc: Failed to initialize the device [ 128.537667][ T4357] usb 1-1: ath9k_htc: USB layer deinitialized [ 128.621225][ T5195] loop3: detected capacity change from 0 to 256 [ 128.729993][ T5195] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fe4a43c, utbl_chksum : 0xe619d30d) [ 128.736608][ T5200] netlink: 16 bytes leftover after parsing attributes in process `syz.4.327'. [ 128.892375][ T5204] capability: warning: `syz.2.330' uses deprecated v2 capabilities in a way that may be insecure [ 129.182156][ T5213] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 129.188706][ T5213] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 129.452811][ T5223] netlink: 300 bytes leftover after parsing attributes in process `syz.0.339'. [ 129.586900][ T2123] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 129.802364][ T2123] usb 4-1: Using ep0 maxpacket: 32 [ 129.812512][ T2123] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.888182][ T2123] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.910595][ T2123] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 129.949291][ T2123] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.991138][ T2123] usb 4-1: config 0 descriptor?? [ 130.021462][ T2123] hub 4-1:0.0: USB hub found [ 130.228898][ T2123] hub 4-1:0.0: 6 ports detected [ 130.238165][ T2123] hub 4-1:0.0: insufficient power available to use all downstream ports [ 130.423826][ T5241] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 130.435520][ T2123] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 130.460368][ T2123] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 130.482782][ T2123] usbhid 4-1:0.0: can't add hid device: -71 [ 130.502122][ T2123] usbhid: probe of 4-1:0.0 failed with error -71 [ 130.568664][ T2123] usb 4-1: USB disconnect, device number 3 [ 130.687411][ T5221] loop4: detected capacity change from 0 to 40427 [ 130.727031][ T5221] F2FS-fs (loop4): invalid crc value [ 130.767885][ T5221] F2FS-fs (loop4): Found nat_bits in checkpoint [ 130.941769][ T5255] loop0: detected capacity change from 0 to 512 [ 130.962940][ T5255] EXT4-fs (loop0): 1 truncate cleaned up [ 130.969043][ T5255] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 131.045623][ T26] audit: type=1800 audit(1786096251.879:7): pid=5255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.352" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 131.107961][ T5221] F2FS-fs (loop4): Start checkpoint disabled! [ 131.179514][ T5262] loop2: detected capacity change from 0 to 512 [ 131.208893][ T5262] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 131.230846][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 131.245857][ T5221] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 131.766695][ T4321] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 131.775129][ T5277] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 131.969052][ T4321] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 132.011903][ T4321] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.057264][ T4321] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 132.096602][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.126898][ T4321] hub 4-1:4.0: bad descriptor, ignoring hub [ 132.132888][ T4321] hub: probe of 4-1:4.0 failed with error -5 [ 132.171676][ T4321] usbhid 4-1:4.0: couldn't find an input interrupt endpoint [ 132.351860][ T5281] loop0: detected capacity change from 0 to 8192 [ 132.411090][ T5281] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 132.440674][ T5281] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 132.455082][ T5281] REISERFS (device loop0): using ordered data mode [ 132.462698][ T5281] reiserfs: using flush barriers [ 132.471559][ T5281] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 132.488909][ T4357] usb 4-1: USB disconnect, device number 4 [ 132.497427][ T5281] REISERFS (device loop0): checking transaction log (loop0) [ 132.519876][ T5281] REISERFS (device loop0): Using r5 hash to sort names [ 132.527412][ T5292] overlayfs: conflicting lowerdir path [ 132.551451][ T5281] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 132.720006][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.727678][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.213094][ T5306] ip_tables: iptables: counters copy to user failed while replacing table [ 133.371640][ T5311] loop1: detected capacity change from 0 to 1024 [ 134.211163][ T5325] loop2: detected capacity change from 0 to 4096 [ 134.805776][ T5325] EXT4-fs: Ignoring removed orlov option [ 134.811873][ T5325] ext4: Unknown parameter 'euid>00000000000000000000' [ 134.968370][ T5345] loop4: detected capacity change from 0 to 1024 [ 135.101723][ T5346] hfsplus: failed to extend attributes file [ 135.613212][ T5328] loop3: detected capacity change from 0 to 40427 [ 135.650241][ T5328] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 135.679264][ T5328] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 135.734794][ T5328] F2FS-fs (loop3): invalid crc value [ 135.775351][ T5328] F2FS-fs (loop3): Found nat_bits in checkpoint [ 135.982133][ T5328] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 135.998968][ T5328] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 136.058436][ T5376] netlink: 28 bytes leftover after parsing attributes in process `syz.0.402'. [ 136.152294][ T5378] loop2: detected capacity change from 0 to 4096 [ 136.241970][ T5379] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.268489][ T4281] syz-executor: attempt to access beyond end of device [ 136.268489][ T4281] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.531246][ T5411] loop0: detected capacity change from 0 to 512 [ 137.564778][ T5411] EXT4-fs: Ignoring removed orlov option [ 137.582710][ T5411] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.689648][ T5411] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.417: corrupted in-inode xattr [ 137.703299][ T5411] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.417: couldn't read orphan inode 15 (err -117) [ 137.719061][ T5411] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 137.860766][ T5420] loop2: detected capacity change from 0 to 256 [ 137.897448][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 137.930074][ T5420] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.975822][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 138.002195][ T5420] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 138.093656][ T5420] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 138.264910][ T5428] loop3: detected capacity change from 0 to 2048 [ 138.362313][ T5428] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.273654][ T5450] loop1: detected capacity change from 0 to 512 [ 139.316823][ T5450] EXT4-fs: Ignoring removed orlov option [ 139.346051][ T5450] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.420984][ T5450] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.433: corrupted in-inode xattr [ 139.536601][ T5450] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.433: couldn't read orphan inode 15 (err -117) [ 139.556188][ T5440] loop3: detected capacity change from 0 to 40427 [ 139.580827][ T5440] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 139.594936][ T5440] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 139.623851][ T5450] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 139.667879][ T5440] F2FS-fs (loop3): Found nat_bits in checkpoint [ 139.832924][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 139.859897][ T5440] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 139.886594][ T5440] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 139.952251][ T26] audit: type=1800 audit(1786096260.789:8): pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.427" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 140.104492][ T4281] syz-executor: attempt to access beyond end of device [ 140.104492][ T4281] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 140.819635][ T5485] loop4: detected capacity change from 0 to 1024 [ 140.913029][ T5487] loop0: detected capacity change from 0 to 1024 [ 141.109065][ T5462] loop2: detected capacity change from 0 to 40427 [ 141.148418][ T5462] F2FS-fs (loop2): invalid crc value [ 141.221855][ T5462] F2FS-fs (loop2): Found nat_bits in checkpoint [ 141.237371][ T5489] loop3: detected capacity change from 0 to 4096 [ 141.250665][ T5489] EXT4-fs: Ignoring removed orlov option [ 141.256613][ T5489] ext4: Unknown parameter 'euid>00000000000000000000' [ 141.447718][ T5462] F2FS-fs (loop2): Start checkpoint disabled! [ 141.508172][ T5462] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 141.528312][ T5496] loop1: detected capacity change from 0 to 1024 [ 141.996313][ T5508] loop0: detected capacity change from 0 to 128 [ 142.108207][ T5508] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 142.173010][ T5508] hpfs: filesystem error: improperly stopped [ 142.199126][ T5508] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 142.225713][ T5508] hpfs: You really don't want any checks? You are crazy... [ 142.251952][ T5508] hpfs: hpfs_map_sector(): read error [ 142.273461][ T5508] hpfs: code page support is disabled [ 142.313648][ T5508] hpfs: hpfs_map_4sectors(): unaligned read [ 142.327058][ T5508] hpfs: hpfs_map_4sectors(): unaligned read [ 142.352851][ T5508] hpfs: filesystem error: unable to find root dir [ 143.073962][ T5530] loop4: detected capacity change from 0 to 2048 [ 143.231218][ T5530] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 143.448481][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 143.544458][ T5525] loop0: detected capacity change from 0 to 32768 [ 143.594072][ T5525] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.465 (5525) [ 143.653785][ T5525] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 143.670033][ T5525] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 143.684814][ T5525] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 143.741693][ T5525] BTRFS info (device loop0): use zstd compression, level 3 [ 143.757371][ T5525] BTRFS info (device loop0): using free space tree [ 143.795555][ T4500] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 143.984993][ T5517] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 143.993519][ T4500] usb 2-1: Using ep0 maxpacket: 16 [ 143.997313][ T5525] BTRFS info (device loop0): enabling ssd optimizations [ 144.009376][ T4500] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.020388][ T4500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.025687][ T5517] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 144.032962][ T4500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 144.050646][ T4500] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 144.068071][ T5517] F2FS-fs (loop3): invalid crc value [ 144.082504][ T4500] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.088500][ T26] audit: type=1800 audit(1786096264.929:9): pid=5525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.465" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 144.119294][ T4500] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 144.132290][ T5517] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 144.146782][ T4500] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 144.169854][ T4500] usb 2-1: Manufacturer: syz [ 144.188245][ T4500] usb 2-1: config 0 descriptor?? [ 144.345671][ T5517] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 144.358666][ T5517] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 144.416410][ T5517] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 144.627853][ T4287] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 144.645529][ T4500] rc_core: IR keymap rc-hauppauge not found [ 144.661867][ T4500] Registered IR keymap rc-empty [ 144.682354][ T4500] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 144.726088][ T4500] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 144.778504][ T4500] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 144.833889][ T4500] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 144.894768][ T4500] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 144.943763][ T4356] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop0 scanned by udevd (4356) [ 144.962888][ T5549] set_capacity_and_notify: 1 callbacks suppressed [ 144.962978][ T5549] loop2: detected capacity change from 0 to 32768 [ 144.991858][ T4500] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 145.045750][ T4500] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 145.128251][ T4500] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 145.175602][ T4500] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 145.198530][ T5549] XFS (loop2): Mounting V5 Filesystem [ 145.205753][ T4500] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 145.235558][ T4500] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 145.265496][ T4500] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 145.305492][ T4500] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 145.335532][ T4500] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 145.366641][ T4500] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 145.376922][ T5549] XFS (loop2): Ending clean mount [ 145.403288][ T4500] mceusb 2-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 145.432927][ T4500] usb 2-1: USB disconnect, device number 5 [ 145.585931][ T4275] XFS (loop2): Unmounting Filesystem [ 145.895649][ T33] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 146.097392][ T33] usb 5-1: Using ep0 maxpacket: 8 [ 146.112577][ T33] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 146.140865][ T33] usb 5-1: config 179 has no interface number 0 [ 146.169607][ T33] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 146.203157][ T33] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 146.234435][ T33] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 146.273711][ T33] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 146.310332][ T33] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 146.343091][ T33] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 146.362959][ T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.385965][ T5592] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 146.843080][ T5592] loop4: detected capacity change from 0 to 8 [ 146.888706][ T5592] SQUASHFS error: zlib decompression failed, data probably corrupt [ 146.945512][ T5592] SQUASHFS error: Failed to read block 0x9b: -5 [ 146.951947][ T5592] SQUASHFS error: Unable to read metadata cache entry [99] [ 147.045690][ T5592] SQUASHFS error: Unable to read inode 0x104 [ 147.111925][ T5577] usb 5-1: USB disconnect, device number 4 [ 147.118285][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 147.118342][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 147.203951][ T5614] loop3: detected capacity change from 0 to 64 [ 147.246429][ T5614] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 147.620069][ T5620] loop0: detected capacity change from 0 to 4096 [ 147.769138][ T5625] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.755889][ T5651] loop1: detected capacity change from 0 to 1024 [ 148.763458][ T5651] EXT4-fs: Ignoring removed bh option [ 148.884220][ T5651] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 148.935851][ T5651] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.987594][ T5651] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 3: comm syz.1.500: lblock 3 mapped to illegal pblock 3 (length 3) [ 149.043835][ T5659] EXT4-fs error (device loop1): ext4_ext_remove_space:2945: inode #15: comm syz.1.500: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 149.121405][ T5651] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 149.178334][ T5659] EXT4-fs error (device loop1) in ext4_setattr:5695: Corrupt filesystem [ 149.214796][ T5651] EXT4-fs (loop1): This should not happen!! Data will be lost [ 149.214796][ T5651] [ 149.405656][ T2907] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 149.465603][ T2907] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 149.522178][ T2907] EXT4-fs (loop1): This should not happen!! Data will be lost [ 149.522178][ T2907] [ 149.567034][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 149.670676][ T5668] loop4: detected capacity change from 0 to 4096 [ 149.802512][ T5673] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.852137][ T5672] loop1: detected capacity change from 0 to 2048 [ 149.968283][ T5672] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 150.253351][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 150.787152][ T5699] loop4: detected capacity change from 0 to 1024 [ 150.815523][ T5701] loop2: detected capacity change from 0 to 1024 [ 150.835976][ T5703] netlink: 48 bytes leftover after parsing attributes in process `syz.0.522'. [ 150.865604][ T5699] EXT4-fs: Ignoring removed bh option [ 150.905526][ T5701] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 150.946347][ T5699] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 150.983854][ T5699] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.018148][ T5708] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 151.073796][ T5699] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 3: comm syz.4.520: lblock 3 mapped to illegal pblock 3 (length 3) [ 151.133081][ T5699] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 151.186152][ T5699] EXT4-fs (loop4): This should not happen!! Data will be lost [ 151.186152][ T5699] [ 151.240636][ T5709] EXT4-fs error (device loop4): ext4_ext_remove_space:2945: inode #15: comm syz.4.520: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 151.335088][ T5709] EXT4-fs error (device loop4) in ext4_setattr:5695: Corrupt filesystem [ 151.540294][ T4341] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 151.599079][ T4341] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 151.632427][ T4341] EXT4-fs (loop4): This should not happen!! Data will be lost [ 151.632427][ T4341] [ 151.678142][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 151.779789][ T5725] loop0: detected capacity change from 0 to 256 [ 151.822233][ T5725] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fe4a43c, utbl_chksum : 0xe619d30d) [ 151.860034][ T5721] loop3: detected capacity change from 0 to 4096 [ 151.979466][ T5730] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.060554][ T5697] loop1: detected capacity change from 0 to 40427 [ 152.119280][ T5697] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 152.153700][ T5697] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 152.202684][ T5697] F2FS-fs (loop1): invalid crc value [ 152.247477][ T5697] F2FS-fs (loop1): Found nat_bits in checkpoint [ 152.451537][ T5697] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 152.502962][ T5697] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 152.582997][ T5742] loop0: detected capacity change from 0 to 1024 [ 152.634041][ T5746] loop3: detected capacity change from 0 to 512 [ 152.696449][ T5742] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 152.805460][ T5746] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.867291][ T4276] syz-executor: attempt to access beyond end of device [ 152.867291][ T4276] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 154.032721][ T5774] loop3: detected capacity change from 0 to 256 [ 154.099615][ T5774] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fe4a43c, utbl_chksum : 0xe619d30d) [ 154.476966][ T5781] loop4: detected capacity change from 0 to 1024 [ 154.542299][ T5781] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 154.860747][ T5789] loop2: detected capacity change from 0 to 512 [ 154.947242][ T5789] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.116081][ T14] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 155.198736][ T5794] program syz.1.557 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.316857][ T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.362348][ T14] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 155.384627][ T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 155.405801][ T14] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 155.454867][ T14] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 155.494901][ T14] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 155.504067][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.543235][ T14] usb 5-1: Product: syz [ 155.549190][ T14] usb 5-1: Manufacturer: syz [ 155.556283][ T14] usb 5-1: SerialNumber: syz [ 155.570229][ T5790] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 155.617343][ T14] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 155.654782][ T14] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 87 [ 155.662548][ T14] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 155.707125][ T14] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 155.752091][ T14] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 155.777151][ T14] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 85 [ 155.798941][ T14] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 5 [ 155.852807][ T14] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 155.889990][ T14] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 83 [ 155.927139][ T14] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 155.967376][ T14] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 3 [ 156.021443][ T14] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 4 [ 156.049610][ T14] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 86 [ 156.079128][ T14] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 156.123539][ T14] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 156.183623][ T14] usb 5-1: USB disconnect, device number 5 [ 156.223036][ T14] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 156.259604][ T14] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 156.276760][ T14] keyspan 5-1:1.0: device disconnected [ 156.503141][ T5811] loop3: detected capacity change from 0 to 4096 [ 156.525927][ T5811] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 156.876661][ T4281] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 156.897510][ T4281] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 156.909561][ T4281] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 157.501643][ T5815] loop0: detected capacity change from 0 to 32768 [ 157.592204][ T5815] XFS (loop0): Mounting V5 Filesystem [ 157.826106][ T5815] XFS (loop0): Ending clean mount [ 157.991739][ T4287] XFS (loop0): Unmounting Filesystem [ 158.340676][ T5577] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 158.535965][ T5577] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 158.563184][ T5577] usb 4-1: config 0 interface 0 has no altsetting 0 [ 158.575874][ T5577] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 158.605279][ T5577] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.651854][ T5577] usb 4-1: config 0 descriptor?? [ 158.678283][ T5856] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 159.121306][ T5577] uclogic 0003:2179:0053.0005: interface is invalid, ignoring [ 159.338981][ T5577] usb 4-1: USB disconnect, device number 5 [ 159.502900][ T5883] loop1: detected capacity change from 0 to 8 [ 159.691447][ T5887] loop2: detected capacity change from 0 to 128 [ 159.709113][ T5887] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 160.650998][ T5889] loop0: detected capacity change from 0 to 32768 [ 160.743620][ T5889] JBD2: Ignoring recovery information on journal [ 161.021580][ T5889] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 161.135551][ T5912] loop4: detected capacity change from 0 to 128 [ 161.231534][ T5898] loop3: detected capacity change from 0 to 32768 [ 161.362587][ T4287] ocfs2: Unmounting device (7,0) on (node local) [ 161.392957][ T5898] XFS (loop3): Mounting V5 Filesystem [ 161.546300][ T5929] program syz.4.606 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.564267][ T5898] XFS (loop3): Ending clean mount [ 161.598398][ T5898] XFS (loop3): Quotacheck needed: Please wait. [ 161.683107][ T5898] XFS (loop3): Quotacheck: Done. [ 161.803573][ T5933] loop4: detected capacity change from 0 to 16 [ 161.842344][ T5933] erofs: (device loop4): mounted with root inode @ nid 36. [ 161.870976][ T4281] XFS (loop3): Unmounting Filesystem [ 162.579129][ T5941] loop4: detected capacity change from 0 to 256 [ 162.692457][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'. [ 162.708655][ T5932] loop2: detected capacity change from 0 to 32768 [ 162.740339][ T5932] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 163.226059][ T4373] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 163.516516][ T5960] loop4: detected capacity change from 0 to 64 [ 163.576455][ T5960] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 163.946942][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 164.027579][ T5973] loop3: detected capacity change from 0 to 16 [ 164.058585][ T5973] erofs: (device loop3): mounted with root inode @ nid 36. [ 164.491336][ T5981] loop0: detected capacity change from 0 to 4096 [ 164.682470][ T5981] ntfs: volume version 3.1. [ 165.027979][ T5974] loop4: detected capacity change from 0 to 40427 [ 165.082220][ T5974] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 165.104262][ T5974] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 165.161401][ T5974] F2FS-fs (loop4): invalid crc value [ 165.201212][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'. [ 165.226971][ T5974] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 165.483273][ T5974] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 165.497760][ T5974] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 165.518241][ T6010] tipc: Started in network mode [ 165.541777][ T6010] tipc: Node identity ac14140f, cluster identity 4711 [ 165.565892][ T6010] tipc: New replicast peer: 255.255.255.255 [ 165.602467][ T6010] tipc: Enabled bearer , priority 10 [ 165.652616][ T5974] fscrypt (loop4, inode 3): Error -61 getting encryption context [ 166.146552][ T6019] device bridge0 entered promiscuous mode [ 166.152587][ T6019] device macsec1 entered promiscuous mode [ 166.595202][ T5574] tipc: Node number set to 2886997007 [ 167.366497][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.662'. [ 168.360683][ T6071] loop3: detected capacity change from 0 to 256 [ 168.504252][ T6071] FAT-fs (loop3): Directory bread(block 64) failed [ 168.510857][ T6071] FAT-fs (loop3): Directory bread(block 65) failed [ 168.555382][ T6071] FAT-fs (loop3): Directory bread(block 66) failed [ 168.572668][ T6071] FAT-fs (loop3): Directory bread(block 67) failed [ 168.613952][ T6071] FAT-fs (loop3): Directory bread(block 68) failed [ 168.620559][ T6071] FAT-fs (loop3): Directory bread(block 69) failed [ 168.643450][ T6071] FAT-fs (loop3): Directory bread(block 70) failed [ 168.653781][ T6071] FAT-fs (loop3): Directory bread(block 71) failed [ 168.660503][ T6071] FAT-fs (loop3): Directory bread(block 72) failed [ 168.693291][ T6071] FAT-fs (loop3): Directory bread(block 73) failed [ 168.709157][ T6059] loop2: detected capacity change from 0 to 40427 [ 168.726928][ T6059] F2FS-fs (loop2): invalid crc value [ 168.759479][ T6059] F2FS-fs (loop2): Found nat_bits in checkpoint [ 168.848884][ T33] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 168.925635][ T6059] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 169.071392][ T33] usb 5-1: not running at top speed; connect to a high speed hub [ 169.087161][ T33] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 169.113195][ T4275] syz-executor: attempt to access beyond end of device [ 169.113195][ T4275] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 169.147305][ T33] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 169.167311][ T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.188994][ T33] usb 5-1: Product: syz [ 169.205909][ T33] usb 5-1: Manufacturer: syz [ 169.221431][ T33] usb 5-1: SerialNumber: syz [ 169.250116][ T33] oti6858 5-1:1.0: oti6858 converter detected [ 169.287159][ T33] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 169.487681][ T6092] loop3: detected capacity change from 0 to 4096 [ 169.762569][ T6092] ntfs: volume version 3.1. [ 169.773361][ T33] usb 5-1: USB disconnect, device number 6 [ 169.791308][ T33] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 169.817711][ T33] oti6858 5-1:1.0: device disconnected [ 170.210593][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.678'. [ 171.029763][ T6120] loop4: detected capacity change from 0 to 256 [ 171.100537][ T6120] FAT-fs (loop4): Directory bread(block 64) failed [ 171.130803][ T6120] FAT-fs (loop4): Directory bread(block 65) failed [ 171.153178][ T6120] FAT-fs (loop4): Directory bread(block 66) failed [ 171.159811][ T6120] FAT-fs (loop4): Directory bread(block 67) failed [ 171.166812][ T5574] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 171.229748][ T6120] FAT-fs (loop4): Directory bread(block 68) failed [ 171.266214][ T6120] FAT-fs (loop4): Directory bread(block 69) failed [ 171.284210][ T6120] FAT-fs (loop4): Directory bread(block 70) failed [ 171.311228][ T6120] FAT-fs (loop4): Directory bread(block 71) failed [ 171.343483][ T6120] FAT-fs (loop4): Directory bread(block 72) failed [ 171.350184][ T6120] FAT-fs (loop4): Directory bread(block 73) failed [ 171.372977][ T5574] usb 2-1: Using ep0 maxpacket: 8 [ 171.381683][ T5574] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 171.423290][ T5574] usb 2-1: config 179 has no interface number 0 [ 171.429628][ T5574] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 171.468043][ T5574] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 171.480050][ T5574] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 171.503085][ T5574] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 171.523024][ T5574] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 171.563377][ T5574] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 171.572483][ T5574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.597154][ T6114] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 171.779258][ T6126] loop3: detected capacity change from 0 to 4096 [ 171.945849][ T6132] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.038000][ T6126] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 8189 already freed [ 172.080230][ T6130] loop4: detected capacity change from 0 to 4096 [ 172.109379][ T6114] loop1: detected capacity change from 0 to 8 [ 172.117798][ T6126] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 172.189704][ T6114] SQUASHFS error: zlib decompression failed, data probably corrupt [ 172.219770][ T6114] SQUASHFS error: Failed to read block 0x9b: -5 [ 172.284799][ T6114] SQUASHFS error: Unable to read metadata cache entry [99] [ 172.323882][ T6114] SQUASHFS error: Unable to read inode 0x104 [ 172.358002][ T6130] ntfs: volume version 3.1. [ 172.421794][ T5574] usb 2-1: USB disconnect, device number 6 [ 172.427767][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 172.427816][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 173.087590][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'. [ 173.572861][ T14] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 173.628326][ T33] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 173.792905][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 173.801238][ T14] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 173.837441][ T14] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 173.846886][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.855824][ T14] usb 2-1: Product: syz [ 173.860512][ T14] usb 2-1: Manufacturer: syz [ 173.863041][ T33] usb 5-1: Using ep0 maxpacket: 16 [ 173.866429][ T14] usb 2-1: SerialNumber: syz [ 173.876405][ T33] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.879744][ T14] usb 2-1: config 0 descriptor?? [ 173.892436][ T6162] loop0: detected capacity change from 0 to 16 [ 173.904575][ T33] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.917933][ T14] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 173.929147][ T6162] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 173.950190][ T14] usb 2-1: setting power ON [ 173.959103][ T33] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.968235][ T14] dvb-usb: bulk message failed: -22 (2/0) [ 173.988886][ T14] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 174.012534][ T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.020967][ T33] usb 5-1: Product: syz [ 174.031453][ T33] usb 5-1: Manufacturer: syz [ 174.036736][ T33] usb 5-1: SerialNumber: syz [ 174.040097][ T14] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 174.081021][ T14] usb 2-1: media controller created [ 174.109766][ T6150] dvb-usb: bulk message failed: -22 (3/0) [ 174.138870][ T6150] dvb-usb: bulk message failed: -22 (5/0) [ 174.175188][ T6165] dvb-usb: bulk message failed: -22 (3/0) [ 174.177991][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.294979][ T14] usb 2-1: selecting invalid altsetting 6 [ 174.301275][ T14] usb 2-1: digital interface selection failed (-22) [ 174.315178][ T33] usb 5-1: 0:2 : does not exist [ 174.331353][ T33] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 174.354769][ T14] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 174.405090][ T14] usb 2-1: setting power OFF [ 174.410450][ T14] dvb-usb: bulk message failed: -22 (2/0) [ 174.423014][ T33] usb 5-1: USB disconnect, device number 7 [ 174.481309][ T14] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 174.521730][ T14] (NULL device *): no alternate interface [ 174.611166][ T14] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 174.684042][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.691666][ T14] usb 2-1: USB disconnect, device number 7 [ 174.939227][ T6180] netlink: 16 bytes leftover after parsing attributes in process `syz.1.718'. [ 175.014483][ T6178] loop0: detected capacity change from 0 to 4096 [ 175.095118][ T6183] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.640733][ T6201] loop1: detected capacity change from 0 to 128 [ 175.723553][ T6201] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 175.765159][ T6201] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 175.921914][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 176.061677][ T6209] loop2: detected capacity change from 0 to 4096 [ 176.145160][ T6217] loop3: detected capacity change from 0 to 512 [ 176.178749][ T6217] EXT4-fs (loop3): 1 truncate cleaned up [ 176.250330][ T6217] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 176.379363][ T26] audit: type=1800 audit(1786096297.219:10): pid=6217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.730" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 176.431502][ T6209] ntfs: volume version 3.1. [ 176.539084][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 176.974770][ T6228] loop4: detected capacity change from 0 to 4096 [ 177.078169][ T6234] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.385009][ T6242] loop0: detected capacity change from 0 to 128 [ 177.509438][ T6242] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 177.603093][ T6242] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.877805][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 178.156786][ T6244] loop2: detected capacity change from 0 to 32768 [ 178.213809][ T6244] XFS (loop2): Mounting V5 Filesystem [ 178.252568][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 178.309890][ T6244] XFS (loop2): Ending clean mount [ 178.321414][ T6244] XFS (loop2): Quotacheck needed: Please wait. [ 178.360127][ T6244] XFS (loop2): Quotacheck: Done. [ 178.442361][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 178.455123][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.472437][ T4500] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 178.514102][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.541794][ T7] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 178.560420][ T6274] loop0: detected capacity change from 0 to 256 [ 178.568532][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.585983][ T7] usb 4-1: config 0 descriptor?? [ 178.607662][ T6276] loop4: detected capacity change from 0 to 512 [ 178.686617][ T4500] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 178.706786][ T4500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.707056][ T4275] XFS (loop2): Unmounting Filesystem [ 178.740869][ T6274] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fe4a43c, utbl_chksum : 0xe619d30d) [ 178.740976][ T6276] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 178.754003][ T4500] usb 2-1: config 0 descriptor?? [ 178.767738][ T6276] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.817101][ T6276] EXT4-fs (loop4): shut down requested (2) [ 178.886325][ T4500] cp210x 2-1:0.0: cp210x converter detected [ 179.021001][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 179.021545][ T7] apple 0003:05AC:024B.0006: fixing up MacBook JIS keyboard report descriptor [ 179.058007][ T7] apple 0003:05AC:024B.0006: unknown global tag 0xe [ 179.086839][ T7] apple 0003:05AC:024B.0006: item 0 1 1 14 parsing failed [ 179.116067][ T7] apple 0003:05AC:024B.0006: parse failed [ 179.124980][ T7] apple: probe of 0003:05AC:024B.0006 failed with error -22 [ 179.263028][ T7] usb 4-1: USB disconnect, device number 6 [ 179.288283][ T4500] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 179.318414][ T4500] usb 2-1: cp210x converter now attached to ttyUSB0 [ 179.336154][ T6282] kAFS: No cell specified [ 179.514203][ T4316] usb 2-1: USB disconnect, device number 8 [ 179.538415][ T4316] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 179.587688][ T4316] cp210x 2-1:0.0: device disconnected [ 179.952661][ T6295] loop3: detected capacity change from 0 to 256 [ 179.959566][ T6293] loop0: detected capacity change from 0 to 1024 [ 179.976895][ T6293] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 179.998326][ T6293] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 180.021877][ T6293] EXT4-fs error (device loop0): ext4_get_journal_inode:5762: inode #5: comm syz.0.760: unexpected bad inode w/o EXT4_IGET_BAD [ 180.081158][ T6295] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 180.092970][ T6293] EXT4-fs (loop0): no journal found [ 180.115979][ T6293] EXT4-fs (loop0): can't get journal size [ 180.159783][ T6293] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 180.169283][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 180.317394][ T6293] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1458: inode #12: block 16: comm syz.0.760: path /151/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 180.372291][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 180.379876][ T7] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 180.407086][ T7] usb 5-1: config 0 has no interface number 0 [ 180.426937][ T7] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.482188][ T7] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.528858][ T7] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 180.556422][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.559886][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 180.607518][ T7] usb 5-1: config 0 descriptor?? [ 180.813301][ T6315] overlayfs: conflicting lowerdir path [ 180.999584][ T6320] loop2: detected capacity change from 0 to 16 [ 181.035839][ T6320] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 181.252243][ T7] uclogic 0003:28BD:0094.0007: pen parameters not found [ 181.262338][ T7] uclogic 0003:28BD:0094.0007: interface is invalid, ignoring [ 181.508290][ T5577] usb 5-1: USB disconnect, device number 8 [ 181.720092][ T6339] option changes via remount are deprecated (pid=6338 comm=syz.3.775) [ 181.746111][ T6339] cgroup: option or name mismatch, new: 0x10000 "", old: 0x0 "" [ 181.765129][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 181.956887][ T6344] loop3: detected capacity change from 0 to 1024 [ 181.978804][ T7] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 181.990975][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.004340][ T7] usb 3-1: Product: syz [ 182.008552][ T7] usb 3-1: Manufacturer: syz [ 182.024986][ T6344] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 182.049904][ T7] usb 3-1: SerialNumber: syz [ 182.055138][ T6344] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 182.103557][ T7] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 182.142098][ T6344] EXT4-fs error (device loop3): ext4_get_journal_inode:5762: inode #5: comm syz.3.777: unexpected bad inode w/o EXT4_IGET_BAD [ 182.160452][ T6344] EXT4-fs (loop3): no journal found [ 182.189912][ T7] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 182.202134][ T6344] EXT4-fs (loop3): can't get journal size [ 182.224444][ T6344] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 182.457892][ T6344] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1458: inode #12: block 16: comm syz.3.777: path /147/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 182.741471][ T6358] loop0: detected capacity change from 0 to 512 [ 182.763428][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 182.830576][ T33] usb 3-1: USB disconnect, device number 8 [ 182.860085][ T6358] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 182.880245][ T6358] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.942724][ T6358] EXT4-fs (loop0): shut down requested (2) [ 183.033973][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 183.267788][ T4500] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 183.358926][ T6380] kAFS: bad VL server IP address [ 183.432158][ T7] usb 3-1: Service connection timeout for: 256 [ 183.438482][ T7] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 183.467317][ T7] ath9k_htc: Failed to initialize the device [ 183.481975][ T4500] usb 4-1: Using ep0 maxpacket: 8 [ 183.489482][ T4500] usb 4-1: config 0 has no interfaces? [ 183.498083][ T33] usb 3-1: ath9k_htc: USB layer deinitialized [ 183.502907][ T4500] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 183.529367][ T4500] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.553636][ T4500] usb 4-1: config 0 descriptor?? [ 183.800988][ T7] usb 4-1: USB disconnect, device number 7 [ 184.629147][ T6395] loop1: detected capacity change from 0 to 32768 [ 184.755325][ T6395] JBD2: Ignoring recovery information on journal [ 184.773774][ T6414] loop3: detected capacity change from 0 to 16 [ 184.815519][ T6414] erofs: (device loop3): mounted with root inode @ nid 36. [ 184.882900][ T6395] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 184.919761][ T6414] erofs: (device loop3): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 184.968385][ T6414] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 185.051951][ T33] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 185.209213][ T4276] ocfs2: Unmounting device (7,1) on (node local) [ 185.255651][ T33] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 185.272057][ T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.323620][ T33] usb 5-1: config 0 descriptor?? [ 185.340923][ T33] cp210x 5-1:0.0: cp210x converter detected [ 185.531427][ T6430] option changes via remount are deprecated (pid=6429 comm=syz.1.812) [ 185.585155][ T6430] cgroup: option or name mismatch, new: 0x10000 "", old: 0x0 "" [ 185.616220][ T6434] loop0: detected capacity change from 0 to 1024 [ 185.754696][ T33] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 185.795565][ T33] usb 5-1: cp210x converter now attached to ttyUSB0 [ 185.989733][ T5574] usb 5-1: USB disconnect, device number 9 [ 186.007778][ T6440] loop1: detected capacity change from 0 to 256 [ 186.019713][ T5574] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 186.055812][ T5574] cp210x 5-1:0.0: device disconnected [ 186.076122][ T6440] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.211627][ T33] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 186.326720][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.821'. [ 186.413891][ T33] usb 4-1: config 0 interface 0 altsetting 181 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 186.445706][ T33] usb 4-1: config 0 interface 0 altsetting 181 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 186.474865][ T33] usb 4-1: config 0 interface 0 has no altsetting 0 [ 186.493214][ T33] usb 4-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 186.511637][ T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.536347][ T33] usb 4-1: config 0 descriptor?? [ 186.800998][ T47] wlan1: Trigger new scan to find an IBSS to join [ 186.884507][ T69] ------------[ cut here ]------------ [ 186.890603][ T69] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x40 [ 186.902471][ T69] WARNING: CPU: 0 PID: 69 at net/mac80211/rate.c:385 __rate_control_send_low+0x632/0x880 [ 186.912491][ T69] Modules linked in: [ 186.916444][ T69] CPU: 0 PID: 69 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 186.924003][ T69] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.934225][ T69] Workqueue: events_unbound cfg80211_wiphy_work [ 186.940596][ T69] RIP: 0010:__rate_control_send_low+0x632/0x880 [ 186.947101][ T69] Code: 30 42 0f b6 04 28 84 c0 0f 85 e5 01 00 00 41 8b 0e 48 c7 c7 c0 d8 a6 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 be 43 a2 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 04 fa ff [ 186.966911][ T69] RSP: 0018:ffffc900015f7480 EFLAGS: 00010246 [ 186.973127][ T69] RAX: 43aca16809f30d00 RBX: 000000000000000c RCX: ffff888018b85a00 [ 186.981148][ T69] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 186.989297][ T69] RBP: 0000000000000084 R08: ffffc900015f7107 R09: 1ffff920002bee20 [ 186.997432][ T69] R10: dffffc0000000000 R11: fffff520002bee21 R12: 0000000000000040 [ 187.005565][ T69] R13: dffffc0000000000 R14: ffff8880552a3358 R15: ffff88802039e168 [ 187.013686][ T69] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 187.020032][ T33] wacom 0003:056A:00B0.0008: unknown main item tag 0xd [ 187.022790][ T69] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.022869][ T69] CR2: 000000110c378216 CR3: 000000005cf97000 CR4: 00000000003506f0 [ 187.044553][ T69] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 187.052667][ T69] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 187.058756][ T33] wacom 0003:056A:00B0.0008: unknown main item tag 0xe [ 187.060676][ T69] Call Trace: [ 187.060696][ T69] [ 187.060729][ T69] rate_control_send_low+0x194/0x790 [ 187.079412][ T69] rate_control_get_rate+0x207/0x5c0 [ 187.084883][ T69] ieee80211_tx_h_rate_ctrl+0xb57/0x1770 [ 187.090638][ T69] ? ieee80211_tx_h_select_key+0x17e0/0x17e0 [ 187.096808][ T69] ? ieee80211_queue_skb+0xbf/0x2170 [ 187.100653][ T33] wacom 0003:056A:00B0.0008: Unknown device_type for 'HID 056a:00b0'. Assuming pen. [ 187.102224][ T69] invoke_tx_handlers_late+0xb1/0x17c0 [ 187.102260][ T69] ? ieee80211_tx_h_select_key+0x1279/0x17e0 [ 187.102297][ T69] ? invoke_tx_handlers_early+0xa26/0x1cd0 [ 187.102340][ T69] ieee80211_tx+0x2d4/0x460 [ 187.102377][ T69] ? ieee80211_skb_resize+0x610/0x610 [ 187.139490][ T69] ? ieee80211_set_qos_hdr+0x1d4/0x520 [ 187.145144][ T69] ? ieee80211_xmit+0x2dc/0x3c0 [ 187.150105][ T69] ? __ieee80211_tx_skb_tid_band+0x48c/0x610 [ 187.156244][ T69] __ieee80211_tx_skb_tid_band+0x4d1/0x610 [ 187.162190][ T69] ? ieee80211_scan_state_send_probe+0x4b2/0x930 [ 187.168590][ T69] ieee80211_scan_state_send_probe+0x57f/0x930 [ 187.174988][ T69] ieee80211_scan_work+0x41f/0x1ab0 [ 187.180245][ T69] ? _raw_spin_lock_irqsave+0x100/0x100 [ 187.185950][ T69] ? _raw_spin_unlock_irq+0x1f/0x40 [ 187.191211][ T69] cfg80211_wiphy_work+0x224/0x260 [ 187.196486][ T69] ? process_one_work+0x7b4/0x1160 [ 187.201825][ T69] process_one_work+0x8ab/0x1160 [ 187.206874][ T69] ? worker_detach_from_pool+0x240/0x240 [ 187.212699][ T69] ? _raw_spin_lock_irq+0xb7/0xf0 [ 187.217799][ T69] ? _raw_spin_lock_irqsave+0x100/0x100 [ 187.223526][ T69] ? wq_worker_running+0x97/0x190 [ 187.228663][ T69] worker_thread+0xaf5/0x12a0 [ 187.233511][ T69] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 187.239475][ T69] kthread+0x29d/0x330 [ 187.243679][ T69] ? worker_clr_flags+0x1a0/0x1a0 [ 187.248759][ T69] ? kthread_blkcg+0xd0/0xd0 [ 187.253491][ T69] ret_from_fork+0x1f/0x30 [ 187.257985][ T69] [ 187.261061][ T69] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 187.268379][ T69] CPU: 0 PID: 69 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 187.275771][ T69] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.285939][ T69] Workqueue: events_unbound cfg80211_wiphy_work [ 187.292216][ T69] Call Trace: [ 187.295519][ T69] [ 187.298471][ T69] dump_stack_lvl+0x188/0x24e [ 187.303182][ T69] ? memcpy+0x3c/0x60 [ 187.307188][ T69] ? show_regs_print_info+0x12/0x12 [ 187.312412][ T69] ? load_image+0x410/0x410 [ 187.317034][ T69] panic+0x2d3/0x710 [ 187.320957][ T69] ? bpf_jit_dump+0xd0/0xd0 [ 187.325489][ T69] ? ret_from_fork+0x1f/0x30 [ 187.330109][ T69] __warn+0x2f8/0x4f0 [ 187.334114][ T69] ? __rate_control_send_low+0x632/0x880 [ 187.339774][ T69] ? __rate_control_send_low+0x632/0x880 [ 187.345432][ T69] report_bug+0x2ba/0x4f0 [ 187.349797][ T69] ? __rate_control_send_low+0x632/0x880 [ 187.355457][ T69] handle_bug+0x3a/0x70 [ 187.359643][ T69] exc_invalid_op+0x16/0x40 [ 187.364197][ T69] asm_exc_invalid_op+0x16/0x20 [ 187.369098][ T69] RIP: 0010:__rate_control_send_low+0x632/0x880 [ 187.375367][ T69] Code: 30 42 0f b6 04 28 84 c0 0f 85 e5 01 00 00 41 8b 0e 48 c7 c7 c0 d8 a6 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 be 43 a2 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 04 fa ff [ 187.395007][ T69] RSP: 0018:ffffc900015f7480 EFLAGS: 00010246 [ 187.401101][ T69] RAX: 43aca16809f30d00 RBX: 000000000000000c RCX: ffff888018b85a00 [ 187.409101][ T69] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 187.417201][ T69] RBP: 0000000000000084 R08: ffffc900015f7107 R09: 1ffff920002bee20 [ 187.425201][ T69] R10: dffffc0000000000 R11: fffff520002bee21 R12: 0000000000000040 [ 187.433203][ T69] R13: dffffc0000000000 R14: ffff8880552a3358 R15: ffff88802039e168 [ 187.441244][ T69] rate_control_send_low+0x194/0x790 [ 187.446564][ T69] rate_control_get_rate+0x207/0x5c0 [ 187.451882][ T69] ieee80211_tx_h_rate_ctrl+0xb57/0x1770 [ 187.457559][ T69] ? ieee80211_tx_h_select_key+0x17e0/0x17e0 [ 187.463584][ T69] ? ieee80211_queue_skb+0xbf/0x2170 [ 187.468903][ T69] invoke_tx_handlers_late+0xb1/0x17c0 [ 187.474388][ T69] ? ieee80211_tx_h_select_key+0x1279/0x17e0 [ 187.480399][ T69] ? invoke_tx_handlers_early+0xa26/0x1cd0 [ 187.486241][ T69] ieee80211_tx+0x2d4/0x460 [ 187.490788][ T69] ? ieee80211_skb_resize+0x610/0x610 [ 187.496207][ T69] ? ieee80211_set_qos_hdr+0x1d4/0x520 [ 187.501709][ T69] ? ieee80211_xmit+0x2dc/0x3c0 [ 187.506618][ T69] ? __ieee80211_tx_skb_tid_band+0x48c/0x610 [ 187.512620][ T69] __ieee80211_tx_skb_tid_band+0x4d1/0x610 [ 187.518449][ T69] ? ieee80211_scan_state_send_probe+0x4b2/0x930 [ 187.524827][ T69] ieee80211_scan_state_send_probe+0x57f/0x930 [ 187.531033][ T69] ieee80211_scan_work+0x41f/0x1ab0 [ 187.536262][ T69] ? _raw_spin_lock_irqsave+0x100/0x100 [ 187.541837][ T69] ? _raw_spin_unlock_irq+0x1f/0x40 [ 187.547073][ T69] cfg80211_wiphy_work+0x224/0x260 [ 187.552221][ T69] ? process_one_work+0x7b4/0x1160 [ 187.557364][ T69] process_one_work+0x8ab/0x1160 [ 187.562349][ T69] ? worker_detach_from_pool+0x240/0x240 [ 187.568022][ T69] ? _raw_spin_lock_irq+0xb7/0xf0 [ 187.573079][ T69] ? _raw_spin_lock_irqsave+0x100/0x100 [ 187.578685][ T69] ? wq_worker_running+0x97/0x190 [ 187.583747][ T69] worker_thread+0xaf5/0x12a0 [ 187.588466][ T69] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 187.594395][ T69] kthread+0x29d/0x330 [ 187.598495][ T69] ? worker_clr_flags+0x1a0/0x1a0 [ 187.603556][ T69] ? kthread_blkcg+0xd0/0xd0 [ 187.608171][ T69] ret_from_fork+0x1f/0x30 [ 187.612625][ T69] [ 187.616240][ T69] Kernel Offset: disabled [ 187.620666][ T69] Rebooting in 86400 seconds..