last executing test programs: 7.194500758s ago: executing program 3 (id=558): syz_mount_image$udf(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x400006, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x1045, &(0x7f0000001140)="$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") pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000065ffff4010000008003950323030302ee6c3762dbd26351f603675143f22d2767788695107"], 0x15) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 5.436199319s ago: executing program 3 (id=568): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r0, 0x0, 0x3b) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x24180, 0x0) 4.923943653s ago: executing program 3 (id=573): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRESOCT], 0x1, 0x55a8, &(0x7f0000006a80)="$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") r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @loopback={0xff00000000000000}, 0x4}}, {{0xa, 0x4e00, 0xa3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000cc0)=ANY=[@ANYBLOB="03000000000000000a004e2300000049ff0000000000000000000000000000010800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x590) 2.311057934s ago: executing program 1 (id=583): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)=[0x0, 0x0], &(0x7f0000000300), 0x0, 0x2, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000040)={0x0, r2, r1}) 2.17124717s ago: executing program 2 (id=585): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/netfilter/nfnetlink_log\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/1024, 0x400) 1.936016721s ago: executing program 1 (id=586): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000540), 0x3, 0x577, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80042, 0x8d) pwrite64(r0, &(0x7f0000000040)='2', 0x1, 0x8e7c) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000000000000086e0000000000fe"]) 1.909037482s ago: executing program 0 (id=587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) 1.852228005s ago: executing program 2 (id=588): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0xb}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000003380)={0x0, 0x6}, &(0x7f00000033c0)=0x8) 1.636027314s ago: executing program 3 (id=589): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040) 1.574102608s ago: executing program 0 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/veth0/threaded\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000037c0)={0x2020}, 0x2020) 1.316605189s ago: executing program 1 (id=591): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/mem_sleep\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='deep\n\x00', 0x5) 1.255978572s ago: executing program 2 (id=592): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xff, [0x0, 0x0, 0x0, 0x0, 0xd], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0xf4, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 1.222251234s ago: executing program 0 (id=593): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, &(0x7f0000001200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) 1.032198033s ago: executing program 3 (id=594): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0x1214080, &(0x7f0000000140)={[{@dir_umask}, {@codepage={'codepage', 0x3d, 'cp949'}}, {@gid}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {}, {@gid}]}, 0x1, 0x32e, &(0x7f0000000b00)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000200201005) 879.93714ms ago: executing program 2 (id=595): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000100000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x32, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 879.66821ms ago: executing program 1 (id=596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x74}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 863.78817ms ago: executing program 0 (id=597): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=macgreek,namecase=1,iocharset=cp857,namecase=1,utf8,errors=continue,dmask=00000000000020000000000,\x00'], 0x1, 0x154a, &(0x7f0000000400)="$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") syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./sys\x00', 0x22404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1e3, &(0x7f0000000140)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) 657.98406ms ago: executing program 2 (id=598): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x18, 0x14, 0x609, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x8040) 476.001748ms ago: executing program 1 (id=599): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) lseek(r0, 0xa1, 0x0) 375.694313ms ago: executing program 0 (id=600): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x36, 0x0, &(0x7f0000000800)="3d25ff0706000000000000c186dd11204073a07132e48ee336c64ca9c82d8c50c00c0877b943f3f393c9003d5157204f3464626417a2", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 276.636768ms ago: executing program 2 (id=601): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x400000, &(0x7f00000000c0)={[{@noload}, {@abort}, {@data_err_ignore}, {@acl}, {@oldalloc}, {@errors_remount}]}, 0xff, 0x467, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x3b, 0x100000002, 0x9, 0xfff}) 208.157291ms ago: executing program 1 (id=602): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x50, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4ae, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 158.106703ms ago: executing program 3 (id=603): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0}]) 0s ago: executing program 0 (id=604): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)='tcp 2049\n\x00', 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. [ 81.449241][ T5763] cgroup: Unknown subsys name 'net' [ 81.585903][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.316542][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.877195][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.886181][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.894236][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.907448][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.915281][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.922869][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.009927][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.028000][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.036353][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.047478][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.058600][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.066050][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.126171][ T5086] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.153064][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.168024][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.176387][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.185017][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.192511][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.230747][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.239432][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.247419][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.256140][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.264264][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.271794][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.675323][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 85.759417][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 85.847635][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 85.860419][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 85.977662][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.985635][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.993435][ T5775] bridge_slave_0: entered allmulticast mode [ 86.001338][ T5775] bridge_slave_0: entered promiscuous mode [ 86.045495][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.054791][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.062141][ T5775] bridge_slave_1: entered allmulticast mode [ 86.069429][ T5775] bridge_slave_1: entered promiscuous mode [ 86.092374][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.099711][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.106921][ T5778] bridge_slave_0: entered allmulticast mode [ 86.114500][ T5778] bridge_slave_0: entered promiscuous mode [ 86.160731][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.170897][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.178497][ T5778] bridge_slave_1: entered allmulticast mode [ 86.185561][ T5778] bridge_slave_1: entered promiscuous mode [ 86.232874][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.240119][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.247406][ T5781] bridge_slave_0: entered allmulticast mode [ 86.254436][ T5781] bridge_slave_0: entered promiscuous mode [ 86.266634][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.281582][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.313661][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.323994][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.331443][ T5781] bridge_slave_1: entered allmulticast mode [ 86.339279][ T5781] bridge_slave_1: entered promiscuous mode [ 86.358524][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.370765][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.380725][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.388009][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.395289][ T5780] bridge_slave_0: entered allmulticast mode [ 86.402844][ T5780] bridge_slave_0: entered promiscuous mode [ 86.442637][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.450040][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.457397][ T5780] bridge_slave_1: entered allmulticast mode [ 86.464492][ T5780] bridge_slave_1: entered promiscuous mode [ 86.485593][ T5775] team0: Port device team_slave_0 added [ 86.495910][ T5775] team0: Port device team_slave_1 added [ 86.528891][ T5778] team0: Port device team_slave_0 added [ 86.538967][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.584727][ T5778] team0: Port device team_slave_1 added [ 86.593267][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.604655][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.612098][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.638368][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.662467][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.674988][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.717675][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.724778][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.751658][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.795162][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.802270][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.836265][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.849470][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.856476][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.883319][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.907924][ T5781] team0: Port device team_slave_0 added [ 86.916614][ T5781] team0: Port device team_slave_1 added [ 86.956448][ T5780] team0: Port device team_slave_0 added [ 86.975852][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.983180][ T5783] Bluetooth: hci0: command tx timeout [ 86.991583][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.017950][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.042132][ T5780] team0: Port device team_slave_1 added [ 87.108024][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.115041][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.141392][ T5783] Bluetooth: hci1: command tx timeout [ 87.157227][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.190798][ T5778] hsr_slave_0: entered promiscuous mode [ 87.203334][ T5778] hsr_slave_1: entered promiscuous mode [ 87.233637][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.245505][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.277296][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.297413][ T5783] Bluetooth: hci3: command tx timeout [ 87.297435][ T5086] Bluetooth: hci2: command tx timeout [ 87.310183][ T5775] hsr_slave_0: entered promiscuous mode [ 87.317229][ T5775] hsr_slave_1: entered promiscuous mode [ 87.323693][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.331883][ T5775] Cannot create hsr debugfs directory [ 87.380453][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.397339][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.427250][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.493762][ T5781] hsr_slave_0: entered promiscuous mode [ 87.504178][ T5781] hsr_slave_1: entered promiscuous mode [ 87.512037][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.523966][ T5781] Cannot create hsr debugfs directory [ 87.653827][ T5780] hsr_slave_0: entered promiscuous mode [ 87.662789][ T5780] hsr_slave_1: entered promiscuous mode [ 87.670596][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.678308][ T5780] Cannot create hsr debugfs directory [ 88.097040][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.111609][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.124076][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.135008][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.211589][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.223792][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.238136][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.251931][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.369745][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.392947][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.403488][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.416057][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.519923][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.531855][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.556379][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.564400][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.588375][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.655697][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.681297][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.688854][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.732879][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.740196][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.759339][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.856695][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.926124][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.933415][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.963767][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.001678][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.008953][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.059464][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.066526][ T5783] Bluetooth: hci0: command tx timeout [ 89.125096][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.132375][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.156097][ T5781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.174724][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.215966][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.223271][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.234490][ T5783] Bluetooth: hci1: command tx timeout [ 89.254318][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.343699][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.378528][ T5783] Bluetooth: hci2: command tx timeout [ 89.379322][ T5086] Bluetooth: hci3: command tx timeout [ 89.434560][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.441892][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.482630][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.489913][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.582197][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.723630][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.760459][ T5775] veth0_vlan: entered promiscuous mode [ 89.816824][ T5775] veth1_vlan: entered promiscuous mode [ 89.922055][ T5781] veth0_vlan: entered promiscuous mode [ 89.974711][ T5781] veth1_vlan: entered promiscuous mode [ 90.022583][ T5775] veth0_macvtap: entered promiscuous mode [ 90.055041][ T5775] veth1_macvtap: entered promiscuous mode [ 90.092211][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.125758][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.140757][ T5781] veth0_macvtap: entered promiscuous mode [ 90.155312][ T5781] veth1_macvtap: entered promiscuous mode [ 90.165998][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.194467][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.203593][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.214657][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.223870][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.306827][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.321945][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.335754][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.349740][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.395070][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.405941][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.420250][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.481653][ T5778] veth0_vlan: entered promiscuous mode [ 90.501246][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.511586][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.520655][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.529576][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.554155][ T5778] veth1_vlan: entered promiscuous mode [ 90.574732][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.597777][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.638057][ T5780] veth0_vlan: entered promiscuous mode [ 90.710002][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.713443][ T5780] veth1_vlan: entered promiscuous mode [ 90.728519][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.748763][ T5778] veth0_macvtap: entered promiscuous mode [ 90.824259][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.858980][ T5778] veth1_macvtap: entered promiscuous mode [ 90.869622][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.932439][ T5780] veth0_macvtap: entered promiscuous mode [ 90.965230][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.992389][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.004476][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.016463][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.039094][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.055316][ T5780] veth1_macvtap: entered promiscuous mode [ 91.096201][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.108755][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.119157][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.130002][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.140104][ T5086] Bluetooth: hci0: command tx timeout [ 91.148974][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.157256][ T2898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.170514][ T2898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.216067][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.235226][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.244800][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.254477][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.295668][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.306810][ T5086] Bluetooth: hci1: command tx timeout [ 91.314247][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.327964][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.339198][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.349420][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.360825][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.384198][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.458433][ T5086] Bluetooth: hci3: command tx timeout [ 91.464026][ T5086] Bluetooth: hci2: command tx timeout [ 91.512710][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.528824][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.539752][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.550647][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.561561][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.572397][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.589477][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.634509][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.648020][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.657009][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.666708][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.755273][ T2898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.773950][ T2898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.874505][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.900251][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.983677][ T2898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.012864][ T5844] Illegal XDP return value 1460155160 on prog (id 3) dev N/A, expect packet loss! [ 92.033541][ T2898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.146815][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.165634][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.194867][ T9] cfg80211: failed to load regulatory.db [ 92.885328][ T5866] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13'. [ 93.024754][ T5870] syz.0.15[5870]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.063568][ T5870] loop0: detected capacity change from 0 to 1024 [ 93.076864][ T5870] ======================================================= [ 93.076864][ T5870] WARNING: The mand mount option has been deprecated and [ 93.076864][ T5870] and is ignored by this kernel. Remove the mand [ 93.076864][ T5870] option from the mount to silence this warning. [ 93.076864][ T5870] ======================================================= [ 93.163899][ T5870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 93.219129][ T5086] Bluetooth: hci0: command tx timeout [ 93.237372][ T5870] ext4 filesystem being mounted at /3/proc supports timestamps until 2038-01-19 (0x7fffffff) [ 93.378425][ T5086] Bluetooth: hci1: command tx timeout [ 93.485051][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 93.538067][ T5086] Bluetooth: hci2: command tx timeout [ 93.543585][ T5086] Bluetooth: hci3: command tx timeout [ 93.724131][ T5882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.808804][ T5883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.449405][ T5906] loop0: detected capacity change from 0 to 16 [ 94.489714][ T5906] erofs: (device loop0): mounted with root inode @ nid 36. [ 95.253374][ T5910] loop2: detected capacity change from 0 to 32768 [ 95.326492][ T5910] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 95.341629][ T5927] loop1: detected capacity change from 0 to 128 [ 95.534647][ T5910] XFS (loop2): Ending clean mount [ 95.553616][ T5927] capability: warning: `syz.1.38' uses deprecated v2 capabilities in a way that may be insecure [ 95.575825][ T5910] XFS (loop2): Quotacheck needed: Please wait. [ 95.728257][ T5910] XFS (loop2): Quotacheck: Done. [ 96.001468][ T5775] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 96.274887][ T5932] loop3: detected capacity change from 0 to 32768 [ 96.354826][ T5932] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 96.504104][ T5932] XFS (loop3): Ending clean mount [ 96.523776][ T5932] XFS (loop3): Quotacheck needed: Please wait. [ 96.581100][ T5932] XFS (loop3): Quotacheck: Done. [ 96.892332][ T5781] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 96.911358][ T5956] loop0: detected capacity change from 0 to 1024 [ 97.021943][ T5956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 97.072867][ T5956] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.271673][ T5966] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.46: lblock 0 mapped to illegal pblock 0 (length 6) [ 97.317638][ T28] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.336090][ T5966] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 97.369134][ T5966] EXT4-fs (loop0): This should not happen!! Data will be lost [ 97.369134][ T5966] [ 97.541865][ T28] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.566720][ T28] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.592775][ T28] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 97.606989][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 97.619644][ T28] usb 3-1: SerialNumber: syz [ 97.883046][ T28] usb 3-1: 0:2 : does not exist [ 97.910459][ T1129] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 97.954137][ T1129] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 97.967598][ T1129] EXT4-fs (loop0): This should not happen!! Data will be lost [ 97.967598][ T1129] [ 98.041116][ T28] usb 3-1: USB disconnect, device number 2 [ 98.166936][ T1129] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm kworker/u4:6: bg 0: block 112: padding at end of block bitmap is not set [ 98.236849][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.285170][ T1129] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 98.316662][ T1129] EXT4-fs (loop0): This should not happen!! Data will be lost [ 98.316662][ T1129] [ 98.328732][ T1129] EXT4-fs (loop0): Total free blocks count 0 [ 98.334798][ T1129] EXT4-fs (loop0): Free/Dirty block details [ 98.343957][ T1129] EXT4-fs (loop0): free_blocks=0 [ 98.682816][ T5987] netlink: 79 bytes leftover after parsing attributes in process `syz.1.61'. [ 98.924067][ T5994] team0: Caught tx_queue_len zero misconfig [ 99.461152][ T6014] process 'syz.1.72' launched './file0' with NULL argv: empty string added [ 99.506985][ T6019] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 99.506985][ T6019] The task syz.2.73 (6019) triggered the difference, watch for misbehavior. [ 99.685789][ T6026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.77'. [ 100.255377][ T6042] loop3: detected capacity change from 0 to 512 [ 100.278682][ T6042] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 100.324615][ T6042] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 100.333759][ T6042] System zones: 0-2, 18-18, 34-34 [ 100.370294][ T6042] EXT4-fs (loop3): 1 orphan inode deleted [ 100.395544][ T6042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.417823][ T6042] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.437589][ T5812] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.605607][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.667624][ T5812] usb 2-1: Using ep0 maxpacket: 16 [ 100.683724][ T5812] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.702334][ T5812] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.728239][ T5812] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 100.751446][ T5810] IPVS: starting estimator thread 0... [ 100.757791][ T5812] usb 2-1: config 0 interface 0 has no altsetting 0 [ 100.772036][ T6056] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 100.777639][ T5812] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 100.817098][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.840057][ T5812] usb 2-1: config 0 descriptor?? [ 100.853231][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.857776][ T6057] IPVS: using max 18 ests per chain, 43200 per kthread [ 101.057289][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 101.073137][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 101.101455][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 101.126577][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.157676][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.190622][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.214536][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.328047][ T5832] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.352631][ T5812] hid (null): nested delimiters [ 101.361934][ T5812] hid (null): report_id 28381 is invalid [ 101.369508][ T5812] hid (null): unknown global tag 0xc [ 101.375223][ T5812] hid (null): unknown global tag 0xe [ 101.385537][ T5812] hid (null): global environment stack underflow [ 101.393531][ T5812] hid (null): invalid report_size 56929 [ 101.413115][ T5812] hid (null): invalid report_size 34704 [ 101.433295][ T5812] hid (null): usage index exceeded [ 101.461078][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 101.468903][ T9] usbtmc 1-1:16.0: can't read capabilities [ 101.544854][ T5832] usb 4-1: Using ep0 maxpacket: 16 [ 101.575142][ T5832] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 101.591993][ T5832] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.606721][ T5832] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.620996][ T9] usb 2-1: USB disconnect, device number 2 [ 101.622116][ T5832] usb 4-1: New USB device found, idVendor=1b96, idProduct=0006, bcdDevice= 0.00 [ 101.638223][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.655464][ T5832] usb 4-1: config 0 descriptor?? [ 101.737322][ T788] usb 1-1: USB disconnect, device number 2 [ 102.120525][ T5832] input: HID 1b96:0006 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:1B96:0006.0002/input/input5 [ 102.247189][ T5832] ntrig 0003:1B96:0006.0002: input,hidraw0: USB HID v0.53 Joystick [HID 1b96:0006] on usb-dummy_hcd.3-1/input0 [ 102.308526][ T5832] ntrig 0003:1B96:0006.0002: Firmware version: 4.8.22.29.5 (e288 add3) [ 102.708597][ T5765] usb 4-1: USB disconnect, device number 2 [ 102.875001][ T6098] loop2: detected capacity change from 0 to 1024 [ 102.970747][ T6098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.025133][ T6098] EXT4-fs warning (device loop2): ext4_rmdir:3245: inode #11: comm syz.2.110: empty directory 'file0' has too many links (111) [ 103.073563][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.838801][ T6120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.120'. [ 104.033988][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'. [ 104.056211][ T6125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.289961][ T6112] loop3: detected capacity change from 0 to 40427 [ 104.314527][ T6112] F2FS-fs (loop3): Corrupted extension count (327717 + 1 > 64) [ 104.362329][ T6112] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 104.387426][ T6112] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 104.446143][ T6131] loop1: detected capacity change from 0 to 512 [ 104.457492][ T6112] F2FS-fs (loop3): invalid crc value [ 104.475141][ T6134] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.521010][ T6112] F2FS-fs (loop3): Found nat_bits in checkpoint [ 104.785523][ T6112] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 104.803258][ T6112] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 104.892294][ T27] audit: type=1800 audit(1790169695.984:2): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.114" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 105.088624][ T5781] syz-executor: attempt to access beyond end of device [ 105.088624][ T5781] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.121355][ T5781] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 105.513709][ T6154] netlink: 52 bytes leftover after parsing attributes in process `syz.0.133'. [ 105.527930][ T6158] vcan0: tx address claim with dlc 0 [ 105.577457][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.585256][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.452731][ T6185] capability: warning: `syz.1.146' uses 32-bit capabilities (legacy support in use) [ 106.501630][ T6185] program syz.1.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.601143][ T6183] loop0: detected capacity change from 0 to 4096 [ 106.626144][ T6183] EXT4-fs: inline encryption not supported [ 106.824122][ T6183] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.855418][ T6183] EXT4-fs (loop0): Test dummy encryption mode enabled [ 106.886546][ T6183] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003] [ 106.916820][ T6183] System zones: 0-5 [ 106.935220][ T6183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.069681][ T6183] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 107.160708][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.175237][ T6206] netlink: 'syz.2.153': attribute type 3 has an invalid length. [ 107.191713][ T6206] netlink: 'syz.2.153': attribute type 2 has an invalid length. [ 107.827088][ T6226] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 108.216659][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'. [ 108.478027][ T6249] netlink: 52 bytes leftover after parsing attributes in process `syz.1.172'. [ 108.493421][ T6250] loop3: detected capacity change from 0 to 512 [ 108.613928][ T6250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.658484][ T6250] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.865903][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.290246][ T6271] loop0: detected capacity change from 0 to 2048 [ 109.749010][ T6269] loop3: detected capacity change from 0 to 32768 [ 109.855861][ T6269] JBD2: Ignoring recovery information on journal [ 109.940184][ T6277] loop1: detected capacity change from 0 to 8192 [ 109.970706][ T6277] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 110.008683][ T6277] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 110.023585][ T6277] REISERFS (device loop1): using ordered data mode [ 110.031785][ T6277] reiserfs: using flush barriers [ 110.043014][ T6277] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 110.062242][ T6277] REISERFS (device loop1): checking transaction log (loop1) [ 110.068102][ T6269] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 110.257614][ T5086] Bluetooth: hci3: command tx timeout [ 110.286526][ T6277] REISERFS (device loop1): Using tea hash to sort names [ 110.350667][ T6277] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 110.390954][ T6286] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.611686][ T6292] loop0: detected capacity change from 0 to 256 [ 110.652552][ T6269] syz.3.179 (6269) used greatest stack depth: 18776 bytes left [ 110.758382][ T6292] overlayfs: failed to resolve './file1': -2 [ 110.808508][ T5781] ocfs2: Unmounting device (7,3) on (node local) [ 111.367359][ T788] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.377071][ T6306] loop3: detected capacity change from 0 to 2048 [ 111.433632][ T6306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.469052][ T6306] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 111.524172][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.598789][ T788] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.626067][ T788] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 111.648430][ T788] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.666347][ T788] usb 1-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 111.682513][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.691232][ T788] usb 1-1: Product: syz [ 111.695464][ T788] usb 1-1: Manufacturer: syz [ 111.727389][ T788] usb 1-1: SerialNumber: syz [ 111.751299][ T788] usb 1-1: Found UVC 1.00 device syz (046d:0821) [ 111.773163][ T788] usb 1-1: No valid video chain found. [ 112.069914][ T788] usb 1-1: USB disconnect, device number 3 [ 112.369129][ T6324] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 112.753411][ T6337] loop0: detected capacity change from 0 to 4096 [ 112.781009][ T6337] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 112.892263][ T6337] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 112.907582][ T5812] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.944511][ T6337] ntfs3: loop0: mft corrupted [ 112.954184][ T6337] ntfs3: loop0: Failed to load $Extend (-22). [ 112.973160][ T6337] ntfs3: loop0: Failed to initialize $Extend. [ 113.043904][ T6337] ntfs3: loop0: ino=1e, mi_enum_attr [ 113.052897][ T6337] ntfs3: loop0: ino=1e, mi_enum_attr [ 113.107480][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 113.127440][ T5812] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 113.163531][ T5812] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 113.185748][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 113.217043][ T5812] usb 4-1: Product: syz [ 113.221947][ T5812] usb 4-1: Manufacturer: syz [ 113.235549][ T5812] usb 4-1: SerialNumber: syz [ 113.240422][ T5832] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.261941][ T5812] usb 4-1: config 0 descriptor?? [ 113.285714][ T6335] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 113.316869][ T5812] hub 4-1:0.0: bad descriptor, ignoring hub [ 113.337768][ T5812] hub: probe of 4-1:0.0 failed with error -5 [ 113.439430][ T5832] usb 2-1: Using ep0 maxpacket: 8 [ 113.452738][ T5832] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 113.481325][ T5832] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 113.492050][ T5832] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 113.502775][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.526676][ T5832] kobil_sct 2-1:1.0: KOBIL USB smart card terminal converter detected [ 113.578611][ T5832] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 113.767918][ T5832] usb 4-1: USB disconnect, device number 3 [ 113.942889][ T6349] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.988538][ T5812] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 114.124975][ T6351] Zero length message leads to an empty skb [ 114.188382][ T5812] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 114.207352][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.228547][ T5812] usb 1-1: config 0 descriptor?? [ 114.248847][ T5812] cp210x 1-1:0.0: cp210x converter detected [ 114.329766][ T788] usb 2-1: USB disconnect, device number 3 [ 114.363887][ T788] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 114.396757][ T788] kobil_sct 2-1:1.0: device disconnected [ 114.414550][ T6355] loop3: detected capacity change from 0 to 512 [ 114.535477][ T6355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.585400][ T6355] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.654036][ T5812] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 114.712369][ T5812] usb 1-1: cp210x converter now attached to ttyUSB0 [ 114.741347][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.916595][ T9] usb 1-1: USB disconnect, device number 4 [ 114.933213][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 114.984039][ T9] cp210x 1-1:0.0: device disconnected [ 115.046036][ T6367] loop2: detected capacity change from 0 to 256 [ 115.133839][ T27] audit: type=1800 audit(1790169706.234:3): pid=6367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.222" name="file1" dev="loop2" ino=1048595 res=0 errno=0 [ 115.305533][ T6373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.225'. [ 115.315962][ T6373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.225'. [ 115.326766][ T6373] netlink: 20 bytes leftover after parsing attributes in process `syz.3.225'. [ 115.507325][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.700513][ T9] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 115.732456][ T9] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 115.761394][ T9] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 115.784248][ T27] audit: type=1400 audit(1790169706.884:4): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6383 comm="syz.3.230" name="unknown" offset=28 [ 115.804154][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.823461][ T9] usb 2-1: Product: syz [ 115.829477][ T9] usb 2-1: Manufacturer: syz [ 115.834343][ T9] usb 2-1: SerialNumber: syz [ 115.856801][ T9] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 115.881704][ T9] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 115.922930][ T9] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 116.373318][ T6396] netlink: 'syz.2.235': attribute type 14 has an invalid length. [ 116.583424][ T6382] loop0: detected capacity change from 0 to 32768 [ 116.685946][ T6382] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 117.040789][ T5780] ocfs2: Unmounting device (7,0) on (node local) [ 117.307765][ T6371] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 117.381787][ T6371] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 117.427316][ T6371] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 117.474990][ T6371] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 117.565107][ T23] usb 2-1: USB disconnect, device number 4 [ 117.594626][ T23] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 117.662221][ T23] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 117.694737][ T23] ti_usb_3410_5052 2-1:2.0: device disconnected [ 118.041476][ T6407] loop2: detected capacity change from 0 to 32768 [ 118.083195][ T6407] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 118.144136][ T6407] XFS (loop2): Ending clean mount [ 118.434958][ T5775] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 118.445274][ T6427] netlink: 'syz.0.244': attribute type 15 has an invalid length. [ 118.911045][ T27] audit: type=1400 audit(1790169710.014:5): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=6434 comm="syz.0.249" name="foo" offset=35 [ 118.963527][ T6436] loop2: detected capacity change from 0 to 1024 [ 119.134222][ T6443] loop0: detected capacity change from 0 to 512 [ 119.193027][ T6443] EXT4-fs (loop0): 1 truncate cleaned up [ 119.232601][ T6443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.453037][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.443976][ T6460] loop0: detected capacity change from 0 to 32768 [ 120.580011][ T6460] JBD2: Ignoring recovery information on journal [ 120.623207][ T6481] loop2: detected capacity change from 0 to 256 [ 120.675696][ T6465] loop3: detected capacity change from 0 to 40427 [ 120.691492][ T6479] db_root: cannot open: [ 120.693122][ T6465] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 120.707794][ T6465] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 120.732541][ T6465] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x7ffff [ 120.754800][ T6465] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x6 [ 120.767952][ T6460] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 120.822076][ T6465] F2FS-fs (loop3): invalid crc value [ 120.862694][ T6465] F2FS-fs (loop3): Found nat_bits in checkpoint [ 121.064379][ T27] audit: type=1800 audit(1790169712.164:6): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.257" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 121.203083][ T6465] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 121.234577][ T6465] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 121.252737][ T6491] loop2: detected capacity change from 0 to 1024 [ 121.344344][ T5780] ocfs2: Unmounting device (7,0) on (node local) [ 121.383997][ T6491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.434158][ T9] IPVS: starting estimator thread 0... [ 121.577543][ T6497] IPVS: using max 16 ests per chain, 38400 per kthread [ 121.603914][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.646902][ T5781] syz-executor: attempt to access beyond end of device [ 121.646902][ T5781] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 121.686559][ T6502] loop1: detected capacity change from 0 to 512 [ 121.723292][ T5781] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 121.760122][ T6502] EXT4-fs (loop1): 1 truncate cleaned up [ 121.802850][ T6502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.863671][ T6502] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.274: bg 0: block 465: padding at end of block bitmap is not set [ 121.913480][ T6502] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 122.086120][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.245858][ T6512] loop0: detected capacity change from 0 to 2048 [ 122.308544][ T6512] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.507838][ T5812] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 122.707233][ T5812] usb 3-1: Using ep0 maxpacket: 16 [ 122.727916][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.777458][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.802388][ T5812] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.845965][ T5812] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 122.878111][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.908665][ T5812] usb 3-1: config 0 descriptor?? [ 122.946805][ T6527] loop0: detected capacity change from 0 to 256 [ 122.966561][ T6527] exfat: Deprecated parameter 'namecase' [ 123.027255][ T6527] exfat: Deprecated parameter 'namecase' [ 123.066093][ T6528] EXT4-fs error (device loop3): __ext4_fill_super:5517: comm syz.3.283: inode #2: comm syz.3.283: iget: illegal inode # [ 123.163097][ T6527] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 123.177594][ T6528] EXT4-fs (loop3): get root inode failed [ 123.183562][ T6528] EXT4-fs (loop3): mount failed [ 123.330585][ T5812] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 123.349901][ T5812] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 123.367198][ T5812] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 123.407278][ T5812] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 123.414594][ T5812] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 123.457286][ T5812] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 123.480233][ T6518] set_capacity_and_notify: 1 callbacks suppressed [ 123.480251][ T6518] loop1: detected capacity change from 0 to 40427 [ 123.493522][ T5812] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 123.514174][ T5812] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 123.523748][ T6518] F2FS-fs (loop1): invalid crc value [ 123.552707][ T5812] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 123.569415][ T6518] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.580612][ T5812] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 123.601235][ T5812] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 123.617926][ T5812] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 123.635478][ T5812] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 123.663358][ T5812] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 123.692956][ T5812] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 123.775429][ T5812] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input7 [ 123.832349][ T6518] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 123.869808][ T5812] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 123.967417][ T6543] netlink: 36 bytes leftover after parsing attributes in process `syz.0.288'. [ 123.974100][ T5812] usb 3-1: USB disconnect, device number 3 [ 124.064733][ T27] audit: type=1800 audit(1790169715.164:7): pid=6518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.281" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 124.186773][ T6544] fido_id[6544]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 124.230858][ T5778] syz-executor: attempt to access beyond end of device [ 124.230858][ T5778] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 124.294608][ T5778] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 124.508649][ T6554] rnbd_client L127: Can't parse path hp:127.0.0.1\ߐ?:bEz[۵>,: -22 [ 124.552226][ T6552] loop3: detected capacity change from 0 to 8192 [ 124.621181][ T6552] Dev loop3: RDB in block 1 has bad checksum [ 125.188170][ T5832] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.428544][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 125.451656][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 125.472938][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 125.503302][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 125.534782][ T5832] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 125.559509][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.587550][ T5832] usb 4-1: Product: syz [ 125.595501][ T5832] usb 4-1: Manufacturer: syz [ 125.605457][ T5832] usb 4-1: SerialNumber: syz [ 125.630916][ T5832] usb 4-1: config 0 descriptor?? [ 125.875425][ T5832] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 125.934736][ T6591] loop2: detected capacity change from 0 to 4096 [ 126.014353][ T6591] ntfs3: loop2: ino=19, mi_enum_attr [ 126.036266][ T6591] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 126.149070][ T6566] usb 4-1: Couldn't submit interrupt_out_urb -90 [ 126.163349][ T5810] usb 4-1: USB disconnect, device number 4 [ 126.308517][ T6591] ntfs3: loop2: ino=5, "/" mi_enum_attr [ 126.387062][ T6591] ntfs3: loop2: ino=5, mi_enum_attr [ 126.408204][ T6591] ntfs3: loop2: ino=21, "blkio.bfq.group_wait_time" failed to open parent directory r=5 to update [ 126.432683][ T6591] ntfs3: loop2: ino=5, mi_enum_attr [ 126.448362][ T6591] ntfs3: loop2: ino=21, "blkio.bfq.group_wait_time" failed to open parent directory r=5 to write [ 126.686341][ T6610] loop0: detected capacity change from 0 to 164 [ 127.041287][ T6620] loop0: detected capacity change from 0 to 16 [ 127.086422][ T6620] erofs: (device loop0): mounted with root inode @ nid 36. [ 127.311174][ T6628] loop1: detected capacity change from 0 to 256 [ 127.499038][ T6631] loop2: detected capacity change from 0 to 4096 [ 127.699492][ T6640] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.893300][ T27] audit: type=1800 audit(1790169718.994:8): pid=6631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.325" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 128.060378][ T6650] ima: policy update failed [ 128.071063][ T27] audit: type=1802 audit(1790169719.164:9): pid=6650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.332" res=0 errno=0 [ 128.257483][ T5810] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.455152][ T5810] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.471183][ T5810] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 128.482009][ T5810] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 128.498733][ T5810] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.522642][ T5810] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 128.547245][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.668730][ T6660] loop1: detected capacity change from 0 to 4096 [ 128.677440][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 128.712427][ T6660] NILFS (loop1): invalid segment: Checksum error in segment payload [ 128.737251][ T6660] NILFS (loop1): trying rollback from an earlier position [ 128.796026][ T6660] NILFS (loop1): recovery complete [ 128.824186][ T6665] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.880476][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 128.932539][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.956435][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 128.966404][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.989239][ T9] usb 3-1: config 0 descriptor?? [ 129.020495][ T5810] gud: probe of 4-1:1.0 failed with error -121 [ 129.288383][ T5810] usb 4-1: USB disconnect, device number 5 [ 129.309203][ T27] audit: type=1400 audit(1790169720.404:10): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="foo" pid=6671 comm="syz.1.341" name="foo" offset=60 [ 129.492718][ T9] isku 0003:1E7D:319C.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 129.699889][ T27] audit: type=1326 audit(1790169720.804:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.0.345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1d99e159 code=0x7ffc0000 [ 129.751072][ T27] audit: type=1326 audit(1790169720.824:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.0.345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1d99e159 code=0x7ffc0000 [ 129.777426][ T27] audit: type=1326 audit(1790169720.834:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.0.345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1d99e159 code=0x7ffc0000 [ 129.802617][ T27] audit: type=1326 audit(1790169720.834:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.0.345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fda1d99e159 code=0x7ffc0000 [ 129.845060][ T27] audit: type=1326 audit(1790169720.834:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.0.345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1d99e159 code=0x7ffc0000 [ 129.902988][ T27] audit: type=1326 audit(1790169720.834:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.0.345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1d99e159 code=0x7ffc0000 [ 129.958952][ T2135] usb 3-1: USB disconnect, device number 4 [ 130.013731][ T27] audit: type=1326 audit(1790169720.834:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.0.345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1d99e159 code=0x7ffc0000 [ 130.153606][ T6689] netlink: 'syz.3.349': attribute type 9 has an invalid length. [ 130.163071][ T6689] netlink: 371 bytes leftover after parsing attributes in process `syz.3.349'. [ 130.632778][ T6687] loop0: detected capacity change from 0 to 32768 [ 130.697952][ T6687] JBD2: Ignoring recovery information on journal [ 130.774748][ T6687] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 130.969639][ T5780] ocfs2: Unmounting device (7,0) on (node local) [ 131.665866][ T6722] loop0: detected capacity change from 0 to 1024 [ 131.757257][ T6726] mmap: syz.1.366 (6726) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 132.261054][ T6736] loop0: detected capacity change from 0 to 128 [ 132.336533][ T5832] lg-g15 0003:046D:0A07.0005: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 132.384297][ T6736] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.434779][ T5832] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0005/input/input8 [ 132.469610][ T6736] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.736165][ T5780] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.054938][ T6755] bridge0: port 3(netdevsim0) entered blocking state [ 133.081294][ T6755] bridge0: port 3(netdevsim0) entered disabled state [ 133.094099][ T6755] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 133.129243][ T6757] loop3: detected capacity change from 0 to 512 [ 133.142596][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.150379][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.159106][ T6755] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 133.203847][ T6757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.237965][ T6755] bridge0: port 3(netdevsim0) entered blocking state [ 133.244904][ T6755] bridge0: port 3(netdevsim0) entered forwarding state [ 133.277504][ T6757] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.369689][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 133.369705][ T27] audit: type=1800 audit(1790169724.474:31): pid=6757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.379" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 133.426455][ T6764] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 133.543306][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.570722][ T6740] loop2: detected capacity change from 0 to 40427 [ 133.629093][ T6740] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 133.664371][ T6740] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 133.697418][ T6740] F2FS-fs (loop2): Unrecognized mount option "18446744073709551615" or missing value [ 133.759704][ T6769] ima: policy update failed [ 133.778029][ T27] audit: type=1802 audit(1790169724.874:32): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.384" res=0 errno=0 [ 134.390309][ T6789] loop3: detected capacity change from 0 to 128 [ 134.437268][ T6789] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.528884][ T6789] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.569791][ T6793] loop2: detected capacity change from 0 to 16 [ 134.817821][ T11] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.894909][ T6799] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 134.934814][ T6799] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 135.208273][ T6812] loop3: detected capacity change from 0 to 8 [ 135.231491][ T6810] loop7: detected capacity change from 0 to 7 [ 135.311353][ T6810] Dev loop7: unable to read RDB block 7 [ 135.317041][ T6810] loop7: unable to read partition table [ 135.352455][ T6810] loop7: partition table beyond EOD, truncated [ 135.374183][ T6812] SQUASHFS error: Failed to read block 0x2d7: -5 [ 135.387600][ T6810] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 135.398219][ T6812] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 135.458772][ T6818] fuse: Bad value for 'fd' [ 135.542929][ T6813] Dev loop7: unable to read RDB block 7 [ 135.574748][ T6813] loop7: unable to read partition table [ 135.599327][ T6813] loop7: partition table beyond EOD, truncated [ 135.821570][ T6826] loop1: detected capacity change from 0 to 512 [ 135.864747][ T6826] EXT4-fs: Ignoring removed nobh option [ 135.909816][ T6826] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 135.947495][ T6826] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 135.977663][ T6826] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #13: comm syz.1.410: inode has both inline data and extents flags [ 136.084389][ T6826] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.410: couldn't read orphan inode 13 (err -117) [ 136.141482][ T6826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.288211][ T6826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.127736][ T5832] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 137.359828][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 137.394827][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 137.427261][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 137.447227][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 137.494062][ T5832] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 137.513411][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.523209][ T5832] usb 1-1: Product: syz [ 137.527997][ T5832] usb 1-1: Manufacturer: syz [ 137.532669][ T5832] usb 1-1: SerialNumber: syz [ 137.557079][ T5832] usb 1-1: config 0 descriptor?? [ 137.668060][ T6868] loop1: detected capacity change from 0 to 32768 [ 137.686253][ T6868] XFS: noikeep mount option is deprecated. [ 137.746211][ T6868] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 137.791165][ T5832] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 138.053386][ T6865] usb 1-1: Couldn't submit interrupt_out_urb -90 [ 138.074805][ T6868] XFS (loop1): Ending clean mount [ 138.090204][ T9] usb 1-1: USB disconnect, device number 5 [ 138.114631][ T6868] XFS (loop1): Quotacheck needed: Please wait. [ 138.247382][ T6868] XFS (loop1): Quotacheck: Done. [ 138.531383][ T6902] loop3: detected capacity change from 0 to 8192 [ 138.577849][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 138.603692][ T6902] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 138.621351][ T6902] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 138.643053][ T6902] REISERFS (device loop3): using ordered data mode [ 138.652211][ T6902] reiserfs: using flush barriers [ 138.662952][ T6902] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.685573][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.693587][ T6902] REISERFS (device loop3): checking transaction log (loop3) [ 138.737843][ T5778] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 138.823196][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 138.846780][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 138.861855][ T9] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 138.876142][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.922040][ T9] usb 3-1: Product: syz [ 138.946038][ T9] usb 3-1: Manufacturer: syz [ 138.957856][ T9] usb 3-1: SerialNumber: syz [ 138.976360][ T6902] REISERFS (device loop3): Using tea hash to sort names [ 138.986978][ T6905] kAFS: Invalid Command on /proc/fs/afs/cells file [ 138.994383][ T9] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 139.019507][ T9] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 139.019507][ T9] Please send a copy of this message to and [ 139.059786][ T6902] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 139.087518][ T6902] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 139.274929][ T6902] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 6) not found (pos 2) [ 139.328602][ T6902] overlayfs: upper fs needs to support d_type. [ 139.335443][ T6902] overlayfs: upper fs does not support tmpfile. [ 139.362919][ T6902] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 139.643446][ T5781] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 139.680534][ T5781] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 139.699039][ T9] ums-sddr09: probe of 3-1:1.0 failed with error -5 [ 139.878684][ T5832] usb 3-1: USB disconnect, device number 5 [ 139.927529][ T6920] loop1: detected capacity change from 0 to 1024 [ 139.948673][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 140.051157][ T6920] hfsplus: xattr search failed [ 140.556001][ T6937] loop2: detected capacity change from 0 to 2048 [ 140.600898][ T6937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 140.658015][ T6937] EXT4-fs (loop2): shut down requested (1) [ 140.794023][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 140.915749][ T6946] loop2: detected capacity change from 0 to 512 [ 140.924268][ T6945] program syz.0.452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.934959][ T6946] EXT4-fs: Ignoring removed oldalloc option [ 140.954078][ T6946] EXT4-fs (loop2): Test dummy encryption mode enabled [ 141.006555][ T6946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.131367][ T6952] loop1: detected capacity change from 0 to 512 [ 141.240860][ T6952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.305437][ T6952] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.426509][ T6952] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #2: comm syz.1.455: corrupted inode contents [ 141.499562][ T6952] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #2: comm syz.1.455: mark_inode_dirty error [ 141.637616][ T6952] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #2: comm syz.1.455: corrupted inode contents [ 141.691676][ T6965] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #2: comm syz.1.455: corrupted inode contents [ 141.722625][ T6946] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 141.742033][ T6965] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #2: comm syz.1.455: mark_inode_dirty error [ 141.774278][ T6965] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #2: comm syz.1.455: corrupted inode contents [ 141.804703][ T6965] EXT4-fs error (device loop1): __ext4_ext_dirty:208: inode #2: comm syz.1.455: mark_inode_dirty error [ 141.831078][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.833790][ T6970] loop0: detected capacity change from 0 to 4096 [ 141.910475][ T6970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.997898][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.012071][ T6974] PM: suspend entry (deep) [ 142.018860][ T6970] EXT4-fs (loop0): shut down requested (2) [ 142.170570][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.293424][ T6974] Filesystems sync: 0.273 seconds [ 142.596082][ T6967] loop3: detected capacity change from 0 to 32768 [ 142.627030][ T6967] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.459 (6967) [ 142.733379][ T6967] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 142.754976][ T6967] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 142.764582][ T6967] BTRFS info (device loop3): enabling ssd optimizations [ 142.775317][ T6967] BTRFS info (device loop3): not using ssd optimizations [ 142.787808][ T6967] BTRFS info (device loop3): turning off barriers [ 142.799494][ T6967] BTRFS info (device loop3): use no compression [ 142.810745][ T6967] BTRFS info (device loop3): using free space tree [ 142.865209][ T6974] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 142.895915][ T6974] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 142.998280][ T6974] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 143.055601][ T6974] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 143.102778][ T6974] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.135720][ T6974] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.157847][ T6974] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.171634][ T6974] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.216139][ T6974] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.244081][ T6974] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.268054][ T6974] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.322863][ T6974] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.360952][ T5781] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 143.376237][ T6974] Freezing user space processes [ 143.609349][ T6974] Freezing user space processes completed (elapsed 0.205 seconds) [ 143.618292][ T6974] OOM killer disabled. [ 143.622410][ T6974] Freezing remaining freezable tasks [ 143.640071][ T6974] Freezing remaining freezable tasks completed (elapsed 0.012 seconds) [ 143.652473][ T6974] printk: Suspending console(s) (use no_console_suspend to debug) [ 143.790209][ T6974] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 143.828836][ T6974] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 143.868699][ T6974] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 143.910453][ T6974] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 143.948479][ T6974] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 143.988736][ T6974] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 144.028958][ T6974] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 144.068497][ T6974] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 144.113782][ T6974] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 144.148924][ T6974] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 144.189341][ T6974] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 144.231365][ T6974] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 144.270122][ T6974] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 144.309048][ T6974] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 144.349056][ T6974] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 144.410223][ T79] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 144.497256][ T5086] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.839140][ T6974] ACPI: PM: Preparing to enter system sleep state S3 [ 144.840204][ T6974] ACPI: PM: Saving platform NVS memory [ 144.842539][ T6974] Disabling non-boot CPUs ... [ 144.883475][ T6974] smpboot: CPU 1 is now offline [ 144.919059][ T6974] ACPI: PM: Low-level resume complete [ 144.919171][ T6974] ACPI: PM: Restoring platform NVS memory [ 144.950384][ T6974] Enabling non-boot CPUs ... [ 144.954007][ T6974] zswap: could not alloc crypto acomp_request zstd [ 144.956093][ T6974] Error taking CPU1 up: -12 [ 144.957747][ T6974] ACPI: PM: Waking up from system sleep state S3 [ 145.102318][ T5086] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.212091][ T5086] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.282088][ T5086] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.478982][ T6974] OOM killer enabled. [ 145.479658][ T6974] Restarting tasks ... done. [ 145.598820][ T6974] random: crng reseeded on system resumption [ 145.635358][ T6974] PM: suspend exit [ 145.697653][ T7088] ip_tables: iptables: counters copy to user failed while replacing table [ 145.838488][ T5769] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop3 scanned by udevd (5769) [ 146.194045][ T7097] sctp: [Deprecated]: syz.3.469 (pid 7097) Use of int in max_burst socket option deprecated. [ 146.194045][ T7097] Use struct sctp_assoc_value instead [ 146.615852][ T5086] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.715855][ T7109] loop0: detected capacity change from 0 to 256 [ 146.759835][ T7108] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 146.800783][ T7107] loop3: detected capacity change from 0 to 256 [ 146.885907][ T7107] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf9f813e7, utbl_chksum : 0xe619d30d) [ 147.182071][ T5086] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.262103][ T5086] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.336467][ T5086] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.882066][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 147.990909][ T7125] GUP no longer grows the stack in syz.1.483 (7125): 200000009000-20000000a000 (200000005000) [ 148.000615][ T7125] CPU: 0 PID: 7125 Comm: syz.1.483 Not tainted syzkaller #0 [ 148.001871][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.003354][ T7125] Call Trace: [ 148.003863][ T7125] [ 148.004320][ T7125] dump_stack_lvl+0x18c/0x250 [ 148.005062][ T7125] ? show_regs_print_info+0x20/0x20 [ 148.005944][ T7125] ? load_image+0x420/0x420 [ 148.006778][ T7125] ? find_vma+0x134/0x1b0 [ 148.007462][ T7125] __get_user_pages+0xfe7/0x1580 [ 148.008290][ T7125] ? populate_vma_page_range+0x380/0x380 [ 148.009229][ T7125] ? __gup_longterm_locked+0x21d8/0x2cb0 [ 148.010190][ T7125] ? down_read_killable+0x1d0/0x340 [ 148.011066][ T7125] __gup_longterm_locked+0x2345/0x2cb0 [ 148.012127][ T7125] ? pin_user_pages_remote+0x220/0x220 [ 148.012940][ T7125] ? mark_lock+0x94/0x320 [ 148.013596][ T7125] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 148.014507][ T7125] ? __lock_acquire+0x7d80/0x7d80 [ 148.015274][ T7125] ? lock_chain_count+0x20/0x20 [ 148.016050][ T7125] ? internal_get_user_pages_fast+0x1f8e/0x27a0 [ 148.017117][ T7125] internal_get_user_pages_fast+0x2174/0x27a0 [ 148.018112][ T7125] ? get_user_pages_fast_only+0xa0/0xa0 [ 148.018962][ T7125] ? trace_contention_end+0x39/0xe0 [ 148.019742][ T7125] ? __mutex_lock+0x30d/0xc80 [ 148.020456][ T7125] ? __lock_acquire+0x7d80/0x7d80 [ 148.021308][ T7125] ? iov_iter_iovec_advance+0x1ef/0x290 [ 148.022152][ T7125] __iov_iter_get_pages_alloc+0x380/0xac0 [ 148.023047][ T7125] iov_iter_get_pages2+0x5f/0xa0 [ 148.023818][ T7125] __se_sys_vmsplice+0x5e5/0x11f0 [ 148.024570][ T7125] ? __x64_sys_vmsplice+0xb0/0xb0 [ 148.025413][ T7125] ? futex_wake_mark+0x150/0x150 [ 148.026857][ T7125] ? fd_install+0x60/0x4e0 [ 148.027810][ T7125] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 148.028844][ T7125] ? lockdep_hardirqs_on+0x98/0x150 [ 148.029809][ T7125] do_syscall_64+0x55/0xb0 [ 148.030680][ T7125] ? clear_bhb_loop+0x40/0x90 [ 148.031513][ T7125] ? clear_bhb_loop+0x40/0x90 [ 148.032357][ T7125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.033278][ T7125] RIP: 0033:0x7f739c99e159 [ 148.034088][ T7125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.037100][ T7125] RSP: 002b:00007f739d870028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 148.038371][ T7125] RAX: ffffffffffffffda RBX: 00007f739cc25fa0 RCX: 00007f739c99e159 [ 148.039714][ T7125] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000004 [ 148.041161][ T7125] RBP: 00007f739ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 148.042547][ T7125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.043751][ T7125] R13: 00007f739cc26038 R14: 00007f739cc25fa0 R15: 00007ffd8f80fc58 [ 148.045036][ T7125] [ 148.117111][ T7103] loop2: detected capacity change from 0 to 40427 [ 148.122422][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.124295][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.126364][ T8] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 148.128053][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.149605][ T8] usb 1-1: config 0 descriptor?? [ 148.173534][ T7103] F2FS-fs (loop2): invalid crc value [ 148.208777][ T7103] F2FS-fs (loop2): Found nat_bits in checkpoint [ 148.242160][ T7086] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 148.436850][ T7086] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 148.438635][ T7086] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.440106][ T7086] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 148.441464][ T7086] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.454726][ T7086] usb 4-1: config 0 descriptor?? [ 148.465907][ T7103] F2FS-fs (loop2): Start checkpoint disabled! [ 148.558978][ T7103] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 148.573905][ T8] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 148.592421][ T8] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 148.594637][ T8] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 148.614694][ T8] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 148.616248][ T8] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 148.660404][ T8] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 148.692322][ T5086] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.973612][ T7086] isku 0003:1E7D:319C.0007: hidraw1: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 148.978848][ T8] playstation 0003:054C:0DF2.0006: Failed to retrieve feature with reportID 32: -71 [ 148.980678][ T8] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense firmware info: -71 [ 148.999440][ T8] playstation 0003:054C:0DF2.0006: Failed to get firmware info from DualSense [ 149.001168][ T8] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 149.046911][ T8] playstation: probe of 0003:054C:0DF2.0006 failed with error -71 [ 149.108408][ T8] usb 1-1: USB disconnect, device number 6 [ 149.153347][ T7131] fido_id[7131]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 149.252426][ T5086] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.287345][ T7133] loop1: detected capacity change from 0 to 4096 [ 149.316259][ T7082] kworker/u4:89: attempt to access beyond end of device [ 149.316259][ T7082] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 149.319556][ T7082] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 149.320715][ T7082] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 149.332244][ T5086] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.400229][ T7082] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 149.401666][ T7082] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 149.414811][ T5086] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.493525][ T7133] ntfs3: loop1: ino=19, mi_enum_attr [ 149.494624][ T7133] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 149.521164][ T7086] usb 4-1: USB disconnect, device number 6 [ 149.703302][ T7133] ntfs3: loop1: ino=5, "/" mi_enum_attr [ 149.752422][ T7133] ntfs3: loop1: ino=5, mi_enum_attr [ 149.753429][ T7133] ntfs3: loop1: ino=21, "blkio.bfq.group_wait_time" failed to open parent directory r=5 to update [ 149.755220][ T7133] ntfs3: loop1: ino=5, mi_enum_attr [ 149.756367][ T7133] ntfs3: loop1: ino=21, "blkio.bfq.group_wait_time" failed to open parent directory r=5 to write [ 151.036961][ T7158] loop0: detected capacity change from 0 to 512 [ 151.088639][ T7158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.441589][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.622215][ T8] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 151.804855][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 151.808694][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.818121][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 151.828252][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.841071][ T8] usb 2-1: config 0 descriptor?? [ 152.326087][ T8] isku 0003:1E7D:319C.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 152.758690][ T9] usb 2-1: USB disconnect, device number 5 [ 153.088096][ T7181] loop0: detected capacity change from 0 to 32768 [ 153.140157][ T7181] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 153.162320][ T8] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 153.254962][ T7181] XFS (loop0): Ending clean mount [ 153.355194][ T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.357005][ T8] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 153.358658][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.360223][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 153.403407][ T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.407820][ T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.409492][ T8] usb 4-1: Product: syz [ 153.410345][ T8] usb 4-1: Manufacturer: syz [ 153.455877][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 153.456966][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 153.477448][ T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 153.478611][ T8] cdc_wdm 4-1:1.0: Unknown control protocol [ 153.558623][ T5780] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 153.826159][ T7086] usb 4-1: USB disconnect, device number 7 [ 155.134377][ T7231] loop8: detected capacity change from 0 to 7 [ 155.142469][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.144380][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 155.157674][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.159415][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 155.162353][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.164755][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 155.169363][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.170915][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 155.179069][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.180602][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 155.191799][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.193519][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 155.198975][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.200882][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 155.202617][ T7231] ldm_validate_partition_table(): Disk read failed. [ 155.207686][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.209344][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 155.211255][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.213152][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 155.215027][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.216674][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 155.220150][ T7231] Dev loop8: unable to read RDB block 0 [ 155.224904][ T7231] loop8: unable to read partition table [ 155.226210][ T7231] loop8: partition table beyond EOD, truncated [ 155.230785][ T7231] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 155.372353][ T7086] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 155.392149][ T8] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 155.564479][ T7086] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 155.566222][ T7086] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 155.570544][ T7086] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 155.578287][ T7086] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.580467][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.582621][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.584265][ T8] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 155.589204][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.591464][ T7086] usb 2-1: Product: syz [ 155.592630][ T7086] usb 2-1: Manufacturer: syz [ 155.593423][ T7086] usb 2-1: SerialNumber: syz [ 155.606313][ T8] usb 1-1: config 0 descriptor?? [ 155.621296][ T7086] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 155.658382][ T7086] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 155.658382][ T7086] Please send a copy of this message to and [ 156.077893][ T8] isku 0003:1E7D:319C.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 156.291869][ T7086] ums-sddr09: probe of 2-1:1.0 failed with error -5 [ 156.493292][ T7238] loop3: detected capacity change from 0 to 32768 [ 156.511221][ T7086] usb 1-1: USB disconnect, device number 7 [ 156.518547][ T7238] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.525 (7238) [ 156.525693][ T9] usb 2-1: USB disconnect, device number 6 [ 156.604250][ T7238] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 156.629338][ T7238] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 156.630968][ T7238] BTRFS info (device loop3): using free space tree [ 156.738669][ T7238] BTRFS info (device loop3): enabling ssd optimizations [ 156.739987][ T7238] BTRFS info (device loop3): auto enabling async discard [ 156.957134][ T7259] kernel write not supported for file /248/net/netstat (pid: 7259 comm: syz.3.525) [ 157.272230][ T5781] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.542722][ T7265] loop0: detected capacity change from 0 to 4096 [ 157.562976][ T7265] EXT4-fs: Ignoring removed nobh option [ 157.564469][ T7265] EXT4-fs: Ignoring removed bh option [ 157.646194][ T7265] EXT4-fs (loop0): Test dummy encryption mode enabled [ 157.715217][ T7265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.027879][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.074077][ T7272] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.531'. [ 158.076059][ T7272] netlink: zone id is out of range [ 158.076959][ T7272] netlink: zone id is out of range [ 158.078088][ T7272] netlink: zone id is out of range [ 158.079174][ T7272] netlink: zone id is out of range [ 158.079991][ T7272] netlink: zone id is out of range [ 158.080884][ T7272] netlink: zone id is out of range [ 158.081692][ T7272] netlink: zone id is out of range [ 158.227120][ T7272] netlink: zone id is out of range [ 158.229408][ T7272] netlink: zone id is out of range [ 158.230290][ T7272] netlink: zone id is out of range [ 158.641504][ T7277] loop0: detected capacity change from 0 to 8192 [ 158.706589][ T7277] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 158.708699][ T7277] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 158.710224][ T7277] REISERFS (device loop0): using ordered data mode [ 158.711187][ T7277] reiserfs: using flush barriers [ 158.754485][ T7285] loop2: detected capacity change from 0 to 64 [ 158.777292][ T7277] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 158.780535][ T7277] REISERFS (device loop0): checking transaction log (loop0) [ 159.220799][ T7277] REISERFS (device loop0): Using tea hash to sort names [ 159.224130][ T7277] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 159.439817][ T7289] PM: suspend entry (deep) [ 159.760861][ T7289] Filesystems sync: 0.320 seconds [ 159.971620][ T7280] loop1: detected capacity change from 0 to 32768 [ 160.051677][ T7280] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 160.238138][ T7289] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 160.280632][ T7280] XFS (loop1): Ending clean mount [ 160.292417][ T7289] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 160.298486][ T7289] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 160.387789][ T7289] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 160.413367][ T7289] Freezing user space processes [ 160.969243][ T7289] Freezing user space processes completed (elapsed 0.502 seconds) [ 160.980348][ T7289] OOM killer disabled. [ 160.984790][ T7289] Freezing remaining freezable tasks [ 160.995956][ T7289] Freezing remaining freezable tasks completed (elapsed 0.005 seconds) [ 161.010277][ T7289] printk: Suspending console(s) (use no_console_suspend to debug) [ 161.113188][ T7289] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 161.153795][ T7289] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 161.193165][ T7289] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 161.236049][ T7289] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 161.273674][ T7289] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 161.313568][ T7289] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 161.354376][ T7289] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 161.393299][ T7289] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 161.433282][ T7289] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 161.473198][ T7289] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 161.513455][ T7289] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 161.553178][ T7289] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 161.593826][ T7289] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 161.633346][ T7289] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 161.678077][ T7289] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 161.725431][ T7082] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 161.892158][ T5783] Bluetooth: hci0: command 0x0c1a tx timeout [ 162.140665][ T7289] ACPI: PM: Preparing to enter system sleep state S3 [ 162.141093][ T7289] ACPI: PM: Saving platform NVS memory [ 162.141278][ T7289] Disabling non-boot CPUs ... [ 162.145035][ T7289] ACPI: PM: Low-level resume complete [ 162.145113][ T7289] ACPI: PM: Restoring platform NVS memory [ 162.178663][ T7289] ACPI: PM: Waking up from system sleep state S3 [ 162.413348][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 162.413388][ T5783] Bluetooth: hci1: command 0x0c1a tx timeout [ 162.489276][ T5086] Bluetooth: hci3: command 0x0c1a tx timeout [ 162.568526][ T7289] OOM killer enabled. [ 162.571533][ T7289] Restarting tasks ... done. [ 162.673063][ T7289] random: crng reseeded on system resumption [ 162.691802][ T7289] PM: suspend exit [ 162.773761][ T5778] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 162.842106][ T7326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.543'. [ 162.948833][ T7326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.543'. [ 163.018351][ T7328] loop3: detected capacity change from 0 to 256 [ 164.326177][ T7351] loop1: detected capacity change from 0 to 16 [ 164.336184][ T7351] erofs: (device loop1): mounted with root inode @ nid 36. [ 164.509950][ T7353] program syz.2.555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.673904][ T7355] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input9 [ 164.825708][ T7359] netlink: 'syz.2.559': attribute type 4 has an invalid length. [ 164.855782][ T7359] netlink: 17 bytes leftover after parsing attributes in process `syz.2.559'. [ 164.998431][ T7357] loop1: detected capacity change from 0 to 8192 [ 165.053903][ T7361] loop3: detected capacity change from 0 to 1756 [ 165.090360][ T7357] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 165.092890][ T7357] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 165.109129][ T7357] REISERFS (device loop1): using ordered data mode [ 165.110274][ T7357] reiserfs: using flush barriers [ 165.128819][ T7357] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 165.163767][ T7357] REISERFS (device loop1): checking transaction log (loop1) [ 165.176008][ T7357] REISERFS (device loop1): Using r5 hash to sort names [ 165.177114][ T7357] REISERFS (device loop1): using 3.5.x disk format [ 165.178438][ T7357] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 165.186922][ T7364] loop2: detected capacity change from 0 to 512 [ 165.224660][ T7361] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 165.234398][ T7361] UDF-fs: Scanning with blocksize 512 failed [ 165.397769][ T7364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.417311][ T7364] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.491054][ T7361] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 165.492577][ T7361] UDF-fs: Scanning with blocksize 1024 failed [ 165.807269][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.818099][ T7361] UDF-fs: warning (device loop3): udf_verify_domain_identifier: Descriptor for logical volume marked write protected. Forcing read only mount. [ 166.709263][ T8] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 166.897375][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.898821][ T8] usb 1-1: config 0 has no interface number 0 [ 166.903785][ T8] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 166.911150][ T8] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 166.913060][ T8] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.914556][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.939800][ T8] usb 1-1: config 0 descriptor?? [ 166.941372][ T7383] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 166.966382][ T8] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 167.182366][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 167.188453][ T8] usb 1-1: USB disconnect, device number 8 [ 167.520053][ T7394] loop2: detected capacity change from 0 to 32768 [ 167.540273][ T7394] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.572 (7394) [ 167.574076][ T7394] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 167.586185][ T7394] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 167.587678][ T7394] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 167.594228][ T7394] BTRFS info (device loop2): use zstd compression, level 3 [ 167.595337][ T7394] BTRFS info (device loop2): using free space tree [ 167.686457][ T7394] BTRFS info (device loop2): enabling ssd optimizations [ 167.687669][ T7394] BTRFS info (device loop2): auto enabling async discard [ 167.783973][ T27] audit: type=1800 audit(1790169758.962:33): pid=7394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.572" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 167.923001][ T5775] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 168.002034][ T7417] loop3: detected capacity change from 0 to 7 [ 168.035503][ C0] blk_print_req_error: 10 callbacks suppressed [ 168.035516][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 168.082341][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.083763][ C0] buffer_io_error: 10 callbacks suppressed [ 168.083771][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 168.101899][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.103801][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 168.108970][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.110732][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 168.112801][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.115494][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 168.118218][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.119953][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 169.348181][ T7434] sctp: [Deprecated]: syz.2.579 (pid 7434) Use of int in max_burst socket option deprecated. [ 169.348181][ T7434] Use struct sctp_assoc_value instead [ 169.720331][ T7398] loop3: detected capacity change from 0 to 40427 [ 169.805347][ T7398] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 169.808641][ T7398] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 169.821123][ T7398] F2FS-fs (loop3): Unrecognized mount option "0177777777777777777777700000000000000000000000" or missing value [ 170.048584][ T7444] loop1: detected capacity change from 0 to 1024 [ 170.189031][ T7444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.533195][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.107901][ T7467] loop0: detected capacity change from 0 to 256 [ 171.134313][ T7469] loop3: detected capacity change from 0 to 64 [ 171.174428][ T7467] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 171.448783][ T27] audit: type=1800 audit(1790169762.602:34): pid=7469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.594" name="bus" dev="loop3" ino=21 res=0 errno=0 [ 171.695898][ T7478] loop2: detected capacity change from 0 to 512 [ 171.697811][ T7478] EXT4-fs: Ignoring removed oldalloc option [ 171.730097][ T7478] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 171.861524][ T7478] EXT4-fs (loop2): 1 truncate cleaned up [ 171.864553][ T7478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.879080][ T7481] loop1: detected capacity change from 0 to 512 [ 171.949507][ T7481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.951625][ T7481] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.066496][ T7478] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.601: invalid indirect mapped block 4294901760 (level 0) [ 172.113839][ T7485] ------------[ cut here ]------------ [ 172.115120][ T7485] SVC: permsocks remain for nfsd [ 172.116552][ T7485] WARNING: CPU: 0 PID: 7485 at net/sunrpc/svc.c:645 svc_destroy+0x2ed/0x390 [ 172.117889][ T7485] Modules linked in: [ 172.118488][ T7485] CPU: 0 PID: 7485 Comm: syz.0.604 Not tainted syzkaller #0 [ 172.119788][ T7485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.121308][ T7485] RIP: 0010:svc_destroy+0x2ed/0x390 [ 172.122082][ T7485] Code: 24 49 83 c7 20 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 f2 d1 31 f8 49 8b 37 48 c7 c7 e0 87 d9 8b e8 c3 09 a3 f7 <0f> 0b e9 78 fd ff ff e8 b7 45 d9 f7 c6 05 73 72 c8 04 01 4c 89 e0 [ 172.124941][ T7485] RSP: 0018:ffffc900048bfae0 EFLAGS: 00010246 [ 172.126041][ T7485] RAX: f2e7fa5904e9ed00 RBX: ffff888027cda450 RCX: 0000000000080000 [ 172.127234][ T7485] RDX: ffffc9000c9f9000 RSI: 000000000002b704 RDI: 000000000002b705 [ 172.128393][ T7485] RBP: ffffc900048bfcb8 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 172.129772][ T7485] R10: dffffc0000000000 R11: ffffed10171c518b R12: ffff888027cda400 [ 172.131004][ T7485] R13: dffffc0000000000 R14: ffff888027cda450 R15: ffffffff8d3e1e40 [ 172.132222][ T7485] FS: 00007fda1e8fb6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 172.133536][ T7485] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.134479][ T7485] CR2: 0000001b2de16ff8 CR3: 000000005fd17000 CR4: 00000000003506f0 [ 172.135784][ T7485] Call Trace: [ 172.136286][ T7485] [ 172.136750][ T7485] write_ports+0xb99/0xfa0 [ 172.137528][ T7485] ? write_versions+0xe00/0xe00 [ 172.138460][ T7485] ? __lock_acquire+0x7d80/0x7d80 [ 172.139448][ T7485] ? __virt_addr_valid+0x10c/0x380 [ 172.140292][ T7485] ? __virt_addr_valid+0x10c/0x380 [ 172.141084][ T7485] ? __might_fault+0xaa/0x120 [ 172.141903][ T7485] ? __might_fault+0xc6/0x120 [ 172.142698][ T7485] ? __might_fault+0xaa/0x120 [ 172.143459][ T7485] ? simple_transaction_get+0x11d/0x140 [ 172.144274][ T7485] nfsctl_transaction_write+0x10c/0x150 [ 172.145232][ T7485] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 172.146074][ T7485] vfs_write+0x299/0x9a0 [ 172.146793][ T7485] ? file_end_write+0x250/0x250 [ 172.147538][ T7485] ? __fget_files+0x28/0x460 [ 172.148267][ T7485] ? __fget_files+0x3fc/0x460 [ 172.149147][ T7485] ? __fdget_pos+0x2a3/0x330 [ 172.149897][ T7485] ? ksys_write+0x74/0x260 [ 172.150598][ T7485] ksys_write+0x151/0x260 [ 172.151316][ T7485] ? __ia32_sys_read+0x90/0x90 [ 172.152172][ T7485] ? lockdep_hardirqs_on+0x98/0x150 [ 172.153041][ T7485] do_syscall_64+0x55/0xb0 [ 172.153939][ T7485] ? clear_bhb_loop+0x40/0x90 [ 172.154745][ T7485] ? clear_bhb_loop+0x40/0x90 [ 172.155553][ T7485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.156419][ T7485] RIP: 0033:0x7fda1d99e159 [ 172.157234][ T7485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.160441][ T7485] RSP: 002b:00007fda1e8fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.161830][ T7485] RAX: ffffffffffffffda RBX: 00007fda1dc25fa0 RCX: 00007fda1d99e159 [ 172.163295][ T7485] RDX: 0000000000000009 RSI: 0000200000000480 RDI: 0000000000000003 [ 172.165000][ T7485] RBP: 00007fda1da3506b R08: 0000000000000000 R09: 0000000000000000 [ 172.167151][ T7485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.168828][ T7485] R13: 00007fda1dc26038 R14: 00007fda1dc25fa0 R15: 00007ffd8745f0b8 [ 172.170491][ T7485] [ 172.171020][ T7485] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 172.172259][ T7485] CPU: 0 PID: 7485 Comm: syz.0.604 Not tainted syzkaller #0 [ 172.173641][ T7485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.175348][ T7485] Call Trace: [ 172.176026][ T7485] [ 172.176537][ T7485] dump_stack_lvl+0x18c/0x250 [ 172.177394][ T7485] ? show_regs_print_info+0x20/0x20 [ 172.178260][ T7485] ? load_image+0x420/0x420 [ 172.179064][ T7485] panic+0x2ca/0x720 [ 172.179692][ T7485] ? bpf_jit_dump+0xd0/0xd0 [ 172.180594][ T7485] __warn+0x2e0/0x470 [ 172.181264][ T7485] ? svc_destroy+0x2ed/0x390 [ 172.182108][ T7485] ? svc_destroy+0x2ed/0x390 [ 172.182783][ T7485] report_bug+0x2be/0x4f0 [ 172.183523][ T7485] ? svc_destroy+0x2ed/0x390 [ 172.184235][ T7485] ? svc_destroy+0x2ed/0x390 [ 172.184972][ T7485] ? svc_destroy+0x2ef/0x390 [ 172.185713][ T7485] handle_bug+0xcf/0x120 [ 172.186503][ T7485] exc_invalid_op+0x1a/0x50 [ 172.187407][ T7485] asm_exc_invalid_op+0x1a/0x20 [ 172.188221][ T7485] RIP: 0010:svc_destroy+0x2ed/0x390 [ 172.189135][ T7485] Code: 24 49 83 c7 20 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 f2 d1 31 f8 49 8b 37 48 c7 c7 e0 87 d9 8b e8 c3 09 a3 f7 <0f> 0b e9 78 fd ff ff e8 b7 45 d9 f7 c6 05 73 72 c8 04 01 4c 89 e0 [ 172.192136][ T7485] RSP: 0018:ffffc900048bfae0 EFLAGS: 00010246 [ 172.193056][ T7485] RAX: f2e7fa5904e9ed00 RBX: ffff888027cda450 RCX: 0000000000080000 [ 172.194539][ T7485] RDX: ffffc9000c9f9000 RSI: 000000000002b704 RDI: 000000000002b705 [ 172.195814][ T7485] RBP: ffffc900048bfcb8 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 172.197120][ T7485] R10: dffffc0000000000 R11: ffffed10171c518b R12: ffff888027cda400 [ 172.198514][ T7485] R13: dffffc0000000000 R14: ffff888027cda450 R15: ffffffff8d3e1e40 [ 172.200171][ T7485] write_ports+0xb99/0xfa0 [ 172.201516][ T7485] ? write_versions+0xe00/0xe00 [ 172.202330][ T7485] ? __lock_acquire+0x7d80/0x7d80 [ 172.203210][ T7485] ? __virt_addr_valid+0x10c/0x380 [ 172.204267][ T7485] ? __virt_addr_valid+0x10c/0x380 [ 172.205187][ T7485] ? __might_fault+0xaa/0x120 [ 172.206146][ T7485] ? __might_fault+0xc6/0x120 [ 172.206947][ T7485] ? __might_fault+0xaa/0x120 [ 172.207751][ T7485] ? simple_transaction_get+0x11d/0x140 [ 172.208760][ T7485] nfsctl_transaction_write+0x10c/0x150 [ 172.209836][ T7485] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 172.211023][ T7485] vfs_write+0x299/0x9a0 [ 172.211904][ T7485] ? file_end_write+0x250/0x250 [ 172.212909][ T7485] ? __fget_files+0x28/0x460 [ 172.213689][ T7485] ? __fget_files+0x3fc/0x460 [ 172.214517][ T7485] ? __fdget_pos+0x2a3/0x330 [ 172.215232][ T7485] ? ksys_write+0x74/0x260 [ 172.216074][ T7485] ksys_write+0x151/0x260 [ 172.216765][ T7485] ? __ia32_sys_read+0x90/0x90 [ 172.217739][ T7485] ? lockdep_hardirqs_on+0x98/0x150 [ 172.218602][ T7485] do_syscall_64+0x55/0xb0 [ 172.219413][ T7485] ? clear_bhb_loop+0x40/0x90 [ 172.220345][ T7485] ? clear_bhb_loop+0x40/0x90 [ 172.221156][ T7485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.222110][ T7485] RIP: 0033:0x7fda1d99e159 [ 172.223120][ T7485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.227590][ T7485] RSP: 002b:00007fda1e8fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.228862][ T7485] RAX: ffffffffffffffda RBX: 00007fda1dc25fa0 RCX: 00007fda1d99e159 [ 172.230279][ T7485] RDX: 0000000000000009 RSI: 0000200000000480 RDI: 0000000000000003 [ 172.231610][ T7485] RBP: 00007fda1da3506b R08: 0000000000000000 R09: 0000000000000000 [ 172.232842][ T7485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.234145][ T7485] R13: 00007fda1dc26038 R14: 00007fda1dc25fa0 R15: 00007ffd8745f0b8 [ 172.235450][ T7485] [ 172.236244][ T7485] Kernel Offset: disabled [ 172.237059][ T7485] Rebooting in 86400 seconds..