last executing test programs: 1m26.403657706s ago: executing program 4 (id=193): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000340)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0xf6, 0x692, &(0x7f0000001380)="$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") syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x2018008, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2f93edc77863113d68e33456dfe3c025878b46bc73df14f991a8f7a341a10f44c05fc1c37ad73b0239a18733e7436f3b54758b4ce59af971d50e53c14277216c0bba6ad052fa7a6d77f0b19c8b2381abc46dfa7e4bc6c37bbab3f908f48d1a6055a6457c5d503502300a69dc517cc08b955df0d19ae4c120c512eceffbf3fc154e4ba08f2497b14e95cfdef1c26e8623eab9941404ca9d84df9a2c44e453a0cfffbf23e5bf1e872ee040a582eda3d84714e82dde4c02836e5f66775f4df1bdcfbc28eb5ced2b332944d3ab2b9efe3cbb2111fe"], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 1m25.964143942s ago: executing program 4 (id=196): unshare(0xe060400) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000000)={0x201800000, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 1m25.63994899s ago: executing program 4 (id=199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1m25.233725574s ago: executing program 4 (id=203): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000e00)='./file0\x00', 0x480, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRES8, @ANYRESDEC, @ANYRES64], 0x0, 0xdab, &(0x7f0000000e80)="$eJzs3ctvXNX9APBzx544L36x8wuNm6ZJSkigj9iQumklNkaii1KE1CVLmgaa1gmP0AUoi5RFV0i1hPgDipDIpuqi6oJNFbGiG1Sp+wqx6iaVkLJAUcCV7XPG429mdGcc2+PxfD7SnTP3fs+955x53LlzXycBI6ux8jg3N12l9N5H7z7zr7O/+NvylJOtHKdWHsfz2HxKqdmaL6XJsLz5idX0qy+uX2xPv85plc6nKlWt6en52615D6SUbqRT6VaaTE+9cOfeh4vPPrc4debm0Xc+vbs1rV9TbXUBAACwA3z58w9e+8djP70+dfcvJ+bTRGt62T6fz+MH83b/fN5QLtvL5X9A1ZZWHban94R843lohHxjHfK1l9MM+ca7lL8nLLfZJd9ETfljbdM6tRuG2dr/+Koxs2680ZiZWf1PvuyzsT3VzNXLCy9dG1BFgU1352TexWcwGEZuWDo06DUQwKp43PA+Nzb3SF1raeO9lX/76Ubn+WETbPfnX/nDVf4Hv7fGYfPs1k9TaVf5Hh3M4/E4wniYr9/vf1lePB7R7LGe3Y4jDMvxhW71HNvmemxUt/rHz8Vu9e2cltfhRIi3f3/iezos7zHQ2Zf2/xsMIzssDXoFBOxY8by5pazE43l9MT5RE99bE99XE99fEz9QE4dR9tc3/pgWq7X/+fE/fb/7w8p+tody+n991ifuj+y3/Hjeb78etPx4PjHsZL8898mf7/zu1j/j+f9fh/P/T+ff0sm8gij7C+N+9da5/+HC4EaXfIdDfR7qkH/l+ZH1+aoja8tJbeuZ++oxvX6+Q93yHV+fbzLk25+3RfaG+sbtk/1hvrL9Udar5fUaD+1thnbsCfUo78xUTveG9kx1a1fYkb0n5Gvm4f9Du46Edj0c5vtGaFc1vb5dcf95qc/RMD0eJyn5wtt23+9SfC/idRmP5PTtnL6f049z+nmHckdR+Tx2O/+/fD6nU7N66fLCpSfyePmcfjLWnFie/uQ21xt4cL1e/zOd1l//c7A1vdloXy8cWpteta8XJsP0812m/zCPl9+zX4/tW5k+c/GVhV9tduNhxF17863fvriwcOl1TzzxxJPWk0GvmYCtNvvGlVdnr7351rnLV158+dLLl65e+MmPzj8x9+MLF2ZXNutn2zfugV1l7Ud/0DUBAAAAAAAAAAAAelbt6zw5p3X3ty3Xk5fr0+P18QyH8r6VT0O5j0G5/rPbfV3K9ZtT21BHNt92XE406DYCnf3X/X8NhpEdlpbcxR/YGQbd/1+572FJr/79Z3uXh5Lt9tPr15fx/oXwIHZ6/3PK3139/7X6v+p5/Rd6zJrcWLlX7j16s63YdKzX8mP7y31gj/RX/tVcfmnN2dRb+Ut/CuXHG5X26JVQ/v4ey7+v/cc3Vv6rufzysj1+utfyV2tcNdbXI+43LvcBjPuNi9dC+8u9/fpu/wY7ans9lw+jbFj6mezXsPT/2U1ZblkP5tVz6zhduf927O+g3/qX+36X34GHw/Krmt83/X8Ot7r+P8vnb1b/n7DrfOb4n8EwssPS0tJAuz4Z1X5XdopBv/6D3oYcdPmDfv3rxP4/4/+l2P9njMf+P2M89v8Z47F/rRiP/X/G1zP2/xnjR8NyY/+g0zXxb9bEj9XEv1UTP14Tj//fYvxUTfxETfxkTfxwTfyRmvjpmvijNfEzNfHHauKP18R3u+/kdFTbD6Ms9hvp+w+joxz/6fb9P1ITB4ZX7Nc5fr/P1sSB4VXO8/D9hhFUdb5jR9zfXvbjvp3T93P6cU4/37IKsh2+m9Pv5fT7Of1BTs/ldCansznVNeRw+8N/jp1YrNbO8zsU4r2eTxqvB4j3iXmyx/rE43P9ns96tMdytqr8DV4OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0GiuPc3PTVUrvffTuM/8+95vDy1NOtnKcWnkcz2PzKaVmSqnK4+NheTcmVtOvvrh+sVNapfMrj2U8PX+7Ne+B5fnTqXQrTaanXrhz78PFZ59bnDpz8+g7n97dmtavqba6AAAAABig/wUAAP//vrPsgA==") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 1m24.670709597s ago: executing program 4 (id=205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfa, {0x0, 0x0, 0x0, r2, {0x3}, {0x808}, {0x2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0xf, 0xfff, 0x4, 0x8, 0xd20b, 0x2, 0xe48c, 0xe16, 0xb, 0x102, 0x5, 0x7ad5785a, 0x0, 0x7, 0x4, 0x2, 0x7, 0x7f, 0x7, 0x3, 0x7, 0x9, 0x8, 0x9a6, 0x3518, 0x8, 0x0, 0x6, 0x0, 0x7, 0xfffffffd, 0x7, 0x1, 0xc, 0x15, 0x6, 0x7, 0x4, 0x6, 0x3, 0x8, 0xb, 0xd5aa, 0xfff, 0x8, 0x4, 0x1, 0xfff, 0xffff, 0x4, 0xb, 0x1, 0x7, 0x101, 0x6, 0x75a, 0x0, 0x5, 0x3, 0x400, 0xfffffff7, 0x6, 0xfffffff8, 0xfffffe00, 0x3, 0x7fffffff, 0xd, 0x4, 0x21, 0x4a, 0x3, 0x5, 0x5, 0x2, 0x0, 0x4, 0x3, 0x8, 0x4, 0x2, 0x10, 0x2, 0x4, 0x10000000, 0x6, 0x80000001, 0x3b, 0x8, 0x2, 0x9, 0x800, 0x1, 0x8001, 0x6, 0x2a, 0xffffffff, 0x0, 0x401, 0x8, 0xffffffff, 0x1, 0xa479, 0x7, 0x2, 0x6, 0x8a8, 0x7, 0x2, 0x8, 0x6, 0x4, 0x2, 0x0, 0xba5, 0x7, 0x74a3ae00, 0x9, 0x200, 0x7fec, 0x5, 0xffffffff, 0x478, 0x8001, 0x1, 0x2, 0x9, 0x8f69, 0xe, 0x4b4, 0x2, 0x2, 0x4, 0x8000, 0x5, 0x6, 0xe26, 0xffffffff, 0x4, 0x8, 0xea98f1e, 0x900000, 0x5, 0xd, 0x8, 0xdc3d, 0x8, 0x40, 0x5, 0x81, 0x9, 0x6, 0xfff, 0x400, 0x1, 0x1, 0x13bd0de8, 0xae2, 0xb0e, 0x9, 0x5, 0x40, 0x5, 0x1, 0x8, 0x7, 0x9e1b, 0x7f, 0xe40e, 0xc4, 0xa, 0x152, 0x9d, 0x7ff, 0x0, 0x8, 0x8, 0xc0, 0x2, 0x52e9, 0x1ff, 0x83c, 0x8, 0x2, 0x6, 0x7bfe, 0x8, 0xd8a, 0x765, 0x6, 0xe247, 0x3, 0x80200, 0x8, 0xe, 0x7, 0x5, 0x7, 0x7, 0x0, 0x9, 0x44, 0x7, 0x3, 0x54d, 0x6fd2, 0x6, 0x3, 0x7, 0x9, 0x1, 0xffffffff, 0x7fff, 0xfff, 0xd7, 0xb90, 0x6, 0xaec, 0x9, 0xfffffffb, 0xe, 0x407, 0xffff, 0x1, 0x1, 0x6, 0x2, 0xffffffff, 0x2, 0x200, 0x6, 0x1, 0x49f, 0x6, 0x0, 0x1000, 0x8000, 0x4, 0x4, 0xfffffff8, 0x9, 0x3, 0x7, 0x1, 0x6, 0xdee, 0x3, 0x9, 0x6, 0xfffffffa, 0x8, 0x8, 0x3, 0x9, 0x5, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 1m22.096119646s ago: executing program 4 (id=216): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x5}, 0x0) close(0x3) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 1m21.806129433s ago: executing program 32 (id=216): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x5}, 0x0) close(0x3) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 1m21.715644648s ago: executing program 0 (id=219): sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000540)={0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd, 0x4a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000c5}, 0x8050) r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000340)={'syz', 0x0}, &(0x7f00000006c0)='Z', 0x1, r0) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}}) 1m21.434907334s ago: executing program 0 (id=222): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x5c, 0x0, 0xfffffffffe000001}) 1m20.752811774s ago: executing program 0 (id=225): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0x60) fsync(r0) 1m20.103630412s ago: executing program 0 (id=228): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0xa08803, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES16=r0], 0x1, 0x6b8, &(0x7f0000000440)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0) setxattr$incfs_id(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) 1m19.461766269s ago: executing program 0 (id=232): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, 0x0) 1m18.220127261s ago: executing program 0 (id=236): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xd2, @time={0x95}}) 1m17.647733195s ago: executing program 33 (id=236): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xd2, @time={0x95}}) 25.400531166s ago: executing program 5 (id=588): r0 = socket$kcm(0x10, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602200000000e000a00140000000280", 0x2a}, {&(0x7f0000000400)="6a718e5e", 0x4}], 0x2}, 0x0) 24.937841123s ago: executing program 5 (id=594): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{0x8, 0xf, 0x3, 0xffa}, 'syz0\x00', 0x3e}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x39, {0x9, 0xd, 0x2040000, 0x3, 0xfffffffd, 0xfffffffe}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 24.584368624s ago: executing program 5 (id=598): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x2c, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}, [{0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x0) 24.039110865s ago: executing program 5 (id=603): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000e00)='./file0\x00', 0x480, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRES8, @ANYRESDEC, @ANYRES64], 0x0, 0xdab, &(0x7f0000000e80)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 23.187889875s ago: executing program 5 (id=607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x20000002, 0x25dfdc02, {{}, {@val={0x8, 0x3, r3}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) 22.05857618s ago: executing program 5 (id=612): getpid() set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) r0 = syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8, &(0x7f0000002500)=ANY=[], 0x1, 0x1dd, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x803) 21.423826827s ago: executing program 34 (id=612): getpid() set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) r0 = syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8, &(0x7f0000002500)=ANY=[], 0x1, 0x1dd, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x803) 18.710553735s ago: executing program 6 (id=633): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0x1000000000000005, 0x0) r1 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x11, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 17.700034193s ago: executing program 6 (id=638): add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000107b8af8ff00000000bfa20000000000000702000000ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.451384827s ago: executing program 6 (id=640): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f00000000c0)=0x800008, 0x4) write(r0, &(0x7f0000000000)="08001800000020a3", 0x8) read(r0, &(0x7f00000003c0)=""/14, 0xe) 17.160083654s ago: executing program 6 (id=643): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000e00)='./file0\x00', 0x480, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRES8, @ANYRESDEC, @ANYRES64], 0x0, 0xdab, &(0x7f0000000e80)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 16.510994192s ago: executing program 6 (id=648): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000002c0)="34d7ebbe", 0x4, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@chain={'key_or_keyring:', r2}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r1}) 12.023450902s ago: executing program 6 (id=665): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x7, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x10, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xf0ce7f2da3454182}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0}, 0x8000) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x2, @empty, 0xc}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 11.420389918s ago: executing program 35 (id=665): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x7, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x10, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xf0ce7f2da3454182}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0}, 0x8000) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x2, @empty, 0xc}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3.368342375s ago: executing program 3 (id=710): rt_sigprocmask(0x2, &(0x7f0000000000)={[0x3]}, 0x0, 0x8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x2, 0x0, 0x0) 3.008590486s ago: executing program 1 (id=713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x2000c010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) 2.93624343s ago: executing program 3 (id=714): ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{0x0, 0x0, 0xd, 0x6}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8000000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x80000001, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2808044, &(0x7f0000001980)={[{@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@uni_xlateno}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@rodir}, {@uni_xlateno}]}, 0x1, 0x294, &(0x7f0000000500)="$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") execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.780220069s ago: executing program 1 (id=715): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpgid(0x0) kcmp(r2, r3, 0x0, r0, r1) 2.677281305s ago: executing program 3 (id=716): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffffffa57) 2.492016266s ago: executing program 1 (id=718): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200454, &(0x7f0000000000), 0x1, 0x236, &(0x7f0000000300)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) 2.08206551s ago: executing program 1 (id=720): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000000)=ANY=[@ANYBLOB="6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00ecb1696642cb97380abf69dce83f1c1dd0eb96506352e4c7d6b88109eebe378da654d5d91d6a45e65053658f366b87b26180bdb0a0e2ef4103c4336999ae591f101bac606a7595fc5a131d32d3723526dc1d4b5c1ce2f300a7eb59286590c97f58ae092a495a425b0bec6265"], 0x1, 0x9e15, &(0x7f000000a040)="$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") ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x20) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) 1.523880452s ago: executing program 3 (id=723): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x30, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x30}}, 0x20008044) 1.521827142s ago: executing program 1 (id=724): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0xe9a8b70, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.261894907s ago: executing program 3 (id=726): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.097351587s ago: executing program 3 (id=727): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f0000000100)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}, {0xa001, 0x6011, 0x0, 0x0}], 0x2}) 1.051045869s ago: executing program 2 (id=728): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000002080)=""/4140, 0x0, 0x102c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 976.547914ms ago: executing program 2 (id=729): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000e40)="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", 0xbba}], 0x1}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x5, 0xa, 0xa, 0x209, 0x40}, 0x50) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x40004140) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000180), 0x3ff, r0}, 0x38) 615.478285ms ago: executing program 2 (id=730): r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RXATTRWALK(r1, 0x0, 0x0) 549.743618ms ago: executing program 1 (id=731): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000010010000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="dc02000011000400140012800b0001006d61637365630000040002800a0001"], 0x40}}, 0x800) 305.693463ms ago: executing program 2 (id=732): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x81, 0x8, 0x1, 0x6}, 0x10) 169.6471ms ago: executing program 2 (id=733): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) 0s ago: executing program 2 (id=734): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5800003a, r0, 0x0) read$FUSE(r1, &(0x7f0000004fc0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): [ 97.934639][ T126] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 97.940957][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.956071][ T126] cdc_wdm 5-1:1.0: Unknown control protocol [ 97.982499][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.002230][ T14] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.030002][ T14] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 98.045849][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.124458][ T4350] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.277170][ T14] usb 4-1: usb_control_msg returned -32 [ 98.283412][ T14] usbtmc 4-1:16.0: can't read capabilities [ 98.294402][ T126] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.334427][ T4350] usb 2-1: Using ep0 maxpacket: 32 [ 98.342020][ T4350] usb 2-1: config 0 has an invalid interface number: 153 but max is 0 [ 98.350569][ T4350] usb 2-1: config 0 has no interface number 0 [ 98.358125][ T4350] usb 2-1: config 0 interface 153 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 98.368915][ T4350] usb 2-1: config 0 interface 153 has no altsetting 0 [ 98.380986][ T4350] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=ef.ae [ 98.391110][ T4350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.401008][ T4350] usb 2-1: Product: syz [ 98.406051][ T4350] usb 2-1: Manufacturer: syz [ 98.410709][ T4350] usb 2-1: SerialNumber: syz [ 98.417955][ T4350] usb 2-1: config 0 descriptor?? [ 98.423715][ T4708] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 98.484383][ T126] usb 1-1: Using ep0 maxpacket: 16 [ 98.491662][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.507027][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.517501][ T126] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 98.527128][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.535885][ T4326] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 98.547052][ T126] usb 1-1: config 0 descriptor?? [ 98.648631][ T4350] asix: probe of 2-1:0.153 failed with error -71 [ 98.669289][ T4350] usb 2-1: USB disconnect, device number 3 [ 98.746418][ T4326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.763997][ T4326] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 98.773675][ T4326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.786823][ T4326] usb 3-1: config 0 descriptor?? [ 98.857078][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 98.864369][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 98.870884][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 98.877799][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 98.885108][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 98.891793][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 98.899240][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 98.906076][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 98.913624][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 98.920286][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 98.927614][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 98.934380][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 98.941274][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 98.947934][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 98.955233][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 98.961901][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 98.968342][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 98.974987][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 98.984776][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 98.991795][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 99.000170][ T126] apple 0003:05AC:0247.0004: unexpected long global item [ 99.010975][ T126] apple 0003:05AC:0247.0004: parse failed [ 99.017011][ T126] apple: probe of 0003:05AC:0247.0004 failed with error -22 [ 99.030706][ T4311] usb 5-1: USB disconnect, device number 2 [ 99.030967][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 99.212861][ T4333] usb 1-1: USB disconnect, device number 4 [ 99.231777][ T4326] lenovo 0003:17EF:6047.0005: unknown main item tag 0x1 [ 99.267207][ T4326] lenovo 0003:17EF:6047.0005: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 99.653736][ T4728] device syzkaller1 entered promiscuous mode [ 99.832030][ T4326] lenovo 0003:17EF:6047.0005: Fn-lock setting failed: -71 [ 99.846226][ T4326] lenovo 0003:17EF:6047.0005: Sensitivity setting failed: -71 [ 99.890053][ T4326] usb 3-1: USB disconnect, device number 5 [ 100.177154][ T4733] fido_id[4733]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 100.434169][ T4735] loop4: detected capacity change from 0 to 2048 [ 100.513770][ T4326] usb 4-1: USB disconnect, device number 3 [ 100.585642][ T4735] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 100.690206][ T26] audit: type=1800 audit(1771304472.584:57): pid=4735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.143" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 100.864226][ C0] sched: RT throttling activated [ 100.917734][ T4731] loop0: detected capacity change from 0 to 131072 [ 100.940008][ T4731] F2FS-fs (loop0): QUOTA feature is enabled, so ignore qf_name [ 100.970125][ T4731] F2FS-fs (loop0): invalid crc value [ 100.984392][ T4731] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 101.040592][ T4731] F2FS-fs (loop0): recover fsync data on readonly fs [ 101.049108][ T4731] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 101.127803][ T4731] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=ba0003, run fsck to fix. [ 101.486501][ T26] audit: type=1800 audit(1771304473.384:58): pid=4742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.143" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 101.511468][ T4735] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 101.571135][ T4735] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1568 with error 28 [ 101.636311][ T4735] EXT4-fs (loop4): This should not happen!! Data will be lost [ 101.636311][ T4735] [ 101.671585][ T4751] loop9: detected capacity change from 0 to 7 [ 101.675784][ T4735] EXT4-fs (loop4): Total free blocks count 0 [ 101.685561][ T26] audit: type=1326 audit(1771304473.584:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3525b9bf79 code=0x7fc00000 [ 101.720176][ T4377] Dev loop9: unable to read RDB block 7 [ 101.727064][ T4735] EXT4-fs (loop4): Free/Dirty block details [ 101.727719][ T4377] loop9: unable to read partition table [ 101.763926][ T4735] EXT4-fs (loop4): free_blocks=2415919504 [ 101.766287][ T4753] netlink: 24 bytes leftover after parsing attributes in process `syz.3.149'. [ 101.780585][ T4735] EXT4-fs (loop4): dirty_blocks=1568 [ 101.786826][ T4377] loop9: partition table beyond EOD, truncated [ 101.813821][ T4735] EXT4-fs (loop4): Block reservation details [ 101.826033][ T4751] Dev loop9: unable to read RDB block 7 [ 101.834169][ T4735] EXT4-fs (loop4): i_reserved_data_blocks=98 [ 101.854028][ T4751] loop9: unable to read partition table [ 101.894704][ T4751] loop9: partition table beyond EOD, truncated [ 101.911322][ T4751] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 102.065393][ T4737] loop1: detected capacity change from 0 to 32768 [ 102.178583][ T4737] XFS (loop1): Mounting V5 Filesystem [ 102.216346][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 102.456319][ T4737] XFS (loop1): Ending clean mount [ 102.481764][ T4775] loop0: detected capacity change from 0 to 4096 [ 102.490373][ T4737] XFS (loop1): Quotacheck needed: Please wait. [ 102.596053][ T4737] XFS (loop1): Quotacheck: Done. [ 102.640892][ T4775] ntfs3: loop0: ino=5, "/" directory corrupted [ 102.674061][ T4775] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 102.719129][ T4775] ntfs3: loop0: ino=5, "/" directory corrupted [ 102.792305][ T4267] XFS (loop1): Unmounting Filesystem [ 103.388752][ T4781] loop0: detected capacity change from 0 to 40427 [ 103.415083][ T4781] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 103.427280][ T4781] F2FS-fs (loop0): invalid crc value [ 103.441913][ T4781] F2FS-fs (loop0): Found nat_bits in checkpoint [ 103.491539][ T4781] F2FS-fs (loop0): recover fsync data on readonly fs [ 103.500650][ T4781] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 103.507896][ T4781] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 103.527955][ T4781] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 103.574385][ T4311] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.773863][ T4311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.797762][ T4311] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 103.863737][ T4311] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 103.915159][ T4311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.958308][ T26] audit: type=1326 audit(1771304475.854:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.0.162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcb1b9bf79 code=0x0 [ 103.995164][ T4311] usb 5-1: config 0 descriptor?? [ 104.434717][ T4311] kovaplus 0003:1E7D:2D50.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 104.620721][ T4811] loop1: detected capacity change from 0 to 256 [ 104.693519][ T4811] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 104.957586][ T4817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 104.984334][ T4817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 105.030942][ T4311] kovaplus 0003:1E7D:2D50.0006: couldn't init struct kovaplus_device [ 105.048106][ T4311] kovaplus 0003:1E7D:2D50.0006: couldn't install mouse [ 105.096334][ T4311] kovaplus: probe of 0003:1E7D:2D50.0006 failed with error -71 [ 105.180656][ T4311] usb 5-1: USB disconnect, device number 3 [ 105.193644][ T4798] loop3: detected capacity change from 0 to 40427 [ 105.242223][ T4798] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 105.267461][ T4798] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x2 [ 105.288499][ T4798] F2FS-fs (loop3): invalid crc value [ 105.307885][ T4798] F2FS-fs (loop3): Found nat_bits in checkpoint [ 105.319343][ T4823] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.631104][ T4798] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 105.954039][ T4827] fido_id[4827]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 106.163325][ T4276] syz-executor: attempt to access beyond end of device [ 106.163325][ T4276] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 106.289830][ T4842] device veth1_to_hsr entered promiscuous mode [ 106.329843][ T4842] device macvlan2 entered promiscuous mode [ 106.720648][ T4849] loop4: detected capacity change from 0 to 2048 [ 106.841711][ T4849] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 106.874415][ T4311] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.990855][ T4458] udevd[4458]: incorrect nilfs2 checksum on /dev/loop4 [ 106.994336][ T4856] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.066318][ T4311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.088755][ T4853] loop1: detected capacity change from 0 to 4096 [ 107.107956][ T4311] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 107.130685][ T4853] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 107.176377][ T4311] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 107.224185][ T4311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.311619][ T4311] usb 1-1: config 0 descriptor?? [ 107.353796][ T4856] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 107.389709][ T4856] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 107.498061][ T4856] Remounting filesystem read-only [ 107.529221][ T4272] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 107.801313][ T4311] kovaplus 0003:1E7D:2D50.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 107.988411][ T126] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 107.998198][ T4311] kovaplus 0003:1E7D:2D50.0007: couldn't init struct kovaplus_device [ 108.012033][ T4311] kovaplus 0003:1E7D:2D50.0007: couldn't install mouse [ 108.039510][ T4872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'. [ 108.056334][ T4311] kovaplus: probe of 0003:1E7D:2D50.0007 failed with error -71 [ 108.072636][ T4311] usb 1-1: USB disconnect, device number 5 [ 108.119690][ T4874] loop4: detected capacity change from 0 to 1024 [ 108.199843][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 108.239982][ T126] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 108.284318][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.325427][ T126] usb 4-1: config 0 descriptor?? [ 108.355696][ T4863] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 108.419138][ T4875] fido_id[4875]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 108.892690][ T126] elan 0003:04F3:0755.0008: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 109.062450][ T4867] loop1: detected capacity change from 0 to 32768 [ 109.140598][ T126] usb 4-1: USB disconnect, device number 4 [ 109.151590][ T4867] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.191 (4867) [ 109.269006][ T4893] fido_id[4893]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 109.307841][ T4867] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.342992][ T4867] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 109.371987][ T4867] BTRFS info (device loop1): using free space tree [ 109.383302][ T4898] loop4: detected capacity change from 0 to 4096 [ 109.460676][ T4906] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.625117][ T4867] BTRFS info (device loop1): enabling ssd optimizations [ 110.260012][ T4267] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.484618][ T4311] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 110.513528][ T4928] loop0: detected capacity change from 0 to 8192 [ 110.561377][ T4900] loop2: detected capacity change from 0 to 32768 [ 110.629292][ T4928] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 110.667369][ T4928] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 110.681204][ T4928] REISERFS (device loop0): using ordered data mode [ 110.688474][ T4928] reiserfs: using flush barriers [ 110.696360][ T4928] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 110.698767][ T4311] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 110.714938][ T4928] REISERFS (device loop0): checking transaction log (loop0) [ 110.759959][ T26] audit: type=1800 audit(1771304482.654:61): pid=4900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.204" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 110.806419][ T4311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.835343][ T4311] usb 4-1: Product: syz [ 110.839773][ T4311] usb 4-1: Manufacturer: syz [ 110.844783][ T4311] usb 4-1: SerialNumber: syz [ 110.894354][ T4311] usb 4-1: config 0 descriptor?? [ 110.999193][ T4928] REISERFS (device loop0): Using tea hash to sort names [ 111.053149][ T4928] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 111.112913][ T4311] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 111.303287][ T4928] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 111.677060][ T4941] netlink: 20 bytes leftover after parsing attributes in process `syz.1.213'. [ 111.926907][ T4945] netlink: 'syz.1.214': attribute type 1 has an invalid length. [ 111.935923][ T4311] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 111.979890][ T4311] usb 4-1: USB disconnect, device number 5 [ 112.128551][ T4354] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.227925][ T4354] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.333698][ T4354] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.450163][ T126] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.462313][ T4354] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.644392][ T126] usb 2-1: Using ep0 maxpacket: 16 [ 112.653548][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.704555][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.755379][ T126] usb 2-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 112.807657][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.847709][ T126] usb 2-1: config 0 descriptor?? [ 112.960147][ T4962] loop3: detected capacity change from 0 to 256 [ 113.032246][ T4962] exfat: Deprecated parameter 'utf8' [ 113.059125][ T4962] exfat: Deprecated parameter 'namecase' [ 113.092476][ T4964] loop0: detected capacity change from 0 to 512 [ 113.109076][ T4962] exfat: Deprecated parameter 'namecase' [ 113.125041][ T4962] exfat: Deprecated parameter 'utf8' [ 113.201550][ T4962] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 113.248064][ T4964] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 113.325691][ T4964] ext4 filesystem being mounted at /43/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.371119][ T26] audit: type=1800 audit(1771304485.264:62): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.222" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 113.437303][ T126] wacom 0003:056A:0333.0009: hidraw0: USB HID v0.81 Device [HID 056a:0333] on usb-dummy_hcd.1-1/input0 [ 113.587023][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 113.605458][ T4326] usb 2-1: USB disconnect, device number 4 [ 113.842505][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.863094][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.872441][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.884123][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.892361][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 113.899796][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.950287][ T4350] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 113.968600][ T4977] fido_id[4977]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 114.006522][ T4985] input: syz0 as /devices/virtual/input/input10 [ 114.172580][ T4350] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 114.196324][ T4350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.251459][ T4350] usb 3-1: config 0 descriptor?? [ 114.279324][ T4350] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 114.511057][ T4997] loop0: detected capacity change from 0 to 1024 [ 114.564447][ T4340] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 114.658955][ T4997] hfsplus: hfsplus: Invalid key length: 29235 [ 114.708932][ T4350] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 114.755110][ T4340] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 114.767890][ T5004] loop3: detected capacity change from 0 to 512 [ 114.775339][ T4340] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.801187][ T4340] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.832946][ T4340] usb 2-1: config 0 interface 0 has no altsetting 0 [ 114.877959][ T4340] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.907988][ T4340] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.961764][ T4340] usb 2-1: config 0 interface 0 has no altsetting 0 [ 114.986698][ T4340] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.013348][ T4340] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.043810][ T4980] chnl_net:caif_netlink_parms(): no params data found [ 115.048055][ T4340] usb 2-1: config 0 interface 0 has no altsetting 0 [ 115.085367][ T4340] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.112204][ T4340] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.123933][ T4350] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 115.134163][ T4340] usb 2-1: config 0 interface 0 has no altsetting 0 [ 115.164547][ T4340] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.187805][ T5004] loop3: detected capacity change from 0 to 8192 [ 115.194282][ T4340] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.194317][ T4340] usb 2-1: config 0 interface 0 has no altsetting 0 [ 115.216287][ T4340] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.244337][ T4340] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.275491][ T4340] usb 2-1: config 0 interface 0 has no altsetting 0 [ 115.302490][ T4340] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.327029][ T4340] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.340904][ T4340] usb 2-1: config 0 interface 0 has no altsetting 0 [ 115.374591][ T4311] usb 3-1: USB disconnect, device number 6 [ 115.392082][ T4340] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.415606][ T4340] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.426759][ T4340] usb 2-1: config 0 interface 0 has no altsetting 0 [ 115.440403][ T4340] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 115.452314][ T4340] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 115.461467][ T4340] usb 2-1: Product: syz [ 115.469070][ T4340] usb 2-1: Manufacturer: syz [ 115.474151][ T4340] usb 2-1: SerialNumber: syz [ 115.503933][ T4340] usb 2-1: config 0 descriptor?? [ 115.550518][ T4340] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 115.930918][ T4326] usb 2-1: USB disconnect, device number 5 [ 115.954540][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 115.968361][ T5019] loop3: detected capacity change from 0 to 512 [ 115.970930][ T11] hfsplus: b-tree write err: -5, ino 8 [ 115.976970][ T5019] EXT4-fs: Ignoring removed oldalloc option [ 115.988030][ T4326] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 116.010656][ T5019] EXT4-fs (loop3): 1 truncate cleaned up [ 116.035068][ T5019] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 116.320160][ T4980] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.327765][ T4980] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.344485][ T4980] device bridge_slave_0 entered promiscuous mode [ 116.383661][ T4980] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.407986][ T4980] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.416970][ T4980] device bridge_slave_1 entered promiscuous mode [ 116.461926][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 116.469831][ T4354] device hsr_slave_0 left promiscuous mode [ 116.511534][ T4354] device hsr_slave_1 left promiscuous mode [ 116.530290][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.541795][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.554148][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.569040][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.580824][ T4354] device bridge_slave_1 left promiscuous mode [ 116.599203][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.613902][ T4354] device bridge_slave_0 left promiscuous mode [ 116.626183][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.711280][ T4354] device veth1_to_hsr left promiscuous mode [ 116.738269][ T4354] device veth1_macvtap left promiscuous mode [ 116.763296][ T4354] device veth0_macvtap left promiscuous mode [ 116.774151][ T4354] device veth1_vlan left promiscuous mode [ 116.786262][ T4354] device veth0_vlan left promiscuous mode [ 117.095367][ T4282] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 117.107076][ T4282] CPU: 0 PID: 4282 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 117.114693][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.124796][ T4282] Workqueue: hci3 hci_rx_work [ 117.129530][ T4282] Call Trace: [ 117.132845][ T4282] [ 117.135830][ T4282] dump_stack_lvl+0x188/0x24e [ 117.140570][ T4282] ? show_regs_print_info+0x12/0x12 [ 117.145833][ T4282] ? load_image+0x400/0x400 [ 117.150406][ T4282] sysfs_create_dir_ns+0x26a/0x290 [ 117.155572][ T4282] ? sysfs_warn_dup+0xa0/0xa0 [ 117.160300][ T4282] ? do_raw_spin_unlock+0x11d/0x230 [ 117.165636][ T4282] kobject_add_internal+0x61c/0xcc0 [ 117.170909][ T4282] kobject_add+0x160/0x230 [ 117.175375][ T4282] ? kobject_init+0x1d0/0x1d0 [ 117.180121][ T4282] ? klist_children_get+0x50/0x50 [ 117.185198][ T4282] ? get_device_parent+0x121/0x3f0 [ 117.190378][ T4282] device_add+0x483/0xfb0 [ 117.194762][ T4282] ? kmem_cache_free+0xf7/0x290 [ 117.199671][ T4282] hci_conn_add_sysfs+0xd1/0x1e0 [ 117.204782][ T4282] le_conn_complete_evt+0x105f/0x1670 [ 117.210223][ T4282] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 117.216527][ T4282] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 117.222222][ T4282] ? skb_pull_data+0xf7/0x200 [ 117.226966][ T4282] hci_le_conn_complete_evt+0x183/0x440 [ 117.232567][ T4282] ? hci_remote_host_features_evt+0x270/0x270 [ 117.238689][ T4282] hci_event_packet+0x7b6/0x1280 [ 117.243700][ T4282] ? bis_list+0x280/0x280 [ 117.248080][ T4282] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 117.254025][ T4282] ? kcov_remote_start+0x4c7/0x7e0 [ 117.259187][ T4282] ? bt_warn+0x30/0x180 [ 117.263401][ T4282] ? hci_send_to_monitor+0x9c/0x4a0 [ 117.268668][ T4282] hci_rx_work+0x3eb/0xd40 [ 117.273128][ T4282] ? _raw_spin_unlock+0x40/0x40 [ 117.278039][ T4282] ? process_one_work+0x7b0/0x1160 [ 117.283199][ T4282] process_one_work+0x8a2/0x1160 [ 117.288287][ T4282] ? worker_detach_from_pool+0x240/0x240 [ 117.294017][ T4282] ? _raw_spin_lock_irq+0xb7/0xf0 [ 117.299181][ T4282] ? _raw_spin_lock_irqsave+0x100/0x100 [ 117.304783][ T4282] ? kthread_data+0x4b/0xc0 [ 117.309353][ T4282] worker_thread+0xaa2/0x1270 [ 117.314110][ T4282] kthread+0x29d/0x330 [ 117.318228][ T4282] ? worker_clr_flags+0x1a0/0x1a0 [ 117.323310][ T4282] ? kthread_blkcg+0xd0/0xd0 [ 117.327973][ T4282] ret_from_fork+0x1f/0x30 [ 117.332467][ T4282] [ 117.340752][ T4282] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 117.354618][ T4282] Bluetooth: hci3: failed to register connection device [ 117.496875][ T4271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.507258][ T4271] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.515871][ T4271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.524152][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.532023][ T4271] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 117.539490][ T4271] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 117.590733][ T5043] loop3: detected capacity change from 0 to 8 [ 118.034435][ T4271] Bluetooth: hci2: command 0x041b tx timeout [ 118.413266][ T4354] team0 (unregistering): Port device team_slave_1 removed [ 118.486047][ T4354] team0 (unregistering): Port device team_slave_0 removed [ 118.559645][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.655589][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.896367][ T4326] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.962780][ T4354] bond0 (unregistering): Released all slaves [ 119.079475][ T5030] netlink: 'syz.2.239': attribute type 2 has an invalid length. [ 119.115648][ T4326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.142379][ T4326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.159101][ T4326] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.172801][ T4326] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.189808][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.224716][ T4326] usb 4-1: config 0 descriptor?? [ 119.254469][ T4980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.306327][ T4980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.434911][ T4980] team0: Port device team_slave_0 added [ 119.549525][ T4980] team0: Port device team_slave_1 added [ 119.585494][ T5057] netlink: 'syz.1.247': attribute type 39 has an invalid length. [ 119.634637][ T4271] Bluetooth: hci1: command 0x0409 tx timeout [ 119.652429][ T4326] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 119.663157][ T5062] loop2: detected capacity change from 0 to 256 [ 119.743067][ T4326] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 119.774153][ T4980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.806085][ T4980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.844663][ T4980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.889874][ T4980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.907081][ T4980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.032134][ T4980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.114314][ T4271] Bluetooth: hci2: command 0x040f tx timeout [ 120.200467][ T4980] device hsr_slave_0 entered promiscuous mode [ 120.230234][ T4980] device hsr_slave_1 entered promiscuous mode [ 120.568734][ T5040] chnl_net:caif_netlink_parms(): no params data found [ 120.773503][ T4354] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.998820][ T4354] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.071612][ T5092] input: syz0 as /devices/virtual/input/input11 [ 121.196432][ T4354] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.244827][ T5095] capability: warning: `syz.1.256' uses deprecated v2 capabilities in a way that may be insecure [ 121.261009][ T5040] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.271961][ T5040] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.302581][ T5040] device bridge_slave_0 entered promiscuous mode [ 121.388106][ T4354] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.432084][ T5040] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.458337][ T5040] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.482397][ T5040] device bridge_slave_1 entered promiscuous mode [ 121.597308][ T5040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.612919][ T5102] loop2: detected capacity change from 0 to 2048 [ 121.637096][ T4980] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 121.664130][ T5102] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 121.693325][ T5040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.714536][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 121.728562][ T4980] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 121.770889][ T5102] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.784980][ T4980] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 121.829559][ T126] usb 4-1: USB disconnect, device number 6 [ 121.892584][ T4980] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 121.985463][ T5040] team0: Port device team_slave_0 added [ 122.069130][ T5040] team0: Port device team_slave_1 added [ 122.194464][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 122.200521][ T5040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.219926][ T5040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.323395][ T5040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.368849][ T5040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.380866][ T5040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.407171][ T5040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.683738][ T4980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.839066][ T5040] device hsr_slave_0 entered promiscuous mode [ 122.931004][ T5040] device hsr_slave_1 entered promiscuous mode [ 122.944599][ T5040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.964928][ T5040] Cannot create hsr debugfs directory [ 122.983403][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.011859][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.191041][ T4980] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.396486][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.413221][ T5153] loop3: detected capacity change from 0 to 512 [ 123.421401][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.445578][ T5152] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 123.459984][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.467188][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.474484][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 123.493343][ T5153] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 123.507148][ T5153] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.548539][ T5153] EXT4-fs (loop3): 1 truncate cleaned up [ 123.555166][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.564295][ T5153] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 123.602914][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.675650][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.734903][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.742064][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.753346][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.783779][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.794852][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 123.803191][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 123.941897][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.975168][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.994916][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.036008][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.130542][ T4980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.163703][ T4980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.196728][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.208830][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.228038][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.248844][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.270092][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.390833][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.937150][ T5040] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 125.011135][ T5040] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 125.049010][ T4354] device hsr_slave_0 left promiscuous mode [ 125.085291][ T4354] device hsr_slave_1 left promiscuous mode [ 125.169733][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.194743][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.212043][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.232769][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.305041][ T4354] device bridge_slave_1 left promiscuous mode [ 125.336353][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.485802][ T4354] device bridge_slave_0 left promiscuous mode [ 125.494480][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.812707][ T4354] device veth1_macvtap left promiscuous mode [ 125.819722][ T4354] device veth0_macvtap left promiscuous mode [ 125.854872][ T4354] device veth1_vlan left promiscuous mode [ 125.898667][ T4354] device veth0_vlan left promiscuous mode [ 126.064970][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 127.112020][ T5195] loop1: detected capacity change from 0 to 262144 [ 127.124022][ T5195] F2FS-fs (loop1): invalid crc value [ 127.164319][ T5195] F2FS-fs (loop1): Found nat_bits in checkpoint [ 127.243448][ T5195] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 127.332289][ T5195] F2FS-fs (loop1): sanity_check_inode: inode (ino=7, mode=33261) should not have inline_data, run fsck to fix [ 128.224080][ T4354] team0 (unregistering): Port device team_slave_1 removed [ 128.306855][ T4354] team0 (unregistering): Port device team_slave_0 removed [ 128.379362][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.475704][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.513811][ T5242] loop1: detected capacity change from 0 to 2048 [ 128.905687][ T4318] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 128.948584][ T4354] bond0 (unregistering): Released all slaves [ 129.029553][ T5040] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 129.041518][ T5040] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 129.117485][ T4318] usb 2-1: config 1 has an invalid descriptor of length 73, skipping remainder of the config [ 129.138034][ T4318] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.161429][ T4318] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 129.172976][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 129.181351][ T4318] usb 2-1: SerialNumber: syz [ 129.225048][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.232776][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.377529][ T4980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.418346][ T4318] usb 2-1: 0:2 : does not exist [ 129.434364][ T4318] usb 2-1: unit 89 not found! [ 129.439247][ T4318] usb 2-1: unit 31 not found! [ 129.443989][ T4318] usb 2-1: unit 37 not found! [ 129.464260][ T4318] usb 2-1: unit 235 not found! [ 129.469180][ T4318] usb 2-1: unit 229 not found! [ 129.474007][ T4318] usb 2-1: unit 165 not found! [ 129.515344][ T4318] usb 2-1: unit 71 not found! [ 129.520112][ T4318] usb 2-1: unit 219 not found! [ 129.557799][ T4318] usb 2-1: unit 51 not found! [ 129.576726][ T5040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.584332][ T4318] usb 2-1: unit 231 not found! [ 129.673401][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.728274][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.741587][ T4318] usb 2-1: USB disconnect, device number 6 [ 129.774146][ T4452] udevd[4452]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.799155][ T5040] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.848093][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.879869][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.937708][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.944939][ T4363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.016440][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.104711][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.145187][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.163405][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.170654][ T4294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.203176][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.231191][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.245408][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.285700][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.311853][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.361308][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.409424][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.451571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.478496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.513068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.537747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.566291][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 130.709566][ T4311] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 130.900641][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.905681][ T4311] usb 4-1: Using ep0 maxpacket: 32 [ 130.918440][ T4311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.938449][ T4311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.960080][ T4311] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 130.967330][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.991019][ T4311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.030973][ T4311] usb 4-1: config 0 descriptor?? [ 131.046913][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.086879][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.113141][ T4980] device veth0_vlan entered promiscuous mode [ 131.123368][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.146501][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.180880][ T4980] device veth1_vlan entered promiscuous mode [ 131.324526][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.344928][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.360521][ T4980] device veth0_macvtap entered promiscuous mode [ 131.398803][ T4980] device veth1_macvtap entered promiscuous mode [ 131.426560][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 131.464031][ T4311] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 131.476059][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 131.476798][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.554925][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.583765][ T5040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.623985][ T4980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.660750][ T4980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.712618][ T4980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.740210][ T3598] usb 4-1: USB disconnect, device number 7 [ 131.750647][ T4980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.776921][ T4980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.810589][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.822230][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.841609][ T4980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.884476][ T4980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.904472][ T4980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.941561][ T4980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.972536][ T4980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.986711][ T4980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.999269][ T4980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.016128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.028305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.052596][ T4980] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.072341][ T5311] loop1: detected capacity change from 0 to 256 [ 132.100675][ T5311] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.122030][ T4980] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.152625][ T5311] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 132.167259][ T4980] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.179431][ T4980] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.198566][ T5311] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 132.521546][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.536887][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.633604][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.677974][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.690666][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.719625][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.918897][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.925312][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.944683][ T5330] loop3: detected capacity change from 0 to 1764 [ 133.137365][ T5330] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 133.437050][ T5351] loop3: detected capacity change from 0 to 164 [ 133.490799][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.526295][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.611950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.636507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.662559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.719198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.764408][ T4350] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 133.788336][ T5040] device veth0_vlan entered promiscuous mode [ 133.835690][ T5040] device veth1_vlan entered promiscuous mode [ 133.932054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 133.949679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 133.974858][ T4350] usb 4-1: Using ep0 maxpacket: 16 [ 133.983099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.995607][ T4350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 134.027850][ T5365] loop5: detected capacity change from 0 to 512 [ 134.044502][ T4350] usb 4-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 134.053865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.070786][ T4350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.082338][ T5365] EXT4-fs (loop5): orphan cleanup on readonly fs [ 134.082870][ T5040] device veth0_macvtap entered promiscuous mode [ 134.095498][ T5365] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #4: comm syz.5.326: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 1(1) [ 134.106125][ T5365] EXT4-fs error (device loop5): ext4_quota_enable:7046: comm syz.5.326: Bad quota inode: 4, type: 1 [ 134.127607][ T4350] usb 4-1: config 0 descriptor?? [ 134.136902][ T5365] EXT4-fs warning (device loop5): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 134.162652][ T5040] device veth1_macvtap entered promiscuous mode [ 134.188376][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.199861][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.210514][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.221376][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.231528][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.242991][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.256459][ T5040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.264534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.270768][ T5365] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 134.280572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.288330][ T5365] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 134.301009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.341281][ T4350] usb 4-1: string descriptor 0 read error: -71 [ 134.362769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.380847][ T5365] netlink: 'syz.5.326': attribute type 1 has an invalid length. [ 134.389411][ T4350] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 134.401753][ T5365] netlink: 'syz.5.326': attribute type 3 has an invalid length. [ 134.418644][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.434808][ T5365] netlink: 12 bytes leftover after parsing attributes in process `syz.5.326'. [ 134.451281][ T3623] bcm5974 4-1:0.0: could not read from device [ 134.473495][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.501175][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.512118][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.522585][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.533617][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.557428][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.581886][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.632188][ T4350] usb 4-1: USB disconnect, device number 8 [ 134.639859][ T3623] bcm5974 4-1:0.0: could not read from device [ 134.650452][ T5040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.683646][ T3623] bcm5974 4-1:0.0: could not read from device [ 134.709417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.725977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.815153][ T5040] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.823960][ T5040] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.851086][ T5040] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.865466][ T5040] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.881894][ T5375] device syzkaller1 entered promiscuous mode [ 134.899825][ T4980] EXT4-fs (loop5): unmounting filesystem. [ 135.301255][ T5388] loop2: detected capacity change from 0 to 128 [ 135.313478][ T4933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.334591][ T4350] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 135.367782][ T4933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.404472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 135.512757][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.531883][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.539638][ T4350] usb 6-1: Using ep0 maxpacket: 8 [ 135.555423][ T4350] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 135.592719][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.600529][ T4350] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.620810][ T4350] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.645773][ T4350] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.684075][ T4350] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.717964][ T4350] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 135.738307][ T4350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.154714][ T5401] loop6: detected capacity change from 0 to 32768 [ 136.169223][ T4350] usb 6-1: GET_CAPABILITIES returned 0 [ 136.174974][ T4350] usbtmc 6-1:16.0: can't read capabilities [ 136.245146][ T5401] JBD2: Ignoring recovery information on journal [ 136.287423][ T4340] usb 6-1: USB disconnect, device number 2 [ 136.309295][ T5406] loop2: detected capacity change from 0 to 2048 [ 136.338968][ T5401] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 136.405644][ T5406] loop2: p2 p3 < > p4 < p5 > [ 136.486929][ T3638] loop2: p2 p3 < > p4 < p5 > [ 136.558499][ T26] audit: type=1800 audit(1771304508.454:63): pid=5401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.237" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 136.819632][ T5419] capability: warning: `syz.2.344' uses 32-bit capabilities (legacy support in use) [ 136.875652][ T5040] ocfs2: Unmounting device (7,6) on (node local) [ 136.929532][ T5422] loop1: detected capacity change from 0 to 128 [ 136.949179][ T4458] udevd[4458]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 136.953252][ T4864] udevd[4864]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 136.970916][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 136.982600][ T4377] udevd[4377]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 137.046850][ T5422] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 137.199087][ T4377] udevd[4377]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 137.211708][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 137.222190][ T4831] udevd[4831]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 137.227066][ T4864] udevd[4864]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 137.291025][ T5423] loop3: detected capacity change from 0 to 4096 [ 137.465849][ T5423] ntfs: volume version 3.1. [ 137.620908][ T5423] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 137.717800][ T5423] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 138.212810][ T5453] loop3: detected capacity change from 0 to 512 [ 138.231595][ T5453] EXT4-fs: Ignoring removed orlov option [ 138.268108][ T5453] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 138.278351][ T5457] netlink: 104 bytes leftover after parsing attributes in process `syz.1.357'. [ 138.342241][ T5453] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 138.386714][ T5453] EXT4-fs error (device loop3): ext4_iget_extra_inode:4756: inode #15: comm syz.3.356: corrupted in-inode xattr [ 138.423122][ T5462] loop5: detected capacity change from 0 to 2048 [ 138.446470][ T5462] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 138.501761][ T5462] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 138.526291][ T5453] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.356: couldn't read orphan inode 15 (err -117) [ 138.541889][ T5462] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 138.573855][ T5462] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 138.584061][ T5453] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 138.604383][ T5462] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 138.988329][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 139.009006][ T5476] loop5: detected capacity change from 0 to 256 [ 139.113225][ T5476] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x6f4cd389, utbl_chksum : 0xe619d30d) [ 139.557162][ T4340] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 139.577432][ T5492] loop5: detected capacity change from 0 to 128 [ 139.608498][ T5492] EXT4-fs: Ignoring removed i_version option [ 139.639074][ T5492] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 139.658110][ T5492] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 139.774275][ T4340] usb 4-1: Using ep0 maxpacket: 16 [ 139.781549][ T4340] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.813494][ T4340] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.829645][ T4340] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 139.844651][ T4350] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 139.855088][ T4340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.988332][ T22] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 140.079887][ T4350] usb 3-1: Using ep0 maxpacket: 16 [ 140.103806][ T4350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.139591][ T4350] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 140.153873][ T4350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.194597][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 140.202320][ T22] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.221790][ T22] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.245039][ T4350] usb 3-1: config 0 descriptor?? [ 140.261869][ T22] usb 6-1: config 0 interface 0 has no altsetting 0 [ 140.271399][ T22] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 140.324886][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.342057][ T4340] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 140.352856][ T4333] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 140.373029][ T22] usb 6-1: config 0 descriptor?? [ 140.591670][ T4340] usb 4-1: USB disconnect, device number 9 [ 140.688263][ T4350] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 140.856592][ T22] hid (null): invalid report_count 297079340 [ 140.906044][ T22] hid (null): unknown global tag 0xc [ 140.913927][ T5493] i2c i2c-1: unsupported multi-msg i2c transaction [ 140.970024][ T22] usb 3-1: USB disconnect, device number 7 [ 141.054846][ T4378] usb 6-1: USB disconnect, device number 3 [ 141.260160][ T5530] loop1: detected capacity change from 0 to 256 [ 141.294771][ T5531] loop3: detected capacity change from 0 to 1024 [ 141.311612][ T5531] EXT4-fs: inline encryption not supported [ 141.330074][ T5531] EXT4-fs: Ignoring removed oldalloc option [ 141.340219][ T5531] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.410207][ T5531] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 141.464571][ T4333] usb 7-1: device descriptor read/64, error -71 [ 141.499554][ T5531] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 161808409 free clusters [ 141.623816][ T5531] EXT4-fs (loop3): Remounting filesystem read-only [ 141.688624][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 141.734601][ T4333] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 141.745667][ T4980] EXT4-fs (loop5): unmounting filesystem. [ 141.772448][ T5543] loop1: detected capacity change from 0 to 2048 [ 141.880234][ T5543] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 141.925896][ T4333] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 141.935577][ T4333] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.946936][ T4333] usb 7-1: config 0 descriptor?? [ 141.954702][ T4333] cp210x 7-1:0.0: cp210x converter detected [ 142.014557][ T5543] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.382: inline data xattr refers to an external xattr inode [ 142.178837][ T5543] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.382: inline data xattr refers to an external xattr inode [ 142.360511][ T4333] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 142.415788][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 142.443279][ T4282] Bluetooth: hci1: command 0x2016 tx timeout [ 142.516342][ T4378] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 142.590245][ T4333] usb 7-1: cp210x converter now attached to ttyUSB0 [ 142.706084][ T4378] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 142.721943][ T4378] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 142.766590][ T4378] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 142.836158][ T4378] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 142.867829][ T4378] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 142.921822][ T4350] usb 7-1: USB disconnect, device number 3 [ 142.938833][ T4378] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 142.954799][ T4350] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 142.986035][ T4378] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 143.001439][ T4350] cp210x 7-1:0.0: device disconnected [ 143.018383][ T4378] usb 3-1: Product: syz [ 143.022708][ T4378] usb 3-1: Manufacturer: syz [ 143.091941][ T4378] cdc_wdm 3-1:1.0: skipping garbage [ 143.111801][ T4378] cdc_wdm 3-1:1.0: skipping garbage [ 143.159037][ T4378] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 143.190122][ T5580] loop3: detected capacity change from 0 to 256 [ 143.196354][ T4378] cdc_wdm 3-1:1.0: Unknown control protocol [ 143.241088][ T5580] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 143.603296][ C0] cdc_wdm 3-1:1.0: Unexpected error -71 [ 143.610851][ C0] wdm_int_callback: 26 callbacks suppressed [ 143.610872][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 143.623443][ C0] wdm_int_callback: 26 callbacks suppressed [ 143.623460][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 143.636574][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 143.643233][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 143.649778][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 143.656446][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 143.670547][ T5591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 143.676725][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 143.685985][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 143.692691][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 143.699348][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 143.705864][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 143.712518][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 143.718851][ T4340] usb 3-1: USB disconnect, device number 8 [ 143.902580][ T5598] loop3: detected capacity change from 0 to 64 [ 144.499728][ T5587] loop1: detected capacity change from 0 to 40427 [ 144.525866][ T5587] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 144.555243][ T5587] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 144.600803][ T5587] F2FS-fs (loop1): invalid crc value [ 144.650307][ T5587] F2FS-fs (loop1): Found nat_bits in checkpoint [ 144.733175][ T5621] loop5: detected capacity change from 0 to 128 [ 144.802086][ T5587] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 144.835334][ T5587] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 144.853498][ T5623] syz.5.410: attempt to access beyond end of device [ 144.853498][ T5623] loop5: rw=2049, sector=145, nr_sectors = 128 limit=128 [ 144.936304][ T5626] loop2: detected capacity change from 0 to 256 [ 145.020769][ T5626] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 145.219778][ T4363] kworker/u4:7: attempt to access beyond end of device [ 145.219778][ T4363] loop5: rw=1, sector=273, nr_sectors = 768 limit=128 [ 145.269678][ T5627] loop6: detected capacity change from 0 to 4096 [ 145.415248][ T5627] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 145.520383][ T5631] loop2: detected capacity change from 0 to 2048 [ 145.537218][ T5627] ntfs3: loop6: ino=1e, "file1" attr_set_size [ 145.669430][ T5631] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.339157][ T5611] loop3: detected capacity change from 0 to 40427 [ 146.361320][ T5611] F2FS-fs (loop3): invalid crc value [ 146.434364][ T4271] Bluetooth: hci3: command 0x0406 tx timeout [ 146.443116][ T5611] F2FS-fs (loop3): Found nat_bits in checkpoint [ 146.682575][ T5611] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 147.307416][ T5673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.428'. [ 147.322704][ T5673] netlink: 'syz.5.428': attribute type 30 has an invalid length. [ 147.343916][ T5673] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.353602][ T5673] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.362564][ T5673] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.371631][ T5673] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.443612][ T5674] netlink: 16146 bytes leftover after parsing attributes in process `syz.6.429'. [ 147.475321][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.428'. [ 147.524392][ T5675] netlink: 'syz.5.428': attribute type 30 has an invalid length. [ 147.564623][ T4378] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 147.754280][ T4378] usb 2-1: Using ep0 maxpacket: 16 [ 147.761520][ T4378] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.812776][ T4378] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 147.881776][ T4378] usb 2-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 147.903550][ T4378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.934686][ T4378] usb 2-1: config 0 descriptor?? [ 147.996691][ T5692] input: syz1 as /devices/virtual/input/input13 [ 148.357331][ T4378] kye 0003:0458:0087.000F: unknown main item tag 0x0 [ 148.387545][ T4378] kye 0003:0458:0087.000F: unknown main item tag 0x0 [ 148.402359][ T5706] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 148.423462][ T4378] kye 0003:0458:0087.000F: unknown main item tag 0x0 [ 148.456709][ T4378] kye 0003:0458:0087.000F: unknown main item tag 0x0 [ 148.463486][ T4378] kye 0003:0458:0087.000F: unknown main item tag 0x0 [ 148.560505][ T4378] kye 0003:0458:0087.000F: hidraw0: USB HID v0.06 Device [HID 0458:0087] on usb-dummy_hcd.1-1/input0 [ 148.653301][ T4378] usb 2-1: USB disconnect, device number 7 [ 148.710164][ T5711] loop3: detected capacity change from 0 to 2048 [ 148.740932][ T5714] loop5: detected capacity change from 0 to 512 [ 148.912093][ T5714] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 148.936998][ T5711] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.015963][ T5717] loop6: detected capacity change from 0 to 32768 [ 149.050497][ T5717] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.444 (5717) [ 149.079273][ T5714] EXT4-fs (loop5): 1 truncate cleaned up [ 149.089638][ T5714] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 149.139059][ T5717] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 149.149415][ T5717] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 149.159045][ T5717] BTRFS info (device loop6): using free space tree [ 149.194498][ T5714] syz.5.442 (pid 5714) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 149.215308][ T5718] fido_id[5718]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 149.314380][ T4378] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 149.524293][ T4378] usb 4-1: Using ep0 maxpacket: 8 [ 149.542181][ T4378] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 149.574336][ T5717] BTRFS info (device loop6): enabling ssd optimizations [ 149.583880][ T4980] EXT4-fs (loop5): unmounting filesystem. [ 149.639467][ T4378] usb 4-1: config 179 has no interface number 0 [ 149.692474][ T5717] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 149.721863][ T4378] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 149.774433][ T4378] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 149.831439][ T4378] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 149.883106][ T4378] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 149.917782][ T4378] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 149.974495][ T4378] usb 4-1: config 179 interface 65 has no altsetting 0 [ 150.003674][ T4378] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 150.034471][ T4378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.126281][ T4378] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input14 [ 150.343747][ T5720] loop2: detected capacity change from 0 to 32768 [ 150.436826][ T5720] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.443 (5720) [ 150.450081][ T126] usb 4-1: USB disconnect, device number 10 [ 150.462209][ T126] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 150.544943][ T5040] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 150.585986][ T5720] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 150.612802][ T5720] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 150.671798][ T5720] BTRFS info (device loop2): metadata ratio 0 [ 150.731045][ T5720] BTRFS info (device loop2): using free space tree [ 150.779868][ T3598] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 151.029519][ T3598] usb 6-1: Using ep0 maxpacket: 16 [ 151.044001][ T3598] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 151.146588][ T3598] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.219772][ T3598] usb 6-1: Product: syz [ 151.224007][ T3598] usb 6-1: Manufacturer: syz [ 151.228861][ T5720] BTRFS info (device loop2): enabling ssd optimizations [ 151.275368][ T3598] usb 6-1: SerialNumber: syz [ 151.330943][ T3598] usb 6-1: config 0 descriptor?? [ 151.373690][ T3598] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 151.432468][ T3598] usb 6-1: Detected FT-X [ 151.569312][ T4279] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 151.601317][ T3598] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 152.016260][ T5809] loop6: detected capacity change from 0 to 256 [ 152.087627][ T3598] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 152.109851][ T5809] FAT-fs (loop6): Directory bread(block 64) failed [ 152.193005][ T5809] FAT-fs (loop6): Directory bread(block 65) failed [ 152.238786][ T5785] usb 6-1: USB disconnect, device number 4 [ 152.244672][ T5809] FAT-fs (loop6): Directory bread(block 66) failed [ 152.244760][ T5809] FAT-fs (loop6): Directory bread(block 67) failed [ 152.244839][ T5809] FAT-fs (loop6): Directory bread(block 68) failed [ 152.244869][ T5809] FAT-fs (loop6): Directory bread(block 69) failed [ 152.244944][ T5809] FAT-fs (loop6): Directory bread(block 70) failed [ 152.244975][ T5809] FAT-fs (loop6): Directory bread(block 71) failed [ 152.245048][ T5809] FAT-fs (loop6): Directory bread(block 72) failed [ 152.324826][ T5785] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 152.392153][ T5785] ftdi_sio 6-1:0.0: device disconnected [ 152.437965][ T5809] FAT-fs (loop6): Directory bread(block 73) failed [ 153.043482][ T5834] loop5: detected capacity change from 0 to 128 [ 153.096596][ T5834] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.174485][ T5834] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 153.531681][ T3598] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 153.597745][ T5847] loop4: detected capacity change from 0 to 8 [ 153.644441][ T5847] loop4: detected capacity change from 8 to 0 [ 153.744259][ T3598] usb 3-1: Using ep0 maxpacket: 16 [ 153.751248][ T3598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.787435][ T5819] loop1: detected capacity change from 0 to 40427 [ 153.802117][ T3598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.842954][ T3598] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 153.861540][ T5819] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 153.888740][ T5819] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 153.942194][ T3598] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 154.002091][ T5819] F2FS-fs (loop1): Found nat_bits in checkpoint [ 154.019939][ T3598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.023293][ T3598] usb 3-1: config 0 descriptor?? [ 154.242974][ T5819] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 154.278299][ T5819] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 154.375927][ T5819] syz.1.460: attempt to access beyond end of device [ 154.375927][ T5819] loop1: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 154.417974][ T5819] syz.1.460: attempt to access beyond end of device [ 154.417974][ T5819] loop1: rw=2049, sector=53384, nr_sectors = 80 limit=40427 [ 154.435471][ T5819] syz.1.460: attempt to access beyond end of device [ 154.435471][ T5819] loop1: rw=2049, sector=53248, nr_sectors = 16 limit=40427 [ 154.450528][ T3598] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 154.471232][ T3598] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 154.499366][ T3598] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 154.519664][ T3598] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 154.541516][ T3598] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 154.561020][ T3598] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 154.572092][ T3598] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 154.580351][ T3598] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 154.587895][ T3598] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 154.595479][ T3598] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 154.604739][ T3598] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 154.612027][ T3598] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 154.620690][ T3598] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 154.630803][ T3598] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 154.650175][ T3598] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 154.681449][ T3598] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0010/input/input15 [ 154.729199][ T4267] syz-executor: attempt to access beyond end of device [ 154.729199][ T4267] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 154.750895][ T3598] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 154.790893][ T3598] usb 3-1: USB disconnect, device number 9 [ 154.999059][ T5875] loop3: detected capacity change from 0 to 128 [ 155.018625][ T5875] FAT-fs (loop3): Directory bread(block 25014) failed [ 155.034150][ T5875] FAT-fs (loop3): Directory bread(block 25015) failed [ 155.047793][ T5875] FAT-fs (loop3): Directory bread(block 25016) failed [ 155.059857][ T5875] FAT-fs (loop3): Directory bread(block 25017) failed [ 155.213158][ T5872] fido_id[5872]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 156.330579][ T5918] loop5: detected capacity change from 0 to 1024 [ 156.356742][ T5918] EXT4-fs: Ignoring removed nobh option [ 156.380351][ T5918] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.493323][ T5918] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 156.591437][ T4980] EXT4-fs (loop5): unmounting filesystem. [ 157.178479][ T5952] loop5: detected capacity change from 0 to 256 [ 157.201874][ T5950] loop6: detected capacity change from 0 to 2048 [ 157.258922][ T5952] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb45ad1ca, utbl_chksum : 0xe619d30d) [ 157.300666][ T5950] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 157.334286][ T5950] UDF-fs: Scanning with blocksize 512 failed [ 157.351142][ T5952] fuse: Invalid user_id [ 157.392503][ T5950] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.052121][ T5973] loop3: detected capacity change from 0 to 2048 [ 158.109050][ T5974] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.138855][ T26] audit: type=1800 audit(1771304530.034:64): pid=5973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.511" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 158.165846][ T126] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 158.178585][ T5936] loop1: detected capacity change from 0 to 40427 [ 158.225389][ T5936] F2FS-fs (loop1): invalid crc value [ 158.236037][ T5978] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 158.282067][ T5936] F2FS-fs (loop1): Found nat_bits in checkpoint [ 158.321570][ T5978] Remounting filesystem read-only [ 158.391751][ T126] usb 7-1: Using ep0 maxpacket: 16 [ 158.399442][ T126] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 158.428824][ T126] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.468763][ T126] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.499020][ T5936] F2FS-fs (loop1): Start checkpoint disabled! [ 158.513313][ T126] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.540421][ T4276] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 158.557893][ T126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.569839][ T126] usb 7-1: Product: syz [ 158.575091][ T126] usb 7-1: Manufacturer: syz [ 158.579984][ T5936] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 158.588871][ T126] usb 7-1: SerialNumber: syz [ 159.004463][ T126] usb 7-1: 0:2 : does not exist [ 159.130515][ T4354] kworker/u4:6: attempt to access beyond end of device [ 159.130515][ T4354] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 159.624498][ T126] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 159.729201][ T126] usb 7-1: USB disconnect, device number 4 [ 159.993055][ T4452] udevd[4452]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.048803][ T6021] loop2: detected capacity change from 0 to 128 [ 160.109673][ T6021] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 160.153321][ T6021] hpfs: filesystem error: improperly stopped [ 160.204328][ T6021] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 160.212260][ T6021] hpfs: You really don't want any checks? You are crazy... [ 160.302432][ T6021] hpfs: hpfs_map_sector(): read error [ 160.328349][ T6021] hpfs: code page support is disabled [ 160.354901][ T6021] hpfs: hpfs_map_4sectors(): unaligned read [ 160.379243][ T6021] hpfs: hpfs_map_4sectors(): unaligned read [ 160.395195][ T6021] hpfs: filesystem error: unable to find root dir [ 160.874492][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.532'. [ 160.925718][ T6038] netlink: 'syz.5.532': attribute type 1 has an invalid length. [ 160.933571][ T6038] netlink: 'syz.5.532': attribute type 2 has an invalid length. [ 161.380856][ T6047] smc: net device bond0 applied user defined pnetid SYZ2 [ 161.394697][ T6049] netlink: 68 bytes leftover after parsing attributes in process `syz.3.537'. [ 161.404399][ T6047] netlink: 14 bytes leftover after parsing attributes in process `syz.2.536'. [ 161.421963][ T6045] loop5: detected capacity change from 0 to 2048 [ 161.482990][ T6045] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.628689][ T6047] smc: removing net device bond0 with user defined pnetid SYZ2 [ 161.649595][ T6054] loop6: detected capacity change from 0 to 128 [ 161.668461][ T6047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.744939][ T6054] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 161.757576][ T6054] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.806745][ T6047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.895370][ T6047] bond0 (unregistering): Released all slaves [ 162.240441][ T5040] EXT4-fs (loop6): unmounting filesystem. [ 162.453416][ T6072] loop6: detected capacity change from 0 to 128 [ 162.559976][ T6072] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 162.604360][ T6072] hpfs: filesystem error: improperly stopped [ 162.610445][ T6072] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 162.664925][ T6072] hpfs: You really don't want any checks? You are crazy... [ 162.704038][ T6072] hpfs: hpfs_map_sector(): read error [ 162.727168][ T6079] device syzkaller1 entered promiscuous mode [ 162.733344][ T6072] hpfs: code page support is disabled [ 162.760894][ T6072] hpfs: hpfs_map_4sectors(): unaligned read [ 162.830084][ T6072] hpfs: hpfs_map_4sectors(): unaligned read [ 162.861972][ T6072] hpfs: filesystem error: unable to find root dir [ 163.048690][ T6080] loop1: detected capacity change from 0 to 8192 [ 163.128276][ T6080] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 163.304313][ T6080] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 163.355802][ T6080] REISERFS (device loop1): using journaled data mode [ 163.362578][ T6080] reiserfs: using flush barriers [ 163.441942][ T6098] loop8: detected capacity change from 0 to 7 [ 163.489493][ T6098] Dev loop8: unable to read RDB block 7 [ 163.498970][ T6080] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.522785][ T6098] loop8: unable to read partition table [ 163.544426][ T6098] loop8: partition table beyond EOD, truncated [ 163.580544][ T6080] REISERFS (device loop1): checking transaction log (loop1) [ 163.621439][ T6080] REISERFS (device loop1): Using r5 hash to sort names [ 163.633563][ T6098] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 163.658576][ T6080] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 163.809566][ T6080] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 163.920636][ T6080] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 164.023799][ T6080] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 164.069169][ T6107] loop6: detected capacity change from 0 to 256 [ 164.140147][ T6080] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 164.184033][ T6107] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 164.529718][ T6089] loop3: detected capacity change from 0 to 40427 [ 164.607178][ T6089] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 164.660923][ T6089] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 164.737494][ T6089] F2FS-fs (loop3): invalid crc value [ 164.799991][ T6089] F2FS-fs (loop3): Found nat_bits in checkpoint [ 164.871061][ T6122] loop6: detected capacity change from 0 to 64 [ 164.988827][ T6122] hfs: get root inode failed [ 165.071954][ T6089] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 165.099876][ T6089] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 165.765320][ T6142] loop2: detected capacity change from 0 to 2048 [ 165.849099][ T6142] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.845418][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'. [ 166.887075][ T6138] loop1: detected capacity change from 0 to 32768 [ 166.967298][ T6140] loop6: detected capacity change from 0 to 32768 [ 166.976045][ T4333] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 167.063195][ T6140] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.569 (6140) [ 167.080523][ T6138] XFS (loop1): Mounting V5 Filesystem [ 167.152066][ T6138] XFS (loop1): Ending clean mount [ 167.174382][ T4333] usb 6-1: Using ep0 maxpacket: 16 [ 167.183442][ T4333] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.195537][ T6140] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 167.207545][ T6138] XFS (loop1): Quotacheck needed: Please wait. [ 167.247274][ T6140] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 167.276372][ T4333] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.302517][ T6138] XFS (loop1): Quotacheck: Done. [ 167.307671][ T6140] BTRFS info (device loop6): allowing degraded mounts [ 167.357344][ T4333] usb 6-1: config 0 interface 0 has no altsetting 0 [ 167.367509][ T6140] BTRFS info (device loop6): enabling ssd optimizations [ 167.375002][ T4333] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 167.414728][ T6140] BTRFS info (device loop6): allowing degraded mounts [ 167.433792][ T4333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.442824][ T6140] BTRFS info (device loop6): using free space tree [ 167.509820][ T4333] usb 6-1: config 0 descriptor?? [ 167.637879][ T4267] XFS (loop1): Unmounting Filesystem [ 167.728756][ T6156] loop3: detected capacity change from 0 to 32768 [ 168.001003][ T4333] hid (null): report_id 32841 is invalid [ 168.247953][ T4340] usb 6-1: USB disconnect, device number 5 [ 168.380235][ T5040] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 169.087509][ T6223] netlink: 'syz.5.588': attribute type 10 has an invalid length. [ 169.102998][ T6223] batman_adv: batadv0: Adding interface: netdevsim0 [ 169.121270][ T6223] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.153152][ T6223] batman_adv: batadv0: Interface activated: netdevsim0 [ 169.584383][ T6244] input: syz0 as /devices/virtual/input/input16 [ 169.832747][ T6250] loop6: detected capacity change from 0 to 1764 [ 169.891787][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.5.598'. [ 169.954795][ T6250] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 170.519573][ T6227] loop1: detected capacity change from 0 to 32768 [ 170.554278][ T4333] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 170.621072][ T6265] loop5: detected capacity change from 0 to 4096 [ 170.786186][ T4333] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 170.807574][ T4333] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 170.846187][ T6274] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.934939][ T4333] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 171.012803][ T4333] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 171.104399][ T4333] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 171.220920][ T6227] XFS (loop1): Mounting V5 Filesystem [ 171.243850][ T4333] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 171.370803][ T4333] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 171.456420][ T4333] usb 7-1: Product: syz [ 171.460730][ T4333] usb 7-1: Manufacturer: syz [ 171.543012][ T6227] XFS (loop1): Ending clean mount [ 171.565882][ T6269] loop2: detected capacity change from 0 to 131072 [ 171.576915][ T6269] F2FS-fs (loop2): invalid crc value [ 171.620011][ T4333] cdc_wdm 7-1:1.0: skipping garbage [ 171.628278][ T6269] F2FS-fs (loop2): Found nat_bits in checkpoint [ 171.684090][ T6269] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 171.712187][ T4333] cdc_wdm 7-1:1.0: skipping garbage [ 171.712226][ T6269] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 171.785118][ T4333] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 171.791117][ T4333] cdc_wdm 7-1:1.0: Unknown control protocol [ 171.952576][ T6297] fuse: Invalid group_id [ 171.981640][ T4267] XFS (loop1): Unmounting Filesystem [ 172.383014][ T4354] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.410937][ T4354] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.611195][ T4354] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.615358][ T5785] usb 7-1: USB disconnect, device number 5 [ 172.672888][ T4354] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.863661][ T4354] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.888898][ T4354] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.938752][ T4354] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 173.223502][ T4354] batman_adv: batadv0: Removing interface: netdevsim0 [ 173.319966][ T4354] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.412138][ T4354] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.044524][ T6315] loop3: detected capacity change from 0 to 131072 [ 174.052391][ T6315] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 150994945) [ 174.060700][ T6315] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 174.071930][ T6315] F2FS-fs (loop3): invalid crc value [ 174.089609][ T6315] F2FS-fs (loop3): Found nat_bits in checkpoint [ 174.131951][ T6315] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 174.141804][ T6315] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 174.149097][ T6315] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 174.246577][ T6315] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 174.264154][ T6315] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 174.854791][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.867023][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.875974][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.889465][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.899621][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 174.908650][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.081895][ T3598] kernel write not supported for file bpf-prog (pid: 3598 comm: kworker/0:3) [ 176.132269][ T6344] chnl_net:caif_netlink_parms(): no params data found [ 176.553595][ T6344] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.597985][ T6362] ptrace attach of "./syz-executor exec"[4279] was attempted by " [ 176.614067][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.712184][ T6344] device bridge_slave_0 entered promiscuous mode [ 176.912403][ T6397] loop2: detected capacity change from 0 to 7 [ 176.930380][ T4452] Dev loop2: unable to read RDB block 7 [ 176.939043][ T4452] loop2: AHDI p1 p4 [ 176.943021][ T4452] loop2: partition table partially beyond EOD, truncated [ 176.962989][ T4452] loop2: p1 start 1818582900 is beyond EOD, truncated [ 176.980177][ T6397] Dev loop2: unable to read RDB block 7 [ 176.987541][ T6397] loop2: AHDI p1 p4 [ 176.995538][ T4271] Bluetooth: hci2: command 0x0409 tx timeout [ 177.014991][ T6397] loop2: partition table partially beyond EOD, truncated [ 177.022755][ T6397] loop2: p1 start 1818582900 is beyond EOD, truncated [ 177.026750][ T6344] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.094774][ T6344] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.133379][ T6344] device bridge_slave_1 entered promiscuous mode [ 177.309634][ T4354] device hsr_slave_0 left promiscuous mode [ 177.337173][ T4354] device hsr_slave_1 left promiscuous mode [ 177.349646][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.374638][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.415613][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.423095][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.477867][ T4354] device bridge_slave_1 left promiscuous mode [ 177.484218][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.492192][ T5772] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 177.517971][ T4354] device bridge_slave_0 left promiscuous mode [ 177.528218][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.536719][ T6408] loop6: detected capacity change from 0 to 4096 [ 177.632129][ T6413] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.666655][ T4354] device veth1_macvtap left promiscuous mode [ 177.672763][ T4354] device veth0_macvtap left promiscuous mode [ 177.680587][ T5772] usb 2-1: Using ep0 maxpacket: 32 [ 177.689121][ T5772] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 177.710149][ T4354] device veth1_vlan left promiscuous mode [ 177.724477][ T5772] usb 2-1: config 0 has no interface number 0 [ 177.744469][ T4354] device veth0_vlan left promiscuous mode [ 177.750880][ T5772] usb 2-1: config 0 interface 184 has no altsetting 0 [ 177.788816][ T5772] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 177.824429][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.863321][ T5772] usb 2-1: Product: syz [ 177.882628][ T5772] usb 2-1: Manufacturer: syz [ 177.897926][ T5772] usb 2-1: SerialNumber: syz [ 177.919136][ T5772] usb 2-1: config 0 descriptor?? [ 177.941055][ T5772] smsc75xx v1.0.0 [ 178.381777][ T6412] loop2: detected capacity change from 0 to 32768 [ 178.553583][ T5772] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 178.567047][ T5772] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 178.586961][ T6415] loop3: detected capacity change from 0 to 32768 [ 178.682938][ T6412] jfs_readdir called with invalid offset! [ 178.776071][ T106] ERROR: (device loop3): diFree: numfree > numinos [ 178.776071][ T106] [ 178.802352][ T5772] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 178.824762][ T5772] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 178.855822][ T5772] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 178.874350][ T5772] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 178.891751][ T5772] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 178.921165][ T5772] usb 2-1: USB disconnect, device number 8 [ 179.084696][ T4271] Bluetooth: hci2: command 0x041b tx timeout [ 179.346135][ T4354] team0 (unregistering): Port device team_slave_1 removed [ 179.533118][ T4354] team0 (unregistering): Port device team_slave_0 removed [ 179.587859][ T6417] loop1: detected capacity change from 0 to 4096 [ 179.696203][ T6417] ntfs3: loop1: ino=5, "/" attr_set_size [ 179.708934][ T6417] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 179.763943][ T6422] loop2: detected capacity change from 0 to 512 [ 179.771823][ T6422] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 179.783325][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.874303][ T6422] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.650: inode has both inline data and extents flags [ 179.910680][ T6422] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.650: couldn't read orphan inode 15 (err -117) [ 179.950713][ T6422] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 180.042667][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 180.061851][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.750012][ T6434] ptrace attach of "./syz-executor exec"[4276] was attempted by " [ 180.925928][ T6430] loop1: detected capacity change from 0 to 32768 [ 181.118155][ T6430] XFS (loop1): Mounting V5 Filesystem [ 181.154583][ T4271] Bluetooth: hci2: command 0x040f tx timeout [ 181.256369][ T6430] XFS (loop1): Starting recovery (logdev: internal) [ 181.359561][ T6430] XFS (loop1): Ending recovery (logdev: internal) [ 181.501471][ T4267] XFS (loop1): Unmounting Filesystem [ 181.542201][ T4354] bond0 (unregistering): Released all slaves [ 181.801494][ T6451] loop2: detected capacity change from 0 to 32768 [ 182.180221][ T6451] XFS (loop2): Mounting V5 Filesystem [ 182.227089][ T6344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.268681][ T6344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.422121][ T6451] XFS (loop2): Starting recovery (logdev: internal) [ 182.467902][ T6451] XFS (loop2): Ending recovery (logdev: internal) [ 182.494474][ T6344] team0: Port device team_slave_0 added [ 182.524736][ T6344] team0: Port device team_slave_1 added [ 182.618433][ T6344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.644420][ T6344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.694414][ T5764] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 182.717438][ T4279] XFS (loop2): Unmounting Filesystem [ 182.725559][ T6344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.768976][ T6344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.825316][ T6344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.884323][ T5764] usb 4-1: Using ep0 maxpacket: 32 [ 182.902699][ T5764] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 182.924861][ T6344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.970057][ T5764] usb 4-1: config 2 has no interface number 0 [ 183.005171][ T5764] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 183.039696][ T5764] usb 4-1: config 2 interface 88 has no altsetting 0 [ 183.066303][ T5764] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 183.104314][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.133027][ T5764] usb 4-1: Product: syz [ 183.148230][ T5764] usb 4-1: Manufacturer: syz [ 183.152899][ T5764] usb 4-1: SerialNumber: syz [ 183.179404][ T6488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 183.205421][ T6344] device hsr_slave_0 entered promiscuous mode [ 183.234485][ T4271] Bluetooth: hci2: command 0x0419 tx timeout [ 183.262768][ T6344] device hsr_slave_1 entered promiscuous mode [ 183.402653][ T6488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 183.865777][ T4271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 183.876741][ T4271] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 183.890209][ T6512] loop1: detected capacity change from 0 to 128 [ 183.903058][ T4271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 183.911060][ T4271] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 183.918912][ T4271] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 183.927730][ T4271] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 183.981025][ T6512] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 184.046940][ T4354] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.064012][ T6512] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.236684][ T5764] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 184.274784][ T5764] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 184.324570][ T5764] asix: probe of 4-1:2.88 failed with error -71 [ 184.355985][ T5764] usb 4-1: USB disconnect, device number 11 [ 184.450251][ T4354] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.690959][ T4354] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.869301][ T4354] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.904320][ T6537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.676'. [ 184.971089][ T6344] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 185.055754][ T6344] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 185.128986][ T6344] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 185.169662][ T6545] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 185.278892][ T6344] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 185.437732][ T6557] loop3: detected capacity change from 0 to 764 [ 185.488035][ T6550] loop2: detected capacity change from 0 to 4096 [ 185.839965][ T4279] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 185.874281][ T4279] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 185.961675][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 186.007858][ T6509] chnl_net:caif_netlink_parms(): no params data found [ 186.271549][ T6344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.373639][ T6344] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.414832][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.423398][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.424565][ T5777] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 186.539338][ T6587] device batadv_slave_0 entered promiscuous mode [ 186.558434][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.583864][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.611923][ T4933] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.619207][ T4933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.630537][ T5777] usb 3-1: unable to get BOS descriptor or descriptor too short [ 186.652296][ T5777] usb 3-1: not running at top speed; connect to a high speed hub [ 186.669428][ T5777] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.683882][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.697272][ T5777] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.708764][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.727508][ T5777] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.738776][ T4933] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.745997][ T4933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.760419][ T5777] usb 3-1: New USB device strings: Mfr=248, Product=1, SerialNumber=3 [ 186.770527][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.784602][ T5777] usb 3-1: Product: syz [ 186.788926][ T5777] usb 3-1: Manufacturer: syz [ 186.806089][ T5777] usb 3-1: SerialNumber: syz [ 187.022566][ T6586] device batadv_slave_0 left promiscuous mode [ 187.031965][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.072160][ T6509] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.081305][ T6509] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.111461][ T6509] device bridge_slave_0 entered promiscuous mode [ 187.223478][ T5777] usb 3-1: cannot find UAC_HEADER [ 187.231183][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.264949][ T6509] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.274621][ T6509] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.283379][ T6509] device bridge_slave_1 entered promiscuous mode [ 187.295148][ T5777] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 187.315069][ T5777] usb 3-1: USB disconnect, device number 10 [ 187.337954][ T6599] loop3: detected capacity change from 0 to 4096 [ 187.354080][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.413095][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.451005][ T6599] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c018, mo2=0003] [ 187.472719][ T6599] System zones: 0-5 [ 187.549213][ T6599] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 187.595977][ T4452] udevd[4452]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.656224][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.686808][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.740490][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.791087][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.830946][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.846349][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 187.984136][ T6509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.015192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.034495][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 188.052603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.104917][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.198916][ T6509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.276788][ T6624] loop1: detected capacity change from 0 to 1024 [ 188.279091][ T6622] netlink: 452 bytes leftover after parsing attributes in process `syz.2.695'. [ 188.301258][ T6624] EXT4-fs: inline encryption not supported [ 188.307946][ T6618] loop3: detected capacity change from 0 to 4096 [ 188.320873][ T6624] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 188.393901][ T6509] team0: Port device team_slave_0 added [ 188.446998][ T6624] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 188.607081][ T6509] team0: Port device team_slave_1 added [ 188.636444][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 188.725294][ T4276] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 188.731802][ T4276] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 188.982600][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.697'. [ 189.034422][ T6632] netlink: 'syz.2.697': attribute type 30 has an invalid length. [ 189.077079][ T6632] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.085994][ T6632] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.094854][ T6632] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.103588][ T6632] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.194575][ T6509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.201589][ T6509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.239133][ T6509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.465358][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.697'. [ 189.498485][ T6632] netlink: 'syz.2.697': attribute type 30 has an invalid length. [ 189.527327][ T6509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.542848][ T6509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.670827][ T6509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.697007][ T4282] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 189.707277][ T4282] CPU: 1 PID: 4282 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 189.714881][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 189.724988][ T4282] Workqueue: hci0 hci_rx_work [ 189.729743][ T4282] Call Trace: [ 189.733066][ T4282] [ 189.736051][ T4282] dump_stack_lvl+0x188/0x24e [ 189.740800][ T4282] ? show_regs_print_info+0x12/0x12 [ 189.746062][ T4282] ? load_image+0x400/0x400 [ 189.750643][ T4282] sysfs_create_dir_ns+0x26a/0x290 [ 189.755820][ T4282] ? sysfs_warn_dup+0xa0/0xa0 [ 189.760557][ T4282] ? do_raw_spin_unlock+0x11d/0x230 [ 189.765810][ T4282] kobject_add_internal+0x61c/0xcc0 [ 189.771061][ T4282] kobject_add+0x160/0x230 [ 189.775532][ T4282] ? kobject_init+0x1d0/0x1d0 [ 189.780276][ T4282] ? klist_children_get+0x50/0x50 [ 189.785355][ T4282] ? get_device_parent+0x121/0x3f0 [ 189.790570][ T4282] device_add+0x483/0xfb0 [ 189.794958][ T4282] ? kmem_cache_free+0xf7/0x290 [ 189.799875][ T4282] hci_conn_add_sysfs+0xd1/0x1e0 [ 189.804878][ T4282] le_conn_complete_evt+0x105f/0x1670 [ 189.810316][ T4282] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 189.816617][ T4282] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 189.822315][ T4282] ? skb_pull_data+0xf7/0x200 [ 189.827057][ T4282] hci_le_conn_complete_evt+0x183/0x440 [ 189.832670][ T4282] ? hci_remote_host_features_evt+0x270/0x270 [ 189.839018][ T4282] hci_event_packet+0x7b6/0x1280 [ 189.844035][ T4282] ? bis_list+0x280/0x280 [ 189.848428][ T4282] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 189.854377][ T4282] ? kcov_remote_start+0x4c7/0x7e0 [ 189.859545][ T4282] ? bt_warn+0x30/0x180 [ 189.863753][ T4282] ? hci_send_to_monitor+0x9c/0x4a0 [ 189.869012][ T4282] hci_rx_work+0x3eb/0xd40 [ 189.873571][ T4282] ? _raw_spin_unlock+0x40/0x40 [ 189.878484][ T4282] ? process_one_work+0x7b0/0x1160 [ 189.883650][ T4282] process_one_work+0x8a2/0x1160 [ 189.888740][ T4282] ? worker_detach_from_pool+0x240/0x240 [ 189.894436][ T4282] ? _raw_spin_lock_irq+0xb7/0xf0 [ 189.899516][ T4282] ? _raw_spin_lock_irqsave+0x100/0x100 [ 189.905118][ T4282] ? kthread_data+0x4b/0xc0 [ 189.909688][ T4282] worker_thread+0xaa2/0x1270 [ 189.914454][ T4282] kthread+0x29d/0x330 [ 189.918563][ T4282] ? worker_clr_flags+0x1a0/0x1a0 [ 189.923640][ T4282] ? kthread_blkcg+0xd0/0xd0 [ 189.928274][ T4282] ret_from_fork+0x1f/0x30 [ 189.932760][ T4282] [ 189.938543][ T4282] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 189.955905][ T4282] Bluetooth: hci0: failed to register connection device [ 190.097384][ T4354] device hsr_slave_0 left promiscuous mode [ 190.114302][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 190.121872][ T4354] device hsr_slave_1 left promiscuous mode [ 190.153973][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.223731][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.282312][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.306366][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.327266][ T4354] device bridge_slave_1 left promiscuous mode [ 190.333607][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.383227][ T4354] device bridge_slave_0 left promiscuous mode [ 190.406657][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.530152][ T6665] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 190.551225][ T4354] device veth1_macvtap left promiscuous mode [ 190.576463][ T4354] device veth0_macvtap left promiscuous mode [ 190.582696][ T4354] device veth1_vlan left promiscuous mode [ 190.618947][ T4354] device veth0_vlan left promiscuous mode [ 191.471001][ T6689] loop3: detected capacity change from 0 to 256 [ 191.786148][ T6696] loop2: detected capacity change from 0 to 256 [ 191.878561][ T6700] loop1: detected capacity change from 0 to 128 [ 191.890746][ T6696] FAT-fs (loop2): Directory bread(block 64) failed [ 191.930556][ T6696] FAT-fs (loop2): Directory bread(block 65) failed [ 191.948885][ T6696] FAT-fs (loop2): Directory bread(block 66) failed [ 191.969308][ T6696] FAT-fs (loop2): Directory bread(block 67) failed [ 191.976279][ T6700] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 191.982758][ T6696] FAT-fs (loop2): Directory bread(block 68) failed [ 191.991811][ T6696] FAT-fs (loop2): Directory bread(block 69) failed [ 191.998876][ T6696] FAT-fs (loop2): Directory bread(block 70) failed [ 192.005657][ T6696] FAT-fs (loop2): Directory bread(block 71) failed [ 192.009065][ T6700] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.012391][ T6696] FAT-fs (loop2): Directory bread(block 72) failed [ 192.029388][ T6696] FAT-fs (loop2): Directory bread(block 73) failed [ 192.194599][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 192.232640][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 192.358911][ T6707] loop1: detected capacity change from 0 to 128 [ 192.391543][ T6707] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 192.417692][ T6707] hpfs: filesystem error: improperly stopped [ 192.435516][ T6707] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 192.483763][ T6707] hpfs: You really don't want any checks? You are crazy... [ 192.530945][ T6707] hpfs: hpfs_map_sector(): read error [ 192.559846][ T6707] hpfs: code page support is disabled [ 192.583830][ T6707] hpfs: hpfs_map_4sectors(): unaligned read [ 192.601536][ T6707] hpfs: hpfs_map_4sectors(): unaligned read [ 192.621688][ T6707] hpfs: filesystem error: unable to find root dir [ 192.893476][ T6714] block nbd0: Unsupported socket: should be TCP or UNIX. [ 193.141157][ T6717] overlayfs: upper fs does not support file handles, falling back to index=off. [ 193.152041][ T6717] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 193.252291][ T4354] team0 (unregistering): Port device team_slave_1 removed [ 193.368251][ T4354] team0 (unregistering): Port device team_slave_0 removed [ 193.410354][ T6725] loop2: detected capacity change from 0 to 512 [ 193.461733][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.509134][ T6725] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 193.518152][ T6725] System zones: 0-2, 18-18, 34-35 [ 193.529235][ T6725] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 193.538968][ T6725] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.549949][ T3598] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 193.635597][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.712150][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 193.734371][ T3598] usb 4-1: Using ep0 maxpacket: 16 [ 193.743548][ T3598] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 193.790123][ T3598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.814907][ T3598] usb 4-1: Product: syz [ 193.823890][ T3598] usb 4-1: Manufacturer: syz [ 193.836742][ T3598] usb 4-1: SerialNumber: syz [ 193.862565][ T3598] usb 4-1: config 0 descriptor?? [ 193.921708][ T5777] kernel write not supported for file /vbi9 (pid: 5777 comm: kworker/1:11) [ 194.286353][ T3598] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 194.328534][ T3598] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 194.347852][ T3598] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 194.359050][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.365463][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.366673][ T4282] ------------[ cut here ]------------ [ 194.377539][ T4282] WARNING: CPU: 0 PID: 4282 at net/bluetooth/hci_conn.c:668 hci_conn_timeout+0x24f/0x450 [ 194.387441][ T4282] Modules linked in: [ 194.391376][ T4282] CPU: 0 PID: 4282 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 194.399008][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.409138][ T4282] Workqueue: hci3 hci_conn_timeout [ 194.414349][ T4282] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 194.420069][ T4282] Code: 1f 8e e8 04 5a 9f f8 48 8b 35 d5 c6 eb 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 96 46 20 f8 e8 11 6e 4e f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 194.423224][ T4354] bond0 (unregistering): Released all slaves [ 194.439760][ T4282] RSP: 0018:ffffc90003f57c08 EFLAGS: 00010293 [ 194.439790][ T4282] RAX: ffffffff8934059f RBX: ffff888074d12330 RCX: ffff88802d740000 [ 194.439808][ T4282] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 194.439823][ T4282] RBP: 00000000ffffffff R08: ffff888074d12013 R09: 1ffff1100e9a2402 [ 194.439839][ T4282] R10: dffffc0000000000 R11: ffffed100e9a2403 R12: dffffc0000000000 [ 194.439856][ T4282] R13: dffffc0000000000 R14: ffff888074d12000 R15: ffff888074d12010 [ 194.439874][ T4282] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 194.439893][ T4282] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.439908][ T4282] CR2: 00007f3525c4e661 CR3: 000000005ba27000 CR4: 00000000003506f0 [ 194.439928][ T4282] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 194.523867][ T4282] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.531947][ T4282] Call Trace: [ 194.535297][ T4282] [ 194.538274][ T4282] ? process_one_work+0x7b0/0x1160 [ 194.543443][ T4282] process_one_work+0x8a2/0x1160 [ 194.548496][ T4282] ? worker_detach_from_pool+0x240/0x240 [ 194.554230][ T4282] ? _raw_spin_lock_irq+0xb7/0xf0 [ 194.559312][ T4282] ? _raw_spin_lock_irqsave+0x100/0x100 [ 194.564961][ T4282] ? kthread_data+0x4b/0xc0 [ 194.569529][ T4282] worker_thread+0xaa2/0x1270 [ 194.574308][ T4282] kthread+0x29d/0x330 [ 194.578420][ T4282] ? worker_clr_flags+0x1a0/0x1a0 [ 194.583493][ T4282] ? kthread_blkcg+0xd0/0xd0 [ 194.588222][ T4282] ret_from_fork+0x1f/0x30 [ 194.592710][ T4282] [ 194.595825][ T4282] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 194.603137][ T4282] CPU: 0 PID: 4282 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 194.610835][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.620918][ T4282] Workqueue: hci3 hci_conn_timeout [ 194.626068][ T4282] Call Trace: [ 194.629367][ T4282] [ 194.632318][ T4282] dump_stack_lvl+0x188/0x24e [ 194.637028][ T4282] ? memcpy+0x3c/0x60 [ 194.641055][ T4282] ? show_regs_print_info+0x12/0x12 [ 194.646285][ T4282] ? load_image+0x400/0x400 [ 194.650912][ T4282] panic+0x2e5/0x730 [ 194.654838][ T4282] ? bpf_jit_dump+0xd0/0xd0 [ 194.659376][ T4282] ? ret_from_fork+0x1f/0x30 [ 194.663996][ T4282] __warn+0x2f8/0x4f0 [ 194.668018][ T4282] ? hci_conn_timeout+0x24f/0x450 [ 194.673074][ T4282] ? hci_conn_timeout+0x24f/0x450 [ 194.678125][ T4282] report_bug+0x2ba/0x4f0 [ 194.682486][ T4282] ? hci_conn_timeout+0x24f/0x450 [ 194.687536][ T4282] handle_bug+0x3a/0x70 [ 194.691722][ T4282] exc_invalid_op+0x16/0x40 [ 194.696256][ T4282] asm_exc_invalid_op+0x16/0x20 [ 194.701241][ T4282] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 194.707791][ T4282] Code: 1f 8e e8 04 5a 9f f8 48 8b 35 d5 c6 eb 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 96 46 20 f8 e8 11 6e 4e f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 194.727434][ T4282] RSP: 0018:ffffc90003f57c08 EFLAGS: 00010293 [ 194.733528][ T4282] RAX: ffffffff8934059f RBX: ffff888074d12330 RCX: ffff88802d740000 [ 194.741526][ T4282] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 194.749515][ T4282] RBP: 00000000ffffffff R08: ffff888074d12013 R09: 1ffff1100e9a2402 [ 194.757517][ T4282] R10: dffffc0000000000 R11: ffffed100e9a2403 R12: dffffc0000000000 [ 194.765594][ T4282] R13: dffffc0000000000 R14: ffff888074d12000 R15: ffff888074d12010 [ 194.773617][ T4282] ? hci_conn_timeout+0x24f/0x450 [ 194.778800][ T4282] ? hci_conn_timeout+0x24f/0x450 [ 194.783866][ T4282] ? process_one_work+0x7b0/0x1160 [ 194.789012][ T4282] process_one_work+0x8a2/0x1160 [ 194.794029][ T4282] ? worker_detach_from_pool+0x240/0x240 [ 194.799697][ T4282] ? _raw_spin_lock_irq+0xb7/0xf0 [ 194.804743][ T4282] ? _raw_spin_lock_irqsave+0x100/0x100 [ 194.810390][ T4282] ? kthread_data+0x4b/0xc0 [ 194.814933][ T4282] worker_thread+0xaa2/0x1270 [ 194.819660][ T4282] kthread+0x29d/0x330 [ 194.823747][ T4282] ? worker_clr_flags+0x1a0/0x1a0 [ 194.828805][ T4282] ? kthread_blkcg+0xd0/0xd0 [ 194.833423][ T4282] ret_from_fork+0x1f/0x30 [ 194.837884][ T4282] [ 194.841494][ T4282] Kernel Offset: disabled [ 194.845922][ T4282] Rebooting in 86400 seconds..