last executing test programs: 3m21.087409553s ago: executing program 1 (id=1380): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x4) 3m20.914192907s ago: executing program 1 (id=1382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x1e8, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x19c, 0x8, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0xd4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x8c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 3m20.736800851s ago: executing program 1 (id=1384): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x38}, 0x2}, 0x0) 3m20.550671505s ago: executing program 1 (id=1388): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x44c, &(0x7f0000000d80)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x14a0, &(0x7f0000000740)=ANY=[], 0x1, 0x0, 0x0) 3m20.041729886s ago: executing program 1 (id=1390): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0xa105c2, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, 0xffffffffffffffff) 3m19.447337758s ago: executing program 1 (id=1394): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x336, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb8, 0x7, "", [{{0x9, 0x4, 0x0, 0x7f, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2b, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000240)={0x20, 0xc, 0x28, {0x28, 0x23, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3m19.053699256s ago: executing program 32 (id=1394): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x336, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb8, 0x7, "", [{{0x9, 0x4, 0x0, 0x7f, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2b, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000240)={0x20, 0xc, 0x28, {0x28, 0x23, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m36.584970585s ago: executing program 4 (id=1758): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000003c0)={0x3ff, 0x40008, 0x9, 0x10000}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000010001000000000800040001000000", 0x24) 2m36.245691062s ago: executing program 4 (id=1764): r0 = epoll_create1(0x0) setresuid(0x0, 0xee00, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000080)={0x2000201a}) 2m36.081407996s ago: executing program 4 (id=1766): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1) 2m35.705026474s ago: executing program 4 (id=1769): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x10012, &(0x7f00000004c0)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYBLOB="7b467be6d2ffd5dbc39d475a3efbcc5666f07a12652e81e75be5e881b521fcda9e61566e2b548201f553091a16ad9bb6888f170e5d63f7aa4c585f22f2390962cca0f041113b93687bf6c9fe0ad346d27e428fa6322e2a05eddacbf8af7162ea449789312db3927438000000040023", @ANYRES8], 0x4, 0x337, &(0x7f0000000140)="$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") mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 2m35.122870186s ago: executing program 4 (id=1772): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x9000}) 2m34.163492316s ago: executing program 4 (id=1782): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb700000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 2m33.922798122s ago: executing program 33 (id=1782): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb700000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 2m8.823253373s ago: executing program 2 (id=1999): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 2m8.729363195s ago: executing program 2 (id=2001): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60) 2m8.577550579s ago: executing program 2 (id=2004): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000880)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000d240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000004c0)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m6.559506831s ago: executing program 2 (id=2021): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b7040000010000008500000015000000850000000700000095"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m6.327129376s ago: executing program 2 (id=2025): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) utime(&(0x7f0000000000)='.\x00', &(0x7f0000000040)={0x2, 0x6}) 2m6.12750709s ago: executing program 2 (id=2029): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) getpeername(r0, 0x0, &(0x7f0000000180)) 1m51.02421947s ago: executing program 34 (id=2029): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) getpeername(r0, 0x0, &(0x7f0000000180)) 1m27.39827511s ago: executing program 5 (id=2411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0xfe74}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m27.139295196s ago: executing program 5 (id=2413): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x1, 0x4) sendmsg$unix(r0, &(0x7f0000002740)={&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x4000000) 1m26.813670482s ago: executing program 5 (id=2419): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000700000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r1}, 0xc) 1m26.639634196s ago: executing program 5 (id=2421): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0xcf, 0xfffffffb, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000001c0)) 1m26.460367259s ago: executing program 5 (id=2423): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) utime(&(0x7f0000000000)='.\x00', &(0x7f0000000040)={0x2, 0x6}) 1m26.340155833s ago: executing program 5 (id=2426): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x96}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 1m11.125105294s ago: executing program 35 (id=2426): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x96}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 1m10.718384443s ago: executing program 6 (id=2492): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/notes', 0x800, 0x0) io_setup(0x3, &(0x7f0000000400)=0x0) io_submit(r1, 0x2, &(0x7f0000000240)=[&(0x7f0000000040)={0xf000000, 0x0, 0x0, 0x0, 0xe11, r0, 0x0, 0x0, 0x4, 0x0, 0x0, r0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x40, r0, &(0x7f0000000440), 0x0, 0x7, 0x0, 0x2, r0}]) 1m10.280861193s ago: executing program 6 (id=2494): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x4000) 1m9.656218926s ago: executing program 6 (id=2496): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003ad000/0x400000)=nil, 0x400000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1m9.397375451s ago: executing program 0 (id=2497): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) readv(r0, &(0x7f0000002b80)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000001980)=[{&(0x7f0000004640)=""/4099, 0x1003}], 0x1) 1m8.921771151s ago: executing program 0 (id=2498): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1, 0x766}, 0x20) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hopopts_2292={{0x60, 0x29, 0xb, {0x0, 0x8, '\x00', [@calipso={0x7, 0x40, {0xb1bbf2d6b755cdf8, 0xe, 0x0, 0x3, [0x7f, 0x0, 0x0, 0x1, 0x6, 0x200, 0x5]}}]}}}], 0x60}, 0x0) 1m8.532832779s ago: executing program 0 (id=2507): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x4, 0x8, @empty=0x60}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) 1m8.052880429s ago: executing program 0 (id=2502): syz_usb_connect(0x3, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002a69bbc104f959941760f010203010902240001040000000904330202020c070009050102100000fa000905820240"], 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x896ae000) socket$key(0xf, 0x3, 0x2) 1m8.052705369s ago: executing program 3 (id=2503): r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x4, @empty, 0x4}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) 1m7.876332993s ago: executing program 3 (id=2504): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x7fffffff) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x5c) 1m7.657185488s ago: executing program 6 (id=2505): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000002c0)=@get={0x1, &(0x7f0000002240)=""/4109, 0x2}) 1m7.465170622s ago: executing program 3 (id=2506): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) close(r0) 1m7.362213964s ago: executing program 6 (id=2508): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00444, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbbb, &(0x7f0000001800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, 0x0) 1m7.124337569s ago: executing program 3 (id=2509): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc, 0xd}, 0x10) write(r0, &(0x7f0000000300)="240000001a000502d1f9f407000904001f000000fe0000000000000008001f00fd000000", 0x24) 1m6.786122806s ago: executing program 3 (id=2510): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)={0x64, r1, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2000}}}]}, 0x64}, 0x1, 0x2}, 0x0) 1m6.393122215s ago: executing program 6 (id=2511): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x4, 0x8, @empty=0x60}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) 1m5.712401869s ago: executing program 0 (id=2512): r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x4, @empty, 0x4}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) 1m5.712355419s ago: executing program 3 (id=2513): setresuid(0x0, 0xee01, 0x0) r0 = msgget$private(0x0, 0x1f3) msgctl$IPC_SET(r0, 0x1, &(0x7f0000002640)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x158, 0x100}, 0x0, 0x0, 0x9, 0x100, 0x6df2, 0x6fc2, 0x101, 0xff, 0x3, 0x7}) 38.296438649s ago: executing program 0 (id=2514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x38, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x38}}, 0x0) 0s ago: executing program 36 (id=2511): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x4, 0x8, @empty=0x60}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) kernel console output (not intermixed with test programs): a write failed [ 221.865933][ T9989] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.1650: lblock 0 mapped to illegal pblock 48 (length 1) [ 221.940516][ T9982] loop2: detected capacity change from 0 to 32768 [ 221.946521][ T9989] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 221.981979][ T9989] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1650: Failed to acquire dquot type 0 [ 221.986131][ T9982] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1648 (9982) [ 222.009210][ T9989] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 222.050201][ T9989] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.1650: mark_inode_dirty error [ 222.075840][ T9982] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 222.085339][ T9989] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 222.118378][ T9982] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 222.122268][ T9989] EXT4-fs (loop0): 1 orphan inode deleted [ 222.140354][ T11] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 222.148742][ T9982] BTRFS info (device loop2): using free space tree [ 222.175869][ T9989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.191959][ T11] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 222.217459][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 0 [ 222.375739][ T9982] BTRFS info (device loop2): enabling ssd optimizations [ 222.396403][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.408056][ T65] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 222.426094][ T9982] BTRFS info (device loop2): auto enabling async discard [ 222.460093][ T65] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 222.489172][ T65] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 0 [ 222.533739][ T5770] EXT4-fs error (device loop0): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 222.558893][ T5770] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 222.582383][ T5770] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 222.582943][ T27] audit: type=1800 audit(1782830356.280:109): pid=9982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1648" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 222.679735][ T5771] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 222.725599][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1662'. [ 223.309150][T10054] loop2: detected capacity change from 0 to 64 [ 223.758036][T10041] loop0: detected capacity change from 0 to 32768 [ 223.826879][T10041] JBD2: Ignoring recovery information on journal [ 223.989804][T10041] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 224.031224][T10045] loop3: detected capacity change from 0 to 32768 [ 224.071449][T10045] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 224.189447][T10045] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 224.574333][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 224.688937][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 224.873726][T10089] loop4: detected capacity change from 0 to 128 [ 224.947263][T10089] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 224.994312][T10089] hpfs: filesystem error: improperly stopped [ 225.000367][T10089] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 225.072168][T10089] hpfs: You really don't want any checks? You are crazy... [ 225.079856][T10089] hpfs: hpfs_map_sector(): read error [ 225.120577][T10089] hpfs: code page support is disabled [ 225.138680][T10089] hpfs: hpfs_map_4sectors(): unaligned read [ 225.165388][T10089] hpfs: hpfs_map_4sectors(): unaligned read [ 225.182272][T10089] hpfs: filesystem error: unable to find root dir [ 225.236928][T10098] loop2: detected capacity change from 0 to 4096 [ 225.274738][T10098] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 225.319854][T10098] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 225.348079][T10098] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 225.384274][T10098] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 225.448699][T10098] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 225.522607][T10098] ntfs: volume version 3.1. [ 225.591438][T10113] loop0: detected capacity change from 0 to 256 [ 225.732557][T10113] FAT-fs (loop0): Directory bread(block 64) failed [ 225.742176][T10113] FAT-fs (loop0): Directory bread(block 65) failed [ 225.748812][T10113] FAT-fs (loop0): Directory bread(block 66) failed [ 225.801315][T10113] FAT-fs (loop0): Directory bread(block 67) failed [ 225.821910][T10113] FAT-fs (loop0): Directory bread(block 68) failed [ 225.850564][T10113] FAT-fs (loop0): Directory bread(block 69) failed [ 225.890214][T10121] loop2: detected capacity change from 0 to 256 [ 225.903811][T10113] FAT-fs (loop0): Directory bread(block 70) failed [ 225.910394][T10113] FAT-fs (loop0): Directory bread(block 71) failed [ 225.930937][T10113] FAT-fs (loop0): Directory bread(block 72) failed [ 225.972323][T10113] FAT-fs (loop0): Directory bread(block 73) failed [ 226.120105][T10127] loop3: detected capacity change from 0 to 64 [ 226.243691][T10133] loop4: detected capacity change from 0 to 16 [ 226.300293][T10133] erofs: (device loop4): mounted with root inode @ nid 36. [ 226.357767][T10133] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 226.423276][T10133] syz.4.1690: attempt to access beyond end of device [ 226.423276][T10133] loop4: rw=0, sector=4294967295, nr_sectors = 2 limit=16 [ 227.280207][T10139] loop3: detected capacity change from 0 to 32768 [ 227.336493][T10139] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1692 (10139) [ 227.424759][T10139] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 227.462866][T10139] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 227.477382][T10150] loop4: detected capacity change from 0 to 32768 [ 227.502491][T10139] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 227.506440][T10150] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.1695 (10150) [ 227.511923][T10139] BTRFS info (device loop3): use zstd compression, level 3 [ 227.511946][T10139] BTRFS info (device loop3): using free space tree [ 227.643920][T10161] loop2: detected capacity change from 0 to 8192 [ 227.673106][T10161] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 227.698231][ T5763] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (5763) [ 227.859712][T10139] BTRFS info (device loop3): enabling ssd optimizations [ 227.902240][T10139] BTRFS info (device loop3): auto enabling async discard [ 227.981794][T10184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1698'. [ 228.124651][T10148] loop0: detected capacity change from 0 to 40427 [ 228.161124][T10148] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 228.201107][T10148] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 228.240449][T10148] F2FS-fs (loop0): invalid crc_offset: 1 [ 228.278842][ T5773] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 228.382291][ T5828] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 228.462170][ T5946] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (5946) [ 228.495916][T10148] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 228.527101][T10148] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 228.584123][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.585008][T10202] loop4: detected capacity change from 0 to 512 [ 228.605640][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 228.662851][ T5828] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 228.702252][ T5828] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 228.729411][T10202] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 228.746058][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.778238][T10202] System zones: 1-12 [ 228.798108][T10207] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 228.819204][ T5828] usb 3-1: config 0 descriptor?? [ 228.834892][T10202] EXT4-fs (loop4): 1 truncate cleaned up [ 228.847825][T10188] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 228.873951][T10202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.006601][T10202] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 32775 (only 1 groups) [ 229.167121][ T9237] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.300819][ T5828] uclogic 0003:5543:0004.000C: unknown main item tag 0x2 [ 229.329438][ T5828] uclogic 0003:5543:0004.000C: unknown main item tag 0x4 [ 229.346303][ T5828] uclogic 0003:5543:0004.000C: unknown main item tag 0x0 [ 229.367651][ T5828] uclogic 0003:5543:0004.000C: unknown main item tag 0x0 [ 229.387092][ T5828] uclogic 0003:5543:0004.000C: unknown main item tag 0x0 [ 229.407682][ T5828] uclogic 0003:5543:0004.000C: unknown main item tag 0x0 [ 229.429493][ T5828] uclogic 0003:5543:0004.000C: unknown main item tag 0x0 [ 229.446359][ T5828] uclogic 0003:5543:0004.000C: item fetching failed at offset 28/40 [ 229.455838][ T5828] uclogic 0003:5543:0004.000C: parse failed [ 229.461935][ T5828] uclogic: probe of 0003:5543:0004.000C failed with error -22 [ 229.509054][ T5828] usb 3-1: USB disconnect, device number 16 [ 229.698706][T10225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1708'. [ 229.748785][T10225] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1708'. [ 229.780860][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1708'. [ 229.995505][T10236] loop3: detected capacity change from 0 to 64 [ 230.189861][T10233] loop4: detected capacity change from 0 to 4096 [ 230.265683][T10233] __ntfs_error: 9 callbacks suppressed [ 230.265700][T10233] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 230.315882][T10233] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 230.353231][T10233] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 230.385739][T10233] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 230.432248][T10233] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 230.493419][T10233] ntfs: volume version 3.1. [ 230.516379][T10233] ntfs: (device loop4): ntfs_lookup_inode_by_name(): No index allocation attribute but index entry requires one. Directory inode 0x5 is corrupt or driver bug. [ 230.562474][T10233] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 230.588730][T10233] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 230.653990][T10233] ntfs: (device loop4): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 230.659664][T10222] loop0: detected capacity change from 0 to 40427 [ 230.690635][T10222] F2FS-fs (loop0): Zoned block device path is missing [ 230.710498][T10222] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 230.719387][T10233] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 230.757171][T10222] F2FS-fs (loop0): invalid crc value [ 230.951094][T10261] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 231.002448][T10261] NILFS (loop3): mounting unchecked fs [ 231.029453][ T5763] udevd[5763]: incorrect nilfs2 checksum on /dev/loop3 [ 231.062457][T10261] NILFS (loop3): recovery complete [ 231.093099][T10264] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.182675][T10222] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 231.189759][T10222] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 231.285603][T10256] f2fs_ckpt-7:0: attempt to access beyond end of device [ 231.285603][T10256] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 231.345844][T10256] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 231.776170][T10253] set_capacity_and_notify: 1 callbacks suppressed [ 231.776185][T10253] loop2: detected capacity change from 0 to 32768 [ 231.818586][T10253] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 231.963893][T10281] loop4: detected capacity change from 0 to 2048 [ 231.971211][T10281] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.001246][ T5763] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 232.104206][T10290] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.1726'. [ 232.123468][T10281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.352886][ T9237] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.698810][T10304] loop0: detected capacity change from 0 to 4096 [ 232.771663][T10308] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.836974][T10287] loop3: detected capacity change from 0 to 32768 [ 232.864489][T10304] syz.0.1729: attempt to access beyond end of device [ 232.864489][T10304] loop0: rw=0, sector=88498, nr_sectors = 2 limit=4096 [ 232.929711][T10304] NILFS (loop0): I/O error reading node block for GC (ino=129, vblocknr=32768) [ 233.003551][T10304] NILFS (loop0): error -5 preparing GC: cannot read source blocks [ 233.553359][T10297] loop2: detected capacity change from 0 to 32768 [ 233.651855][T10297] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 233.692262][ T5829] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 233.882651][ T5829] usb 5-1: Using ep0 maxpacket: 16 [ 233.914952][T10312] loop3: detected capacity change from 0 to 4096 [ 233.930398][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.973547][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.997889][ T5829] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 234.003879][T10312] EXT4-fs (loop3): Test dummy encryption mode enabled [ 234.051132][ T5771] ocfs2: Unmounting device (7,2) on (node local) [ 234.056733][ T5829] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 234.068070][T10312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 234.113835][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.144826][ T5829] usb 5-1: config 0 descriptor?? [ 234.204322][T10331] loop0: detected capacity change from 0 to 2048 [ 234.214472][T10312] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 234.281867][T10332] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.373977][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.620983][ T5829] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 234.655638][ T5829] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 234.671603][ T5829] microsoft 0003:045E:07DA.000D: No inputs registered, leaving [ 234.711648][ T5829] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 234.758175][ T5829] microsoft 0003:045E:07DA.000D: no inputs found [ 234.769787][ T5829] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 234.826150][ T5829] usb 5-1: USB disconnect, device number 4 [ 234.956174][T10343] fido_id[10343]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 235.043552][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1743'. [ 235.070630][T10349] nbd: illegal input index -1113835520 [ 235.343131][T10357] loop0: detected capacity change from 0 to 64 [ 235.482377][ T5760] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 235.511386][ T5770] hfs: node 4:3 still has 1 user(s)! [ 235.674664][ T5760] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 235.674716][ T5760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 235.674745][ T5760] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 235.674788][ T5760] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 235.674813][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.677165][ T5760] usb 4-1: config 0 descriptor?? [ 235.678626][T10355] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 235.804335][T10351] loop2: detected capacity change from 0 to 32768 [ 235.849246][T10351] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 236.111149][ T5760] betop 0003:11C2:2208.000E: unknown main item tag 0x3 [ 236.111187][ T5760] betop 0003:11C2:2208.000E: unexpected long global item [ 236.111882][ T5760] betop 0003:11C2:2208.000E: parse failed [ 236.117269][ T5760] betop: probe of 0003:11C2:2208.000E failed with error -22 [ 236.356094][ T5760] usb 4-1: USB disconnect, device number 11 [ 237.510288][T10395] loop2: detected capacity change from 0 to 1024 [ 237.521637][T10395] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 237.542533][T10395] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent [ 237.587516][T10395] ptrace attach of ""[10396] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10395] [ 237.729411][T10382] loop0: detected capacity change from 0 to 32768 [ 237.788915][T10382] (syz.0.1759,10382,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 237.825109][T10404] loop2: detected capacity change from 0 to 512 [ 237.860332][T10404] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 237.874380][T10382] (syz.0.1759,10382,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 237.903484][T10406] loop4: detected capacity change from 0 to 64 [ 237.917028][T10404] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 237.967103][T10404] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.1770: Invalid block bitmap block 0 in block_group 0 [ 238.014043][T10404] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 238.015637][T10382] JBD2: Ignoring recovery information on journal [ 238.038978][T10411] loop3: detected capacity change from 0 to 128 [ 238.046219][T10404] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.1770: attempt to clear invalid blocks 983261 len 1 [ 238.072380][T10404] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz.2.1770: Invalid inode table block 0 in block_group 0 [ 238.145822][T10411] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 238.156555][T10404] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 238.176142][T10411] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.178138][T10382] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 238.196895][T10404] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 238.232179][T10404] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz.2.1770: Invalid inode table block 0 in block_group 0 [ 238.298468][T10404] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 238.309233][ T9237] hfs: request for non-existent node 131072 in B*Tree [ 238.332615][T10404] EXT4-fs error (device loop2): ext4_truncate:4301: inode #11: comm syz.2.1770: mark_inode_dirty error [ 238.363849][T10404] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 238.382365][ T9237] hfs: request for non-existent node 131072 in B*Tree [ 238.403865][T10404] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz.2.1770: Invalid inode table block 0 in block_group 0 [ 238.459290][T10404] EXT4-fs (loop2): 1 truncate cleaned up [ 238.494122][T10404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.590326][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.593507][T10418] sch_fq: defrate 36451 ignored. [ 238.702897][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 239.239372][ T1097] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.379903][ T1097] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.481692][ T1097] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.603296][T10439] loop2: detected capacity change from 0 to 256 [ 239.626469][ T1097] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.706893][T10439] FAT-fs (loop2): Directory bread(block 64) failed [ 239.713595][T10439] FAT-fs (loop2): Directory bread(block 65) failed [ 239.720293][T10439] FAT-fs (loop2): Directory bread(block 66) failed [ 239.742064][T10439] FAT-fs (loop2): Directory bread(block 67) failed [ 239.749237][T10439] FAT-fs (loop2): Directory bread(block 68) failed [ 239.780149][T10439] FAT-fs (loop2): Directory bread(block 69) failed [ 239.801611][T10439] FAT-fs (loop2): Directory bread(block 70) failed [ 239.808548][T10439] FAT-fs (loop2): Directory bread(block 71) failed [ 239.817121][T10439] FAT-fs (loop2): Directory bread(block 72) failed [ 239.838441][T10439] FAT-fs (loop2): Directory bread(block 73) failed [ 240.343152][T10453] CUSE: unknown device info "xKJ +ۤ2LhnL180(3նi" [ 240.351977][T10453] CUSE: unknown device info "ٮ,<_eF" [ 240.400720][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.412882][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.420806][T10453] CUSE: unknown device info "3ܟ,̘" [ 240.420995][T10455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.434605][T10453] CUSE: unknown device info "J2S Z !e/J+-na4\N4" [ 240.454372][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.458379][T10453] CUSE: unknown device info " [ 240.458379][T10453] fzXS! [ 240.458379][T10453] AxjTǔw xRɐQ(hҏj pdY0|M?2JIv^R@" [ 240.462351][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.502258][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 240.520148][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.540701][T10453] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TM_@/V{" [ 240.586269][T10453] CUSE: unknown device info "wlU~V߶ݸFsX,xkq/Q]3H" [ 240.610353][T10453] CUSE: zero length info key specified [ 241.519103][T10456] chnl_net:caif_netlink_parms(): no params data found [ 241.537591][T10490] loop0: detected capacity change from 0 to 4096 [ 241.631950][T10494] loop2: detected capacity change from 0 to 512 [ 241.655555][T10494] EXT4-fs: Ignoring removed i_version option [ 241.667496][T10494] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 241.692618][T10490] ntfs: volume version 3.1. [ 241.720134][T10494] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1803: invalid indirect mapped block 4294967295 (level 1) [ 241.743349][T10494] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1803: invalid indirect mapped block 4294967295 (level 1) [ 241.807522][T10494] EXT4-fs (loop2): 2 truncates cleaned up [ 241.837829][T10494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.959278][T10490] __ntfs_warning: 6 callbacks suppressed [ 241.959295][T10490] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 242.019324][T10487] loop3: detected capacity change from 0 to 32768 [ 242.026625][T10490] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 242.068273][T10490] ntfs: (device loop0): parse_options(): Option iocharset is deprecated. Please use option nls= in the future. [ 242.071154][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.081653][T10490] ntfs: (device loop0): parse_options(): Option iocharset is deprecated. Please use option nls= in the future. [ 242.104084][T10490] ntfs: (device loop0): parse_options(): Unrecognized mount option discard. [ 242.113786][T10490] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 242.137960][T10490] ntfs: (device loop0): parse_options(): Unrecognized mount option allow_utime. [ 242.147456][T10490] ntfs: (device loop0): parse_options(): Unrecognized mount option allow_utime. [ 242.156678][T10490] ntfs: (device loop0): parse_options(): Unrecognized mount option . [ 242.166454][T10487] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 242.193526][T10456] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.200685][T10456] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.262749][T10456] bridge_slave_0: entered allmulticast mode [ 242.270218][T10456] bridge_slave_0: entered promiscuous mode [ 242.419305][T10487] XFS (loop3): Ending clean mount [ 242.517433][T10456] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.592303][T10456] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.599559][T10456] bridge_slave_1: entered allmulticast mode [ 242.612505][ T51] Bluetooth: hci0: command tx timeout [ 242.646717][T10456] bridge_slave_1: entered promiscuous mode [ 242.652580][T10520] loop0: detected capacity change from 0 to 64 [ 242.676490][ T5773] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 242.741790][T10520] hfs: small file entry [ 242.994051][T10456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.080385][T10527] PKCS8: Unsupported PKCS#8 version [ 243.219310][T10456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.318600][ T1097] hsr_slave_0: left promiscuous mode [ 243.323638][T10535] netlink: 'syz.0.1811': attribute type 3 has an invalid length. [ 243.340266][ T1097] hsr_slave_1: left promiscuous mode [ 243.360925][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.382298][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.407842][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.429814][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.440054][ T1097] bridge_slave_1: left allmulticast mode [ 243.472405][ T1097] bridge_slave_1: left promiscuous mode [ 243.478184][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.504230][ T5829] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 243.523854][ T1097] bridge_slave_0: left allmulticast mode [ 243.544028][ T1097] bridge_slave_0: left promiscuous mode [ 243.549798][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.551617][T10541] loop0: detected capacity change from 0 to 1024 [ 243.585105][T10541] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 243.599606][T10541] EXT4-fs (loop0): blocks per group (131072) and clusters per group (8192) inconsistent [ 243.616113][ T1097] veth1_macvtap: left promiscuous mode [ 243.621785][ T1097] veth0_macvtap: left promiscuous mode [ 243.628223][ T1097] veth1_vlan: left promiscuous mode [ 243.637474][ T1097] veth0_vlan: left promiscuous mode [ 243.651139][T10541] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10543] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10541] [ 243.702560][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 243.716528][ T5829] usb 3-1: unable to get BOS descriptor or descriptor too short [ 243.727132][ T5829] usb 3-1: config 4 interface 0 has no altsetting 0 [ 243.750333][ T5829] usb 3-1: string descriptor 0 read error: -22 [ 243.762509][ T5829] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 243.787638][ T5829] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 243.811635][T10546] trusted_key: encrypted_key: insufficient parameters specified [ 243.815208][ T5829] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 243.864125][ T5829] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 243.889200][ T5829] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 243.916123][ T5829] usb 3-1: media controller created [ 243.960871][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.554209][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 244.604762][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 244.655834][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.698554][ T51] Bluetooth: hci0: command tx timeout [ 244.715038][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.023822][ T5829] zl10353_read_register: readreg error (reg=127, ret==0) [ 245.097918][ T5829] usb 3-1: USB disconnect, device number 17 [ 245.118708][ T1097] bond0 (unregistering): Released all slaves [ 245.306153][T10550] lo speed is unknown, defaulting to 1000 [ 245.326949][T10456] team0: Port device team_slave_0 added [ 245.339917][T10550] lo speed is unknown, defaulting to 1000 [ 245.349367][T10456] team0: Port device team_slave_1 added [ 245.371281][T10550] lo speed is unknown, defaulting to 1000 [ 245.403676][T10550] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 245.416772][T10456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.427555][T10550] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 245.440163][T10456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.536039][T10456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.551384][T10550] lo speed is unknown, defaulting to 1000 [ 245.555029][T10456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.568358][T10456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.644291][T10456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.679318][T10550] lo speed is unknown, defaulting to 1000 [ 245.737163][T10550] lo speed is unknown, defaulting to 1000 [ 245.773921][T10456] hsr_slave_0: entered promiscuous mode [ 245.812857][T10456] hsr_slave_1: entered promiscuous mode [ 245.830078][T10550] lo speed is unknown, defaulting to 1000 [ 246.430865][T10456] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 246.449611][T10456] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 246.479690][T10456] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 246.492499][ T5760] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 246.511210][T10456] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 246.597934][T10590] loop2: detected capacity change from 0 to 64 [ 246.682318][ T5760] usb 4-1: Using ep0 maxpacket: 8 [ 246.694370][ T5760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.725828][T10456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.738436][ T5760] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 246.774041][ T51] Bluetooth: hci0: command tx timeout [ 246.793085][ T5760] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 246.802707][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.813188][ T5760] usb 4-1: config 0 descriptor?? [ 246.827619][T10456] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.926120][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.933344][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.965789][T10596] loop2: detected capacity change from 0 to 256 [ 246.979880][T10596] exfat: Deprecated parameter 'utf8' [ 246.989493][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.996724][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.038025][T10596] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 247.154556][ T5829] kernel write not supported for file /input/event0 (pid: 5829 comm: kworker/1:5) [ 247.187471][T10456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.274728][ T5760] logitech 0003:046D:C50C.000F: unknown main item tag 0x3 [ 247.321626][T10602] loop2: detected capacity change from 0 to 1024 [ 247.327444][ T5760] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 247.368606][ T5760] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 247.385479][ T5760] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 247.398813][T10602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.401897][ T5760] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 247.426307][ T5760] logitech 0003:046D:C50C.000F: item fetching failed at offset 16/43 [ 247.443080][ T5760] logitech 0003:046D:C50C.000F: parse failed [ 247.452446][ T5760] logitech: probe of 0003:046D:C50C.000F failed with error -22 [ 247.478732][ T5760] usb 4-1: USB disconnect, device number 12 [ 247.740941][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.765657][T10456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.155636][T10631] loop2: detected capacity change from 0 to 8192 [ 248.163512][ T5810] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 248.188505][T10631] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 248.227647][T10631] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 248.237861][T10631] REISERFS (device loop2): using ordered data mode [ 248.246840][T10631] reiserfs: using flush barriers [ 248.255274][T10631] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 248.282078][T10631] REISERFS (device loop2): checking transaction log (loop2) [ 248.288654][T10456] veth0_vlan: entered promiscuous mode [ 248.349180][T10631] REISERFS (device loop2): Using r5 hash to sort names [ 248.370437][T10456] veth1_vlan: entered promiscuous mode [ 248.386953][T10631] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 248.396957][ T5810] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 248.442861][ T5810] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 248.481662][ T5810] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.491318][T10456] veth0_macvtap: entered promiscuous mode [ 248.516221][ T5810] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 248.547280][T10456] veth1_macvtap: entered promiscuous mode [ 248.566509][ T5810] usb 1-1: config 0 interface 0 has no altsetting 0 [ 248.597711][ T5810] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 248.632195][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.634961][T10456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.681930][ T5810] usb 1-1: config 0 descriptor?? [ 248.684487][T10456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.752601][T10456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.782270][T10456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.812366][T10456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.837145][T10456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.852521][ T51] Bluetooth: hci0: command tx timeout [ 248.879190][T10456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.964355][T10456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.986621][T10456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.996598][T10456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.009564][T10456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.020079][T10456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.030730][T10456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.049642][T10456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.080574][T10456] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.090113][T10456] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.100083][T10456] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.109132][T10456] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.121300][ T5810] hid-alps 0003:044E:120C.0010: item fetching failed at offset 7/8 [ 249.143743][ T5810] hid-alps 0003:044E:120C.0010: parse failed [ 249.149859][ T5810] hid-alps: probe of 0003:044E:120C.0010 failed with error -22 [ 249.202810][ T5760] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 249.206598][T10656] loop3: detected capacity change from 0 to 256 [ 249.268305][T10656] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 249.334648][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.369371][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.412009][ T5810] usb 1-1: USB disconnect, device number 12 [ 249.418300][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.434717][ T5760] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 249.447183][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.456554][ T5760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.490488][ T5760] usb 3-1: Product: syz [ 249.519677][ T5760] usb 3-1: Manufacturer: syz [ 249.533686][ T5760] usb 3-1: SerialNumber: syz [ 249.544953][ T5760] usb 3-1: config 0 descriptor?? [ 249.570274][ T5760] ch341 3-1:0.0: ch341-uart converter detected [ 250.042470][ T787] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 250.175527][T10687] loop5: detected capacity change from 0 to 64 [ 250.214144][ T5760] usb 3-1: failed to send control message: -71 [ 250.226560][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.231301][ T5760] ch341-uart: probe of ttyUSB0 failed with error -71 [ 250.261860][ T5760] usb 3-1: USB disconnect, device number 18 [ 250.268268][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.272418][ T5760] ch341 3-1:0.0: device disconnected [ 250.293787][ T787] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 250.321637][ T787] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 250.361369][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.389978][ T787] usb 4-1: config 0 descriptor?? [ 250.811975][ T787] playstation 0003:054C:09CC.0011: unknown main item tag 0xd [ 250.833693][ T787] playstation 0003:054C:09CC.0011: item fetching failed at offset 8/9 [ 250.866399][ T787] playstation 0003:054C:09CC.0011: Parse failed [ 250.880668][ T787] playstation: probe of 0003:054C:09CC.0011 failed with error -22 [ 250.909273][T10705] loop2: detected capacity change from 0 to 512 [ 250.970756][T10705] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 250.994980][T10705] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 251.051530][ T5760] usb 4-1: USB disconnect, device number 13 [ 251.060959][T10705] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #13: comm syz.2.1858: iget: bad i_size value: 12154757448730 [ 251.094040][T10705] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1858: couldn't read orphan inode 13 (err -117) [ 251.108530][T10705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.308469][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.426986][T10720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1861'. [ 251.439688][T10720] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1861'. [ 252.169446][T10739] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1869'. [ 252.222513][T10718] loop0: detected capacity change from 0 to 40427 [ 252.275359][T10718] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 252.311104][T10718] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 252.375597][T10718] F2FS-fs (loop0): Found nat_bits in checkpoint [ 252.398293][T10750] loop5: detected capacity change from 0 to 512 [ 252.442280][T10750] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 252.484099][T10750] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 252.551817][T10750] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.1871: Invalid block bitmap block 0 in block_group 0 [ 252.582359][T10750] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 252.617504][T10718] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 252.627296][T10750] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.1871: attempt to clear invalid blocks 983261 len 1 [ 252.640593][T10718] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 252.672319][T10750] EXT4-fs error (device loop5): __ext4_get_inode_loc:4496: comm syz.5.1871: Invalid inode table block 0 in block_group 0 [ 252.750040][T10750] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 252.793163][T10750] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 252.809172][T10750] EXT4-fs error (device loop5): __ext4_get_inode_loc:4496: comm syz.5.1871: Invalid inode table block 0 in block_group 0 [ 252.825391][T10750] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 252.859285][T10750] EXT4-fs error (device loop5): ext4_truncate:4301: inode #11: comm syz.5.1871: mark_inode_dirty error [ 252.871736][T10750] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 252.882727][T10750] EXT4-fs error (device loop5): __ext4_get_inode_loc:4496: comm syz.5.1871: Invalid inode table block 0 in block_group 0 [ 252.906677][T10750] EXT4-fs (loop5): 1 truncate cleaned up [ 252.928466][T10750] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.158907][T10771] loop3: detected capacity change from 0 to 512 [ 253.228404][T10771] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 253.249217][T10456] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.296063][T10771] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.1878: bad orphan inode 13 [ 253.335580][T10771] ext4_test_bit(bit=12, block=18) = 1 [ 253.343138][T10771] is_bad_inode(inode)=0 [ 253.347337][T10771] NEXT_ORPHAN(inode)=0 [ 253.382371][T10771] max_ino=32 [ 253.385652][T10771] i_nlink=1 [ 253.390058][T10771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 253.454084][T10777] loop5: detected capacity change from 0 to 128 [ 253.520848][ T27] audit: type=1800 audit(1782830387.220:112): pid=10777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1879" name="file1" dev="loop5" ino=1048773 res=0 errno=0 [ 253.697642][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 254.162412][ T23] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 254.362814][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 254.384710][ T23] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 254.405904][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.422741][ T5810] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 254.432314][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.471943][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 254.513263][ T23] usb 4-1: New USB device found, idVendor=056a, idProduct=e0f8, bcdDevice= 0.ff [ 254.527066][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.546839][ T23] usb 4-1: config 0 descriptor?? [ 254.622245][ T5810] usb 1-1: Using ep0 maxpacket: 32 [ 254.629780][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.651332][ T5810] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.675568][ T5810] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 254.700243][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.730948][ T5810] usb 1-1: config 0 descriptor?? [ 254.944066][T10807] loop5: detected capacity change from 0 to 32768 [ 254.988352][T10829] loop2: detected capacity change from 0 to 128 [ 255.000415][ T23] wacom 0003:056A:E0F8.0012: ignoring exceeding usage max [ 255.016251][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.023813][T10807] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 255.032719][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.042970][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.050903][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.058267][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.065464][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.073303][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.079422][T10829] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 255.080404][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.100501][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.107530][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.114674][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.121793][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.128995][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.136184][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.143355][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.150445][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.166539][T10829] ext4 filesystem being mounted at /472/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 255.198286][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.207626][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.224567][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.232853][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.240673][ T5810] logitech 0003:046D:CA03.0013: unknown main item tag 0x3 [ 255.248750][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.257285][ T5810] logitech 0003:046D:CA03.0013: unknown main item tag 0x0 [ 255.264646][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.271570][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.278823][ T5810] logitech 0003:046D:CA03.0013: unknown main item tag 0x0 [ 255.292214][ T5810] logitech 0003:046D:CA03.0013: unknown main item tag 0x0 [ 255.299548][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.308282][ T5810] logitech 0003:046D:CA03.0013: unknown main item tag 0x0 [ 255.322918][ T23] wacom 0003:056A:E0F8.0012: unknown main item tag 0x0 [ 255.325612][ T27] audit: type=1800 audit(1782830389.020:113): pid=10829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1893" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 255.336229][ T5810] logitech 0003:046D:CA03.0013: unknown main item tag 0x0 [ 255.367738][ T23] wacom 0003:056A:E0F8.0012: Unknown device_type for 'HID 056a:e0f8'. Ignoring. [ 255.432988][ T23] usb 4-1: USB disconnect, device number 14 [ 255.445363][T10807] XFS (loop5): Ending clean mount [ 255.451284][ T5810] logitech 0003:046D:CA03.0013: unknown main item tag 0x0 [ 255.459582][T10807] XFS (loop5): Quotacheck needed: Please wait. [ 255.478085][ T5810] logitech 0003:046D:CA03.0013: unknown main item tag 0x0 [ 255.518122][T10807] XFS (loop5): Quotacheck: Done. [ 255.523551][ T5771] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 255.553047][ T5810] logitech 0003:046D:CA03.0013: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.0-1/input0 [ 255.602206][ T5810] logitech 0003:046D:CA03.0013: no inputs found [ 255.646615][ T5810] usb 1-1: USB disconnect, device number 13 [ 255.750631][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.758007][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.790931][T10456] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 255.800940][T10837] fido_id[10837]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 256.705371][T10876] loop0: detected capacity change from 0 to 64 [ 257.112321][ T5828] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 257.189261][T10893] Bluetooth: MGMT ver 1.22 [ 257.253295][T10821] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 257.312227][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 257.325331][ T5828] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 257.344778][ T5828] usb 4-1: config 0 has no interface number 0 [ 257.357017][ T5828] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 257.374370][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.398285][ T5828] usb 4-1: Product: syz [ 257.402801][ T5828] usb 4-1: Manufacturer: syz [ 257.407498][ T5828] usb 4-1: SerialNumber: syz [ 257.421696][T10902] pimreg9: entered allmulticast mode [ 257.425238][ T5828] usb 4-1: config 0 descriptor?? [ 257.438782][ T5828] smsc95xx v2.0.0 [ 257.439515][T10821] usb 1-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 257.482256][T10821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.511210][T10821] usb 1-1: config 0 descriptor?? [ 257.649822][T10906] loop2: detected capacity change from 0 to 4096 [ 257.753927][ T51] Bluetooth: hci1: Malformed LE Event: 0x0d [ 257.755075][T10821] usb 1-1: string descriptor 0 read error: -71 [ 257.799091][T10821] usb-storage 1-1:0.0: USB Mass Storage device detected [ 257.832880][T10821] usb-storage 1-1:0.0: Quirks match for vid 05ab pid 0060: 2 [ 257.913217][T10821] usb 1-1: USB disconnect, device number 14 [ 258.065909][ T5828] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 258.086433][T10919] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1926'. [ 258.096645][ T5828] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 258.128066][ T5828] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 258.152649][ T5828] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 258.171989][ T5828] usb 4-1: USB disconnect, device number 15 [ 258.276400][T10821] IPVS: starting estimator thread 0... [ 258.372724][T10925] IPVS: using max 19 ests per chain, 45600 per kthread [ 258.736705][T10941] loop5: detected capacity change from 0 to 8192 [ 258.753614][T10941] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 258.807745][T10941] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 258.818576][T10941] REISERFS (device loop5): using ordered data mode [ 258.849539][T10941] reiserfs: using flush barriers [ 258.878805][T10941] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 258.903757][T10941] REISERFS (device loop5): checking transaction log (loop5) [ 258.913459][T10941] REISERFS (device loop5): Using rupasov hash to sort names [ 258.921654][T10941] REISERFS (device loop5): using 3.5.x disk format [ 258.930405][T10941] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 258.947138][T10941] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 258.959157][T10941] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 258.977026][T10941] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 259.167972][T10952] netlink: 134736 bytes leftover after parsing attributes in process `syz.2.1940'. [ 259.304503][T10954] loop3: detected capacity change from 0 to 4096 [ 259.367571][T10954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 259.544501][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.322263][ T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 260.359977][T10973] loop0: detected capacity change from 0 to 40427 [ 260.380502][T10973] F2FS-fs (loop0): invalid crc value [ 260.396319][T10973] F2FS-fs (loop0): Found nat_bits in checkpoint [ 260.487186][T10973] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 260.539234][ T8] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 260.552145][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.580870][ T8] usb 3-1: Product: syz [ 260.590955][ T8] usb 3-1: Manufacturer: syz [ 260.602215][ T8] usb 3-1: SerialNumber: syz [ 260.631799][ T8] usb 3-1: config 0 descriptor?? [ 260.641303][ T8] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 260.663540][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 260.682692][ T8] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 260.701752][T10981] loop5: detected capacity change from 0 to 32768 [ 260.702194][ T8] usb 3-1: media controller created [ 260.756173][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 260.797001][T10981] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 260.857255][T10983] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 260.870565][ T8] DVB: Unable to find symbol mt352_attach() [ 260.877881][T10983] dvb-usb: bulk message failed: -22 (7/0) [ 260.894822][T10981] XFS (loop5): Ending clean mount [ 261.004089][ T8] DVB: Unable to find symbol nxt6000_attach() [ 261.010222][ T8] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 261.028661][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input24 [ 261.045313][ T8] dvb-usb: schedule remote query interval to 1000 msecs. [ 261.070906][T10456] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 261.088233][ T8] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 261.107650][ T8] dvb-usb: bulk message failed: -22 (7/0) [ 261.129344][ T8] dvb-usb: bulk message failed: -22 (7/0) [ 261.158388][ T8] usb 3-1: USB disconnect, device number 19 [ 261.408790][ T8] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 261.799738][T11022] loop2: detected capacity change from 0 to 128 [ 261.853783][T11022] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 261.969180][T11022] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 261.985477][T11022] ext2 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.067531][T11037] ip6gretap1: entered allmulticast mode [ 262.143294][ T5771] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 262.256821][T11038] loop3: detected capacity change from 0 to 4096 [ 262.292747][T11038] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 262.300897][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 262.313014][ T51] CPU: 0 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 262.320428][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 262.330504][ T51] Workqueue: hci2 hci_rx_work [ 262.335234][ T51] Call Trace: [ 262.338537][ T51] [ 262.341492][ T51] dump_stack_lvl+0x18c/0x250 [ 262.346207][ T51] ? show_regs_print_info+0x20/0x20 [ 262.351443][ T51] ? load_image+0x420/0x420 [ 262.356004][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 262.361138][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 262.366175][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 262.370955][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 262.376175][ T51] kobject_add_internal+0x617/0xc90 [ 262.381387][ T51] kobject_add+0x164/0x240 [ 262.385815][ T51] ? kobject_init+0x1d0/0x1d0 [ 262.390506][ T51] ? get_device_parent+0x366/0x390 [ 262.395628][ T51] device_add+0x3fa/0xc40 [ 262.399964][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 262.404915][ T51] le_conn_complete_evt+0xe9f/0x1480 [ 262.410214][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 262.416462][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 262.422103][ T51] ? mutex_unlock+0x10/0x10 [ 262.426614][ T51] ? skb_pull_data+0xf0/0x1f0 [ 262.431299][ T51] hci_le_enh_conn_complete_evt+0x189/0x460 [ 262.437204][ T51] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 262.443626][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 262.449698][ T51] hci_event_packet+0x7b4/0x1280 [ 262.454645][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 262.459670][ T51] ? lock_chain_count+0x20/0x20 [ 262.464523][ T51] ? bis_list+0x290/0x290 [ 262.468861][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 262.474066][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 262.479269][ T51] hci_rx_work+0x43a/0xd60 [ 262.483691][ T51] ? process_scheduled_works+0x975/0x1600 [ 262.489414][ T51] process_scheduled_works+0xa60/0x1600 [ 262.494992][ T51] ? worker_attach_to_pool+0x370/0x370 [ 262.500456][ T51] ? assign_work+0x3cc/0x5d0 [ 262.505054][ T51] worker_thread+0xa5e/0xfe0 [ 262.509666][ T51] kthread+0x2fa/0x390 [ 262.513733][ T51] ? pr_cont_work+0x550/0x550 [ 262.518410][ T51] ? kthread_blkcg+0xd0/0xd0 [ 262.523002][ T51] ret_from_fork+0x48/0x80 [ 262.527418][ T51] ? kthread_blkcg+0xd0/0xd0 [ 262.532008][ T51] ret_from_fork_asm+0x11/0x20 [ 262.536786][ T51] [ 262.544533][ T51] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 262.546454][T11044] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1973'. [ 262.558582][ T51] Bluetooth: hci2: failed to register connection device [ 262.578242][T11044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1973'. [ 262.743192][T11038] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 262.749764][T11038] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 262.838610][T11038] ntfs3: loop3: ino=1e, "file1" encrypted i/o not supported [ 262.894940][T11054] IPVS: set_ctl: invalid protocol: 44 100.1.1.2:20002 [ 262.904957][ T41] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 262.915315][ T5773] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 262.921902][ T5773] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 262.962209][ T5773] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 262.987215][ T41] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 262.996046][T11056] loop5: detected capacity change from 0 to 256 [ 263.111462][T11056] FAT-fs (loop5): Directory bread(block 64) failed [ 263.142545][T11056] FAT-fs (loop5): Directory bread(block 65) failed [ 263.149215][T11056] FAT-fs (loop5): Directory bread(block 66) failed [ 263.196773][T11056] FAT-fs (loop5): Directory bread(block 67) failed [ 263.205962][T11056] FAT-fs (loop5): Directory bread(block 68) failed [ 263.212927][T11056] FAT-fs (loop5): Directory bread(block 69) failed [ 263.219699][T11056] FAT-fs (loop5): Directory bread(block 70) failed [ 263.253158][T11056] FAT-fs (loop5): Directory bread(block 71) failed [ 263.260889][T11056] FAT-fs (loop5): Directory bread(block 72) failed [ 263.275503][T11056] FAT-fs (loop5): Directory bread(block 73) failed [ 263.571860][T11075] loop3: detected capacity change from 0 to 256 [ 263.645393][T11075] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25f3d2c1, utbl_chksum : 0xe619d30d) [ 264.082402][T11091] loop0: detected capacity change from 0 to 2048 [ 264.109753][T11091] NILFS (loop0): invalid segment: Magic number mismatch [ 264.125678][T11091] NILFS (loop0): trying rollback from an earlier position [ 264.171416][T11091] NILFS (loop0): recovery complete [ 264.198509][T11095] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 264.230412][T11094] loop3: detected capacity change from 0 to 512 [ 264.249720][T11094] EXT4-fs: Ignoring removed oldalloc option [ 264.309209][T11094] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 264.335286][T11091] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 264.368461][T11094] EXT4-fs (loop3): 1 orphan inode deleted [ 264.389471][T11094] EXT4-fs (loop3): 1 truncate cleaned up [ 264.405450][T11094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.509928][T11094] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #12: block 7: comm syz.3.1994: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 264.550743][T11094] EXT4-fs (loop3): Remounting filesystem read-only [ 264.659555][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.946239][T11116] loop5: detected capacity change from 0 to 256 [ 264.999567][T11116] FAT-fs (loop5): Directory bread(block 64) failed [ 265.039816][T11116] FAT-fs (loop5): Directory bread(block 65) failed [ 265.062334][T11116] FAT-fs (loop5): Directory bread(block 66) failed [ 265.069007][T11116] FAT-fs (loop5): Directory bread(block 67) failed [ 265.094148][T11116] FAT-fs (loop5): Directory bread(block 68) failed [ 265.100735][T11116] FAT-fs (loop5): Directory bread(block 69) failed [ 265.118628][T11116] FAT-fs (loop5): Directory bread(block 70) failed [ 265.133633][T11116] FAT-fs (loop5): Directory bread(block 71) failed [ 265.140287][T11116] FAT-fs (loop5): Directory bread(block 72) failed [ 265.150519][T11116] FAT-fs (loop5): Directory bread(block 73) failed [ 265.222335][ T23] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 265.433578][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 265.470551][T11126] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2008'. [ 265.472319][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.495787][T11106] loop0: detected capacity change from 0 to 32768 [ 265.506262][T11126] Zero length message leads to an empty skb [ 265.510965][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.543539][ T23] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 265.559654][T11106] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 265.598494][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.612357][ T23] usb 3-1: Product: syz [ 265.616572][ T23] usb 3-1: Manufacturer: syz [ 265.621311][ T23] usb 3-1: SerialNumber: syz [ 265.639326][ T23] usb 3-1: selecting invalid altsetting 1 [ 265.646663][ T23] usb 3-1: unit 6 not found! [ 265.674469][T11106] XFS (loop0): Ending clean mount [ 265.674562][T11140] autofs4:pid:11140:autofs_fill_super: called with bogus options [ 265.769268][ T5770] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 265.842719][ T23] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 265.996991][ T23] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 266.145174][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.295039][ T786] usb 3-1: USB disconnect, device number 20 [ 267.866378][T11209] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2035'. [ 267.892506][T11209] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2035'. [ 268.177470][T11220] loop3: detected capacity change from 0 to 512 [ 268.213778][T11220] EXT4-fs: Ignoring removed nobh option [ 268.235810][T11220] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 268.280011][T11220] EXT4-fs (loop3): 1 truncate cleaned up [ 268.301351][T11220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.476099][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.857349][T11244] ALSA: mixer_oss: invalid OSS volume '' [ 269.192302][ T786] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 269.372071][T11268] loop0: detected capacity change from 0 to 16 [ 269.380287][T11268] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 269.392362][ T786] usb 6-1: Using ep0 maxpacket: 32 [ 269.400183][ T786] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 269.422771][ T786] usb 6-1: config 0 has no interface number 0 [ 269.444163][ T786] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 269.463114][ T786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.490022][ T786] usb 6-1: Product: syz [ 269.501585][ T786] usb 6-1: Manufacturer: syz [ 269.530927][ T786] usb 6-1: SerialNumber: syz [ 269.544679][ T786] usb 6-1: config 0 descriptor?? [ 269.573682][ T786] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 269.800223][ T786] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 269.861420][ T786] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 270.014035][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 270.177136][T11288] loop0: detected capacity change from 0 to 2048 [ 270.244973][T11288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.262454][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 270.271163][ T786] usb 6-1: USB disconnect, device number 2 [ 270.273551][T11288] ext4 filesystem being mounted at /529/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.280245][ T786] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 270.305467][ T786] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 270.318670][ T786] quatech2 6-1:0.51: device disconnected [ 270.340477][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2060'. [ 270.415336][T11293] netlink: 'syz.3.2060': attribute type 5 has an invalid length. [ 270.593408][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.163352][T11317] tipc: Started in network mode [ 271.168262][T11317] tipc: Node identity 41, cluster identity 5 [ 271.219034][T11317] tipc: Node number set to 65 [ 271.223889][T11322] loop0: detected capacity change from 0 to 64 [ 271.253361][T11317] tipc: Cannot configure node identity twice [ 271.327625][T11322] hfs: keylen 1794 too large [ 271.350932][T11322] hfs: keylen 1794 too large [ 272.752699][ T5760] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 272.780435][T11382] loop3: detected capacity change from 0 to 1024 [ 272.891784][T11382] hfsplus: invalid length 1280 has been corrected to 255 [ 272.922708][T11382] hfsplus: invalid length 1280 has been corrected to 255 [ 272.962906][ T5760] usb 1-1: Using ep0 maxpacket: 16 [ 272.975900][ T5760] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 273.022246][ T5760] usb 1-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 273.031306][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.084129][ T5760] usb 1-1: config 0 descriptor?? [ 273.119816][ T27] audit: type=1800 audit(1782830406.818:114): pid=11387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2087" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 273.224466][ T1097] hfsplus: invalid length 1280 has been corrected to 255 [ 273.343276][ T5810] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 273.510361][ T5760] wacom 0003:056A:00B4.0014: unknown main item tag 0x7 [ 273.535027][ T5760] wacom 0003:056A:00B4.0014: unknown main item tag 0x0 [ 273.545260][ T5810] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 273.557773][ T5760] wacom 0003:056A:00B4.0014: unknown main item tag 0x1 [ 273.562852][ T5810] usb 6-1: config 0 has no interface number 0 [ 273.586805][ T5810] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 273.592452][ T5760] wacom 0003:056A:00B4.0014: unknown main item tag 0xd [ 273.613504][ T5760] wacom 0003:056A:00B4.0014: Unknown device_type for 'HID 056a:00b4'. Assuming pen. [ 273.643383][ T5810] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 273.652442][ T5760] wacom 0003:056A:00B4.0014: hidraw0: USB HID v0.77 Device [HID 056a:00b4] on usb-dummy_hcd.0-1/input0 [ 273.684017][ T5810] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 273.714638][ T5760] input: Wacom Intuos3 12x19 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B4.0014/input/input25 [ 273.717544][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.805372][ T5810] usb 6-1: config 0 descriptor?? [ 273.812707][ T5760] usb 1-1: USB disconnect, device number 15 [ 273.863258][T11392] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 273.883970][T11406] fido_id[11406]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 273.931093][ T5810] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 274.213179][ T5760] usb 6-1: USB disconnect, device number 3 [ 274.306965][T11417] loop3: detected capacity change from 0 to 8192 [ 275.249707][T11449] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 275.804938][T11441] loop0: detected capacity change from 0 to 32768 [ 275.877195][T11441] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 275.983540][T11441] XFS (loop0): Ending clean mount [ 276.225657][ T5770] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 276.422481][ T5810] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 276.612353][ T5810] usb 4-1: Using ep0 maxpacket: 8 [ 276.628209][ T5810] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.659692][ T5810] usb 4-1: config 0 interface 0 has no altsetting 0 [ 276.674525][ T5810] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 276.694009][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.725597][ T5810] usb 4-1: config 0 descriptor?? [ 277.141355][ T5810] saitek 0003:06A3:0CD0.0015: unknown main item tag 0x2 [ 277.158700][ T5810] saitek 0003:06A3:0CD0.0015: unknown main item tag 0x0 [ 277.182230][ T5810] saitek 0003:06A3:0CD0.0015: unknown main item tag 0x0 [ 277.199720][ T5810] saitek 0003:06A3:0CD0.0015: unknown main item tag 0x0 [ 277.219710][ T5810] saitek 0003:06A3:0CD0.0015: unknown main item tag 0x0 [ 277.243456][ T5810] saitek 0003:06A3:0CD0.0015: unknown main item tag 0x0 [ 277.294359][ T5810] saitek 0003:06A3:0CD0.0015: hidraw0: USB HID v0.04 Device [HID 06a3:0cd0] on usb-dummy_hcd.3-1/input0 [ 277.345365][ T23] usb 4-1: USB disconnect, device number 16 [ 277.458076][T11503] fido_id[11503]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 278.261836][T11534] loop5: detected capacity change from 0 to 64 [ 278.395876][T11536] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2137'. [ 278.483703][T11538] loop5: detected capacity change from 0 to 8 [ 278.490729][T11538] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 278.527825][ T5946] udevd[5946]: incorrect cramfs checksum on /dev/loop5 [ 278.582728][ T5946] udevd[5946]: incorrect cramfs checksum on /dev/loop5 [ 278.638415][ T5946] udevd[5946]: incorrect cramfs checksum on /dev/loop5 [ 279.056937][T11548] loop5: detected capacity change from 0 to 4096 [ 279.098270][T11548] ntfs: volume version 3.1. [ 279.333033][T11548] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 279.403103][T11548] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 279.452835][T11548] ntfs: (device loop5): parse_options(): Option iocharset is deprecated. Please use option nls= in the future. [ 279.472518][T11548] ntfs: (device loop5): parse_options(): Option iocharset is deprecated. Please use option nls= in the future. [ 279.532415][T11548] ntfs: (device loop5): parse_options(): Unrecognized mount option discard. [ 279.541184][T11548] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 279.589050][T11548] ntfs: (device loop5): parse_options(): Unrecognized mount option allow_utime. [ 279.599940][T11548] ntfs: (device loop5): parse_options(): Unrecognized mount option allow_utime. [ 279.618178][T11548] ntfs: (device loop5): parse_options(): Unrecognized mount option . [ 279.884710][T11564] loop5: detected capacity change from 0 to 256 [ 280.377486][T11581] trusted_key: encrypted_key: insufficient parameters specified [ 280.594345][T11591] loop3: detected capacity change from 0 to 256 [ 280.675700][T11591] FAT-fs (loop3): Directory bread(block 64) failed [ 280.692554][T11591] FAT-fs (loop3): Directory bread(block 65) failed [ 280.699199][T11591] FAT-fs (loop3): Directory bread(block 66) failed [ 280.747372][T11591] FAT-fs (loop3): Directory bread(block 67) failed [ 280.765233][T11594] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2165'. [ 280.772273][T11591] FAT-fs (loop3): Directory bread(block 68) failed [ 280.781752][T11591] FAT-fs (loop3): Directory bread(block 69) failed [ 280.803205][T11591] FAT-fs (loop3): Directory bread(block 70) failed [ 280.809752][T11591] FAT-fs (loop3): Directory bread(block 71) failed [ 280.833048][T11591] FAT-fs (loop3): Directory bread(block 72) failed [ 280.839594][T11591] FAT-fs (loop3): Directory bread(block 73) failed [ 280.999783][T11600] PKCS8: Unsupported PKCS#8 version [ 281.151749][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2169'. [ 281.374524][T11612] trusted_key: encrypted_key: insufficient parameters specified [ 282.250547][T11641] [U] V3Fپ"S/4:XTZWTLW= [ 282.265799][T11641] [U] J"E:" [ 282.272648][ T5760] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 282.464323][ T5760] usb 6-1: unable to get BOS descriptor or descriptor too short [ 282.495167][ T5760] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 282.533842][ T5760] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 282.578520][ T5760] usb 6-1: string descriptor 0 read error: -22 [ 282.602370][ T5760] usb 6-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 282.621662][ T5760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.274677][ T5760] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 283.291894][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.305866][ T5760] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 283.314221][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.324474][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.336774][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 283.344765][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 283.352207][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 283.455959][ T5760] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 283.469918][ T5760] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 283.477735][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.484402][ T5760] usb 6-1: USB disconnect, device number 4 [ 283.509785][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.659802][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.682226][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.714313][T11664] lo speed is unknown, defaulting to 1000 [ 283.792256][ T23] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 283.802273][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.817686][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.985627][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.002211][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 284.009699][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.016408][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.026397][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 284.047949][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 284.057370][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.072727][ T23] usb 1-1: config 0 descriptor?? [ 284.117223][T11674] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 284.136608][T11674] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 284.345501][T11664] chnl_net:caif_netlink_parms(): no params data found [ 284.529666][ T23] logitech 0003:046D:C50C.0016: unknown main item tag 0x3 [ 284.555476][ T23] logitech 0003:046D:C50C.0016: unknown main item tag 0x0 [ 284.572576][ T23] logitech 0003:046D:C50C.0016: unknown main item tag 0x0 [ 284.580531][ T23] logitech 0003:046D:C50C.0016: unknown main item tag 0x0 [ 284.589190][ T49] tipc: Left network mode [ 284.594791][ T23] logitech 0003:046D:C50C.0016: unknown main item tag 0x0 [ 284.602447][ T23] logitech 0003:046D:C50C.0016: item fetching failed at offset 16/43 [ 284.611796][ T23] logitech 0003:046D:C50C.0016: parse failed [ 284.618307][ T23] logitech: probe of 0003:046D:C50C.0016 failed with error -22 [ 284.881374][T10821] usb 1-1: USB disconnect, device number 16 [ 285.055285][T11664] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.075736][T11664] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.104501][T11664] bridge_slave_0: entered allmulticast mode [ 285.117960][T11664] bridge_slave_0: entered promiscuous mode [ 285.143676][T11664] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.177759][T11664] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.202386][T11664] bridge_slave_1: entered allmulticast mode [ 285.230061][T11664] bridge_slave_1: entered promiscuous mode [ 285.412356][ T5775] Bluetooth: hci2: command tx timeout [ 285.628425][T11664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.646092][T11664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.806218][T11664] team0: Port device team_slave_0 added [ 285.828967][T11664] team0: Port device team_slave_1 added [ 286.015842][T11664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.038387][T11664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.088876][T11664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.123630][T11664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.130745][T11664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.156733][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.162418][ T786] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 286.176645][T11664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.342067][T11664] hsr_slave_0: entered promiscuous mode [ 286.356217][T11664] hsr_slave_1: entered promiscuous mode [ 286.356759][ T786] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 286.374367][T11664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.381950][T11664] Cannot create hsr debugfs directory [ 286.386063][ T786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.409948][ T786] usb 6-1: Product: syz [ 286.425312][ T786] usb 6-1: Manufacturer: syz [ 286.447602][ T786] usb 6-1: SerialNumber: syz [ 286.477883][ T786] usb 6-1: config 0 descriptor?? [ 286.492603][ T786] ch341 6-1:0.0: ch341-uart converter detected [ 286.502646][T11753] loop0: detected capacity change from 0 to 64 [ 286.951761][ T49] hsr_slave_0: left promiscuous mode [ 286.968194][ T49] hsr_slave_1: left promiscuous mode [ 286.979951][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.994039][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.007646][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.021095][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.029704][ T49] bridge_slave_1: left allmulticast mode [ 287.042521][ T49] bridge_slave_1: left promiscuous mode [ 287.048304][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.058521][ T49] bridge_slave_0: left allmulticast mode [ 287.065129][ T49] bridge_slave_0: left promiscuous mode [ 287.070898][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.111257][ T49] veth1_macvtap: left promiscuous mode [ 287.112028][ T786] usb 6-1: failed to send control message: -71 [ 287.122600][ T49] veth0_macvtap: left promiscuous mode [ 287.128578][ T49] veth1_vlan: left promiscuous mode [ 287.134434][ T786] ch341-uart: probe of ttyUSB0 failed with error -71 [ 287.141556][ T49] veth0_vlan: left promiscuous mode [ 287.159026][ T786] usb 6-1: USB disconnect, device number 5 [ 287.174689][ T786] ch341 6-1:0.0: device disconnected [ 287.307606][ T49] pimreg9 (unregistering): left allmulticast mode [ 287.492895][ T5775] Bluetooth: hci2: command tx timeout [ 288.025814][ T49] team0 (unregistering): Port device team_slave_1 removed [ 288.074037][ T49] team0 (unregistering): Port device team_slave_0 removed [ 288.099961][ T5760] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 288.134180][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.186392][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.212253][ T786] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 288.317254][ T5760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 288.330619][ T5760] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 288.349416][ T5760] usb 4-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.00 [ 288.358760][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.389528][ T5760] usb 4-1: config 0 descriptor?? [ 288.407527][ T786] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 288.417527][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.425703][ T786] usb 1-1: Product: syz [ 288.429920][ T786] usb 1-1: Manufacturer: syz [ 288.435198][ T786] usb 1-1: SerialNumber: syz [ 288.449883][ T786] usb 1-1: config 0 descriptor?? [ 288.461261][ T786] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 288.636617][ T49] bond0 (unregistering): Released all slaves [ 288.861833][ T5760] wacom 0003:056A:0031.0017: unknown main item tag 0x3 [ 288.904042][ T5760] wacom 0003:056A:0031.0017: unknown main item tag 0x0 [ 288.933109][ T5760] wacom 0003:056A:0031.0017: unknown main item tag 0x0 [ 288.948660][ T5760] wacom 0003:056A:0031.0017: unknown main item tag 0x0 [ 288.957104][ T5760] wacom 0003:056A:0031.0017: unknown main item tag 0x0 [ 288.984547][T11664] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 288.986404][ T5760] wacom 0003:056A:0031.0017: unknown main item tag 0x0 [ 289.021563][ T5760] wacom 0003:056A:0031.0017: unknown main item tag 0x0 [ 289.023530][T11664] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 289.040918][ T5760] wacom 0003:056A:0031.0017: unknown main item tag 0x0 [ 289.065307][T11664] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 289.089909][ T5760] wacom 0003:056A:0031.0017: hidraw0: USB HID v0.0b Device [HID 056a:0031] on usb-dummy_hcd.3-1/input0 [ 289.104169][ T786] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 289.111634][ T786] sq905c: probe of 1-1:0.0 failed with error -71 [ 289.148758][T11664] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 289.177072][ T786] usb 1-1: USB disconnect, device number 17 [ 289.183357][ T5760] usb 4-1: USB disconnect, device number 17 [ 289.338681][T11784] fido_id[11784]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 289.410359][ T49] IPVS: stop unused estimator thread 0... [ 289.543030][T11664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.572805][ T5775] Bluetooth: hci2: command tx timeout [ 289.605826][T11664] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.692285][ T2934] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.699496][ T2934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.740496][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.747705][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.895415][T11664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.363824][T11822] loop5: detected capacity change from 0 to 64 [ 290.638781][T11829] loop5: detected capacity change from 0 to 512 [ 290.645770][T11664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.683036][T11829] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 290.789425][T11829] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.2249: bad orphan inode 13 [ 290.868703][T11846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2254'. [ 290.882438][T11829] ext4_test_bit(bit=12, block=18) = 1 [ 290.887860][T11829] is_bad_inode(inode)=0 [ 290.892030][T11829] NEXT_ORPHAN(inode)=0 [ 290.952476][T11829] max_ino=32 [ 290.955733][T11829] i_nlink=1 [ 290.960157][T11829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 291.133264][T10456] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 291.473404][T11664] veth0_vlan: entered promiscuous mode [ 291.503496][T11664] veth1_vlan: entered promiscuous mode [ 291.594004][T11664] veth0_macvtap: entered promiscuous mode [ 291.624773][T11664] veth1_macvtap: entered promiscuous mode [ 291.657429][ T5775] Bluetooth: hci2: command tx timeout [ 291.667312][T11664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.700444][T11664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.723382][ T786] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 291.741176][T11664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.759673][T11664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.769982][T11664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.781469][T11664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.793922][T11664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.852046][T11664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.869703][T11664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.891829][T11664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.903195][T11664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.913511][T11664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.924748][T11664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.942963][ T786] usb 6-1: Using ep0 maxpacket: 16 [ 291.952917][T11664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.955863][ T786] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 291.979054][T11664] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.994871][ T786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.010980][T11664] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.025710][ T786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.031840][T11664] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.038852][ T786] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 292.053306][T11664] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.071833][ T786] usb 6-1: New USB device found, idVendor=056a, idProduct=e0f8, bcdDevice= 0.ff [ 292.085707][ T786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.097475][ T786] usb 6-1: config 0 descriptor?? [ 292.266696][T11887] loop0: detected capacity change from 0 to 512 [ 292.294646][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.312247][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.341544][T11887] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 292.383037][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.391284][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.407518][T11887] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.2266: bad orphan inode 13 [ 292.446341][T11887] ext4_test_bit(bit=12, block=18) = 1 [ 292.452848][T11887] is_bad_inode(inode)=0 [ 292.461209][T11887] NEXT_ORPHAN(inode)=0 [ 292.474374][T11887] max_ino=32 [ 292.477643][T11887] i_nlink=1 [ 292.481586][T11887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 292.588137][ T786] wacom 0003:056A:E0F8.0018: ignoring exceeding usage max [ 292.640817][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.672079][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.687779][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.697403][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.707816][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 292.717611][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.726836][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.738797][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.770521][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.809099][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.821287][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.838772][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.846852][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.858460][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.873752][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.880653][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.887981][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.895278][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.903130][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.910088][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.918970][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.926521][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.934261][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.941244][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.948602][ T786] wacom 0003:056A:E0F8.0018: unknown main item tag 0x0 [ 292.959716][ T786] wacom 0003:056A:E0F8.0018: Unknown device_type for 'HID 056a:e0f8'. Ignoring. [ 292.991123][ T786] usb 6-1: USB disconnect, device number 6 [ 293.142522][ T5828] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 293.330194][ T5828] usb 1-1: unable to get BOS descriptor or descriptor too short [ 293.353468][ T5828] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 293.379113][ T5828] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 293.440431][ T5828] usb 1-1: string descriptor 0 read error: -22 [ 293.456380][ T5828] usb 1-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 293.486006][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.164883][ T5828] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 294.186572][ T5828] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 294.298639][ T5828] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 294.326216][ T5828] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 294.363919][ T5828] usb 1-1: USB disconnect, device number 18 [ 294.492270][ T971] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 294.695724][ T971] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 294.705414][ T971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.713490][ T971] usb 6-1: Product: syz [ 294.717708][ T971] usb 6-1: Manufacturer: syz [ 294.722598][ T971] usb 6-1: SerialNumber: syz [ 294.729575][ T971] usb 6-1: config 0 descriptor?? [ 294.737968][ T971] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 295.376927][ T971] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 295.390182][ T971] sq905c: probe of 6-1:0.0 failed with error -71 [ 295.413675][ T971] usb 6-1: USB disconnect, device number 7 [ 296.212220][ T971] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 296.372572][ T5828] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 296.414140][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 296.445293][ T971] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 296.477672][ T971] usb 1-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.00 [ 296.497722][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.520548][ T971] usb 1-1: config 0 descriptor?? [ 296.565021][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 296.577185][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.604262][ T5828] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.631085][ T5828] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 296.645675][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.670165][ T5828] usb 4-1: config 0 descriptor?? [ 296.695378][T12025] loop5: detected capacity change from 0 to 32768 [ 296.722566][T12025] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 296.839199][ T5946] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 296.953469][ T971] wacom 0003:056A:0031.0019: unknown main item tag 0x3 [ 296.982327][ T971] wacom 0003:056A:0031.0019: unknown main item tag 0x0 [ 296.989249][ T971] wacom 0003:056A:0031.0019: unknown main item tag 0x0 [ 297.012898][ T971] wacom 0003:056A:0031.0019: unknown main item tag 0x0 [ 297.030140][ T971] wacom 0003:056A:0031.0019: unknown main item tag 0x0 [ 297.040246][ T971] wacom 0003:056A:0031.0019: unknown main item tag 0x0 [ 297.060469][ T971] wacom 0003:056A:0031.0019: unknown main item tag 0x0 [ 297.074747][ T971] wacom 0003:056A:0031.0019: unknown main item tag 0x0 [ 297.109998][ T971] wacom 0003:056A:0031.0019: hidraw0: USB HID v0.0b Device [HID 056a:0031] on usb-dummy_hcd.0-1/input0 [ 297.114713][ T5828] logitech 0003:046D:CA03.001A: unknown main item tag 0x3 [ 297.148887][ T5828] logitech 0003:046D:CA03.001A: unknown main item tag 0x0 [ 297.161838][ T5828] logitech 0003:046D:CA03.001A: unknown main item tag 0x0 [ 297.179464][ T5828] logitech 0003:046D:CA03.001A: unknown main item tag 0x0 [ 297.202447][ T5828] logitech 0003:046D:CA03.001A: unknown main item tag 0x0 [ 297.222393][ T971] usb 1-1: USB disconnect, device number 19 [ 297.230063][ T5828] logitech 0003:046D:CA03.001A: unknown main item tag 0x0 [ 297.240762][ T5828] logitech 0003:046D:CA03.001A: unknown main item tag 0x0 [ 297.263124][ T5828] logitech 0003:046D:CA03.001A: unknown main item tag 0x0 [ 297.288381][ T5828] logitech 0003:046D:CA03.001A: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.3-1/input0 [ 297.306317][T12043] fido_id[12043]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 297.307054][T12045] loop5: detected capacity change from 0 to 128 [ 297.323325][ T5828] logitech 0003:046D:CA03.001A: no inputs found [ 297.367841][T12045] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 297.380888][ T5828] usb 4-1: USB disconnect, device number 18 [ 297.401494][T12045] ext4 filesystem being mounted at /142/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 297.433298][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.505782][ T27] audit: type=1800 audit(1782830431.208:115): pid=12045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2306" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 297.573638][T12049] fido_id[12049]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 297.604061][T10456] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 297.951815][ T971] IPVS: starting estimator thread 0... [ 298.052391][T12061] IPVS: using max 19 ests per chain, 45600 per kthread [ 298.131104][T12067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2314'. [ 298.162531][T12067] netlink: 'syz.0.2314': attribute type 5 has an invalid length. [ 298.351762][T12077] loop0: detected capacity change from 0 to 128 [ 298.397703][T12077] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 298.442395][T12077] ext4 filesystem being mounted at /604/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 298.474178][ C1] vkms_vblank_simulate: vblank timer overrun [ 298.503514][ T27] audit: type=1800 audit(1782830432.198:116): pid=12077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2319" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 298.581756][ T5770] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.780637][T12089] loop3: detected capacity change from 0 to 2048 [ 298.837527][T12089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.889412][T12089] ext4 filesystem being mounted at /597/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.926363][T12097] loop0: detected capacity change from 0 to 256 [ 299.084132][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.720147][ T971] IPVS: starting estimator thread 0... [ 299.742561][T12121] loop3: detected capacity change from 0 to 256 [ 299.832254][T12118] IPVS: using max 20 ests per chain, 48000 per kthread [ 300.014464][T12130] loop3: detected capacity change from 0 to 64 [ 301.375031][T12157] loop6: detected capacity change from 0 to 32768 [ 301.496474][T12157] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 301.708747][T11664] ocfs2: Unmounting device (7,6) on (node local) [ 302.271399][T12209] loop6: detected capacity change from 0 to 64 [ 302.306736][T12207] loop5: detected capacity change from 0 to 4096 [ 302.382835][T12207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.530749][T10456] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.760261][T12199] loop3: detected capacity change from 0 to 32768 [ 302.814947][T12199] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 302.853904][ T5775] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 302.861237][T12199] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 302.865177][ T5775] CPU: 0 PID: 5775 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 302.880531][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 302.890608][ T5775] Workqueue: hci1 hci_rx_work [ 302.895328][ T5775] Call Trace: [ 302.896178][T12199] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 302.898604][ T5775] [ 302.898615][ T5775] dump_stack_lvl+0x18c/0x250 [ 302.915627][ T5775] ? show_regs_print_info+0x20/0x20 [ 302.920854][ T5775] ? load_image+0x420/0x420 [ 302.925397][ T5775] sysfs_create_dir_ns+0x26e/0x2a0 [ 302.930536][ T5775] ? __lock_acquire+0x7d80/0x7d80 [ 302.935585][ T5775] ? sysfs_warn_dup+0xa0/0xa0 [ 302.940289][ T5775] ? do_raw_spin_unlock+0x121/0x230 [ 302.945532][ T5775] kobject_add_internal+0x617/0xc90 [ 302.947359][T12199] BTRFS info (device loop3): use zstd compression, level 3 [ 302.950750][ T5775] kobject_add+0x164/0x240 [ 302.950790][ T5775] ? kobject_init+0x1d0/0x1d0 [ 302.967091][ T5775] ? get_device_parent+0x366/0x390 [ 302.972240][ T5775] device_add+0x3fa/0xc40 [ 302.976606][ T5775] hci_conn_add_sysfs+0xd5/0x1e0 [ 302.981587][ T5775] le_conn_complete_evt+0xe9f/0x1480 [ 302.986918][ T5775] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 302.993209][ T5775] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 302.998872][ T5775] ? mutex_unlock+0x10/0x10 [ 303.000146][T12199] BTRFS info (device loop3): using free space tree [ 303.003386][ T5775] ? skb_pull_data+0xf0/0x1f0 [ 303.003418][ T5775] hci_le_enh_conn_complete_evt+0x189/0x460 [ 303.003448][ T5775] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 303.003475][ T5775] ? hci_remote_host_features_evt+0x150/0x150 [ 303.003503][ T5775] hci_event_packet+0x7b4/0x1280 [ 303.003534][ T5775] ? __lock_acquire+0x7d80/0x7d80 [ 303.003557][ T5775] ? lock_chain_count+0x20/0x20 [ 303.003580][ T5775] ? bis_list+0x290/0x290 [ 303.003612][ T5775] ? lockdep_hardirqs_on+0x98/0x150 [ 303.057442][ T5775] ? hci_send_to_monitor+0xd7/0x4f0 [ 303.062676][ T5775] hci_rx_work+0x43a/0xd60 [ 303.067130][ T5775] ? process_scheduled_works+0x975/0x1600 [ 303.072890][ T5775] process_scheduled_works+0xa60/0x1600 [ 303.078493][ T5775] ? worker_attach_to_pool+0x370/0x370 [ 303.083986][ T5775] ? assign_work+0x3cc/0x5d0 [ 303.088614][ T5775] worker_thread+0xa5e/0xfe0 [ 303.093248][ T5775] kthread+0x2fa/0x390 [ 303.097334][ T5775] ? pr_cont_work+0x550/0x550 [ 303.102039][ T5775] ? kthread_blkcg+0xd0/0xd0 [ 303.106655][ T5775] ret_from_fork+0x48/0x80 [ 303.111097][ T5775] ? kthread_blkcg+0xd0/0xd0 [ 303.115712][ T5775] ret_from_fork_asm+0x11/0x20 [ 303.120521][ T5775] [ 303.137815][ T5775] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 303.152895][ T5775] Bluetooth: hci1: failed to register connection device [ 303.251426][T12199] BTRFS info (device loop3): enabling ssd optimizations [ 303.259335][T12199] BTRFS info (device loop3): auto enabling async discard [ 303.409665][ T5773] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 303.504548][ T5946] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (5946) [ 304.123382][ T5775] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 304.133731][ T5775] CPU: 0 PID: 5775 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 304.141308][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 304.151381][ T5775] Workqueue: hci2 hci_rx_work [ 304.156091][ T5775] Call Trace: [ 304.159385][ T5775] [ 304.162333][ T5775] dump_stack_lvl+0x18c/0x250 [ 304.167042][ T5775] ? show_regs_print_info+0x20/0x20 [ 304.172271][ T5775] ? load_image+0x420/0x420 [ 304.176813][ T5775] sysfs_create_dir_ns+0x26e/0x2a0 [ 304.181948][ T5775] ? __lock_acquire+0x7d80/0x7d80 [ 304.187002][ T5775] ? sysfs_warn_dup+0xa0/0xa0 [ 304.191707][ T5775] ? do_raw_spin_unlock+0x121/0x230 [ 304.196940][ T5775] kobject_add_internal+0x617/0xc90 [ 304.202178][ T5775] kobject_add+0x164/0x240 [ 304.206637][ T5775] ? kobject_init+0x1d0/0x1d0 [ 304.211356][ T5775] ? get_device_parent+0x366/0x390 [ 304.216508][ T5775] device_add+0x3fa/0xc40 [ 304.220874][ T5775] hci_conn_add_sysfs+0xd5/0x1e0 [ 304.225848][ T5775] le_conn_complete_evt+0xe9f/0x1480 [ 304.231175][ T5775] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 304.237452][ T5775] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 304.243127][ T5775] ? mutex_unlock+0x10/0x10 [ 304.247662][ T5775] ? skb_pull_data+0xf0/0x1f0 [ 304.252377][ T5775] hci_le_enh_conn_complete_evt+0x189/0x460 [ 304.258295][ T5775] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 304.264729][ T5775] ? hci_remote_host_features_evt+0x150/0x150 [ 304.270822][ T5775] hci_event_packet+0x7b4/0x1280 [ 304.275796][ T5775] ? __lock_acquire+0x7d80/0x7d80 [ 304.280850][ T5775] ? lock_chain_count+0x20/0x20 [ 304.285729][ T5775] ? bis_list+0x290/0x290 [ 304.290090][ T5775] ? lockdep_hardirqs_on+0x98/0x150 [ 304.295328][ T5775] ? hci_send_to_monitor+0xd7/0x4f0 [ 304.300562][ T5775] hci_rx_work+0x43a/0xd60 [ 304.305013][ T5775] ? process_scheduled_works+0x975/0x1600 [ 304.310765][ T5775] process_scheduled_works+0xa60/0x1600 [ 304.316377][ T5775] ? worker_attach_to_pool+0x370/0x370 [ 304.321876][ T5775] ? assign_work+0x3cc/0x5d0 [ 304.326505][ T5775] worker_thread+0xa5e/0xfe0 [ 304.331154][ T5775] kthread+0x2fa/0x390 [ 304.335240][ T5775] ? pr_cont_work+0x550/0x550 [ 304.339955][ T5775] ? kthread_blkcg+0xd0/0xd0 [ 304.344568][ T5775] ret_from_fork+0x48/0x80 [ 304.349017][ T5775] ? kthread_blkcg+0xd0/0xd0 [ 304.353630][ T5775] ret_from_fork_asm+0x11/0x20 [ 304.358441][ T5775] [ 304.376997][ T5775] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 304.391639][ T5775] Bluetooth: hci2: failed to register connection device [ 304.512011][T12275] loop0: detected capacity change from 0 to 4096 [ 304.549407][T12275] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 304.661774][T12275] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 304.682645][T12275] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 304.851536][T12275] ntfs3: loop0: ino=1e, "file1" encrypted i/o not supported [ 304.993725][ T2934] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 305.016477][ T5770] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 305.027518][ T5770] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 305.036144][ T5770] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 305.054618][ T49] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 305.287711][T12302] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2400'. [ 305.772268][T12323] loop3: detected capacity change from 0 to 256 [ 305.915941][T12323] FAT-fs (loop3): Directory bread(block 64) failed [ 305.932418][T12323] FAT-fs (loop3): Directory bread(block 65) failed [ 305.943367][T12325] loop0: detected capacity change from 0 to 4096 [ 305.955064][T12323] FAT-fs (loop3): Directory bread(block 66) failed [ 305.982440][T12323] FAT-fs (loop3): Directory bread(block 67) failed [ 305.994774][T12323] FAT-fs (loop3): Directory bread(block 68) failed [ 306.014418][T12325] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.027709][T12323] FAT-fs (loop3): Directory bread(block 69) failed [ 306.056206][T12323] FAT-fs (loop3): Directory bread(block 70) failed [ 306.063057][T12323] FAT-fs (loop3): Directory bread(block 71) failed [ 306.069775][T12323] FAT-fs (loop3): Directory bread(block 72) failed [ 306.076497][T12323] FAT-fs (loop3): Directory bread(block 73) failed [ 306.363686][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.182767][ T23] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 307.408937][ T23] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 307.422255][ T23] usb 4-1: config 0 has no interface number 0 [ 307.428390][ T23] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 307.482368][ T23] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 307.507639][ T23] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 307.555356][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.586573][ T23] usb 4-1: config 0 descriptor?? [ 307.593009][T12365] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 307.619027][ T23] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 307.877143][ T23] usb 4-1: USB disconnect, device number 19 [ 308.055689][T12402] loop6: detected capacity change from 0 to 16 [ 308.103878][T12402] erofs: (device loop6): mounted with root inode @ nid 36. [ 308.124776][T12402] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 308.314489][T12406] loop0: detected capacity change from 0 to 4096 [ 308.348045][T12406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 308.490810][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.000762][T12433] loop0: detected capacity change from 0 to 4096 [ 310.215047][T12440] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 310.305915][T12417] loop3: detected capacity change from 0 to 32768 [ 310.483466][T12417] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 311.252600][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 311.466459][T12455] loop6: detected capacity change from 0 to 512 [ 311.523254][T12455] EXT4-fs: Ignoring removed nobh option [ 311.637543][T12455] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 311.784819][T12455] EXT4-fs (loop6): 1 truncate cleaned up [ 311.806527][T12455] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.249404][T11664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.226644][T12466] loop0: detected capacity change from 0 to 32768 [ 313.277792][T12466] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 313.326229][T12466] JBD2: Ignoring recovery information on journal [ 313.472739][T12466] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 314.149670][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 315.006021][T12499] loop6: detected capacity change from 0 to 1024 [ 315.179262][T12499] hfsplus: invalid length 1280 has been corrected to 255 [ 315.254548][T12499] hfsplus: invalid length 1280 has been corrected to 255 [ 315.543678][ T27] audit: type=1800 audit(1782830449.238:117): pid=12507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2457" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 315.811484][ T41] hfsplus: invalid length 1280 has been corrected to 255 [ 315.959682][T12511] loop3: detected capacity change from 0 to 256 [ 316.177031][T12511] FAT-fs (loop3): Directory bread(block 64) failed [ 316.215989][T12511] FAT-fs (loop3): Directory bread(block 65) failed [ 316.260050][T12511] FAT-fs (loop3): Directory bread(block 66) failed [ 316.307326][T12511] FAT-fs (loop3): Directory bread(block 67) failed [ 316.363143][T12511] FAT-fs (loop3): Directory bread(block 68) failed [ 316.369719][T12511] FAT-fs (loop3): Directory bread(block 69) failed [ 316.482652][T12511] FAT-fs (loop3): Directory bread(block 70) failed [ 316.545798][T12511] FAT-fs (loop3): Directory bread(block 71) failed [ 316.566831][T12511] FAT-fs (loop3): Directory bread(block 72) failed [ 316.602300][T12511] FAT-fs (loop3): Directory bread(block 73) failed [ 316.646727][T12517] loop6: detected capacity change from 0 to 256 [ 316.721506][T12517] exfat: Deprecated parameter 'namecase' [ 316.803969][T12517] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d) [ 317.115540][T12493] loop0: detected capacity change from 0 to 40427 [ 317.184232][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.190643][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.227385][T12493] F2FS-fs (loop0): invalid crc value [ 317.355348][T12493] F2FS-fs (loop0): Found nat_bits in checkpoint [ 318.392647][T12540] loop3: detected capacity change from 0 to 1024 [ 318.693949][ T27] audit: type=1800 audit(1782830452.368:118): pid=12540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2468" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 318.714468][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.921999][ T27] audit: type=1800 audit(1782830452.468:119): pid=12540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2468" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 319.136118][T12550] loop0: detected capacity change from 0 to 512 [ 319.243962][T12550] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 319.384189][T12550] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.2471: bg 0: block 4: invalid block bitmap [ 319.518632][T12550] EXT4-fs (loop0): Remounting filesystem read-only [ 319.572562][T12550] EXT4-fs (loop0): 1 truncate cleaned up [ 319.579512][T12550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.703150][T12560] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 320.219429][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.762005][T12610] macvtap1: entered allmulticast mode [ 322.858047][T12610] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 322.985661][T12610] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 324.267396][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 324.280131][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 324.288980][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 324.298111][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 324.338596][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 324.346224][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 324.619505][T12632] lo speed is unknown, defaulting to 1000 [ 324.974511][ T1097] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.015530][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2507'. [ 325.742336][ T23] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 325.861942][ T1097] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.992538][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 326.025302][ T23] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 326.063570][ T23] usb 1-1: config 4 has no interface number 0 [ 326.110182][ T23] usb 1-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 326.172064][ T23] usb 1-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 326.207773][ T23] usb 1-1: config 4 interface 51 has no altsetting 0 [ 326.219408][ T1097] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.246637][ T23] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 326.285257][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.331754][ T23] usb 1-1: Product: syz [ 326.346146][ T23] usb 1-1: Manufacturer: syz [ 326.361154][ T23] usb 1-1: SerialNumber: syz [ 326.401731][T12651] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 326.440928][T12651] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 326.452628][ T51] Bluetooth: hci0: command tx timeout [ 326.466035][T12660] loop6: detected capacity change from 0 to 4096 [ 326.547290][ T1097] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.562656][T12660] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.949870][ T23] cdc_eem: probe of 1-1:4.51 failed with error -71 [ 327.002554][ T23] usb 1-1: USB disconnect, device number 20 [ 327.094799][T12632] chnl_net:caif_netlink_parms(): no params data found [ 327.445825][T11664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.491183][T12632] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.553935][T12632] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.561194][T12632] bridge_slave_0: entered allmulticast mode [ 327.583792][T12632] bridge_slave_0: entered promiscuous mode [ 327.663501][T12632] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.670673][T12632] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.812479][T12632] bridge_slave_1: entered allmulticast mode [ 327.868270][T12632] bridge_slave_1: entered promiscuous mode [ 328.607253][ T51] Bluetooth: hci0: command tx timeout [ 330.728558][ T51] Bluetooth: hci0: command tx timeout [ 333.221512][ T51] Bluetooth: hci0: command tx timeout [ 358.769117][T12632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.138563][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.152280][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 406.657849][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 440.164759][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.178525][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.498569][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 495.159800][ T28] INFO: task kworker/1:4:5810 blocked for more than 143 seconds. [ 495.175614][ T28] Not tainted syzkaller #0 [ 495.180574][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.494777][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.691922][ T1282] ieee802154 phy1 wpan1: encryption failed: -22