last executing test programs: 2m53.077008719s ago: executing program 3 (id=368): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, r2, r3, 0x80000003, 0xffff, 0xfefffffc, 0x0, 0x200, 0x1ff, 0xc, 0x2000000, 0x31e}) 2m52.881411543s ago: executing program 3 (id=371): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x4, 0xb, 0x0, 0x8b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x9, 0x4, 0x7c, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r1, 0xafbb, 0x10, 0x3, 0xd, 0x8}, 0x14) 2m52.733144897s ago: executing program 3 (id=372): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0/../file0\x00', &(0x7f0000000040)={0xc2800, 0x0, 0x10}, 0x18) 2m52.672171738s ago: executing program 3 (id=374): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2m52.217111757s ago: executing program 3 (id=376): unshare(0x22020400) r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, 0x0, 0x0}, 0x20) 2m51.507170613s ago: executing program 3 (id=380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) close(r0) 2m51.16801504s ago: executing program 32 (id=380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) close(r0) 1m28.827969918s ago: executing program 0 (id=994): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00\x00\x00', 0x3}], 0x1}}], 0x1, 0x20008000) shutdown(r0, 0x1) poll(&(0x7f0000000400)=[{r0, 0x5452}, {0xffffffffffffffff, 0x2130}], 0x2, 0x0) 1m28.24534915s ago: executing program 0 (id=1005): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x100}}}}}}, 0x0) 1m28.010866426s ago: executing program 0 (id=999): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x3, 0x0, "4d512c91002a495a891be4261b2bb40bb4fbf29c00230000ff5800"}) 1m25.571936287s ago: executing program 0 (id=1017): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2acd0da, 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 1m25.319417083s ago: executing program 0 (id=1019): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0xff, 0x234, &(0x7f0000000900)="$eJzs279rE2Ecx/HPXS7pNdpWrDqIQlGsLjb+mBxE3Tr1H+hU2qjFE6tVsEWwWdRB6OTm4iQIDo4idRMn/wAHwU0pdgg4OfTkzvvR5JLmB5ecpO/X0ueez/Pkee7oJd82iQDsWVc1IUOGCt7BMfvA+riR9ZYA9Ikb/Ny23JgZhgAG282RrHcAIBtb16SXp6Rf1UfzyhXCssCrAL5tStqYfKo1Bbk5JOn1F8mK6oetinTUCnLD1nB9ffFKOh3ON4q14UNbqkjFKN+3IxyWKq7/+GdOhuvv14hGNZb38oMaD9ZfiOYfaVnvWJ2XSAAADBxDU63yXQeYur7olM81zfN+fr5pXvDzCy3yi9HxUNSafTHz4IN7edvLp+bvOAu7bRNAA2YX9//X43E71+L+t5rc//V/JwDov+WV1VtzjuM+lvxG+V7QEzTC/wjEPbnEmFQa4XsObQwO36FMRN5j7OjJJaevTybPPb2zMOONjUnqzYX6jxtqEH2f/ndNoh6zF1e+pnHi558nS8/fvW9n8NsOlzCj37rZjXK1boxMqYfnNZG4C+Ycu73pxprrdrhow6eL+MMBdtrPRAD6rXT/9lJpeWX17GJO0o1yPnzBn/6x6Vf2pZr6Pp/dTgGkLX7Rb5RWEj1u7eHMp8+/q5fePOti5SuSPha7mAgAAAAAAAAAAAAAAOoc0uGstwAAAACgT5Lf/rk7mvZXl7I+RwAAAAAAAAAAAAAAAAAABs3fAAAA///PtQqI") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) unlink(&(0x7f0000000580)='./file1\x00') close_range(r0, 0xffffffffffffffff, 0x0) 1m24.577080689s ago: executing program 0 (id=1026): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@canfd={{0x3}, 0xba, 0x2, 0x0, 0x0, "a0127cd420b31f4e0df4cadc31fef23e91ab565919ea09230a09c96584d5e7506c31739c7d2dae4c439bb91a72dd05c97b677ecc0cf198747bce723f8c9c8871"}, 0x48}, 0x1, 0x0, 0x0, 0x4881}, 0x4000001) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 1m24.345622684s ago: executing program 33 (id=1026): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@canfd={{0x3}, 0xba, 0x2, 0x0, 0x0, "a0127cd420b31f4e0df4cadc31fef23e91ab565919ea09230a09c96584d5e7506c31739c7d2dae4c439bb91a72dd05c97b677ecc0cf198747bce723f8c9c8871"}, 0x48}, 0x1, 0x0, 0x0, 0x4881}, 0x4000001) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 19.994889585s ago: executing program 4 (id=1631): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x4, "914f"}, @timestamp={0x8, 0xa, 0x4, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x12, [0x1, 0xfffffffe, 0x3, 0x6]}]}}}}}}}}, 0x0) 19.841087558s ago: executing program 4 (id=1632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x20000084) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x800a}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}]}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) close(r0) 19.746851411s ago: executing program 4 (id=1634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000073, 0x0, 0x2e3}]}) 19.513055817s ago: executing program 4 (id=1636): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x2a05004, 0x0) 19.38782657s ago: executing program 4 (id=1637): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 18.936380661s ago: executing program 4 (id=1641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000090) 18.568736201s ago: executing program 34 (id=1641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000090) 10.451102296s ago: executing program 1 (id=1665): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x5, 0x7, 0x8, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000006000000010001000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 10.401169208s ago: executing program 2 (id=1666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @local}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 'syzkaller0\x00'}) 9.096606701s ago: executing program 1 (id=1668): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000800)={0x40, 0x8, 0x6, "e5bc653d24cf"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0xd, 0x1, "ef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.092607281s ago: executing program 2 (id=1669): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0x5ee, 0x0, 0x0, 0x0) 7.51713756s ago: executing program 5 (id=1670): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) close(0x3) syz_open_dev$vim2m(&(0x7f0000000040), 0xe0000000003, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 7.51691024s ago: executing program 2 (id=1671): syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aad90a27bdd417b5ff00000008000000000000004e"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d0f, &(0x7f0000000040)) 6.057168297s ago: executing program 5 (id=1672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc440000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a310000000018000380140000800800034000000002050006400600000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 6.053114767s ago: executing program 1 (id=1673): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000e00)={0x1c, &(0x7f00000006c0)={0x20, 0x1f}, 0x0, 0x0}) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 6.038051427s ago: executing program 2 (id=1678): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x219}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x40}}, 0x24040084) 4.409382689s ago: executing program 5 (id=1674): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)='\x00!', 0x2}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) read(r0, &(0x7f0000000340)=""/63, 0x3f) 4.36508364s ago: executing program 2 (id=1675): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001580)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="000426bd7000fcdbdf250c00000034000980080002000010000008000100fbffffff08000100ffffff7f08000200d63c0000080001000400000008000100090000002c0101800d0001007564703a73797a3200000000380004001400010002004e23ac1e00010000000000000000200002000a004e227ffffffffc00000000000000000000000000000001000080080003000400000038000400200001000af04e2000000009ff020000000000000000000000000001040000001400020002004e240000000000000000000000004c00028008000300ff0100000800040001040000080003000900000008000200f600000900000000000000000800020001000000080001001a0000000800030009000000080001001700000054000280080001001c00000008"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) 2.613231294s ago: executing program 5 (id=1676): syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000200)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@noenospc_debug}, {@usebackuproot}, {@compress}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0x7f, 0x5122, &(0x7f0000006440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r0, 0x0, 0xfff, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x11, 0x0, 0x8000000) 2.612045374s ago: executing program 1 (id=1677): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) recvmmsg(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2100, 0x0) lseek(r0, 0x2000, 0x4) 694.467213ms ago: executing program 2 (id=1684): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x810448e0, 0x0) 679.784703ms ago: executing program 5 (id=1679): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 675.130174ms ago: executing program 1 (id=1680): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2acd0da, 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 16.577ms ago: executing program 5 (id=1681): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x3, 0x0, "4d512c91002a495a891be4261b2bb40bb4fbf29c00230000ff5800"}) 1.42229ms ago: executing program 1 (id=1689): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r1) 0s ago: executing program 35 (id=1689): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r1) kernel console output (not intermixed with test programs): maxpacket 0 [ 184.169419][ T1200] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 184.184345][ T1200] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.202039][ T1200] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 184.212543][ T1200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.458673][ T1200] usb 5-1: usb_control_msg returned -32 [ 184.478177][ T1200] usbtmc 5-1:16.0: can't read capabilities [ 184.868446][ T8237] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 184.879358][ T8] usb 5-1: USB disconnect, device number 4 [ 185.237535][ T8246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.832'. [ 185.322899][ T8249] netlink: 104 bytes leftover after parsing attributes in process `syz.0.839'. [ 185.618620][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'. [ 185.797797][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 185.976756][ T8266] syzkaller1: entered promiscuous mode [ 185.992668][ T8266] syzkaller1: entered allmulticast mode [ 186.004430][ T8] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 186.036303][ T8] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 186.056289][ T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 186.083080][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.110590][ T8256] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 186.131973][ T8] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 186.381303][ T8273] tipc: Started in network mode [ 186.389276][ T8273] tipc: Node identity 2ddfafccc9d436ad002e, cluster identity 4711 [ 186.407550][ T5813] usb 1-1: USB disconnect, device number 11 [ 186.887841][ T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 187.079411][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.090620][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.100647][ T8] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 187.109945][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.120584][ T8] usb 3-1: config 0 descriptor?? [ 187.487787][ T1200] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 187.554263][ T8] hid-steam 0003:28DE:1142.000E: unknown main item tag 0x0 [ 187.563170][ T8] hid-steam 0003:28DE:1142.000E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 187.637746][ T8] hid-steam 0003:28DE:1142.000E: Steam wireless receiver connected [ 187.645742][ T8] hid-steam 0003:28DE:1142.000E: No HID_FEATURE_REPORT submitted - nothing to read [ 187.661700][ T8] hid-steam 0003:28DE:1142.000F: unknown main item tag 0x0 [ 187.671821][ T8] hid-steam 0003:28DE:1142.000F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 187.691949][ T1200] usb 2-1: Using ep0 maxpacket: 8 [ 187.697131][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 187.707340][ T1200] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 187.716827][ T1200] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 187.727476][ T1200] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 187.737727][ T1200] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 187.755939][ T1200] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.770704][ T1200] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 187.782001][ T1200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.836843][ T8] usb 3-1: USB disconnect, device number 19 [ 187.856349][ T8] hid-steam 0003:28DE:1142.000E: Steam wireless receiver disconnected [ 187.901616][ T23] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 187.917203][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.931358][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.941253][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 187.957998][ T23] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 187.967189][ T23] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 187.976737][ T23] usb 5-1: Manufacturer: syz [ 187.983689][ T23] usb 5-1: config 0 descriptor?? [ 188.012621][ T1200] usb 2-1: usb_control_msg returned -32 [ 188.018590][ T1200] usbtmc 2-1:16.0: can't read capabilities [ 188.409433][ T8303] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 188.414859][ T23] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 188.420192][ T5813] usb 2-1: USB disconnect, device number 16 [ 188.450935][ T23] appleir 0003:05AC:8243.0010: No inputs registered, leaving [ 188.506390][ T23] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 188.722011][ T8313] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.861'. [ 188.839607][ T5813] usb 5-1: USB disconnect, device number 5 [ 189.140086][ T23] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 189.172025][ T8326] input: syz0 as /devices/virtual/input/input18 [ 189.230955][ T8328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.296879][ T8330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.868'. [ 189.359240][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 189.383276][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.417811][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.459046][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 189.505070][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 189.535456][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.566392][ T23] usb 3-1: config 0 descriptor?? [ 189.588539][ T8337] netlink: 28 bytes leftover after parsing attributes in process `syz.4.872'. [ 189.927244][ T8350] loop1: detected capacity change from 0 to 128 [ 190.085425][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0011/input/input19 [ 190.218634][ T23] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 190.238040][ T8] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 190.425628][ T1200] usb 3-1: USB disconnect, device number 20 [ 190.478106][ T8] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 64 [ 190.514105][ T8] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 190.543849][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.847886][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 190.941256][ T8371] overlayfs: failed to resolve './file0': -2 [ 191.003386][ T8] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 191.030208][ T8] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input20 [ 191.057696][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 191.102333][ T23] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.133173][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.137206][ T8] usb 2-1: USB disconnect, device number 17 [ 191.141396][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 191.157390][ T23] usb 5-1: Product: syz [ 191.162062][ T23] usb 5-1: Manufacturer: syz [ 191.168650][ T23] usb 5-1: SerialNumber: syz [ 191.479256][ T5838] IPVS: starting estimator thread 0... [ 191.572920][ T8382] IPVS: using max 23 ests per chain, 55200 per kthread [ 191.682161][ T8386] loop2: detected capacity change from 0 to 64 [ 191.823306][ T23] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 192.032880][ T23] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 192.087965][ T23] usb 5-1: USB disconnect, device number 6 [ 192.405405][ T8388] loop1: detected capacity change from 0 to 40427 [ 192.413757][ T8388] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 192.426483][ T8388] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 192.456477][ T8388] F2FS-fs (loop1): invalid crc value [ 192.486201][ T8388] F2FS-fs (loop1): Found nat_bits in checkpoint [ 192.585738][ T8388] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 192.593199][ T8388] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 192.793567][ T8401] batadv_slave_0: entered promiscuous mode [ 192.858484][ T8399] batadv_slave_0: left promiscuous mode [ 193.147874][ T8410] loop2: detected capacity change from 0 to 2048 [ 193.319185][ T8413] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.050411][ T8427] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 194.243138][ T8429] loop2: detected capacity change from 0 to 2048 [ 194.300890][ T8429] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.463307][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.469831][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.556216][ T8439] sp0: Synchronizing with TNC [ 194.597774][ T5814] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 194.787954][ T5814] usb 5-1: Using ep0 maxpacket: 16 [ 194.795866][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 194.810350][ T5814] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 194.820639][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.828810][ T5814] usb 5-1: Product: syz [ 194.834384][ T5814] usb 5-1: Manufacturer: syz [ 194.843309][ T5814] usb 5-1: SerialNumber: syz [ 194.851069][ T5814] usb 5-1: config 0 descriptor?? [ 194.869876][ T5814] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 194.884473][ T5814] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 195.061953][ T8443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.921'. [ 195.498818][ T5814] em28xx 5-1:0.0: chip ID is em2874 [ 195.974985][ T5814] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 195.983289][ T5814] em28xx 5-1:0.0: board has no eeprom [ 196.062897][ T5814] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 196.071025][ T5814] em28xx 5-1:0.0: dvb set to bulk mode. [ 196.080413][ T1200] em28xx 5-1:0.0: Binding DVB extension [ 196.091796][ T5814] usb 5-1: USB disconnect, device number 7 [ 196.100690][ T5814] em28xx 5-1:0.0: Disconnecting em28xx [ 196.257118][ T1200] em28xx 5-1:0.0: Registering input extension [ 196.308469][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.928'. [ 196.333653][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.928'. [ 196.425428][ T1200] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 196.447809][ T1200] Registered IR keymap rc-empty [ 196.453401][ T1200] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 196.509807][ T1200] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input21 [ 196.529063][ T1200] em28xx 5-1:0.0: Input extension successfully initialized [ 196.536435][ T5814] em28xx 5-1:0.0: Closing input extension [ 196.650749][ T5814] em28xx 5-1:0.0: Freeing device [ 197.080205][ T8486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.938'. [ 197.183855][ T8463] loop2: detected capacity change from 0 to 32768 [ 197.252838][ T8463] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 197.301064][ T5838] IPVS: starting estimator thread 0... [ 197.322892][ T8463] XFS (loop2): Ending clean mount [ 197.407716][ T8502] IPVS: using max 25 ests per chain, 60000 per kthread [ 197.487783][ T5837] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 197.572147][ T5780] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 197.679613][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.694588][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.706471][ T5837] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 197.716209][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.729005][ T5837] usb 5-1: config 0 descriptor?? [ 198.195545][ T5837] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 198.227804][ T5837] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 198.255588][ T5837] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0012/input/input22 [ 198.310683][ T5837] cm6533_jd 0003:0D8C:0022.0012: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 198.533234][ T8521] loop1: detected capacity change from 0 to 128 [ 199.567740][ T5837] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 201.377732][ T8529] netlink: 868 bytes leftover after parsing attributes in process `syz.1.949'. [ 201.437938][ T8531] loop2: detected capacity change from 0 to 1024 [ 201.509046][ T28] audit: type=1800 audit(1784724811.179:22): pid=8531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.952" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 201.659013][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 201.665947][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 201.665956][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 201.980535][ T172] usb 5-1: USB disconnect, device number 8 [ 202.012499][ T8543] syzkaller1: entered promiscuous mode [ 202.022656][ T8543] syzkaller1: entered allmulticast mode [ 202.878955][ T8572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.967'. [ 203.097146][ T8580] loop2: detected capacity change from 0 to 128 [ 203.987173][ T8606] loop2: detected capacity change from 0 to 164 [ 204.515598][ T8622] syzkaller1: entered promiscuous mode [ 204.527096][ T8622] syzkaller1: entered allmulticast mode [ 205.233599][ T8638] smc: net device vlan1 applied user defined pnetid SYZ2 [ 205.756090][ T8646] loop1: detected capacity change from 0 to 1024 [ 205.767309][ T8647] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 205.813090][ T28] audit: type=1800 audit(1784724815.479:23): pid=8646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.996" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 206.054952][ T8653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1000'. [ 206.237883][ T1200] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 206.429983][ T1200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.453295][ T1200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.498960][ T1200] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 206.577849][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1007'. [ 207.006802][ T1200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.026351][ T1200] usb 1-1: config 0 descriptor?? [ 207.461354][ T1200] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 207.497830][ T1200] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 207.546767][ T1200] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0013/input/input23 [ 207.581753][ T8670] loop2: detected capacity change from 0 to 32768 [ 207.623806][ T1200] cm6533_jd 0003:0D8C:0022.0013: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 207.676138][ T8670] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 207.693704][ T8670] XFS (loop2): Mounting V5 filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a in no-recovery mode. Filesystem will be inconsistent. [ 207.695038][ T1200] usb 1-1: USB disconnect, device number 12 [ 207.727504][ T8674] loop1: detected capacity change from 0 to 32768 [ 207.785829][ T8674] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 207.958858][ T8685] fido_id[8685]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 207.965774][ T5780] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 208.009014][ T8674] XFS (loop1): Ending clean mount [ 208.091685][ T8674] XFS (loop1): Quotacheck needed: Please wait. [ 208.242644][ T1033] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x2e4/0x11d0, inode 0x1144 dinode [ 208.283372][ T1033] XFS (loop1): Unmount and run xfs_repair [ 208.298023][ T1033] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 208.317276][ T1033] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 208.360881][ T1033] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 208.389167][ T1033] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11 4.Xh....4.Xh.... [ 208.420411][ T1033] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 04 1a 4.Xh............ [ 208.466990][ T1033] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 208.498061][ T1033] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 a2 ce e4 0c ................ [ 208.527894][ T1033] 00000060: ff ff ff ff a6 fb 00 84 00 00 00 00 00 00 00 05 ................ [ 208.559554][ T1033] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 208.666471][ T7315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.694364][ T8674] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 208.811646][ T5777] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 209.687734][ T5814] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 209.897744][ T5814] usb 2-1: Using ep0 maxpacket: 8 [ 209.913898][ T5814] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 209.945255][ T5814] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 209.978299][ T5814] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 210.014545][ T5814] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.018766][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.028118][ T5814] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 210.049277][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.050556][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.067024][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.076401][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.088046][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 210.096197][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.288700][ T5814] usb 2-1: GET_CAPABILITIES returned 0 [ 210.302702][ T5814] usbtmc 2-1:16.0: can't read capabilities [ 210.446190][ T8736] chnl_net:caif_netlink_parms(): no params data found [ 210.534237][ T172] usb 2-1: USB disconnect, device number 18 [ 210.593004][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.611122][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.624019][ T8736] bridge_slave_0: entered allmulticast mode [ 210.633964][ T8736] bridge_slave_0: entered promiscuous mode [ 210.644679][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.652156][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.659672][ T8736] bridge_slave_1: entered allmulticast mode [ 210.666662][ T8736] bridge_slave_1: entered promiscuous mode [ 210.692965][ T8736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.705631][ T8736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.734956][ T8736] team0: Port device team_slave_0 added [ 210.742805][ T8736] team0: Port device team_slave_1 added [ 210.765878][ T8736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.773008][ T8736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.799916][ T8736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.813508][ T8736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.820738][ T8736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.847077][ T8736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.888936][ T8736] hsr_slave_0: entered promiscuous mode [ 210.895157][ T8736] hsr_slave_1: entered promiscuous mode [ 210.902045][ T8736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.910422][ T8736] Cannot create hsr debugfs directory [ 211.044730][ T8736] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 211.053948][ T8736] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 211.070236][ T8736] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 211.088683][ T8736] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 211.120400][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.127728][ T8736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.136054][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.143267][ T8736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.203234][ T8736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.222185][ T1033] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.231177][ T1033] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.247505][ T8736] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.263478][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.270645][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.284656][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.291880][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.465369][ T8736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.666426][ T8736] veth0_vlan: entered promiscuous mode [ 211.687368][ T8736] veth1_vlan: entered promiscuous mode [ 211.769320][ T8736] veth0_macvtap: entered promiscuous mode [ 211.787057][ T8736] veth1_macvtap: entered promiscuous mode [ 211.852397][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.880093][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.893985][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.907541][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.923584][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.936545][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.955513][ T8736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.985517][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.006848][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.036327][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.070650][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.096109][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.113647][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.126707][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.136164][ T8774] loop5: detected capacity change from 0 to 4751 [ 212.144896][ T5776] Bluetooth: hci0: command tx timeout [ 212.147716][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.168833][ T5814] IPVS: starting estimator thread 0... [ 212.183525][ T8736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.235639][ T8736] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.258899][ T8775] IPVS: using max 21 ests per chain, 50400 per kthread [ 212.266363][ T8736] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.284267][ T8774] loop5: detected capacity change from 4751 to 8439 [ 212.291179][ T8736] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.303813][ T8736] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.463040][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.479706][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.532509][ T2956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.547466][ T2956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.499355][ T8795] loop1: detected capacity change from 0 to 164 [ 213.860986][ T8798] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 213.898869][ T8798] CPU: 1 PID: 8798 Comm: syz.1.1051 Not tainted syzkaller #0 [ 213.906304][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 213.916396][ T8798] Call Trace: [ 213.917614][ C0] sched: RT throttling activated [ 213.924626][ T8798] [ 213.927549][ T8798] dump_stack_lvl+0x18c/0x250 [ 213.932254][ T8798] ? show_regs_print_info+0x20/0x20 [ 213.937490][ T8798] ? load_image+0x420/0x420 [ 213.942039][ T8798] sysfs_create_dir_ns+0x26e/0x2a0 [ 213.947192][ T8798] ? __lock_acquire+0x7d80/0x7d80 [ 213.952254][ T8798] ? sysfs_warn_dup+0xa0/0xa0 [ 213.956970][ T8798] ? rcu_is_watching+0x15/0xb0 [ 213.961788][ T8798] ? do_raw_spin_unlock+0x121/0x230 [ 213.967034][ T8798] kobject_add_internal+0x617/0xc90 [ 213.972287][ T8798] kobject_add+0x164/0x240 [ 213.976759][ T8798] ? kobject_init+0x1d0/0x1d0 [ 213.981480][ T8798] ? get_device_parent+0x366/0x390 [ 213.986624][ T8798] device_add+0x3fa/0xc40 [ 213.990981][ T8798] tty_register_device_attr+0x425/0x950 [ 213.996562][ T8798] ? tty_register_device+0x30/0x30 [ 214.001702][ T8798] ? tty_port_init+0x132/0x1a0 [ 214.006487][ T8798] ? gsm_dlci_alloc+0x32a/0x630 [ 214.011367][ T8798] ? __might_fault+0xaa/0x120 [ 214.016077][ T8798] gsm_activate_mux+0x110/0x2a0 [ 214.016470][ T8784] loop5: detected capacity change from 0 to 131072 [ 214.020945][ T8798] gsmld_ioctl+0x12ca/0x1900 [ 214.021019][ T8798] ? gsmld_write+0x120/0x120 [ 214.036730][ T8798] ? __init_ldsem+0x150/0x150 [ 214.041446][ T8798] ? __fget_files+0x28/0x460 [ 214.043373][ T8784] F2FS-fs (loop5): invalid crc value [ 214.046066][ T8798] ? gsmld_write+0x120/0x120 [ 214.055943][ T8798] tty_ioctl+0x9b5/0xdc0 [ 214.060222][ T8798] ? tty_get_icount+0xb0/0xb0 [ 214.064953][ T8798] __se_sys_ioctl+0xfd/0x170 [ 214.069591][ T8798] do_syscall_64+0x55/0xb0 [ 214.074050][ T8798] ? clear_bhb_loop+0x40/0x90 [ 214.078762][ T8798] ? clear_bhb_loop+0x40/0x90 [ 214.083564][ T8798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.089511][ T8798] RIP: 0033:0x7f2dac79de99 [ 214.093965][ T8798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.113612][ T8798] RSP: 002b:00007f2dad722028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.122064][ T8798] RAX: ffffffffffffffda RBX: 00007f2daca26090 RCX: 00007f2dac79de99 [ 214.130067][ T8798] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 214.138071][ T8798] RBP: 00007f2dac833eaf R08: 0000000000000000 R09: 0000000000000000 [ 214.146073][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.154072][ T8798] R13: 00007f2daca26128 R14: 00007f2daca26090 R15: 00007fff10de85c8 [ 214.162092][ T8798] [ 214.182574][ T8798] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 214.211681][ T8784] F2FS-fs (loop5): Found nat_bits in checkpoint [ 214.228196][ T5776] Bluetooth: hci0: command tx timeout [ 214.267084][ T8784] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 214.325819][ T8804] loop2: detected capacity change from 0 to 128 [ 214.336391][ T28] audit: type=1800 audit(1784724823.999:24): pid=8784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1045" name="file2" dev="loop5" ino=8 res=0 errno=0 [ 214.423617][ T8804] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 214.451532][ T8804] ext4 filesystem being mounted at /245/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 214.674615][ T5780] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.282430][ T8813] loop2: detected capacity change from 0 to 4096 [ 215.319027][ T8813] EXT4-fs: Ignoring removed mblk_io_submit option [ 215.616581][ T8813] EXT4-fs (loop2): Test dummy encryption mode enabled [ 215.646167][ T8813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.713299][ T28] audit: type=1800 audit(1784724825.379:25): pid=8813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1056" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 215.827939][ T28] audit: type=1800 audit(1784724825.399:26): pid=8813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1056" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 215.935570][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.298392][ T5776] Bluetooth: hci0: command tx timeout [ 216.347694][ T8833] capability: warning: `syz.2.1062' uses deprecated v2 capabilities in a way that may be insecure [ 216.671058][ T8839] sctp: [Deprecated]: syz.5.1065 (pid 8839) Use of int in max_burst socket option. [ 216.671058][ T8839] Use struct sctp_assoc_value instead [ 217.086900][ T8853] netlink: 'syz.4.1070': attribute type 12 has an invalid length. [ 217.124529][ T8853] netlink: 'syz.4.1070': attribute type 29 has an invalid length. [ 217.148520][ T8853] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1070'. [ 218.019050][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'. [ 218.058117][ T8867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1077'. [ 218.078868][ T8869] loop5: detected capacity change from 0 to 2048 [ 218.106333][ T8869] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.349726][ T8877] 9pnet: p9_errstr2errno: server reported unknown error Dfß ¥® [ 218.379924][ T5776] Bluetooth: hci0: command tx timeout [ 218.793325][ T8893] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1090'. [ 218.817136][ T8894] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1089'. [ 218.916801][ T8897] IPv6: A: Disabled Multicast RS [ 219.006523][ T8902] Bluetooth: MGMT ver 1.22 [ 219.760062][ T8934] Invalid argument reading file caps for ./file0 [ 219.833952][ T8938] loop8: detected capacity change from 0 to 7 [ 219.842376][ T8938] Dev loop8: unable to read RDB block 7 [ 219.848849][ T8938] loop8: AHDI p1 p2 [ 219.853291][ T8938] loop8: partition table partially beyond EOD, truncated [ 219.868259][ T8938] loop8: p1 start 1702000233 is beyond EOD, truncated [ 219.984677][ T8942] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 220.583095][ T8958] input: syz1 as /devices/virtual/input/input24 [ 220.586999][ T8950] loop1: detected capacity change from 0 to 40427 [ 220.598185][ T8950] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 220.605967][ T8950] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 220.608298][ T8957] Falling back ldisc for ttyS3. [ 220.629265][ T8950] F2FS-fs (loop1): invalid crc value [ 220.661118][ T8961] netlink: 'syz.4.1121': attribute type 11 has an invalid length. [ 220.670120][ T8961] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1121'. [ 220.683766][ T8950] F2FS-fs (loop1): Found nat_bits in checkpoint [ 220.751344][ T8950] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 220.758497][ T8950] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 221.249096][ T8950] F2FS-fs (loop1): Start checkpoint disabled! [ 221.365963][ T8974] sctp: [Deprecated]: syz.4.1127 (pid 8974) Use of int in max_burst socket option deprecated. [ 221.365963][ T8974] Use struct sctp_assoc_value instead [ 221.659564][ T8982] syzkaller1: entered promiscuous mode [ 221.666108][ T8982] syzkaller1: entered allmulticast mode [ 222.008231][ T5814] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 222.222913][ T5814] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.242439][ T5814] usb 5-1: config 0 has no interface number 0 [ 222.259222][ T5814] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.288937][ T5814] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.314903][ T5814] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.318670][ T5813] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 222.328669][ T5814] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 222.345091][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.356205][ T5814] usb 5-1: config 0 descriptor?? [ 222.543092][ T5813] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 222.576573][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.591941][ T5813] usb 6-1: Product: syz [ 222.606364][ T5813] usb 6-1: Manufacturer: syz [ 222.613771][ T5813] usb 6-1: SerialNumber: syz [ 222.637538][ T5813] usb 6-1: config 0 descriptor?? [ 222.789582][ T5814] hid (null): global environment stack underflow [ 222.837649][ T9000] loop2: detected capacity change from 0 to 4096 [ 222.854294][ T9000] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 223.013238][ T5814] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0014/input/input26 [ 223.064267][ T5814] uclogic 0003:28BD:0042.0014: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 223.101450][ T5813] usb 6-1: Firmware version (0.0) predates our first public release. [ 223.106556][ T5814] usb 5-1: USB disconnect, device number 9 [ 223.118129][ T5813] usb 6-1: Please update to version 0.2 or newer [ 223.140367][ T9003] syzkaller1: entered promiscuous mode [ 223.145926][ T9003] syzkaller1: entered allmulticast mode [ 223.162860][ T5813] usb 6-1: Firmware: build [ 223.248802][ T9004] fido_id[9004]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 223.419712][ T5813] usb 6-1: USB disconnect, device number 2 [ 223.488296][ T9011] loop1: detected capacity change from 0 to 512 [ 223.581787][ T9011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.597942][ T9011] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.671351][ T9011] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 223.692899][ T9011] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 223.707160][ T9011] EXT4-fs (loop1): This should not happen!! Data will be lost [ 223.707160][ T9011] [ 223.719923][ T9011] EXT4-fs (loop1): Total free blocks count 0 [ 223.726035][ T9011] EXT4-fs (loop1): Free/Dirty block details [ 223.732347][ T9011] EXT4-fs (loop1): free_blocks=65280 [ 223.739660][ T9011] EXT4-fs (loop1): dirty_blocks=33 [ 223.745055][ T9011] EXT4-fs (loop1): Block reservation details [ 223.751304][ T9011] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 223.816010][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.471287][ T9035] hugetlbfs: syz.4.1149 (9035): Using mlock ulimits for SHM_HUGETLB is obsolete [ 225.037727][ T5838] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 225.069749][ T9055] tap0: tun_chr_ioctl cmd 1074025675 [ 225.075108][ T9055] tap0: persist enabled [ 225.089827][ T9055] tap0: tun_chr_ioctl cmd 1074025675 [ 225.095400][ T9055] tap0: persist disabled [ 225.239311][ T5838] usb 3-1: Using ep0 maxpacket: 32 [ 225.272002][ T5838] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 225.307763][ T5838] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 225.323085][ T9061] loop1: detected capacity change from 0 to 256 [ 225.334770][ T5838] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 225.339442][ T9061] exfat: Deprecated parameter 'utf8' [ 225.350822][ T9] kernel read not supported for file /video9 (pid: 9 comm: kworker/0:1) [ 225.357822][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 225.372408][ T9061] exfat: Deprecated parameter 'utf8' [ 225.396250][ T9061] exfat: Deprecated parameter 'utf8' [ 225.399677][ T5838] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 225.448363][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 225.484177][ T9061] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 225.494256][ T5838] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 225.515860][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.541564][ T5838] usb 3-1: config 0 descriptor?? [ 225.647741][ T28] audit: type=1804 audit(1784724835.309:27): pid=9061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1160" name="/newroot/307/file1/bus" dev="loop1" ino=1048620 res=1 errno=0 [ 225.794222][ T5838] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 226.034507][ T5838] usb 3-1: USB disconnect, device number 21 [ 226.065664][ T5838] usblp0: removed [ 226.192992][ T9082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1172'. [ 226.209893][ T9082] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.219864][ T9082] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.225666][ T9078] loop1: detected capacity change from 0 to 8192 [ 226.229008][ T9082] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.240609][ T9078] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 226.244135][ T9082] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.285983][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1172'. [ 226.411273][ T9085] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1173'. [ 226.429124][ T23] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 226.620232][ T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.648542][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.667354][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.676582][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.853396][ T5813] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 226.925957][ T23] usb 5-1: usb_control_msg returned -32 [ 226.931721][ T23] usbtmc 5-1:16.0: can't read capabilities [ 227.057702][ T5813] usb 6-1: Using ep0 maxpacket: 16 [ 227.077453][ T5813] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 227.086909][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.108606][ T5813] usb 6-1: Product: syz [ 227.127703][ T5813] usb 6-1: Manufacturer: syz [ 227.132454][ T5813] usb 6-1: SerialNumber: syz [ 227.153025][ T23] usb 5-1: USB disconnect, device number 10 [ 227.166045][ T5813] usb 6-1: config 0 descriptor?? [ 227.427812][ T5837] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 227.580553][ T5813] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 227.590741][ T5813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 227.603301][ T5813] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 227.611798][ T5813] usb 6-1: media controller created [ 227.620386][ T5837] usb 2-1: Using ep0 maxpacket: 16 [ 227.640728][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.651270][ T5837] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 227.661444][ T5837] usb 2-1: config 0 has no interface number 0 [ 227.682662][ T5837] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 227.696237][ T5837] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 227.732176][ T5837] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 227.755268][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.765021][ T5837] usb 2-1: Product: syz [ 227.770686][ T5837] usb 2-1: Manufacturer: syz [ 227.775368][ T5837] usb 2-1: SerialNumber: syz [ 227.795043][ T5837] usb 2-1: config 0 descriptor?? [ 227.801239][ T9103] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 227.826011][ T9103] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 228.067165][ T9103] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 228.096278][ T9103] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 228.230553][ T5813] zl10353_read_register: readreg error (reg=127, ret==0) [ 228.247819][ T5813] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 228.266164][ T5813] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 228.305940][ T5813] usb 6-1: USB disconnect, device number 3 [ 228.438666][ T9119] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 228.452461][ T5813] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 228.762057][ T9127] veth0: entered allmulticast mode [ 228.867719][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 228.951915][ T5837] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 228.973981][ T5837] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 229.017905][ T5837] asix: probe of 2-1:0.34 failed with error -71 [ 229.035769][ T5837] usb 2-1: USB disconnect, device number 19 [ 229.089886][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 229.108022][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 229.135929][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.148946][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.159372][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 229.169745][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.196748][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 229.216781][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.337091][ T9131] loop2: detected capacity change from 0 to 32768 [ 229.353038][ T9131] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1195 (9131) [ 229.374839][ T9131] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 229.386650][ T9131] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 229.404540][ T9131] BTRFS info (device loop2): turning on sync discard [ 229.412856][ T9131] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 229.430944][ T9131] BTRFS info (device loop2): use zstd compression, level 3 [ 229.438753][ T9131] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 229.464277][ T9131] BTRFS info (device loop2): trying to use backup root at mount time [ 229.479148][ T9131] BTRFS info (device loop2): use zlib compression, level 3 [ 229.480065][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 229.486822][ T9139] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1199'. [ 229.501261][ T9] usbtmc 5-1:16.0: can't read capabilities [ 229.506165][ T9131] BTRFS info (device loop2): enabling auto defrag [ 229.522806][ T9131] BTRFS info (device loop2): using free space tree [ 229.675097][ T3548] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 229.729569][ T9131] BTRFS error (device loop2): failed to load root extent [ 229.752532][ T9131] BTRFS warning (device loop2): try to load backup roots slot 1 [ 229.771079][ T1033] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 229.795947][ T9131] BTRFS warning (device loop2): couldn't read tree root [ 229.796236][ T9159] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input27 [ 229.811374][ T9131] BTRFS warning (device loop2): try to load backup roots slot 2 [ 229.836706][ T49] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 229.860054][ T9131] BTRFS warning (device loop2): couldn't read tree root [ 229.871053][ T9131] BTRFS warning (device loop2): try to load backup roots slot 3 [ 229.923032][ T9131] BTRFS info (device loop2): enabling ssd optimizations [ 229.946970][ T9131] BTRFS info (device loop2): rebuilding free space tree [ 230.102562][ T9131] BTRFS info (device loop2): checking UUID tree [ 230.144065][ T9172] sctp: [Deprecated]: syz.1.1205 (pid 9172) Use of int in max_burst socket option deprecated. [ 230.144065][ T9172] Use struct sctp_assoc_value instead [ 230.173419][ T9174] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0 [ 230.376270][ T5814] usb 5-1: USB disconnect, device number 11 [ 230.488323][ T5780] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 230.887096][ T9184] loop5: detected capacity change from 0 to 2048 [ 231.012887][ T9187] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.306451][ T5776] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 231.323909][ T5776] CPU: 1 PID: 5776 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 231.331533][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 231.341713][ T5776] Workqueue: hci0 hci_rx_work [ 231.346442][ T5776] Call Trace: [ 231.349758][ T5776] [ 231.352695][ T5776] dump_stack_lvl+0x18c/0x250 [ 231.357390][ T5776] ? show_regs_print_info+0x20/0x20 [ 231.362598][ T5776] ? load_image+0x420/0x420 [ 231.367115][ T5776] sysfs_create_dir_ns+0x26e/0x2a0 [ 231.372232][ T5776] ? __lock_acquire+0x7d80/0x7d80 [ 231.377270][ T5776] ? sysfs_warn_dup+0xa0/0xa0 [ 231.381952][ T5776] ? do_raw_spin_unlock+0x121/0x230 [ 231.387162][ T5776] kobject_add_internal+0x617/0xc90 [ 231.392379][ T5776] kobject_add+0x164/0x240 [ 231.396807][ T5776] ? kobject_init+0x1d0/0x1d0 [ 231.401622][ T5776] ? get_device_parent+0x366/0x390 [ 231.406742][ T5776] device_add+0x3fa/0xc40 [ 231.411077][ T5776] hci_conn_add_sysfs+0xd5/0x1e0 [ 231.416022][ T5776] le_conn_complete_evt+0xe9f/0x1480 [ 231.421315][ T5776] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 231.427562][ T5776] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 231.433207][ T5776] ? mutex_unlock+0x10/0x10 [ 231.437715][ T5776] ? skb_pull_data+0xf0/0x1f0 [ 231.442398][ T5776] hci_le_conn_complete_evt+0x187/0x440 [ 231.447959][ T5776] ? hci_remote_host_features_evt+0x150/0x150 [ 231.454032][ T5776] hci_event_packet+0x7b4/0x1280 [ 231.458976][ T5776] ? __lock_acquire+0x7d80/0x7d80 [ 231.464002][ T5776] ? lock_chain_count+0x20/0x20 [ 231.468853][ T5776] ? bis_list+0x290/0x290 [ 231.473188][ T5776] ? lockdep_hardirqs_on+0x98/0x150 [ 231.478390][ T5776] ? hci_send_to_monitor+0xd7/0x4f0 [ 231.483596][ T5776] hci_rx_work+0x43a/0xd60 [ 231.488050][ T5776] ? process_scheduled_works+0x975/0x1600 [ 231.493802][ T5776] process_scheduled_works+0xa60/0x1600 [ 231.499394][ T5776] ? worker_attach_to_pool+0x370/0x370 [ 231.504920][ T5776] ? assign_work+0x3cc/0x5d0 [ 231.509528][ T5776] worker_thread+0xa5e/0xfe0 [ 231.514134][ T5776] ? _raw_spin_unlock+0x40/0x40 [ 231.518990][ T5776] ? __kthread_parkme+0x71/0x1c0 [ 231.523938][ T5776] kthread+0x2fa/0x390 [ 231.528007][ T5776] ? pr_cont_work+0x550/0x550 [ 231.532690][ T5776] ? kthread_blkcg+0xd0/0xd0 [ 231.537276][ T5776] ret_from_fork+0x48/0x80 [ 231.541695][ T5776] ? kthread_blkcg+0xd0/0xd0 [ 231.546287][ T5776] ret_from_fork_asm+0x11/0x20 [ 231.551077][ T5776] [ 231.556382][ T5776] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 231.570645][ T5776] Bluetooth: hci0: failed to register connection device [ 231.758151][ T9205] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1217'. [ 231.990554][ T9211] loop2: detected capacity change from 0 to 1024 [ 232.019648][ T9211] EXT4-fs: Ignoring removed bh option [ 232.049875][ T9211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 232.075783][ T9211] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.166489][ T9211] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 3: comm syz.2.1220: lblock 3 mapped to illegal pblock 3 (length 3) [ 232.201930][ T9211] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 232.227723][ T23] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 232.242690][ T9211] EXT4-fs (loop2): This should not happen!! Data will be lost [ 232.242690][ T9211] [ 232.297977][ T9217] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.1220: lblock 3 mapped to illegal pblock 3 (length 1) [ 232.326982][ T9217] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.1220: lblock 3 mapped to illegal pblock 3 (length 1) [ 232.368285][ T9217] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.1220: lblock 3 mapped to illegal pblock 3 (length 1) [ 232.387018][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1223'. [ 232.407134][ T9211] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.1220: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 232.427934][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 232.441366][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.452567][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.465083][ T23] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 232.494909][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.503133][ T9211] EXT4-fs error (device loop2) in ext4_setattr:5682: Corrupt filesystem [ 232.533488][ T23] usb 2-1: config 0 descriptor?? [ 232.657361][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 232.714679][ T9229] loop5: detected capacity change from 0 to 256 [ 232.746023][ T9229] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 232.978638][ T23] zydacron 0003:13EC:0006.0015: item fetching failed at offset 0/2 [ 232.987323][ T23] zydacron 0003:13EC:0006.0015: parse failed [ 233.028960][ T23] zydacron: probe of 0003:13EC:0006.0015 failed with error -22 [ 233.063851][ T9231] loop2: detected capacity change from 0 to 8192 [ 233.185102][ T23] usb 2-1: USB disconnect, device number 20 [ 233.448900][ T9237] block nbd2: NBD_DISCONNECT [ 233.455679][ T9237] block nbd2: Disconnected due to user request. [ 233.469531][ T9237] block nbd2: shutting down sockets [ 233.643601][ T9243] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.095343][ T9258] binder: 9257:9258 ioctl 40046205 0 returned -22 [ 234.261756][ T172] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 234.310624][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1244'. [ 234.319170][ T172] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 234.677192][ T9280] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1249'. [ 234.798881][ T9280] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1249'. [ 235.072457][ T9280] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1249'. [ 235.250194][ T9294] loop8: detected capacity change from 0 to 8 [ 235.265746][ T9294] Dev loop8: unable to read RDB block 8 [ 235.279662][ T9294] loop8: unable to read partition table [ 235.286504][ T9294] loop8: partition table beyond EOD, truncated [ 235.296404][ T9294] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 235.387831][ T5814] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 235.462069][ T9286] loop1: detected capacity change from 0 to 32768 [ 235.597726][ T5814] usb 5-1: Using ep0 maxpacket: 16 [ 235.609895][ T5814] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 235.627694][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.648951][ T5814] usb 5-1: config 0 descriptor?? [ 236.060019][ T9304] loop1: detected capacity change from 0 to 32768 [ 236.069648][ T5814] usbhid 5-1:0.0: can't add hid device: -71 [ 236.089321][ T5814] usbhid: probe of 5-1:0.0 failed with error -71 [ 236.107793][ T5814] usb 5-1: USB disconnect, device number 12 [ 236.120958][ T9304] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 236.231405][ T9304] XFS (loop1): Torn write (CRC failure) detected at log block 0x10. Truncating head block from 0x51. [ 236.286091][ T9304] XFS (loop1): Corruption warning: Metadata has LSN (1:48) ahead of current LSN (1:16). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 236.329075][ T9304] XFS (loop1): log mount/recovery failed: error -22 [ 236.363711][ T9304] XFS (loop1): log mount failed [ 237.560084][ T9354] loop5: detected capacity change from 0 to 8 [ 237.738115][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 237.797818][ T9360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1280'. [ 237.876462][ T9364] input: syz1 as /devices/virtual/input/input28 [ 237.886331][ T9364] input: failed to attach handler leds to device input28, error: -6 [ 238.068762][ T9370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1284'. [ 238.180670][ T9378] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1285'. [ 238.291140][ T9381] loop2: detected capacity change from 0 to 1024 [ 238.450309][ T9381] hfsplus: catalog searching failed [ 238.535997][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1288'. [ 238.591801][ T3469] hfsplus: b-tree write err: -5, ino 3 [ 238.769194][ T9394] input: syz0 as /devices/virtual/input/input29 [ 239.177878][ T5838] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 239.210755][ T9414] overlayfs: failed to clone upperpath [ 239.383436][ T5838] usb 6-1: Using ep0 maxpacket: 16 [ 239.391801][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.418621][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.446470][ T5838] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 239.460777][ T5838] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 239.470231][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.485042][ T5838] usb 6-1: config 0 descriptor?? [ 239.648144][ T172] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 239.847878][ T172] usb 3-1: Using ep0 maxpacket: 32 [ 239.856016][ T172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.872315][ T172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.887324][ T172] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 239.902143][ T172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.919504][ T172] usb 3-1: config 0 descriptor?? [ 239.987998][ T5838] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0017/input/input30 [ 240.092107][ T5838] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 240.227317][ T5837] usb 6-1: USB disconnect, device number 4 [ 240.287727][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 240.365465][ T172] savu 0003:1E7D:2D5A.0018: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 240.480066][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 240.491151][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 240.500961][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 240.515061][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 240.524403][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.532522][ T9] usb 2-1: Product: syz [ 240.536819][ T9] usb 2-1: Manufacturer: syz [ 240.542406][ T9] usb 2-1: SerialNumber: syz [ 240.549435][ T9] usb 2-1: config 0 descriptor?? [ 240.650123][ T5837] usb 3-1: USB disconnect, device number 22 [ 240.766369][ T9] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 240.997040][ T5837] usb 2-1: USB disconnect, device number 21 [ 241.097914][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 241.278033][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 241.291291][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.307741][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.315773][ T9] usb 6-1: Product: syz [ 241.320478][ T9] usb 6-1: Manufacturer: syz [ 241.325782][ T9] usb 6-1: SerialNumber: syz [ 241.953405][ T9460] loop1: detected capacity change from 0 to 512 [ 241.982929][ T9] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 242.204716][ T9] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 242.257492][ T9] usb 6-1: USB disconnect, device number 5 [ 242.294475][ T6367] udevd[6367]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.498051][ T23] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 242.689160][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.703579][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.713442][ T23] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 242.722631][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 242.731425][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.744277][ T23] usb 2-1: config 0 descriptor?? [ 242.908743][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 242.932010][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 242.941907][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 242.952450][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 242.963315][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 242.973687][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.003078][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 243.026386][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.079649][ T9482] loop5: detected capacity change from 0 to 2048 [ 243.127107][ T9483] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.211685][ T23] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 243.231334][ T23] hid-steam 0003:28DE:1142.0019: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 243.260864][ T9] usb 5-1: usb_control_msg returned -32 [ 243.266632][ T9] usbtmc 5-1:16.0: can't read capabilities [ 243.317781][ T23] hid-steam 0003:28DE:1142.0019: Steam wireless receiver connected [ 243.325757][ T23] hid-steam 0003:28DE:1142.0019: No HID_FEATURE_REPORT submitted - nothing to read [ 243.352114][ T23] hid-steam 0003:28DE:1142.001A: unknown main item tag 0x0 [ 243.381478][ T23] hid-steam 0003:28DE:1142.001A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 243.445801][ T23] usb 2-1: USB disconnect, device number 22 [ 243.456569][ T9489] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1328'. [ 243.474820][ T23] hid-steam 0003:28DE:1142.0019: Steam wireless receiver disconnected [ 243.530321][ T9487] fido_id[9487]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 243.660518][ T9494] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 243.691255][ T9] usb 5-1: USB disconnect, device number 13 [ 244.293367][ T9506] loop5: detected capacity change from 0 to 1 [ 244.307116][ T9506] Dev loop5: unable to read RDB block 1 [ 244.316097][ T9506] loop5: unable to read partition table [ 244.325330][ T9506] loop5: partition table beyond EOD, truncated [ 244.335229][ T9506] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 244.352974][ T9507] loop1: detected capacity change from 0 to 2048 [ 244.429554][ T9507] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.933449][ T9527] loop2: detected capacity change from 0 to 32768 [ 246.048188][ T9527] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 246.142455][ T9563] loop1: detected capacity change from 0 to 64 [ 246.169323][ T5837] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 246.244786][ T9527] XFS (loop2): Ending clean mount [ 246.390171][ T5837] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 246.414210][ T5837] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 246.446988][ T5780] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 246.460425][ T5837] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 246.471578][ T5837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.487885][ T5837] usb 6-1: Product: syz [ 246.492807][ T5837] usb 6-1: Manufacturer: syz [ 246.497437][ T5837] usb 6-1: SerialNumber: syz [ 246.505405][ T5837] usb 6-1: config 0 descriptor?? [ 246.515206][ T9549] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 246.522920][ T9549] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 246.586396][ T9569] loop1: detected capacity change from 0 to 8192 [ 246.629394][ T9569] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 246.728161][ T9569] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 246.781458][ T9569] REISERFS (device loop1): using ordered data mode [ 246.797698][ T9569] reiserfs: using flush barriers [ 246.802443][ T9549] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 246.815356][ T9569] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 246.847950][ T9549] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 246.868253][ T9569] REISERFS (device loop1): checking transaction log (loop1) [ 246.920350][ T9569] REISERFS (device loop1): Using r5 hash to sort names [ 246.943963][ T9569] REISERFS (device loop1): using 3.5.x disk format [ 246.958724][ T9569] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 247.122747][ T9574] loop2: detected capacity change from 0 to 128 [ 247.292433][ T5837] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 247.559979][ T9584] loop1: detected capacity change from 0 to 64 [ 247.655039][ T9584] hfs: keylen 1794 too large [ 247.680927][ T9584] hfs: keylen 1794 too large [ 247.700077][ T5837] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 247.734302][ T9584] hfs: keylen 1794 too large [ 247.743436][ T5837] usb 6-1: USB disconnect, device number 6 [ 248.055940][ T9579] loop2: detected capacity change from 0 to 32768 [ 248.111526][ T9579] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 248.358375][ T5780] ocfs2: Unmounting device (7,2) on (node local) [ 248.617186][ T9604] loop5: detected capacity change from 0 to 128 [ 248.654819][ T9604] EXT4-fs: Ignoring removed nobh option [ 248.681266][ T9604] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 248.694132][ T9604] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 248.798136][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 248.882163][ T8736] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 248.989715][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 249.001265][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 249.020463][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 249.037082][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 249.056671][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 249.074346][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.096673][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 249.107134][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.136823][ T9609] loop2: detected capacity change from 0 to 32768 [ 249.319330][ T5837] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 249.347743][ T9] usb 2-1: usb_control_msg returned -32 [ 249.353381][ T9] usbtmc 2-1:16.0: can't read capabilities [ 249.425489][ T9624] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input31 [ 249.548784][ T5837] usb 5-1: Using ep0 maxpacket: 16 [ 249.588070][ T5837] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.650829][ T5837] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.673096][ T5837] usb 5-1: config 0 interface 0 has no altsetting 0 [ 249.701781][ T5837] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 249.719652][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.726517][ T9634] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 249.774520][ T5837] usb 5-1: config 0 descriptor?? [ 249.929720][ T23] usb 2-1: USB disconnect, device number 23 [ 250.084625][ T9645] netlink: 'syz.5.1395': attribute type 1 has an invalid length. [ 250.204825][ T5837] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 250.221334][ T9650] loop2: detected capacity change from 0 to 256 [ 250.227398][ T5837] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 250.243148][ T9650] exfat: Deprecated parameter 'namecase' [ 250.245211][ T8] kernel write not supported for file /input/mice (pid: 8 comm: kworker/0:0) [ 250.263360][ T5837] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 250.273078][ T5837] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 250.286282][ T5837] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 250.296553][ T5837] mcp2221 0003:04D8:00DD.001B: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 250.333933][ T9650] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 250.400938][ T9616] i2c i2c-1: unsupported multi-msg i2c transaction [ 250.435710][ T23] usb 5-1: USB disconnect, device number 14 [ 250.638080][ T9655] input: syz0 as /devices/virtual/input/input32 [ 250.649549][ T9656] loop1: detected capacity change from 0 to 1024 [ 250.959451][ T9659] loop2: detected capacity change from 0 to 4096 [ 251.289089][ T9662] loop1: detected capacity change from 0 to 4096 [ 251.438518][ T9662] ntfs3: loop1: ino=21, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" mmap(write) compressed not supported [ 251.595559][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1407'. [ 251.604932][ T9673] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 251.614500][ T9673] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 251.756181][ T9679] loop5: detected capacity change from 0 to 256 [ 251.938185][ T5814] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 252.133255][ T5814] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.155322][ T5814] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.181413][ T5814] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.205565][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.234229][ T5814] usb 2-1: Product: syz [ 252.244354][ T5814] usb 2-1: Manufacturer: syz [ 252.258000][ T5814] usb 2-1: SerialNumber: syz [ 252.623275][ T9699] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1419'. [ 252.707885][ T5837] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 252.755618][ T9701] loop2: detected capacity change from 0 to 256 [ 252.811139][ T9701] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 252.929429][ T5837] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 252.937960][ T5837] usb 5-1: config 0 has no interface number 0 [ 252.957807][ T5837] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 252.991427][ T5837] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 253.018519][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.026579][ T5837] usb 5-1: Product: syz [ 253.038447][ T5837] usb 5-1: Manufacturer: syz [ 253.043099][ T5837] usb 5-1: SerialNumber: syz [ 253.068791][ T5837] usb 5-1: config 0 descriptor?? [ 253.089764][ T5837] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 253.260094][ T9705] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1422'. [ 253.270984][ T9705] tc_dump_action: action bad kind [ 253.322939][ T5814] cdc_ncm 2-1:1.0: bind() failure [ 253.341790][ T5814] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 253.357236][ T5814] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 253.365728][ T5814] usbtest: probe of 2-1:1.1 failed with error -71 [ 253.391503][ T5814] usb 2-1: USB disconnect, device number 24 [ 253.868354][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 253.889214][ T8] usb 5-1: USB disconnect, device number 15 [ 253.919844][ T8] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 254.029849][ T9721] loop2: detected capacity change from 0 to 8192 [ 254.062099][ T9725] loop5: detected capacity change from 0 to 512 [ 254.074873][ T9721] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 254.093279][ T9725] EXT4-fs: Ignoring removed mblk_io_submit option [ 254.107742][ T9721] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 254.125237][ T9721] REISERFS (device loop2): using ordered data mode [ 254.132277][ T9721] reiserfs: using flush barriers [ 254.142454][ T9721] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 254.164374][ T9721] REISERFS (device loop2): checking transaction log (loop2) [ 254.178007][ T9725] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 254.218793][ T9725] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=885ec129, mo2=0006] [ 254.275953][ T9725] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.1431: Invalid inode bitmap blk 4 in block_group 0 [ 254.322493][ T9725] EXT4-fs (loop5): Remounting filesystem read-only [ 254.339481][ T9721] REISERFS (device loop2): Using r5 hash to sort names [ 254.347559][ T9721] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 254.358904][ T9725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.375491][ T9725] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.407464][ T28] audit: type=1804 audit(1784724864.069:28): pid=9721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1428" name="/newroot/349/file7/file0" dev="loop2" ino=2 res=1 errno=0 [ 254.429022][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.577965][ T8] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 254.720674][ T9740] loop5: detected capacity change from 0 to 1024 [ 254.775611][ T9740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.788585][ T8] usb 2-1: config 0 has no interfaces? [ 254.798074][ T8] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 254.807149][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.822077][ T8] usb 2-1: config 0 descriptor?? [ 254.954926][ T9740] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 254.985767][ T9740] EXT4-fs error (device loop5) in ext4_setattr:5682: error 28 [ 255.055224][ T8] usb 2-1: USB disconnect, device number 25 [ 255.134852][ T8736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.483880][ T9763] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.5.1446: Invalid inode table block 0 in block_group 0 [ 255.496527][ T9766] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.4.1448: Invalid inode table block 0 in block_group 0 [ 255.500368][ T9765] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.2.1447: Invalid inode table block 0 in block_group 0 [ 255.527958][ T9763] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 255.528600][ T9765] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 255.547370][ T9765] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2032: comm syz.2.1447: mark_inode_dirty error [ 255.548932][ T9766] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 255.559939][ T9763] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2028: comm syz.5.1446: mark_inode_dirty error [ 255.573957][ T9766] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2035: comm syz.4.1448: mark_inode_dirty error [ 255.584412][ T9763] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.5.1446: Invalid inode table block 0 in block_group 0 [ 255.829060][ T9773] netlink: 'syz.2.1450': attribute type 2 has an invalid length. [ 255.903405][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.909904][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.267827][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 256.470085][ T9] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 256.500898][ T9] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 256.548324][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 256.564988][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 256.574969][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.590238][ T9] usb 2-1: Product: syz [ 256.594453][ T9] usb 2-1: Manufacturer: syz [ 256.602560][ T9] usb 2-1: SerialNumber: syz [ 256.614888][ T9776] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 256.631873][ T9776] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 257.208683][ T9808] loop2: detected capacity change from 0 to 4096 [ 257.449079][ T9808] ntfs3: loop2: ino=21, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" mmap(write) compressed not supported [ 257.705007][ T9] (unnamed net_device) (uninitialized): Assigned a random MAC address: 42:0f:e0:96:07:8e [ 257.793946][ T9] rtl8150 2-1:1.0: eth5: rtl8150 is detected [ 257.836988][ T9] usb 2-1: USB disconnect, device number 26 [ 258.175266][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1476'. [ 258.184479][ T9837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1476'. [ 258.377834][ T5814] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 258.477103][ T9846] macvlan1: entered promiscuous mode [ 258.486389][ T9846] macvlan1: left promiscuous mode [ 258.569788][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 258.603504][ T9849] Invalid argument reading file caps for ./file0 [ 258.604102][ T5814] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 258.634972][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.651097][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1485'. [ 258.664393][ T5814] usb 3-1: config 0 descriptor?? [ 258.683593][ T5814] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 258.872261][ T9857] loop1: detected capacity change from 0 to 256 [ 258.894736][ T9857] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 259.345982][ T9871] netlink: 'syz.5.1493': attribute type 11 has an invalid length. [ 259.368071][ T9871] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1493'. [ 259.417809][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 259.621855][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 259.647326][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.664475][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.687274][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 259.725367][ T5814] gspca_vc032x: reg_w err -71 [ 259.732395][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 259.733189][ T5814] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.757978][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 259.777897][ T5814] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.786615][ T9] usb 2-1: Manufacturer: syz [ 259.789896][ T5814] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.796641][ T5814] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.811266][ T9] usb 2-1: config 0 descriptor?? [ 259.815293][ T5814] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.827848][ T5814] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.841342][ T5814] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.847486][ T5814] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.871037][ T5814] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.882491][ T5814] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.895881][ T5814] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.902362][ T5814] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.908004][ T5814] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.913427][ T5814] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.919221][ T5814] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.924651][ T5814] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.937632][ T5814] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.942970][ T5814] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.948746][ T5814] gspca_vc032x: Unknown sensor... [ 259.953856][ T5814] vc032x: probe of 3-1:0.0 failed with error -22 [ 259.971056][ T5814] usb 3-1: USB disconnect, device number 23 [ 260.219497][ T9888] sctp: [Deprecated]: syz.5.1500 (pid 9888) Use of int in max_burst socket option deprecated. [ 260.219497][ T9888] Use struct sctp_assoc_value instead [ 260.247416][ T9] appleir 0003:05AC:8243.001C: unknown main item tag 0x0 [ 260.263172][ T9] appleir 0003:05AC:8243.001C: No inputs registered, leaving [ 260.292747][ T9] appleir 0003:05AC:8243.001C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 260.431648][ T9893] udevd[9893]: failed to execute '/lib/udev/fido_id' 'fido_id': Structure needs cleaning [ 260.534362][ T9] usb 2-1: USB disconnect, device number 27 [ 260.544410][ T9894] EXT4-fs error: 576 callbacks suppressed [ 260.544426][ T9894] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.5.1503: Invalid inode table block 0 in block_group 0 [ 260.560916][ T9895] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.2.1504: Invalid inode table block 0 in block_group 0 [ 260.579762][ T9894] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 260.610017][ T9894] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2028: comm syz.5.1503: mark_inode_dirty error [ 260.612086][ T9895] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 260.628541][ T9894] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.5.1503: Invalid inode table block 0 in block_group 0 [ 260.645457][ T9895] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2032: comm syz.2.1504: mark_inode_dirty error [ 260.657360][ T9894] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 260.674160][ T9894] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2028: comm syz.5.1503: mark_inode_dirty error [ 260.701924][ T9894] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.5.1503: Invalid inode table block 0 in block_group 0 [ 260.930042][ T9900] syzkaller1: entered promiscuous mode [ 260.935568][ T9900] syzkaller1: entered allmulticast mode [ 260.948833][ T5838] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 261.143140][ T5838] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 261.156383][ T5838] usb 3-1: config 0 has no interface number 0 [ 261.165981][ T5838] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.183980][ T5838] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.205412][ T5838] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.226946][ T5838] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 261.237773][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.259887][ T5838] usb 3-1: config 0 descriptor?? [ 261.644155][ T9910] Falling back ldisc for ttyS3. [ 261.706572][ T5838] hid (null): global environment stack underflow [ 261.945320][ T5838] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.001D/input/input33 [ 262.060077][ T5838] uclogic 0003:28BD:0042.001D: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1 [ 262.119083][ T9915] udevd[9915]: failed to execute '/lib/udev/fido_id' 'fido_id': Structure needs cleaning [ 262.129101][ T5838] usb 3-1: USB disconnect, device number 24 [ 262.934625][ T5838] kernel read not supported for file /video9 (pid: 5838 comm: kworker/1:5) [ 263.328301][ T9] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 263.521811][ T9956] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 263.536569][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 263.564796][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.600915][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 263.638613][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.837491][ T9959] loop5: detected capacity change from 0 to 1024 [ 263.884898][ T9959] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 263.922612][ T9] usb 3-1: usb_control_msg returned -32 [ 263.938871][ T9] usbtmc 3-1:16.0: can't read capabilities [ 264.183544][ T9966] sctp: [Deprecated]: syz.5.1531 (pid 9966) Use of int in max_burst socket option deprecated. [ 264.183544][ T9966] Use struct sctp_assoc_value instead [ 264.203396][ T5837] usb 3-1: USB disconnect, device number 25 [ 264.557232][ T9978] binder: 9977:9978 ioctl 40046205 0 returned -22 [ 264.851811][ T9985] loop5: detected capacity change from 0 to 256 [ 264.909339][ T28] audit: type=1804 audit(1784724874.569:29): pid=9985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1541" name="/newroot/137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop5" ino=1048645 res=1 errno=0 [ 264.952053][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.104155][ T9990] loop2: detected capacity change from 0 to 256 [ 265.153720][ T9990] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 265.154943][ T9991] loop8: detected capacity change from 0 to 8 [ 265.202204][ T9990] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 265.205032][ T9991] Dev loop8: unable to read RDB block 8 [ 265.214616][ T9990] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 265.224468][ T9991] loop8: unable to read partition table [ 265.241972][ T9991] loop8: partition table beyond EOD, truncated [ 265.262415][ T9991] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 265.395362][ T9997] sctp: [Deprecated]: syz.4.1546 (pid 9997) Use of int in max_burst socket option deprecated. [ 265.395362][ T9997] Use struct sctp_assoc_value instead [ 265.535089][ T5837] kernel read not supported for file /video9 (pid: 5837 comm: kworker/0:7) [ 265.544999][ T5838] kernel write not supported for file /adsp1 (pid: 5838 comm: kworker/1:5) [ 265.563426][T10002] EXT4-fs error: 583 callbacks suppressed [ 265.563441][T10002] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.2.1548: Invalid inode table block 0 in block_group 0 [ 265.581793][T10003] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.5.1549: Invalid inode table block 0 in block_group 0 [ 265.611692][T10002] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 265.619142][T10003] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 265.641035][T10002] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2032: comm syz.2.1548: mark_inode_dirty error [ 265.648236][T10003] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2028: comm syz.5.1549: mark_inode_dirty error [ 265.670501][T10004] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.4.1550: Invalid inode table block 0 in block_group 0 [ 265.704146][T10003] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.5.1549: Invalid inode table block 0 in block_group 0 [ 265.708378][T10004] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 265.732686][T10003] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 266.062662][ T5784] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 266.074453][ T5784] CPU: 0 PID: 5784 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 266.082055][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 266.092146][ T5784] Workqueue: hci1 hci_rx_work [ 266.096880][ T5784] Call Trace: [ 266.100177][ T5784] [ 266.103133][ T5784] dump_stack_lvl+0x18c/0x250 [ 266.107859][ T5784] ? show_regs_print_info+0x20/0x20 [ 266.113121][ T5784] ? load_image+0x420/0x420 [ 266.117676][ T5784] sysfs_create_dir_ns+0x26e/0x2a0 [ 266.122819][ T5784] ? __lock_acquire+0x7d80/0x7d80 [ 266.127869][ T5784] ? sysfs_warn_dup+0xa0/0xa0 [ 266.132583][ T5784] ? do_raw_spin_unlock+0x121/0x230 [ 266.137863][ T5784] kobject_add_internal+0x617/0xc90 [ 266.143114][ T5784] kobject_add+0x164/0x240 [ 266.147558][ T5784] ? kobject_init+0x1d0/0x1d0 [ 266.152247][ T5784] ? get_device_parent+0x366/0x390 [ 266.157366][ T5784] device_add+0x3fa/0xc40 [ 266.161702][ T5784] hci_conn_add_sysfs+0xd5/0x1e0 [ 266.166645][ T5784] le_conn_complete_evt+0xe9f/0x1480 [ 266.171942][ T5784] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 266.178209][ T5784] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 266.183876][ T5784] ? mutex_unlock+0x10/0x10 [ 266.188424][ T5784] ? skb_pull_data+0xf0/0x1f0 [ 266.193136][ T5784] hci_le_conn_complete_evt+0x187/0x440 [ 266.198700][ T5784] ? hci_remote_host_features_evt+0x150/0x150 [ 266.204771][ T5784] hci_event_packet+0x7b4/0x1280 [ 266.209722][ T5784] ? __lock_acquire+0x7d80/0x7d80 [ 266.214757][ T5784] ? lock_chain_count+0x20/0x20 [ 266.219611][ T5784] ? bis_list+0x290/0x290 [ 266.223976][ T5784] ? lockdep_hardirqs_on+0x98/0x150 [ 266.229183][ T5784] ? hci_send_to_monitor+0xd7/0x4f0 [ 266.234386][ T5784] hci_rx_work+0x43a/0xd60 [ 266.238816][ T5784] ? process_scheduled_works+0x975/0x1600 [ 266.244538][ T5784] process_scheduled_works+0xa60/0x1600 [ 266.250109][ T5784] ? worker_attach_to_pool+0x370/0x370 [ 266.255577][ T5784] ? assign_work+0x3cc/0x5d0 [ 266.260196][ T5784] worker_thread+0xa5e/0xfe0 [ 266.264804][ T5784] ? _raw_spin_unlock+0x40/0x40 [ 266.269658][ T5784] ? __kthread_parkme+0x71/0x1c0 [ 266.274601][ T5784] kthread+0x2fa/0x390 [ 266.278675][ T5784] ? pr_cont_work+0x550/0x550 [ 266.283359][ T5784] ? kthread_blkcg+0xd0/0xd0 [ 266.287953][ T5784] ret_from_fork+0x48/0x80 [ 266.292393][ T5784] ? kthread_blkcg+0xd0/0xd0 [ 266.297011][ T5784] ret_from_fork_asm+0x11/0x20 [ 266.301809][ T5784] [ 266.351626][T10019] loop5: detected capacity change from 0 to 2048 [ 266.372025][T10021] input: syz1 as /devices/virtual/input/input34 [ 266.382699][T10019] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.390082][ T5784] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 266.405851][ T5784] Bluetooth: hci1: failed to register connection device [ 266.997334][T10005] IPVS: You probably need to specify IP address on multicast interface. [ 267.048934][T10005] IPVS: Error connecting to the multicast addr [ 267.065664][T10031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1557'. [ 267.106656][T10034] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1558'. [ 267.788042][T10054] batadv_slave_0: entered allmulticast mode [ 267.810447][T10054] batadv_slave_0: left allmulticast mode [ 267.876520][T10057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1569'. [ 267.886026][T10057] bond0: ARP target 0.0.0.2 is already present [ 267.893385][T10057] bond0: option arp_ip_target: invalid value (33554432) [ 268.122162][T10067] loop2: detected capacity change from 0 to 512 [ 268.147848][T10067] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 268.210700][T10067] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003] [ 268.222948][T10067] System zones: 1-2, 4-12, 8-8 [ 268.241389][T10067] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1572: iget: bad i_size value: 38620345925642 [ 268.257171][T10067] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1572: couldn't read orphan inode 15 (err -117) [ 268.281390][T10067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.347934][ T5838] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 268.369703][T10067] EXT4-fs error (device loop2): ext4_check_dx_root:2266: inode #2: comm syz.2.1572: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 268.382232][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 268.457052][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.504091][T10076] loop5: detected capacity change from 0 to 4096 [ 268.582534][ T5838] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.607684][ T5838] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.637725][ T5838] usb 5-1: config 0 interface 0 has no altsetting 0 [ 268.655481][ T5838] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 268.659272][T10076] ntfs3: Cannot use different iocharset when remounting! [ 268.683994][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.711843][ T5838] usb 5-1: config 0 descriptor?? [ 268.896899][T10085] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 268.913317][T10085] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 268.923498][T10085] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 269.138152][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1583'. [ 269.151910][ T5838] hid-steam 0003:28DE:1102.001E: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 269.174916][T10091] team1: entered promiscuous mode [ 269.182577][T10091] team1: entered allmulticast mode [ 269.192928][T10091] 8021q: adding VLAN 0 to HW filter on device team1 [ 269.196119][T10092] udevd[10092]: failed to execute '/lib/udev/fido_id' 'fido_id': Structure needs cleaning [ 269.335933][ T1200] usb 5-1: USB disconnect, device number 16 [ 269.998782][ T1200] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 270.206534][ T1200] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 270.247850][ T1200] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.287798][ T1200] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.315596][ T1200] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 270.338621][ T1200] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 270.348183][ T1200] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 270.356528][ T1200] usb 6-1: Manufacturer: syz [ 270.371239][ T1200] usb 6-1: config 0 descriptor?? [ 270.567741][ T23] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 270.605365][T10103] EXT4-fs error: 483 callbacks suppressed [ 270.605378][T10103] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.5.1589: Invalid inode table block 0 in block_group 0 [ 270.635012][T10103] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 270.645209][T10103] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2028: comm syz.5.1589: mark_inode_dirty error [ 270.660186][T10103] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.5.1589: Invalid inode table block 0 in block_group 0 [ 270.677106][T10103] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 270.686747][T10103] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2028: comm syz.5.1589: mark_inode_dirty error [ 270.698773][ T8] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 270.707292][T10103] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.5.1589: Invalid inode table block 0 in block_group 0 [ 270.721230][T10103] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 270.730839][T10103] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2028: comm syz.5.1589: mark_inode_dirty error [ 270.742592][T10103] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.5.1589: Invalid inode table block 0 in block_group 0 [ 270.780508][ T23] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 270.789370][ T23] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 270.800092][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 270.812654][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 270.825059][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 270.838031][ T23] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 270.847165][ T23] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 270.855543][ T23] usb 5-1: Product: syz [ 270.859886][ T23] usb 5-1: Manufacturer: syz [ 270.871156][ T23] cdc_wdm 5-1:1.0: skipping garbage [ 270.876417][ T23] cdc_wdm 5-1:1.0: skipping garbage [ 270.885392][ T23] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 270.891424][ T23] cdc_wdm 5-1:1.0: Unknown control protocol [ 270.897790][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 270.928295][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 270.947400][ T8] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 270.961404][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.971584][ T1200] appleir 0003:05AC:8243.001F: unknown main item tag 0x0 [ 270.977342][ T8] usb 2-1: config 0 descriptor?? [ 270.986225][ T1200] appleir 0003:05AC:8243.001F: No inputs registered, leaving [ 271.003008][ T1200] appleir 0003:05AC:8243.001F: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 271.053388][T10132] udevd[10132]: failed to execute '/lib/udev/fido_id' 'fido_id': Structure needs cleaning [ 271.200960][ T1200] usb 6-1: USB disconnect, device number 7 [ 271.212482][ T8] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior2 [ 271.419596][ T8] usb 2-1: USB disconnect, device number 28 [ 271.441224][T10139] Invalid argument reading file caps for ./file0 [ 271.544330][ T5837] usb 5-1: USB disconnect, device number 17 [ 272.239454][T10159] mkiss: ax0: crc mode is auto. [ 272.438424][T10165] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1614'. [ 272.457793][T10165] tc_dump_action: action bad kind [ 272.512846][T10163] loop2: detected capacity change from 0 to 4096 [ 272.538141][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 272.545531][T10163] EXT4-fs: Ignoring removed nomblk_io_submit option [ 272.559450][T10163] EXT4-fs (loop2): Test dummy encryption mode enabled [ 272.600755][T10163] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 272.610357][T10163] System zones: 0-5 [ 272.620492][T10163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.644374][T10163] EXT4-fs (loop2): shut down requested (2) [ 272.737523][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.151819][T10184] loop1: detected capacity change from 0 to 512 [ 273.190756][T10184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.208040][T10184] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.254978][ T28] audit: type=1800 audit(1784724882.919:30): pid=10184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1621" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 273.334730][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.805161][T10201] Bluetooth: MGMT ver 1.22 [ 273.820625][T10201] Bluetooth: hci2: invalid length 1, exp 2 for type 6 [ 274.308642][T10215] loop1: detected capacity change from 0 to 4096 [ 274.326790][T10215] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 274.416651][T10215] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 274.434047][T10215] ntfs3: loop1: Failed to load $Extend (-22). [ 274.441124][T10215] ntfs3: loop1: Failed to initialize $Extend. [ 274.458739][T10215] ntfs3: loop1: ino=0, attr_set_size [ 274.473434][T10215] ntfs3: loop1: ino=0, attr_set_size [ 274.484402][T10215] ntfs3: loop1: ino=0, attr_set_size [ 274.621416][ T8059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.135730][ T1143] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.271288][ T1143] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.293058][ T1200] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 275.390404][ T1143] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.509590][ T1200] usb 6-1: Using ep0 maxpacket: 32 [ 275.518791][ T1200] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 275.530546][ T1143] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.536464][ T1200] usb 6-1: config 0 has no interface number 0 [ 275.554126][ T1200] usb 6-1: config 0 interface 184 has no altsetting 0 [ 275.574720][ T1200] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 275.607221][ T1200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.616200][T10235] EXT4-fs error: 347 callbacks suppressed [ 275.616619][T10235] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2030: comm syz.1.1645: mark_inode_dirty error [ 275.645100][ T1200] usb 6-1: Product: syz [ 275.657234][ T1200] usb 6-1: Manufacturer: syz [ 275.662047][ T1200] usb 6-1: SerialNumber: syz [ 275.672550][T10235] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.1.1645: Invalid inode table block 0 in block_group 0 [ 275.685334][T10235] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 275.701463][ T1200] usb 6-1: config 0 descriptor?? [ 275.711105][ T1200] smsc75xx v1.0.0 [ 275.714974][T10235] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2030: comm syz.1.1645: mark_inode_dirty error [ 275.724558][T10237] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.2.1646: Invalid inode table block 0 in block_group 0 [ 275.761808][T10237] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 275.782203][T10237] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2032: comm syz.2.1646: mark_inode_dirty error [ 275.822105][T10237] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.2.1646: Invalid inode table block 0 in block_group 0 [ 275.836600][T10237] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 275.848407][T10237] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2032: comm syz.2.1646: mark_inode_dirty error [ 276.255011][T10250] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 276.299723][T10250] CPU: 0 PID: 10250 Comm: syz.2.1647 Not tainted syzkaller #0 [ 276.307241][T10250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 276.317329][T10250] Call Trace: [ 276.320641][T10250] [ 276.323592][T10250] dump_stack_lvl+0x18c/0x250 [ 276.328318][T10250] ? show_regs_print_info+0x20/0x20 [ 276.333566][T10250] ? load_image+0x420/0x420 [ 276.338092][T10250] sysfs_create_dir_ns+0x26e/0x2a0 [ 276.343254][T10250] ? __lock_acquire+0x7d80/0x7d80 [ 276.348317][T10250] ? sysfs_warn_dup+0xa0/0xa0 [ 276.353008][T10250] ? rcu_is_watching+0x15/0xb0 [ 276.357795][T10250] ? do_raw_spin_unlock+0x121/0x230 [ 276.363027][T10250] kobject_add_internal+0x617/0xc90 [ 276.368436][T10250] kobject_add+0x164/0x240 [ 276.372884][T10250] ? kobject_init+0x1d0/0x1d0 [ 276.377596][T10250] ? get_device_parent+0x366/0x390 [ 276.382839][T10250] device_add+0x3fa/0xc40 [ 276.387206][T10250] tty_register_device_attr+0x425/0x950 [ 276.392832][T10250] ? tty_register_device+0x30/0x30 [ 276.397994][T10250] ? tty_port_init+0x132/0x1a0 [ 276.402801][T10250] ? gsm_dlci_alloc+0x32a/0x630 [ 276.407683][T10250] ? __might_fault+0xaa/0x120 [ 276.412388][T10250] gsm_activate_mux+0x110/0x2a0 [ 276.417395][T10250] gsmld_ioctl+0x12ca/0x1900 [ 276.422003][T10250] ? gsmld_write+0x120/0x120 [ 276.426610][T10250] ? __init_ldsem+0x150/0x150 [ 276.431308][T10250] ? __fget_files+0x28/0x460 [ 276.435910][T10250] ? gsmld_write+0x120/0x120 [ 276.440507][T10250] tty_ioctl+0x9b5/0xdc0 [ 276.444750][T10250] ? tty_get_icount+0xb0/0xb0 [ 276.449462][T10250] __se_sys_ioctl+0xfd/0x170 [ 276.454061][T10250] do_syscall_64+0x55/0xb0 [ 276.458487][T10250] ? clear_bhb_loop+0x40/0x90 [ 276.463163][T10250] ? clear_bhb_loop+0x40/0x90 [ 276.467842][T10250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.473740][T10250] RIP: 0033:0x7fbfd099de99 [ 276.478152][T10250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.497770][T10250] RSP: 002b:00007fbfd18b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.506190][T10250] RAX: ffffffffffffffda RBX: 00007fbfd0c26090 RCX: 00007fbfd099de99 [ 276.514163][T10250] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 276.522134][T10250] RBP: 00007fbfd0a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 276.530105][T10250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.538072][T10250] R13: 00007fbfd0c26128 R14: 00007fbfd0c26090 R15: 00007ffe295dc238 [ 276.546060][T10250] [ 276.568550][ T1200] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 276.580773][T10250] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 276.612135][ T1200] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 276.839510][ T1200] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 276.865043][ T1200] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 276.877454][ T1200] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 276.919986][ T1200] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 276.930410][ T1200] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 276.943556][ T1200] usb 6-1: USB disconnect, device number 8 [ 277.369162][T10263] loop1: detected capacity change from 0 to 512 [ 277.395117][T10263] EXT4-fs (loop1): Test dummy encryption mode enabled [ 277.449622][T10263] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1649: inode has both inline data and extents flags [ 277.509333][T10263] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1649: couldn't read orphan inode 15 (err -117) [ 277.555096][T10263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.638488][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.744642][ T1143] hsr_slave_0: left promiscuous mode [ 277.751105][ T1143] hsr_slave_1: left promiscuous mode [ 277.761425][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.768952][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.777477][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.785124][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.793086][ T1143] bridge_slave_1: left allmulticast mode [ 277.798882][ T1143] bridge_slave_1: left promiscuous mode [ 277.804564][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.814690][ T1143] bridge_slave_0: left allmulticast mode [ 277.820669][ T1143] bridge_slave_0: left promiscuous mode [ 277.826383][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.854213][ T1143] veth1_macvtap: left promiscuous mode [ 277.859885][ T1143] veth0_macvtap: left promiscuous mode [ 277.865471][ T1143] veth1_vlan: left promiscuous mode [ 277.871457][ T1143] veth0_vlan: left promiscuous mode [ 278.737012][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 278.791853][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 278.845981][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.902118][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.080400][T10286] loop5: detected capacity change from 0 to 256 [ 279.489606][ T1143] bond0 (unregistering): Released all slaves [ 279.928208][ T1143] IPVS: stop unused estimator thread 0... [ 280.297696][ T5837] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 280.479397][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.490412][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.500261][ T5837] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 280.513326][ T5837] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.523534][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.533145][ T5837] usb 2-1: config 0 descriptor?? [ 280.750567][T10302] EXT4-fs error: 135 callbacks suppressed [ 280.750583][T10302] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.1.1657: Invalid inode table block 0 in block_group 0 [ 280.769057][T10302] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 280.779672][T10302] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2030: comm syz.1.1657: mark_inode_dirty error [ 280.795134][T10302] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.1.1657: Invalid inode table block 0 in block_group 0 [ 280.808591][T10302] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 280.818111][T10302] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2030: comm syz.1.1657: mark_inode_dirty error [ 280.829865][T10302] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.1.1657: Invalid inode table block 0 in block_group 0 [ 280.842632][T10302] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 280.853136][T10302] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2030: comm syz.1.1657: mark_inode_dirty error [ 280.865648][T10302] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.1.1657: Invalid inode table block 0 in block_group 0 [ 281.083970][ T5837] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 281.121291][ T5837] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 281.158888][T10313] udevd[10313]: failed to execute '/lib/udev/fido_id' 'fido_id': Structure needs cleaning [ 281.370086][ T5814] usb 2-1: USB disconnect, device number 29 [ 282.245550][T10322] loop2: detected capacity change from 0 to 512 [ 282.254008][T10322] EXT4-fs: Ignoring removed i_version option [ 282.261672][T10322] EXT4-fs: Ignoring removed nobh option [ 282.267438][T10321] netlink: 'syz.1.1662': attribute type 3 has an invalid length. [ 282.291109][T10322] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 282.330645][T10322] EXT4-fs (loop2): 1 truncate cleaned up [ 282.371461][T10322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.486575][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.584568][T10320] loop5: detected capacity change from 0 to 32768 [ 282.617006][T10320] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 282.659622][T10320] XFS (loop5): Ending clean mount [ 282.734812][ T28] audit: type=1804 audit(1784724892.399:31): pid=10320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1661" name="/newroot/163/file0/file1" dev="loop5" ino=4422 res=1 errno=0 [ 282.789809][ T8736] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 283.740322][T10339] loop5: detected capacity change from 0 to 32768 [ 283.763318][T10339] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 283.794804][T10339] XFS (loop5): Ending clean mount [ 283.889970][ T8736] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 285.107730][ T5837] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 285.289868][ T5837] usb 2-1: Using ep0 maxpacket: 16 [ 285.296368][ T5837] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 285.304629][ T5837] usb 2-1: config 1 has no interface number 0 [ 285.310985][ T5837] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 285.321048][ T5837] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 285.331096][ T5837] usb 2-1: config 1 interface 105 has no altsetting 0 [ 285.341075][ T5837] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 285.350487][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 285.359148][ T5837] usb 2-1: Product: syz [ 285.363335][ T5837] usb 2-1: Manufacturer: syz [ 285.368034][ T5837] usb 2-1: SerialNumber: syz [ 285.376480][T10359] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 285.384010][T10359] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 285.804567][T10359] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 285.812020][T10359] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 286.023798][T10355] EXT4-fs error: 132 callbacks suppressed [ 286.023813][T10355] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.1.1668: Invalid inode table block 0 in block_group 0 [ 286.042445][T10355] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 286.052168][T10355] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2030: comm syz.1.1668: mark_inode_dirty error [ 286.218109][ T5762] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 286.239800][ T5762] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 286.251683][ T5762] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2022: comm syz-executor: mark_inode_dirty error [ 286.264197][ T5762] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 286.279311][ T5762] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 286.279726][T10355] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.1.1668: Invalid inode table block 0 in block_group 0 [ 286.292730][ T5762] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2022: comm syz-executor: mark_inode_dirty error [ 286.518653][ T5837] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 286.533146][ T5837] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 286.552914][ T5837] aqc111 2-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 26:34:e5:4f:1f:9c [ 286.569800][ T5837] usb 2-1: USB disconnect, device number 30 [ 286.577547][ T5837] aqc111 2-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 286.656207][ T5837] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 286.666246][ T5837] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 286.675748][ T5837] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 288.147825][ T23] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 288.327685][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 288.334987][ T23] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 288.346064][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 288.355983][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 288.366497][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 288.376544][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.389606][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 288.398784][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.622757][ T23] usb 2-1: GET_CAPABILITIES returned 0 [ 288.628510][ T23] usbtmc 2-1:16.0: can't read capabilities [ 289.194483][T10380] usbtmc 2-1:16.0: INITIATE_CLEAR returned 0 [ 289.396102][ T5837] usb 2-1: USB disconnect, device number 31 [ 291.220969][ T5762] EXT4-fs error: 113 callbacks suppressed [ 291.220986][ T5762] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 291.244241][ T5762] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 291.253803][ T5762] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2028: comm syz-executor: mark_inode_dirty error [ 291.277890][ T5762] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 291.297759][ T5762] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 291.298655][T10393] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz.1.1677: Invalid inode table block 0 in block_group 0 [ 291.307079][ T5762] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2032: comm syz-executor: mark_inode_dirty error [ 291.307500][ T5762] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 291.344911][T10393] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 291.344938][T10393] EXT4-fs error (device sda1): ext4_dirty_inode:6143: inode #2030: comm syz.1.1677: mark_inode_dirty error [ 291.567970][T10396] loop5: detected capacity change from 0 to 32768 [ 291.581938][T10396] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1676 (10396) [ 291.599379][T10396] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 291.610404][T10396] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 291.621959][T10396] BTRFS info (device loop5): turning on sync discard [ 291.629139][T10396] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 291.638883][T10396] BTRFS info (device loop5): use zstd compression, level 3 [ 291.646136][T10396] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 291.657376][T10396] BTRFS info (device loop5): trying to use backup root at mount time [ 291.665686][T10396] BTRFS info (device loop5): use zlib compression, level 3 [ 291.678396][T10396] BTRFS info (device loop5): enabling auto defrag [ 291.685658][T10398] udevd[10398]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 291.685710][T10396] BTRFS info (device loop5): using free space tree [ 291.736913][ T49] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 291.758848][T10396] BTRFS error (device loop5): failed to load root extent [ 291.766009][T10396] BTRFS warning (device loop5): try to load backup roots slot 1 [ 291.781241][ T49] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 291.796120][T10396] BTRFS warning (device loop5): couldn't read tree root [ 291.803694][T10396] BTRFS warning (device loop5): try to load backup roots slot 2 [ 291.819938][T10414] udevd[10414]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 291.820093][ T49] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 291.844644][T10396] BTRFS warning (device loop5): couldn't read tree root [ 291.852549][T10396] BTRFS warning (device loop5): try to load backup roots slot 3 [ 291.866644][T10396] BTRFS info (device loop5): enabling ssd optimizations [ 291.878143][T10396] BTRFS info (device loop5): rebuilding free space tree [ 291.900374][T10396] BTRFS info (device loop5): checking UUID tree [ 292.001619][T10419] udevd[10419]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Structure needs cleaning [ 292.029960][ T8736] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 293.547849][ T8] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 293.646449][ T3469] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.749711][ T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 293.753306][ T3469] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.767686][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.797636][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.807567][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 293.828321][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 293.841402][ T8] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 293.849976][ T8] usb 3-1: Manufacturer: syz [ 293.862351][ T8] usb 3-1: config 0 descriptor?? [ 293.906250][ T3469] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=6 req=1643 state=1 status=67 (errno 9: Bad file descriptor) [ 294.033634][ T3469] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.091188][ T5762] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 294.123505][ T5762] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 294.176840][ T5762] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 294.227903][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 294.237143][ T5762] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 294.305615][ T8] appleir 0003:05AC:8243.0021: unknown main item tag 0x0 [ 294.341978][ T8] appleir 0003:05AC:8243.0021: No inputs registered, leaving [ 294.381974][ T3469] tipc: Left network mode [ 294.416031][ T8] appleir 0003:05AC:8243.0021: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 294.505418][T10439] udevd[10439]: failed to execute '/lib/udev/fido_id' 'fido_id': Structure needs cleaning [ 295.105624][ T9] usb 6-1: device descriptor read/all, error -71 [ 295.135880][T10431] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 295.151787][T10431] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 295.195116][ T5814] usb 3-1: USB disconnect, device number 26 [ 295.203505][T10424] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 295.228830][T10424] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 295.452731][T10424] EXT4-fs warning (device sda1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 295.654430][ T3469] hsr_slave_0: left promiscuous mode [ 295.660729][ T3469] hsr_slave_1: left promiscuous mode [ 295.666673][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.674497][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.682273][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.689782][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.698675][ T3469] bridge_slave_1: left allmulticast mode [ 295.704362][ T3469] bridge_slave_1: left promiscuous mode [ 295.710236][ T3469] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.720509][ T3469] bridge_slave_0: left allmulticast mode [ 295.726211][ T3469] bridge_slave_0: left promiscuous mode [ 295.733560][ T3469] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.757227][ T3469] veth1_macvtap: left promiscuous mode [ 295.763223][ T3469] veth0_macvtap: left promiscuous mode [ 295.769214][ T3469] veth1_vlan: left promiscuous mode [ 295.774622][ T3469] veth0_vlan: left promiscuous mode [ 296.455443][ T3469] team0 (unregistering): Port device team_slave_1 removed [ 296.513369][ T3469] team0 (unregistering): Port device team_slave_0 removed [ 296.571869][ T3469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.623291][ T3469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.958946][ T3469] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 297.022680][ T3469] bond0 (unregistering): Released all slaves [ 297.453378][ T3469] IPVS: stop unused estimator thread 0... [ 297.570679][ T3469] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.675870][ T3469] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.746933][ T3469] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.794650][ T3469] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.955696][ T3469] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.967508][ T3469] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.998582][T10469] EXT4-fs error: 153 callbacks suppressed [ 297.998597][T10469] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 298.029824][T10470] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 298.061440][ T3469] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.071903][ T3469] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.113059][T10471] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 298.136373][T10472] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 298.150766][ T3469] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.162318][ T3469] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.208607][T10473] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 298.228865][T10474] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 298.254999][ T3469] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.265843][ T3469] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.309910][T10475] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 298.328143][T10476] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 298.376327][T10477] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 298.459564][T10478] EXT4-fs error (device sda1): __ext4_get_inode_loc:4496: comm dhcpcd: Invalid inode table block 0 in block_group 0 [ 298.510843][ T3469] tipc: Left network mode [ 299.694761][ T3469] hsr_slave_0: left promiscuous mode [ 299.700929][ T3469] hsr_slave_1: left promiscuous mode [ 299.706804][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.715626][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.723544][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.735787][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.743922][ T3469] bridge_slave_1: left promiscuous mode [ 299.749978][ T3469] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.759259][ T3469] bridge_slave_0: left allmulticast mode [ 299.764978][ T3469] bridge_slave_0: left promiscuous mode [ 299.770945][ T3469] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.786076][ T3469] hsr_slave_0: left promiscuous mode [ 299.792540][ T3469] hsr_slave_1: left promiscuous mode [ 299.802002][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.810818][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.819326][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.826730][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.834705][ T3469] bridge_slave_1: left allmulticast mode [ 299.840468][ T3469] bridge_slave_1: left promiscuous mode [ 299.846143][ T3469] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.854772][ T3469] bridge_slave_0: left allmulticast mode [ 299.860601][ T3469] bridge_slave_0: left promiscuous mode [ 299.866271][ T3469] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.908646][ T3469] veth1_macvtap: left promiscuous mode [ 299.914223][ T3469] veth0_macvtap: left promiscuous mode [ 299.926119][ T3469] veth1_vlan: left promiscuous mode [ 299.932776][ T3469] veth0_vlan: left promiscuous mode [ 299.941409][ T3469] veth1_macvtap: left promiscuous mode [ 299.947228][ T3469] veth0_macvtap: left promiscuous mode [ 299.956500][ T3469] veth1_vlan: left promiscuous mode [ 299.961969][ T3469] veth0_vlan: left promiscuous mode [ 300.438567][ T3469] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 300.789686][ T3469] team0 (unregistering): Port device team_slave_1 removed [ 300.835626][ T3469] team0 (unregistering): Port device team_slave_0 removed [ 300.891056][ T3469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.956039][ T3469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.199348][ T3469] veth0 (unregistering): left allmulticast mode [ 301.385011][ T3469] bond0 (unregistering): Released all slaves [ 302.252917][ T3469] team0 (unregistering): Port device team_slave_1 removed [ 302.306694][ T3469] team0 (unregistering): Port device team_slave_0 removed [ 302.359862][ T3469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.411743][ T3469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.874326][ T3469] bond0 (unregistering): Released all slaves [ 303.438992][ T3469] IPVS: stop unused estimator thread 0...