last executing test programs: 2m1.15603163s ago: executing program 0 (id=1620): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 2m1.12724373s ago: executing program 0 (id=1621): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1800040, &(0x7f00000001c0)={[{@minixdf}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@nodelalloc}, {@resuid}, {@errors_remount}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x842, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 2m0.963865454s ago: executing program 0 (id=1625): r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1) 2m0.72618777s ago: executing program 0 (id=1628): pipe(&(0x7f00000003c0)) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) 2m0.527957735s ago: executing program 0 (id=1632): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0)={[{@nombcache}]}, 0x1, 0x571, &(0x7f0000000780)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 2m0.350608128s ago: executing program 0 (id=1633): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r0, &(0x7f0000000b00)=[{&(0x7f0000000580)='p', 0x1}, {&(0x7f0000000a80)='>', 0x1}, {&(0x7f00000006c0)='B', 0x1}, {&(0x7f0000000c40)="ba", 0x1}], 0x4, 0xc) ioctl$FIONREAD(r0, 0x541b, 0x0) 1m45.167473068s ago: executing program 32 (id=1633): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r0, &(0x7f0000000b00)=[{&(0x7f0000000580)='p', 0x1}, {&(0x7f0000000a80)='>', 0x1}, {&(0x7f00000006c0)='B', 0x1}, {&(0x7f0000000c40)="ba", 0x1}], 0x4, 0xc) ioctl$FIONREAD(r0, 0x541b, 0x0) 46.326005233s ago: executing program 4 (id=2424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) 46.176615987s ago: executing program 4 (id=2428): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) 46.02812651s ago: executing program 4 (id=2431): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000a80)={0x0, 0xea60}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) 45.836095715s ago: executing program 4 (id=2434): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 45.778666536s ago: executing program 4 (id=2435): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fstat(r0, &(0x7f0000001b00)) 45.415968004s ago: executing program 4 (id=2438): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 45.068174672s ago: executing program 33 (id=2438): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 17.415897049s ago: executing program 1 (id=2693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)={0x94, r1, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x6a, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x94}}, 0x0) 17.234788823s ago: executing program 1 (id=2696): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2, 0x0, 0x0, 0x100100}, 0x0) 17.049474497s ago: executing program 1 (id=2698): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x10800, &(0x7f0000000240)={[{@keep_last_dots}, {@sys_tz}, {@keep_last_dots}, {}, {@uid={'uid', 0x3d, 0xee01}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@umask={'umask', 0x3d, 0x3}}, {@utf8}, {@time_offset={'time_offset', 0x3d, 0x1}}]}, 0x1, 0x152a, &(0x7f0000001f80)="$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") mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)) 16.840540583s ago: executing program 1 (id=2702): r0 = socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x20040600) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0x1, {0x1, 0xff, 0x2}, 0x1}, 0x18) 16.679983336s ago: executing program 1 (id=2703): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x18000, &(0x7f0000005180), 0x81, 0x50d4, &(0x7f00000051c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) 15.619282031s ago: executing program 1 (id=2715): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0xe) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0xb1b7) 2.547989231s ago: executing program 2 (id=2822): r0 = socket(0x15, 0x5, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}, 0xfffffffd}, 0x1c) getsockname$tipc(r0, 0x0, &(0x7f0000000240)) 2.378450176s ago: executing program 2 (id=2824): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000003, 0x0, 0x7d, 0x200, 0xfffefffffffffffd, 0x530351}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x6, 0x0, 0x40, 0x400, 0x4000000000000009, 0x10200}) 2.258716778s ago: executing program 2 (id=2825): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x80000000002, 0x30004) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100031bf5f708b4070a0102a378f31a010902120001000b80050904af09000806"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) 1.810261388s ago: executing program 3 (id=2829): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) read$FUSE(r0, &(0x7f0000002580)={0x2020}, 0x2020) 1.607175223s ago: executing program 3 (id=2832): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x23, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.433179467s ago: executing program 3 (id=2833): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 1.188331433s ago: executing program 5 (id=2835): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x10000, 0x2, 0x1, 0x2, 0x3, 0x5, 0x1, 0x2, 0x8, 0x10002, 0x8, 0xd, 0x7, 0x2, 0x8, 0x4, {0xc, 0x8}, 0x2, 0x1}}) 1.180208753s ago: executing program 3 (id=2843): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000500), &(0x7f0000000540)=0x4) 1.017925827s ago: executing program 5 (id=2836): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000700)="f3", 0x1}], 0x1}, 0x44) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/219, 0xdb}], 0x1, &(0x7f0000000480)=""/19, 0x13}, 0x40000010) 1.016578187s ago: executing program 3 (id=2845): syz_mount_image$minix(&(0x7f0000000080), &(0x7f00000001c0)='./file1\x00', 0x200008, &(0x7f0000000480)=ANY=[], 0x5, 0x191, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, 0x0) 830.539541ms ago: executing program 5 (id=2837): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) setreuid(0xffffffffffffffff, 0xee01) ioctl$BLKRASET(r0, 0x1262, 0x0) 500.983488ms ago: executing program 34 (id=2715): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0xe) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0xb1b7) 482.045589ms ago: executing program 2 (id=2839): unshare(0x2c020400) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) epoll_pwait2(r0, &(0x7f0000000780)=[{}], 0x1, 0x0, 0x0, 0x0) 481.949779ms ago: executing program 3 (id=2840): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 481.899899ms ago: executing program 5 (id=2841): setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000200)={0x0, 0x2}, 0x2) ioperm(0x2, 0x7ff, 0x8) io_setup(0x4fe, &(0x7f0000000200)) 334.414063ms ago: executing program 5 (id=2842): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) 230.031825ms ago: executing program 2 (id=2844): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0xcd57b463201d2915, 0xffffffff, {0x77359400}, {}, {}, 0x1, @canfd={{0x1, 0x1}, 0x13, 0x1, 0x0, 0x0, "5cf46e3ae2e3cabc357f14ea53f8d7ccd6fe5fee071f4279d0e4883362faffc0a2842431bc380a491c4a65e709ca3cd71b6da7766892b1100997d9daefc91154"}}, 0x80}, 0x1, 0x0, 0x0, 0x400c0091}, 0x8000) 2.37408ms ago: executing program 5 (id=2846): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000003, 0x0, 0x7d, 0x200, 0xfffefffffffffffd, 0x530351}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x6, 0x0, 0x40, 0x400, 0x4000000000000009, 0x10200}) 0s ago: executing program 2 (id=2853): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='LINE1 \aMaster Capture!Switch\' '], 0x33) close(r0) kernel console output (not intermixed with test programs): 3:1E7D:319C.0017: parse failed [ 221.611843][ T9] isku: probe of 0003:1E7D:319C.0017 failed with error -22 [ 221.834792][ T9] usb 4-1: USB disconnect, device number 17 [ 222.057334][ T9643] loop2: detected capacity change from 0 to 64 [ 222.475516][ T5779] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 222.537790][ T9661] syz.1.1572[9661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.538031][ T9661] syz.1.1572[9661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.667138][ T5779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.695269][ T9667] sock: sock_timestamping_bind_phc: sock not bind to device [ 222.703798][ T5779] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 222.740111][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.778683][ T5779] usb 3-1: config 0 descriptor?? [ 222.811128][ T9671] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1577'. [ 223.141425][ T9687] tipc: Enabling not permitted [ 223.150276][ T9687] tipc: Enabling of bearer rejected, failed to enable media [ 223.211073][ T5779] logitech 0003:046D:C293.0018: global environment stack underflow [ 223.229464][ T9689] Bluetooth: MGMT ver 1.22 [ 223.237448][ T5779] logitech 0003:046D:C293.0018: item 0 2 1 11 parsing failed [ 223.259065][ T5779] logitech 0003:046D:C293.0018: parse failed [ 223.270786][ T5779] logitech: probe of 0003:046D:C293.0018 failed with error -22 [ 223.304184][ T9693] mkiss: ax0: crc mode is auto. [ 223.448003][ T5779] usb 3-1: USB disconnect, device number 20 [ 223.551577][ T9705] loop3: detected capacity change from 0 to 8 [ 223.594463][ T9705] SQUASHFS error: Unable to read inode 0x0 [ 224.147099][ T9723] vlan2: entered promiscuous mode [ 224.152445][ T9723] syz_tun: entered promiscuous mode [ 224.194788][ T9723] vlan2: entered allmulticast mode [ 224.206292][ T9723] syz_tun: entered allmulticast mode [ 225.091982][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1617'. [ 225.129749][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1617'. [ 225.170571][ T9750] netlink: 'syz.3.1617': attribute type 19 has an invalid length. [ 225.203869][ T9750] netlink: 'syz.3.1617': attribute type 20 has an invalid length. [ 225.252334][ T9750] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.261174][ T9750] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.269966][ T9750] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.278792][ T9750] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.294318][ T5775] Bluetooth: hci2: command 0x0401 tx timeout [ 225.300542][ T5781] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 225.902247][ T9760] loop2: detected capacity change from 0 to 512 [ 226.016509][ T9760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.045255][ T9760] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.238689][ T9777] netlink: 'syz.0.1628': attribute type 3 has an invalid length. [ 226.249247][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 226.250465][ T9765] loop3: detected capacity change from 0 to 4096 [ 226.267568][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.519100][ T9782] loop2: detected capacity change from 0 to 4096 [ 226.617122][ T9765] ntfs3: loop3: ino=9, attr_set_size [ 227.517115][ T9802] loop3: detected capacity change from 0 to 128 [ 227.655390][ T9802] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 227.784157][ T9804] loop2: detected capacity change from 0 to 4096 [ 227.864673][ T5772] sysv_free_block: trying to free block not in datazone [ 227.924931][ T5772] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 227.932602][ T9804] ntfs3: loop2: ino=9, attr_set_size [ 228.961500][ T9822] loop3: detected capacity change from 0 to 256 [ 229.016393][ T9822] exfat: Deprecated parameter 'utf8' [ 229.200700][ T9822] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 229.414385][ T9816] loop2: detected capacity change from 0 to 40427 [ 229.462983][ T9816] F2FS-fs (loop2): Found nat_bits in checkpoint [ 229.642638][ T9816] F2FS-fs (loop2): Start checkpoint disabled! [ 229.657519][ T9816] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 229.994132][ T9837] loop2: detected capacity change from 0 to 4096 [ 230.093570][ T9837] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 230.133860][ T9837] ntfs3: loop2: Failed to load $Extend (-22). [ 230.155083][ T9837] ntfs3: loop2: Failed to initialize $Extend. [ 230.729732][ T9852] loop2: detected capacity change from 0 to 2048 [ 230.751092][ T9852] NILFS (loop2): invalid segment: Magic number mismatch [ 230.773656][ T9852] NILFS (loop2): trying rollback from an earlier position [ 230.804379][ T9852] NILFS (loop2): recovery complete [ 230.820834][ T9856] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.894794][ T9852] NILFS (loop2): nilfs_ioctl_move_inode_block: invalid virtual block address (data): ino=3, cno=3, offset=234, blocknr=0, vblocknr=107374182 [ 230.930365][ T9852] NILFS (loop2): error -2 preparing GC: cannot read source blocks [ 231.272256][ T9868] loop3: detected capacity change from 0 to 1024 [ 231.298066][ T9868] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 231.362839][ T9868] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.1672: lblock 2 mapped to illegal pblock 2 (length 1) [ 231.393909][ T9874] loop2: detected capacity change from 0 to 1024 [ 231.453856][ T9868] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 231.485939][ T9868] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 48: comm syz.3.1672: lblock 0 mapped to illegal pblock 48 (length 1) [ 231.511323][ T49] hfsplus: b-tree write err: -5, ino 25 [ 231.523248][ T49] hfsplus: b-tree write err: -5, ino 4 [ 231.531002][ T9868] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 231.546942][ T49] hfsplus: b-tree write err: -5, ino 2 [ 231.553123][ T9868] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1672: Failed to acquire dquot type 0 [ 231.572869][ T49] hfsplus: b-tree write err: -5, ino 17 [ 231.575328][ T9868] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 231.641987][ T9868] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1672: mark_inode_dirty error [ 231.701403][ T9868] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 231.735396][ T9868] EXT4-fs (loop3): 1 orphan inode deleted [ 231.742429][ T9868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.772207][ T3465] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 231.807287][ T3465] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 231.825567][ T3465] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:10: Failed to release dquot type 0 [ 231.906421][ T9868] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #2: block 16: comm syz.3.1672: lblock 262144 mapped to illegal pblock 16 (length 8) [ 232.003434][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.034161][ T5772] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 232.066654][ T5772] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 232.087686][ T5772] EXT4-fs error (device loop3): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 232.899877][ T9896] warning: `syz.2.1685' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 233.706850][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1695'. [ 233.726278][ T8] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 233.734034][ T9919] netlink: 'syz.2.1695': attribute type 5 has an invalid length. [ 233.971810][ T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 233.971858][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.971884][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.971907][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 233.973628][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 233.973656][ T8] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 233.973679][ T8] usb 4-1: Manufacturer: syz [ 233.976773][ T8] usb 4-1: config 0 descriptor?? [ 234.409236][ T8] appleir 0003:05AC:8243.0019: item fetching failed at offset 0/1 [ 234.409962][ T8] appleir 0003:05AC:8243.0019: parse failed [ 234.410057][ T8] appleir: probe of 0003:05AC:8243.0019 failed with error -22 [ 234.644652][ T8] usb 4-1: USB disconnect, device number 18 [ 234.969290][ T9941] syz.2.1706 (9941) used greatest stack depth: 19688 bytes left [ 235.848981][ T9951] loop2: detected capacity change from 0 to 40427 [ 235.875201][ T9951] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 235.882496][ T9951] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 235.920146][ T9951] F2FS-fs (loop2): invalid crc value [ 236.249598][ T9951] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 236.274242][ T9951] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 236.371302][ T9965] f2fs_ckpt-7:2: attempt to access beyond end of device [ 236.371302][ T9965] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 236.441482][ T9965] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 237.474558][T10010] netlink: 'syz.2.1735': attribute type 5 has an invalid length. [ 238.651366][T10025] loop2: detected capacity change from 0 to 32768 [ 238.693515][T10025] [ 238.693515][T10025] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.693515][T10025] [ 238.759542][ T28] audit: type=1800 audit(1784676782.184:51): pid=10025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1742" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 239.083063][T10025] blkno = 0, nblocks = 40 [ 239.098292][T10025] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 239.098292][T10025] [ 239.189562][ T5773] [ 239.189562][ T5773] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.189562][ T5773] [ 239.215581][ T5773] [ 239.215581][ T5773] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.215581][ T5773] [ 239.256791][T10047] loop3: detected capacity change from 0 to 8192 [ 239.294420][T10047] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 239.402776][T10047] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 239.445491][T10047] REISERFS (device loop3): using ordered data mode [ 239.452100][T10047] reiserfs: using flush barriers [ 239.460034][T10047] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 239.480506][T10047] REISERFS (device loop3): checking transaction log (loop3) [ 239.494413][T10047] REISERFS (device loop3): Using r5 hash to sort names [ 239.643883][T10054] loop2: detected capacity change from 0 to 128 [ 239.770623][T10054] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 239.785368][T10054] FAT-fs (loop2): Filesystem has been set read-only [ 240.099253][T10066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1760'. [ 241.563495][T10086] loop2: detected capacity change from 0 to 40427 [ 241.580206][T10086] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 241.596548][T10086] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 241.612864][T10086] F2FS-fs (loop2): Image doesn't support compression [ 241.622562][T10086] F2FS-fs (loop2): Image doesn't support compression [ 241.634946][T10086] F2FS-fs (loop2): invalid crc value [ 241.641149][T10105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1780'. [ 241.675166][T10105] block nbd0: Unsupported socket: should be TCP or UNIX. [ 241.775153][T10086] F2FS-fs (loop2): Start checkpoint disabled! [ 241.865097][T10086] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 241.885195][T10086] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 242.086047][ T49] kworker/u4:3: attempt to access beyond end of device [ 242.086047][ T49] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 242.122058][ T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 242.245276][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 242.462334][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 242.502096][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.532153][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.556308][ T5775] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 242.570344][ T5775] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 242.585358][ T5775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 242.595374][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 242.604619][ T5775] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 242.614382][ T5775] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 242.634826][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.634887][ T5775] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 242.676795][ T9] usb 4-1: config 0 descriptor?? [ 242.744353][ T28] audit: type=1326 audit(1784676786.164:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10120 comm="syz.2.1785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905399de99 code=0x7ffc0000 [ 242.879078][ T28] audit: type=1326 audit(1784676786.164:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10120 comm="syz.2.1785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905399de99 code=0x7ffc0000 [ 242.915316][ T28] audit: type=1326 audit(1784676786.164:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10120 comm="syz.2.1785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f905399de99 code=0x7ffc0000 [ 242.945328][ T28] audit: type=1326 audit(1784676786.164:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10120 comm="syz.2.1785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905399de99 code=0x7ffc0000 [ 242.975493][ T28] audit: type=1326 audit(1784676786.164:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10120 comm="syz.2.1785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905399de99 code=0x7ffc0000 [ 242.975749][ T3481] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.004980][ T28] audit: type=1326 audit(1784676786.164:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10120 comm="syz.2.1785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f905399de99 code=0x7ffc0000 [ 243.042224][ T28] audit: type=1326 audit(1784676786.164:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10120 comm="syz.2.1785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905399de99 code=0x7ffc0000 [ 243.058442][ T3481] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.121190][ T9] lenovo 0003:17EF:60A3.001A: unknown main item tag 0x2 [ 243.130330][T10125] tipc: Enabling of bearer rejected, failed to enable media [ 243.143142][ T9] lenovo 0003:17EF:60A3.001A: unknown main item tag 0x0 [ 243.160686][ T9] lenovo 0003:17EF:60A3.001A: unknown main item tag 0x0 [ 243.173467][ T9] lenovo 0003:17EF:60A3.001A: unknown main item tag 0x0 [ 243.183378][ T9] lenovo 0003:17EF:60A3.001A: unknown main item tag 0x0 [ 243.202805][ T9] lenovo 0003:17EF:60A3.001A: unknown main item tag 0x0 [ 243.227852][ T9] lenovo 0003:17EF:60A3.001A: hidraw0: USB HID v0.24 Device [HID 17ef:60a3] on usb-dummy_hcd.3-1/input0 [ 243.263847][ T3481] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.270397][T10132] tmpfs: Cannot disable swap on remount [ 243.294853][ T3481] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.364313][ T5830] usb 4-1: USB disconnect, device number 19 [ 243.464481][ T3481] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.510594][ T3481] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.627846][ T3481] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.653552][ T3481] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.811648][T10116] chnl_net:caif_netlink_parms(): no params data found [ 243.854646][T10137] loop2: detected capacity change from 0 to 32768 [ 243.893303][T10137] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1794 (10137) [ 244.008620][T10137] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 244.027936][T10116] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.051413][T10116] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.075553][T10137] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 244.086226][T10116] bridge_slave_0: entered allmulticast mode [ 244.105212][T10116] bridge_slave_0: entered promiscuous mode [ 244.112549][T10137] BTRFS warning (device loop2): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 244.143011][T10116] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.147769][T10152] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.1799'. [ 244.162225][T10137] BTRFS info (device loop2): enabling auto defrag [ 244.176190][T10116] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.177245][T10137] BTRFS info (device loop2): use no compression [ 244.183820][T10116] bridge_slave_1: entered allmulticast mode [ 244.196476][T10116] bridge_slave_1: entered promiscuous mode [ 244.215139][T10137] BTRFS info (device loop2): max_inline at 0 [ 244.256095][T10137] BTRFS info (device loop2): using free space tree [ 244.428511][T10116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.487685][T10137] BTRFS info (device loop2): enabling ssd optimizations [ 244.494705][T10137] BTRFS info (device loop2): auto enabling async discard [ 244.509926][T10167] program syz.3.1800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.547889][T10116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.724141][ T5775] Bluetooth: hci4: command tx timeout [ 244.794822][ T5773] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 245.006462][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1801'. [ 245.060259][T10116] team0: Port device team_slave_0 added [ 245.100797][ T5761] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop2 scanned by udevd (5761) [ 245.118194][T10116] team0: Port device team_slave_1 added [ 245.419395][T10116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.437911][T10116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.531587][T10116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.674071][T10116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.690118][T10116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.780574][T10116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.951760][T10213] kernel profiling enabled (shift: 9) [ 246.076452][T10215] netlink: 'syz.1.1813': attribute type 2 has an invalid length. [ 246.141839][T10116] hsr_slave_0: entered promiscuous mode [ 246.169238][T10116] hsr_slave_1: entered promiscuous mode [ 246.200425][T10116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.210583][T10116] Cannot create hsr debugfs directory [ 246.799913][ T5775] Bluetooth: hci4: command tx timeout [ 247.108566][ T9] IPVS: starting estimator thread 0... [ 247.216226][T10257] IPVS: using max 18 ests per chain, 43200 per kthread [ 247.401701][ T3481] hsr_slave_0: left promiscuous mode [ 247.414832][ T3481] hsr_slave_1: left promiscuous mode [ 247.421755][ T3481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.434834][ T3481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.444107][ T3481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.461116][ T3481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.470948][ T3481] bridge_slave_1: left allmulticast mode [ 247.481795][ T3481] bridge_slave_1: left promiscuous mode [ 247.492089][ T3481] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.509764][ T3481] bridge_slave_0: left allmulticast mode [ 247.520000][ T3481] bridge_slave_0: left promiscuous mode [ 247.528301][ T3481] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.545595][ T1207] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 247.583065][ T3481] veth1_macvtap: left promiscuous mode [ 247.590445][ T3481] veth0_macvtap: left promiscuous mode [ 247.596896][ T3481] veth1_vlan: left promiscuous mode [ 247.602655][ T3481] veth0_vlan: left promiscuous mode [ 247.638763][T10251] loop3: detected capacity change from 0 to 40427 [ 247.651136][T10251] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 247.659441][T10251] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 247.673811][T10251] F2FS-fs (loop3): invalid crc value [ 247.692441][T10251] F2FS-fs (loop3): Found nat_bits in checkpoint [ 247.745430][ T1207] usb 2-1: Using ep0 maxpacket: 16 [ 247.757558][ T1207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.777905][ T1207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.791758][ T1207] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 247.807850][ T1207] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 247.820987][T10251] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 247.821296][ T1207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.846893][ T1207] usb 2-1: config 0 descriptor?? [ 247.848741][T10251] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 248.317392][ T1207] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001B/input/input32 [ 248.448268][ T1207] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 248.500774][ T1207] usb 2-1: USB disconnect, device number 18 [ 248.591038][T10268] fido_id[10268]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 248.875728][ T5775] Bluetooth: hci4: command tx timeout [ 248.921889][ T3481] team0 (unregistering): Port device team_slave_1 removed [ 249.006746][ T3481] team0 (unregistering): Port device team_slave_0 removed [ 249.091554][ T3481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.148994][ T3481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.533652][ T3481] bond0 (unregistering): Released all slaves [ 249.640989][T10116] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 249.670120][T10116] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 249.688922][T10116] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 249.735982][T10116] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 249.907077][T10288] vivid-000: disconnect [ 249.938359][T10285] vivid-000: reconnect [ 249.952538][T10284] loop3: detected capacity change from 0 to 4096 [ 250.112557][T10116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.228640][T10116] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.273575][ T28] audit: type=1800 audit(1784676793.694:59): pid=10284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1836" name="file1" dev="loop3" ino=0 res=0 errno=0 [ 250.382916][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.391251][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.477784][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.485058][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.542106][T10301] tipc: Started in network mode [ 250.547945][T10301] tipc: Node identity 4bd, cluster identity 4711 [ 250.555436][T10301] tipc: Node number set to 1213 [ 250.673890][T10116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.955282][ T5781] Bluetooth: hci4: command tx timeout [ 251.377645][T10116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.929040][T10317] loop3: detected capacity change from 0 to 40427 [ 251.955468][T10317] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 251.973986][T10317] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 252.031227][T10317] F2FS-fs (loop3): Found nat_bits in checkpoint [ 252.054237][T10116] veth0_vlan: entered promiscuous mode [ 252.102303][T10116] veth1_vlan: entered promiscuous mode [ 252.217857][T10116] veth0_macvtap: entered promiscuous mode [ 252.242456][T10116] veth1_macvtap: entered promiscuous mode [ 252.251353][T10317] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 252.275157][T10317] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 252.347399][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.400549][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.415497][T10372] CUSE: unknown device info "n¸Þ|’zQC*¯" [ 252.424386][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.440512][T10372] CUSE: unknown device info ">2¢“‰a"ëî V­Ä|ÿ#Úyï€S—ioåLåÎà”¢8†9ÔIÿèܥѮžÃ‡Å[¥<^ÎQÎÓ>”nHw Ý×'0KVÆ,†¹${\d+" [ 252.457950][T10374] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1862'. [ 252.459125][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.476936][T10372] CUSE: unknown device info "Ýÿÿÿ" [ 252.482563][T10372] CUSE: unknown device info "ÙLÐP§ô¿’t|%Í€IŸ¸èžOØÙäKu GìÂÏǪ|ÜQüUËœDv…F‰Ý,*pá(o9Ð{uáöº[§èµ¨‘²égIÁPÌÍYV" [ 252.489321][T10116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.536778][ T5772] syz-executor: attempt to access beyond end of device [ 252.536778][ T5772] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 252.546118][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.553543][T10372] CUSE: DEVNAME unspecified [ 252.576845][ T5772] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 252.601228][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.646911][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.705059][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.736578][T10116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.774632][T10116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.795448][ T5781] Bluetooth: hci2: command 0x0401 tx timeout [ 252.838344][T10116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.847234][T10116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.856428][T10116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.067832][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.106413][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.176925][T10386] loop2: detected capacity change from 0 to 164 [ 253.214370][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.243365][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.704122][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1863'. [ 253.731344][T10397] netlink: 'syz.3.1863': attribute type 14 has an invalid length. [ 253.769674][T10397] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1863'. [ 253.985280][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1873'. [ 254.420453][T10419] loop4: detected capacity change from 0 to 8192 [ 254.468950][T10419] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 254.496178][T10419] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 254.507376][T10419] REISERFS (device loop4): using ordered data mode [ 254.518635][T10419] reiserfs: using flush barriers [ 254.537853][T10419] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 254.629837][T10419] REISERFS (device loop4): checking transaction log (loop4) [ 254.689194][T10419] REISERFS (device loop4): Using r5 hash to sort names [ 254.704353][T10419] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 254.963604][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1884'. [ 255.484028][T10435] loop3: detected capacity change from 0 to 32768 [ 255.498962][T10435] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1881 (10435) [ 255.598049][T10435] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 255.598135][T10435] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 255.598195][T10435] BTRFS info (device loop3): using free space tree [ 255.711808][T10435] BTRFS info (device loop3): enabling ssd optimizations [ 255.711834][T10435] BTRFS info (device loop3): auto enabling async discard [ 255.840041][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.840175][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.163759][ T5772] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 256.601727][T10507] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1900'. [ 256.635324][ T5781] Bluetooth: hci4: command tx timeout [ 256.823209][T10515] loop2: detected capacity change from 0 to 256 [ 256.886031][T10515] exfat: Deprecated parameter 'namecase' [ 256.948854][T10515] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 257.710958][ T5781] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 257.711041][ T5781] Bluetooth: hci2: Dropping invalid advertising data [ 257.727429][ T5781] Bluetooth: hci2: Malformed LE Event: 0x02 [ 257.907571][T10561] netlink: 'syz.4.1917': attribute type 2 has an invalid length. [ 258.236946][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 258.245203][T10490] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 258.270070][T10581] IPv6: NLM_F_CREATE should be specified when creating new route [ 258.278171][T10581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1922'. [ 258.458600][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1925'. [ 258.467765][T10589] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1925'. [ 259.015967][T10490] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 259.033529][T10490] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 259.040563][T10490] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 259.051802][T10490] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 259.057916][T10490] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 259.069251][T10490] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 259.091793][ T5761] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (5761) [ 259.765108][ T5830] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 259.978626][ T5830] usb 4-1: unable to get BOS descriptor or descriptor too short [ 259.997624][ T5830] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.010306][ T5830] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 260.029777][ T5830] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 260.056922][ T5830] usb 4-1: string descriptor 0 read error: -22 [ 260.073514][ T5830] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 260.094778][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.321516][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 260.699040][T10657] loop4: detected capacity change from 0 to 512 [ 260.733999][ T5830] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 260.744770][T10657] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.1950: iget: bad i_size value: 38620345925642 [ 260.758401][T10657] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1950: couldn't read orphan inode 15 (err -117) [ 260.781091][ T5830] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 260.796626][T10657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.907166][T10116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.951010][ T5830] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 261.006647][ T5830] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 261.029739][ T5830] usb 4-1: USB disconnect, device number 20 [ 261.035805][ T5781] Bluetooth: hci2: command 0x0401 tx timeout [ 261.125742][ T5781] Bluetooth: hci4: command 0x0c1a tx timeout [ 261.494939][T10693] sctp: [Deprecated]: syz.2.1963 (pid 10693) Use of int in maxseg socket option. [ 261.494939][T10693] Use struct sctp_assoc_value instead [ 261.922486][T10710] program syz.3.1971 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.106392][T10720] loop3: detected capacity change from 0 to 2048 [ 262.186606][T10720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.206861][T10720] ext4 filesystem being mounted at /476/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.316651][T10720] EXT4-fs error (device loop3): ext4_ext_check_inode:530: inode #12: comm syz.3.1976: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2049, max 4(4), depth 0(0) [ 262.449568][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.583997][T10744] loop3: detected capacity change from 0 to 1024 [ 263.065198][ T3062] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 263.125819][ T5775] Bluetooth: hci2: command 0x0401 tx timeout [ 263.196252][ T5775] Bluetooth: hci4: command 0x0c1a tx timeout [ 263.297839][ T3062] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 263.325190][ T3062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.357118][ T3062] usb 2-1: config 0 descriptor?? [ 263.430960][T10779] vivid-006: disconnect [ 263.451143][T10778] vivid-006: reconnect [ 263.597327][ T3062] [drm] vendor descriptor length:6 data:06 5f 01 01 00 00 00 00 00 00 00 [ 263.623674][ T3062] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 263.732511][ T28] audit: type=1326 audit(1784676807.154:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10787 comm="syz.2.2004" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f905399de99 code=0x0 [ 263.823254][ T3062] [drm:udl_init] *ERROR* Selecting channel failed [ 263.849701][ T3062] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 263.869913][ T3062] [drm] Initialized udl on minor 2 [ 263.885632][ T3062] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 263.899564][ T3062] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 263.914340][ T5830] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 263.937921][ T3062] usb 2-1: USB disconnect, device number 19 [ 263.953110][ T5830] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 263.960214][T10777] loop4: detected capacity change from 0 to 32768 [ 264.033764][T10777] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 264.201275][T10804] loop3: detected capacity change from 0 to 256 [ 264.240526][T10777] XFS (loop4): Ending clean mount [ 264.437055][T10116] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 264.653836][T10815] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2012'. [ 264.926757][T10825] tipc: Invalid UDP bearer configuration [ 264.926807][T10825] tipc: Enabling of bearer rejected, failed to enable media [ 264.976991][T10820] loop2: detected capacity change from 0 to 4096 [ 265.277981][ T5775] Bluetooth: hci4: command 0x0c1a tx timeout [ 265.340608][T10834] loop4: detected capacity change from 0 to 4096 [ 265.390131][T10834] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 265.676897][T10852] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 265.676897][T10852] The task syz.1.2023 (10852) triggered the difference, watch for misbehavior. [ 265.850517][T10853] loop4: detected capacity change from 0 to 4096 [ 266.714086][ T23] IPVS: starting estimator thread 0... [ 266.826478][T10886] IPVS: using max 20 ests per chain, 48000 per kthread [ 267.355287][ T5775] Bluetooth: hci4: command 0x0c1a tx timeout [ 267.413697][T10878] loop3: detected capacity change from 0 to 40427 [ 267.449379][T10878] F2FS-fs (loop3): invalid crc value [ 267.494851][T10878] F2FS-fs (loop3): Found nat_bits in checkpoint [ 267.616502][T10878] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 267.785374][T10914] loop4: detected capacity change from 0 to 1024 [ 267.825880][T10914] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 267.846440][T10914] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 267.857298][T10914] EXT4-fs error (device loop4): ext4_get_journal_inode:5820: inode #32: comm syz.4.2049: iget: special inode unallocated [ 267.884252][T10914] EXT4-fs (loop4): no journal found [ 267.893193][T10914] EXT4-fs (loop4): can't get journal size [ 267.901633][T10914] EXT4-fs (loop4): filesystem is read-only [ 267.916654][T10914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 268.000603][ T1118] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.245518][T10116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.835483][T10952] loop3: detected capacity change from 0 to 4096 [ 268.876885][T10954] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 268.877573][T10952] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 268.878098][T10952] NILFS (loop3): mounting fs with errors [ 268.941464][T10952] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=32, inode=9, rec_len=24, name_len=6 [ 268.941665][T10952] NILFS error (device loop3): nilfs_readdir: bad page in #2 [ 269.565305][T10975] loop2: detected capacity change from 0 to 2048 [ 269.636122][T10975] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 269.679349][T10978] sp0: Synchronizing with TNC [ 269.692761][T10975] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.645324][ T1207] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 270.723437][T11018] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2083'. [ 270.880948][ T1207] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 270.907223][ T1207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.942537][T10997] loop2: detected capacity change from 0 to 40427 [ 270.946112][ T1207] usb 2-1: config 0 descriptor?? [ 270.985058][T10997] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 271.038644][T10997] F2FS-fs (loop2): invalid crc value [ 271.072512][T10997] F2FS-fs (loop2): Found nat_bits in checkpoint [ 271.153468][T11032] loop3: detected capacity change from 0 to 512 [ 271.240153][T11035] loop4: detected capacity change from 0 to 2048 [ 271.270685][T10997] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 271.332541][T11035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 271.384694][T10997] F2FS-fs (loop2): Try to recover all the superblocks, ret: 0 [ 271.405786][T11032] EXT4-fs (loop3): 1 orphan inode deleted [ 271.413109][T11032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.431741][ T1118] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 271.452625][ T1207] [drm:udl_init] *ERROR* Selecting channel failed [ 271.470042][T11035] EXT4-fs error (device loop4): ext4_lookup:1858: inode #16: comm syz.4.2088: iget: bad i_size value: 8796093031208 [ 271.491192][ T1118] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:8: Failed to release dquot type 1 [ 271.503415][T11032] ext4 filesystem being mounted at /513/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.529927][ T1207] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 271.554462][T11035] EXT4-fs (loop4): Remounting filesystem read-only [ 271.567240][ T1207] [drm] Initialized udl on minor 2 [ 271.588282][ T1207] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 271.615711][ T1207] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 271.628088][ T5812] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 271.665998][ T5812] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 271.674035][ T5812] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 271.685406][ T1207] usb 2-1: USB disconnect, device number 20 [ 271.704868][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.716102][T10116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 272.142949][T11056] loop4: detected capacity change from 0 to 4096 [ 272.777745][T11083] netlink: 'syz.4.2099': attribute type 3 has an invalid length. [ 273.022115][T11058] loop3: detected capacity change from 0 to 32768 [ 273.237890][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2105'. [ 273.743207][T11115] loop4: detected capacity change from 0 to 4096 [ 273.765962][ T3513] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 273.775155][T11115] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 273.795599][ T5812] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 273.898274][T11115] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 273.925450][T11115] ntfs3: loop4: Failed to load $Extend (-22). [ 273.962021][T11115] ntfs3: loop4: Failed to initialize $Extend. [ 274.005100][ T5812] usb 2-1: Using ep0 maxpacket: 8 [ 274.023392][ T5812] usb 2-1: config 0 interface 0 has no altsetting 0 [ 274.045366][ T5812] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 274.058720][T11124] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2112'. [ 274.074827][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.104906][ T5812] usb 2-1: config 0 descriptor?? [ 274.181127][T11096] loop2: detected capacity change from 0 to 40427 [ 274.237938][T11096] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 274.270416][T11096] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 274.303857][T11096] F2FS-fs (loop2): invalid crc value [ 274.357290][T11096] F2FS-fs (loop2): Found nat_bits in checkpoint [ 274.534780][T11096] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 274.554264][T11096] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 274.586061][ T5812] cypress 0003:04B4:DE61.001C: unknown main item tag 0x7 [ 274.610018][ T5812] cypress 0003:04B4:DE61.001C: unknown main item tag 0x0 [ 274.644323][ T5812] cypress 0003:04B4:DE61.001C: unknown main item tag 0x1 [ 274.674451][ T5812] cypress 0003:04B4:DE61.001C: unknown main item tag 0x7 [ 274.709635][ T5812] cypress 0003:04B4:DE61.001C: hidraw0: USB HID v0.77 Device [HID 04b4:de61] on usb-dummy_hcd.1-1/input0 [ 274.761745][ T5773] syz-executor: attempt to access beyond end of device [ 274.761745][ T5773] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 274.793383][ T5773] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 274.891159][ T23] usb 2-1: USB disconnect, device number 21 [ 275.677166][ T3513] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.933330][T11189] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2129'. [ 275.950293][T11183] loop3: detected capacity change from 0 to 4096 [ 276.101471][T11183] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 276.179193][T11183] ntfs3: loop3: Failed to load $Extend (-22). [ 276.215363][T11183] ntfs3: loop3: Failed to initialize $Extend. [ 276.635551][T11133] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 276.645648][ T5775] Bluetooth: hci1: command 0x0406 tx timeout [ 277.092157][T11217] sp0: Synchronizing with TNC [ 277.319207][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2142'. [ 277.352315][T11223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2142'. [ 277.355791][T11211] loop3: detected capacity change from 0 to 40427 [ 277.370118][T11223] netlink: 'syz.1.2142': attribute type 6 has an invalid length. [ 277.381888][T11211] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 277.389854][T11223] netlink: 'syz.1.2142': attribute type 5 has an invalid length. [ 277.410592][T11133] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 277.425397][T11211] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 277.434291][T11133] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 277.455830][T11211] F2FS-fs (loop3): invalid crc value [ 277.496494][T11211] F2FS-fs (loop3): Found nat_bits in checkpoint [ 277.598843][T11211] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 277.612256][T11211] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 277.649693][T11233] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2145'. [ 277.675192][T11233] netlink: 'syz.1.2145': attribute type 1 has an invalid length. [ 278.141918][T11225] loop2: detected capacity change from 0 to 40427 [ 278.154204][T11225] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 278.161936][T11225] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 278.203232][T11245] loop3: detected capacity change from 0 to 256 [ 278.210844][T11225] F2FS-fs (loop2): Found nat_bits in checkpoint [ 278.210908][T11245] exfat: Deprecated parameter 'namecase' [ 278.282448][T11245] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x20641574, utbl_chksum : 0xe619d30d) [ 278.335461][T11225] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 278.359508][T11225] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 278.425800][ T5773] syz-executor: attempt to access beyond end of device [ 278.425800][ T5773] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 278.462435][ T5773] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 278.715593][ T5775] Bluetooth: hci2: command 0x0401 tx timeout [ 278.785872][ T172] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 278.919891][T11258] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.2156'. [ 278.985938][ T172] usb 5-1: Using ep0 maxpacket: 8 [ 278.997259][ T172] usb 5-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 279.020388][ T172] usb 5-1: config 0 interface 0 has no altsetting 0 [ 279.032622][ T172] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 279.048448][ T172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.070784][ T172] usb 5-1: config 0 descriptor?? [ 279.077663][T11262] sp0: Synchronizing with TNC [ 279.506133][ T172] hid-rmi 0003:06CB:81A7.001D: unknown main item tag 0x7 [ 279.514248][ T172] hid-rmi 0003:06CB:81A7.001D: unknown main item tag 0x0 [ 279.523389][ T5775] Bluetooth: hci4: command 0x0c1a tx timeout [ 279.526623][ T1077] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 279.529785][ T172] hid-rmi 0003:06CB:81A7.001D: unknown main item tag 0x1 [ 279.548890][ T172] hid-rmi 0003:06CB:81A7.001D: unknown main item tag 0xd [ 279.557860][ T172] hid-rmi 0003:06CB:81A7.001D: hidraw0: USB HID v0.77 Device [HID 06cb:81a7] on usb-dummy_hcd.4-1/input0 [ 279.734682][ T5830] usb 5-1: USB disconnect, device number 2 [ 280.795709][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.955264][ T5775] Bluetooth: hci1: command 0x0406 tx timeout [ 280.958053][T11253] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 281.771198][T11253] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 281.779130][T11253] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 281.973086][T11271] loop3: detected capacity change from 0 to 4096 [ 281.988251][T11271] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 282.001654][T11275] loop4: detected capacity change from 0 to 64 [ 282.072059][T11271] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 282.085441][ T3062] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 282.093083][ T5830] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 282.104878][T11271] ntfs3: loop3: Failed to load $Extend (-22). [ 282.126057][T11271] ntfs3: loop3: Failed to initialize $Extend. [ 282.377901][T11280] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2164'. [ 282.495265][ T3062] usb 2-1: device not accepting address 22, error -71 [ 282.502188][ T5830] usb 3-1: device not accepting address 21, error -71 [ 282.654473][T11289] sp0: Synchronizing with TNC [ 282.820266][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2173'. [ 282.902003][T11297] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2174'. [ 282.926603][T11297] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2174'. [ 282.948773][T11277] loop4: detected capacity change from 0 to 40427 [ 282.956060][T11297] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2174'. [ 282.980063][T11277] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 282.993360][T11277] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 283.018767][T11277] F2FS-fs (loop4): invalid crc value [ 283.035576][ T5775] Bluetooth: hci2: command 0x0401 tx timeout [ 283.358428][T11277] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 283.369207][T11277] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 283.482457][T11302] f2fs_ckpt-7:4: attempt to access beyond end of device [ 283.482457][T11302] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 283.524629][T11302] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 283.836171][ T5775] Bluetooth: hci4: command 0x0c1a tx timeout [ 283.915450][T11312] loop2: detected capacity change from 0 to 40427 [ 283.948652][T11312] F2FS-fs (loop2): invalid crc value [ 283.971548][T11312] F2FS-fs (loop2): Found nat_bits in checkpoint [ 284.122106][T11335] syz.1.2191 uses obsolete (PF_INET,SOCK_PACKET) [ 284.154976][T11312] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 284.601979][T11350] loop3: detected capacity change from 0 to 256 [ 284.841192][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2201'. [ 284.870355][T11360] ip6gretap0: entered promiscuous mode [ 284.916746][T11360] ip6gretap0: left promiscuous mode [ 285.277470][ T3513] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 285.557575][T11384] netlink: 54775 bytes leftover after parsing attributes in process `syz.4.2213'. [ 285.821527][T11368] loop2: detected capacity change from 0 to 40427 [ 285.848589][T11368] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 285.859997][T11368] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 285.897019][T11368] F2FS-fs (loop2): invalid crc value [ 285.917433][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 285.939903][T11368] F2FS-fs (loop2): Found nat_bits in checkpoint [ 286.006504][ T172] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 286.035491][ T3062] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 286.038569][T11368] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 286.051575][T11368] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 286.200051][ T172] usb 4-1: unable to get BOS descriptor or descriptor too short [ 286.208675][ T172] usb 4-1: not running at top speed; connect to a high speed hub [ 286.218234][ T172] usb 4-1: config 0 has an invalid interface number: 175 but max is 0 [ 286.227471][ T3062] usb 5-1: Using ep0 maxpacket: 32 [ 286.227900][ T172] usb 4-1: config 0 has no interface number 0 [ 286.241226][ T172] usb 4-1: config 0 interface 175 has no altsetting 0 [ 286.251073][ T3062] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 286.252166][ T172] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice=a3.02 [ 286.271132][ T172] usb 4-1: New USB device strings: Mfr=120, Product=243, SerialNumber=26 [ 286.275105][ T3062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.280203][ T172] usb 4-1: Product: syz [ 286.293045][ T172] usb 4-1: Manufacturer: syz [ 286.298628][ T172] usb 4-1: SerialNumber: syz [ 286.310819][ T172] usb 4-1: config 0 descriptor?? [ 286.349983][ T3062] usb 5-1: config 0 descriptor?? [ 286.372081][ T3062] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 286.546095][ T172] usb-storage 4-1:0.175: USB Mass Storage device detected [ 286.690294][ T172] usb 4-1: USB disconnect, device number 21 [ 287.021192][ T3062] gspca_vc032x: reg_w err -71 [ 287.027645][ T3062] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.032972][ T3062] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.050214][ T3062] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.063910][ T3062] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.090249][ T3062] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.107249][ T3062] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.112591][ T3062] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.118006][ T3062] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.127277][ T3062] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.133006][ T3062] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.146475][ T3062] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.163449][ T3062] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.169162][ T3062] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.187991][ T3062] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.205491][ T3062] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.221077][ T3062] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.249009][ T3062] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.254354][ T3062] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.268236][ T3062] gspca_vc032x: Unknown sensor... [ 287.283583][ T3062] vc032x: probe of 5-1:0.0 failed with error -22 [ 287.312836][ T3062] usb 5-1: USB disconnect, device number 3 [ 287.895142][ T172] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 288.085556][ T172] usb 3-1: Using ep0 maxpacket: 8 [ 288.113891][ T172] usb 3-1: unable to get BOS descriptor or descriptor too short [ 288.116444][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2237'. [ 288.124909][ T172] usb 3-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 288.158508][ T172] usb 3-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 288.175496][ T172] usb 3-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 288.184826][ T172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.199124][ T172] usb 3-1: Product: syz [ 288.203396][ T172] usb 3-1: Manufacturer: syz [ 288.210154][ T172] usb 3-1: SerialNumber: syz [ 288.436354][ T172] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 288.604871][T11462] sch_fq: defrate 2 ignored. [ 288.733991][T11468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2251'. [ 289.092636][T11485] ip6tnl1: entered allmulticast mode [ 289.132567][ T172] usb 3-1: reset high-speed USB device number 23 using dummy_hcd [ 289.367450][ T172] usb 3-1: unable to get BOS descriptor or descriptor too short [ 289.397256][ T172] usb 3-1: device firmware changed [ 289.416496][ T172] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 289.434241][ T172] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 289.443717][ T5812] usb 3-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 289.453346][ T5812] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 289.483936][ T172] usb 3-1: USB disconnect, device number 23 [ 289.870831][T11513] loop3: detected capacity change from 0 to 512 [ 289.894369][T11513] FAT-fs (loop3): bogus logical sector size 0 [ 289.925985][T11513] FAT-fs (loop3): Can't find a valid FAT filesystem [ 290.011677][T11513] ip6tnl1: entered allmulticast mode [ 290.033716][ T1077] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 290.062843][ T1207] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 290.071827][ T1077] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 290.092844][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2275'. [ 290.105349][T11517] netlink: 'syz.4.2275': attribute type 5 has an invalid length. [ 290.187039][ T1207] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 290.343861][T11525] loop4: detected capacity change from 0 to 64 [ 290.397802][ T1077] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 290.435211][T11529] loop2: detected capacity change from 0 to 512 [ 290.495372][T11529] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 290.503462][T11529] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 290.587379][T11529] EXT4-fs (loop2): 1 truncate cleaned up [ 290.595306][ T5779] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 290.638034][T11529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.710597][T11529] EXT4-fs: group quota file already specified [ 290.747794][T11535] tipc: Enabling of bearer rejected, failed to enable media [ 290.818222][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.415613][ T1207] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 291.466606][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2293'. [ 291.612538][ T1207] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 291.640362][ T1207] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 291.656758][ T1207] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 291.677716][ T1118] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 291.697853][ T1207] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 291.739659][ T1207] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 291.772147][ T1207] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 291.792150][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 291.801482][ T1207] usb 5-1: Product: syz [ 291.806310][ T1207] usb 5-1: Manufacturer: syz [ 291.820805][ T1207] cdc_wdm 5-1:1.0: skipping garbage [ 291.826198][ T1207] cdc_wdm 5-1:1.0: skipping garbage [ 291.847598][ T1207] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 291.853563][ T1207] cdc_wdm 5-1:1.0: Unknown control protocol [ 292.054360][ T1207] usb 5-1: USB disconnect, device number 4 [ 292.301701][T11589] loop2: detected capacity change from 0 to 256 [ 293.188217][T11623] loop4: detected capacity change from 0 to 64 [ 293.352376][T11627] loop2: detected capacity change from 0 to 128 [ 293.373214][T11627] hpfs: bad mount options. [ 293.466504][T11630] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2326'. [ 293.491586][T11631] loop4: detected capacity change from 0 to 512 [ 293.520841][T11631] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 293.544026][T11631] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 293.581040][T11631] EXT4-fs (loop4): orphan cleanup on readonly fs [ 293.606279][T11631] EXT4-fs (loop4): 1 orphan inode deleted [ 293.647574][T11631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 293.744736][T10116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.799726][T11640] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2331'. [ 293.912791][ T8] IPVS: starting estimator thread 0... [ 293.920582][T11642] IPVS: ip_vs_edit_dest(): server weight less than zero [ 294.025129][T11644] IPVS: using max 17 ests per chain, 40800 per kthread [ 294.075233][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 294.388365][T11661] loop3: detected capacity change from 0 to 736 [ 294.458377][T11638] loop2: detected capacity change from 0 to 32768 [ 294.484097][T11638] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.2330 (11638) [ 294.563025][T11638] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 294.617199][T11638] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 294.646156][T11638] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 294.684662][T11638] BTRFS info (device loop2): use zstd compression, level 3 [ 294.722587][T11638] BTRFS info (device loop2): using free space tree [ 294.788776][T11671] loop3: detected capacity change from 0 to 2048 [ 294.851501][T11671] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 294.866187][T11638] BTRFS info (device loop2): enabling ssd optimizations [ 294.874042][T11638] BTRFS info (device loop2): auto enabling async discard [ 294.922631][T11671] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.057755][ T5773] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 295.722085][T11668] loop4: detected capacity change from 0 to 32768 [ 295.863785][T11668] overlayfs: upper fs needs to support d_type. [ 295.882018][T11706] loop3: detected capacity change from 0 to 64 [ 295.889139][T11668] overlayfs: upper fs does not support tmpfile. [ 295.928026][T11668] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 295.967167][T11668] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 295.967167][T11668] [ 296.024114][T11668] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null. [ 296.055259][T11668] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 296.055259][T11668] [ 296.089902][T11668] overlayfs: failed to verify origin (/, ino=2, err=-5) [ 296.105493][ T5779] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 296.114247][T11668] overlayfs: failed to verify upper root origin [ 296.156869][ T3465] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 296.219304][ T1077] read_mapping_page failed! [ 296.224372][ T1077] ERROR: (device loop4): txCommit: [ 296.224372][ T1077] [ 296.245572][ T1077] jfs_write_inode: jfs_commit_inode failed! [ 296.286931][ T5779] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 296.301288][ T5779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.335836][ T5779] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 296.351039][ T5779] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 296.377131][ T5779] usb 3-1: Manufacturer: syz [ 296.394562][T11720] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2362'. [ 296.400553][ T5779] usb 3-1: config 0 descriptor?? [ 296.405648][T11720] tipc: Enabling of bearer rejected, media not registered [ 296.515971][ T5779] rc_core: IR keymap rc-hauppauge not found [ 296.525994][ T5779] Registered IR keymap rc-empty [ 296.526856][T11724] loop3: detected capacity change from 0 to 128 [ 296.536372][ T5779] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 296.572426][ T28] audit: type=1800 audit(1784676839.994:61): pid=11724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2364" name="file2" dev="loop3" ino=1048660 res=0 errno=0 [ 296.578222][ T5779] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input33 [ 296.610384][T11724] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000f0b) [ 296.631832][T11724] FAT-fs (loop3): Filesystem has been set read-only [ 296.648973][T11724] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000f0b) [ 296.662760][T11724] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000f0b) [ 296.715839][ T3513] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 296.831277][T11732] loop3: detected capacity change from 0 to 256 [ 296.848929][T11732] exfat: Deprecated parameter 'utf8' [ 296.928342][T11732] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 297.101695][ T172] usb 3-1: USB disconnect, device number 24 [ 297.598185][T11760] loop3: detected capacity change from 0 to 16 [ 297.620826][T11760] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 297.687837][ T5761] udevd[5761]: incorrect cramfs checksum on /dev/loop3 [ 297.762346][ T5761] udevd[5761]: incorrect cramfs checksum on /dev/loop3 [ 297.926444][T11773] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bond, syncid = 66, id = 0 [ 297.930722][T11772] IPVS: stopping backup sync thread 11773 ... [ 298.271286][T11788] loop3: detected capacity change from 0 to 512 [ 298.275654][T11789] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2392'. [ 298.309031][T11788] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 298.331229][T11788] EXT4-fs (loop3): orphan cleanup on readonly fs [ 298.340615][T11788] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 298.350907][T11788] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 298.361060][T11788] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.2391: Failed to acquire dquot type 1 [ 298.374035][T11792] loop2: detected capacity change from 0 to 256 [ 298.392386][T11788] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.2391: bg 0: block 40: padding at end of block bitmap is not set [ 298.421172][T11788] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 298.437967][T11788] EXT4-fs (loop3): 1 truncate cleaned up [ 298.449503][T11788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 298.487105][T11788] EXT4-fs error (device loop3): ext4_get_link:104: inode #16: comm syz.3.2391: bad symlink. [ 298.563115][T11792] FAT-fs (loop2): Directory bread(block 64) failed [ 298.573268][T11792] FAT-fs (loop2): Directory bread(block 65) failed [ 298.589378][T11792] FAT-fs (loop2): Directory bread(block 66) failed [ 298.600385][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.602236][T11792] FAT-fs (loop2): Directory bread(block 67) failed [ 298.617210][T11792] FAT-fs (loop2): Directory bread(block 68) failed [ 298.623851][T11792] FAT-fs (loop2): Directory bread(block 69) failed [ 298.631503][T11792] FAT-fs (loop2): Directory bread(block 70) failed [ 298.639060][T11792] FAT-fs (loop2): Directory bread(block 71) failed [ 298.647887][T11792] FAT-fs (loop2): Directory bread(block 72) failed [ 298.654563][T11792] FAT-fs (loop2): Directory bread(block 73) failed [ 298.721761][T11798] loop4: detected capacity change from 0 to 256 [ 298.778608][T11798] FAT-fs (loop4): Directory bread(block 64) failed [ 298.800048][T11798] FAT-fs (loop4): Directory bread(block 65) failed [ 298.816275][T11798] FAT-fs (loop4): Directory bread(block 66) failed [ 298.836996][T11798] FAT-fs (loop4): Directory bread(block 67) failed [ 298.855087][ T5830] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 298.874164][T11798] FAT-fs (loop4): Directory bread(block 68) failed [ 298.884201][T11798] FAT-fs (loop4): Directory bread(block 69) failed [ 298.908433][T11798] FAT-fs (loop4): Directory bread(block 70) failed [ 298.915724][T11798] FAT-fs (loop4): Directory bread(block 71) failed [ 298.922445][T11798] FAT-fs (loop4): Directory bread(block 72) failed [ 298.938833][T11798] FAT-fs (loop4): Directory bread(block 73) failed [ 299.072379][ T5830] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 299.088376][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.126862][ T5830] usb 2-1: config 0 descriptor?? [ 299.149162][ T5830] cp210x 2-1:0.0: cp210x converter detected [ 299.254904][T11813] loop3: detected capacity change from 0 to 512 [ 299.304567][T11813] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 299.345225][T11813] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 299.355838][T11813] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2403: Corrupt directory, running e2fsck is recommended [ 299.386370][T11813] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 299.394981][T11813] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.2403: corrupted in-inode xattr: e_name out of bounds [ 299.411662][T11813] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.2403: couldn't read orphan inode 15 (err -117) [ 299.428524][T11813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.471496][T11813] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 299.505417][T11813] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 299.522006][T11813] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2403: Corrupt directory, running e2fsck is recommended [ 299.577301][T11813] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.2403: path /614/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 299.597932][ T5830] usb 2-1: cp210x converter now attached to ttyUSB0 [ 299.623640][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2406'. [ 299.646647][T11813] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 22: comm syz.3.2403: path /614/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 299.687272][T11813] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 8: comm syz.3.2403: path /614/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 299.779880][ T8] usb 2-1: USB disconnect, device number 24 [ 299.798525][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 299.803829][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.831997][ T8] cp210x 2-1:0.0: device disconnected [ 300.143226][T11842] loop4: detected capacity change from 0 to 512 [ 300.174299][T11842] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 300.202043][T11842] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 300.246322][ T5775] Bluetooth: hci4: unknown advertising packet type: 0x6c [ 300.246404][ T5775] Bluetooth: hci4: unknown advertising packet type: 0x87 [ 300.254050][ T5775] Bluetooth: hci4: unknown advertising packet type: 0x90 [ 300.263166][ T5775] Bluetooth: hci4: unknown advertising packet type: 0x76 [ 300.270736][ T5775] Bluetooth: hci4: unknown advertising packet type: 0xa1 [ 300.278362][ T5775] Bluetooth: hci4: unknown advertising packet type: 0xa8 [ 300.285547][ T5775] Bluetooth: hci4: unknown advertising packet type: 0xf9 [ 300.805236][ T5830] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 301.045292][ T5830] usb 4-1: Using ep0 maxpacket: 32 [ 301.062689][ T5830] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 301.086645][ T5830] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 301.145299][ T5830] usb 4-1: config 0 interface 0 has no altsetting 0 [ 301.151991][ T5830] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 301.170223][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.221930][ T5830] usb 4-1: config 0 descriptor?? [ 301.238645][T11884] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 301.581777][ T1077] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.734831][ T1077] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.846698][ T5830] usb 4-1: string descriptor 0 read error: -71 [ 301.852875][ T1077] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.905415][ T5830] uclogic 0003:5543:004D.001E: failed retrieving string descriptor #200: -71 [ 301.924721][ T5830] uclogic 0003:5543:004D.001E: failed retrieving pen parameters: -71 [ 301.944446][ T5830] uclogic 0003:5543:004D.001E: failed probing pen v2 parameters: -71 [ 301.964727][ T5830] uclogic 0003:5543:004D.001E: failed probing parameters: -71 [ 301.985083][ T5830] uclogic: probe of 0003:5543:004D.001E failed with error -71 [ 302.019671][ T1077] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.032578][ T5830] usb 4-1: USB disconnect, device number 22 [ 302.169518][T11897] loop2: detected capacity change from 0 to 256 [ 302.250802][T11897] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 302.555199][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 302.560902][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.583232][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.595165][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.627857][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.655471][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 302.663014][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.433741][T11941] loop3: detected capacity change from 0 to 512 [ 303.517249][T11941] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.2459: invalid block [ 303.544871][T11941] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2459: invalid indirect mapped block 10 (level 1) [ 303.565388][T11911] loop2: detected capacity change from 0 to 40427 [ 303.587334][T11911] F2FS-fs (loop2): invalid crc value [ 303.609628][T11911] F2FS-fs (loop2): Found nat_bits in checkpoint [ 303.645189][T11941] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2459: invalid indirect mapped block 8 (level 1) [ 303.732586][T11941] EXT4-fs (loop3): 1 truncate cleaned up [ 303.766489][T11941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.837717][T11911] F2FS-fs (loop2): Start checkpoint disabled! [ 303.891432][T11911] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 303.952177][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.237885][ T49] kworker/u4:3: attempt to access beyond end of device [ 304.237885][ T49] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 304.272439][ T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 304.305098][ T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 304.393825][T11903] chnl_net:caif_netlink_parms(): no params data found [ 304.715278][ T5775] Bluetooth: hci0: command tx timeout [ 304.879105][T11963] loop3: detected capacity change from 0 to 32768 [ 304.901211][T11969] netlink: 'syz.1.2467': attribute type 2 has an invalid length. [ 304.998001][ T1077] hsr_slave_0: left promiscuous mode [ 305.049357][ T1077] hsr_slave_1: left promiscuous mode [ 305.113762][ T1077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.149370][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.178409][ T1077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.201301][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.218151][ T1077] bridge_slave_1: left allmulticast mode [ 305.255362][ T1077] bridge_slave_1: left promiscuous mode [ 305.261233][ T1077] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.310107][ T1077] bridge_slave_0: left allmulticast mode [ 305.321777][ T1077] bridge_slave_0: left promiscuous mode [ 305.338862][ T1077] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.426964][T11984] loop3: detected capacity change from 0 to 4096 [ 305.479945][ T1077] veth1_macvtap: left promiscuous mode [ 305.495239][ T1077] veth0_macvtap: left promiscuous mode [ 305.519262][ T1077] veth1_vlan: left promiscuous mode [ 305.541029][ T1077] veth0_vlan: left promiscuous mode [ 306.266257][ T172] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 306.475783][ T172] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 306.483959][ T172] usb 4-1: config 0 has no interface number 0 [ 306.505595][ T172] usb 4-1: config 0 interface 41 has no altsetting 0 [ 306.523321][ T172] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 306.548810][ T172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.557523][ T172] usb 4-1: Product: syz [ 306.561726][ T172] usb 4-1: Manufacturer: syz [ 306.566941][ T172] usb 4-1: SerialNumber: syz [ 306.584241][ T172] usb 4-1: config 0 descriptor?? [ 306.790909][ T1077] team0 (unregistering): Port device team_slave_1 removed [ 306.798567][ T5775] Bluetooth: hci0: command tx timeout [ 306.861830][ T1077] team0 (unregistering): Port device team_slave_0 removed [ 306.919618][ T1077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.983195][ T1077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.233524][ T172] CoreChips: probe of 4-1:0.41 failed with error -71 [ 307.276593][ T172] usb 4-1: USB disconnect, device number 23 [ 307.538510][T12023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2487'. [ 307.552151][ T1077] bond0 (unregistering): Released all slaves [ 307.777316][T11903] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.784532][T11903] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.831169][T11903] bridge_slave_0: entered allmulticast mode [ 307.840029][T11903] bridge_slave_0: entered promiscuous mode [ 307.857655][T11903] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.875028][T11903] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.882269][T11903] bridge_slave_1: entered allmulticast mode [ 307.898692][T11903] bridge_slave_1: entered promiscuous mode [ 307.974828][ T5779] kernel write not supported for file /ppp (pid: 5779 comm: kworker/1:4) [ 308.006124][T11903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.040546][T11903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.109258][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.185868][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.193327][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.223514][T11903] team0: Port device team_slave_0 added [ 308.235089][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.261188][T11903] team0: Port device team_slave_1 added [ 308.267194][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.274614][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.325330][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.332776][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.365234][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.372689][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.380805][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.384396][T11903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.389084][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.408741][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.422926][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.425435][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.435065][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.485994][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.503719][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.528756][T11903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.529856][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.558357][T11903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.575105][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.585078][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.638739][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.646886][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.665196][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.673867][T11903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.693409][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.715259][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.721770][ T1077] IPVS: stop unused estimator thread 0... [ 308.745871][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.774127][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.802875][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.822450][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.842735][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.861895][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.875490][ T5775] Bluetooth: hci0: command tx timeout [ 308.882744][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.901940][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.910026][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.917796][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.925915][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.933354][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.939824][T11903] hsr_slave_0: entered promiscuous mode [ 308.951154][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.964221][T11903] hsr_slave_1: entered promiscuous mode [ 308.970114][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 308.970145][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.001546][T11903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.003240][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.019151][T11903] Cannot create hsr debugfs directory [ 309.023260][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.034807][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.042864][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.066241][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.073679][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.112210][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.135911][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.165107][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.182970][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.192952][T12057] loop3: detected capacity change from 0 to 1024 [ 309.205072][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.224265][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.241998][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.258857][T12057] hfsplus: bad catalog entry type [ 309.288421][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.317240][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.324690][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.346012][ T1077] hfsplus: b-tree write err: -5, ino 25 [ 309.351782][ T1077] hfsplus: b-tree write err: -5, ino 4 [ 309.356164][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.374882][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.395755][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.403224][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.405644][ T1077] hfsplus: b-tree write err: -5, ino 2 [ 309.423250][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.465103][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.472580][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.505097][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.513003][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.549053][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.565952][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.574441][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.636528][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.643978][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.653218][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.660968][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.673194][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.687451][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.709682][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.718116][T11903] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 309.736870][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.744323][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.758370][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.767282][T11903] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 309.768188][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.785094][T11903] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 309.788802][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.792611][ T28] audit: type=1326 audit(1784676853.214:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12064 comm="syz.1.2500" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdaa6b9de99 code=0x0 [ 309.800311][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.842036][T11903] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 309.846894][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.857506][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.887052][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.907640][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.929428][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.946924][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.962036][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.975211][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 309.993724][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 310.017100][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 310.033909][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 310.054915][T11903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.055098][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 310.085279][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 310.092777][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 310.112893][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 310.117029][T11903] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.140079][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 310.151511][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 310.158040][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.166109][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.167394][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 310.200468][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 310.210473][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.217706][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.218266][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 310.251022][ T5779] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 310.326793][ T5779] hid-generic 0000:0000:0004.001F: hidraw0: HID v0.03 Device [syz1] on syz0 [ 310.504646][T12074] fido_id[12074]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 310.955514][ T5775] Bluetooth: hci0: command tx timeout [ 310.989161][T11903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.025447][T12094] loop2: detected capacity change from 0 to 1024 [ 311.128251][T12094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 311.155778][T12094] ext4 filesystem being mounted at /601/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.326661][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 311.653929][T11903] veth0_vlan: entered promiscuous mode [ 311.678238][T11903] veth1_vlan: entered promiscuous mode [ 311.742175][T11903] veth0_macvtap: entered promiscuous mode [ 311.804205][T11903] veth1_macvtap: entered promiscuous mode [ 311.849615][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.892665][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.925558][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.940388][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.966854][T11903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.998765][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.025162][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.045365][T11903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.076823][T11903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.106667][T11903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.169299][T11903] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.179669][ T28] audit: type=1326 audit(1784676855.584:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12129 comm="syz.2.2513" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f905399de99 code=0x0 [ 312.215404][T11903] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.224178][T11903] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.265169][T11903] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.457357][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.478113][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.524591][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.546593][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.205189][ T5779] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 313.428591][ T5779] usb 2-1: unable to get BOS descriptor or descriptor too short [ 313.472091][ T5779] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.505090][ T5779] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 313.538237][T12173] loop2: detected capacity change from 0 to 256 [ 313.547600][ T5779] usb 2-1: config 1 has no interface number 0 [ 313.553759][ T5779] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 313.570831][T12173] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 313.617984][ T5779] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 313.638244][ T5779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.665208][ T5779] usb 2-1: Product: syz [ 313.684968][ T5779] usb 2-1: Manufacturer: syz [ 313.703797][ T5779] usb 2-1: SerialNumber: syz [ 314.190868][T12189] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2530'. [ 314.360598][ T5779] us122l: couldn't allocate write buffer [ 314.378911][ T5779] snd-usb-us122l: probe of 2-1:1.1 failed with error -22 [ 314.410032][ T5779] usb 2-1: USB disconnect, device number 25 [ 314.976255][ T27] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 315.093038][T12212] gretap0: entered promiscuous mode [ 315.207537][ T27] usb 3-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 315.239365][ T27] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 181, changing to 11 [ 315.252699][ T27] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 315.275701][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.282374][ T27] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 315.305812][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.339382][ T27] usb 3-1: config 0 descriptor?? [ 315.633578][T12230] netlink: 'syz.1.2541': attribute type 2 has an invalid length. [ 315.763247][ T27] kovaplus 0003:1E7D:2D50.0020: unknown main item tag 0x2 [ 315.789989][ T27] kovaplus 0003:1E7D:2D50.0020: unexpected long global item [ 315.822729][ T27] kovaplus 0003:1E7D:2D50.0020: parse failed [ 315.836439][ T27] kovaplus: probe of 0003:1E7D:2D50.0020 failed with error -22 [ 315.977699][ T27] usb 3-1: USB disconnect, device number 25 [ 316.085099][ T1207] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 316.265508][ T1207] usb 6-1: Using ep0 maxpacket: 16 [ 316.291381][ T1207] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 316.318589][ T1207] usb 6-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 316.336749][ T1207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.358354][ T1207] usb 6-1: config 0 descriptor?? [ 316.791246][ T1207] thrustmaster 0003:044F:B323.0021: unknown main item tag 0x2 [ 316.817492][ T1207] thrustmaster 0003:044F:B323.0021: unexpected long global item [ 316.846246][ T1207] thrustmaster 0003:044F:B323.0021: parse failed [ 316.852759][ T1207] thrustmaster: probe of 0003:044F:B323.0021 failed with error -22 [ 316.914080][T12274] loop3: detected capacity change from 0 to 4096 [ 316.952980][T12274] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 317.013606][ T1207] usb 6-1: USB disconnect, device number 2 [ 317.093342][T12274] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 317.123921][T12274] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 317.238830][ T5772] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 317.284126][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.292532][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.809956][ T8] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 317.915330][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 317.977595][T12313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2569'. [ 317.979835][T12311] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 317.979835][T12311] program syz.1.2568 not setting count and/or reply_len properly [ 318.030651][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 318.069105][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.089639][T12287] loop2: detected capacity change from 0 to 32768 [ 318.097244][ T8] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 318.120865][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.147691][ T8] usb 4-1: config 0 descriptor?? [ 318.171287][T12287] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 318.210517][T12287] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 318.473927][T12287] XFS (loop2): Ending clean mount [ 318.522579][T12287] XFS (loop2): Quotacheck needed: Please wait. [ 318.586919][ T8] konepure 0003:1E7D:2DBE.0022: unknown main item tag 0x4 [ 318.633841][ T8] konepure 0003:1E7D:2DBE.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.3-1/input0 [ 318.700343][T12287] XFS (loop2): Quotacheck: Done. [ 318.818448][ T3062] usb 4-1: USB disconnect, device number 24 [ 318.854067][ T5773] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 318.947379][T12348] tipc: Started in network mode [ 318.952330][T12348] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 318.960839][T12348] tipc: Enabled bearer , priority 10 [ 319.165531][T12356] loop5: detected capacity change from 0 to 16 [ 319.242712][T12356] erofs: (device loop5): mounted with root inode @ nid 36. [ 319.393570][T12356] erofs: (device loop5): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 319.452292][T12356] syz.5.2580: attempt to access beyond end of device [ 319.452292][T12356] loop5: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 319.572078][T12356] erofs: (device loop5): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 319.601963][T12356] syz.5.2580: attempt to access beyond end of device [ 319.601963][T12356] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 319.682839][T12356] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -4082 in[4096, 0] out[8192] [ 319.713071][ T28] audit: type=1800 audit(1784676863.134:64): pid=12356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2580" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 319.978866][ T3062] tipc: Node number set to 8432298 [ 320.046293][T12352] loop2: detected capacity change from 0 to 32768 [ 320.116595][ T28] audit: type=1800 audit(1784676863.534:65): pid=12352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2578" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 320.160393][T12352] ialloc: diAlloc returned -5! [ 320.318456][T12389] netlink: 208 bytes leftover after parsing attributes in process `syz.5.2590'. [ 320.340029][T12389] netlink: 208 bytes leftover after parsing attributes in process `syz.5.2590'. [ 320.928675][T12413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2597'. [ 321.335609][T12432] overlay: Unknown parameter '\yzkaller' [ 321.779449][T12425] loop2: detected capacity change from 0 to 32768 [ 321.834272][T12425] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 321.958429][T12425] XFS (loop2): Ending clean mount [ 321.983066][T12425] XFS (loop2): Quotacheck needed: Please wait. [ 322.089022][T12425] XFS (loop2): Quotacheck: Done. [ 322.175980][ T5773] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 323.084972][T12502] overlayfs: disabling nfs_export due to verity=on [ 323.088099][T12502] overlayfs: conflicting options: userxattr,redirect_dir=on [ 324.095178][ T5779] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 324.295150][T12548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2645'. [ 324.307821][ T5779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 324.335146][ T5779] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 324.354537][ T5779] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 324.405120][ T5779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.429433][ T5779] usb 2-1: config 0 descriptor?? [ 324.740364][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2652'. [ 324.857776][ T5779] hid-led 0003:1294:1320.0023: unknown main item tag 0x3 [ 324.889665][ T5779] hid-led 0003:1294:1320.0023: unknown main item tag 0xd [ 324.900745][ T5779] hid-led 0003:1294:1320.0023: unknown main item tag 0xe [ 324.929348][ T5779] hid-led 0003:1294:1320.0023: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.1-1/input0 [ 324.972715][ T5779] hid-led 0003:1294:1320.0023: Riso Kagaku Webmail Notifier initialized [ 325.069086][ T8] usb 2-1: USB disconnect, device number 26 [ 325.088010][ T172] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 325.116796][ T172] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 325.135497][ T3062] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 325.149648][ T172] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 325.345469][ T3062] usb 6-1: Using ep0 maxpacket: 32 [ 325.359430][ T3062] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.370778][ T3062] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.389007][ T3062] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.406193][ T3062] usb 6-1: config 0 interface 0 has no altsetting 0 [ 325.413198][ T3062] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 325.427227][ T3062] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.456890][ T3062] usb 6-1: config 0 descriptor?? [ 325.654742][T12576] loop3: detected capacity change from 0 to 32768 [ 325.721162][T12599] loop2: detected capacity change from 0 to 512 [ 325.730990][T12576] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 325.751271][T12599] EXT4-fs: Ignoring removed oldalloc option [ 325.810666][T12599] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 325.835790][T12599] EXT4-fs (loop2): 1 truncate cleaned up [ 325.843417][T12599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.854691][T12576] XFS (loop3): Ending clean mount [ 325.866916][T12576] XFS (loop3): Quotacheck needed: Please wait. [ 325.903293][ T3062] corsair-cpro 0003:1B1C:0C10.0024: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 325.910604][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.011818][ T3062] corsair-cpro: probe of 0003:1B1C:0C10.0024 failed with error -38 [ 326.018944][T12576] XFS (loop3): Quotacheck: Done. [ 326.108938][ T8] usb 6-1: USB disconnect, device number 3 [ 326.237071][ T5772] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 326.350675][T12614] loop2: detected capacity change from 0 to 128 [ 326.913405][T12617] loop2: detected capacity change from 0 to 32768 [ 326.948640][T12617] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2668 (12617) [ 327.001544][T12617] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 327.023528][T12617] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 327.047059][T12617] BTRFS info (device loop2): setting nodatasum [ 327.053331][T12617] BTRFS info (device loop2): force zlib compression, level 3 [ 327.085366][T12617] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 327.120790][T12617] BTRFS info (device loop2): use lzo compression, level 0 [ 327.136227][T12617] BTRFS info (device loop2): turning on flush-on-commit [ 327.143254][T12617] BTRFS info (device loop2): enabling auto defrag [ 327.162981][T12617] BTRFS info (device loop2): max_inline at 4096 [ 327.173351][T12617] BTRFS info (device loop2): turning on async discard [ 327.183016][T12617] BTRFS info (device loop2): using free space tree [ 327.354544][T12617] BTRFS info (device loop2): enabling ssd optimizations [ 327.753873][T12633] loop5: detected capacity change from 0 to 32768 [ 327.881727][ T5773] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 327.955339][ T3062] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 328.194621][ T3062] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 328.241292][ T3062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.275261][ T3062] usb 2-1: Product: syz [ 328.295072][ T3062] usb 2-1: Manufacturer: syz [ 328.299745][ T3062] usb 2-1: SerialNumber: syz [ 328.366282][ T3062] usb 2-1: config 0 descriptor?? [ 328.608385][ T3062] usb 2-1: USB disconnect, device number 27 [ 328.961380][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.183173][ T1207] kernel read not supported for file /dsp (pid: 1207 comm: kworker/0:3) [ 329.361750][T12693] gretap0: entered promiscuous mode [ 329.444383][T12674] loop3: detected capacity change from 0 to 40427 [ 329.479048][T12674] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 329.486097][T12674] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 329.527953][T12674] F2FS-fs (loop3): invalid crc value [ 329.571952][T12702] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2693'. [ 329.754321][T12674] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 329.785614][T12674] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 329.878025][T12712] tipc: Started in network mode [ 329.897608][T12712] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 329.922684][T12712] tipc: Enabling of bearer rejected, failed to enable media [ 330.530909][T12728] loop5: detected capacity change from 0 to 1024 [ 330.814425][T12739] loop5: detected capacity change from 0 to 256 [ 330.857896][T12739] exfat: Deprecated parameter 'utf8' [ 330.876779][T12739] exfat: Deprecated parameter 'utf8' [ 330.882212][T12739] exfat: Deprecated parameter 'utf8' [ 330.946308][T12741] loop3: detected capacity change from 0 to 512 [ 330.973078][T12739] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 331.060134][T12741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.166513][T12741] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 7 (only 1 groups) [ 331.287127][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.543974][T12760] loop2: detected capacity change from 0 to 128 [ 333.110183][T12810] netlink: 'syz.3.2738': attribute type 1 has an invalid length. [ 333.135340][T12810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2738'. [ 333.160273][T12812] loop5: detected capacity change from 0 to 64 [ 333.688765][T12806] loop2: detected capacity change from 0 to 32768 [ 333.799398][T12806] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 333.961485][T12826] loop5: detected capacity change from 0 to 2048 [ 334.020176][T12828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2747'. [ 334.033242][T12826] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 334.042673][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 334.076037][T12828] tipc: Invalid UDP bearer configuration [ 334.076116][T12828] tipc: Enabling of bearer rejected, failed to enable media [ 334.090958][T12829] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 334.115936][ T5765] udevd[5765]: incorrect nilfs2 checksum on /dev/loop5 [ 334.286949][T12831] loop2: detected capacity change from 0 to 2048 [ 334.406704][T12833] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 334.759803][T12844] loop3: detected capacity change from 0 to 256 [ 334.916712][T12844] FAT-fs (loop3): Directory bread(block 64) failed [ 334.923340][T12844] FAT-fs (loop3): Directory bread(block 65) failed [ 334.965699][T12844] FAT-fs (loop3): Directory bread(block 66) failed [ 334.972318][T12844] FAT-fs (loop3): Directory bread(block 67) failed [ 335.016178][T12847] loop2: detected capacity change from 0 to 4096 [ 335.019536][T12844] FAT-fs (loop3): Directory bread(block 68) failed [ 335.054575][T12844] FAT-fs (loop3): Directory bread(block 69) failed [ 335.061998][T12847] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 335.070733][T12844] FAT-fs (loop3): Directory bread(block 70) failed [ 335.101475][T12844] FAT-fs (loop3): Directory bread(block 71) failed [ 335.127020][T12844] FAT-fs (loop3): Directory bread(block 72) failed [ 335.138871][T12844] FAT-fs (loop3): Directory bread(block 73) failed [ 335.214489][T12847] ntfs: volume version 3.1. [ 335.338286][T12847] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp1250. You might want to try to use the mount option nls=utf8. [ 335.435136][T12847] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 335.705896][T12859] loop3: detected capacity change from 0 to 8192 [ 336.393793][T12874] loop3: detected capacity change from 0 to 4096 [ 336.446040][T12874] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 336.544933][T12874] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 336.606101][T12874] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 336.704223][T12874] ntfs3: loop3: ino=1e, "file1" failed to parse mft record [ 336.779310][T12874] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 336.812567][T12888] loop5: detected capacity change from 0 to 1024 [ 336.839686][T12888] EXT4-fs: Ignoring removed orlov option [ 336.971898][T12888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.003850][T12868] loop2: detected capacity change from 0 to 32768 [ 337.027991][T12868] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2757 (12868) [ 337.165199][T12868] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 337.204024][T12868] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 337.249734][T12868] BTRFS info (device loop2): turning on sync discard [ 337.294572][T12868] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 337.323658][T12868] BTRFS info (device loop2): use zstd compression, level 3 [ 337.333807][T12868] BTRFS info (device loop2): turning on async discard [ 337.364666][T11903] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.385899][T12868] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 337.407413][T12868] BTRFS info (device loop2): trying to use backup root at mount time [ 337.417009][T12868] BTRFS info (device loop2): enabling auto defrag [ 337.423696][T12868] BTRFS info (device loop2): using free space tree [ 337.456912][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2765'. [ 337.598499][ T49] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 337.649667][T12868] BTRFS error (device loop2): failed to load root extent [ 337.696425][T12868] BTRFS warning (device loop2): try to load backup roots slot 1 [ 337.714891][ T49] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 337.779254][T12868] BTRFS warning (device loop2): couldn't read tree root [ 337.816316][T12868] BTRFS warning (device loop2): try to load backup roots slot 2 [ 337.836703][ T3465] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 337.881239][T12868] BTRFS warning (device loop2): couldn't read tree root [ 337.935325][T12868] BTRFS warning (device loop2): try to load backup roots slot 3 [ 338.026025][T12868] BTRFS info (device loop2): enabling ssd optimizations [ 338.060861][T12868] BTRFS info (device loop2): rebuilding free space tree [ 338.266715][T12868] BTRFS info (device loop2): checking UUID tree [ 338.348032][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2770'. [ 338.426994][T12940] ip6gretap0: entered promiscuous mode [ 338.448318][T12940] ip6gretap0: left promiscuous mode [ 338.477117][ T5773] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 339.040707][T12955] netlink: 54775 bytes leftover after parsing attributes in process `syz.2.2775'. [ 339.532179][T12968] overlay: Unknown parameter '\yzkaller' [ 339.845357][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2782'. [ 340.717603][T13005] overlay: Unknown parameter '\yzkaller' [ 341.122648][T13020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2795'. [ 341.965411][ T1207] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 342.197926][ T1207] usb 6-1: unable to get BOS descriptor or descriptor too short [ 342.221776][ T1207] usb 6-1: not running at top speed; connect to a high speed hub [ 342.245713][ T1207] usb 6-1: config 0 has an invalid interface number: 175 but max is 0 [ 342.275496][ T1207] usb 6-1: config 0 has no interface number 0 [ 342.295187][ T1207] usb 6-1: config 0 interface 175 has no altsetting 0 [ 342.324224][ T1207] usb 6-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice=a3.02 [ 342.349035][ T1207] usb 6-1: New USB device strings: Mfr=120, Product=243, SerialNumber=26 [ 342.369701][ T1207] usb 6-1: Product: syz [ 342.374300][ T1207] usb 6-1: Manufacturer: syz [ 342.403314][ T1207] usb 6-1: SerialNumber: syz [ 342.426813][ T1207] usb 6-1: config 0 descriptor?? [ 342.677561][ T1207] usb-storage 6-1:0.175: USB Mass Storage device detected [ 342.791944][ T1207] usb 6-1: USB disconnect, device number 4 [ 343.657017][T13093] loop3: detected capacity change from 0 to 512 [ 343.815422][T13093] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 343.859937][T13093] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 343.942599][T13093] EXT4-fs (loop3): 1 truncate cleaned up [ 343.977319][T13093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.135861][T13093] EXT4-fs: group quota file already specified [ 344.696503][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.050565][T13127] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2828'. [ 345.065524][ T3062] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 345.257210][ T3062] usb 3-1: unable to get BOS descriptor or descriptor too short [ 345.288810][ T3062] usb 3-1: not running at top speed; connect to a high speed hub [ 345.311498][ T3062] usb 3-1: config 0 has an invalid interface number: 175 but max is 0 [ 345.330031][ T3062] usb 3-1: config 0 has no interface number 0 [ 345.350671][ T3062] usb 3-1: config 0 interface 175 has no altsetting 0 [ 345.383689][ T3062] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice=a3.02 [ 345.404356][ T3062] usb 3-1: New USB device strings: Mfr=120, Product=243, SerialNumber=26 [ 345.423798][ T3062] usb 3-1: Product: syz [ 345.428593][ T3062] usb 3-1: Manufacturer: syz [ 345.447350][ T3062] usb 3-1: SerialNumber: syz [ 345.476587][ T3062] usb 3-1: config 0 descriptor?? [ 345.707834][ T3062] usb-storage 3-1:0.175: USB Mass Storage device detected [ 345.841064][ T3062] usb 3-1: USB disconnect, device number 26 [ 345.954700][T13148] loop3: detected capacity change from 0 to 64 [ 347.290266][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 347.321643][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 347.342785][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 347.383570][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 347.419288][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 347.460193][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 347.774230][T13167] chnl_net:caif_netlink_parms(): no params data found [ 347.906859][T13167] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.919518][T13167] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.929115][T13167] bridge_slave_0: entered allmulticast mode [ 347.937606][T13167] bridge_slave_0: entered promiscuous mode [ 347.948452][T13167] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.958696][T13167] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.967921][T13167] bridge_slave_1: entered allmulticast mode [ 347.977841][T13167] bridge_slave_1: entered promiscuous mode [ 348.032674][T13167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.048707][T13167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.141813][T13167] team0: Port device team_slave_0 added [ 348.168198][T13167] team0: Port device team_slave_1 added [ 348.224309][T13167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.233772][T13167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.269544][T13167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.291050][T13167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.299707][T13167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.334315][T13167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.403418][ T1118] tipc: Disabling bearer [ 348.411479][ T1118] tipc: Left network mode [ 348.826432][T13167] hsr_slave_0: entered promiscuous mode [ 348.836026][T13167] hsr_slave_1: entered promiscuous mode [ 348.848350][T13167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.860663][T13167] Cannot create hsr debugfs directory [ 349.276906][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 349.450752][T13167] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 349.464834][T13167] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 349.520717][T13167] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 349.544534][T13167] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 349.615334][ T5775] Bluetooth: hci1: command tx timeout [ 349.792426][T13167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.940072][T13167] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.963744][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.971064][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.027008][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.035586][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.071312][ T1118] hsr_slave_0: left promiscuous mode [ 350.082776][ T1118] hsr_slave_1: left promiscuous mode [ 350.100172][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.111059][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.124778][ T1118] bridge_slave_1: left allmulticast mode [ 350.134390][ T1118] bridge_slave_1: left promiscuous mode [ 350.147951][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.164200][ T1118] bridge_slave_0: left allmulticast mode [ 350.173925][ T1118] bridge_slave_0: left promiscuous mode [ 350.180513][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.195636][ T1118] team_slave_1 (unregistering): left allmulticast mode [ 351.213897][ T1118] team0 (unregistering): Port device team_slave_1 removed [ 351.298649][ T1118] team_slave_0 (unregistering): left allmulticast mode [ 351.314153][ T1118] team0 (unregistering): Port device team_slave_0 removed [ 351.405934][ T1118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.502012][ T1118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.684660][ T5775] Bluetooth: hci1: command tx timeout [ 352.100920][ T1118] bond0 (unregistering): Released all slaves [ 352.284370][T13167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 352.296758][T13167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.643007][ T1118] IPVS: stop unused estimator thread 0... [ 352.750448][T13167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.115901][ T5812] ------------[ cut here ]------------ [ 353.122823][ T5812] sysfs group 'power' not found for kobject 'ueagle-atm!eagleI.fw' [ 353.145349][ T5812] WARNING: CPU: 0 PID: 5812 at fs/sysfs/group.c:284 sysfs_remove_group+0x17b/0x290 [ 353.155611][ T5812] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 353.160132][ T5812] CPU: 0 PID: 5812 Comm: kworker/0:5 Not tainted syzkaller #0 [ 353.168302][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 353.179876][ T5812] Workqueue: events request_firmware_work_func [ 353.186870][ T5812] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 353.193722][ T5812] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 f7 1f c9 ff 49 8b 17 48 c7 c7 40 bb da 8a 48 89 de e8 05 81 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ef a7 70 ff [ 353.200492][T13167] veth0_vlan: entered promiscuous mode [ 353.214524][ T5812] RSP: 0018:ffffc900046bf820 EFLAGS: 00010246 [ 353.226577][ T5812] RAX: c7f2ba98f4480200 RBX: ffffffff8b422ee0 RCX: ffff88805b85da00 [ 353.236031][ T5812] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 353.246415][ T5812] RBP: ffffc900046bf950 R08: ffffc900046bf427 R09: 1ffff920008d7e84 [ 353.257158][ T5812] R10: dffffc0000000000 R11: fffff520008d7e85 R12: 1ffffffff16845e0 [ 353.269247][ T5812] R13: dffffc0000000000 R14: ffff88807c8f7c98 R15: ffff8880258f1008 [ 353.278592][ T5812] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 353.288717][ T5812] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.295584][ T5812] CR2: 000055836d5c6138 CR3: 000000005b4c1000 CR4: 00000000003506f0 [ 353.304601][ T5812] Call Trace: [ 353.308218][ T5812] [ 353.311276][ T5812] ? sysfs_unmerge_group+0x10d/0x130 [ 353.316943][ T5812] device_del+0x251/0x910 [ 353.322164][ T5812] ? kill_device+0x160/0x160 [ 353.327738][ T5812] ? __fw_load_abort+0x8b/0x1a0 [ 353.333528][ T5812] firmware_fallback_sysfs+0x68c/0x950 [ 353.340316][ T5812] _request_firmware+0xf29/0x1520 [ 353.347286][ T5812] ? request_firmware+0x50/0x50 [ 353.358468][ T5812] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 353.364942][ T5812] ? __lock_acquire+0x7d80/0x7d80 [ 353.372652][ T5812] ? read_lock_is_recursive+0x20/0x20 [ 353.378700][ T5812] request_firmware_work_func+0x9e/0x1a0 [ 353.386380][ T5812] ? process_scheduled_works+0x975/0x1600 [ 353.395767][ T5812] process_scheduled_works+0xa60/0x1600 [ 353.402540][ T5812] ? worker_attach_to_pool+0x370/0x370 [ 353.408552][ T5812] ? assign_work+0x3cc/0x5d0 [ 353.415972][ T5812] worker_thread+0xa5e/0xfe0 [ 353.422919][ T5812] ? _raw_spin_unlock+0x40/0x40 [ 353.428169][ T5812] ? __kthread_parkme+0x71/0x1c0 [ 353.433782][ T5812] kthread+0x2fa/0x390 [ 353.439306][ T5812] ? pr_cont_work+0x550/0x550 [ 353.446014][ T5812] ? kthread_blkcg+0xd0/0xd0 [ 353.450907][ T5812] ret_from_fork+0x48/0x80 [ 353.456081][ T5812] ? kthread_blkcg+0xd0/0xd0 [ 353.460836][ T5812] ret_from_fork_asm+0x11/0x20 [ 353.464116][T13167] veth1_vlan: entered promiscuous mode [ 353.465869][ T5812] [ 353.474615][ T5812] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 353.482105][ T5812] CPU: 0 PID: 5812 Comm: kworker/0:5 Not tainted syzkaller #0 [ 353.490117][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 353.502664][ T5812] Workqueue: events request_firmware_work_func [ 353.509683][ T5812] Call Trace: [ 353.513619][ T5812] [ 353.516593][ T5812] dump_stack_lvl+0x18c/0x250 [ 353.522281][ T5812] ? show_regs_print_info+0x20/0x20 [ 353.527668][ T5812] ? load_image+0x420/0x420 [ 353.532312][ T5812] panic+0x2ca/0x720 [ 353.536246][ T5812] ? bpf_jit_dump+0xd0/0xd0 [ 353.546606][ T5812] ? ret_from_fork_asm+0x11/0x20 [ 353.552362][ T5812] __warn+0x2e0/0x470 [ 353.556363][ T5812] ? sysfs_remove_group+0x17b/0x290 [ 353.561668][ T5812] ? sysfs_remove_group+0x17b/0x290 [ 353.567841][ T5812] report_bug+0x2be/0x4f0 [ 353.572675][ T5812] ? sysfs_remove_group+0x17b/0x290 [ 353.579129][ T5812] ? sysfs_remove_group+0x17b/0x290 [ 353.588638][ T5812] ? sysfs_remove_group+0x17d/0x290 [ 353.594939][ T5812] handle_bug+0xcf/0x120 [ 353.599697][ T5812] exc_invalid_op+0x1a/0x50 [ 353.604243][ T5812] asm_exc_invalid_op+0x1a/0x20 [ 353.609202][ T5812] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 353.615216][ T5812] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 f7 1f c9 ff 49 8b 17 48 c7 c7 40 bb da 8a 48 89 de e8 05 81 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ef a7 70 ff [ 353.636656][ T5812] RSP: 0018:ffffc900046bf820 EFLAGS: 00010246 [ 353.642820][ T5812] RAX: c7f2ba98f4480200 RBX: ffffffff8b422ee0 RCX: ffff88805b85da00 [ 353.650923][ T5812] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 353.659339][ T5812] RBP: ffffc900046bf950 R08: ffffc900046bf427 R09: 1ffff920008d7e84 [ 353.667541][ T5812] R10: dffffc0000000000 R11: fffff520008d7e85 R12: 1ffffffff16845e0 [ 353.676290][ T5812] R13: dffffc0000000000 R14: ffff88807c8f7c98 R15: ffff8880258f1008 [ 353.684410][ T5812] ? sysfs_unmerge_group+0x10d/0x130 [ 353.690126][ T5812] device_del+0x251/0x910 [ 353.694522][ T5812] ? kill_device+0x160/0x160 [ 353.699261][ T5812] ? __fw_load_abort+0x8b/0x1a0 [ 353.704411][ T5812] firmware_fallback_sysfs+0x68c/0x950 [ 353.709884][ T5812] _request_firmware+0xf29/0x1520 [ 353.715057][ T5812] ? request_firmware+0x50/0x50 [ 353.720660][ T5812] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 353.726689][ T5812] ? __lock_acquire+0x7d80/0x7d80 [ 353.731768][ T5812] ? read_lock_is_recursive+0x20/0x20 [ 353.737169][ T5812] request_firmware_work_func+0x9e/0x1a0 [ 353.742820][ T5812] ? process_scheduled_works+0x975/0x1600 [ 353.748641][ T5812] process_scheduled_works+0xa60/0x1600 [ 353.754833][ T5812] ? worker_attach_to_pool+0x370/0x370 [ 353.760981][ T5812] ? assign_work+0x3cc/0x5d0 [ 353.765750][ T5812] worker_thread+0xa5e/0xfe0 [ 353.770543][ T5812] ? _raw_spin_unlock+0x40/0x40 [ 353.775430][ T5812] ? __kthread_parkme+0x71/0x1c0 [ 353.780609][ T5812] kthread+0x2fa/0x390 [ 353.784845][ T5812] ? pr_cont_work+0x550/0x550 [ 353.790376][ T5812] ? kthread_blkcg+0xd0/0xd0 [ 353.795083][ T5812] ret_from_fork+0x48/0x80 [ 353.799553][ T5812] ? kthread_blkcg+0xd0/0xd0 [ 353.804187][ T5812] ret_from_fork_asm+0x11/0x20 [ 353.809109][ T5812] [ 353.812660][ T5812] Kernel Offset: disabled [ 353.817184][ T5812] Rebooting in 86400 seconds..