last executing test programs: 3.515137365s ago: executing program 3 (id=2453): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) 3.327375043s ago: executing program 3 (id=2456): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2018886, &(0x7f0000000280)={[{@numtail}, {@shortname_lower}, {@shortname_win95}, {@shortname_win95}, {@fat=@showexec}, {@numtail}, {@fat=@debug}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@shortname_lower}, {@rodir}, {@uni_xlateno}]}, 0x5, 0x332, &(0x7f0000000940)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.655993474s ago: executing program 3 (id=2461): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) 2.095777837s ago: executing program 4 (id=2467): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r0, 0x400448c8, &(0x7f0000000000)) 2.071073589s ago: executing program 0 (id=2468): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 2.003971175s ago: executing program 4 (id=2469): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x34000}], 0x1}], 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}], 0x1, 0x0) 1.936002351s ago: executing program 0 (id=2470): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)=',\t', 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.883863166s ago: executing program 0 (id=2471): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x1210003, &(0x7f00000000c0)={[{@discard}, {@discard}, {@nobarrier}, {@discard}, {@norecovery}], [], 0x2c}, 0x3, 0xeb0, &(0x7f0000000f40)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1.676032585s ago: executing program 4 (id=2473): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000a00)={[{@nobarrier}, {@creator={'creator', 0x3d, "5c5d0784"}}, {}, {@nls={'nls', 0x3d, 'macceltic'}}, {@umask={'umask', 0x3d, 0x1f}}, {@gid}]}, 0x1, 0x6a4, &(0x7f0000000100)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.427303728s ago: executing program 0 (id=2475): unshare(0x20040400) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bind$inet(r0, 0x0, 0x0) 1.375940693s ago: executing program 4 (id=2476): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000001c0)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@fmask={'fmask', 0x3d, 0x1000}}, {}, {@errors_remount}, {@namecase}, {@keep_last_dots}, {@discard}, {}]}, 0x5, 0x1512, &(0x7f0000001980)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) unlink(&(0x7f0000000280)='./file1\x00') 1.283004902s ago: executing program 0 (id=2479): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4421, &(0x7f0000004500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x80106f05, 0x0) 1.075095941s ago: executing program 4 (id=2481): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 909.503146ms ago: executing program 4 (id=2482): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43000000000000109022400010000000009040000010300010009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x0, "d85901a0"}, @main=@item_012={0x1, 0x0, 0x0, '}'}]}}, 0x0}, 0x0) 867.80945ms ago: executing program 1 (id=2483): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 772.858219ms ago: executing program 2 (id=2484): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 711.272354ms ago: executing program 1 (id=2485): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) 662.004559ms ago: executing program 2 (id=2486): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xa60e, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 536.04315ms ago: executing program 1 (id=2487): socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0300000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 489.330025ms ago: executing program 2 (id=2488): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0), 0x8, 0x0) syz_mount_image$fuse(0xfffffffffffffffe, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0], 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000140)='fd') 443.869039ms ago: executing program 1 (id=2489): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2200c3a, &(0x7f0000000140)={[{}, {@mode}]}) 431.30042ms ago: executing program 2 (id=2490): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000000000001414fc62db8fe"], 0x38}}, 0x0) 390.682994ms ago: executing program 3 (id=2491): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) write$9p(r1, &(0x7f0000000780)="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", 0xfffffff6) 356.712717ms ago: executing program 2 (id=2493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x2, '\\'}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 227.967959ms ago: executing program 3 (id=2494): r0 = socket$inet6(0xa, 0x3, 0x7) setresuid(0x0, 0xee00, 0x0) sendmmsg$alg(r0, &(0x7f0000001840)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x29, 0x4}], 0x18}], 0x1, 0x0) 227.752219ms ago: executing program 1 (id=2495): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711224000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x90) 226.161569ms ago: executing program 0 (id=2496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000200)=ANY=[@ANYBLOB="cc020000", @ANYRES16=r1, @ANYBLOB="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"], 0x2cc}}, 0x0) 215.47275ms ago: executing program 2 (id=2497): timer_create(0x0, 0x0, &(0x7f0000000140)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 166.780525ms ago: executing program 3 (id=2498): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r0, &(0x7f00000004c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x8}, 0x80) shutdown(r0, 0x1) 0s ago: executing program 1 (id=2499): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100040000002c0004801800030080ffffff05000300000000000500030000faff0005000304000000000500020006f100000800020003"], 0x50}}, 0x0) kernel console output (not intermixed with test programs): .0/0003:20D6:CB17.0022/input/input21 [ 231.409199][ T3635] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 231.483501][ T5054] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0022/input/input22 [ 231.495051][ T9133] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.609562][ T5054] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0022/input/input23 [ 231.711023][ T5054] hid-udraw 0003:20D6:CB17.0022: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.4-1/input0 [ 231.785912][ T5054] usb 5-1: USB disconnect, device number 13 [ 231.877594][ T9137] loop0: detected capacity change from 0 to 16 [ 232.041209][ T9137] erofs: (device loop0): mounted with root inode @ nid 36. [ 232.096097][ T9137] syz.0.1811: attempt to access beyond end of device [ 232.096097][ T9137] loop0: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 232.170069][ T9143] loop4: detected capacity change from 0 to 64 [ 232.177867][ T9137] syz.0.1811: attempt to access beyond end of device [ 232.177867][ T9137] loop0: rw=524288, sector=304, nr_sectors = 16 limit=16 [ 232.206788][ T9143] hfs: unable to locate alternate MDB [ 232.243111][ T9143] hfs: continuing without an alternate MDB [ 232.689061][ T9132] loop3: detected capacity change from 0 to 32768 [ 232.713358][ T9132] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1808 (9132) [ 232.769470][ T9132] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 232.779864][ T5054] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 232.800250][ T9132] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 232.820556][ T9132] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 232.841336][ T9132] BTRFS info (device loop3): use zstd compression, level 3 [ 232.879021][ T9132] BTRFS info (device loop3): using free space tree [ 233.012912][ T9132] BTRFS info (device loop3): enabling ssd optimizations [ 233.070986][ T9179] loop4: detected capacity change from 0 to 2048 [ 233.097858][ T3644] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.112059][ T9145] loop1: detected capacity change from 0 to 32768 [ 233.127216][ T9145] XFS: ikeep mount option is deprecated. [ 233.137599][ T9181] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.137909][ T9145] XFS: noikeep mount option is deprecated. [ 233.173390][ T5054] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.207427][ T9179] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=1023, name_len=0 [ 233.233198][ T5054] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.256345][ T5054] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 233.270281][ T5054] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.287149][ T9179] Remounting filesystem read-only [ 233.318728][ T5054] usb 3-1: config 0 descriptor?? [ 233.483183][ T9145] XFS (loop1): Mounting V5 Filesystem [ 233.614985][ T9145] XFS (loop1): Ending clean mount [ 233.634774][ T9145] XFS (loop1): Quotacheck needed: Please wait. [ 233.714236][ T9145] XFS (loop1): Quotacheck: Done. [ 233.757305][ T3635] XFS (loop1): Unmounting Filesystem [ 233.840191][ T5054] kye 0003:0458:5015.0023: hidraw0: USB HID v0.00 Device [HID 0458:5015] on usb-dummy_hcd.2-1/input0 [ 233.864568][ T5054] kye 0003:0458:5015.0023: tablet-enabling feature report not found [ 233.873166][ T5054] kye 0003:0458:5015.0023: tablet enabling failed [ 233.881293][ T9199] loop3: detected capacity change from 0 to 4096 [ 233.979351][ T9199] NILFS (loop3): invalid segment: Checksum error in segment payload [ 233.999926][ T9199] NILFS (loop3): trying rollback from an earlier position [ 234.013028][ T9203] loop4: detected capacity change from 0 to 2048 [ 234.025875][ T9199] NILFS (loop3): recovery complete [ 234.045195][ T5054] usb 3-1: USB disconnect, device number 12 [ 234.070830][ T9204] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.108360][ T9205] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.397255][ T9217] device vlan2 entered promiscuous mode [ 234.442044][ T5179] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 234.649648][ T9213] loop3: detected capacity change from 0 to 32768 [ 234.674374][ T9213] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1832 (9213) [ 234.717957][ T9213] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 234.739512][ T9213] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 234.749270][ T9213] BTRFS info (device loop3): using free space tree [ 234.879776][ T9213] BTRFS info (device loop3): enabling ssd optimizations [ 234.959223][ T9248] loop2: detected capacity change from 0 to 16 [ 234.971333][ T5179] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 234.980868][ T3644] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 234.991457][ T5179] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.001570][ T5179] usb 2-1: Product: syz [ 235.005830][ T5179] usb 2-1: Manufacturer: syz [ 235.010631][ T9248] erofs: (device loop2): mounted with root inode @ nid 36. [ 235.035668][ T5179] usb 2-1: SerialNumber: syz [ 235.041543][ T9248] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 1 for nid 36 [ 235.093130][ T5179] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 235.331201][ T9253] loop2: detected capacity change from 0 to 64 [ 235.572127][ T4851] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 235.643687][ T9264] netlink: 'syz.2.1847': attribute type 30 has an invalid length. [ 235.712248][ T5179] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 235.832260][ T4851] usb 4-1: Using ep0 maxpacket: 16 [ 235.962177][ T4851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.991973][ T4851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.011981][ T4851] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 236.031324][ T4851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.061359][ T4851] usb 4-1: config 0 descriptor?? [ 236.329860][ T3684] usb 2-1: USB disconnect, device number 21 [ 236.423018][ T9271] loop2: detected capacity change from 0 to 40427 [ 236.452918][ T9271] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 236.460690][ T9271] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 236.490821][ T9271] F2FS-fs (loop2): invalid crc value [ 236.511089][ T9273] loop4: detected capacity change from 0 to 32768 [ 236.534253][ T4851] cp2112 0003:10C4:EA90.0024: unbalanced delimiter at end of report description [ 236.550567][ T9271] F2FS-fs (loop2): Found nat_bits in checkpoint [ 236.555130][ T9273] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1852 (9273) [ 236.573837][ T4851] cp2112 0003:10C4:EA90.0024: parse failed [ 236.579873][ T4851] cp2112: probe of 0003:10C4:EA90.0024 failed with error -22 [ 236.604542][ T9273] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 236.625731][ T9273] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 236.642060][ T9273] BTRFS info (device loop4): using free space tree [ 236.684594][ T9271] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 236.701863][ T9271] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 236.735621][ T5012] usb 4-1: USB disconnect, device number 10 [ 236.771129][ T9269] loop0: detected capacity change from 0 to 65536 [ 236.782190][ T5179] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 236.795451][ T5179] ath9k_htc: Failed to initialize the device [ 236.819471][ T3684] usb 2-1: ath9k_htc: USB layer deinitialized [ 236.876890][ T9269] XFS (loop0): Mounting V5 Filesystem [ 236.905077][ T9273] BTRFS info (device loop4): enabling ssd optimizations [ 236.957328][ T9269] XFS (loop0): Ending clean mount [ 236.970310][ T9269] XFS (loop0): Quotacheck needed: Please wait. [ 237.046326][ T9269] XFS (loop0): Quotacheck: Done. [ 237.126079][ T3640] XFS (loop0): Unmounting Filesystem [ 237.212415][ T8318] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 237.662336][ T3684] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 237.922001][ T3684] usb 4-1: Using ep0 maxpacket: 16 [ 238.043043][ T3684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.057677][ T26] audit: type=1326 audit(1727463290.572:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9332 comm="syz.4.1865" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60b8f7dff9 code=0x0 [ 238.062028][ T3684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.091903][ T3684] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 238.102708][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.118128][ T3684] usb 4-1: config 0 descriptor?? [ 238.295302][ T9335] loop0: detected capacity change from 0 to 32768 [ 238.319182][ T9335] JBD2: Ignoring recovery information on journal [ 238.378224][ T9339] loop2: detected capacity change from 0 to 512 [ 238.391681][ T9339] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 238.401832][ T9339] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 238.416231][ T9335] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 238.429515][ T9339] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 238.437922][ T9339] System zones: 0-2, 18-18, 34-34 [ 238.455615][ T9339] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 238.482648][ T9339] EXT4-fs (loop2): 1 truncate cleaned up [ 238.488543][ T9339] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 238.566477][ T3641] EXT4-fs (loop2): unmounting filesystem. [ 238.604163][ T3684] bigben 0003:146B:0902.0025: unexpected rdesc, please submit for review [ 238.633739][ T3684] bigben 0003:146B:0902.0025: item fetching failed at offset 1/5 [ 238.642463][ T3684] bigben 0003:146B:0902.0025: parse failed [ 238.647296][ T3640] ocfs2: Unmounting device (7,0) on (node local) [ 238.648289][ T3684] bigben: probe of 0003:146B:0902.0025 failed with error -22 [ 238.837681][ T5054] usb 4-1: USB disconnect, device number 11 [ 239.079129][ T9362] loop4: detected capacity change from 0 to 64 [ 239.192145][ T3682] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 239.572254][ T3682] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 239.598098][ T3682] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 239.616620][ T9389] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 239.633232][ T3682] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 239.657163][ T3682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.713456][ T9353] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 240.171376][ T5179] usb 2-1: USB disconnect, device number 22 [ 240.425924][ T9387] loop3: detected capacity change from 0 to 32768 [ 240.510431][ T9387] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 240.614484][ T3644] ocfs2: Unmounting device (7,3) on (node local) [ 240.624164][ T9397] loop2: detected capacity change from 0 to 32768 [ 240.656860][ T9397] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 240.690890][ T9397] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 240.725427][ T9397] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 240.770587][ T5054] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 240.779679][ T5054] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 240.881441][ T5054] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 101ms [ 240.928104][ T5054] gfs2: fsid=syz:syz.0: jid=0: Done [ 240.968044][ T9397] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 241.109064][ T9402] loop0: detected capacity change from 0 to 32768 [ 241.240228][ T9402] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 241.270035][ T9402] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 241.299843][ T9402] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 241.328473][ T5054] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 241.337643][ T5054] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 241.376079][ T9423] loop4: detected capacity change from 0 to 4096 [ 241.415096][ T9423] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 241.482437][ T5054] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 144ms [ 241.509001][ T5054] gfs2: fsid=syz:syz.0: jid=0: Done [ 241.522156][ T9402] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 241.541070][ T9423] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 241.569452][ T9402] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 241.611592][ T9402] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 241.611592][ T9402] inode = 12 2341 [ 241.611592][ T9402] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 241.657871][ T9430] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 241.663235][ T9402] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:4 m:20 p:1 [ 241.709097][ T9432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.730093][ T9402] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:9402 [syz.0.1894] __gfs2_lookup+0xa0/0x270 [ 241.742953][ T9430] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 241.742953][ T9430] inode = 12 2341 [ 241.742953][ T9430] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 241.794400][ T9402] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:9430 [syz.0.1894] __gfs2_lookup+0xa0/0x270 [ 241.799517][ T9430] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:4 m:20 p:1 [ 241.839936][ T9402] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 241.881549][ T9402] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 241.912018][ T6733] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 241.919678][ T9402] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 241.945504][ T9430] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:9402 [syz.0.1894] __gfs2_lookup+0xa0/0x270 [ 241.972071][ T9402] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 241.996055][ T9430] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:9430 [syz.0.1894] __gfs2_lookup+0xa0/0x270 [ 242.022178][ T9402] gfs2: fsid=syz:syz.0: File system withdrawn [ 242.038776][ T9430] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 242.060784][ T9402] CPU: 1 PID: 9402 Comm: syz.0.1894 Not tainted 6.1.111-syzkaller #0 [ 242.068891][ T9402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 242.078964][ T9402] Call Trace: [ 242.082255][ T9402] [ 242.085193][ T9402] dump_stack_lvl+0x1e3/0x2cb [ 242.089894][ T9402] ? nf_tcp_handle_invalid+0x642/0x642 [ 242.095372][ T9402] ? panic+0x764/0x764 [ 242.099452][ T9402] ? kobject_uevent_env+0x54a/0x8c0 [ 242.104670][ T9402] gfs2_withdraw+0xfcb/0x1550 [ 242.109376][ T9402] ? gfs2_lm+0x230/0x230 [ 242.113630][ T9402] ? gfs2_dirent_scan+0x276/0x640 [ 242.118667][ T9402] ? panic+0x764/0x764 [ 242.122756][ T9402] ? gfs2_consist_inode_i+0xf1/0x110 [ 242.128056][ T9402] gfs2_dirent_scan+0x512/0x640 [ 242.132923][ T9402] ? gfs2_dirent_search+0x8c0/0x8c0 [ 242.138131][ T9402] gfs2_dirent_search+0x30a/0x8c0 [ 242.143167][ T9402] ? gfs2_dirent_search+0x8c0/0x8c0 [ 242.148379][ T9402] ? inode_dio_wait+0x2a9/0x340 [ 242.153243][ T9402] ? generic_permission+0x21c/0x4f0 [ 242.158458][ T9402] ? gfs2_dir_search+0x2f0/0x2f0 [ 242.163407][ T9402] ? gfs2_permission+0x401/0x4d0 [ 242.168367][ T9402] gfs2_dir_search+0xae/0x2f0 [ 242.173055][ T9402] ? do_filldir_main+0x520/0x520 [ 242.178001][ T9402] ? inode_go_held+0xe6/0x1f0 [ 242.182687][ T9402] ? gfs2_glock_wait+0x216/0x2a0 [ 242.187635][ T9402] gfs2_lookupi+0x45f/0x5e0 [ 242.192157][ T9402] ? gfs2_lookup_simple+0x170/0x170 [ 242.197372][ T9402] ? __gfs2_lookup+0xa0/0x270 [ 242.202065][ T9402] ? __d_lookup+0x8b/0x790 [ 242.206500][ T9402] __gfs2_lookup+0xa0/0x270 [ 242.211017][ T9402] ? gfs2_atomic_open+0x220/0x220 [ 242.216060][ T9402] ? __d_lookup+0x6d6/0x790 [ 242.219880][ T9427] loop1: detected capacity change from 0 to 32768 [ 242.220564][ T9402] gfs2_atomic_open+0x9a/0x220 [ 242.220595][ T9402] path_openat+0xf4e/0x2e60 [ 242.236243][ T9402] ? gfs2_rename2+0x25a0/0x25a0 [ 242.241135][ T9402] ? do_filp_open+0x480/0x480 [ 242.245851][ T9402] do_filp_open+0x230/0x480 [ 242.250367][ T9402] ? vfs_tmpfile+0x4a0/0x4a0 [ 242.254992][ T9402] ? _raw_spin_unlock+0x24/0x40 [ 242.259854][ T9402] ? alloc_fd+0x5a0/0x640 [ 242.264206][ T9402] do_sys_openat2+0x13b/0x4f0 [ 242.268903][ T9402] ? do_sys_open+0x220/0x220 [ 242.273503][ T9402] ? blkcg_maybe_throttle_current+0x1ac/0xa30 [ 242.279583][ T9402] __x64_sys_openat+0x243/0x290 [ 242.284439][ T9402] ? __ia32_sys_open+0x270/0x270 [ 242.289388][ T9402] ? syscall_enter_from_user_mode+0x2e/0x230 [ 242.292136][ T6733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.295349][ T9402] ? lockdep_hardirqs_on+0x94/0x130 [ 242.311216][ T6733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.311351][ T9402] ? syscall_enter_from_user_mode+0x2e/0x230 [ 242.327045][ T9402] do_syscall_64+0x3b/0xb0 [ 242.327415][ T6733] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.331461][ T9402] ? clear_bhb_loop+0x45/0xa0 [ 242.348878][ T9402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.350428][ T6733] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 242.354768][ T9402] RIP: 0033:0x7fbe4377dff9 [ 242.354800][ T9402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.354816][ T9402] RSP: 002b:00007fbe44570038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 242.354838][ T9402] RAX: ffffffffffffffda RBX: 00007fbe43935f80 RCX: 00007fbe4377dff9 [ 242.354851][ T9402] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 242.354863][ T9402] RBP: 00007fbe437f0296 R08: 0000000000000000 R09: 0000000000000000 [ 242.354875][ T9402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.354886][ T9402] R13: 0000000000000000 R14: 00007fbe43935f80 R15: 00007ffccb36f4a8 [ 242.354912][ T9402] [ 242.369749][ T6733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.478944][ T9427] XFS (loop1): Mounting V5 Filesystem [ 242.494638][ T6733] usb 3-1: config 0 descriptor?? [ 242.660603][ T9427] XFS (loop1): Ending clean mount [ 242.723102][ T3682] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x39/0xc0, xfs_finobt block 0x20 [ 242.750087][ T3682] XFS (loop1): Unmount and run xfs_repair [ 242.785010][ T9458] tipc: Started in network mode [ 242.802299][ T3682] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 242.803019][ T9458] tipc: Node identity 1, cluster identity 4711 [ 242.816255][ T9458] tipc: Node number set to 1 [ 242.839869][ T3682] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 242.865549][ T3682] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 242.876447][ T3682] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 242.890471][ T3682] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 242.918617][ T3682] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 242.937820][ T3682] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 242.948741][ T3682] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 242.964569][ T3682] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 242.975578][ T6733] kye 0003:0458:0153.0026: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.2-1/input0 [ 242.986638][ T9427] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x20 len 8 error 74 [ 243.035403][ T9427] XFS (loop1): Failed to initialize disk quotas. [ 243.084513][ T9469] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 243.162731][ T3635] XFS (loop1): Unmounting Filesystem [ 243.196640][ T6733] usb 3-1: USB disconnect, device number 13 [ 243.592158][ T5179] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 243.709808][ T9471] loop3: detected capacity change from 0 to 32768 [ 243.829423][ T9488] program syz.1.1938 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.842273][ T5179] usb 5-1: Using ep0 maxpacket: 16 [ 243.854650][ T9471] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 243.949888][ T9494] loop0: detected capacity change from 0 to 64 [ 243.963380][ T5179] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.985392][ T5179] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.002599][ T9494] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 244.006029][ T5179] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 244.045039][ T5179] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 244.071997][ T5179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.092635][ T5179] usb 5-1: config 0 descriptor?? [ 244.113794][ T3644] ocfs2: Unmounting device (7,3) on (node local) [ 244.242010][ T3684] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 244.425665][ T9508] loop0: detected capacity change from 0 to 16 [ 244.457161][ T9508] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 244.502063][ T3684] usb 2-1: Using ep0 maxpacket: 32 [ 244.573927][ T5179] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 244.592588][ T5179] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 244.620155][ T5179] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 244.631993][ T3684] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 244.646318][ T3684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.657822][ T5179] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 244.677722][ T5179] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 244.690882][ T3684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.711119][ T5179] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 244.718666][ T3684] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 244.732004][ T5179] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 244.749462][ T3684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.757766][ T5179] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 244.774341][ T3684] usb 2-1: config 0 descriptor?? [ 244.779454][ T5179] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 244.792651][ T5179] microsoft 0003:045E:07DA.0027: No inputs registered, leaving [ 244.811400][ T5179] microsoft 0003:045E:07DA.0027: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 244.842118][ T5179] microsoft 0003:045E:07DA.0027: no inputs found [ 244.863897][ T5179] microsoft 0003:045E:07DA.0027: could not initialize ff, continuing anyway [ 244.894064][ T5179] usb 5-1: USB disconnect, device number 14 [ 245.087730][ T9506] loop3: detected capacity change from 0 to 32768 [ 245.113203][ T9520] loop0: detected capacity change from 0 to 4096 [ 245.121555][ T9520] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 245.140478][ T9506] XFS (loop3): Mounting V5 Filesystem [ 245.185883][ T9524] loop2: detected capacity change from 0 to 4096 [ 245.223611][ T9524] NILFS (loop2): invalid segment: Checksum error in segment payload [ 245.237772][ T9520] ntfs3: loop0: ino=1b, "file0" attr_set_size [ 245.244539][ T9524] NILFS (loop2): trying rollback from an earlier position [ 245.259682][ T9524] NILFS (loop2): norecovery option specified, skipping roll-forward recovery [ 245.274904][ T3684] savu 0003:1E7D:2D5A.0028: unbalanced collection at end of report description [ 245.289863][ T9524] NILFS (loop2): couldn't remount because the filesystem is in an incomplete recovery state [ 245.307373][ T3684] savu 0003:1E7D:2D5A.0028: parse failed [ 245.336383][ T3684] savu: probe of 0003:1E7D:2D5A.0028 failed with error -22 [ 245.364226][ T9506] XFS (loop3): Ending clean mount [ 245.373560][ T3640] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 245.381088][ T3640] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 245.393589][ T9506] XFS (loop3): Quotacheck needed: Please wait. [ 245.407491][ T3640] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 245.423979][ T9534] loop2: detected capacity change from 0 to 256 [ 245.473172][ T3682] usb 2-1: USB disconnect, device number 23 [ 245.478903][ T9534] exfat: Deprecated parameter 'utf8' [ 245.479254][ T9506] XFS (loop3): Quotacheck: Done. [ 245.485600][ T9534] exfat: Deprecated parameter 'namecase' [ 245.511793][ T9534] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 245.656000][ T9541] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1950'. [ 245.699243][ T3644] XFS (loop3): Unmounting Filesystem [ 245.889810][ T9548] loop2: detected capacity change from 0 to 1024 [ 246.112440][ T9550] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.1956'. [ 246.121805][ T9550] netlink: zone id is out of range [ 246.173405][ T9550] netlink: zone id is out of range [ 246.178628][ T9550] netlink: zone id is out of range [ 246.192714][ T9550] netlink: get zone limit has 4 unknown bytes [ 246.206294][ T9554] loop2: detected capacity change from 0 to 2048 [ 246.281457][ T9554] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 246.330740][ T9556] program syz.1.1959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.354934][ T9554] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.623029][ T9566] loop3: detected capacity change from 0 to 64 [ 246.639178][ T9542] loop0: detected capacity change from 0 to 32768 [ 246.703038][ T9542] ERROR: (device loop0): diAllocAG: numfree > numinos [ 246.703038][ T9542] [ 246.759686][ T9542] ialloc: diAlloc returned -5! [ 246.759905][ T9568] sg_write: process 790 (syz.1.1964) changed security contexts after opening file descriptor, this is not allowed. [ 247.407058][ T9558] loop4: detected capacity change from 0 to 40427 [ 247.433406][ T9558] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 247.441340][ T9558] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 247.451640][ T9558] F2FS-fs (loop4): invalid crc value [ 247.479355][ T9558] F2FS-fs (loop4): Found nat_bits in checkpoint [ 247.520099][ T9594] tipc: Started in network mode [ 247.531894][ T9594] tipc: Node identity 2d5f14aa, cluster identity 4711 [ 247.548336][ T9594] tipc: Enabling of bearer rejected, failed to enable media [ 247.574380][ T9558] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 247.583741][ T9558] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 247.906720][ T9604] loop3: detected capacity change from 0 to 512 [ 247.948497][ T9604] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 247.972305][ T9604] ext4 filesystem being mounted at /449/file0 supports timestamps until 2038 (0x7fffffff) [ 248.002283][ T9611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1982'. [ 248.061175][ T3644] EXT4-fs (loop3): unmounting filesystem. [ 248.251796][ T9622] program syz.0.1988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.362146][ T5179] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 248.722198][ T5179] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 248.730326][ T5179] usb 2-1: config 0 has no interface number 0 [ 248.756798][ T5179] usb 2-1: config 0 interface 66 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 248.788278][ T5179] usb 2-1: config 0 interface 66 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.818652][ T5179] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 248.845153][ T5179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.867031][ T5179] usb 2-1: config 0 descriptor?? [ 248.899684][ T9620] loop3: detected capacity change from 0 to 32768 [ 249.019098][ T9626] loop2: detected capacity change from 0 to 40427 [ 249.043690][ T9626] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 249.072271][ T9626] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 249.096240][ T9626] F2FS-fs (loop2): invalid crc value [ 249.141607][ T9626] F2FS-fs (loop2): Found nat_bits in checkpoint [ 249.169570][ T9628] loop4: detected capacity change from 0 to 32768 [ 249.239394][ T9628] ERROR: (device loop4): diAllocAG: numfree > numinos [ 249.239394][ T9628] [ 249.262421][ T9626] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 249.290104][ T9628] ialloc: diAlloc returned -5! [ 249.291626][ T9626] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 249.365452][ T5179] uclogic 0003:5543:0522.0029: item fetching failed at offset 5/7 [ 249.391502][ T5179] uclogic 0003:5543:0522.0029: parse failed [ 249.418209][ T5179] uclogic: probe of 0003:5543:0522.0029 failed with error -22 [ 249.587174][ T5179] usb 2-1: USB disconnect, device number 24 [ 250.219148][ T9638] loop3: detected capacity change from 0 to 40427 [ 250.222414][ T9642] loop0: detected capacity change from 0 to 32768 [ 250.249665][ T9638] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 250.259031][ T9642] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1995 (9642) [ 250.266109][ T9638] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 250.352298][ T9642] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 250.352424][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'. [ 250.371323][ T9642] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 250.371379][ T9642] BTRFS info (device loop0): using free space tree [ 250.382634][ T9638] F2FS-fs (loop3): Found nat_bits in checkpoint [ 250.413534][ T9642] BTRFS info (device loop0): enabling ssd optimizations [ 250.500702][ T3640] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 250.602899][ T9638] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 250.612030][ T5054] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 250.624622][ T9638] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 250.920719][ T9687] loop0: detected capacity change from 0 to 256 [ 250.982624][ T9687] FAT-fs (loop0): Directory bread(block 64) failed [ 251.012191][ T5054] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 251.016746][ T9687] FAT-fs (loop0): Directory bread(block 65) failed [ 251.028177][ T9687] FAT-fs (loop0): Directory bread(block 66) failed [ 251.030560][ T5054] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.060873][ T9687] FAT-fs (loop0): Directory bread(block 67) failed [ 251.068313][ T9687] FAT-fs (loop0): Directory bread(block 68) failed [ 251.100782][ T9687] FAT-fs (loop0): Directory bread(block 69) failed [ 251.102743][ T5054] usb 2-1: config 0 has no interface number 0 [ 251.120766][ T9687] FAT-fs (loop0): Directory bread(block 70) failed [ 251.133934][ T5054] usb 2-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 251.145249][ T9687] FAT-fs (loop0): Directory bread(block 71) failed [ 251.152016][ T5054] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 251.188240][ T9687] FAT-fs (loop0): Directory bread(block 72) failed [ 251.212098][ T9687] FAT-fs (loop0): Directory bread(block 73) failed [ 251.230586][ T5054] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 251.386291][ T9697] loop2: detected capacity change from 0 to 1024 [ 251.422320][ T5054] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 251.432077][ T5179] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 251.451309][ T5054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.472762][ T9697] hfsplus: small dir entry [ 251.488158][ T5054] usb 2-1: Product: syz [ 251.497306][ T5054] usb 2-1: Manufacturer: syz [ 251.522076][ T5054] usb 2-1: SerialNumber: syz [ 251.530291][ T5054] usb 2-1: config 0 descriptor?? [ 251.584231][ T5054] HFC-S_USB: probe of 2-1:0.117 failed with error -5 [ 251.628013][ T9705] loop2: detected capacity change from 0 to 64 [ 251.792323][ T5179] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.838071][ T5179] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.866112][ T5179] usb 5-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 251.870442][ T5054] usb 2-1: USB disconnect, device number 25 [ 251.877300][ T9713] loop0: detected capacity change from 0 to 24 [ 251.908011][ T5179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.934098][ T5179] usb 5-1: config 0 descriptor?? [ 252.187377][ T9707] loop3: detected capacity change from 0 to 32768 [ 252.215600][ T9707] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2016 (9707) [ 252.237290][ T9707] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 252.247616][ T9707] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 252.260663][ T9707] BTRFS info (device loop3): setting nodatasum [ 252.270609][ T9707] BTRFS info (device loop3): enabling auto defrag [ 252.279600][ T9707] BTRFS info (device loop3): disabling tree log [ 252.290375][ T9707] BTRFS info (device loop3): using free space tree [ 252.331604][ T9707] BTRFS info (device loop3): enabling ssd optimizations [ 252.405123][ T5179] elecom 0003:056E:00FC.002A: unknown main item tag 0x0 [ 252.421985][ T5179] elecom 0003:056E:00FC.002A: unknown main item tag 0x0 [ 252.429059][ T5179] elecom 0003:056E:00FC.002A: unknown main item tag 0x0 [ 252.436839][ T5179] elecom 0003:056E:00FC.002A: unknown main item tag 0x0 [ 252.443958][ T5179] elecom 0003:056E:00FC.002A: unknown main item tag 0x0 [ 252.462594][ T5179] elecom 0003:056E:00FC.002A: hidraw0: USB HID v0.00 Device [HID 056e:00fc] on usb-dummy_hcd.4-1/input0 [ 252.491313][ T3644] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 252.597000][ T9737] device bridge1 entered promiscuous mode [ 252.703835][ T3680] usb 5-1: USB disconnect, device number 15 [ 252.712472][ T9737] team0: Port device bridge1 added [ 252.736999][ T9715] loop2: detected capacity change from 0 to 40427 [ 252.766779][ T9715] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 252.789572][ T9715] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 252.841353][ T9715] F2FS-fs (loop2): Found nat_bits in checkpoint [ 252.892076][ T9715] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 252.900337][ T9715] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 253.326823][ T9757] loop3: detected capacity change from 0 to 1024 [ 253.372419][ T9757] hfsplus: bad catalog entry type [ 253.394835][ T9759] loop4: detected capacity change from 0 to 256 [ 253.436497][ T9759] exfat: Deprecated parameter 'namecase' [ 253.459085][ T32] hfsplus: b-tree write err: -5, ino 4 [ 253.461604][ T9759] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 253.634311][ T9763] MTD: Couldn't look up 'memory.events': -15 [ 253.792743][ T9753] loop1: detected capacity change from 0 to 32768 [ 253.807602][ T9769] loop2: detected capacity change from 0 to 512 [ 253.835537][ T9753] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 253.835537][ T9753] [ 253.841817][ T9769] EXT4-fs: Ignoring removed orlov option [ 253.876681][ T9769] EXT4-fs: Ignoring removed i_version option [ 253.885206][ T9769] EXT4-fs: Ignoring removed nomblk_io_submit option [ 253.892960][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2035'. [ 253.916401][ T9769] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 253.925465][ T9769] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 253.947252][ T3682] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 253.953072][ T9769] EXT4-fs (loop2): orphan cleanup on readonly fs [ 253.961231][ T9769] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 253.971210][ T9769] EXT4-fs warning (device loop2): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 253.991098][ T9769] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 254.003443][ T9769] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2034: bg 0: block 40: padding at end of block bitmap is not set [ 254.020012][ T9774] loop4: detected capacity change from 0 to 512 [ 254.032892][ T9769] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 254.045230][ T9769] EXT4-fs (loop2): 1 truncate cleaned up [ 254.050904][ T9769] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 254.082341][ T9774] EXT4-fs (loop4): filesystem is read-only [ 254.117021][ T9774] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 254.141177][ T9778] loop1: detected capacity change from 0 to 164 [ 254.169025][ T9778] Unsupported NM flag settings (8) [ 254.211861][ T9774] EXT4-fs (loop4): filesystem is read-only [ 254.231318][ T9774] EXT4-fs (loop4): orphan cleanup on readonly fs [ 254.254300][ T3641] EXT4-fs (loop2): unmounting filesystem. [ 254.280010][ T9774] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2038: bg 0: block 64: padding at end of block bitmap is not set [ 254.397008][ T9774] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 254.402244][ T3682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.418903][ T9774] EXT4-fs (loop4): 1 orphan inode deleted [ 254.426395][ T9774] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 254.441853][ T3682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.492001][ T3682] usb 4-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 254.501077][ T3682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.509961][ T8318] EXT4-fs (loop4): unmounting filesystem. [ 254.545600][ T3682] usb 4-1: config 0 descriptor?? [ 254.766211][ T9806] device bridge1 entered promiscuous mode [ 254.781704][ T9806] team0: Port device bridge1 added [ 254.786290][ T9805] MTD: Couldn't look up 'memory.events': -15 [ 254.967184][ T9814] loop1: detected capacity change from 0 to 24 [ 255.003814][ T3682] elecom 0003:056E:00FC.002B: unknown main item tag 0x0 [ 255.017434][ T3682] elecom 0003:056E:00FC.002B: unknown main item tag 0x0 [ 255.052039][ T3682] elecom 0003:056E:00FC.002B: unknown main item tag 0x0 [ 255.093488][ T3682] elecom 0003:056E:00FC.002B: unknown main item tag 0x0 [ 255.100480][ T3682] elecom 0003:056E:00FC.002B: unknown main item tag 0x0 [ 255.138961][ T9818] loop2: detected capacity change from 0 to 256 [ 255.161487][ T3682] elecom 0003:056E:00FC.002B: hidraw0: USB HID v0.00 Device [HID 056e:00fc] on usb-dummy_hcd.3-1/input0 [ 255.198968][ T9820] loop1: detected capacity change from 0 to 2048 [ 255.220684][ T3682] usb 4-1: USB disconnect, device number 12 [ 255.234747][ T9818] FAT-fs (loop2): Directory bread(block 64) failed [ 255.260699][ T9818] FAT-fs (loop2): Directory bread(block 65) failed [ 255.268144][ T9820] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 255.280593][ T9818] FAT-fs (loop2): Directory bread(block 66) failed [ 255.340165][ T9827] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.358704][ T9818] FAT-fs (loop2): Directory bread(block 67) failed [ 255.375759][ T9818] FAT-fs (loop2): Directory bread(block 68) failed [ 255.384739][ T9830] program syz.4.2063 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.394439][ T9818] FAT-fs (loop2): Directory bread(block 69) failed [ 255.401059][ T9818] FAT-fs (loop2): Directory bread(block 70) failed [ 255.410465][ T9818] FAT-fs (loop2): Directory bread(block 71) failed [ 255.417539][ T9818] FAT-fs (loop2): Directory bread(block 72) failed [ 255.424613][ T9818] FAT-fs (loop2): Directory bread(block 73) failed [ 255.514153][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.520472][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.174519][ T3680] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 256.432062][ T3680] usb 4-1: Using ep0 maxpacket: 16 [ 256.552175][ T3680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.563341][ T3680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.566137][ T9844] loop2: detected capacity change from 0 to 32768 [ 256.573920][ T3680] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.594142][ T3680] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 256.608912][ T3680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.624914][ T3680] usb 4-1: config 0 descriptor?? [ 256.664345][ T4772] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 256.670551][ T9844] XFS (loop2): Mounting V5 Filesystem [ 256.739050][ T9844] XFS (loop2): Ending clean mount [ 256.747892][ T9844] XFS (loop2): Quotacheck needed: Please wait. [ 256.790360][ T9844] XFS (loop2): Quotacheck: Done. [ 256.890185][ T3641] XFS (loop2): Unmounting Filesystem [ 256.909980][ T9866] loop1: detected capacity change from 0 to 32768 [ 256.912040][ T4772] usb 5-1: Using ep0 maxpacket: 16 [ 256.917619][ T9866] XFS: attr2 mount option is deprecated. [ 256.927471][ T9866] XFS: noattr2 mount option is deprecated. [ 256.933669][ T9866] XFS: noikeep mount option is deprecated. [ 256.939695][ T9866] XFS (loop1): attr2 and noattr2 cannot both be specified. [ 257.083638][ T4772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.107053][ T3680] pantherlord 0003:0F30:0111.002C: unknown main item tag 0x0 [ 257.124388][ T4772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.136755][ T3680] pantherlord 0003:0F30:0111.002C: unknown main item tag 0x0 [ 257.147791][ T3680] pantherlord 0003:0F30:0111.002C: unknown main item tag 0x0 [ 257.157717][ T4772] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 257.180835][ T3680] pantherlord 0003:0F30:0111.002C: unknown main item tag 0x0 [ 257.188606][ T4772] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 257.207157][ T3680] pantherlord 0003:0F30:0111.002C: unknown main item tag 0x0 [ 257.216775][ T3680] pantherlord 0003:0F30:0111.002C: hidraw0: USB HID v0.00 Device [HID 0f30:0111] on usb-dummy_hcd.3-1/input0 [ 257.233965][ T4772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.248828][ T4772] usb 5-1: config 0 descriptor?? [ 257.256562][ T3680] pantherlord 0003:0F30:0111.002C: no output reports found [ 257.325610][ T9880] loop2: detected capacity change from 0 to 24 [ 257.343325][ T3682] usb 4-1: USB disconnect, device number 13 [ 257.743893][ T4772] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 257.751259][ T4772] microsoft 0003:045E:07DA.002D: ignoring exceeding usage max [ 257.759914][ T4772] microsoft 0003:045E:07DA.002D: unsupported Resolution Multiplier 0 [ 257.768704][ T4772] microsoft 0003:045E:07DA.002D: unsupported Resolution Multiplier 0 [ 257.777092][ T4772] microsoft 0003:045E:07DA.002D: No inputs registered, leaving [ 257.785384][ T4772] microsoft 0003:045E:07DA.002D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 257.796876][ T4772] microsoft 0003:045E:07DA.002D: no inputs found [ 257.803262][ T4772] microsoft 0003:045E:07DA.002D: could not initialize ff, continuing anyway [ 257.969634][ T4772] usb 5-1: USB disconnect, device number 16 [ 258.042704][ T9892] loop1: detected capacity change from 0 to 256 [ 258.171536][ T9900] loop1: detected capacity change from 0 to 512 [ 258.187484][ T9900] EXT4-fs (loop1): fragment/cluster size (8192) != block size (4096) [ 258.216981][ T9900] netlink: 'syz.1.2090': attribute type 8 has an invalid length. [ 258.590713][ T9917] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 258.612774][ T3682] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 258.721427][ T9920] loop1: detected capacity change from 0 to 512 [ 258.766160][ T9920] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 258.850885][ T3635] EXT4-fs (loop1): unmounting filesystem. [ 258.857724][ T9906] loop3: detected capacity change from 0 to 32768 [ 258.916152][ T9906] XFS (loop3): Mounting V5 Filesystem [ 258.958543][ T9906] XFS (loop3): Ending clean mount [ 258.964839][ T9906] XFS (loop3): Quotacheck needed: Please wait. [ 258.997506][ T9906] XFS (loop3): Quotacheck: Done. [ 259.033469][ T3682] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 259.082204][ T3644] XFS (loop3): Unmounting Filesystem [ 259.207901][ T9937] loop2: detected capacity change from 0 to 4096 [ 259.254200][ T9937] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 259.352805][ T9941] loop1: detected capacity change from 0 to 512 [ 259.381684][ T9937] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 259.384765][ T9941] EXT4-fs: Ignoring removed bh option [ 259.444128][ T9941] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2106: inode #11614: comm syz.1.2106: iget: illegal inode # [ 259.470385][ T9941] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2106: error while reading EA inode 11614 err=-117 [ 259.484685][ T9941] EXT4-fs (loop1): 1 truncate cleaned up [ 259.490388][ T9941] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 259.560569][ T3635] EXT4-fs (loop1): unmounting filesystem. [ 259.569164][ T9947] loop0: detected capacity change from 0 to 512 [ 259.597563][ T9947] EXT4-fs (loop0): fragment/cluster size (8192) != block size (4096) [ 259.689068][ T9947] netlink: 'syz.0.2111': attribute type 8 has an invalid length. [ 259.960809][ T9960] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 259.972481][ T9952] loop2: detected capacity change from 0 to 4096 [ 259.982150][ T945] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 260.001329][ T9952] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 260.025366][ T9958] loop4: detected capacity change from 0 to 4096 [ 260.060561][ T9958] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 260.139155][ T9958] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 260.193069][ T3641] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 260.200591][ T9958] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 260.213645][ T9958] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 260.215913][ T3641] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 260.246949][ T9962] loop1: detected capacity change from 0 to 4096 [ 260.263450][ T9962] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 260.278907][ T9958] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 260.279255][ T3641] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 260.370448][ T9958] ntfs: volume version 3.1. [ 260.417557][ T9958] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 260.472115][ T9958] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 260.521982][ T9958] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 260.612578][ T945] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 260.650519][ T9970] loop2: detected capacity change from 0 to 2048 [ 260.677164][ T9958] ntfs: (device loop4): ntfs_readdir(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 260.718263][ T9970] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 260.737012][ T9954] loop3: detected capacity change from 0 to 32768 [ 260.792511][ T9971] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.807070][ T9954] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 260.807070][ T9954] [ 260.998037][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.039021][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.185445][ T9975] loop2: detected capacity change from 0 to 4096 [ 261.229481][ T9975] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 261.266545][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.287087][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.327586][ T9975] ntfs: volume version 3.1. [ 261.551409][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.598968][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.631627][ T9985] loop4: detected capacity change from 0 to 512 [ 261.669778][ T9985] EXT4-fs: Ignoring removed bh option [ 261.678616][ T9967] loop0: detected capacity change from 0 to 32768 [ 261.720704][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.741499][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.769499][ T9985] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2127: inode #11614: comm syz.4.2127: iget: illegal inode # [ 261.801801][ T9967] XFS (loop0): Mounting V5 Filesystem [ 261.827608][ T9985] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2127: error while reading EA inode 11614 err=-117 [ 261.860368][ T9985] EXT4-fs (loop4): 1 truncate cleaned up [ 261.866918][ T9985] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 261.956397][ T3650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 261.966433][ T3650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 262.012179][ T3650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 262.022769][ T3650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 262.038043][ T3650] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 262.047245][ T3650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.048834][ T8318] EXT4-fs (loop4): unmounting filesystem. [ 262.130804][ T9967] XFS (loop0): Ending clean mount [ 262.184452][ T9967] XFS (loop0): Quotacheck needed: Please wait. [ 262.298480][ T9967] XFS (loop0): Quotacheck: Done. [ 262.457314][ T11] tipc: Left network mode [ 262.550386][ T3640] XFS (loop0): Unmounting Filesystem [ 262.770235][T10023] tipc: Enabling of bearer rejected, failed to enable media [ 262.883125][T10003] chnl_net:caif_netlink_parms(): no params data found [ 262.918148][T10006] loop3: detected capacity change from 0 to 32768 [ 263.005844][T10006] JBD2: Ignoring recovery information on journal [ 263.072957][T10006] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 263.190573][ T3644] ocfs2: Unmounting device (7,3) on (node local) [ 263.211505][T10037] loop0: detected capacity change from 0 to 4096 [ 263.219344][T10037] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 263.448238][T10047] loop2: detected capacity change from 0 to 256 [ 263.532153][T10003] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.539271][T10003] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.577557][T10003] device bridge_slave_0 entered promiscuous mode [ 263.670720][T10003] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.683030][T10003] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.713104][T10003] device bridge_slave_1 entered promiscuous mode [ 263.780650][T10055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2150'. [ 263.791424][T10055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2150'. [ 263.925996][T10003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.948168][T10061] loop4: detected capacity change from 0 to 2048 [ 263.959586][T10061] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 264.023298][T10063] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 264.128405][T10003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.139690][T10065] loop2: detected capacity change from 0 to 512 [ 264.152276][ T3651] Bluetooth: hci0: command tx timeout [ 264.192657][T10065] EXT4-fs: Ignoring removed orlov option [ 264.325552][T10065] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.2155: Failed to acquire dquot type 0 [ 264.358124][T10003] team0: Port device team_slave_0 added [ 264.372448][T10065] EXT4-fs (loop2): Remounting filesystem read-only [ 264.379155][T10065] EXT4-fs (loop2): 1 orphan inode deleted [ 264.392381][T10003] team0: Port device team_slave_1 added [ 264.393709][T10065] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 264.426618][T10065] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038 (0x7fffffff) [ 264.628455][T10084] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2158'. [ 264.640310][ T3641] EXT4-fs (loop2): unmounting filesystem. [ 264.681827][T10084] netlink: 'syz.4.2158': attribute type 2 has an invalid length. [ 264.809424][T10003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.864891][T10003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.948284][T10003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.020914][T10003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.046633][T10003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.130449][T10003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.174651][ T3650] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 265.185471][ T3650] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 265.193950][ T3650] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 265.211450][ T3650] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 265.219686][ T3650] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 265.238833][ T3650] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 265.566796][ T11] device hsr_slave_0 left promiscuous mode [ 265.622025][ T11] device hsr_slave_1 left promiscuous mode [ 265.629357][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.649215][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.667624][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.678339][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.703081][ T11] device bridge_slave_1 left promiscuous mode [ 265.709325][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.761500][ T11] device bridge_slave_0 left promiscuous mode [ 265.769645][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.805183][ T11] device veth1_macvtap left promiscuous mode [ 265.811254][ T11] device veth0_macvtap left promiscuous mode [ 265.817424][ T11] device veth1_vlan left promiscuous mode [ 265.825534][ T11] device veth0_vlan left promiscuous mode [ 265.969320][ T11] team0 (unregistering): Port device bridge1 removed [ 266.005284][T10118] loop3: detected capacity change from 0 to 40427 [ 266.017364][T10118] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 266.026786][T10118] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 266.052075][T10118] F2FS-fs (loop3): Found nat_bits in checkpoint [ 266.111784][T10118] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 266.120629][T10118] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 266.210946][ T3644] syz-executor: attempt to access beyond end of device [ 266.210946][ T3644] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 266.232138][ T3651] Bluetooth: hci0: command tx timeout [ 266.373737][T10131] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2175'. [ 266.996333][T10138] loop4: detected capacity change from 0 to 32768 [ 267.003808][ T11] team0 (unregistering): Port device team_slave_1 removed [ 267.028460][T10138] JBD2: Ignoring recovery information on journal [ 267.091533][T10138] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 267.094075][ T11] team0 (unregistering): Port device team_slave_0 removed [ 267.166321][T10138] (syz.4.2179,10138,0):ocfs2_group_extend:306 ERROR: The disk is too old and small. Force to do offline resize. [ 267.192284][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.214400][ T8318] ocfs2: Unmounting device (7,4) on (node local) [ 267.273234][ T3651] Bluetooth: hci1: command tx timeout [ 267.299415][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.408843][T10147] loop4: detected capacity change from 0 to 2048 [ 267.450917][T10148] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 267.876962][ T4853] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 267.928414][ T11] bond0 (unregistering): Released all slaves [ 268.014297][T10003] device hsr_slave_0 entered promiscuous mode [ 268.020886][T10003] device hsr_slave_1 entered promiscuous mode [ 268.027512][T10003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.035177][T10003] Cannot create hsr debugfs directory [ 268.041225][T10143] tipc: Enabling of bearer rejected, failed to enable media [ 268.262334][ T4853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.284829][ T4853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.302138][ T3651] Bluetooth: hci0: command tx timeout [ 268.316832][ T4853] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 268.337003][ T4853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.391085][ T4853] usb 5-1: config 0 descriptor?? [ 268.463937][T10102] chnl_net:caif_netlink_parms(): no params data found [ 268.695394][T10102] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.707184][T10102] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.715503][T10102] device bridge_slave_0 entered promiscuous mode [ 268.732771][T10102] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.740036][T10102] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.753681][T10102] device bridge_slave_1 entered promiscuous mode [ 268.822488][T10102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.841376][T10102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.883802][ T4853] microsoft 0003:045E:009D.002E: unbalanced delimiter at end of report description [ 268.895380][T10102] team0: Port device team_slave_0 added [ 268.909328][ T4853] microsoft 0003:045E:009D.002E: parse failed [ 268.915671][ T4853] microsoft: probe of 0003:045E:009D.002E failed with error -22 [ 268.964132][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.984235][T10102] team0: Port device team_slave_1 added [ 269.005554][T10102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.017614][T10102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.044344][T10102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.056745][T10102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.063781][T10102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.090407][T10102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.109007][ T4853] usb 5-1: USB disconnect, device number 17 [ 269.138560][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.204408][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.247090][T10102] device hsr_slave_0 entered promiscuous mode [ 269.254351][T10102] device hsr_slave_1 entered promiscuous mode [ 269.260770][T10102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.268949][T10102] Cannot create hsr debugfs directory [ 269.306741][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.320150][T10003] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 269.330161][T10003] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 269.342349][ T3651] Bluetooth: hci1: command tx timeout [ 269.357047][T10003] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 269.392111][T10003] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 269.612905][ T11] tipc: Disabling bearer [ 269.634864][ T11] tipc: Left network mode [ 269.755282][T10003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.785530][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.795871][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.807753][T10003] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.834786][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.844287][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.856608][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.863745][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.922189][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.930223][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.940596][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.954216][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.961306][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.970060][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.978908][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.988180][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.001383][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.044484][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.063169][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.083740][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.098605][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.108268][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.123317][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.131781][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.153849][T10003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.393485][ T3650] Bluetooth: hci0: command tx timeout [ 270.451516][T10003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.468824][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.476489][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.574533][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 270.590449][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.677127][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 270.696854][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.711861][T10003] device veth0_vlan entered promiscuous mode [ 270.740120][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 270.771575][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.786325][T10003] device veth1_vlan entered promiscuous mode [ 270.795095][T10102] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 270.882382][T10102] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 270.902138][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 270.923129][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 270.932937][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 270.941424][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 270.957934][T10003] device veth0_macvtap entered promiscuous mode [ 270.973178][T10102] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 270.994891][T10003] device veth1_macvtap entered promiscuous mode [ 271.014544][T10102] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 271.041320][ T11] device hsr_slave_0 left promiscuous mode [ 271.053261][ T11] device hsr_slave_1 left promiscuous mode [ 271.070323][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.078010][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.087080][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.094595][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.102313][ T11] device bridge_slave_1 left promiscuous mode [ 271.108524][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.117011][ T11] device bridge_slave_0 left promiscuous mode [ 271.124175][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.147424][ T11] device veth1_macvtap left promiscuous mode [ 271.153590][ T11] device veth0_macvtap left promiscuous mode [ 271.159627][ T11] device veth1_vlan left promiscuous mode [ 271.166012][ T11] device veth0_vlan left promiscuous mode [ 271.425314][ T3650] Bluetooth: hci1: command tx timeout [ 271.593671][ T11] team0 (unregistering): Port device team_slave_1 removed [ 271.635936][ T11] team0 (unregistering): Port device team_slave_0 removed [ 271.674805][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.715153][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.138069][ T11] bond0 (unregistering): Released all slaves [ 272.221014][T10003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.232137][T10003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.243104][T10003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.254511][T10003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.264592][T10003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.278507][T10003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.290116][T10003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.311474][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.319815][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 272.327746][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.336446][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.367119][T10003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.377996][T10003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.388531][T10003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.399495][T10003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.409512][T10003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.420022][T10003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.445507][T10003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.453051][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.463097][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.486408][T10003] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.497660][T10003] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.507413][T10003] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.518973][T10003] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.667528][T10102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.688785][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.698150][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.712270][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.720481][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.730041][T10102] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.748341][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 272.766197][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.775185][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.784172][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.791233][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.799384][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.830341][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.839406][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.848891][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.857442][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.871018][ T3722] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.878197][ T3722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.887171][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.896234][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.905245][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.914171][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.922977][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.931370][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.940187][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.948811][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.957281][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.966760][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.977276][T10102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.988614][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 272.996747][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.341289][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.352537][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.364916][T10102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.388838][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.412612][ T3682] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 273.412874][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.448684][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.458315][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.479722][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.502585][ T3650] Bluetooth: hci1: command tx timeout [ 273.509718][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.518696][T10102] device veth0_vlan entered promiscuous mode [ 273.533921][T10220] loop2: detected capacity change from 0 to 32768 [ 273.538938][T10102] device veth1_vlan entered promiscuous mode [ 273.554646][T10220] XFS (loop2): Mounting V5 Filesystem [ 273.568009][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 273.578036][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 273.588149][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.597149][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.608986][T10102] device veth0_macvtap entered promiscuous mode [ 273.628299][T10102] device veth1_macvtap entered promiscuous mode [ 273.638836][T10220] XFS (loop2): Ending clean mount [ 273.648684][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.659555][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.664595][ T3682] usb 2-1: Using ep0 maxpacket: 16 [ 273.670825][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.696128][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.718707][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.729568][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.739914][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.750484][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.760712][ T3641] XFS (loop2): Unmounting Filesystem [ 273.769915][T10102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.780945][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 273.806349][ T3682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.817722][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 273.825683][ T3682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.834941][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.836113][ T3682] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 273.847638][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.852920][ T3682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.870022][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.886281][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.889776][ T3682] usb 2-1: config 0 descriptor?? [ 273.897838][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.912810][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.923071][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.934376][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.944427][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.955359][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.966572][T10102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.979099][T10102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.993077][T10102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.001750][T10102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.014301][T10102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.043343][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 274.051826][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 274.181614][ T3722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.200059][ T3722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.226943][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 274.262684][ T7039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.270948][ T7039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.283712][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 274.373742][ T3682] hkems 0003:2006:0118.002F: unknown main item tag 0x2 [ 274.380696][ T3682] hkems 0003:2006:0118.002F: unknown main item tag 0x0 [ 274.410852][ T3682] hkems 0003:2006:0118.002F: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.1-1/input0 [ 274.447850][ T3682] hkems 0003:2006:0118.002F: no inputs found [ 274.474095][ T3682] hkems 0003:2006:0118.002F: force feedback init failed [ 274.615712][T10250] loop4: detected capacity change from 0 to 256 [ 274.688706][ T3682] usb 2-1: USB disconnect, device number 26 [ 274.719205][T10250] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 275.251388][T10275] loop4: detected capacity change from 0 to 256 [ 275.571598][T10289] loop0: detected capacity change from 0 to 256 [ 275.628419][T10289] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 275.869502][T10298] loop2: detected capacity change from 0 to 256 [ 275.982410][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 276.001008][T10298] FAT-fs (loop2): Directory bread(block 64) failed [ 276.044129][T10298] FAT-fs (loop2): Directory bread(block 65) failed [ 276.051123][T10298] FAT-fs (loop2): Directory bread(block 66) failed [ 276.082309][T10298] FAT-fs (loop2): Directory bread(block 67) failed [ 276.088949][T10298] FAT-fs (loop2): Directory bread(block 68) failed [ 276.125125][T10298] FAT-fs (loop2): Directory bread(block 69) failed [ 276.192211][ T4853] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 276.238585][T10298] FAT-fs (loop2): Directory bread(block 70) failed [ 276.282784][T10298] FAT-fs (loop2): Directory bread(block 71) failed [ 276.318636][T10298] FAT-fs (loop2): Directory bread(block 72) failed [ 276.362134][T10298] FAT-fs (loop2): Directory bread(block 73) failed [ 276.452082][ T4853] usb 4-1: Using ep0 maxpacket: 8 [ 276.541470][T10320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.573386][ T4853] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 276.582123][ T4853] usb 4-1: config 150 has no interface number 0 [ 276.588409][ T4853] usb 4-1: config 150 interface 204 has no altsetting 0 [ 276.612161][ T4853] usb 4-1: config 150 interface 1 has no altsetting 0 [ 276.782618][ T4853] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 276.803184][ T4853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.823045][ T4853] usb 4-1: Product: syz [ 276.837552][ T4853] usb 4-1: Manufacturer: syz [ 276.847873][ T4853] usb 4-1: SerialNumber: syz [ 277.097696][ T3684] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 277.133364][ T4853] xr_serial 4-1:150.204: xr_serial converter detected [ 277.352039][ T3684] usb 3-1: Using ep0 maxpacket: 16 [ 277.466434][T10327] loop0: detected capacity change from 0 to 40427 [ 277.472308][ T3684] usb 3-1: config 0 has no interfaces? [ 277.529562][T10327] F2FS-fs (loop0): invalid crc value [ 277.562053][ T4853] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 277.568983][ T4853] xr_serial: probe of ttyUSB0 failed with error -71 [ 277.594452][T10327] F2FS-fs (loop0): Found nat_bits in checkpoint [ 277.622636][ T4853] usb 4-1: USB disconnect, device number 14 [ 277.629549][ T4853] xr_serial 4-1:150.204: device disconnected [ 277.632218][ T3684] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 277.672256][ T3684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.727289][ T3684] usb 3-1: Product: syz [ 277.731486][ T3684] usb 3-1: Manufacturer: syz [ 277.733910][T10327] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 277.769462][ T3684] usb 3-1: SerialNumber: syz [ 277.782012][T10327] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 277.790189][ T3684] r8152-cfgselector 3-1: config 0 descriptor?? [ 277.847179][T10327] syz.0.2229: attempt to access beyond end of device [ 277.847179][T10327] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 278.114755][ T3684] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 278.197132][T10341] loop1: detected capacity change from 0 to 32768 [ 278.257553][T10341] XFS (loop1): Mounting V5 Filesystem [ 278.352328][T10349] loop4: detected capacity change from 0 to 32768 [ 278.359416][T10349] XFS: attr2 mount option is deprecated. [ 278.369410][T10349] XFS (loop4): Mounting V5 Filesystem [ 278.399574][ T3684] usb 3-1: USB disconnect, device number 14 [ 278.423469][T10341] XFS (loop1): Ending clean mount [ 278.438224][T10341] XFS (loop1): Quotacheck needed: Please wait. [ 278.508240][T10349] XFS (loop4): Ending clean mount [ 278.531414][T10349] XFS (loop4): Quotacheck needed: Please wait. [ 278.544760][T10341] XFS (loop1): Quotacheck: Done. [ 278.626380][T10349] XFS (loop4): Quotacheck: Done. [ 278.696843][T10379] loop0: detected capacity change from 0 to 256 [ 278.721890][T10003] XFS (loop1): Unmounting Filesystem [ 278.762532][ T8318] XFS (loop4): Unmounting Filesystem [ 279.325767][T10391] loop3: detected capacity change from 0 to 4096 [ 279.399327][T10396] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 279.442016][ T4853] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 279.471311][T10395] loop0: detected capacity change from 0 to 2048 [ 279.512606][T10395] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 279.600015][T10401] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 279.644083][T10395] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=32, inode=11, rec_len=24, name_len=139 [ 279.694161][T10395] Remounting filesystem read-only [ 279.711999][ T4853] usb 3-1: Using ep0 maxpacket: 8 [ 279.743795][T10408] NILFS (loop0): mounting fs with errors [ 279.825798][T10407] loop3: detected capacity change from 0 to 4096 [ 279.842305][ T4853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.850352][T10407] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 279.902399][ T4853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.936224][ T4853] usb 3-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 279.958880][ T4853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.971214][T10416] tipc: Started in network mode [ 279.985794][ T4853] usb 3-1: config 0 descriptor?? [ 280.005102][T10416] tipc: Node identity 00000000000000000000ffffffe00001, cluster identity 4711 [ 280.019114][T10416] tipc: Enabling of bearer rejected, failed to enable media [ 280.127930][T10422] loop1: detected capacity change from 0 to 512 [ 280.180498][T10422] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 280.205480][T10424] device sit0 entered promiscuous mode [ 280.218896][T10424] netlink: 'syz.3.2256': attribute type 1 has an invalid length. [ 280.246701][T10424] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2256'. [ 280.251494][T10422] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 280.298126][T10422] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038 (0x7fffffff) [ 280.409729][T10434] loop3: detected capacity change from 0 to 1024 [ 280.412515][T10003] EXT4-fs (loop1): unmounting filesystem. [ 280.475309][ T4853] wacom 0003:056A:003F.0030: unknown main item tag 0x0 [ 280.508479][ T4853] wacom 0003:056A:003F.0030: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.2-1/input0 [ 280.573272][ T3722] hfsplus: b-tree write err: -5, ino 4 [ 280.580936][T10437] loop1: detected capacity change from 0 to 1024 [ 280.618201][T10437] hfsplus: bad catalog entry type [ 280.691368][ T945] usb 3-1: USB disconnect, device number 15 [ 280.723780][ T7039] hfsplus: b-tree write err: -5, ino 4 [ 281.314024][T10457] loop3: detected capacity change from 0 to 1024 [ 281.609367][T10450] loop1: detected capacity change from 0 to 32768 [ 281.621879][T10471] loop4: detected capacity change from 0 to 64 [ 281.643101][T10450] XFS: attr2 mount option is deprecated. [ 281.652425][T10450] XFS: ikeep mount option is deprecated. [ 281.660091][T10450] XFS: noikeep mount option is deprecated. [ 281.706789][T10450] XFS (loop1): Mounting V5 Filesystem [ 281.824720][T10450] XFS (loop1): Ending clean mount [ 281.853617][T10450] XFS (loop1): Quotacheck needed: Please wait. [ 281.898030][ T4772] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 281.943866][T10450] XFS (loop1): Quotacheck: Done. [ 282.058516][T10003] XFS (loop1): Unmounting Filesystem [ 282.153067][ T4772] usb 3-1: Using ep0 maxpacket: 32 [ 282.272352][ T4772] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 282.298750][ T4772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.320008][ T4772] usb 3-1: config 0 descriptor?? [ 282.355861][T10496] loop4: detected capacity change from 0 to 512 [ 282.374772][ T4772] gspca_main: sq930x-2.14.0 probing 041e:403c [ 282.394289][T10496] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 282.447397][ T8318] EXT4-fs (loop4): unmounting filesystem. [ 282.454148][T10486] loop3: detected capacity change from 0 to 32768 [ 282.475695][T10486] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2279 (10486) [ 282.528951][T10486] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 282.554600][T10486] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 282.583700][T10502] loop4: detected capacity change from 0 to 24 [ 282.590030][T10486] BTRFS info (device loop3): using free space tree [ 282.734854][T10486] BTRFS info (device loop3): enabling ssd optimizations [ 282.800317][ T3644] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 282.905973][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.064171][ T4772] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 283.070187][ T4772] sq930x: probe of 3-1:0.0 failed with error -71 [ 283.097605][ T4772] usb 3-1: USB disconnect, device number 16 [ 283.515857][T10538] loop0: detected capacity change from 0 to 2048 [ 283.556530][T10538] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 283.628846][T10538] syz.0.2294: attempt to access beyond end of device [ 283.628846][T10538] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 283.648492][T10542] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 283.787512][T10528] loop4: detected capacity change from 0 to 32768 [ 284.138076][T10532] loop3: detected capacity change from 0 to 32768 [ 284.224506][T10532] XFS (loop3): Mounting V5 Filesystem [ 284.275082][T10555] loop0: detected capacity change from 0 to 4096 [ 284.480210][T10532] XFS (loop3): Ending clean mount [ 284.504245][T10532] XFS (loop3): Quotacheck needed: Please wait. [ 284.635364][T10532] XFS (loop3): Quotacheck: Done. [ 284.683559][T10571] loop0: detected capacity change from 0 to 64 [ 284.701526][T10571] hfs: unable to locate alternate MDB [ 284.711683][T10571] hfs: continuing without an alternate MDB [ 284.735547][T10532] xfs: Unknown parameter 'noblock_validity' [ 284.834065][ T3644] XFS (loop3): Unmounting Filesystem [ 284.892300][ T4853] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 284.893165][T10549] loop2: detected capacity change from 0 to 32768 [ 284.949566][T10553] loop1: detected capacity change from 0 to 32768 [ 284.988492][T10553] gfs2: fsid=_dev_net_tun: Trying to join cluster "lock_nolock", "_dev_net_tun" [ 285.012472][T10553] gfs2: fsid=_dev_net_tun: Now mounting FS (format 1801)... [ 285.036398][T10553] gfs2: fsid=_dev_net_tun.0: journal 0 mapped with 16 extents in 0ms [ 285.047044][ T5055] gfs2: fsid=_dev_net_tun.0: jid=0, already locked for use [ 285.054576][T10549] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 285.070614][ T5055] gfs2: fsid=_dev_net_tun.0: jid=0: Looking at journal... [ 285.129036][ T5055] gfs2: fsid=_dev_net_tun.0: jid=0: Journal head lookup took 58ms [ 285.132940][ T3641] ocfs2: Unmounting device (7,2) on (node local) [ 285.137185][ T5055] gfs2: fsid=_dev_net_tun.0: jid=0: Done [ 285.149036][T10553] gfs2: fsid=_dev_net_tun.0: first mount done, others may mount [ 285.290491][ T4853] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 285.301604][ T4853] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 285.312074][ T4853] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 285.321132][ T4853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.391048][T10569] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 285.566384][T10584] loop2: detected capacity change from 0 to 16 [ 285.608043][T10584] erofs: (device loop2): mounted with root inode @ nid 36. [ 285.619232][T10586] loop0: detected capacity change from 0 to 2048 [ 285.640614][T10584] syz.2.2310: attempt to access beyond end of device [ 285.640614][T10584] loop2: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 285.698933][T10584] syz.2.2310: attempt to access beyond end of device [ 285.698933][T10584] loop2: rw=524288, sector=304, nr_sectors = 16 limit=16 [ 285.713894][T10589] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.746786][T10586] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=1023, name_len=0 [ 285.818794][T10586] Remounting filesystem read-only [ 285.882020][ T4772] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 286.053057][ T4853] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 286.216278][ T3680] usb 5-1: USB disconnect, device number 18 [ 286.242293][ T4772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.262921][ T4772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.285515][T10595] loop2: detected capacity change from 0 to 32768 [ 286.293819][ T4772] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 286.305358][T10605] loop0: detected capacity change from 0 to 64 [ 286.312714][ T4772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.333837][T10595] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2316 (10595) [ 286.355865][T10595] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 286.369220][ T4772] usb 4-1: config 0 descriptor?? [ 286.372389][T10595] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 286.390396][T10595] BTRFS info (device loop2): setting nodatacow, compression disabled [ 286.398694][T10595] BTRFS info (device loop2): setting datacow [ 286.411006][T10595] BTRFS info (device loop2): doing ref verification [ 286.429647][T10595] BTRFS info (device loop2): setting nodatacow, compression disabled [ 286.439231][T10595] BTRFS info (device loop2): turning off barriers [ 286.446379][ T4853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 286.457732][T10595] BTRFS info (device loop2): enabling ssd optimizations [ 286.474377][ T4853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 286.495998][T10595] BTRFS info (device loop2): using spread ssd allocation scheme [ 286.508762][T10595] BTRFS info (device loop2): not using ssd optimizations [ 286.516161][ T4853] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 286.535072][T10595] BTRFS info (device loop2): not using spread ssd allocation scheme [ 286.543570][ T4853] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 286.552953][T10595] BTRFS info (device loop2): using free space tree [ 286.560175][ T4853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.577020][ T4853] usb 2-1: config 0 descriptor?? [ 286.602257][T10591] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 286.876670][ T4772] kye 0003:0458:5015.0031: hidraw0: USB HID v0.00 Device [HID 0458:5015] on usb-dummy_hcd.3-1/input0 [ 286.906305][ T4772] kye 0003:0458:5015.0031: tablet-enabling feature report not found [ 286.916842][ T4772] kye 0003:0458:5015.0031: tablet enabling failed [ 286.957269][ T3641] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 287.083942][ T4853] aureal 0003:0755:2626.0032: unknown main item tag 0x6 [ 287.090940][ T4853] aureal 0003:0755:2626.0032: report_id 29495 is invalid [ 287.132573][ T4853] aureal 0003:0755:2626.0032: item 0 2 1 8 parsing failed [ 287.162735][ T4853] aureal: probe of 0003:0755:2626.0032 failed with error -22 [ 287.255322][ T4770] usb 4-1: USB disconnect, device number 15 [ 287.284389][T10640] loop0: detected capacity change from 0 to 2048 [ 287.308325][ T14] usb 2-1: USB disconnect, device number 27 [ 287.335660][T10643] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.672943][T10641] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 287.937540][T10641] usb 5-1: Using ep0 maxpacket: 16 [ 287.956175][T10668] loop3: detected capacity change from 0 to 4096 [ 288.062220][T10641] usb 5-1: config 0 has no interfaces? [ 288.225161][T10641] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 288.240479][T10641] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.257828][T10641] usb 5-1: Product: syz [ 288.276524][T10641] usb 5-1: Manufacturer: syz [ 288.286135][T10641] usb 5-1: SerialNumber: syz [ 288.298831][T10641] r8152-cfgselector 5-1: config 0 descriptor?? [ 288.426634][T10693] loop1: detected capacity change from 0 to 512 [ 288.441215][T10693] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 288.452315][T10693] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 288.486969][T10693] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 288.495831][T10693] System zones: 0-2, 18-18, 34-34 [ 288.510104][T10693] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 288.533215][T10693] EXT4-fs (loop1): 1 truncate cleaned up [ 288.540682][T10693] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 288.562517][T10641] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 288.582442][ T11] usb 5-1: config 0 descriptor?? [ 288.636192][T10003] EXT4-fs (loop1): unmounting filesystem. [ 288.664005][ T5055] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 288.704437][T10701] loop1: detected capacity change from 0 to 8 [ 288.781397][ T4853] usb 5-1: USB disconnect, device number 19 [ 288.795080][ T11] usb 5-1: can't set config #0, error -71 [ 288.948742][T10707] loop1: detected capacity change from 0 to 1764 [ 289.042339][ T5055] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.076961][ T5055] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.097164][ T5055] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 289.111884][T10696] loop2: detected capacity change from 0 to 32768 [ 289.119355][ T5055] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.130151][ T5055] usb 4-1: config 0 descriptor?? [ 289.159000][T10696] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 289.159000][T10696] [ 289.170237][T10696] ERROR: (device loop2): remounting filesystem as read-only [ 289.182458][T10696] blkno = 0, nblocks = 1 [ 289.188637][T10696] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 289.188637][T10696] [ 289.202115][T10696] ialloc: diAlloc returned -5! [ 289.613707][ T5055] cm6533_jd 0003:0D8C:0022.0033: unknown main item tag 0x0 [ 289.637802][ T5055] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0033/input/input28 [ 289.713615][ T5055] cm6533_jd 0003:0D8C:0022.0033: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 289.805624][ T5055] usb 4-1: USB disconnect, device number 16 [ 289.920503][T10641] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 289.951474][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 289.951488][ T26] audit: type=1326 audit(1727463342.462:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.1.2366" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97b0b7dff9 code=0x0 [ 290.002087][ T14] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 290.172065][T10641] usb 5-1: Using ep0 maxpacket: 16 [ 290.292193][T10641] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.303389][T10641] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.316757][T10641] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 290.326059][T10641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.343394][T10641] usb 5-1: config 0 descriptor?? [ 290.522154][ T14] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 290.531344][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.539493][ T14] usb 3-1: Product: syz [ 290.543795][ T14] usb 3-1: Manufacturer: syz [ 290.548376][ T14] usb 3-1: SerialNumber: syz [ 290.592891][ T14] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 290.824931][T10641] cp2112 0003:10C4:EA90.0034: unbalanced delimiter at end of report description [ 290.838836][T10641] cp2112 0003:10C4:EA90.0034: parse failed [ 290.848411][T10641] cp2112: probe of 0003:10C4:EA90.0034 failed with error -22 [ 290.901708][T10730] loop1: detected capacity change from 0 to 256 [ 290.932601][T10730] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 291.030914][ T5055] usb 5-1: USB disconnect, device number 20 [ 291.166022][ T3684] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 291.327471][T10745] loop3: detected capacity change from 0 to 128 [ 291.383830][T10745] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 291.406122][T10745] ext4 filesystem being mounted at /513/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 291.513100][ T3644] EXT4-fs (loop3): unmounting filesystem. [ 291.602192][T10744] loop1: detected capacity change from 0 to 32768 [ 291.666786][T10744] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 291.774462][T10758] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 291.809500][ T4770] usb 3-1: USB disconnect, device number 17 [ 291.891553][T10003] ocfs2: Unmounting device (7,1) on (node local) [ 292.092051][ T5055] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 292.223804][ T3684] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 292.230843][ T3684] ath9k_htc: Failed to initialize the device [ 292.269329][ T4770] usb 3-1: ath9k_htc: USB layer deinitialized [ 292.460750][T10773] loop4: detected capacity change from 0 to 1024 [ 292.492064][ T5055] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 292.513924][ T5055] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 292.524196][T10773] hfsplus: bad catalog entry type [ 292.544474][ T5055] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 292.570432][ T5055] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.599792][ T3722] hfsplus: b-tree write err: -5, ino 4 [ 292.612354][T10760] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 292.749003][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2392'. [ 292.855481][ T26] audit: type=1326 audit(1727463345.372:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.4.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b8f7dff9 code=0x7ffc0000 [ 292.891094][ T26] audit: type=1326 audit(1727463345.402:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.4.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f60b8f7dff9 code=0x7ffc0000 [ 292.914323][ T26] audit: type=1326 audit(1727463345.402:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.4.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b8f7dff9 code=0x7ffc0000 [ 292.947062][ T26] audit: type=1326 audit(1727463345.402:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.4.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f60b8f7dff9 code=0x7ffc0000 [ 292.965938][T10768] loop1: detected capacity change from 0 to 32768 [ 292.982690][ T26] audit: type=1326 audit(1727463345.502:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.4.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b8f7dff9 code=0x7ffc0000 [ 293.040896][ T26] audit: type=1326 audit(1727463345.502:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.4.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b8f7dff9 code=0x7ffc0000 [ 293.071073][ T3684] usb 4-1: USB disconnect, device number 17 [ 293.096059][T10768] XFS (loop1): Mounting V5 Filesystem [ 293.132759][T10768] XFS (loop1): Ending clean mount [ 293.194979][T10003] XFS (loop1): Unmounting Filesystem [ 293.308865][ T5012] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 293.572056][ T5012] usb 3-1: Using ep0 maxpacket: 16 [ 293.692215][ T5012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.712334][ T5012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.742024][ T5012] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 293.757921][ T5012] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 293.777118][ T5012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.812790][ T5012] usb 3-1: config 0 descriptor?? [ 293.840913][T10812] loop1: detected capacity change from 0 to 64 [ 293.854201][T10798] loop4: detected capacity change from 0 to 32768 [ 293.889257][T10798] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 293.928179][T10798] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 293.971735][T10798] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 294.001155][ T3684] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 294.021704][T10816] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2407'. [ 294.023327][ T3684] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 294.091154][T10814] loop3: detected capacity change from 0 to 4096 [ 294.121737][ T3684] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 98ms [ 294.132459][ T3684] gfs2: fsid=syz:syz.0: jid=0: Done [ 294.138478][T10798] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 294.151572][T10814] NILFS (loop3): invalid segment: Checksum error in segment payload [ 294.167802][T10814] NILFS (loop3): trying rollback from an earlier position [ 294.187381][T10798] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 294.204970][T10798] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 294.204970][T10798] inode = 12 2341 [ 294.204970][T10798] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 294.228458][T10798] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 294.233205][T10814] NILFS (loop3): norecovery option specified, skipping roll-forward recovery [ 294.237575][T10798] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:10798 [syz.4.2399] __gfs2_lookup+0xa0/0x270 [ 294.257409][T10821] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 294.272150][T10798] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:10821 [syz.4.2399] __gfs2_lookup+0xa0/0x270 [ 294.274833][T10821] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 294.274833][T10821] inode = 12 2341 [ 294.274833][T10821] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 294.284686][T10798] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 294.311014][ T5012] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 294.314313][T10798] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 294.322715][ T5012] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 294.335456][T10821] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:4 m:20 p:1 [ 294.347524][ T5012] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 294.354971][T10821] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:10798 [syz.4.2399] __gfs2_lookup+0xa0/0x270 [ 294.358798][T10814] NILFS (loop3): couldn't remount because the filesystem is in an incomplete recovery state [ 294.371052][T10798] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 294.380895][ T5012] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 294.389789][T10821] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:10821 [syz.4.2399] __gfs2_lookup+0xa0/0x270 [ 294.401670][T10798] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 294.403605][ T5012] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 294.413343][T10821] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 294.415496][ T5012] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 294.427129][T10798] gfs2: fsid=syz:syz.0: File system withdrawn [ 294.447218][ T5012] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 294.465282][T10798] CPU: 0 PID: 10798 Comm: syz.4.2399 Not tainted 6.1.111-syzkaller #0 [ 294.465501][ T5012] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 294.473454][T10798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 294.473468][T10798] Call Trace: [ 294.473475][T10798] [ 294.473483][T10798] dump_stack_lvl+0x1e3/0x2cb [ 294.473522][T10798] ? nf_tcp_handle_invalid+0x642/0x642 [ 294.473546][T10798] ? panic+0x764/0x764 [ 294.473564][T10798] ? kobject_uevent_env+0x54a/0x8c0 [ 294.473594][T10798] gfs2_withdraw+0xfcb/0x1550 [ 294.473632][T10798] ? gfs2_lm+0x230/0x230 [ 294.473650][T10798] ? gfs2_dirent_scan+0x276/0x640 [ 294.473670][T10798] ? panic+0x764/0x764 [ 294.473695][T10798] ? gfs2_consist_inode_i+0xf1/0x110 [ 294.473722][T10798] gfs2_dirent_scan+0x512/0x640 [ 294.473745][T10798] ? gfs2_dirent_search+0x8c0/0x8c0 [ 294.473769][T10798] gfs2_dirent_search+0x30a/0x8c0 [ 294.473792][T10798] ? gfs2_dirent_search+0x8c0/0x8c0 [ 294.473810][T10798] ? inode_dio_wait+0x2a9/0x340 [ 294.473834][T10798] ? generic_permission+0x21c/0x4f0 [ 294.473856][T10798] ? gfs2_dir_search+0x2f0/0x2f0 [ 294.473874][T10798] ? gfs2_permission+0x401/0x4d0 [ 294.473904][T10798] gfs2_dir_search+0xae/0x2f0 [ 294.473927][T10798] ? do_filldir_main+0x520/0x520 [ 294.473946][T10798] ? inode_go_held+0xe6/0x1f0 [ 294.473966][T10798] ? gfs2_glock_wait+0x216/0x2a0 [ 294.473992][T10798] gfs2_lookupi+0x45f/0x5e0 [ 294.474025][T10798] ? gfs2_lookup_simple+0x170/0x170 [ 294.474052][T10798] ? __gfs2_lookup+0xa0/0x270 [ 294.474074][T10798] ? __d_lookup+0x8b/0x790 [ 294.474102][T10798] __gfs2_lookup+0xa0/0x270 [ 294.482346][ T5012] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 294.491317][T10798] ? gfs2_atomic_open+0x220/0x220 [ 294.495186][ T5012] microsoft 0003:045E:07DA.0035: No inputs registered, leaving [ 294.497494][T10798] ? __d_lookup+0x6d6/0x790 [ 294.528629][ T5012] microsoft 0003:045E:07DA.0035: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 294.530687][T10798] gfs2_atomic_open+0x9a/0x220 [ 294.535665][ T5012] microsoft 0003:045E:07DA.0035: no inputs found [ 294.539987][T10798] path_openat+0xf4e/0x2e60 [ 294.544888][ T5012] microsoft 0003:045E:07DA.0035: could not initialize ff, continuing anyway [ 294.549986][T10798] ? gfs2_rename2+0x25a0/0x25a0 [ 294.686794][T10798] ? do_filp_open+0x480/0x480 [ 294.691490][T10798] do_filp_open+0x230/0x480 [ 294.695993][T10798] ? vfs_tmpfile+0x4a0/0x4a0 [ 294.700590][T10798] ? _raw_spin_unlock+0x24/0x40 [ 294.705433][T10798] ? alloc_fd+0x5a0/0x640 [ 294.709757][T10798] do_sys_openat2+0x13b/0x4f0 [ 294.714434][T10798] ? do_sys_open+0x220/0x220 [ 294.719025][T10798] ? blkcg_maybe_throttle_current+0x1ac/0xa30 [ 294.725093][T10798] __x64_sys_openat+0x243/0x290 [ 294.729941][T10798] ? __ia32_sys_open+0x270/0x270 [ 294.734877][T10798] ? syscall_enter_from_user_mode+0x2e/0x230 [ 294.740848][T10798] ? lockdep_hardirqs_on+0x94/0x130 [ 294.746039][T10798] ? syscall_enter_from_user_mode+0x2e/0x230 [ 294.752014][T10798] do_syscall_64+0x3b/0xb0 [ 294.756423][T10798] ? clear_bhb_loop+0x45/0xa0 [ 294.761091][T10798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.766976][T10798] RIP: 0033:0x7f60b8f7dff9 [ 294.771381][T10798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.790979][T10798] RSP: 002b:00007f60b9d35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 294.799385][T10798] RAX: ffffffffffffffda RBX: 00007f60b9135f80 RCX: 00007f60b8f7dff9 [ 294.807345][T10798] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 294.815304][T10798] RBP: 00007f60b8ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 294.823262][T10798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.831222][T10798] R13: 0000000000000000 R14: 00007f60b9135f80 R15: 00007ffcb2aa4d98 [ 294.839196][T10798] [ 294.873461][ T5012] usb 3-1: USB disconnect, device number 18 [ 294.992769][T10823] loop1: detected capacity change from 0 to 4096 [ 295.025302][T10823] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 295.832126][T10844] loop2: detected capacity change from 0 to 512 [ 295.878396][T10845] tipc: Started in network mode [ 295.887043][T10845] tipc: Node identity 2d5f14aa, cluster identity 4711 [ 295.910065][T10844] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 295.940115][T10844] ext4 filesystem being mounted at /512/file0 supports timestamps until 2038 (0x7fffffff) [ 295.968347][T10845] tipc: Enabling of bearer rejected, failed to enable media [ 296.057025][T10844] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 296.078645][T10844] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 296.089732][T10844] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.2421: Failed to acquire dquot type 0 [ 296.134548][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2423'. [ 296.169485][ T3641] EXT4-fs (loop2): unmounting filesystem. [ 296.296938][T10833] loop4: detected capacity change from 0 to 32768 [ 296.324395][T10833] XFS (loop4): Mounting V5 Filesystem [ 296.361718][T10868] loop3: detected capacity change from 0 to 1024 [ 296.380535][T10833] XFS (loop4): Ending clean mount [ 296.395150][T10833] XFS (loop4): Quotacheck needed: Please wait. [ 296.437346][T10833] XFS (loop4): Quotacheck: Done. [ 296.441586][T10868] hfsplus: small dir entry [ 296.535826][T10872] loop3: detected capacity change from 0 to 24 [ 296.540338][ T8318] XFS (loop4): Unmounting Filesystem [ 296.547472][ T5012] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 296.937421][ T5012] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 296.968729][ T5012] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 296.985543][ T5012] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 297.002379][ T5012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.011006][T10885] loop4: detected capacity change from 0 to 64 [ 297.032275][T10857] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 297.553777][T10904] loop0: detected capacity change from 0 to 64 [ 297.662167][ T5012] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 297.766093][T10641] usb 3-1: USB disconnect, device number 19 [ 297.904344][T10911] loop3: detected capacity change from 0 to 4096 [ 297.914061][ T5012] usb 5-1: Using ep0 maxpacket: 32 [ 297.959233][T10911] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 297.987487][T10911] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 297.997316][T10911] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 298.019950][T10911] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 298.032066][T10911] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 298.055632][T10911] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 298.062239][ T5012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.067622][T10911] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 298.085441][ T5012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.106422][T10911] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 298.121965][ T5012] usb 5-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 298.122453][T10911] ntfs: volume version 3.1. [ 298.141216][ T5012] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.173725][ T5012] usb 5-1: config 0 descriptor?? [ 298.242344][T10909] loop0: detected capacity change from 0 to 32768 [ 298.253037][T10909] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2446 (10909) [ 298.269083][T10909] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 298.279819][T10909] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 298.316127][T10909] BTRFS info (device loop0): using free space tree [ 298.466834][T10909] BTRFS info (device loop0): enabling ssd optimizations [ 298.576283][T10939] loop1: detected capacity change from 0 to 128 [ 298.604851][T10102] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 298.644435][T10942] loop2: detected capacity change from 0 to 1024 [ 298.648970][T10939] syz.1.2452: attempt to access beyond end of device [ 298.648970][T10939] loop1: rw=2051, sector=96, nr_sectors = 287 limit=128 [ 298.668104][ T5012] nzxt-smart2 0003:1E71:200F.0036: unknown main item tag 0xe [ 298.679267][T10942] EXT4-fs: Ignoring removed orlov option [ 298.684791][ T5012] nzxt-smart2 0003:1E71:200F.0036: hidraw0: USB HID v0.00 Device [HID 1e71:200f] on usb-dummy_hcd.4-1/input0 [ 298.706774][T10942] EXT4-fs (loop2): Test dummy encryption mode enabled [ 298.781361][T10942] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 298.816051][T10946] loop3: detected capacity change from 0 to 256 [ 298.943307][ T5012] usb 5-1: USB disconnect, device number 21 [ 299.006586][T10948] loop1: detected capacity change from 0 to 4096 [ 299.052121][T10948] NILFS (loop1): invalid segment: Checksum error in segment payload [ 299.052118][T10946] FAT-fs (loop3): Directory bread(block 64) failed [ 299.052159][T10946] FAT-fs (loop3): Directory bread(block 65) failed [ 299.102742][T10948] NILFS (loop1): trying rollback from an earlier position [ 299.120971][T10946] FAT-fs (loop3): Directory bread(block 66) failed [ 299.131856][T10946] FAT-fs (loop3): Directory bread(block 67) failed [ 299.134029][ T3641] EXT4-fs (loop2): unmounting filesystem. [ 299.143998][T10946] FAT-fs (loop3): Directory bread(block 68) failed [ 299.150685][T10946] FAT-fs (loop3): Directory bread(block 69) failed [ 299.178377][T10946] FAT-fs (loop3): Directory bread(block 70) failed [ 299.178552][T10948] NILFS (loop1): norecovery option specified, skipping roll-forward recovery [ 299.186961][T10946] FAT-fs (loop3): Directory bread(block 71) failed [ 299.223713][T10946] FAT-fs (loop3): Directory bread(block 72) failed [ 299.230865][T10946] FAT-fs (loop3): Directory bread(block 73) failed [ 299.323732][T10948] NILFS (loop1): couldn't remount because the filesystem is in an incomplete recovery state [ 299.325577][T10952] loop0: detected capacity change from 0 to 2048 [ 299.408327][T10952] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 299.613721][T10958] loop1: detected capacity change from 0 to 1024 [ 299.752236][ T5012] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 299.781525][ T2526] hfsplus: b-tree write err: -5, ino 4 [ 299.814090][T10965] loop4: detected capacity change from 0 to 64 [ 300.142171][ T5012] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 300.154906][ T5012] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 300.191996][ T5012] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 300.213580][T10968] loop1: detected capacity change from 0 to 8192 [ 300.231465][ T5012] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.252456][T10968] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 300.292326][T10956] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 300.317891][T10981] loop0: detected capacity change from 0 to 4096 [ 300.328498][T10981] NILFS (loop0): invalid segment: Checksum error in segment payload [ 300.336951][T10981] NILFS (loop0): trying rollback from an earlier position [ 300.349207][T10981] NILFS (loop0): norecovery option specified, skipping roll-forward recovery [ 300.372161][T10968] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 300.390946][T10968] REISERFS (device loop1): using ordered data mode [ 300.399675][T10968] reiserfs: using flush barriers [ 300.400928][T10981] NILFS (loop0): couldn't remount because the filesystem is in an incomplete recovery state [ 300.416626][T10968] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 300.438718][T10968] REISERFS (device loop1): checking transaction log (loop1) [ 300.509972][T10985] loop4: detected capacity change from 0 to 1024 [ 300.520423][T10968] REISERFS (device loop1): Using r5 hash to sort names [ 300.534825][T10968] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 300.577396][T10985] hfsplus: bad catalog entry type [ 300.589379][T10968] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 300.659128][ T7039] hfsplus: b-tree write err: -5, ino 4 [ 300.738862][T10989] loop4: detected capacity change from 0 to 256 [ 300.849477][T10989] exfat: Deprecated parameter 'namecase' [ 300.917248][T10989] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf794f3fa, utbl_chksum : 0xe619d30d) [ 301.052847][ T4853] usb 4-1: USB disconnect, device number 18 [ 301.114912][T11001] trusted_key: encrypted_key: key user:syz not found [ 301.268096][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2483'. [ 301.446289][T10993] loop0: detected capacity change from 0 to 32768 [ 301.498511][T10993] JBD2: Ignoring recovery information on journal [ 301.512236][ T5012] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 301.609894][T11021] autofs4:pid:11021:autofs_fill_super: pipe file descriptor does not contain proper ops [ 301.661025][T10993] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 301.861162][T10102] ocfs2: Unmounting device (7,0) on (node local) [ 301.885277][ T5012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.919580][ T5012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.948237][ T5012] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 301.972352][ T5012] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.014895][ T5012] usb 5-1: config 0 descriptor?? [ 302.063166][T11040] [ 302.065519][T11040] ====================================================== [ 302.072536][T11040] WARNING: possible circular locking dependency detected [ 302.079556][T11040] 6.1.111-syzkaller #0 Not tainted [ 302.084662][T11040] ------------------------------------------------------ [ 302.091684][T11040] syz.3.2498/11040 is trying to acquire lock: [ 302.097750][T11040] ffff88807576f130 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x57/0x300 [ 302.109254][T11040] [ 302.109254][T11040] but task is already holding lock: [ 302.116619][T11040] ffff88805bcacd28 (&d->lock#2){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x259/0x6d0 [ 302.125715][T11040] [ 302.125715][T11040] which lock already depends on the new lock. [ 302.125715][T11040] [ 302.136109][T11040] [ 302.136109][T11040] the existing dependency chain (in reverse order) is: [ 302.145100][T11040] [ 302.145100][T11040] -> #3 (&d->lock#2){+.+.}-{3:3}: [ 302.152290][T11040] lock_acquire+0x1f8/0x5a0 [ 302.157300][T11040] __mutex_lock+0x132/0xd80 [ 302.162303][T11040] __rfcomm_dlc_close+0x259/0x6d0 [ 302.167831][T11040] rfcomm_dlc_close+0xed/0x180 [ 302.173109][T11040] __rfcomm_sock_close+0x104/0x220 [ 302.178752][T11040] rfcomm_sock_shutdown+0xb4/0x230 [ 302.184391][T11040] __se_sys_shutdown+0x147/0x1a0 [ 302.189862][T11040] do_syscall_64+0x3b/0xb0 [ 302.194801][T11040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.201200][T11040] [ 302.201200][T11040] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 302.208558][T11040] lock_acquire+0x1f8/0x5a0 [ 302.213567][T11040] __mutex_lock+0x132/0xd80 [ 302.218572][T11040] rfcomm_dlc_exists+0xa2/0x370 [ 302.223932][T11040] rfcomm_dev_ioctl+0xb2d/0x2180 [ 302.229384][T11040] rfcomm_sock_ioctl+0x82/0xc0 [ 302.234662][T11040] sock_do_ioctl+0x152/0x450 [ 302.239754][T11040] sock_ioctl+0x47f/0x770 [ 302.244585][T11040] __se_sys_ioctl+0xf1/0x160 [ 302.249680][T11040] do_syscall_64+0x3b/0xb0 [ 302.254605][T11040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.261026][T11040] [ 302.261026][T11040] -> #1 (rfcomm_ioctl_mutex){+.+.}-{3:3}: [ 302.268927][T11040] lock_acquire+0x1f8/0x5a0 [ 302.273953][T11040] __mutex_lock+0x132/0xd80 [ 302.278977][T11040] rfcomm_dev_ioctl+0x233/0x2180 [ 302.284429][T11040] rfcomm_sock_ioctl+0x82/0xc0 [ 302.289702][T11040] sock_do_ioctl+0x152/0x450 [ 302.294798][T11040] sock_ioctl+0x47f/0x770 [ 302.299632][T11040] __se_sys_ioctl+0xf1/0x160 [ 302.304729][T11040] do_syscall_64+0x3b/0xb0 [ 302.309659][T11040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.316071][T11040] [ 302.316071][T11040] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 302.325455][T11040] validate_chain+0x1661/0x5950 [ 302.330817][T11040] __lock_acquire+0x125b/0x1f80 [ 302.336180][T11040] lock_acquire+0x1f8/0x5a0 [ 302.341195][T11040] lock_sock_nested+0x44/0x100 [ 302.346476][T11040] rfcomm_sk_state_change+0x57/0x300 [ 302.352277][T11040] __rfcomm_dlc_close+0x2b2/0x6d0 [ 302.357815][T11040] rfcomm_dlc_close+0xed/0x180 [ 302.363087][T11040] __rfcomm_sock_close+0x104/0x220 [ 302.368707][T11040] rfcomm_sock_shutdown+0xb4/0x230 [ 302.374326][T11040] __se_sys_shutdown+0x147/0x1a0 [ 302.379774][T11040] do_syscall_64+0x3b/0xb0 [ 302.384702][T11040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.391105][T11040] [ 302.391105][T11040] other info that might help us debug this: [ 302.391105][T11040] [ 302.401313][T11040] Chain exists of: [ 302.401313][T11040] sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_mutex --> &d->lock#2 [ 302.401313][T11040] [ 302.415380][T11040] Possible unsafe locking scenario: [ 302.415380][T11040] [ 302.422806][T11040] CPU0 CPU1 [ 302.428151][T11040] ---- ---- [ 302.433497][T11040] lock(&d->lock#2); [ 302.437485][T11040] lock(rfcomm_mutex); [ 302.444142][T11040] lock(&d->lock#2); [ 302.450632][T11040] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 302.456768][T11040] [ 302.456768][T11040] *** DEADLOCK *** [ 302.456768][T11040] [ 302.464892][T11040] 2 locks held by syz.3.2498/11040: [ 302.470070][T11040] #0: ffffffff8e6751a8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_close+0x37/0x180 [ 302.479453][T11040] #1: ffff88805bcacd28 (&d->lock#2){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x259/0x6d0 [ 302.488925][T11040] [ 302.488925][T11040] stack backtrace: [ 302.494792][T11040] CPU: 0 PID: 11040 Comm: syz.3.2498 Not tainted 6.1.111-syzkaller #0 [ 302.502926][T11040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 302.512961][T11040] Call Trace: [ 302.516225][T11040] [ 302.519142][T11040] dump_stack_lvl+0x1e3/0x2cb [ 302.523813][T11040] ? nf_tcp_handle_invalid+0x642/0x642 [ 302.529267][T11040] ? print_circular_bug+0x12b/0x1a0 [ 302.534450][T11040] check_noncircular+0x2fa/0x3b0 [ 302.539372][T11040] ? add_chain_block+0x850/0x850 [ 302.544291][T11040] ? lockdep_lock+0x11f/0x2a0 [ 302.548962][T11040] ? _find_first_zero_bit+0xd0/0x100 [ 302.554235][T11040] validate_chain+0x1661/0x5950 [ 302.559068][T11040] ? reacquire_held_locks+0x660/0x660 [ 302.564427][T11040] ? register_lock_class+0x100/0x990 [ 302.569702][T11040] ? reacquire_held_locks+0x660/0x660 [ 302.575055][T11040] ? is_dynamic_key+0x260/0x260 [ 302.579893][T11040] ? mark_lock+0x9a/0x340 [ 302.584211][T11040] ? __lock_acquire+0x125b/0x1f80 [ 302.589228][T11040] ? mark_lock+0x9a/0x340 [ 302.593545][T11040] __lock_acquire+0x125b/0x1f80 [ 302.598388][T11040] lock_acquire+0x1f8/0x5a0 [ 302.602884][T11040] ? rfcomm_sk_state_change+0x57/0x300 [ 302.608331][T11040] ? rcu_is_watching+0x11/0xb0 [ 302.613078][T11040] ? read_lock_is_recursive+0x10/0x10 [ 302.618437][T11040] ? __mutex_lock+0x2f7/0xd80 [ 302.623102][T11040] ? rcu_is_watching+0x11/0xb0 [ 302.627918][T11040] ? detach_timer+0x17d/0x380 [ 302.632583][T11040] ? __rfcomm_dlc_close+0x259/0x6d0 [ 302.637776][T11040] ? mutex_lock_nested+0x10/0x10 [ 302.642705][T11040] lock_sock_nested+0x44/0x100 [ 302.647456][T11040] ? rfcomm_sk_state_change+0x57/0x300 [ 302.652901][T11040] rfcomm_sk_state_change+0x57/0x300 [ 302.658183][T11040] __rfcomm_dlc_close+0x2b2/0x6d0 [ 302.663194][T11040] rfcomm_dlc_close+0xed/0x180 [ 302.667945][T11040] __rfcomm_sock_close+0x104/0x220 [ 302.673048][T11040] rfcomm_sock_shutdown+0xb4/0x230 [ 302.678147][T11040] __se_sys_shutdown+0x147/0x1a0 [ 302.683075][T11040] do_syscall_64+0x3b/0xb0 [ 302.687479][T11040] ? clear_bhb_loop+0x45/0xa0 [ 302.692147][T11040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.698029][T11040] RIP: 0033:0x7f130db7dff9 [ 302.702429][T11040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.722019][T11040] RSP: 002b:00007f130d9ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 302.730417][T11040] RAX: ffffffffffffffda RBX: 00007f130dd36058 RCX: 00007f130db7dff9 [ 302.738373][T11040] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 302.746326][T11040] RBP: 00007f130dbf0296 R08: 0000000000000000 R09: 0000000000000000 [ 302.754284][T11040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.762239][T11040] R13: 0000000000000001 R14: 00007f130dd36058 R15: 00007ffdad91f5d8 [ 302.770199][T11040] [ 303.013720][ T5012] arvo 0003:1E7D:30D4.0037: unknown main item tag 0x0 [ 303.022416][ T5012] arvo 0003:1E7D:30D4.0037: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 303.229155][T10641] usb 5-1: USB disconnect, device number 22 [ 304.061971][ T3650] Bluetooth: hci1: command tx timeout