last executing test programs: 2m31.344050624s ago: executing program 1 (id=1996): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x80000001, 0x1b7031d6, 0x0, 0x20, 0x18}) 2m31.182528744s ago: executing program 1 (id=1998): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r0, &(0x7f0000019080)=""/102355, 0x18fd3, 0x200) 2m31.058113131s ago: executing program 1 (id=1999): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x28, 0x1411, 0x1, 0xfffffffe, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x28}}, 0x347e742c303d1454) 2m30.850256403s ago: executing program 1 (id=2000): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bd, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x173) 2m30.38881115s ago: executing program 1 (id=2003): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m29.02405901s ago: executing program 1 (id=2019): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @dev}, {0x1, @local}, 0x8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}}) 2m16.559735429s ago: executing program 0 (id=2183): r0 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, {0x1, @local}, 0x4a, {0x2, 0x0, @local}, 'vcan0\x00'}) 2m16.347978801s ago: executing program 0 (id=2187): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x400000, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x7, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000007}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x0, 0x5, 0x900000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4, {0x2}}}}]}]}, 0x70}}, 0x0) 2m16.104721496s ago: executing program 0 (id=2193): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, &(0x7f0000000180)) 2m15.944229024s ago: executing program 0 (id=2194): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd}, {0xb}, {0x4, 0xffe0}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x6, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x4, 0x3, 0x7, 0x2, 0x4, 0x34}}, {0x4}}]}]}, 0x68}}, 0x0) 2m15.764539565s ago: executing program 0 (id=2197): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m14.611896253s ago: executing program 0 (id=2207): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) 2m13.906525254s ago: executing program 32 (id=2019): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @dev}, {0x1, @local}, 0x8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}}) 1m59.537476505s ago: executing program 33 (id=2207): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) 32.414011181s ago: executing program 2 (id=3440): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f00000000c0)) 32.138304907s ago: executing program 2 (id=3444): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc1205531, 0xfffffffffffffffe) 31.885512612s ago: executing program 2 (id=3448): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000504000031007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x80) 31.646164865s ago: executing program 2 (id=3453): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file2\x00', 0x1000000, &(0x7f0000000a40)={[{@force}, {@force}, {}, {@part={'part', 0x3d, 0x5}}, {@type={'type', 0x3d, "43935aa7"}}, {@creator={'creator', 0x3d, "0244ed5c"}}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-14'}}]}, 0x42, 0x70b, &(0x7f0000000300)="$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") mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 31.265613208s ago: executing program 2 (id=3457): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3}, 0xe) 30.375650029s ago: executing program 2 (id=3464): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000040)) 29.989179622s ago: executing program 34 (id=3464): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000040)) 2.227603611s ago: executing program 3 (id=3707): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) 1.984451015s ago: executing program 3 (id=3711): r0 = epoll_create(0xff9) read$FUSE(r0, 0x0, 0x0) 1.707340011s ago: executing program 7 (id=3714): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000005400)={'filter\x00', 0x0, 0x0, 0x90, [], 0x2, 0x0, 0x0}, &(0x7f0000005480)=0x108) 1.651415715s ago: executing program 6 (id=3715): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0c59eb3100000000300012800b0001006272696467650000200002800800150088a8ffff05000700070000000a0014000180c2"], 0x50}}, 0x0) 1.612698047s ago: executing program 3 (id=3716): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) 1.479193514s ago: executing program 5 (id=3717): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x1008, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) 1.427672787s ago: executing program 7 (id=3718): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8902, &(0x7f0000000040)) 1.351510712s ago: executing program 4 (id=3719): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080)=0x6, 0x4) 1.344984572s ago: executing program 6 (id=3720): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @empty}, {0x2, 0x4e20, @empty}, 0x68, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)='team0\x00', 0x8000, 0x66c42f83, 0x8}) 1.318110403s ago: executing program 3 (id=3721): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) unshare(0x22060400) 1.155055474s ago: executing program 7 (id=3722): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$lock(r0, 0x25, &(0x7f0000000280)={0x0, 0x2, 0x80000001, 0x9, 0xffffffffffffffff}) 1.154655684s ago: executing program 4 (id=3723): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000100)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c) 1.111396226s ago: executing program 6 (id=3724): r0 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_adj\x00') write$tcp_mem(r0, &(0x7f0000000140)={0xfffffffffffffffc}, 0x48) 1.106888366s ago: executing program 5 (id=3725): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @extra_flags={0x8, 0x18, 0xe}]}, 0x10c}}, 0x0) 1.048714769s ago: executing program 3 (id=3726): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x26, 0x336, &(0x7f00000001c0)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file3\x00', 0x1, 0x9) 912.552217ms ago: executing program 7 (id=3727): io_setup(0x9, &(0x7f0000000080)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={[0x6]}, 0x8}) 888.216619ms ago: executing program 5 (id=3728): r0 = inotify_init1(0x80000) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x84ce) 843.655201ms ago: executing program 4 (id=3729): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x3, 0x1}, 0x50) 827.568002ms ago: executing program 6 (id=3730): r0 = socket(0x22, 0x2, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) 733.666418ms ago: executing program 4 (id=3731): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x709d27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4228, 0x12327}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ip6tnl0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 585.673116ms ago: executing program 5 (id=3732): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) fsync(r0) 562.509637ms ago: executing program 7 (id=3733): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, &(0x7f0000000bc0)=[{0x0}, {&(0x7f0000000440)=""/192, 0xc0}], 0x2, 0x10000007, 0x7) 430.467245ms ago: executing program 6 (id=3734): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) setgid(0x0) 397.428208ms ago: executing program 4 (id=3735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000044000000050a03000000000000000000010020000900030073797a31000000000900010073797a31"], 0xcc}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 263.394295ms ago: executing program 5 (id=3736): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'dummy0\x00', &(0x7f0000000100)=@ethtool_dump={0x3e, 0x2, 0x7d}}) 248.327606ms ago: executing program 7 (id=3737): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x24, &(0x7f0000000400)={0x0, 0x0, 0x4, "a7212277"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 145.312062ms ago: executing program 6 (id=3738): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 24.085849ms ago: executing program 3 (id=3739): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000600)=0x5e) 17.350959ms ago: executing program 4 (id=3740): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x3, 0x0) 0s ago: executing program 5 (id=3741): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r0, &(0x7f0000005740)=[{&(0x7f00000045c0)='\n', 0x1}], 0x2) kernel console output (not intermixed with test programs): 82][ T4268] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 255.091856][ T4268] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 255.103419][ T4268] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 255.113867][ T4268] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 255.123152][ T4268] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 255.130787][ T4268] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 255.163132][ T4335] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 255.180366][ T124] r8152-cfgselector 4-1: USB disconnect, device number 11 [ 255.220397][T10568] lo speed is unknown, defaulting to 1000 [ 255.367267][T10589] loop2: detected capacity change from 0 to 1024 [ 255.384876][ T4335] usb 5-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 255.397214][ T4335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.425126][ T4335] usb 5-1: Product: syz [ 255.430581][T10589] hfsplus: invalid catalog entry type in lookup [ 255.450495][ T4335] usb 5-1: Manufacturer: syz [ 255.471738][ T4335] usb 5-1: SerialNumber: syz [ 255.499119][ T4335] usb 5-1: config 0 descriptor?? [ 255.746644][ T4335] peak_usb 5-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 255.809970][T10651] netlink: 'syz.5.2407': attribute type 20 has an invalid length. [ 255.859386][T10654] Unsupported ieee802154 address type: 0 [ 255.925192][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.931937][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.959941][ T4335] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 255.973051][ T4335] peak_usb 5-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 255.978678][T10568] chnl_net:caif_netlink_parms(): no params data found [ 256.058876][T10665] loop3: detected capacity change from 0 to 512 [ 256.075129][T10665] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.086526][T10665] EXT4-fs: Ignoring removed bh option [ 256.104667][ T4335] peak_usb: probe of 5-1:0.0 failed with error -71 [ 256.132087][T10679] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 256.142360][ T4335] usb 5-1: USB disconnect, device number 6 [ 256.193637][T10665] EXT4-fs (loop3): orphan cleanup on readonly fs [ 256.239752][T10665] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.2409: bad orphan inode 14 [ 256.240120][T10568] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.258510][T10568] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.267048][T10568] device bridge_slave_0 entered promiscuous mode [ 256.300033][T10568] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.311506][T10665] ext4_test_bit(bit=13, block=18) = 1 [ 256.332799][T10568] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.354704][T10665] is_bad_inode(inode)=0 [ 256.362904][T10665] NEXT_ORPHAN(inode)=0 [ 256.372639][T10568] device bridge_slave_1 entered promiscuous mode [ 256.382181][T10665] max_ino=32 [ 256.394136][T10665] i_nlink=1 [ 256.407923][T10665] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 256.501099][T10568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.524879][T10568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.619901][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 256.629867][T10568] team0: Port device team_slave_0 added [ 256.705878][T10568] team0: Port device team_slave_1 added [ 256.834229][T10568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.841802][T10568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.868021][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.912673][T10803] loop5: detected capacity change from 0 to 8 [ 256.973709][T10568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.995294][T10803] SQUASHFS error: lzo decompression failed, data probably corrupt [ 257.027209][T10568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.063474][T10803] SQUASHFS error: Failed to read block 0x91: -5 [ 257.069805][T10803] SQUASHFS error: Unable to read metadata cache entry [8f] [ 257.085795][T10568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.133043][T10803] SQUASHFS error: Unable to read inode 0x11f [ 257.179659][T10568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.203175][ T4268] Bluetooth: hci6: command 0x0409 tx timeout [ 257.286279][T10829] loop2: detected capacity change from 0 to 1024 [ 257.287772][T10568] device hsr_slave_0 entered promiscuous mode [ 257.332440][T10568] device hsr_slave_1 entered promiscuous mode [ 257.369841][T10568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.380635][T10568] Cannot create hsr debugfs directory [ 257.394976][T10829] hfsplus: Filesystem is marked locked, mounting read-only. [ 257.461094][T10829] hfsplus: filesystem is marked locked, leaving read-only. [ 257.473151][ T124] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 257.673327][ T124] usb 6-1: Using ep0 maxpacket: 16 [ 257.680520][ T124] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 257.717590][ T124] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 257.763216][ T124] usb 6-1: config 0 has no interface number 0 [ 257.799474][ T124] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 257.828369][ T124] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.873336][ T124] usb 6-1: Product: syz [ 257.894865][ T124] usb 6-1: Manufacturer: syz [ 257.899836][ T124] usb 6-1: SerialNumber: syz [ 257.952832][ T124] usb 6-1: config 0 descriptor?? [ 257.973885][ T124] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 257.980445][ T124] usb 6-1: No valid video chain found. [ 258.105699][T10568] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 258.137122][T10568] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 258.169272][T10568] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 258.201969][T10568] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 258.207910][ T124] usb 6-1: USB disconnect, device number 3 [ 258.493545][ T22] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 258.501616][T10568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.551471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.580145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.625859][T10568] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.650345][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.674259][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.696229][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.715448][ T4355] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.722638][ T4355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.750544][ T22] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 258.767266][T10999] loop2: detected capacity change from 0 to 512 [ 258.793339][ T22] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 258.804103][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.827695][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.839384][T10999] EXT4-fs (loop2): orphan cleanup on readonly fs [ 258.845902][T10999] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 258.862242][T10999] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 258.873590][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.886529][T10999] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.2438: attempt to clear invalid blocks 2 len 1 [ 258.902720][ T22] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 258.908023][T10999] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2438: invalid indirect mapped block 1819239214 (level 0) [ 258.928151][T10999] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2438: invalid indirect mapped block 1819239214 (level 1) [ 258.953724][T10999] EXT4-fs (loop2): 1 truncate cleaned up [ 258.959644][T10999] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 258.962132][ T4355] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.976085][ T4355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.984345][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.992697][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.994328][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.010414][ T22] usb 4-1: Product: syz [ 259.024592][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.032773][ T22] usb 4-1: Manufacturer: syz [ 259.036448][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.054813][ T22] usb 4-1: SerialNumber: syz [ 259.057999][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.074510][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.099316][T10999] EXT4-fs error (device loop2): __ext4_remount:6644: comm syz.2.2438: Abort forced by user [ 259.099482][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.111138][ T22] usb 4-1: config 0 descriptor?? [ 259.134539][T10999] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 259.166460][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.176922][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.214628][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 259.214814][ T8571] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 259.222692][T11012] device ip6tnl1 entered promiscuous mode [ 259.264111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.284904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.293483][ T4268] Bluetooth: hci6: command 0x041b tx timeout [ 259.304023][T10568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.352060][ T22] usb 4-1: Found UVC 34.00 device syz (8086:0b5b) [ 259.361062][ T22] usb 4-1: No valid video chain found. [ 259.373639][ T22] usb 4-1: USB disconnect, device number 12 [ 259.435372][ T8571] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 259.465805][ T8571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.502464][ T8571] usb 5-1: config 0 descriptor?? [ 259.728143][ T8571] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 259.743340][ T8571] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 259.929670][ T8571] [drm:udl_init] *ERROR* Selecting channel failed [ 259.990515][ T8571] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 260.029637][ T8571] [drm] Initialized udl on minor 2 [ 260.056095][ T8571] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 260.095609][ T8571] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 260.161186][ T8571] usb 5-1: USB disconnect, device number 7 [ 260.178406][ T8568] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 260.199158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.223532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.256832][ T8568] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 260.276340][T10568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.305827][ T8568] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 260.703873][T11107] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2456'. [ 260.717501][T11101] loop3: detected capacity change from 0 to 4096 [ 260.743456][ T22] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 260.783802][T11101] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 260.886268][T11101] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 260.935688][T11101] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 260.972600][ T22] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 260.982018][T11101] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 260.982090][T11101] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 260.999159][T11101] ntfs: volume version 3.1. [ 261.059612][T11101] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 261.113414][T11101] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 261.134276][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.153901][T11101] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 261.170826][ T22] usb 6-1: Product: syz [ 261.175606][ T22] usb 6-1: Manufacturer: syz [ 261.180290][ T22] usb 6-1: SerialNumber: syz [ 261.209582][T11101] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 261.225937][ T22] usb 6-1: config 0 descriptor?? [ 261.260982][T11101] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 261.374117][ T4268] Bluetooth: hci6: command 0x040f tx timeout [ 261.453634][ T22] peak_usb 6-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 261.659801][ T22] peak_usb 6-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 261.703080][ T22] peak_usb 6-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 261.781515][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 261.795391][ T22] peak_usb: probe of 6-1:0.0 failed with error -71 [ 261.809939][T11155] loop2: detected capacity change from 0 to 128 [ 261.814489][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.833785][ T22] usb 6-1: USB disconnect, device number 4 [ 261.909226][T11155] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 261.914544][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 261.954072][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 261.976197][T10568] device veth0_vlan entered promiscuous mode [ 261.984712][T11165] ptrace attach of "./syz-executor exec"[4269] was attempted by "./syz-executor exec"[11165] [ 262.004105][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 262.004385][T11155] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.013775][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 262.050890][T10568] device veth1_vlan entered promiscuous mode [ 262.142007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 262.164313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 262.242507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 262.264240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 262.276250][T10568] device veth0_macvtap entered promiscuous mode [ 262.362461][T10568] device veth1_macvtap entered promiscuous mode [ 262.444423][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.493015][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.523053][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.563081][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.604070][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.629627][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.650364][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.664298][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.675746][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.688803][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.699125][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.712317][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.737475][T10568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.771348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 262.816341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 262.842153][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 262.872750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 262.890853][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.942511][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.953175][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.966374][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.976909][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.988822][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.000123][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.011258][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.021849][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.032864][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.043471][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.054443][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.066537][T10568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.085443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 263.111773][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 263.145908][T10568] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.216288][T10568] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.263236][T10568] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.272011][T10568] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.443672][ T4268] Bluetooth: hci6: command 0x0419 tx timeout [ 263.515820][T11209] team0: Port device team_slave_0 removed [ 263.522484][T11209] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 263.551020][T11220] loop3: detected capacity change from 0 to 4096 [ 263.571550][T11220] NILFS: invalid option "cp=0x00aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa": too large checkpoint number [ 263.655709][ T4670] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 263.700692][T11224] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 263.794318][ T4363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.831090][ T4363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.879024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 263.955380][ T4363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.995476][ T4363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.034256][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 264.296417][T11264] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2492'. [ 264.700332][T11288] overlayfs: missing 'lowerdir' [ 264.952729][T11296] loop3: detected capacity change from 0 to 4096 [ 264.978697][T11296] ntfs: volume version 3.1. [ 264.991261][T11296] syz.3.2502: attempt to access beyond end of device [ 264.991261][T11296] loop3: rw=0, sector=36178056, nr_sectors = 4 limit=4096 [ 265.042817][T11296] syz.3.2502: attempt to access beyond end of device [ 265.042817][T11296] loop3: rw=0, sector=36178060, nr_sectors = 4 limit=4096 [ 265.050525][T11308] loop2: detected capacity change from 0 to 16 [ 265.099067][T11308] erofs: (device loop2): mounted with root inode @ nid 36. [ 265.133418][T11296] syz.3.2502: attempt to access beyond end of device [ 265.133418][T11296] loop3: rw=0, sector=36178056, nr_sectors = 4 limit=4096 [ 265.193670][T11312] bond0: option arp_validate: invalid value (18446744073491447809) [ 265.193949][ T11] bond0: (slave bond_slave_0): interface is now down [ 265.253141][T11296] syz.3.2502: attempt to access beyond end of device [ 265.253141][T11296] loop3: rw=0, sector=36178060, nr_sectors = 4 limit=4096 [ 265.254270][ T11] bond0: (slave bond_slave_1): interface is now down [ 265.359070][ T11] bond0: (slave syz_tun): interface is now down [ 265.407655][ T11] bond0: now running without any active interface! [ 266.000864][T11348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2516'. [ 266.533481][T11408] loop6: detected capacity change from 0 to 164 [ 267.106397][T11425] team0: Port device team_slave_0 removed [ 267.143787][T11425] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 267.179930][T11434] loop2: detected capacity change from 0 to 8 [ 267.198553][T11437] loop4: detected capacity change from 0 to 512 [ 267.223996][T11434] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 267.259757][T11437] EXT4-fs (loop4): Test dummy encryption mode enabled [ 267.278045][ T4670] udevd[4670]: incorrect cramfs checksum on /dev/loop2 [ 267.329355][T11437] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 267.344064][T11434] cramfs: Error -3 while decompressing! [ 267.349705][T11434] cramfs: ffffffff96d881e8(26)->ffff88804e94f000(4096) [ 267.389530][T11437] EXT4-fs (loop4): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 267.472283][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 267.472301][ T26] audit: type=1326 audit(1770635507.024:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11447 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae579af79 code=0x7ffc0000 [ 267.486001][T11434] cramfs: Error -3 while decompressing! [ 267.533374][T11434] cramfs: ffffffff96d88202(26)->ffff888053506000(4096) [ 267.593160][T11434] cramfs: Error -3 while decompressing! [ 267.611811][T11434] cramfs: ffffffff96d8821c(16)->ffff888070a00000(4096) [ 267.644280][T11434] cramfs: Error -3 while decompressing! [ 267.650075][T11434] cramfs: ffffffff96d881e8(26)->ffff88804e94f000(4096) [ 267.670804][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 267.696779][ T26] audit: type=1326 audit(1770635507.094:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11447 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f9ae579af79 code=0x7ffc0000 [ 267.834397][ T26] audit: type=1326 audit(1770635507.094:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11447 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae579af79 code=0x7ffc0000 [ 267.954569][ T26] audit: type=1326 audit(1770635507.094:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11447 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae579af79 code=0x7ffc0000 [ 268.802605][T11504] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 268.851358][T11504] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 269.257275][T11478] loop4: detected capacity change from 0 to 32768 [ 269.268924][T11526] loop2: detected capacity change from 0 to 256 [ 269.323155][T11478] (syz.4.2544,11478,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 269.330719][T11526] exfat: Deprecated parameter 'utf8' [ 269.439091][T11478] (syz.4.2544,11478,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 269.528467][T11478] JBD2: Ignoring recovery information on journal [ 269.686137][T11478] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 270.057977][ T4269] ocfs2: Unmounting device (7,4) on (node local) [ 270.463227][T11583] loop6: detected capacity change from 0 to 1024 [ 270.527170][T11583] EXT4-fs (loop6): orphan cleanup on readonly fs [ 270.625550][T11583] EXT4-fs (loop6): 1 truncate cleaned up [ 270.703299][T11583] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 271.050825][T10568] EXT4-fs (loop6): unmounting filesystem. [ 271.363611][T11624] loop4: detected capacity change from 0 to 64 [ 271.804916][T11650] loop4: detected capacity change from 0 to 512 [ 271.890889][T11650] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 271.915131][T11650] EXT4-fs (loop4): orphan cleanup on readonly fs [ 271.962037][T11650] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 271.996338][T11650] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 272.053319][T11650] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.2595: Failed to acquire dquot type 1 [ 272.100077][T11650] EXT4-fs (loop4): Remounting filesystem read-only [ 272.132338][T11650] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2595: bg 0: block 40: padding at end of block bitmap is not set [ 272.213043][T11650] EXT4-fs (loop4): Remounting filesystem read-only [ 272.223165][T11650] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 272.263313][T11650] EXT4-fs (loop4): Remounting filesystem read-only [ 272.270897][T11650] EXT4-fs (loop4): 1 truncate cleaned up [ 272.313205][T11650] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 272.329811][T11673] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 272.544617][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 272.903334][T11704] loop5: detected capacity change from 0 to 256 [ 272.947797][T11695] loop4: detected capacity change from 0 to 4096 [ 272.989312][T11695] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 273.022106][T11704] FAT-fs (loop5): Directory bread(block 64) failed [ 273.039627][T11695] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 273.040551][T11704] FAT-fs (loop5): Directory bread(block 65) failed [ 273.062082][T11710] overlayfs: bad mount option "redirect_dir=nofollow:/" [ 273.079623][T11695] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 273.116880][T11704] FAT-fs (loop5): Directory bread(block 66) failed [ 273.147225][T11704] FAT-fs (loop5): Directory bread(block 67) failed [ 273.177970][T11695] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 273.178047][T11704] FAT-fs (loop5): Directory bread(block 68) failed [ 273.238118][T11704] FAT-fs (loop5): Directory bread(block 69) failed [ 273.279318][T11704] FAT-fs (loop5): Directory bread(block 70) failed [ 273.306439][T11695] ntfs: volume version 3.1. [ 273.317888][T11704] FAT-fs (loop5): Directory bread(block 71) failed [ 273.337467][T11704] FAT-fs (loop5): Directory bread(block 72) failed [ 273.373217][T11704] FAT-fs (loop5): Directory bread(block 73) failed [ 273.419671][T11695] ntfs: (device loop4): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 273.465934][T11695] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 273.645654][T11727] loop3: detected capacity change from 0 to 128 [ 273.737435][T11727] autofs4:pid:11727:autofs_fill_super: called with bogus options [ 274.294760][T11759] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2626'. [ 274.983082][ T8570] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 275.173305][ T8570] usb 7-1: Using ep0 maxpacket: 16 [ 275.180998][ T8570] usb 7-1: config 0 interface 0 has no altsetting 0 [ 275.201242][ T8570] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 275.253384][ T8570] usb 7-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 275.261629][ T8570] usb 7-1: Product: syz [ 275.283182][ T8570] usb 7-1: Manufacturer: syz [ 275.298681][ T8570] usb 7-1: SerialNumber: syz [ 275.325747][ T8570] usb 7-1: config 0 descriptor?? [ 275.373165][T11807] bond0: Error: Cannot enslave bond to itself. [ 275.615854][ T8570] snd-usb-audio: probe of 7-1:0.0 failed with error -22 [ 275.648652][ T8570] usb 7-1: USB disconnect, device number 2 [ 275.716942][T11767] loop5: detected capacity change from 0 to 40427 [ 275.778615][T11833] loop3: detected capacity change from 0 to 512 [ 275.782442][T11767] F2FS-fs (loop5): invalid crc value [ 275.795486][T11833] EXT4-fs (loop3): Test dummy encryption mode enabled [ 275.835914][T11833] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 275.848069][T11833] System zones: 1-12 [ 275.894123][ T4670] udevd[4670]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.922686][T11767] F2FS-fs (loop5): Found nat_bits in checkpoint [ 275.931647][T11833] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.2645: Directory hole found for htree index block 0 [ 276.011504][T11833] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 276.030763][T11833] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.2645: Directory hole found for htree index block 0 [ 276.103731][T11833] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 276.172684][T11833] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 276.205100][T11767] F2FS-fs (loop5): Start checkpoint disabled! [ 276.287181][T11767] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 276.290439][T11833] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 276.686160][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 276.839834][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2654'. [ 277.371722][T11880] loop3: detected capacity change from 0 to 4096 [ 277.442183][T11880] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 277.480372][T11858] loop2: detected capacity change from 0 to 32768 [ 277.550946][T11858] JBD2: Ignoring recovery information on journal [ 277.737137][T11858] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 278.400527][ T4265] ocfs2: Unmounting device (7,2) on (node local) [ 278.640327][T11927] loop5: detected capacity change from 0 to 512 [ 278.955299][T11942] loop4: detected capacity change from 0 to 64 [ 279.372667][T11968] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2679'. [ 279.411214][T11968] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2679'. [ 279.506472][T11966] loop3: detected capacity change from 0 to 2048 [ 279.555499][T11966] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 279.684434][T11981] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 279.699348][ T4670] udevd[4670]: incorrect nilfs2 checksum on /dev/loop3 [ 279.891313][T11966] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 279.934018][T11966] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16) [ 279.965287][T11966] Remounting filesystem read-only [ 279.983429][T11966] NILFS (loop3): error -5 truncating bmap (ino=16) [ 280.253622][ T4276] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 280.961885][T12043] xt_TCPMSS: Only works on TCP SYN packets [ 281.539654][T12072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2708'. [ 281.608411][T12072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2708'. [ 282.608235][T12125] loop4: detected capacity change from 0 to 256 [ 282.760549][T12125] FAT-fs (loop4): Directory bread(block 64) failed [ 282.810322][T12125] FAT-fs (loop4): Directory bread(block 65) failed [ 282.843436][T12125] FAT-fs (loop4): Directory bread(block 66) failed [ 282.850745][T12125] FAT-fs (loop4): Directory bread(block 67) failed [ 282.882412][T12125] FAT-fs (loop4): Directory bread(block 68) failed [ 282.900355][T12125] FAT-fs (loop4): Directory bread(block 69) failed [ 282.971003][T12125] FAT-fs (loop4): Directory bread(block 70) failed [ 282.978931][T12125] FAT-fs (loop4): Directory bread(block 71) failed [ 283.013592][T12125] FAT-fs (loop4): Directory bread(block 72) failed [ 283.020979][T12125] FAT-fs (loop4): Directory bread(block 73) failed [ 283.617634][T12170] loop4: detected capacity change from 0 to 764 [ 283.672186][T12170] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 283.761325][T12182] overlayfs: missing 'lowerdir' [ 283.787185][T12170] Symlink component flag not implemented [ 283.813920][T12170] Symlink component flag not implemented (7) [ 284.619071][T12226] netlink: 'syz.2.2755': attribute type 2 has an invalid length. [ 284.664086][T12226] netlink: 'syz.2.2755': attribute type 1 has an invalid length. [ 285.331137][T12264] loop3: detected capacity change from 0 to 1024 [ 285.482430][T12264] syz.3.2764: attempt to access beyond end of device [ 285.482430][T12264] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 285.709726][T12264] Buffer I/O error on dev loop3, logical block 2889, async page read [ 285.774747][T12264] syz.3.2764: attempt to access beyond end of device [ 285.774747][T12264] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 285.904006][T12264] Buffer I/O error on dev loop3, logical block 2889, async page read [ 285.932890][ T26] audit: type=1800 audit(1770635525.484:4236): pid=12264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2764" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 285.933520][T12264] hfsplus: can't free extent [ 285.953015][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.254410][ T7] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 286.279523][T12312] binder: BC_ATTEMPT_ACQUIRE not supported [ 286.301111][T12312] binder: 12310:12312 ioctl c0306201 2000000001c0 returned -22 [ 286.337059][T12314] loop2: detected capacity change from 0 to 2048 [ 286.460995][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 286.468858][ T7] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 286.497773][ T7] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 286.507420][T12322] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 286.538534][ T7] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 286.580470][ T7] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 286.613596][ T7] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 286.674820][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 286.721288][ T7] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 286.763118][ T7] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 286.771635][ T7] usb 6-1: Product: syz [ 286.799840][T12322] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 286.843505][ T7] usb 6-1: Manufacturer: syz [ 286.848278][ T7] usb 6-1: SerialNumber: syz [ 286.853413][T12322] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 286.882345][ T7] usb 6-1: config 0 descriptor?? [ 286.908272][ T7] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 286.917944][T12322] Remounting filesystem read-only [ 286.927214][ T4265] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 286.946880][ T7] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 287.013310][ T22] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 287.200463][T12297] ldusb 6-1:0.0: Couldn't submit interrupt_in_urb -90 [ 287.220084][ T22] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.246664][ T22] usb 7-1: config 0 interface 0 has no altsetting 0 [ 287.294826][ T124] usb 6-1: USB disconnect, device number 5 [ 287.303283][ T22] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 287.343968][ T124] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 287.369309][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.403199][ T22] usb 7-1: Product: syz [ 287.407444][ T22] usb 7-1: Manufacturer: syz [ 287.431683][ T22] usb 7-1: SerialNumber: syz [ 287.454037][ T22] usb 7-1: config 0 descriptor?? [ 287.476067][ T22] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 287.526800][ T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 287.574382][ T22] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 287.613107][ T22] usb 7-1: media controller created [ 287.656433][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.842847][T12391] 8021q: adding VLAN 0 to HW filter on device bond2 [ 287.904096][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2790'. [ 288.137743][ T22] DVB: Unable to find symbol tda10046_attach() [ 288.144907][ T22] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 288.183015][ T22] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 288.274715][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2794'. [ 288.328350][T12455] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 288.349850][T12457] loop5: detected capacity change from 0 to 128 [ 288.374968][T12455] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 288.427692][T12455] device bridge1 entered promiscuous mode [ 288.445167][ T22] dvb_usb_m920x: probe of 7-1:0.0 failed with error -71 [ 288.470208][ T22] usb 7-1: USB disconnect, device number 3 [ 289.306904][T12506] loop6: detected capacity change from 0 to 256 [ 289.344251][T12509] x_tables: unsorted underflow at hook 2 [ 289.394744][T12506] FAT-fs (loop6): Directory bread(block 64) failed [ 289.414576][T12506] FAT-fs (loop6): Directory bread(block 65) failed [ 289.437562][T12506] FAT-fs (loop6): Directory bread(block 66) failed [ 289.452544][T12514] loop4: detected capacity change from 0 to 8 [ 289.471071][T12506] FAT-fs (loop6): Directory bread(block 67) failed [ 289.518539][T12506] FAT-fs (loop6): Directory bread(block 68) failed [ 289.547761][T12506] FAT-fs (loop6): Directory bread(block 69) failed [ 289.593320][T12506] FAT-fs (loop6): Directory bread(block 70) failed [ 289.621677][T12506] FAT-fs (loop6): Directory bread(block 71) failed [ 289.639935][T12514] SQUASHFS error: lzo decompression failed, data probably corrupt [ 289.647585][T12506] FAT-fs (loop6): Directory bread(block 72) failed [ 289.683580][T12514] SQUASHFS error: Failed to read block 0x1c0: -5 [ 289.692404][T12506] FAT-fs (loop6): Directory bread(block 73) failed [ 289.734461][T12514] SQUASHFS error: Unable to read metadata cache entry [1be] [ 290.124228][T12538] loop2: detected capacity change from 0 to 16 [ 290.167305][T12538] erofs: (device loop2): mounted with root inode @ nid 36. [ 290.219700][T12538] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 290.254308][T12547] netlink: 'syz.5.2814': attribute type 11 has an invalid length. [ 290.629314][T12564] netlink: 'syz.5.2816': attribute type 27 has an invalid length. [ 290.651110][T12566] xt_bpf: check failed: parse error [ 290.703889][T12568] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 290.960817][T12581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2821'. [ 290.982577][T12581] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 291.075507][T12581] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 291.174707][T12581] device bridge1 entered promiscuous mode [ 291.216320][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2824'. [ 291.482254][T12599] netlink: 'syz.5.2825': attribute type 1 has an invalid length. [ 291.519015][T12601] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.959929][T12571] loop6: detected capacity change from 0 to 32768 [ 292.045862][T12571] JBD2: Ignoring recovery information on journal [ 292.183424][T12571] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 292.484893][T10568] ocfs2: Unmounting device (7,6) on (node local) [ 292.693109][ T4254] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 292.765231][T12671] xt_CT: You must specify a L4 protocol and not use inversions on it [ 292.804339][T12673] device xfrm0 entered promiscuous mode [ 292.953755][ T4254] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 292.962875][ T4254] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.003256][ T4254] usb 6-1: Product: syz [ 293.007507][ T4254] usb 6-1: Manufacturer: syz [ 293.012137][ T4254] usb 6-1: SerialNumber: syz [ 293.088459][ T4254] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 293.230661][ T4254] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 293.697844][ T7] usb 6-1: USB disconnect, device number 6 [ 293.728571][T12715] IPv6: Can't replace route, no match found [ 293.913923][T12710] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2853'. [ 294.172680][T12723] loop3: detected capacity change from 0 to 4096 [ 294.207830][T12723] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 294.323393][ T4254] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 294.335444][ T4254] ath9k_htc: Failed to initialize the device [ 294.396297][ T7] usb 6-1: ath9k_htc: USB layer deinitialized [ 294.475868][T12741] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2861'. [ 294.962785][T12768] loop2: detected capacity change from 0 to 64 [ 295.043460][T12768] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 295.714991][T12805] loop3: detected capacity change from 0 to 512 [ 295.777817][T12805] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 295.873311][T12805] ext4 filesystem being mounted at /617/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.934614][T12760] loop4: detected capacity change from 0 to 32768 [ 296.008463][T12760] ERROR: (device loop4): dtSearch: stack overrun! [ 296.008463][T12760] [ 296.068466][T12760] ERROR: (device loop4): remounting filesystem as read-only [ 296.111711][T12760] btstack dump: [ 296.125715][T12760] bn = 0, index = 4 [ 296.140364][T12760] bn = 0, index = 4 [ 296.187835][T12760] bn = 0, index = 4 [ 296.199836][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 296.212042][T12760] bn = 0, index = 4 [ 296.235853][T12760] bn = 0, index = 4 [ 296.258337][T12760] bn = 0, index = 4 [ 296.293459][T12760] bn = 0, index = 4 [ 296.297431][T12760] bn = 0, index = 0 [ 296.301306][T12760] jfs_lookup: dtSearch returned -5 [ 296.830333][T12854] netlink: 'syz.5.2886': attribute type 7 has an invalid length. [ 296.868240][T12854] netlink: 'syz.5.2886': attribute type 8 has an invalid length. [ 297.424284][ T22] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 297.634996][T12895] loop4: detected capacity change from 0 to 22 [ 297.665456][ T22] usb 4-1: config 0 has an invalid interface number: 58 but max is 0 [ 297.679386][ T22] usb 4-1: config 0 has no interface number 0 [ 297.698427][T12895] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 297.718829][ T22] usb 4-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=49.f8 [ 297.761236][T12895] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 297.788186][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.833189][ T22] usb 4-1: config 0 descriptor?? [ 297.872662][ T22] gspca_main: spca500-2.14.0 probing 041e:400a [ 298.121589][ T22] usb 4-1: USB disconnect, device number 13 [ 298.958647][T12971] loop6: detected capacity change from 0 to 256 [ 298.990371][T12970] loop3: detected capacity change from 0 to 1024 [ 298.992543][T12971] exfat: Deprecated parameter 'utf8' [ 299.043199][T12971] exfat: Deprecated parameter 'namecase' [ 299.098403][T12971] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x8b6193f0, utbl_chksum : 0xe619d30d) [ 299.134013][T12970] hfsplus: keylen 65060 too large [ 299.321586][T12988] loop4: detected capacity change from 0 to 512 [ 299.376789][T12988] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.2917: bad orphan inode 13 [ 299.534593][T12988] ext4_test_bit(bit=12, block=4) = 1 [ 299.539978][T12988] is_bad_inode(inode)=0 [ 299.631925][T12988] NEXT_ORPHAN(inode)=0 [ 299.638714][T12988] max_ino=32 [ 299.641959][T12988] i_nlink=1 [ 299.660980][T12988] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 299.772707][T12988] EXT4-fs warning (device loop4): dx_probe:845: inode #2: comm syz.4.2917: Hash code is SIPHASH, but hash not in dirent [ 299.843532][T12988] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2917: Corrupt directory, running e2fsck is recommended [ 299.847714][T13013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2925'. [ 299.904030][T12988] EXT4-fs warning (device loop4): dx_probe:845: inode #2: comm syz.4.2917: Hash code is SIPHASH, but hash not in dirent [ 299.942169][T13013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2925'. [ 299.963362][T12988] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2917: Corrupt directory, running e2fsck is recommended [ 300.003656][T12988] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.2917: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 300.230181][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 300.262606][T13031] loop2: detected capacity change from 0 to 2048 [ 300.303524][T13031] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 300.340765][T13031] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.523246][ T22] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 300.723207][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 300.731124][ T22] usb 4-1: unable to get BOS descriptor or descriptor too short [ 300.758389][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 300.784129][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 300.814620][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 300.857515][ T22] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 300.898726][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 300.953288][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 300.983803][ T22] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 301.024199][ T22] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 301.045730][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.083106][ T22] usb 4-1: Product: syz [ 301.087554][ T22] usb 4-1: Manufacturer: syz [ 301.113107][ T22] usb 4-1: SerialNumber: syz [ 301.143949][ T22] usb 4-1: config 0 descriptor?? [ 301.149938][T13034] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 301.245187][T13090] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2946'. [ 301.278154][ T22] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 301.392294][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 301.500033][ T41] usb 4-1: USB disconnect, device number 14 [ 301.637454][ T26] audit: type=1400 audit(1770635541.194:4237): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=13131 comm="syz.2.2952" [ 302.071343][T13154] loop6: detected capacity change from 0 to 256 [ 302.343723][T13164] kcapi: manufacturer command 18446744073709551608 unknown. [ 302.636390][T13177] Option ' ' to dns_resolver key: bad/missing value [ 303.011805][T13145] loop5: detected capacity change from 0 to 32768 [ 303.036056][T13145] [ 303.036056][T13145] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.036056][T13145] [ 303.117083][T13145] __jfs_setxattr: xattr_size = 72, new_size = 166 [ 303.169217][T13199] loop4: detected capacity change from 0 to 2048 [ 303.222784][ T4355] [ 303.222784][ T4355] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.222784][ T4355] [ 303.258004][ T4355] [ 303.258004][ T4355] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.258004][ T4355] [ 303.286018][ T106] [ 303.286018][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.286018][ T106] [ 303.286128][T13199] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 303.313241][ T7] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 303.383057][ T9591] [ 303.383057][ T9591] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.383057][ T9591] [ 303.397906][ T9591] [ 303.397906][ T9591] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.397906][ T9591] [ 303.515349][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.536327][ T7] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 303.575371][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.605370][ T7] usb 3-1: config 0 descriptor?? [ 304.019637][T13181] loop3: detected capacity change from 0 to 40427 [ 304.031993][ T7] ath6kl: Failed to read usb control message: -71 [ 304.049209][ T7] ath6kl: Unable to read the bmi data from the device: -71 [ 304.076898][T13181] F2FS-fs (loop3): build fault injection attr: rate: 19, type: 0x3ffff [ 304.079623][ T7] ath6kl: Unable to recv target info: -71 [ 304.097682][T13181] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x364 [ 304.136718][T13181] F2FS-fs (loop3): invalid crc value [ 304.139137][ T7] ath6kl: Failed to init ath6kl core: -71 [ 304.170068][T13181] F2FS-fs (loop3): Found nat_bits in checkpoint [ 304.265917][ T7] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 304.286749][ T7] usb 3-1: USB disconnect, device number 16 [ 304.372798][T13181] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x18f/0x360 [ 304.442295][T13181] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 304.570108][T13181] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=30303030, run fsck to fix. [ 305.515022][T13281] netlink: 'syz.5.2991': attribute type 11 has an invalid length. [ 305.549089][T13281] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2991'. [ 305.662707][T13278] loop3: detected capacity change from 0 to 4096 [ 305.714296][T13278] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 305.858502][T13278] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 305.958587][ T26] audit: type=1326 audit(1770635545.514:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13298 comm="syz.4.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f64f9af79 code=0x7ffc0000 [ 306.043180][ T26] audit: type=1326 audit(1770635545.514:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13298 comm="syz.4.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f64f9af79 code=0x7ffc0000 [ 306.071160][ T9] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 306.103605][ T4276] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 306.109979][ T4276] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 306.117446][ T26] audit: type=1326 audit(1770635545.574:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13298 comm="syz.4.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f4f64f9af79 code=0x7ffc0000 [ 306.153093][ T4276] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 306.173248][ T26] audit: type=1326 audit(1770635545.724:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13298 comm="syz.4.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f64f9af79 code=0x7ffc0000 [ 306.184478][ T9] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 306.253059][ T26] audit: type=1326 audit(1770635545.724:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13298 comm="syz.4.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f64f9af79 code=0x7ffc0000 [ 306.253138][ T4276] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 306.303347][ T4276] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 306.463173][T13314] x_tables: ip_tables: osf match: only valid for protocol 6 [ 306.813212][ T4335] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 306.974551][T13343] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 307.008510][ T4335] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 307.023305][ T4335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.052092][ T4335] usb 4-1: Product: syz [ 307.071214][ T4335] usb 4-1: Manufacturer: syz [ 307.102101][ T4335] usb 4-1: SerialNumber: syz [ 307.131057][ T4335] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 307.222095][ T4335] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 307.298493][T13357] loop2: detected capacity change from 0 to 64 [ 307.452757][T13364] netlink: 'syz.5.3015': attribute type 11 has an invalid length. [ 307.488906][T13364] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3015'. [ 307.678321][ T7] usb 4-1: USB disconnect, device number 15 [ 307.919663][T13384] netlink: 'syz.2.3020': attribute type 2 has an invalid length. [ 308.323312][ T4335] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 308.333508][ T4335] ath9k_htc: Failed to initialize the device [ 308.341610][ T7] usb 4-1: ath9k_htc: USB layer deinitialized [ 308.712500][T13422] netlink: 'syz.2.3031': attribute type 1 has an invalid length. [ 308.743494][T13422] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3031'. [ 309.117105][T13449] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3037'. [ 309.223375][ T7] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 309.297435][T13457] ipt_REJECT: TCP_RESET invalid for non-tcp [ 309.413275][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 309.430247][ T7] usb 6-1: unable to get BOS descriptor or descriptor too short [ 309.474850][ T7] usb 6-1: config 192 has too many interfaces: 127, using maximum allowed: 32 [ 309.509840][ T7] usb 6-1: config 192 has an invalid interface association descriptor of length 5, skipping [ 309.511207][T13466] netlink: 'syz.3.3042': attribute type 1 has an invalid length. [ 309.534328][ T7] usb 6-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 309.566922][ T7] usb 6-1: config 192 has 0 interfaces, different from the descriptor's value: 127 [ 309.608597][ T7] usb 6-1: config 192 has too many interfaces: 127, using maximum allowed: 32 [ 309.643219][ T7] usb 6-1: config 192 has an invalid interface association descriptor of length 5, skipping [ 309.694454][ T7] usb 6-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 309.723455][ T7] usb 6-1: config 192 has 0 interfaces, different from the descriptor's value: 127 [ 309.755972][ T7] usb 6-1: New USB device found, idVendor=03eb, idProduct=7617, bcdDevice= 2.69 [ 309.787074][ T7] usb 6-1: New USB device strings: Mfr=3, Product=1, SerialNumber=9 [ 309.803692][T13478] comedi comedi3: mpc624: I/O port conflict (0x2,16) [ 309.814660][ T7] usb 6-1: Product: syz [ 309.818887][ T7] usb 6-1: Manufacturer: syz [ 309.833094][ T7] usb 6-1: SerialNumber: syz [ 309.997145][ T4335] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 310.063393][ T7] usb 6-1: USB disconnect, device number 7 [ 310.195173][ T4335] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.215709][ T4335] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.256994][ T4335] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 310.287061][ T4335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 310.303042][ T4335] usb 3-1: SerialNumber: syz [ 310.328525][ T4335] usb 3-1: 0:2 : does not exist [ 310.551217][T13512] netlink: 'syz.4.3052': attribute type 1 has an invalid length. [ 310.578539][ T4335] usb 3-1: USB disconnect, device number 17 [ 310.585489][T13512] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3052'. [ 311.212104][T13556] loop5: detected capacity change from 0 to 16 [ 311.250974][T13556] erofs: (device loop5): mounted with root inode @ nid 36. [ 311.295772][T13556] syz.5.3062: attempt to access beyond end of device [ 311.295772][T13556] loop5: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 311.384466][T13556] syz.5.3062: attempt to access beyond end of device [ 311.384466][T13556] loop5: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 311.470136][ T26] audit: type=1800 audit(1770635551.024:4243): pid=13556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3062" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 311.554713][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3068'. [ 311.610506][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3068'. [ 311.874065][T13591] netlink: 45 bytes leftover after parsing attributes in process `syz.2.3072'. [ 312.131100][T13606] loop2: detected capacity change from 0 to 1024 [ 312.148549][T13609] loop4: detected capacity change from 0 to 256 [ 312.206610][T13609] FAT-fs (loop4): Directory bread(block 64) failed [ 312.221293][T13609] FAT-fs (loop4): Directory bread(block 65) failed [ 312.232421][T13609] FAT-fs (loop4): Directory bread(block 66) failed [ 312.293262][T13609] FAT-fs (loop4): Directory bread(block 67) failed [ 312.312822][T13606] hfsplus: request for non-existent node 33423360 in B*Tree [ 312.322796][ T7] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 312.333118][T13609] FAT-fs (loop4): Directory bread(block 68) failed [ 312.339889][T13609] FAT-fs (loop4): Directory bread(block 69) failed [ 312.353960][T13606] hfsplus: request for non-existent node 33423360 in B*Tree [ 312.362439][T13609] FAT-fs (loop4): Directory bread(block 70) failed [ 312.381275][T13609] FAT-fs (loop4): Directory bread(block 71) failed [ 312.403669][T13609] FAT-fs (loop4): Directory bread(block 72) failed [ 312.439314][T13609] FAT-fs (loop4): Directory bread(block 73) failed [ 312.512440][ T7] usb 6-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 312.563942][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.572105][ T7] usb 6-1: Product: syz [ 312.613179][ T7] usb 6-1: Manufacturer: syz [ 312.628302][ T7] usb 6-1: SerialNumber: syz [ 312.645232][ T7] usb 6-1: config 0 descriptor?? [ 312.781745][T13630] sock: sock_timestamping_bind_phc: sock not bind to device [ 312.897967][ T7] usb 6-1: USB disconnect, device number 8 [ 313.523423][ T8570] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 313.546038][T13670] tmpfs: Bad value for 'mpol' [ 313.713142][ T8570] usb 7-1: Using ep0 maxpacket: 8 [ 313.721990][ T8570] usb 7-1: unable to get BOS descriptor or descriptor too short [ 313.754041][ T8570] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 313.803066][ T8570] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 313.828575][ T8570] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 313.864908][ T8570] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 313.883978][ T8570] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 313.903374][ T8570] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 313.923185][ T8570] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 313.956562][ T8570] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 313.990154][ T8570] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.021075][ T8570] usb 7-1: Product: syz [ 314.054021][ T8570] usb 7-1: Manufacturer: syz [ 314.058874][ T8570] usb 7-1: SerialNumber: syz [ 314.077905][ T8570] usb 7-1: config 0 descriptor?? [ 314.111340][T13655] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 314.225714][ T8570] snd-usb-audio: probe of 7-1:0.0 failed with error -12 [ 314.346457][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.449257][ T4335] usb 7-1: USB disconnect, device number 4 [ 314.820824][T13739] netlink: 'syz.5.3105': attribute type 1 has an invalid length. [ 314.849802][T13739] netlink: 'syz.5.3105': attribute type 1 has an invalid length. [ 314.870043][T13739] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3105'. [ 314.923651][T13739] NCSI netlink: No device for ifindex 2151022881 [ 315.165088][T13750] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3109'. [ 315.548110][T13770] loop6: detected capacity change from 0 to 2048 [ 315.563225][ T4335] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 315.584692][T13770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.753063][ T4335] usb 5-1: Using ep0 maxpacket: 32 [ 315.760229][ T4335] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.803439][ T4335] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 315.863855][ T4335] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 315.924024][ T4335] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.963023][ T4335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 315.971087][ T4335] usb 5-1: SerialNumber: syz [ 316.008109][T13756] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 316.025390][ T4335] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 316.257347][ T4335] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 316.314032][ T4335] usb 5-1: USB disconnect, device number 8 [ 316.533516][T13767] loop5: detected capacity change from 0 to 32768 [ 316.589477][T13767] ERROR: (device loop5): dbAlloc: the hint is outside the map [ 316.589477][T13767] [ 316.630195][T13767] ERROR: (device loop5): remounting filesystem as read-only [ 317.223319][T13841] x_tables: unsorted underflow at hook 3 [ 317.253469][ T7] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 317.368040][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.447145][ T7] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 317.473114][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.513047][ T7] usb 3-1: Product: syz [ 317.543065][ T7] usb 3-1: Manufacturer: syz [ 317.547751][ T7] usb 3-1: SerialNumber: syz [ 317.584805][ T7] usb 3-1: config 0 descriptor?? [ 317.800452][ T7] int51x1: probe of 3-1:0.0 failed with error -22 [ 317.956330][T13867] netlink: 180 bytes leftover after parsing attributes in process `syz.6.3139'. [ 318.023431][ T8568] usb 3-1: USB disconnect, device number 18 [ 318.121746][T13876] loop4: detected capacity change from 0 to 512 [ 318.179822][T13876] EXT4-fs (loop4): 1 truncate cleaned up [ 318.203094][T13876] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 318.298508][T13876] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.4.3141: bad entry in directory: inode out of bounds - offset=0, inode=131074, rec_len=12, size=1024 fake=1 [ 318.350280][T13876] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem [ 318.381397][T13876] EXT4-fs warning (device loop4): ext4_rename_delete:3778: inode #2: comm syz.4.3141: Deleting old file: nlink 4, error=-117 [ 318.405733][T13876] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3141: bg 0: block 465: padding at end of block bitmap is not set [ 318.460729][T13876] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 318.480915][T13876] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3141: invalid indirect mapped block 234881024 (level 0) [ 318.495894][ T4335] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 318.649926][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 318.703202][ T4335] usb 7-1: Using ep0 maxpacket: 32 [ 318.710353][ T4335] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.763123][ T4335] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 318.813511][ T4335] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 318.853137][ T4335] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.883665][ T4335] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 318.923034][ T4335] usb 7-1: SerialNumber: syz [ 318.950220][T13882] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 318.967585][ T4335] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 319.192482][ T4335] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 319.214886][ T4335] usb 7-1: USB disconnect, device number 5 [ 319.558658][T13930] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 319.593077][T13930] xt_CT: You must specify a L4 protocol and not use inversions on it [ 319.748047][T13936] netlink: 'syz.3.3153': attribute type 16 has an invalid length. [ 319.783218][T13936] netlink: 'syz.3.3153': attribute type 17 has an invalid length. [ 319.877058][T13936] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 319.964514][T13936] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 320.010298][T13936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.103839][T13936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.935016][T13942] loop2: detected capacity change from 0 to 32768 [ 321.017039][T13990] comedi comedi3: comedi_config --init_data is deprecated [ 321.048927][T13942] XFS (loop2): Mounting V5 Filesystem [ 321.138138][T13942] XFS (loop2): Ending clean mount [ 321.364022][ T4265] XFS (loop2): Unmounting Filesystem [ 321.498512][T14023] xt_hashlimit: max too large, truncated to 1048576 [ 322.014435][T14048] loop6: detected capacity change from 0 to 512 [ 322.074298][T14048] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002] [ 322.108302][T14048] System zones: 1-20 [ 322.210648][T14048] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 322.305181][T14068] loop3: detected capacity change from 0 to 64 [ 322.355353][T10568] EXT4-fs (loop6): unmounting filesystem. [ 322.426840][ T8570] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 322.574354][T14084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3192'. [ 322.633131][ T8570] usb 5-1: Using ep0 maxpacket: 32 [ 322.640178][ T8570] usb 5-1: config 0 has an invalid interface number: 90 but max is 0 [ 322.674896][ T8570] usb 5-1: config 0 has no interface number 0 [ 322.689037][ T8570] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa [ 322.711777][T14093] loop6: detected capacity change from 0 to 256 [ 322.728507][ T8570] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.745060][ T8570] usb 5-1: Product: syz [ 322.760335][ T8570] usb 5-1: Manufacturer: syz [ 322.773117][ T8570] usb 5-1: SerialNumber: syz [ 322.810386][ T8570] usb 5-1: config 0 descriptor?? [ 323.051346][ T8570] powermate: Expected payload of 3--6 bytes, found 512 bytes! [ 323.079355][ T8570] input: Griffin PowerMate as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.90/input/input12 [ 323.137372][ C0] powermate: config urb returned -71 [ 323.151535][ C0] powermate: config urb returned -71 [ 323.163136][ C0] powermate: config urb returned -71 [ 323.169075][ C0] powermate: config urb returned -71 [ 323.206505][ T8570] usb 5-1: USB disconnect, device number 9 [ 323.213194][ C0] powermate 5-1:0.90: powermate_irq - usb_submit_urb failed with result: -19 [ 324.252692][T14189] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (32) [ 324.369511][T14194] loop6: detected capacity change from 0 to 128 [ 324.435551][T14194] FAT-fs (loop6): Directory bread(block 32) failed [ 324.442167][T14194] FAT-fs (loop6): Directory bread(block 33) failed [ 324.483534][T14194] FAT-fs (loop6): Directory bread(block 34) failed [ 324.543372][T14194] FAT-fs (loop6): Directory bread(block 35) failed [ 324.562870][T14202] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 324.603577][T14194] FAT-fs (loop6): Directory bread(block 36) failed [ 324.610339][T14194] FAT-fs (loop6): Directory bread(block 37) failed [ 324.688362][T14194] FAT-fs (loop6): Directory bread(block 38) failed [ 324.721706][T14194] FAT-fs (loop6): Directory bread(block 39) failed [ 324.743491][T14194] FAT-fs (loop6): Directory bread(block 40) failed [ 324.803948][T14194] FAT-fs (loop6): Directory bread(block 41) failed [ 325.043665][T14175] loop5: detected capacity change from 0 to 32768 [ 325.095680][T14175] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.3215 (14175) [ 325.122617][T14231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3231'. [ 325.168904][T14194] syz.6.3222: attempt to access beyond end of device [ 325.168904][T14194] loop6: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 325.198649][T14175] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 325.240116][T14194] FAT-fs (loop6): Filesystem has been set read-only [ 325.247637][T14175] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 325.265945][T14194] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 325.278449][T14175] BTRFS info (device loop5): using free space tree [ 325.388023][ T8570] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 325.591953][T14175] BTRFS info (device loop5): enabling ssd optimizations [ 325.602993][ T8570] usb 3-1: Using ep0 maxpacket: 16 [ 325.610541][ T8570] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 325.633124][ T8570] usb 3-1: config 0 has no interface number 0 [ 325.639297][ T8570] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 325.661260][ T8570] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 325.686066][ T8570] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 325.703073][ T8570] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.711857][ T8570] usb 3-1: Product: syz [ 325.721957][ T8570] usb 3-1: Manufacturer: syz [ 325.728244][ T8570] usb 3-1: SerialNumber: syz [ 325.748155][ T8570] usb 3-1: config 0 descriptor?? [ 325.762033][ T9591] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 326.210435][T14298] netlink: 360 bytes leftover after parsing attributes in process `syz.6.3242'. [ 326.322018][ T7243] usb 3-1: USB disconnect, device number 19 [ 326.583275][T14324] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3245'. [ 326.723831][T14329] loop2: detected capacity change from 0 to 128 [ 326.836997][T14329] FAT-fs (loop2): Directory bread(block 32) failed [ 326.864571][T14336] loop3: detected capacity change from 0 to 1764 [ 326.873048][T14329] FAT-fs (loop2): Directory bread(block 33) failed [ 326.903404][T14329] FAT-fs (loop2): Directory bread(block 34) failed [ 326.936848][T14329] FAT-fs (loop2): Directory bread(block 35) failed [ 326.983293][T14329] FAT-fs (loop2): Directory bread(block 36) failed [ 327.003017][T14329] FAT-fs (loop2): Directory bread(block 37) failed [ 327.013959][T14329] FAT-fs (loop2): Directory bread(block 38) failed [ 327.020638][T14329] FAT-fs (loop2): Directory bread(block 39) failed [ 327.076700][T14329] FAT-fs (loop2): Directory bread(block 40) failed [ 327.101119][T14329] FAT-fs (loop2): Directory bread(block 41) failed [ 327.262410][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3256'. [ 327.307256][T14363] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 327.389383][T14363] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 327.415544][T14329] syz.2.3248: attempt to access beyond end of device [ 327.415544][T14329] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 327.429007][ T7241] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 327.479758][T14329] FAT-fs (loop2): Filesystem has been set read-only [ 327.510074][T14329] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 327.625149][ T7241] usb 6-1: config index 0 descriptor too short (expected 65183, got 72) [ 327.655999][ T7241] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 327.675690][ T7241] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.693075][ T7241] usb 6-1: Product: syz [ 327.702805][ T7241] usb 6-1: Manufacturer: syz [ 327.713096][ T7241] usb 6-1: SerialNumber: syz [ 327.748884][ T7241] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 327.753053][ T7] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 327.820305][ T22] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 327.963312][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 327.977206][ T7] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 328.031699][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.058415][ T7] usb 4-1: Product: syz [ 328.072439][T14353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.074800][ T7] usb 4-1: Manufacturer: syz [ 328.123621][T14353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.143693][ T7] usb 4-1: SerialNumber: syz [ 328.176390][ T7] usb 4-1: config 0 descriptor?? [ 328.182482][ T8573] usb 6-1: USB disconnect, device number 9 [ 328.220870][ T7] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 328.351518][T14414] 9pnet_fd: p9_fd_create_tcp (14414): problem connecting socket to 127.0.0.1 [ 328.609342][ T7] gspca_sn9c2028: read1 error -71 [ 328.620515][ T7] gspca_sn9c2028: read1 error -71 [ 328.638929][ T7] sn9c2028: probe of 4-1:0.0 failed with error -71 [ 328.656297][ T7] usb 4-1: USB disconnect, device number 16 [ 328.858497][T14437] loop2: detected capacity change from 0 to 256 [ 328.883288][ T22] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 328.890581][ T22] ath9k_htc: Failed to initialize the device [ 328.913668][ T8573] usb 6-1: ath9k_htc: USB layer deinitialized [ 328.931695][T14437] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5cb490d, utbl_chksum : 0xe619d30d) [ 329.614469][T14470] loop6: detected capacity change from 0 to 4096 [ 329.637695][T14479] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3284'. [ 329.648127][T14470] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 329.663274][T14479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3284'. [ 329.682517][T14484] loop3: detected capacity change from 0 to 256 [ 329.689918][T14479] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3284'. [ 329.737574][T14479] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3284'. [ 330.243916][T14510] loop3: detected capacity change from 0 to 128 [ 330.338244][T14510] FAT-fs (loop3): Directory bread(block 32) failed [ 330.383110][T14510] FAT-fs (loop3): Directory bread(block 33) failed [ 330.389820][T14510] FAT-fs (loop3): Directory bread(block 34) failed [ 330.442315][T14510] FAT-fs (loop3): Directory bread(block 35) failed [ 330.483146][T14510] FAT-fs (loop3): Directory bread(block 36) failed [ 330.489861][T14510] FAT-fs (loop3): Directory bread(block 37) failed [ 330.563686][T14510] FAT-fs (loop3): Directory bread(block 38) failed [ 330.570277][T14510] FAT-fs (loop3): Directory bread(block 39) failed [ 330.604438][T14510] FAT-fs (loop3): Directory bread(block 40) failed [ 330.639231][T14510] FAT-fs (loop3): Directory bread(block 41) failed [ 330.698331][T14526] loop6: detected capacity change from 0 to 4096 [ 331.025120][T14510] syz.3.3292: attempt to access beyond end of device [ 331.025120][T14510] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 331.083244][T14510] FAT-fs (loop3): Filesystem has been set read-only [ 331.089977][T14510] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 331.184649][T14554] loop6: detected capacity change from 0 to 1024 [ 331.323112][ T8570] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 331.514661][ T8570] usb 5-1: Using ep0 maxpacket: 32 [ 331.552412][ T8570] usb 5-1: config 2 has an invalid interface number: 1 but max is 0 [ 331.573910][ T8570] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 331.600989][ T8570] usb 5-1: config 2 has no interface number 0 [ 331.642151][ T8570] usb 5-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 331.693381][ T8570] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.712276][ T8570] usb 5-1: Product: syz [ 331.743775][ T8570] usb 5-1: Manufacturer: syz [ 331.748464][ T8570] usb 5-1: SerialNumber: syz [ 332.013640][ T8570] usb 5-1: USB disconnect, device number 10 [ 332.173781][T14619] loop5: detected capacity change from 0 to 128 [ 332.233197][T14619] FAT-fs (loop5): Directory bread(block 32) failed [ 332.263104][T14619] FAT-fs (loop5): Directory bread(block 33) failed [ 332.304869][T14619] FAT-fs (loop5): Directory bread(block 34) failed [ 332.311483][T14619] FAT-fs (loop5): Directory bread(block 35) failed [ 332.351068][T14628] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3322'. [ 332.373557][T14619] FAT-fs (loop5): Directory bread(block 36) failed [ 332.380153][T14619] FAT-fs (loop5): Directory bread(block 37) failed [ 332.408231][T14619] FAT-fs (loop5): Directory bread(block 38) failed [ 332.427635][T14619] FAT-fs (loop5): Directory bread(block 39) failed [ 332.448067][T14619] FAT-fs (loop5): Directory bread(block 40) failed [ 332.468274][T14619] FAT-fs (loop5): Directory bread(block 41) failed [ 332.603165][ T8570] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 332.742812][T14619] syz.5.3318: attempt to access beyond end of device [ 332.742812][T14619] loop5: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 332.762485][T14619] FAT-fs (loop5): Filesystem has been set read-only [ 332.782351][T14619] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 332.815203][ T8570] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 332.860962][ T8570] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 332.891632][ T8570] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.911346][ T8570] usb 3-1: Product: syz [ 332.926549][ T8570] usb 3-1: Manufacturer: syz [ 332.931495][ T8570] usb 3-1: SerialNumber: syz [ 332.964498][ T8570] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 333.002279][ T8570] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 333.033432][T14657] netlink: 'syz.5.3330': attribute type 5 has an invalid length. [ 333.299003][T14627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.341069][T14627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.341817][T14667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3334'. [ 333.414040][ T8573] usb 3-1: USB disconnect, device number 20 [ 334.083308][ T8570] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 334.095649][ T8570] ath9k_htc: Failed to initialize the device [ 334.119970][T14719] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3348'. [ 334.137851][ T8573] usb 3-1: ath9k_htc: USB layer deinitialized [ 334.243615][ T22] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 334.434944][ T22] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x6 has invalid wMaxPacketSize 0 [ 334.459659][ T22] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0xB has invalid wMaxPacketSize 0 [ 334.503051][ T22] usb 4-1: config 0 interface 0 altsetting 10 bulk endpoint 0xB has invalid maxpacket 0 [ 334.533830][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 334.550725][T14736] loop2: detected capacity change from 0 to 4096 [ 334.561765][ T22] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3 [ 334.612097][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.632412][ T22] usb 4-1: Product: syz [ 334.642539][ T22] usb 4-1: Manufacturer: syz [ 334.673013][ T22] usb 4-1: SerialNumber: syz [ 334.680522][ T22] usb 4-1: config 0 descriptor?? [ 334.690224][T14736] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 334.699005][ T22] ir_toy 4-1:0.0: required endpoints not found [ 335.123302][ T22] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 335.303785][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 335.311207][ T22] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 335.328926][T14728] loop6: detected capacity change from 0 to 32768 [ 335.345853][ T22] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 335.399533][ T22] usb 5-1: config 135 has no interface number 0 [ 335.437694][ T22] usb 5-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 335.462604][T14728] ERROR: (device loop6): dbAlloc: unable to allocate blocks [ 335.462604][T14728] [ 335.471419][ T22] usb 5-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 335.516941][ T22] usb 5-1: config 135 interface 230 has no altsetting 0 [ 335.546266][T14728] ERROR: (device loop6): remounting filesystem as read-only [ 335.609521][ T22] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 335.643123][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.651444][ T22] usb 5-1: Product: syz [ 335.666628][T14780] loop5: detected capacity change from 0 to 16 [ 335.693124][ T22] usb 5-1: Manufacturer: syz [ 335.701405][ T22] usb 5-1: SerialNumber: syz [ 335.739519][T14780] erofs: (device loop5): mounted with root inode @ nid 36. [ 335.822784][T14780] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 335.877014][T14780] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -46 in[60, 4036] out[1851] [ 335.896658][T14788] netlink: 'syz.6.3365': attribute type 21 has an invalid length. [ 335.923762][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3365'. [ 335.950913][ T22] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 335.953451][T14780] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 335.961082][ T22] usb 5-1: No valid video chain found. [ 336.006408][ T22] usb 5-1: USB disconnect, device number 11 [ 336.226922][T14806] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3368'. [ 336.757003][T14827] device batadv1 entered promiscuous mode [ 336.778549][T14831] loop4: detected capacity change from 0 to 164 [ 336.856640][T14831] rock: directory entry would overflow storage [ 336.865989][T14831] rock: sig=0x66, size=4, remaining=3 [ 336.888475][T14838] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.914600][T14831] rock: directory entry would overflow storage [ 336.933153][T14831] rock: sig=0x66, size=4, remaining=3 [ 337.141330][T14846] netlink: 'syz.2.3379': attribute type 1 has an invalid length. [ 337.178494][T14846] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3379'. [ 337.228566][T14851] loop6: detected capacity change from 0 to 164 [ 337.237258][T14853] netlink: 'syz.4.3382': attribute type 10 has an invalid length. [ 337.255358][T14853] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3382'. [ 337.267648][ T8570] usb 4-1: USB disconnect, device number 17 [ 337.271200][T14853] bridge0: port 3(dummy0) entered blocking state [ 337.303268][T14853] bridge0: port 3(dummy0) entered disabled state [ 337.350295][T14853] device dummy0 entered promiscuous mode [ 337.388979][T14853] bridge0: port 3(dummy0) entered blocking state [ 337.395698][T14853] bridge0: port 3(dummy0) entered forwarding state [ 338.011043][T14893] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3393'. [ 338.054738][T14893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3393'. [ 338.099775][T14893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3393'. [ 338.189298][T14902] netlink: 'syz.4.3396': attribute type 1 has an invalid length. [ 338.209793][T14900] netlink: 136 bytes leftover after parsing attributes in process `syz.6.3394'. [ 338.233744][T14900] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 338.381973][ T26] audit: type=1326 audit(1770635577.934:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14909 comm="syz.5.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae579af79 code=0x7ffc0000 [ 338.471193][T14913] loop4: detected capacity change from 0 to 1024 [ 338.478095][ T26] audit: type=1326 audit(1770635577.984:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14909 comm="syz.5.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f9ae579af79 code=0x7ffc0000 [ 338.500628][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.559027][T14913] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.3399: lblock 2 mapped to illegal pblock 2 (length 1) [ 338.635728][ T26] audit: type=1326 audit(1770635577.984:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14909 comm="syz.5.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae579af79 code=0x7ffc0000 [ 338.663482][T14913] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 338.671662][T14913] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.3399: lblock 0 mapped to illegal pblock 48 (length 1) [ 338.733074][ T26] audit: type=1326 audit(1770635577.984:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14909 comm="syz.5.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae579af79 code=0x7ffc0000 [ 338.760455][T14913] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 338.806021][T14913] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.3399: Failed to acquire dquot type 0 [ 338.863163][T14913] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 338.896547][T14913] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.3399: mark_inode_dirty error [ 338.955061][T14913] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 338.989610][T14937] netlink: 'syz.5.3404': attribute type 1 has an invalid length. [ 339.010889][T14913] EXT4-fs (loop4): 1 orphan inode deleted [ 339.024848][ T4355] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 339.052412][T14940] loop2: detected capacity change from 0 to 256 [ 339.056691][T14913] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 339.136222][ T4355] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 339.181359][T14940] FAT-fs (loop2): Directory bread(block 64) failed [ 339.213667][ T4355] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:6: Failed to release dquot type 0 [ 339.236259][T14940] FAT-fs (loop2): Directory bread(block 65) failed [ 339.293155][T14940] FAT-fs (loop2): Directory bread(block 66) failed [ 339.299868][T14940] FAT-fs (loop2): Directory bread(block 67) failed [ 339.351863][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 339.361213][T14940] FAT-fs (loop2): Directory bread(block 68) failed [ 339.373323][ T4355] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 339.412914][T14940] FAT-fs (loop2): Directory bread(block 69) failed [ 339.419984][T14940] FAT-fs (loop2): Directory bread(block 70) failed [ 339.453073][ T4355] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 339.461662][ T4355] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:6: Failed to release dquot type 0 [ 339.487856][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3408'. [ 339.493145][T14940] FAT-fs (loop2): Directory bread(block 71) failed [ 339.532241][T14940] FAT-fs (loop2): Directory bread(block 72) failed [ 339.551832][T14940] FAT-fs (loop2): Directory bread(block 73) failed [ 339.572719][ T4269] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 339.622512][ T4269] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 339.711373][ T4269] EXT4-fs error (device loop4): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 339.996548][T14970] loop5: detected capacity change from 0 to 4096 [ 340.110783][T14988] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 340.534141][T15009] x_tables: duplicate underflow at hook 4 [ 341.260892][T15049] loop6: detected capacity change from 0 to 256 [ 341.272470][ T26] audit: type=1326 audit(1770635580.824:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.4.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f64f9af79 code=0x7ffc0000 [ 341.401767][ T26] audit: type=1326 audit(1770635580.824:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.4.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f4f64f9af79 code=0x7ffc0000 [ 342.172094][T15100] device batadv1 entered promiscuous mode [ 342.230293][T15102] loop2: detected capacity change from 0 to 1024 [ 342.283272][ T7241] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 342.299415][T15112] loop3: detected capacity change from 0 to 256 [ 342.368652][T15116] netlink: 212168 bytes leftover after parsing attributes in process `syz.5.3456'. [ 342.395127][T15112] FAT-fs (loop3): Directory bread(block 64) failed [ 342.418876][ T4265] hfsplus: bad catalog entry type [ 342.435976][T15112] FAT-fs (loop3): Directory bread(block 65) failed [ 342.442689][T15112] FAT-fs (loop3): Directory bread(block 66) failed [ 342.480157][T15112] FAT-fs (loop3): Directory bread(block 67) failed [ 342.493244][ T7241] usb 7-1: Using ep0 maxpacket: 16 [ 342.500635][ T7241] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 342.523541][T15112] FAT-fs (loop3): Directory bread(block 68) failed [ 342.530157][T15112] FAT-fs (loop3): Directory bread(block 69) failed [ 342.534702][ T7241] usb 7-1: config 0 has no interface number 0 [ 342.573165][T15112] FAT-fs (loop3): Directory bread(block 70) failed [ 342.577280][ T7241] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 342.613066][T15112] FAT-fs (loop3): Directory bread(block 71) failed [ 342.619765][T15112] FAT-fs (loop3): Directory bread(block 72) failed [ 342.640568][ T7241] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.643178][T15112] FAT-fs (loop3): Directory bread(block 73) failed [ 342.665058][T15116] syz.5.3456 (15116) used greatest stack depth: 18096 bytes left [ 342.673784][ T7241] usb 7-1: Product: syz [ 342.691517][ T7241] usb 7-1: Manufacturer: syz [ 342.703366][ T7241] usb 7-1: SerialNumber: syz [ 342.721018][ T7241] usb 7-1: config 0 descriptor?? [ 342.750938][ T7241] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 343.110883][ T11] hfsplus: b-tree write err: -5, ino 4 [ 343.179390][ T7241] gspca_spca1528: reg_w err -71 [ 343.224483][ T7241] spca1528: probe of 7-1:0.1 failed with error -71 [ 343.237271][ T7241] usb 7-1: USB disconnect, device number 6 [ 343.292721][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.456578][T15161] loop3: detected capacity change from 0 to 764 [ 343.601735][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.818061][T15172] netlink: 'syz.3.3468': attribute type 29 has an invalid length. [ 343.837495][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.941943][T15172] netlink: 'syz.3.3468': attribute type 29 has an invalid length. [ 343.957160][T15177] IPv6: NLM_F_CREATE should be specified when creating new route [ 344.189257][T15188] overlayfs: missing 'lowerdir' [ 344.383163][ T8570] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 344.573097][ T8570] usb 4-1: Using ep0 maxpacket: 8 [ 344.580828][ T8570] usb 4-1: unable to get BOS descriptor or descriptor too short [ 344.625867][ T8570] usb 4-1: config 8 has an invalid interface number: 255 but max is 0 [ 344.646491][ T8570] usb 4-1: config 8 has no interface number 0 [ 344.647168][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.652629][ T8570] usb 4-1: config 8 interface 255 has no altsetting 0 [ 344.665636][ T8570] usb 4-1: string descriptor 0 read error: -22 [ 344.673724][ T4266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.694937][ T4266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.702855][ T4266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.710908][ T4266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 344.718483][ T4266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.746790][ T8570] usb 4-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 344.773112][ T8570] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.243668][ T8570] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.3-1, 00:00:00:00:00:00. [ 345.249177][T15215] lo speed is unknown, defaulting to 1000 [ 345.304919][ T8570] usb 4-1: USB disconnect, device number 18 [ 346.260759][T15236] loop4: detected capacity change from 0 to 32768 [ 346.291264][T15311] loop3: detected capacity change from 0 to 512 [ 346.355881][T15311] EXT4-fs: Ignoring removed bh option [ 346.417287][T15236] XFS (loop4): Mounting V5 Filesystem [ 346.432863][T15311] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 346.443182][T15311] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 346.461367][T15311] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 346.549666][T15311] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 346.575828][T15344] loop6: detected capacity change from 0 to 512 [ 346.584261][T15236] XFS (loop4): Ending clean mount [ 346.595789][T15344] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 346.607925][T15344] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 346.653347][T15311] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 346.723447][T15344] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3852: comm syz.6.3495: Allocating blocks 41-42 which overlap fs metadata [ 346.790376][ T4269] XFS (loop4): Unmounting Filesystem [ 346.803435][ T4266] Bluetooth: hci0: command 0x0409 tx timeout [ 346.844983][T15344] __quota_error: 2 callbacks suppressed [ 346.845003][T15344] Quota error (device loop6): write_blk: dquota write failed [ 346.941796][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 346.954113][T15344] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 346.993305][T15344] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 347.080936][T15344] EXT4-fs error (device loop6): ext4_acquire_dquot:6835: comm syz.6.3495: Failed to acquire dquot type 1 [ 347.154016][T15344] EXT4-fs error (device loop6): mb_free_blocks:1826: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 347.302213][T15344] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #12: comm syz.6.3495: corrupted inode contents [ 347.432320][T15344] EXT4-fs error (device loop6): ext4_dirty_inode:6137: inode #12: comm syz.6.3495: mark_inode_dirty error [ 347.464680][T15344] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #12: comm syz.6.3495: corrupted inode contents [ 347.514921][T15344] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #12: comm syz.6.3495: mark_inode_dirty error [ 347.546040][T15215] chnl_net:caif_netlink_parms(): no params data found [ 347.591808][T15344] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #12: comm syz.6.3495: corrupted inode contents [ 347.713319][T15344] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 347.832764][T15344] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #12: comm syz.6.3495: corrupted inode contents [ 347.873576][T15344] EXT4-fs error (device loop6): ext4_truncate:4318: inode #12: comm syz.6.3495: mark_inode_dirty error [ 347.887746][T15344] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 347.917005][T15344] EXT4-fs (loop6): 1 truncate cleaned up [ 347.928481][T15344] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 348.199735][T15215] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.226763][T15215] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.254231][T15215] device bridge_slave_0 entered promiscuous mode [ 348.297738][T15215] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.330015][T15215] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.358895][T10568] EXT4-fs (loop6): unmounting filesystem. [ 348.365847][ T4355] Quota error (device loop6): remove_tree: Cycle in quota tree detected: block 4 index 0 [ 348.395813][ T4355] EXT4-fs error (device loop6): ext4_release_dquot:6871: comm kworker/u4:6: Failed to release dquot type 1 [ 348.402372][T15215] device bridge_slave_1 entered promiscuous mode [ 348.502825][ T46] device hsr_slave_0 left promiscuous mode [ 348.591177][ T46] device hsr_slave_1 left promiscuous mode [ 348.621891][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.653563][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.714743][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.742835][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.778979][ T46] device bridge_slave_1 left promiscuous mode [ 348.821407][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.883191][ T4266] Bluetooth: hci0: command 0x041b tx timeout [ 348.917482][ T46] device bridge_slave_0 left promiscuous mode [ 348.967896][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.207001][ T46] device veth1_macvtap left promiscuous mode [ 349.221111][ T46] device veth0_macvtap left promiscuous mode [ 349.269618][ T46] device veth1_vlan left promiscuous mode [ 349.288994][ T46] device veth0_vlan left promiscuous mode [ 349.775709][T15514] loop4: detected capacity change from 0 to 16 [ 349.841468][T15514] erofs: (device loop4): mounted with root inode @ nid 36. [ 350.121001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 350.143099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 350.276093][ T46] infiniband syz0: set down [ 350.823078][ T8568] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 350.968451][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 351.013038][ T8568] usb 7-1: Using ep0 maxpacket: 32 [ 351.021397][ T8568] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 351.033295][ T8568] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 351.055560][ T8568] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 351.073271][ T8568] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.095614][ T8568] usb 7-1: Product: syz [ 351.107781][ T8568] usb 7-1: Manufacturer: syz [ 351.112632][ T8568] usb 7-1: SerialNumber: syz [ 351.150061][ T8568] usb 7-1: config 0 descriptor?? [ 351.185206][ T8568] usb 7-1: no audio or video endpoints found [ 351.339273][T15573] loop4: detected capacity change from 0 to 128 [ 351.425170][ T8568] usb 7-1: USB disconnect, device number 7 [ 351.847188][T15593] netlink: 'syz.4.3532': attribute type 1 has an invalid length. [ 351.855169][T15593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3532'. [ 352.464603][ T46] team0 (unregistering): Port device team_slave_1 removed [ 352.683667][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.769164][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.043731][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 353.227622][ T11] smc: removing ib device syz0 [ 353.230164][ T46] bond0 (unregistering): Released all slaves [ 353.359790][ T7] bond0 speed is unknown, defaulting to 1000 [ 353.453218][T15215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.515790][T15215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.635643][T15215] team0: Port device team_slave_0 added [ 353.676024][T15215] team0: Port device team_slave_1 added [ 353.790103][T15215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.820899][T15215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.886789][T15215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.910393][T15215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.929583][T15215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.980407][T15215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.077626][T15215] device hsr_slave_0 entered promiscuous mode [ 354.105167][T15215] device hsr_slave_1 entered promiscuous mode [ 354.113866][T15215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.121474][T15215] Cannot create hsr debugfs directory [ 354.728650][T15215] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 354.749268][T15215] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 354.770992][T15215] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 354.800770][T15215] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 355.009051][T15215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.027411][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 355.042527][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 355.066413][T15215] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.087131][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 355.104867][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 355.122772][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.130005][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.152631][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 355.164541][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 355.183600][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.190859][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.211050][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 355.236350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 355.259691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 355.306590][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 355.322841][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 355.332183][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 355.344485][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 355.353809][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 355.362474][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 355.390079][T15215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.415674][T15215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 355.435269][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 355.445311][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 355.464677][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 355.840794][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 355.850805][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 355.877536][T15215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.487044][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 356.502200][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 356.541127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 356.553528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 356.561980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 356.571348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 356.582959][T15215] device veth0_vlan entered promiscuous mode [ 356.602708][T15215] device veth1_vlan entered promiscuous mode [ 356.637653][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 356.655612][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 356.671030][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 356.681545][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 356.706503][T15215] device veth0_macvtap entered promiscuous mode [ 356.722066][T15215] device veth1_macvtap entered promiscuous mode [ 356.760104][T15215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.770842][T15215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.789475][T15215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.801459][T15215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.824024][T15215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.842233][T15215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.863736][T15215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.882060][T15215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.892393][T15215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.904027][T15215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.922271][T15215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.943015][T15215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.962835][T15215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.974518][T15215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.985939][T15215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.996356][T15215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.007244][T15215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.026596][T15215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.042258][T15215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.073058][T15215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.091130][T15215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.102259][T15215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.121457][T15215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.131620][T15215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.142622][T15215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.154717][T15215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.166335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 357.185380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 357.202018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 357.213607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 357.225535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 357.234916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 357.247021][T15215] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.256305][T15215] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.273896][T15215] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.282748][T15215] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.495767][ T4363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.522279][ T4363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.539773][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 357.580931][ T1216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.591555][ T1216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.613631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 357.807459][T15887] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3543'. [ 358.198151][T15908] netlink: 'syz.3.3534': attribute type 4 has an invalid length. [ 358.406478][T15917] loop4: detected capacity change from 0 to 16 [ 358.439800][T15917] erofs: (device loop4): mounted with root inode @ nid 36. [ 358.501463][T15925] netlink: 'syz.5.3539': attribute type 1 has an invalid length. [ 358.509343][T15925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3539'. [ 358.806567][T15939] netlink: 'syz.3.3546': attribute type 1 has an invalid length. [ 359.157339][T15949] loop4: detected capacity change from 0 to 1024 [ 359.433541][T15962] QAT: Invalid ioctl 1075883590 [ 359.438575][T15962] QAT: Invalid ioctl 1075883590 [ 359.480044][T15962] QAT: Invalid ioctl 1075883590 [ 359.540989][T15962] QAT: Invalid ioctl 1075883590 [ 359.558543][T15962] QAT: Invalid ioctl 1075883590 [ 359.574981][T15962] QAT: Invalid ioctl 1075883590 [ 359.613821][T15962] QAT: Invalid ioctl 1075883590 [ 359.619184][T15962] QAT: Invalid ioctl 1075883590 [ 359.653188][T15962] QAT: Invalid ioctl 1075883590 [ 359.658324][T15962] QAT: Invalid ioctl 1075883590 [ 359.763175][ T7] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 359.965083][ T7] usb 7-1: unable to get BOS descriptor or descriptor too short [ 359.984463][ T7] usb 7-1: config 7 has an invalid interface number: 199 but max is 0 [ 359.992706][ T7] usb 7-1: config 7 has no interface number 0 [ 360.049545][ T7] usb 7-1: config 7 interface 199 has no altsetting 0 [ 360.075704][ T7] usb 7-1: string descriptor 0 read error: -22 [ 360.103900][ T7] usb 7-1: New USB device found, idVendor=0c45, idProduct=6282, bcdDevice=cb.15 [ 360.133063][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.188222][ T7] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6282 [ 360.594034][ T7] gspca_sn9c20x: Write register 1001 failed -71 [ 360.600458][ T7] gspca_sn9c20x: Device initialization failed [ 360.647285][ T7] gspca_sn9c20x: probe of 7-1:7.199 failed with error -71 [ 360.703126][ T7] usb 7-1: USB disconnect, device number 8 [ 360.864349][T16040] loop3: detected capacity change from 0 to 1764 [ 361.051817][T16054] netlink: 'syz.5.3575': attribute type 10 has an invalid length. [ 361.144150][T16054] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 361.163243][ T8568] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 361.247954][T16054] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 361.321327][T16054] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 361.373793][T16054] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 361.383286][ T8568] usb 8-1: Using ep0 maxpacket: 32 [ 361.390701][ T8568] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 361.431209][ T8568] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.473996][ T8568] usb 8-1: config 0 descriptor?? [ 361.505136][ T8568] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 361.741627][T16075] loop3: detected capacity change from 0 to 4096 [ 361.822340][T16075] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 361.891122][T16075] ntfs3: loop3: Failed to load $Extend. [ 361.914767][ T8568] gspca_nw80x: reg_r err -71 [ 361.919481][ T8568] nw80x: probe of 8-1:0.0 failed with error -71 [ 361.957270][ T8568] usb 8-1: USB disconnect, device number 2 [ 362.908639][T16131] loop3: detected capacity change from 0 to 64 [ 362.962747][T16136] x_tables: duplicate underflow at hook 1 [ 363.332043][T16140] loop5: detected capacity change from 0 to 4096 [ 363.369582][T16148] loop7: detected capacity change from 0 to 1764 [ 363.404946][T16140] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 363.469160][T16140] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 363.515477][T16140] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 363.584260][T16140] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 363.727375][T16140] ntfs: volume version 3.1. [ 363.748956][T16140] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 363.809530][T16140] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 363.878564][T16140] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 364.043959][T16140] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 364.085667][T16187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.153360][T16140] ntfs: (device loop5): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 364.497316][T16209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3612'. [ 364.543322][T16209] netlink: 'syz.4.3612': attribute type 1 has an invalid length. [ 364.634256][T16222] nft_compat: unsupported protocol 5 [ 364.803107][ T7] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 364.936277][T16227] loop6: detected capacity change from 0 to 4096 [ 364.966523][T16237] netlink: 'syz.4.3621': attribute type 10 has an invalid length. [ 364.983172][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 365.007643][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.013182][T16237] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3621'. [ 365.046068][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.078337][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 365.089886][T16237] bridge0: port 4(ipvlan1) entered blocking state [ 365.118217][T16237] bridge0: port 4(ipvlan1) entered disabled state [ 365.130558][T16227] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 365.139722][T16237] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 365.145032][ T7] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 365.211020][T16227] ntfs3: loop6: Failed to load $Extend. [ 365.233385][ T7] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 365.241995][ T7] usb 4-1: Product: syz [ 365.263026][ T7] usb 4-1: Manufacturer: syz [ 365.267802][ T7] usb 4-1: SerialNumber: syz [ 365.290679][T16249] loop5: detected capacity change from 0 to 512 [ 365.325809][ T7] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input15 [ 365.377129][T16249] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 365.420437][T16249] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 365.523040][ T4266] Bluetooth: hci5: command 0x0406 tx timeout [ 365.611032][ T9591] EXT4-fs (loop5): unmounting filesystem. [ 365.612793][ T7] usb 4-1: USB disconnect, device number 19 [ 365.756145][ T7] appletouch 4-1:1.0: input: appletouch disconnected [ 365.837085][T16286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3628'. [ 366.472465][T16311] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.777746][T16324] SET target dimension over the limit! [ 366.846468][T16330] netlink: 'syz.4.3642': attribute type 13 has an invalid length. [ 367.010309][T16338] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3645'. [ 367.307454][T16360] netlink: 830 bytes leftover after parsing attributes in process `syz.7.3652'. [ 369.410822][T16462] loop6: detected capacity change from 0 to 512 [ 369.611106][T16462] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 369.668806][T16462] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.823954][T16473] loop5: detected capacity change from 0 to 1024 [ 369.888318][T10568] EXT4-fs (loop6): unmounting filesystem. [ 370.023747][T16443] loop3: detected capacity change from 0 to 32768 [ 370.111279][T16488] netlink: 194488 bytes leftover after parsing attributes in process `syz.6.3686'. [ 370.216268][T16443] XFS (loop3): Mounting V5 Filesystem [ 370.373365][T16443] XFS (loop3): Ending clean mount [ 370.410972][T16443] XFS (loop3): Quotacheck needed: Please wait. [ 370.537318][T16443] XFS (loop3): Quotacheck: Done. [ 370.590379][T16516] usb usb8: usbfs: process 16516 (syz.7.3693) did not claim interface 0 before use [ 370.734497][ T4276] XFS (loop3): Unmounting Filesystem [ 370.928292][T16534] loop7: detected capacity change from 0 to 512 [ 370.982846][T16534] EXT4-fs: Ignoring removed bh option [ 371.002387][T16534] EXT4-fs: Ignoring removed mblk_io_submit option [ 371.051445][T16534] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 371.135150][T16540] loop6: detected capacity change from 0 to 512 [ 371.157134][T16545] comedi comedi3: aio_iiro_16: I/O port conflict (0xc,8) [ 371.211131][T16534] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 371.270118][T16534] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 371.346456][T16540] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 371.397292][T16540] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.500880][T16561] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3704'. [ 371.544948][T15215] EXT4-fs (loop7): unmounting filesystem. [ 371.553594][T16561] 0ªX¹¦À: renamed from caif0 [ 371.611547][T16561] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 371.706277][T10568] EXT4-fs (loop6): unmounting filesystem. [ 372.165628][T16599] device bridge1 entered promiscuous mode [ 372.737294][T16636] loop3: detected capacity change from 0 to 256 [ 372.966879][T16636] FAT-fs (loop3): Directory bread(block 64) failed [ 372.975580][T16636] FAT-fs (loop3): Directory bread(block 65) failed [ 372.982248][T16636] FAT-fs (loop3): Directory bread(block 66) failed [ 373.053569][T16636] FAT-fs (loop3): Directory bread(block 67) failed [ 373.060282][T16636] FAT-fs (loop3): Directory bread(block 68) failed [ 373.130919][T16636] FAT-fs (loop3): Directory bread(block 69) failed [ 373.163297][T16636] FAT-fs (loop3): Directory bread(block 70) failed [ 373.169998][T16636] FAT-fs (loop3): Directory bread(block 71) failed [ 373.223921][T16636] FAT-fs (loop3): Directory bread(block 72) failed [ 373.241409][T16636] FAT-fs (loop3): Directory bread(block 73) failed [ 373.392416][ T26] audit: type=1326 audit(1770635612.944:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16665 comm="syz.6.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffe59af79 code=0x7ffc0000 [ 373.480735][T16670] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3735'. [ 373.490286][ T26] audit: type=1326 audit(1770635612.944:4253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16665 comm="syz.6.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7feffe59af79 code=0x7ffc0000 [ 373.583160][ T26] audit: type=1326 audit(1770635612.944:4254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16665 comm="syz.6.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffe59af79 code=0x7ffc0000 [ 373.605894][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.696875][ T27] INFO: task syz-executor:4277 blocked for more than 143 seconds. [ 373.703068][ T26] audit: type=1326 audit(1770635612.944:4255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16665 comm="syz.6.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffe59af79 code=0x7ffc0000 [ 373.712957][ T27] Not tainted syzkaller #0 [ 373.727226][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.833323][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.857289][ T27] task:syz-executor state:D stack:22064 pid:4277 ppid:1 flags:0x00004004 [ 373.893226][ T41] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 373.903097][ T27] Call Trace: [ 373.906540][ T27] [ 373.953150][ T27] __schedule+0x11d1/0x40e0 [ 373.961155][ T27] ? mark_lock+0x94/0x320 [ 373.979221][ T27] ? __sched_text_start+0x8/0x8 [ 374.008442][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 374.027997][ T27] ? lock_chain_count+0x20/0x20 [ 374.043020][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 374.060487][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 374.078775][ T27] schedule+0xb9/0x180 [ 374.100727][ T27] io_schedule+0x7c/0xd0 [ 374.105910][ T41] usb 8-1: Using ep0 maxpacket: 16 [ 374.116118][T16691] nvme_fabrics: missing parameter 'transport=%s' [ 374.118288][ T41] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 374.137235][T16691] nvme_fabrics: missing parameter 'nqn=%s' [ 374.143725][ T27] folio_wait_bit_common+0x70a/0xfa0 [ 374.149184][ T27] ? folio_wait_bit+0x30/0x30 [ 374.154562][ T27] ? migration_entry_wait_on_locked+0xe90/0xe90 [ 374.160979][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.169528][ T27] ? folio_mapping+0x1ba/0x4d0 [ 374.169578][ T27] truncate_inode_pages_range+0x9fe/0x1090 [ 374.169618][ T27] ? mapping_evict_folio+0x520/0x520 [ 374.169659][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 374.169707][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 374.169730][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 374.202433][ T41] usb 8-1: Product: syz [ 374.211557][ T41] usb 8-1: Manufacturer: syz [ 374.222173][ T41] usb 8-1: SerialNumber: syz [ 374.230915][ T27] evict+0x4dc/0x8d0 [ 374.249099][ T27] ? proc_nr_inodes+0x2f0/0x2f0 [ 374.252217][ T41] r8152-cfgselector 8-1: config 0 descriptor?? [ 374.274983][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 374.280278][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 374.288211][ T27] evict_inodes+0x60c/0x6a0 [ 374.292795][ T27] ? clear_inode+0x150/0x150 [ 374.302959][ T27] generic_shutdown_super+0x93/0x340 [ 374.309551][ T27] kill_block_super+0x7c/0xe0 [ 374.317637][ T27] deactivate_locked_super+0x93/0xf0 [ 374.331435][ T27] cleanup_mnt+0x42c/0x4b0 [ 374.340159][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 374.357257][ T27] task_work_run+0x1d0/0x260 [ 374.368951][ T27] ? task_work_cancel+0x220/0x220 [ 374.380041][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 374.390939][ T27] exit_to_user_mode_loop+0xe6/0x110 [ 374.413567][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 374.431635][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 374.442726][ T27] do_syscall_64+0x58/0xa0 [ 374.455404][ T27] ? clear_bhb_loop+0x60/0xb0 [ 374.460351][ T27] ? clear_bhb_loop+0x60/0xb0 [ 374.469983][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.478627][ T27] RIP: 0033:0x7f000859c1d7 [ 374.493220][ T27] RSP: 002b:00007ffea4371a08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 374.503459][ T27] RAX: 0000000000000000 RBX: 00007f0008630b3b RCX: 00007f000859c1d7 [ 374.511777][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea4371ac0 [ 374.520643][ T27] RBP: 00007ffea4371ac0 R08: 00007ffea4372ac0 R09: 00000000ffffffff [ 374.529370][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffea4372b50 [ 374.537914][ T27] R13: 00007f0008630b3b R14: 0000000000036ce6 R15: 00007ffea4372b90 [ 374.546896][ T27] [ 374.550337][ T27] [ 374.550337][ T27] Showing all locks held in the system: [ 374.566007][ T27] 1 lock held by rcu_tasks_kthre/12: [ 374.571445][ T27] #0: ffffffff8cb2dfb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 374.583676][ T27] 1 lock held by rcu_tasks_trace/13: [ 374.589117][ T27] #0: ffffffff8cb2e7d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 374.600805][ T27] 1 lock held by khungtaskd/27: [ 374.606185][ T27] #0: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 374.616613][ T27] 5 locks held by kworker/1:1/41: [ 374.621875][ T27] #0: ffff888141255938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 374.640145][ T27] #1: ffffc90000b27d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 374.652802][ T27] #2: ffff888027e1b190 (&dev->mutex){....}-{3:3}, at: hub_event+0x19f/0x5560 [ 374.685107][ T27] #3: ffff888046ad5190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 374.702861][ T27] #4: ffff888046ad4118 [ 374.706415][ T41] r8152-cfgselector 8-1: Unknown version 0x0000 [ 374.728711][ T41] r8152-cfgselector 8-1: bad CDC descriptors [ 374.735688][ T27] (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 374.739590][ T41] r8152-cfgselector 8-1: Unknown version 0x0000 [ 374.743599][ T27] 2 locks held by getty/4022: [ 374.755156][ T27] #0: ffff88814d0d2098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 374.765447][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 374.775735][ T27] 1 lock held by syz-executor/4270: [ 374.781063][ T27] #0: ffff888052c7a0e0 (&type->s_umount_key#63){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 374.786020][ T41] r8152-cfgselector 8-1: USB disconnect, device number 3 [ 374.820840][ T27] 1 lock held by syz-executor/4277: [ 374.831712][ T27] #0: ffff888075f9e0e0 (&type->s_umount_key#63){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 374.851082][ T27] 2 locks held by cmp/16716: [ 374.856007][ T27] [ 374.858373][ T27] ============================================= [ 374.858373][ T27] [ 374.882165][ T27] NMI backtrace for cpu 1 [ 374.886555][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 374.893882][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 374.904080][ T27] Call Trace: [ 374.907403][ T27] [ 374.910390][ T27] dump_stack_lvl+0x188/0x24e [ 374.915117][ T27] ? irq_work_queue+0xb8/0x140 [ 374.919943][ T27] ? show_regs_print_info+0x12/0x12 [ 374.925195][ T27] ? load_image+0x400/0x400 [ 374.929741][ T27] ? vprintk_emit+0x59f/0x6a0 [ 374.934465][ T27] ? printk_sprint+0x460/0x460 [ 374.939300][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 374.944284][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 374.950482][ T27] ? _printk+0xda/0x130 [ 374.954684][ T27] ? load_image+0x400/0x400 [ 374.959272][ T27] ? load_image+0x400/0x400 [ 374.963912][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 374.970135][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 374.976253][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 374.982292][ T27] watchdog+0xeee/0xf30 [ 374.986499][ T27] ? watchdog+0x1ed/0xf30 [ 374.990882][ T27] kthread+0x29d/0x330 [ 374.994986][ T27] ? hungtask_pm_notify+0x40/0x40 [ 375.000051][ T27] ? kthread_blkcg+0xd0/0xd0 [ 375.004697][ T27] ret_from_fork+0x1f/0x30 [ 375.009173][ T27] [ 375.012294][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.019252][ T27] Sending NMI from CPU 1 to CPUs 0: [ 375.024816][ C0] NMI backtrace for cpu 0 [ 375.024829][ C0] CPU: 0 PID: 16722 Comm: rm Not tainted syzkaller #0 [ 375.024845][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 375.024853][ C0] RIP: 0010:lock_release+0xc8/0x920 [ 375.024877][ C0] Code: 4e 0b bb 0c 0f 83 3a 05 00 00 41 89 de c1 eb 06 48 8d 3c dd 68 cb 1f 8e be 08 00 00 00 e8 b0 9e 6e 00 4c 0f a3 35 20 09 bb 0c <73> 0d e8 c1 af 07 00 84 c0 0f 84 41 05 00 00 48 c7 c0 24 00 20 8e [ 375.024890][ C0] RSP: 0018:ffffc900054978a0 EFLAGS: 00000257 [ 375.024904][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff8164c240 [ 375.024913][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e1fcb68 [ 375.024923][ C0] RBP: ffffc900054979b0 R08: ffffffff8e1fcb6f R09: 1ffffffff1c3f96d [ 375.024934][ C0] R10: dffffc0000000000 R11: fffffbfff1c3f96e R12: ffff88813fffa700 [ 375.024943][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000a92f20 [ 375.024953][ C0] FS: 00007fb18766ac80(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 375.024966][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.024976][ C0] CR2: 00007fb1878be68c CR3: 0000000058d50000 CR4: 00000000003506f0 [ 375.024991][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 375.025000][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 375.025009][ C0] Call Trace: [ 375.025014][ C0] [ 375.025021][ C0] ? free_unref_page+0x195/0x3f0 [ 375.025042][ C0] ? read_lock_is_recursive+0x10/0x10 [ 375.025060][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 375.025078][ C0] ? do_raw_spin_trylock+0xae/0x190 [ 375.025091][ C0] ? do_raw_spin_lock+0x2f0/0x2f0 [ 375.025106][ C0] ? free_unref_page_commit+0x1f5/0x560 [ 375.025127][ C0] _raw_spin_unlock+0x12/0x40 [ 375.025141][ C0] free_unref_page+0x195/0x3f0 [ 375.025161][ C0] qlist_free_all+0x76/0xe0 [ 375.025178][ C0] kasan_quarantine_reduce+0x144/0x160 [ 375.025194][ C0] __kasan_slab_alloc+0x1e/0x80 [ 375.025213][ C0] slab_post_alloc_hook+0x4b/0x480 [ 375.025228][ C0] ? slab_pre_alloc_hook+0x91/0x310 [ 375.025243][ C0] ? kvmalloc_node+0x6c/0x180 [ 375.025264][ C0] __kmem_cache_alloc_node+0x140/0x260 [ 375.025282][ C0] ? kvmalloc_node+0x6c/0x180 [ 375.025300][ C0] __kmalloc_node+0xa0/0x240 [ 375.025322][ C0] kvmalloc_node+0x6c/0x180 [ 375.025341][ C0] seq_read_iter+0x1f6/0xd50 [ 375.025357][ C0] ? _copy_to_user+0xea/0x130 [ 375.025375][ C0] ? cp_new_stat+0x3d0/0x540 [ 375.025394][ C0] ? cp_old_stat+0x680/0x680 [ 375.025414][ C0] proc_reg_read_iter+0x1a9/0x270 [ 375.025436][ C0] vfs_read+0x4a7/0xa00 [ 375.025456][ C0] ? kernel_read+0x1e0/0x1e0 [ 375.025477][ C0] ? __x64_sys_newfstat+0x19a/0x220 [ 375.025498][ C0] ? __fdget_pos+0x2b5/0x360 [ 375.025523][ C0] ksys_read+0x14c/0x250 [ 375.025542][ C0] ? vfs_write+0xa30/0xa30 [ 375.025562][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 375.025593][ C0] do_syscall_64+0x4c/0xa0 [ 375.025610][ C0] ? clear_bhb_loop+0x60/0xb0 [ 375.025625][ C0] ? clear_bhb_loop+0x60/0xb0 [ 375.025642][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.025657][ C0] RIP: 0033:0x7fb1877ba407 [ 375.025669][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 375.025679][ C0] RSP: 002b:00007ffcc20017a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 375.025693][ C0] RAX: ffffffffffffffda RBX: 00007fb18766ac80 RCX: 00007fb1877ba407 [ 375.025703][ C0] RDX: 0000000000000400 RSI: 0000563faf697500 RDI: 0000000000000003 [ 375.025712][ C0] RBP: 00007fb187902ff0 R08: 0000000000000000 R09: 0000000000000000 [ 375.025721][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffcc2001888 [ 375.025730][ C0] R13: 00007fb187902ea0 R14: 00007fb1877064d0 R15: 0000000000000000 [ 375.025746][ C0] [ 375.030751][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 375.419120][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 375.426370][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 375.436557][ T27] Call Trace: [ 375.439864][ T27] [ 375.442825][ T27] dump_stack_lvl+0x188/0x24e [ 375.447555][ T27] ? memcpy+0x3c/0x60 [ 375.451580][ T27] ? show_regs_print_info+0x12/0x12 [ 375.456824][ T27] ? load_image+0x400/0x400 [ 375.461382][ T27] panic+0x2e5/0x730 [ 375.465307][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 375.470983][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 375.475518][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 375.481116][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 375.487323][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 375.493610][ T27] watchdog+0xf2d/0xf30 [ 375.497811][ T27] ? watchdog+0x1ed/0xf30 [ 375.502185][ T27] kthread+0x29d/0x330 [ 375.506284][ T27] ? hungtask_pm_notify+0x40/0x40 [ 375.511356][ T27] ? kthread_blkcg+0xd0/0xd0 [ 375.516080][ T27] ret_from_fork+0x1f/0x30 [ 375.520552][ T27] [ 375.524097][ T27] Kernel Offset: disabled [ 375.528425][ T27] Rebooting in 86400 seconds..