last executing test programs: 2m38.231378692s ago: executing program 2 (id=1768): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x4b, 0x48, "d2f1620200000058f3f99acdcb1e9b12112b2adaeab244fa0ec2525cf690944e879f34e0b6772808bb6f90aa6f43e29bd603698b9559dd7a6d35b98a5bd59be866122c3317bc11bf"}}) 2m37.970131357s ago: executing program 2 (id=1772): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x0, 0x5c}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x1, 0x0, 0x3500, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m37.724752801s ago: executing program 2 (id=1776): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 2m37.501251284s ago: executing program 2 (id=1780): r0 = syz_open_dev$media(&(0x7f0000000040), 0x2a, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001040)={0x0, 0x2, 0x0, &(0x7f0000000b80)=[{}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m37.179938973s ago: executing program 2 (id=1784): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m36.149866903s ago: executing program 2 (id=1794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xd}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) 2m21.051444536s ago: executing program 32 (id=1794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xd}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) 39.359430126s ago: executing program 3 (id=3447): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800090300000000000000000a000000000004000b0008"], 0x24}}, 0x0) 39.184988136s ago: executing program 3 (id=3451): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_newvlan={0x28, 0x76, 0x1, 0x0, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x9}}}]}, 0x28}, 0x1, 0x5502000000000000}, 0x0) 38.966173879s ago: executing program 3 (id=3455): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d80000001400810d4e81f782db44b9040a11080211000000040000a118000200fc00000000000e1208000f0100810401a80016ea1f000640c9201114c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 38.722523183s ago: executing program 3 (id=3459): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file2\x00', 0x1000000, &(0x7f0000000a40)={[{@force}, {@force}, {}, {@part={'part', 0x3d, 0x5}}, {@type={'type', 0x3d, "43935aa7"}}, {@creator={'creator', 0x3d, "0244ed5c"}}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-14'}}]}, 0x42, 0x70b, &(0x7f0000000300)="$eJzs3U1sHGcZAOB31uu1N5XcbZu0BSHFatQIGkhsLyVBQiJUCHyoUCQuvS6J01heu5HtIidCZAsUuMEJ5dBDK2QOPaEekIo4IMoZCYkryj0S94gDi2Z2dr0/9nq3/kvT55Fm55uZ7+edNzPf/sXaAD63Ft+IyUYksXjh9a10+8F2tf5gu7raLkfEVEQUIoqtVSRrEcknEVejtcQX0p15d8le47z68OP3zt//sNraKuZLVr8wrN2O5pARGvkSsxExka/HVNyrv+vx2kB/98bqOunEnSbsXDtxcNKaAxrjNB/hvgUed/ciJiZ32V+JOBUR0/nrgMhnh8Ixh3foxprlAAAA4PE0sV+Fpx/Fo9iKmeMJBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4MSes3A5N8KbTLs5G0f/+/lO9LlUonHO9wX93n+Ls3jykQAAAAAAAAABjR98eq/VH+xf3ZR/EotmKmvb+ZZN/5v5RtnM4en4q3YyOWYj0uxlbUYjM2Yz3mIyZnujosbdU2N9fnB1v+LtKWzWbzXt5yISIqAy0X9gi0MNZpAQAAAAAAAMDn1c9iMWZOOggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiWREy0Vtlyul2uRKEYEdMRUUrrNSL+0i5/lv31pAMAAACAo1fO1zPJ/1qFZpK9538+e98/HW/HWmzGcmxGPZbiRiQfRP6uv/DPRrX+YLu6mi6DHX/nP2PFkfUYERPxzh4jz2U1znRaLMb34odxIWbjWqzHcvw4arEZSzEb5fQkohZJVMqtTy8q7Th3j/dqz9a1/tjO9m2/mEVSjpuxnMV2Ma6XovWxSXYO6Zgvdo32p1JE34jvpNlJvp0bMUc3uv69fpt/LpNrPj1iH0ejkp35ZCcjc2nu82w8Mzz3Y14n/SPNR6HzGdTpnVHSzf6R2jn/0Tg5P9VaTacPv+zN+WEb86O0/kwsRCG/+iKe78357ZfvP9vb+Cv/+tu1W4W1lVs3Ny4c4SkdxOx+FSbbhf5MVLsy8cLwqy/PRD3NRGP0TEz275geteXRKuXZyKaiEWfL72alWrzUdQm+FTdiKS7HXMzHlZiLb8ZCVDtXWLqc6clrsbram5PsXisMzm/lIcGf+3JXpV/tU/l4pXl5piuv3TNdJb8csj1XfxNzXVffs8OvvrGfBdLxv5iX0zF+3nnGeRxUsiz1zs3t6J4bnokPmunjRn1tZf1W7faI453P1+lt+27v3Pz70aPuf3Y/DOn1ks64xWwry0m5fb2kx57rRNubr1L+jUurXWHg2JnOsUrMxHL8YM87tZS/hhvsqXXshe5j/96ZOUv565v2sZ5XOfFW1LNXIX32naoBOGanXjlVKj8s/6P8fvkX5Vvl16dfm7oy9aVSTP69+OeJPxb+UPhW8kq8Hz+NmZOOFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAngQbd+6u1Or1pfVOIab79xy0UNpzrOGFKOxbZ/up0TqMSsTwsZK8UNq9zlMRcchpObrCy78+UPNy/5m2f2HpoIF9FBFD6pQOfO7J2NfY2IU0D4fSYbPZSmq2pzkxRvNiu9XudYqxMR0rtaS4yx03tXMXRGWlVv9vs6d5ObpuGeAJd2lz9faljTt3v7a8Wntz6c2ltYUrl69crn5j/uuXbi7Xl+ZajycdJXAUNu7cndhl98Av3QIAAAAAAAAAAACPj/x//29+6j9mKO5Tp7S+sfvIZ4/7VAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDPqMU3YrIRSczPXZxLtx9sV+vp0i7v1CxGRCEikp9EJJ9EXI3WEpWu7pK9xnn14cfvnb//YXWnr2K7fmFYu9E08iVmI2IiX+9vapduBvu73tVf41OFl3TOME3YuXbi4KT9PwAA//+FhvXF") mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 38.25936871s ago: executing program 3 (id=3463): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) 37.752105779s ago: executing program 3 (id=3467): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockname(r0, 0x0, &(0x7f0000000000)) 37.139905555s ago: executing program 33 (id=3467): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockname(r0, 0x0, &(0x7f0000000000)) 33.145601648s ago: executing program 5 (id=3499): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') pread64(r0, &(0x7f0000000380)=""/248, 0xf8, 0x7d) 32.94191282s ago: executing program 5 (id=3501): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0xb, @pix_mp={0x38305543, 0x5, 0x31363553, 0x6, 0x3, [{0x2, 0x4}, {0x7fffffff, 0x10000}, {0x5, 0x31a0}, {0x56, 0x5}, {0x5, 0x1}, {0x800000, 0x6}, {0x7b, 0xf}, {0x40, 0x80000001}], 0x8, 0x4, 0x2, 0x1, 0x1}}) 32.821387827s ago: executing program 5 (id=3502): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x5, 0x6, 0x2, 0x0, 0xfa}) 32.59684263s ago: executing program 5 (id=3504): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file2\x00', 0x1000000, &(0x7f0000000a40)={[{@force}, {@force}, {}, {@part={'part', 0x3d, 0x5}}, {@type={'type', 0x3d, "43935aa7"}}, {@creator={'creator', 0x3d, "0244ed5c"}}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-14'}}]}, 0x42, 0x70b, &(0x7f0000000300)="$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") mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 32.174599695s ago: executing program 5 (id=3506): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff8000/0x4000)=nil, 0x4000, &(0x7f0000000300)='\x00i\xda&Z\xa8M\xb5\xb1xT\xa1\x8a\v\xeeL\xaa\xd6\xbem\x13\x88=\x9d\xd6\x1b;M\x0fuL\xad$\xba\xda\xdb\xc9\xaf\x03o\xc2+\x82\xf3\xe9\xf2\x14\xda\xf4\x88\x8c\x8e\xe0\xb3\xc6\xf7}\x15\x9d\xa2|\x17\x9eb\x1fE\xe3T[\xa5)\xa1\x82\xaa\xe0\xdd\x87Q\x14R\xc5S!fzw^s\xd1b\x9dB\x03\x00-\xcc\xd7\xbb\x0f\x00\xc1\xf6\xe5^G\x9bc\x18}\x020\xdf\xa9\xd7\x7f\xafM\xca[\xb8@\x17\xb3#\x06O\xaf\x11\xd3\x17_%ly\x9d\xb2&\x8f\x92\xc9\xa4)\xf23\x196B\xf0w\xfb\xb9\xdb0\x03\xe9\x9c\x8f\x9c\x17\xa6\x96{\x03u\x0eB&\a\xab25\xc2\xd3\xd2(\x91\x04\xe1\xcfg\xc4Z\xb4\x98@\xe7\'\xb0v\xad\x18\xefA\xd59\x96gnQ\x9c\xd7q\xc4\xac4\xdd\xf3\x81\x92\xac\x83i4\xeb\xf6\x87\xb7\xe8\xd0\xd1\xc2\xb3\x15\xb8\t||\xdcP\x8fG\xc9\xeb\xb7Ol\x03\xd6?:\x8b\x9a\xf4\xc7\x91\x1d\x05\xca\as\x88)\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8e\f\xa2\x9d\xc3\xa5#*\x17\x01g\xc9\x91\xe86\xdf\x9f\xd1\x8b!\xdc\xa2\xe5.\x193/K%\xf9\x1e\b\xf3\xa7\xbf\x98\xc4\x9d\xd2r\'\xe1\x95\t\xdeI\xdf\xd4\xa0\xf9\xf40\xe9+\x87\"*\xafV\x92\xac=6\xbeh\xfa\x1b\x03s\xa3qx\xf4.+\xc8{\xda5\x8eO\x86\xca&6\x92\xdf\x9e\xbe#\x91\x88\xf7\xc1\'\xce)l\x1am\x02J\xcb\x11\xafgd\x89\x86\x8c\xbfn\xe4\x8d\x1a\xccb\xb3\xbe\xd8\v({\a\xc1&\x13\xfb\x9c\x1e\"\xdd\xb9\xa8\x00L\x05w]\x11\x9aw (\xe5g\x8aa?\xd1`\xb3|\xab\xd1i\x1bUW\xf2,\b\x84Z\xc3\x12\xb1\xc3\a[\xe1\x00\xf7M\xc30\xdc\x1f\xc2K\x15\xcf\xe7\xd4\x8e\xf7\xf5\x15FSu{S\xa1k\xc0=\xc9\x90\x1c\xef\x83\xe9\x868#\xf1\xb1X\xd1\x02\x97\xd3\x984cfp!?\xe2\x15\xe9\xa1\xbcz\x9e=\xcc]\x9cpt\"\x01\x85\xfe\xa7\xfc9N\xa3>\xe2\xbf\xca?}\x80\x8f\xe4\xa1\x9c\xb9c\xd9\x90=%\x1c\a\xc2\x00\x1e\v\xd5u\xdd\xae\xc1\x83\x9b\xf5Q\xc2\x8e0xffffffffffffffff}, 0x80) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905", @ANYRES64=r0], 0x0) 195.900659ms ago: executing program 1 (id=3787): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0c59eb3100000000300012800b0001006272696467650000200002800800150088a8ffff05000700070000000a0014000180c2"], 0x50}}, 0x0) 150.317632ms ago: executing program 0 (id=3788): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000380)={0x0, 0x1, 0x6, @broadcast}, 0x10) 0s ago: executing program 4 (id=3789): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) kernel console output (not intermixed with test programs): w=0, sector=36178060, nr_sectors = 4 limit=4096 [ 243.250742][ T6534] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 243.343450][T11275] syz.0.2458: attempt to access beyond end of device [ 243.343450][T11275] loop0: rw=0, sector=36178056, nr_sectors = 4 limit=4096 [ 243.382885][ T4269] ocfs2: Unmounting device (7,4) on (node local) [ 243.417502][T11275] syz.0.2458: attempt to access beyond end of device [ 243.417502][T11275] loop0: rw=0, sector=36178060, nr_sectors = 4 limit=4096 [ 243.442272][ T6534] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 243.482308][ T6534] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.518683][ T6534] usb 2-1: config 0 descriptor?? [ 243.759248][ T6534] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 243.790180][ T6534] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 243.971248][ T6534] [drm:udl_init] *ERROR* Selecting channel failed [ 244.027900][ T6534] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 244.057045][ T6534] [drm] Initialized udl on minor 2 [ 244.091418][ T6534] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 244.119661][ T6534] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 244.160103][T11344] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 244.170823][ T6534] usb 2-1: USB disconnect, device number 11 [ 244.201589][T11344] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 244.201723][ T6538] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 244.248680][ T6538] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 244.268333][ T6538] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 244.483544][T11318] loop5: detected capacity change from 0 to 32768 [ 244.534680][ T8356] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 244.576878][T11318] JBD2: Ignoring recovery information on journal [ 244.731317][ T8356] usb 4-1: Using ep0 maxpacket: 16 [ 244.740537][ T8356] usb 4-1: config 0 interface 0 has no altsetting 0 [ 244.775957][ T8356] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 244.796183][ T8356] usb 4-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 244.817838][ T8356] usb 4-1: Product: syz [ 244.828025][ T8356] usb 4-1: Manufacturer: syz [ 244.845197][ T8356] usb 4-1: SerialNumber: syz [ 244.855928][T11318] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 244.889151][ T8356] usb 4-1: config 0 descriptor?? [ 245.049514][ T9173] ocfs2: Unmounting device (7,5) on (node local) [ 245.168159][ T8356] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 245.238921][ T8356] usb 4-1: USB disconnect, device number 15 [ 245.272207][ T4752] udevd[4752]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.482069][T11432] loop5: detected capacity change from 0 to 8 [ 245.489656][T11432] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 245.559040][T11432] cramfs: Error -3 while decompressing! [ 245.568575][ T4752] udevd[4752]: incorrect cramfs checksum on /dev/loop5 [ 245.573680][T11432] cramfs: ffffffff96d8c1e8(26)->ffff888052de1000(4096) [ 245.621500][T11432] cramfs: Error -3 while decompressing! [ 245.656557][ T4752] udevd[4752]: incorrect cramfs checksum on /dev/loop5 [ 245.670691][T11432] cramfs: ffffffff96d8c202(26)->ffff88805273d000(4096) [ 245.689241][T11432] cramfs: Error -3 while decompressing! [ 245.709852][T11432] cramfs: ffffffff96d8c21c(16)->ffff88804f8d4000(4096) [ 245.720821][T11432] cramfs: Error -3 while decompressing! [ 245.726790][T11432] cramfs: ffffffff96d8c1e8(26)->ffff888052de1000(4096) [ 245.731049][T11441] syz.1.2496 (11441) used greatest stack depth: 19728 bytes left [ 246.009082][T11463] overlayfs: bad mount option "redirect_dir=nofollow:/" [ 246.070323][T11452] loop4: detected capacity change from 0 to 4096 [ 246.140794][T11452] ntfs: volume version 3.1. [ 246.381332][T11482] loop0: detected capacity change from 0 to 512 [ 246.435354][T11482] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 246.491204][T11482] EXT4-fs (loop0): orphan cleanup on readonly fs [ 246.499583][T11482] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.2508: Failed to acquire dquot type 1 [ 246.567749][T11492] loop5: detected capacity change from 0 to 256 [ 246.590310][T11482] EXT4-fs (loop0): Remounting filesystem read-only [ 246.602171][T11492] exfat: Deprecated parameter 'utf8' [ 246.635327][T11482] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2508: bg 0: block 40: padding at end of block bitmap is not set [ 246.755895][T11482] EXT4-fs (loop0): Remounting filesystem read-only [ 246.786120][T11482] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 246.868352][T11482] EXT4-fs (loop0): Remounting filesystem read-only [ 246.902689][T11482] EXT4-fs (loop0): 1 truncate cleaned up [ 246.909360][T11482] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 247.111377][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 247.636841][T11567] loop4: detected capacity change from 0 to 256 [ 247.765499][T11567] FAT-fs (loop4): Directory bread(block 64) failed [ 247.820787][T11567] FAT-fs (loop4): Directory bread(block 65) failed [ 247.861272][T11576] loop1: detected capacity change from 0 to 1024 [ 247.876704][T11567] FAT-fs (loop4): Directory bread(block 66) failed [ 247.909750][T11567] FAT-fs (loop4): Directory bread(block 67) failed [ 247.949992][T11567] FAT-fs (loop4): Directory bread(block 68) failed [ 247.972046][T11576] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 247.979165][T11567] FAT-fs (loop4): Directory bread(block 69) failed [ 247.998586][T11567] FAT-fs (loop4): Directory bread(block 70) failed [ 248.007765][T11567] FAT-fs (loop4): Directory bread(block 71) failed [ 248.017392][T11567] FAT-fs (loop4): Directory bread(block 72) failed [ 248.024644][T11567] FAT-fs (loop4): Directory bread(block 73) failed [ 248.230163][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 248.547218][T11616] bond0: Error: Cannot enslave bond to itself. [ 248.574525][T11617] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2545'. [ 248.585907][T11618] loop5: detected capacity change from 0 to 512 [ 248.612619][T11618] EXT4-fs (loop5): Test dummy encryption mode enabled [ 248.715464][T11618] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 248.778297][T11618] System zones: 1-12 [ 248.841978][T11618] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.2547: Directory hole found for htree index block 0 [ 248.957170][T11618] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 248.990853][T11618] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.2547: Directory hole found for htree index block 0 [ 249.034237][T11618] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 249.088159][T11618] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 249.156817][T11618] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 249.327816][ T9173] EXT4-fs (loop5): unmounting filesystem. [ 249.437405][T11599] loop0: detected capacity change from 0 to 40427 [ 249.477432][T11599] F2FS-fs (loop0): invalid crc value [ 249.518857][T11599] F2FS-fs (loop0): Found nat_bits in checkpoint [ 249.695070][T11599] F2FS-fs (loop0): Start checkpoint disabled! [ 249.730693][T11599] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 250.182036][T11694] loop4: detected capacity change from 0 to 64 [ 250.265295][T11688] loop5: detected capacity change from 0 to 4096 [ 250.383816][T11688] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 250.541955][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2573'. [ 250.598201][T11711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2573'. [ 250.638458][T11711] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2573'. [ 250.649592][T11714] device netdevsim0 entered promiscuous mode [ 250.684034][T11714] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 251.639282][T11769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2591'. [ 251.868899][T11785] loop1: detected capacity change from 0 to 128 [ 251.922057][T11785] autofs4:pid:11785:autofs_fill_super: called with bogus options [ 252.268601][T11812] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2604'. [ 252.292965][T11812] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2604'. [ 252.430132][T11817] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 252.894887][T11844] loop1: detected capacity change from 0 to 512 [ 252.938244][T11850] xt_TCPMSS: Only works on TCP SYN packets [ 252.986096][T11844] EXT4-fs (loop1): orphan cleanup on readonly fs [ 253.034652][T11844] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #15: comm syz.1.2613: corrupted inode contents [ 253.092851][T11844] EXT4-fs (loop1): Remounting filesystem read-only [ 253.127829][T11844] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 253.164064][T11844] EXT4-fs (loop1): Remounting filesystem read-only [ 253.182567][T11844] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #15: comm syz.1.2613: corrupted inode contents [ 253.232421][T11844] EXT4-fs (loop1): Remounting filesystem read-only [ 253.239680][T11844] EXT4-fs error (device loop1): ext4_evict_inode:327: inode #15: comm syz.1.2613: mark_inode_dirty error [ 253.357410][T11844] EXT4-fs (loop1): Remounting filesystem read-only [ 253.378175][T11844] EXT4-fs (loop1): 1 orphan inode deleted [ 253.433837][T11844] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 253.609385][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 253.612341][T11882] loop0: detected capacity change from 0 to 2048 [ 253.721688][T11882] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 253.839181][ T4752] udevd[4752]: incorrect nilfs2 checksum on /dev/loop0 [ 253.876293][T11901] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 254.064913][T11882] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 254.130605][T11882] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16) [ 254.210824][T11882] Remounting filesystem read-only [ 254.215956][T11882] NILFS (loop0): error -5 truncating bmap (ino=16) [ 254.355222][ T4267] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 254.499348][T11935] loop3: detected capacity change from 0 to 256 [ 254.505418][ T8356] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 254.557783][T11935] FAT-fs (loop3): Directory bread(block 64) failed [ 254.578004][T11935] FAT-fs (loop3): Directory bread(block 65) failed [ 254.628489][T11935] FAT-fs (loop3): Directory bread(block 66) failed [ 254.648325][T11935] FAT-fs (loop3): Directory bread(block 67) failed [ 254.690756][T11947] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2643'. [ 254.703201][T11935] FAT-fs (loop3): Directory bread(block 68) failed [ 254.710154][T11935] FAT-fs (loop3): Directory bread(block 69) failed [ 254.710680][ T8356] usb 6-1: Using ep0 maxpacket: 32 [ 254.732278][ T8356] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 254.736986][T11935] FAT-fs (loop3): Directory bread(block 70) failed [ 254.744631][ T8356] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 254.750655][T11935] FAT-fs (loop3): Directory bread(block 71) failed [ 254.776598][ T8356] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 254.788517][T11935] FAT-fs (loop3): Directory bread(block 72) failed [ 254.800176][ T8356] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 254.820394][T11935] FAT-fs (loop3): Directory bread(block 73) failed [ 254.828442][ T8356] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 254.828475][ T8356] usb 6-1: config 0 interface 0 has no altsetting 0 [ 254.831820][ T8356] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 254.947929][ T8356] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 254.983639][ T8356] usb 6-1: Product: syz [ 255.011241][ T8356] usb 6-1: Manufacturer: syz [ 255.016343][ T8356] usb 6-1: SerialNumber: syz [ 255.064060][ T8356] usb 6-1: config 0 descriptor?? [ 255.103062][ T8356] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 255.182854][T11970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2650'. [ 255.201335][ T8356] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 255.238087][T11970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2650'. [ 255.313635][T11919] ldusb 6-1:0.0: Couldn't submit interrupt_in_urb -90 [ 255.343886][ T8356] usb 6-1: USB disconnect, device number 4 [ 255.376486][ T8356] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 255.978968][T12020] loop4: detected capacity change from 0 to 512 [ 256.039888][T11977] loop1: detected capacity change from 0 to 32768 [ 256.151174][T11977] JBD2: Ignoring recovery information on journal [ 256.187222][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 256.187239][ T26] audit: type=1326 audit(1770635519.391:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b139af79 code=0x7ffc0000 [ 256.208491][T12034] xt_TCPMSS: Only works on TCP SYN packets [ 256.252869][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.259341][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.360944][ T26] audit: type=1326 audit(1770635519.391:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b139af79 code=0x7ffc0000 [ 256.409444][T11977] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 256.454085][ T26] audit: type=1326 audit(1770635519.451:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fb5b139af79 code=0x7ffc0000 [ 256.597952][ T26] audit: type=1326 audit(1770635519.451:2807): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b139af79 code=0x7ffc0000 [ 256.696941][ T4268] ocfs2: Unmounting device (7,1) on (node local) [ 256.730715][ T26] audit: type=1326 audit(1770635519.451:2808): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b139af79 code=0x7ffc0000 [ 256.755960][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.405152][T12089] loop4: detected capacity change from 0 to 1024 [ 257.559916][T12089] syz.4.2678: attempt to access beyond end of device [ 257.559916][T12089] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 257.686999][T12089] Buffer I/O error on dev loop4, logical block 2889, async page read [ 257.758753][T12089] syz.4.2678: attempt to access beyond end of device [ 257.758753][T12089] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 257.776114][T12089] Buffer I/O error on dev loop4, logical block 2889, async page read [ 257.790798][ T26] audit: type=1800 audit(1770635520.991:2809): pid=12089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2678" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 257.822328][T12089] hfsplus: can't free extent [ 258.644974][T12170] loop0: detected capacity change from 0 to 764 [ 258.711523][T12170] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 258.769014][T12170] Symlink component flag not implemented [ 258.791810][T12170] Symlink component flag not implemented (7) [ 258.892166][T12177] loop5: detected capacity change from 0 to 2048 [ 258.943592][T12177] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 259.092464][ T5352] udevd[5352]: incorrect nilfs2 checksum on /dev/loop5 [ 259.102175][T12194] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 259.145843][T12177] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 259.209126][T12177] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=16) [ 259.234819][T12192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.261190][T12177] Remounting filesystem read-only [ 259.266849][T12177] NILFS (loop5): error -5 truncating bmap (ino=16) [ 259.484489][ T9173] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 260.476362][T12307] loop0: detected capacity change from 0 to 256 [ 260.623667][T12307] FAT-fs (loop0): Directory bread(block 64) failed [ 260.668110][T12307] FAT-fs (loop0): Directory bread(block 65) failed [ 260.690657][T12307] FAT-fs (loop0): Directory bread(block 66) failed [ 260.721259][T12307] FAT-fs (loop0): Directory bread(block 67) failed [ 260.728854][T12307] FAT-fs (loop0): Directory bread(block 68) failed [ 260.792935][T12307] FAT-fs (loop0): Directory bread(block 69) failed [ 260.840670][T12307] FAT-fs (loop0): Directory bread(block 70) failed [ 260.867825][T12307] FAT-fs (loop0): Directory bread(block 71) failed [ 260.913804][T12307] FAT-fs (loop0): Directory bread(block 72) failed [ 260.937521][T12326] loop4: detected capacity change from 0 to 2048 [ 260.944217][T12307] FAT-fs (loop0): Directory bread(block 73) failed [ 261.063693][T12335] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.243968][T12342] overlayfs: missing 'lowerdir' [ 261.304245][T12346] loop1: detected capacity change from 0 to 128 [ 261.474990][T12335] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 261.531299][T12335] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 261.580746][T12335] Remounting filesystem read-only [ 261.627254][ T4269] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 262.064862][T12390] netlink: 'syz.0.2745': attribute type 2 has an invalid length. [ 262.139179][T12390] netlink: 'syz.0.2745': attribute type 1 has an invalid length. [ 262.428331][T12409] loop3: detected capacity change from 0 to 1764 [ 262.629103][T12427] loop0: detected capacity change from 0 to 16 [ 262.660791][T12427] erofs: (device loop0): mounted with root inode @ nid 36. [ 262.762368][T12427] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 263.141028][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2763'. [ 263.260562][T12458] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 263.327036][T12458] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 263.363361][T12458] device bridge1 entered promiscuous mode [ 263.599700][T12481] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2771'. [ 263.634797][T12483] loop0: detected capacity change from 0 to 256 [ 263.701082][T12483] FAT-fs (loop0): Directory bread(block 64) failed [ 263.707853][T12483] FAT-fs (loop0): Directory bread(block 65) failed [ 263.761007][T12483] FAT-fs (loop0): Directory bread(block 66) failed [ 263.768275][T12483] FAT-fs (loop0): Directory bread(block 67) failed [ 263.823715][T12483] FAT-fs (loop0): Directory bread(block 68) failed [ 263.886705][T12483] FAT-fs (loop0): Directory bread(block 69) failed [ 263.926495][T12496] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 263.929197][T12483] FAT-fs (loop0): Directory bread(block 70) failed [ 263.950022][T12499] netlink: 'syz.5.2775': attribute type 27 has an invalid length. [ 264.008527][T12483] FAT-fs (loop0): Directory bread(block 71) failed [ 264.048125][T12483] FAT-fs (loop0): Directory bread(block 72) failed [ 264.057973][T12496] xt_HMARK: spi-set and port-set can't be combined [ 264.140573][T12483] FAT-fs (loop0): Directory bread(block 73) failed [ 264.162411][T12513] netlink: 'syz.5.2779': attribute type 11 has an invalid length. [ 264.222837][T12517] xt_bpf: check failed: parse error [ 264.501489][T12527] loop4: detected capacity change from 0 to 2048 [ 264.526834][T12532] loop3: detected capacity change from 0 to 1024 [ 264.584882][T12527] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.627608][T12532] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 264.948275][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 264.960373][T12559] netlink: 'syz.4.2788': attribute type 1 has an invalid length. [ 264.979125][ T4283] Bluetooth: hci1: unexpected event 0x2f length: 1017 > 260 [ 265.425492][T12580] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.837630][T12632] loop0: detected capacity change from 0 to 4096 [ 265.878172][T12632] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 266.091111][ T8356] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 266.216961][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2805'. [ 266.328845][ T8356] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 266.400786][ T8356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.449914][ T8356] usb 2-1: Product: syz [ 266.482202][ T8356] usb 2-1: Manufacturer: syz [ 266.494943][ T8356] usb 2-1: SerialNumber: syz [ 266.544614][ T8356] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 266.616427][T12628] loop3: detected capacity change from 0 to 32768 [ 266.628625][ T8356] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 266.649016][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2810'. [ 266.687488][T12628] ERROR: (device loop3): dtSearch: stack overrun! [ 266.687488][T12628] [ 266.697677][ T6533] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 266.748577][T12628] ERROR: (device loop3): remounting filesystem as read-only [ 266.798247][T12628] btstack dump: [ 266.823323][T12628] bn = 0, index = 4 [ 266.860909][T12628] bn = 0, index = 4 [ 266.865045][T12628] bn = 0, index = 4 [ 266.868962][T12628] bn = 0, index = 4 [ 266.892401][ T6533] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.905683][T12628] bn = 0, index = 4 [ 266.910359][T12628] bn = 0, index = 4 [ 266.928012][T12628] bn = 0, index = 4 [ 266.930550][ T6533] usb 5-1: config 0 interface 0 has no altsetting 0 [ 266.947124][T12628] bn = 0, index = 0 [ 266.951765][T12628] jfs_lookup: dtSearch returned -5 [ 266.982743][ T6533] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 267.012601][ T6533] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.042335][ T6533] usb 5-1: Product: syz [ 267.046822][ T6533] usb 5-1: Manufacturer: syz [ 267.082621][ T6533] usb 5-1: SerialNumber: syz [ 267.108572][ T6533] usb 5-1: config 0 descriptor?? [ 267.161344][ T6533] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 267.219086][ T6533] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 267.270185][ T6525] usb 2-1: USB disconnect, device number 12 [ 267.278240][ T6533] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 267.324937][ T6533] usb 5-1: media controller created [ 267.393497][T12710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2813'. [ 267.407233][ T6533] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.691034][ T8356] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 267.699767][ T8356] ath9k_htc: Failed to initialize the device [ 267.766733][T12725] loop0: detected capacity change from 0 to 8 [ 267.785875][ T6525] usb 2-1: ath9k_htc: USB layer deinitialized [ 267.862962][T12725] SQUASHFS error: lzo decompression failed, data probably corrupt [ 267.863076][ T6533] DVB: Unable to find symbol tda10046_attach() [ 267.891497][T12735] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.910671][ T6533] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 267.931362][T12725] SQUASHFS error: Failed to read block 0x1c0: -5 [ 267.955872][T12725] SQUASHFS error: Unable to read metadata cache entry [1be] [ 267.967420][ T6533] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 268.247693][ T6533] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71 [ 268.287215][ T6533] usb 5-1: USB disconnect, device number 18 [ 268.311157][T12753] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2821'. [ 268.630700][T12764] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.841718][T12770] IPv6: Can't replace route, no match found [ 269.260541][ T8356] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 269.319763][T12808] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2834'. [ 269.459789][ T8356] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.484230][ T8356] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 269.525470][ T8356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.595441][ T8356] usb 2-1: config 0 descriptor?? [ 269.907429][T12846] loop5: detected capacity change from 0 to 64 [ 269.981100][T12846] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 270.024074][ T8356] ath6kl: Failed to read usb control message: -71 [ 270.045471][ T8356] ath6kl: Unable to read the bmi data from the device: -71 [ 270.100615][ T8356] ath6kl: Unable to recv target info: -71 [ 270.134623][ T8356] ath6kl: Failed to init ath6kl core: -71 [ 270.271269][ T8356] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 270.304932][ T8356] usb 2-1: USB disconnect, device number 13 [ 270.649754][T12894] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.710935][T12897] tmpfs: Bad value for 'mpol' [ 270.770297][T12900] netlink: 'syz.0.2860': attribute type 7 has an invalid length. [ 271.046173][T12915] device xfrm0 entered promiscuous mode [ 271.264354][ T4319] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 271.502723][ T4319] usb 1-1: config 0 has an invalid interface number: 58 but max is 0 [ 271.524916][ T4319] usb 1-1: config 0 has no interface number 0 [ 271.550615][ T4319] usb 1-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=49.f8 [ 271.570868][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.600160][ T4319] usb 1-1: config 0 descriptor?? [ 271.622236][ T4319] gspca_main: spca500-2.14.0 probing 041e:400a [ 271.716441][T12947] netlink: 'syz.5.2875': attribute type 7 has an invalid length. [ 271.786019][T12947] netlink: 'syz.5.2875': attribute type 8 has an invalid length. [ 271.878272][ T6525] usb 1-1: USB disconnect, device number 12 [ 272.247859][T12973] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 272.388943][T12983] loop4: detected capacity change from 0 to 512 [ 272.449079][T12983] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.2884: bad orphan inode 13 [ 272.539803][T12983] ext4_test_bit(bit=12, block=4) = 1 [ 272.546391][T12983] is_bad_inode(inode)=0 [ 272.551438][T12983] NEXT_ORPHAN(inode)=0 [ 272.556655][T12983] max_ino=32 [ 272.560728][T12983] i_nlink=1 [ 272.564134][T12983] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 272.589905][T12983] EXT4-fs warning (device loop4): dx_probe:845: inode #2: comm syz.4.2884: Hash code is SIPHASH, but hash not in dirent [ 272.612084][T12983] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2884: Corrupt directory, running e2fsck is recommended [ 272.675438][T12983] EXT4-fs warning (device loop4): dx_probe:845: inode #2: comm syz.4.2884: Hash code is SIPHASH, but hash not in dirent [ 272.749628][T12983] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2884: Corrupt directory, running e2fsck is recommended [ 272.802447][T12983] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.2884: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 272.926345][T13003] loop5: detected capacity change from 0 to 256 [ 272.991406][T13003] exfat: Deprecated parameter 'utf8' [ 272.997913][T13003] exfat: Deprecated parameter 'namecase' [ 273.074741][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 273.121958][T13003] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x8b6193f0, utbl_chksum : 0xe619d30d) [ 273.505876][ T26] audit: type=1326 audit(1770635536.711:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.1.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6879af79 code=0x7ffc0000 [ 273.542245][T13031] loop5: detected capacity change from 0 to 512 [ 273.638442][ T26] audit: type=1326 audit(1770635536.771:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.1.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6879af79 code=0x7ffc0000 [ 273.757441][T13031] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 273.800769][T13031] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.852490][ T26] audit: type=1326 audit(1770635536.771:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.1.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6879af79 code=0x7ffc0000 [ 274.060752][ T26] audit: type=1326 audit(1770635536.771:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.1.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6879af79 code=0x7ffc0000 [ 274.148781][ T9173] EXT4-fs (loop5): unmounting filesystem. [ 274.171350][ T26] audit: type=1326 audit(1770635536.771:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.1.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f7a6879af79 code=0x7ffc0000 [ 274.302918][ T26] audit: type=1326 audit(1770635536.771:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.1.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6879af79 code=0x7ffc0000 [ 274.461432][ T26] audit: type=1326 audit(1770635536.771:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.1.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6879af79 code=0x7ffc0000 [ 274.569703][ T26] audit: type=1326 audit(1770635536.771:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.1.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7a6879af79 code=0x7ffc0000 [ 274.604068][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.740371][ T26] audit: type=1326 audit(1770635536.771:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13027 comm="syz.1.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7a6879af79 code=0x7ffc0000 [ 274.784137][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.188523][T13092] loop1: detected capacity change from 0 to 22 [ 275.274690][T13092] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 275.375479][T13092] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 276.408050][T13098] loop4: detected capacity change from 0 to 32768 [ 276.528200][T13098] JBD2: Ignoring recovery information on journal [ 276.557324][T13142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2931'. [ 276.666979][T13123] loop5: detected capacity change from 0 to 32768 [ 276.718154][T13098] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 276.733714][T13123] ERROR: (device loop5): dtSearch: stack overrun! [ 276.733714][T13123] [ 276.808888][T13123] ERROR: (device loop5): remounting filesystem as read-only [ 276.856853][T13123] btstack dump: [ 276.895480][T13123] bn = 0, index = 4 [ 276.899970][T13123] bn = 0, index = 4 [ 276.968338][T13123] bn = 0, index = 4 [ 276.974724][ T4269] ocfs2: Unmounting device (7,4) on (node local) [ 276.980594][T13123] bn = 0, index = 4 [ 276.983529][T13152] loop1: detected capacity change from 0 to 2048 [ 276.985711][T13123] bn = 0, index = 4 [ 277.024342][T13123] bn = 0, index = 4 [ 277.045979][T13123] bn = 0, index = 4 [ 277.067323][T13152] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.093143][T13123] bn = 0, index = 0 [ 277.097390][T13123] jfs_lookup: dtSearch returned -5 [ 277.429610][T13165] device tunl0 entered promiscuous mode [ 277.450009][T13169] ipt_CLUSTERIP: no such interface pim6reg0 [ 277.477855][T13165] netlink: 'syz.5.2937': attribute type 4 has an invalid length. [ 277.514707][T13165] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2937'. [ 277.929272][T13193] loop0: detected capacity change from 0 to 1024 [ 278.011222][ T6524] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 278.052977][T13193] hfsplus: keylen 65060 too large [ 278.214488][ T6524] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 278.235235][ T6524] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.270929][ T6524] usb 5-1: Product: syz [ 278.298473][ T6524] usb 5-1: Manufacturer: syz [ 278.323567][ T6524] usb 5-1: SerialNumber: syz [ 278.349476][ T6524] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 278.412594][ T6533] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 278.445919][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2952'. [ 278.530344][T13229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2954'. [ 278.572890][T13229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2954'. [ 278.820811][ T8356] usb 5-1: USB disconnect, device number 19 [ 278.929268][T13248] loop5: detected capacity change from 0 to 2048 [ 278.980204][T13248] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 279.023104][T13248] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 279.450902][ T6533] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 279.501847][ T6533] ath9k_htc: Failed to initialize the device [ 279.509009][ T8356] usb 5-1: ath9k_htc: USB layer deinitialized [ 279.519782][ T26] audit: type=1400 audit(1770635542.731:2819): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=13287 comm="syz.4.2971" [ 279.540143][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.588300][ T26] audit: type=1326 audit(1770635542.771:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13295 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6879af79 code=0x7ffc0000 [ 279.611644][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.734984][ T26] audit: type=1326 audit(1770635542.771:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13295 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6879af79 code=0x7ffc0000 [ 279.759102][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.859715][ T26] audit: type=1326 audit(1770635542.781:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13295 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f7a6879af79 code=0x7ffc0000 [ 279.977887][ T26] audit: type=1326 audit(1770635543.091:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13295 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6879af79 code=0x7ffc0000 [ 280.079540][ T26] audit: type=1326 audit(1770635543.091:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13295 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6879af79 code=0x7ffc0000 [ 280.237885][ T26] audit: type=1326 audit(1770635543.201:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13314 comm="syz.3.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b139af79 code=0x7ffc0000 [ 280.260673][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.320994][ T26] audit: type=1326 audit(1770635543.221:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13314 comm="syz.3.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb5b139af79 code=0x7ffc0000 [ 280.344594][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.476934][ T26] audit: type=1326 audit(1770635543.221:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13314 comm="syz.3.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb5b139ace2 code=0x7ffc0000 [ 280.540815][ T26] audit: type=1326 audit(1770635543.221:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13314 comm="syz.3.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb5b139ace2 code=0x7ffc0000 [ 280.807751][T13362] netlink: 'syz.0.2994': attribute type 11 has an invalid length. [ 280.851282][T13362] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2994'. [ 280.891103][T13368] netlink: 'syz.5.2996': attribute type 1 has an invalid length. [ 280.930575][T13368] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2996'. [ 281.470421][T13411] Option ' ' to dns_resolver key: bad/missing value [ 281.800761][ T8356] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 281.808329][T13437] netlink: 'syz.3.3016': attribute type 11 has an invalid length. [ 281.831341][T13437] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3016'. [ 282.000717][ T8356] usb 2-1: Using ep0 maxpacket: 8 [ 282.012914][ T8356] usb 2-1: unable to get BOS descriptor or descriptor too short [ 282.036869][ T8356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 282.066451][ T8356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 282.100922][ T8356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 282.136918][ T8356] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 282.175141][ T8356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 282.206462][ T8356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 282.227691][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3022'. [ 282.237105][ T8356] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 282.261952][ T8356] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 282.299733][ T8356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.329594][ T8356] usb 2-1: Product: syz [ 282.350950][ T8356] usb 2-1: Manufacturer: syz [ 282.355975][ T8356] usb 2-1: SerialNumber: syz [ 282.386875][ T8356] usb 2-1: config 0 descriptor?? [ 282.407937][T13418] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 282.658068][ T8356] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 282.703928][T13430] loop4: detected capacity change from 0 to 40427 [ 282.737349][ T4752] udevd[4752]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.757340][T13430] F2FS-fs (loop4): build fault injection attr: rate: 19, type: 0x3ffff [ 282.769015][ T8356] usb 2-1: USB disconnect, device number 14 [ 282.802132][T13430] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x364 [ 282.858033][T13430] F2FS-fs (loop4): invalid crc value [ 282.954269][T13430] F2FS-fs (loop4): Found nat_bits in checkpoint [ 283.099880][T13430] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x18f/0x360 [ 283.177428][T13430] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 283.298291][T13430] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=30303030, run fsck to fix. [ 283.714259][T13535] ipt_REJECT: TCP_RESET invalid for non-tcp [ 283.992767][T13543] loop3: detected capacity change from 0 to 256 [ 284.064002][T13505] loop5: detected capacity change from 0 to 32768 [ 284.127146][T13505] [ 284.127146][T13505] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.127146][T13505] [ 284.149881][T13543] FAT-fs (loop3): Directory bread(block 64) failed [ 284.190718][T13543] FAT-fs (loop3): Directory bread(block 65) failed [ 284.212879][T13543] FAT-fs (loop3): Directory bread(block 66) failed [ 284.250859][T13543] FAT-fs (loop3): Directory bread(block 67) failed [ 284.257841][T13543] FAT-fs (loop3): Directory bread(block 68) failed [ 284.278428][T13505] __jfs_setxattr: xattr_size = 72, new_size = 166 [ 284.311500][T13543] FAT-fs (loop3): Directory bread(block 69) failed [ 284.343612][T13543] FAT-fs (loop3): Directory bread(block 70) failed [ 284.411502][T13543] FAT-fs (loop3): Directory bread(block 71) failed [ 284.418464][T13543] FAT-fs (loop3): Directory bread(block 72) failed [ 284.433744][T13565] loop4: detected capacity change from 0 to 16 [ 284.452212][T13543] FAT-fs (loop3): Directory bread(block 73) failed [ 284.462229][ T39] [ 284.462229][ T39] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.462229][ T39] [ 284.517028][ T39] [ 284.517028][ T39] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.517028][ T39] [ 284.544330][T13565] erofs: (device loop4): mounted with root inode @ nid 36. [ 284.586801][ T9173] [ 284.586801][ T9173] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.586801][ T9173] [ 284.616138][T13565] syz.4.3045: attempt to access beyond end of device [ 284.616138][T13565] loop4: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 284.651748][ T107] [ 284.651748][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.651748][ T107] [ 284.655598][T13573] netlink: 'syz.1.3048': attribute type 1 has an invalid length. [ 284.695809][ T9173] [ 284.695809][ T9173] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.695809][ T9173] [ 284.705532][T13565] syz.4.3045: attempt to access beyond end of device [ 284.705532][T13565] loop4: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 284.805151][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 284.805165][ T26] audit: type=1800 audit(1770635548.011:2830): pid=13565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3045" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 284.862540][T13574] loop0: detected capacity change from 0 to 4096 [ 284.887805][T13574] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 284.989706][T13586] comedi comedi3: mpc624: I/O port conflict (0x2,16) [ 285.050714][T13574] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 285.281599][ T39] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 285.289613][ T4267] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 285.301078][ T4267] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 285.308258][ T4267] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 285.391786][ T39] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 285.406480][ T4267] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 285.425813][ T4267] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 285.965573][T13637] sock: sock_timestamping_bind_phc: sock not bind to device [ 286.162895][T13648] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3069'. [ 286.700644][T13689] loop5: detected capacity change from 0 to 64 [ 286.936668][ T4319] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 286.945976][ T4312] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 287.142929][ T4312] usb 5-1: Using ep0 maxpacket: 8 [ 287.148515][ T4319] usb 4-1: Using ep0 maxpacket: 16 [ 287.164266][ T4312] usb 5-1: unable to get BOS descriptor or descriptor too short [ 287.179209][ T4319] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 287.205555][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.217452][ T4319] usb 4-1: Product: syz [ 287.226037][ T4312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 287.244683][ T4319] usb 4-1: Manufacturer: syz [ 287.250217][ T4312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 287.267210][ T4319] usb 4-1: SerialNumber: syz [ 287.272588][T13716] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3089'. [ 287.290003][ T4312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 287.312763][ T4312] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 287.324025][ T4312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 287.336180][ T4312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 287.354045][ T4312] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 287.384453][ T4312] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 287.429472][ T4312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.438752][ T4312] usb 5-1: Product: syz [ 287.453132][ T4312] usb 5-1: Manufacturer: syz [ 287.465219][ T4312] usb 5-1: SerialNumber: syz [ 287.483465][ T4312] usb 5-1: config 0 descriptor?? [ 287.489499][T13680] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 287.493942][T13693] loop1: detected capacity change from 0 to 32768 [ 287.572440][ T4319] snd-usb-audio: probe of 4-1:222.0 failed with error -71 [ 287.590771][ T4319] usb 4-1: USB disconnect, device number 16 [ 287.621700][T13693] XFS (loop1): Mounting V5 Filesystem [ 287.714643][ T4312] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 287.764820][T13693] XFS (loop1): Ending clean mount [ 287.808379][ T5121] udevd[5121]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.834275][ T4312] usb 5-1: USB disconnect, device number 20 [ 287.874861][ T4752] udevd[4752]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.995172][T13713] loop5: detected capacity change from 0 to 32768 [ 288.018009][ T4268] XFS (loop1): Unmounting Filesystem [ 288.141035][T13713] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 288.191050][T13713] (syz.5.3086,13713,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 288.249937][T13713] (syz.5.3086,13713,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 288.260943][T13713] (syz.5.3086,13713,0):ocfs2_mknod:298 ERROR: status = -2 [ 288.280649][T13713] (syz.5.3086,13713,0):ocfs2_mknod:502 ERROR: status = -2 [ 288.297505][T13713] (syz.5.3086,13713,0):ocfs2_create:676 ERROR: status = -2 [ 288.496637][ T9173] ocfs2: Unmounting device (7,5) on (node local) [ 288.920726][ T6538] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 289.124466][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3103'. [ 289.146794][ T6538] usb 6-1: Using ep0 maxpacket: 16 [ 289.147068][T13822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3103'. [ 289.156075][ T6538] usb 6-1: unable to get BOS descriptor or descriptor too short [ 289.201900][ T6538] usb 6-1: config 192 has too many interfaces: 127, using maximum allowed: 32 [ 289.228861][ T6538] usb 6-1: config 192 has an invalid interface association descriptor of length 5, skipping [ 289.239725][ T6538] usb 6-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 289.280738][ T4312] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 289.308603][ T6538] usb 6-1: config 192 has 0 interfaces, different from the descriptor's value: 127 [ 289.361532][ T6538] usb 6-1: config 192 has too many interfaces: 127, using maximum allowed: 32 [ 289.402279][ T6538] usb 6-1: config 192 has an invalid interface association descriptor of length 5, skipping [ 289.428591][ T6538] usb 6-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 289.454225][ T6538] usb 6-1: config 192 has 0 interfaces, different from the descriptor's value: 127 [ 289.470625][ T4312] usb 1-1: Using ep0 maxpacket: 32 [ 289.478445][ T4312] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.504280][ T6538] usb 6-1: New USB device found, idVendor=03eb, idProduct=7617, bcdDevice= 2.69 [ 289.520761][ T4312] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 289.549230][ T6538] usb 6-1: New USB device strings: Mfr=3, Product=1, SerialNumber=9 [ 289.566913][ T4312] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 289.583658][ T4312] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.593192][ T4312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 289.601533][ T4312] usb 1-1: SerialNumber: syz [ 289.607910][ T6538] usb 6-1: Product: syz [ 289.616072][T13813] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 289.626358][ T4312] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 289.635375][ T6538] usb 6-1: Manufacturer: syz [ 289.640310][ T6538] usb 6-1: SerialNumber: syz [ 289.816138][T13864] loop4: detected capacity change from 0 to 256 [ 289.858790][ T4312] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 289.896790][ T4312] usb 1-1: USB disconnect, device number 13 [ 289.908345][ T6538] usb 6-1: USB disconnect, device number 5 [ 289.933163][T13864] FAT-fs (loop4): Directory bread(block 64) failed [ 289.968921][T13864] FAT-fs (loop4): Directory bread(block 65) failed [ 290.012709][T13864] FAT-fs (loop4): Directory bread(block 66) failed [ 290.032145][T13864] FAT-fs (loop4): Directory bread(block 67) failed [ 290.051335][T13864] FAT-fs (loop4): Directory bread(block 68) failed [ 290.068781][T13864] FAT-fs (loop4): Directory bread(block 69) failed [ 290.077160][T13864] FAT-fs (loop4): Directory bread(block 70) failed [ 290.092279][T13864] FAT-fs (loop4): Directory bread(block 71) failed [ 290.108531][T13864] FAT-fs (loop4): Directory bread(block 72) failed [ 290.117676][T13864] FAT-fs (loop4): Directory bread(block 73) failed [ 290.277414][T13895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3119'. [ 290.602702][T13886] loop3: detected capacity change from 0 to 32768 [ 290.689730][T13886] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 290.689730][T13886] [ 290.728075][T13886] ERROR: (device loop3): remounting filesystem as read-only [ 290.734502][T13918] loop5: detected capacity change from 0 to 2048 [ 290.790567][ T6533] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 290.824590][T13918] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.015169][ T6533] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 291.040630][ T6533] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.079500][ T6533] usb 1-1: Product: syz [ 291.099802][ T6533] usb 1-1: Manufacturer: syz [ 291.130302][ T6533] usb 1-1: SerialNumber: syz [ 291.155393][ T6533] usb 1-1: config 0 descriptor?? [ 291.266584][ T4312] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 291.372225][ T6533] int51x1: probe of 1-1:0.0 failed with error -22 [ 291.462411][ T4312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.480626][ T4312] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.513008][ T4312] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 291.543767][ T4312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 291.576638][ T4312] usb 4-1: SerialNumber: syz [ 291.588033][ T6533] usb 1-1: USB disconnect, device number 14 [ 291.606269][ T4312] usb 4-1: 0:2 : does not exist [ 291.829026][ T8356] usb 4-1: USB disconnect, device number 17 [ 291.889213][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3142'. [ 292.219386][T14015] loop4: detected capacity change from 0 to 1024 [ 292.278076][T14015] hfsplus: request for non-existent node 33423360 in B*Tree [ 292.311080][T14015] hfsplus: request for non-existent node 33423360 in B*Tree [ 292.378532][T13967] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 292.597682][T14032] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 292.640690][T14032] [U] J"—e:ÀÆ" [ 292.819596][T14050] loop5: detected capacity change from 0 to 128 [ 292.862932][T14050] FAT-fs (loop5): Directory bread(block 32) failed [ 292.881228][T14050] FAT-fs (loop5): Directory bread(block 33) failed [ 292.888868][T14050] FAT-fs (loop5): Directory bread(block 34) failed [ 292.924924][T14050] FAT-fs (loop5): Directory bread(block 35) failed [ 292.942592][T14050] FAT-fs (loop5): Directory bread(block 36) failed [ 292.972363][T14060] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3158'. [ 292.979736][T14050] FAT-fs (loop5): Directory bread(block 37) failed [ 293.003086][T14050] FAT-fs (loop5): Directory bread(block 38) failed [ 293.039784][T14050] FAT-fs (loop5): Directory bread(block 39) failed [ 293.068758][T14050] FAT-fs (loop5): Directory bread(block 40) failed [ 293.108639][T14050] FAT-fs (loop5): Directory bread(block 41) failed [ 293.361950][T14050] syz.5.3155: attempt to access beyond end of device [ 293.361950][T14050] loop5: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 293.455545][T14050] FAT-fs (loop5): Filesystem has been set read-only [ 293.476436][T14050] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 293.610615][ T4283] Bluetooth: hci0: command 0x080f tx timeout [ 293.830057][T14115] loop3: detected capacity change from 0 to 2048 [ 293.920768][T14115] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.977361][T14127] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 293.997381][T14127] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.208458][T14141] netlink: 'syz.3.3180': attribute type 16 has an invalid length. [ 294.262191][T14141] netlink: 'syz.3.3180': attribute type 17 has an invalid length. [ 294.384226][T14141] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 294.415926][T14141] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 294.463958][T14141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 294.497545][T14141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.977944][ T8356] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 295.186202][ T8356] usb 2-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 295.208215][ T8356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.274297][ T8356] usb 2-1: Product: syz [ 295.279618][ T8356] usb 2-1: Manufacturer: syz [ 295.290139][ T8356] usb 2-1: SerialNumber: syz [ 295.327860][ T8356] usb 2-1: config 0 descriptor?? [ 295.547127][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3204'. [ 295.615531][ T4319] usb 2-1: USB disconnect, device number 15 [ 295.633596][T14228] loop0: detected capacity change from 0 to 512 [ 295.778599][T14228] EXT4-fs (loop0): 1 truncate cleaned up [ 295.832871][T14228] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 295.982469][T14228] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.3207: bad entry in directory: inode out of bounds - offset=0, inode=131074, rec_len=12, size=1024 fake=1 [ 296.077360][T14228] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 296.097960][T14228] EXT4-fs warning (device loop0): ext4_rename_delete:3778: inode #2: comm syz.0.3207: Deleting old file: nlink 4, error=-117 [ 296.141285][T14228] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3207: bg 0: block 465: padding at end of block bitmap is not set [ 296.234547][T14267] xt_bpf: check failed: parse error [ 296.236004][T14228] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 296.253358][T14228] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3207: invalid indirect mapped block 234881024 (level 0) [ 296.380531][ T4319] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 296.454664][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 296.570797][ T4319] usb 4-1: Using ep0 maxpacket: 32 [ 296.585721][ T4319] usb 4-1: config 0 has an invalid interface number: 90 but max is 0 [ 296.616771][ T4319] usb 4-1: config 0 has no interface number 0 [ 296.655571][ T4319] usb 4-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa [ 296.672602][T14294] loop4: detected capacity change from 0 to 64 [ 296.684189][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.719559][ T4319] usb 4-1: Product: syz [ 296.730346][ T4319] usb 4-1: Manufacturer: syz [ 296.741891][ T6538] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 296.758526][ T4319] usb 4-1: SerialNumber: syz [ 296.787831][ T4319] usb 4-1: config 0 descriptor?? [ 296.930902][ T6538] usb 6-1: Using ep0 maxpacket: 16 [ 296.946397][ T6538] usb 6-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 296.992462][ T6538] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.013864][ T4319] powermate: Expected payload of 3--6 bytes, found 512 bytes! [ 297.038782][ T4319] input: Griffin PowerMate as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.90/input/input13 [ 297.043286][ T6538] usb 6-1: Product: syz [ 297.076492][ T6538] usb 6-1: Manufacturer: syz [ 297.094014][ T6538] usb 6-1: SerialNumber: syz [ 297.127059][ T6538] usb 6-1: config 0 descriptor?? [ 297.141560][ C0] powermate: config urb returned -71 [ 297.147790][ C0] powermate: config urb returned -71 [ 297.154176][ C0] powermate: config urb returned -71 [ 297.154425][ T6538] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 297.160757][ C0] powermate: config urb returned -71 [ 297.211228][ T4319] usb 4-1: USB disconnect, device number 18 [ 297.553876][ T6538] gspca_sn9c2028: read1 error -71 [ 297.575309][ T6538] gspca_sn9c2028: read1 error -71 [ 297.625275][ T6538] sn9c2028: probe of 6-1:0.0 failed with error -71 [ 297.686015][ T6538] usb 6-1: USB disconnect, device number 6 [ 298.253408][T14366] loop5: detected capacity change from 0 to 64 [ 298.722156][T14391] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 298.788542][T14391] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 299.339214][T14409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3249'. [ 299.368483][T14382] loop3: detected capacity change from 0 to 32768 [ 299.471780][T14382] XFS (loop3): Mounting V5 Filesystem [ 299.541912][T14382] XFS (loop3): Ending clean mount [ 299.691380][T14431] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3253'. [ 299.728169][ T4274] XFS (loop3): Unmounting Filesystem [ 299.911040][T14440] loop4: detected capacity change from 0 to 256 [ 300.042425][T14440] FAT-fs (loop4): Directory bread(block 64) failed [ 300.088677][T14440] FAT-fs (loop4): Directory bread(block 65) failed [ 300.110570][T14440] FAT-fs (loop4): Directory bread(block 66) failed [ 300.161287][T14440] FAT-fs (loop4): Directory bread(block 67) failed [ 300.168551][T14440] FAT-fs (loop4): Directory bread(block 68) failed [ 300.210685][T14440] FAT-fs (loop4): Directory bread(block 69) failed [ 300.218014][T14440] FAT-fs (loop4): Directory bread(block 70) failed [ 300.290771][T14440] FAT-fs (loop4): Directory bread(block 71) failed [ 300.298084][T14440] FAT-fs (loop4): Directory bread(block 72) failed [ 300.340713][T14440] FAT-fs (loop4): Directory bread(block 73) failed [ 300.745602][T14478] loop5: detected capacity change from 0 to 512 [ 300.798585][T14478] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002] [ 300.809443][T14478] System zones: 1-20 [ 300.820759][ T4319] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 300.866596][T14478] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 300.971799][ T9173] EXT4-fs (loop5): unmounting filesystem. [ 301.042342][ T4319] usb 1-1: config index 0 descriptor too short (expected 65183, got 72) [ 301.093351][ T4319] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 301.140911][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.149588][ T4319] usb 1-1: Product: syz [ 301.156678][T14496] usb usb7: usbfs: process 14496 (syz.5.3267) did not claim interface 0 before use [ 301.166467][ T4319] usb 1-1: Manufacturer: syz [ 301.166489][ T4319] usb 1-1: SerialNumber: syz [ 301.185562][ T4319] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 301.256696][ T4319] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 301.440271][T14482] loop4: detected capacity change from 0 to 32768 [ 301.474880][T14507] loop5: detected capacity change from 0 to 256 [ 301.514929][T14465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.560780][T14482] XFS (loop4): Mounting V5 Filesystem [ 301.618158][T14465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.696037][ T8356] usb 1-1: USB disconnect, device number 15 [ 301.720000][T14482] XFS (loop4): Ending clean mount [ 301.861193][ T4269] XFS (loop4): Unmounting Filesystem [ 301.962743][T14534] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (32) [ 302.340123][ T4319] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 302.361771][ T4319] ath9k_htc: Failed to initialize the device [ 302.368441][ T8356] usb 1-1: ath9k_htc: USB layer deinitialized [ 302.733563][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3284'. [ 302.735307][T14571] Cannot find del_set index 3 as target [ 303.258840][T14592] loop3: detected capacity change from 0 to 4096 [ 303.274112][T14592] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 303.755130][T14621] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3301'. [ 303.837700][T14621] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 303.864087][T14583] loop5: detected capacity change from 0 to 32768 [ 303.879235][T14583] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 303.967619][T14629] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3303'. [ 304.307796][ T4752] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 304.590838][T14664] loop0: detected capacity change from 0 to 128 [ 304.627282][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3314'. [ 304.695683][T14664] FAT-fs (loop0): Directory bread(block 32) failed [ 304.715110][T14663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 304.721063][T14664] FAT-fs (loop0): Directory bread(block 33) failed [ 304.761617][T14664] FAT-fs (loop0): Directory bread(block 34) failed [ 304.812749][T14664] FAT-fs (loop0): Directory bread(block 35) failed [ 304.833643][T14663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.854100][T14664] FAT-fs (loop0): Directory bread(block 36) failed [ 304.877804][T14664] FAT-fs (loop0): Directory bread(block 37) failed [ 304.895814][T14664] FAT-fs (loop0): Directory bread(block 38) failed [ 304.928851][T14664] FAT-fs (loop0): Directory bread(block 39) failed [ 304.933079][ T4312] lo speed is unknown, defaulting to 1000 [ 304.944595][T14664] FAT-fs (loop0): Directory bread(block 40) failed [ 304.992668][T14664] FAT-fs (loop0): Directory bread(block 41) failed [ 305.072128][T14683] loop5: detected capacity change from 0 to 256 [ 305.356685][T14693] loop1: detected capacity change from 0 to 4096 [ 305.428737][T14664] syz.0.3315: attempt to access beyond end of device [ 305.428737][T14664] loop0: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 305.460826][T14664] FAT-fs (loop0): Filesystem has been set read-only [ 305.468072][T14664] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 305.468479][T14693] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 306.290593][ T6525] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 306.377532][T14707] loop5: detected capacity change from 0 to 32768 [ 306.384935][T14754] loop0: detected capacity change from 0 to 4096 [ 306.413442][T14754] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 306.425386][ T6538] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 306.437409][T14707] [ 306.437409][T14707] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.437409][T14707] [ 306.502509][ T6525] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 306.531702][ T6525] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 306.567543][T14754] ntfs3: loop0: failed to convert "c46c" to iso8859-4 [ 306.575138][ T6525] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.600987][ T6525] usb 5-1: Product: syz [ 306.608247][T14760] loop1: detected capacity change from 0 to 1764 [ 306.620680][ T6538] usb 4-1: Using ep0 maxpacket: 16 [ 306.626479][ T6525] usb 5-1: Manufacturer: syz [ 306.632899][ T6538] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 306.650581][ T6525] usb 5-1: SerialNumber: syz [ 306.656109][ T6538] usb 4-1: config 0 has no interface number 0 [ 306.667297][ T6525] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 306.694531][ T6538] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 306.729441][ T6538] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 306.784787][ T9173] [ 306.784787][ T9173] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.784787][ T9173] [ 306.798150][ T6533] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 306.822689][ T6538] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 306.848551][ T6538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.857333][ T9173] [ 306.857333][ T9173] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 306.857333][ T9173] [ 306.895687][ T6538] usb 4-1: Product: syz [ 306.904812][ T6538] usb 4-1: Manufacturer: syz [ 306.910523][ T6538] usb 4-1: SerialNumber: syz [ 306.942500][ T6538] usb 4-1: config 0 descriptor?? [ 307.065200][T14732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.118181][T14732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.170328][ T6538] usb 5-1: USB disconnect, device number 21 [ 307.190945][ T6534] usb 4-1: USB disconnect, device number 19 [ 307.325542][T14822] netlink: 'syz.0.3347': attribute type 5 has an invalid length. [ 307.589967][T14839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3351'. [ 307.619268][T14833] loop0: detected capacity change from 0 to 4096 [ 307.626511][T14841] loop5: detected capacity change from 0 to 256 [ 307.672794][T14841] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe5cb490d, utbl_chksum : 0xe619d30d) [ 307.851040][ T6533] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 307.858723][ T6533] ath9k_htc: Failed to initialize the device [ 307.904467][ T6538] usb 5-1: ath9k_htc: USB layer deinitialized [ 308.728274][T14904] 9pnet_fd: p9_fd_create_tcp (14904): problem connecting socket to 127.0.0.1 [ 309.169638][T14935] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3379'. [ 309.572756][T14915] loop0: detected capacity change from 0 to 32768 [ 309.640151][T14915] ERROR: (device loop0): dbAlloc: unable to allocate blocks [ 309.640151][T14915] [ 309.730301][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3389'. [ 309.745653][T14915] ERROR: (device loop0): remounting filesystem as read-only [ 310.180550][ T6533] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 310.255650][T14998] loop5: detected capacity change from 0 to 1024 [ 310.345303][T15003] loop0: detected capacity change from 0 to 164 [ 310.370538][ T6533] usb 2-1: Using ep0 maxpacket: 32 [ 310.377783][ T6533] usb 2-1: config 2 has an invalid interface number: 1 but max is 0 [ 310.419137][ T6533] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 310.430744][ T6533] usb 2-1: config 2 has no interface number 0 [ 310.442088][ T6533] usb 2-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 310.452677][ T6533] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.464605][ T6533] usb 2-1: Product: syz [ 310.485229][ T6533] usb 2-1: Manufacturer: syz [ 310.515960][ T6533] usb 2-1: SerialNumber: syz [ 310.643167][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3403'. [ 310.772691][ T6538] usb 2-1: USB disconnect, device number 16 [ 311.207800][T15055] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.484560][T15072] device batadv1 entered promiscuous mode [ 311.585346][T15083] loop4: detected capacity change from 0 to 164 [ 311.637185][T15083] rock: directory entry would overflow storage [ 311.664180][T15083] rock: sig=0x66, size=4, remaining=3 [ 311.698394][T15083] rock: directory entry would overflow storage [ 311.732952][T15093] netlink: 'syz.1.3424': attribute type 5 has an invalid length. [ 311.750656][T15083] rock: sig=0x66, size=4, remaining=3 [ 312.308584][T15130] netlink: 'syz.4.3435': attribute type 1 has an invalid length. [ 312.502050][T15140] netlink: 'syz.0.3440': attribute type 10 has an invalid length. [ 312.513839][T15143] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3438'. [ 312.530743][T15140] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3440'. [ 312.563290][T15140] bridge0: port 3(dummy0) entered blocking state [ 312.575736][T15140] bridge0: port 3(dummy0) entered disabled state [ 312.585783][T15140] device dummy0 entered promiscuous mode [ 312.592686][T15140] bridge0: port 3(dummy0) entered blocking state [ 312.600535][T15140] bridge0: port 3(dummy0) entered forwarding state [ 312.886122][T15164] tmpfs: Bad value for 'mpol' [ 312.900645][ T6538] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 313.004929][T15171] netlink: 'syz.4.3448': attribute type 2 has an invalid length. [ 313.030559][T15171] netlink: 'syz.4.3448': attribute type 1 has an invalid length. [ 313.046633][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3448'. [ 313.068916][T15176] netlink: 'syz.0.3450': attribute type 21 has an invalid length. [ 313.078903][T15176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3450'. [ 313.117730][T15178] netlink: 'syz.3.3451': attribute type 1 has an invalid length. [ 313.130999][ T6538] usb 2-1: Using ep0 maxpacket: 32 [ 313.142915][ T6538] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 313.197081][ T6538] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 313.214881][ T6538] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.265209][ T6538] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 313.297786][ T6538] usb 2-1: config 1 has no interface number 0 [ 313.311639][ T6538] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 313.328708][ T6538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.338077][T15191] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3455'. [ 313.392063][ T6538] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 313.592778][ T6538] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 313.606768][ T6538] snd_usb_pod 2-1:1.1: invalid control EP [ 313.621325][ T6538] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 313.644555][ T6538] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 313.661485][T15205] loop3: detected capacity change from 0 to 1024 [ 313.672601][ T6538] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 313.830375][ T6534] usb 2-1: USB disconnect, device number 17 [ 313.912034][ T4274] hfsplus: bad catalog entry type [ 314.040774][ T6538] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 314.230549][ T6538] usb 5-1: Using ep0 maxpacket: 8 [ 314.238100][ T6538] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 314.254536][ T6538] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 314.286110][ T6538] usb 5-1: config 135 has no interface number 0 [ 314.292903][ T6538] usb 5-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 314.314993][T15240] loop5: detected capacity change from 0 to 4096 [ 314.323848][ T6538] usb 5-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 314.350101][ T6538] usb 5-1: config 135 interface 230 has no altsetting 0 [ 314.384788][T15243] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.394692][ T6538] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 314.415849][ T47] hfsplus: b-tree write err: -5, ino 4 [ 314.496106][ T6538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.540958][ T6538] usb 5-1: Product: syz [ 314.551421][ T6538] usb 5-1: Manufacturer: syz [ 314.556466][ T6538] usb 5-1: SerialNumber: syz [ 314.602738][T15248] loop1: detected capacity change from 0 to 512 [ 314.631431][T15248] EXT4-fs: Ignoring removed bh option [ 314.698072][T15248] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 314.703667][ T39] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.742087][T15248] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 314.783129][T15248] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 314.796987][T15248] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 314.828798][ T6538] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 314.840228][ T6538] usb 5-1: No valid video chain found. [ 314.849308][ T6538] usb 5-1: USB disconnect, device number 22 [ 314.886369][T15248] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 315.042311][ T39] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.081192][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 315.255166][ T39] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.346321][T15274] netlink: 'syz.5.3472': attribute type 1 has an invalid length. [ 315.385241][T15274] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.3472'. [ 315.475763][ T39] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.749300][T15290] x_tables: duplicate underflow at hook 4 [ 315.842481][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 315.857743][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 315.867760][ T6534] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 315.878196][ T4273] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 315.889241][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 315.900666][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 315.913005][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 316.100681][ T6534] usb 5-1: Using ep0 maxpacket: 16 [ 316.107518][ T6534] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 316.121956][T15293] lo speed is unknown, defaulting to 1000 [ 316.160523][ T6534] usb 5-1: config 0 has no interface number 0 [ 316.204718][ T6534] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 316.245299][ T6534] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.290587][ T6534] usb 5-1: Product: syz [ 316.295512][ T6534] usb 5-1: Manufacturer: syz [ 316.334539][ T6534] usb 5-1: SerialNumber: syz [ 316.363696][ T6534] usb 5-1: config 0 descriptor?? [ 316.409804][ T6534] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 316.811655][ T6534] gspca_spca1528: reg_w err -71 [ 316.840583][ T6534] spca1528: probe of 5-1:0.1 failed with error -71 [ 316.861057][ T6534] usb 5-1: USB disconnect, device number 23 [ 316.939506][T15360] loop1: detected capacity change from 0 to 1024 [ 317.091773][T15360] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.3485: lblock 2 mapped to illegal pblock 2 (length 1) [ 317.129869][T15360] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 317.150590][T15360] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.3485: lblock 0 mapped to illegal pblock 48 (length 1) [ 317.228614][T15360] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 317.250363][T15360] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.3485: Failed to acquire dquot type 0 [ 317.294195][T15360] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 317.311428][T15360] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.3485: mark_inode_dirty error [ 317.367855][T15360] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 317.380127][T15360] EXT4-fs (loop1): 1 orphan inode deleted [ 317.412222][ T47] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 317.460752][T15360] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 317.502471][ T47] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 317.525157][ T47] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:4: Failed to release dquot type 0 [ 317.642777][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 317.651039][ T9] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 317.663056][T15371] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3486'. [ 317.692737][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.707101][ T9] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 317.717330][T15371] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 317.774971][T15377] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3487'. [ 317.797630][T15377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3487'. [ 317.810666][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 0 [ 317.816203][T15377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3487'. [ 317.857335][ T4268] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 317.940990][ T4268] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 318.010701][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 318.023652][ T4268] EXT4-fs error (device loop1): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 318.278987][T15413] netlink: 'syz.1.3488': attribute type 29 has an invalid length. [ 318.390523][T15413] netlink: 'syz.1.3488': attribute type 29 has an invalid length. [ 318.489948][T15427] loop4: detected capacity change from 0 to 164 [ 318.599356][T15427] rock: directory entry would overflow storage [ 318.641495][T15427] rock: sig=0x4543, size=28, remaining=18 [ 318.851632][T15455] openvswitch: netlink: Message has 4 unknown bytes. [ 318.874807][T15293] chnl_net:caif_netlink_parms(): no params data found [ 319.313229][T15504] loop1: detected capacity change from 0 to 256 [ 319.469761][T15293] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.491451][T15504] FAT-fs (loop1): Directory bread(block 64) failed [ 319.523019][T15293] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.550725][T15504] FAT-fs (loop1): Directory bread(block 65) failed [ 319.570019][T15504] FAT-fs (loop1): Directory bread(block 66) failed [ 319.586753][T15293] device bridge_slave_0 entered promiscuous mode [ 319.602731][T15504] FAT-fs (loop1): Directory bread(block 67) failed [ 319.610350][T15504] FAT-fs (loop1): Directory bread(block 68) failed [ 319.621317][T15504] FAT-fs (loop1): Directory bread(block 69) failed [ 319.640621][T15504] FAT-fs (loop1): Directory bread(block 70) failed [ 319.648670][T15504] FAT-fs (loop1): Directory bread(block 71) failed [ 319.681653][T15504] FAT-fs (loop1): Directory bread(block 72) failed [ 319.688671][T15504] FAT-fs (loop1): Directory bread(block 73) failed [ 319.717375][T15293] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.745851][T15293] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.755920][T15549] loop5: detected capacity change from 0 to 1024 [ 319.765131][T15293] device bridge_slave_1 entered promiscuous mode [ 319.941339][T15293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.032596][ T9173] hfsplus: bad catalog entry type [ 320.090751][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 320.244690][T15293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.431416][T15591] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.3508'. [ 320.581986][ T4347] hfsplus: b-tree write err: -5, ino 4 [ 320.765360][T15293] team0: Port device team_slave_0 added [ 320.785889][T15293] team0: Port device team_slave_1 added [ 320.961828][T15293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.969303][T15293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.009738][T15591] syz.4.3508 (15591) used greatest stack depth: 18096 bytes left [ 321.098349][T15293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.133679][T15293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.150584][T15293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.254095][T15657] ipt_ECN: cannot use operation on non-tcp rule [ 321.280668][T15293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.345930][ T39] device hsr_slave_0 left promiscuous mode [ 321.427797][ T39] device hsr_slave_1 left promiscuous mode [ 321.438916][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.478312][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.524752][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.580725][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.627426][ T39] device bridge_slave_1 left promiscuous mode [ 321.654476][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.694207][T15676] overlayfs: missing 'lowerdir' [ 321.759668][ T26] audit: type=1326 audit(1770635584.961:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.1.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6879af79 code=0x7ffc0000 [ 321.787343][ T39] device bridge_slave_0 left promiscuous mode [ 321.820707][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.871476][ T26] audit: type=1326 audit(1770635584.961:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.1.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f7a6879af79 code=0x7ffc0000 [ 322.077478][ T26] audit: type=1326 audit(1770635585.281:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.1.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6879af79 code=0x7ffc0000 [ 322.103099][ T4277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 322.116335][ T39] device veth1_macvtap left promiscuous mode [ 322.122357][ T4277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 322.133131][ T4277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 322.151537][ T4277] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 322.162657][ T4277] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 322.170925][ T4273] Bluetooth: hci3: command 0x040f tx timeout [ 322.177872][ T4277] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 322.186529][ T39] device veth0_macvtap left promiscuous mode [ 322.191002][ T26] audit: type=1326 audit(1770635585.391:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.1.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6879af79 code=0x7ffc0000 [ 322.233077][ T39] device veth1_vlan left promiscuous mode [ 322.239832][ T39] device veth0_vlan left promiscuous mode [ 322.867342][ T39] bond2 (unregistering): Released all slaves [ 323.252235][T15745] loop1: detected capacity change from 0 to 256 [ 323.309630][T15748] loop4: detected capacity change from 0 to 16 [ 323.319263][T15748] erofs: (device loop4): mounted with root inode @ nid 36. [ 323.340827][T15745] FAT-fs (loop1): Directory bread(block 64) failed [ 323.390665][T15745] FAT-fs (loop1): Directory bread(block 65) failed [ 323.398287][T15745] FAT-fs (loop1): Directory bread(block 66) failed [ 323.429585][T15745] FAT-fs (loop1): Directory bread(block 67) failed [ 323.447377][T15745] FAT-fs (loop1): Directory bread(block 68) failed [ 323.467712][T15745] FAT-fs (loop1): Directory bread(block 69) failed [ 323.475232][T15745] FAT-fs (loop1): Directory bread(block 70) failed [ 323.483372][T15745] FAT-fs (loop1): Directory bread(block 71) failed [ 323.498004][T15745] FAT-fs (loop1): Directory bread(block 72) failed [ 323.506591][T15745] FAT-fs (loop1): Directory bread(block 73) failed [ 323.822971][ T39] bond1 (unregistering): Released all slaves [ 324.048591][T15777] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.250860][ T4283] Bluetooth: hci5: command 0x0409 tx timeout [ 324.267390][ T4273] Bluetooth: hci3: command 0x0419 tx timeout [ 324.485503][T15771] loop1: detected capacity change from 0 to 32768 [ 324.565380][ T8356] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 324.578403][T15771] XFS (loop1): Mounting V5 Filesystem [ 324.689719][T15771] XFS (loop1): Ending clean mount [ 324.770737][ T8356] usb 1-1: Using ep0 maxpacket: 32 [ 324.779749][ T8356] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 324.810532][ T8356] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 324.831069][ T8356] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 324.841547][ T8356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.849846][ T8356] usb 1-1: Product: syz [ 324.860209][T15807] loop4: detected capacity change from 0 to 256 [ 324.866874][ T8356] usb 1-1: Manufacturer: syz [ 324.872460][ T8356] usb 1-1: SerialNumber: syz [ 324.872935][ T4268] XFS (loop1): Unmounting Filesystem [ 324.884754][ T8356] usb 1-1: config 0 descriptor?? [ 324.927541][ T8356] usb 1-1: no audio or video endpoints found [ 324.937978][T15807] FAT-fs (loop4): Directory bread(block 64) failed [ 324.947043][T15807] FAT-fs (loop4): Directory bread(block 65) failed [ 324.956067][T15807] FAT-fs (loop4): Directory bread(block 66) failed [ 324.989446][T15807] FAT-fs (loop4): Directory bread(block 67) failed [ 325.000373][T15807] FAT-fs (loop4): Directory bread(block 68) failed [ 325.035314][T15807] FAT-fs (loop4): Directory bread(block 69) failed [ 325.045177][T15807] FAT-fs (loop4): Directory bread(block 70) failed [ 325.054507][T15807] FAT-fs (loop4): Directory bread(block 71) failed [ 325.094771][T15807] FAT-fs (loop4): Directory bread(block 72) failed [ 325.104961][T15807] FAT-fs (loop4): Directory bread(block 73) failed [ 325.193150][ T8356] usb 1-1: USB disconnect, device number 16 [ 326.088287][ T39] team0 (unregistering): Port device team_slave_1 removed [ 326.332796][ T4277] Bluetooth: hci5: command 0x041b tx timeout [ 326.364368][ T39] team0 (unregistering): Port device team_slave_0 removed [ 326.561796][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.620593][ T6524] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 326.741265][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.820583][ T6524] usb 1-1: Using ep0 maxpacket: 8 [ 326.832879][ T6524] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.856852][ T6524] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 326.883756][ T6524] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.894002][ T6524] usb 1-1: Product: syz [ 326.901316][ T6524] usb 1-1: Manufacturer: syz [ 326.907653][ T6524] usb 1-1: SerialNumber: syz [ 326.943421][ T6524] usb 1-1: config 0 descriptor?? [ 326.991680][ T6524] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 327.020091][ T6524] usb 1-1: selecting invalid altsetting 1 [ 327.142173][T15880] binder: 15877:15880 unknown command 0 [ 327.156140][ T6524] gspca_stk014: init reg: 0x00 [ 327.161632][ T6524] stk014: probe of 1-1:0.0 failed with error -5 [ 327.200881][T15880] binder: 15877:15880 ioctl c0306201 200000000480 returned -22 [ 327.367501][ T6524] usb 1-1: USB disconnect, device number 17 [ 327.681886][ T6534] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 327.921658][ T6534] usb 2-1: unable to get BOS descriptor or descriptor too short [ 327.961612][ T6534] usb 2-1: config 7 has an invalid interface number: 199 but max is 0 [ 327.971735][ T6534] usb 2-1: config 7 has no interface number 0 [ 327.978477][ T6534] usb 2-1: config 7 interface 199 has no altsetting 0 [ 328.000809][ T6534] usb 2-1: string descriptor 0 read error: -22 [ 328.024907][ T6534] usb 2-1: New USB device found, idVendor=0c45, idProduct=6282, bcdDevice=cb.15 [ 328.038671][ T6534] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.123580][ T6534] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6282 [ 328.420795][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 328.466527][ T39] bond0 (unregistering): Released all slaves [ 328.531614][ T6534] gspca_sn9c20x: Write register 1001 failed -71 [ 328.537942][ T6534] gspca_sn9c20x: Device initialization failed [ 328.557322][ T6534] gspca_sn9c20x: probe of 2-1:7.199 failed with error -71 [ 328.577787][ T6534] usb 2-1: USB disconnect, device number 18 [ 329.027469][T15293] device hsr_slave_0 entered promiscuous mode [ 329.055876][T15293] device hsr_slave_1 entered promiscuous mode [ 329.079111][T15293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.108790][T15293] Cannot create hsr debugfs directory [ 329.159534][T15687] lo speed is unknown, defaulting to 1000 [ 329.993302][T15293] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 330.058569][T15293] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 330.161787][T15293] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 330.184153][T15293] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 330.491757][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 330.545313][T16147] netlink: 'syz.0.3595': attribute type 1 has an invalid length. [ 330.554691][T16147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3595'. [ 330.637475][ T39] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.736500][T15687] chnl_net:caif_netlink_parms(): no params data found [ 330.937906][T15293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.072453][ T39] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.158603][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3600'. [ 331.209564][T15293] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.289447][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.327688][T16217] loop1: detected capacity change from 0 to 1024 [ 331.370628][ T4319] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 331.400735][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.560604][ T4319] usb 1-1: Using ep0 maxpacket: 32 [ 331.568395][ T4319] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 331.608681][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.667152][ T4319] usb 1-1: config 0 descriptor?? [ 331.683266][ T4319] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 332.091260][ T4319] gspca_nw80x: reg_r err -71 [ 332.101857][ T4319] nw80x: probe of 1-1:0.0 failed with error -71 [ 332.126706][ T4319] usb 1-1: USB disconnect, device number 18 [ 332.205475][ T4362] hfsplus: b-tree write err: -5, ino 4 [ 332.283268][ T39] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.343754][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 332.372011][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.390955][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.398108][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.421973][T16243] loop4: detected capacity change from 0 to 512 [ 332.443087][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 332.473672][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.484048][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.491800][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.504609][T16243] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 332.519772][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.535404][T16243] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 332.636276][ T39] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.657714][T15687] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.687214][T15687] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.700755][T16243] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3852: comm syz.4.3606: Allocating blocks 41-42 which overlap fs metadata [ 332.715099][T15687] device bridge_slave_0 entered promiscuous mode [ 332.728804][T16277] loop1: detected capacity change from 0 to 1024 [ 332.741275][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 332.762124][T16243] Quota error (device loop4): write_blk: dquota write failed [ 332.775889][T15687] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.794826][T16243] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 332.804056][T15687] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.814971][T16243] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3852: comm syz.4.3606: Allocating blocks 41-42 which overlap fs metadata [ 332.860619][T16243] Quota error (device loop4): write_blk: dquota write failed [ 332.868606][T16243] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 332.891693][T15687] device bridge_slave_1 entered promiscuous mode [ 332.908984][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 332.916437][T16243] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.3606: Failed to acquire dquot type 1 [ 332.936345][T16243] EXT4-fs error (device loop4): mb_free_blocks:1826: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 332.993982][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 333.018278][T16243] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #12: comm syz.4.3606: corrupted inode contents [ 333.055009][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 333.104195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 333.118297][T16243] EXT4-fs error (device loop4): ext4_dirty_inode:6137: inode #12: comm syz.4.3606: mark_inode_dirty error [ 333.147808][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 333.171878][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 333.178323][T16243] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #12: comm syz.4.3606: corrupted inode contents [ 333.215675][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 333.235401][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 333.269049][T16243] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.3606: mark_inode_dirty error [ 333.325936][T16311] loop1: detected capacity change from 0 to 128 [ 333.332202][T16243] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #12: comm syz.4.3606: corrupted inode contents [ 333.413350][T16243] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 333.434005][T15687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.436890][T16243] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #12: comm syz.4.3606: corrupted inode contents [ 333.466068][T15293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.486494][T16243] EXT4-fs error (device loop4): ext4_truncate:4318: inode #12: comm syz.4.3606: mark_inode_dirty error [ 333.526688][T16243] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 333.542107][T15293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 333.551741][T16243] EXT4-fs (loop4): 1 truncate cleaned up [ 333.558149][T16243] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 333.587022][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 333.621800][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 333.675594][T16243] Quota error (device loop4): write_blk: dquota write failed [ 333.713398][T15687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.722184][T16243] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 333.765543][T16243] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.3606: Failed to acquire dquot type 1 [ 334.031553][T15687] team0: Port device team_slave_0 added [ 334.066737][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 334.152631][T15687] team0: Port device team_slave_1 added [ 334.295527][T16382] QAT: Invalid ioctl 1075883590 [ 334.349403][T16382] QAT: Invalid ioctl 1075883590 [ 334.370795][T16382] QAT: Invalid ioctl 1075883590 [ 334.390837][T16382] QAT: Invalid ioctl 1075883590 [ 334.397040][T16382] QAT: Invalid ioctl 1075883590 [ 334.403415][T16382] QAT: Invalid ioctl 1075883590 [ 334.409354][T16382] QAT: Invalid ioctl 1075883590 [ 334.448369][T16382] QAT: Invalid ioctl 1075883590 [ 334.454530][T16382] QAT: Invalid ioctl 1075883590 [ 334.470765][T16382] QAT: Invalid ioctl 1075883590 [ 334.599280][T16398] loop4: detected capacity change from 0 to 4096 [ 334.656510][T15687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.683573][T16398] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 334.691825][T15687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.770094][T16398] ntfs3: loop4: Failed to load $Extend. [ 334.793740][T15687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.837612][T15687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.863668][T15687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.997403][T15687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.181905][T16422] loop1: detected capacity change from 0 to 1024 [ 335.204053][T16422] EXT4-fs: inline encryption not supported [ 335.317563][T16422] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.3628: lblock 2 mapped to illegal pblock 2 (length 1) [ 335.371463][T16422] EXT4-fs (loop1): Remounting filesystem read-only [ 335.410802][T16422] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 335.428209][T15687] device hsr_slave_0 entered promiscuous mode [ 335.480326][T15687] device hsr_slave_1 entered promiscuous mode [ 335.504345][T15687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.521816][T16422] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.3628: lblock 0 mapped to illegal pblock 48 (length 1) [ 335.545740][T15687] Cannot create hsr debugfs directory [ 335.554752][T16449] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3630'. [ 335.567966][T16422] EXT4-fs (loop1): Remounting filesystem read-only [ 335.578327][T16422] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 335.651801][T16422] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.3628: Failed to acquire dquot type 0 [ 335.693725][T16422] EXT4-fs (loop1): Remounting filesystem read-only [ 335.757210][T16422] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 335.792469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.806862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.808527][T16422] EXT4-fs (loop1): Remounting filesystem read-only [ 335.823724][T16422] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.3628: mark_inode_dirty error [ 335.841621][T16422] EXT4-fs (loop1): Remounting filesystem read-only [ 335.848482][T16422] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 335.852796][T15293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.860297][T16422] EXT4-fs (loop1): 1 orphan inode deleted [ 335.880950][ T4347] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 335.905462][T16422] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 335.926887][ T4347] EXT4-fs (loop1): Remounting filesystem read-only [ 335.955466][ T4347] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 335.976303][ T4347] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:5: Failed to release dquot type 0 [ 335.989789][T16422] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm syz.1.3628: lblock 1 mapped to illegal pblock 1 (length 1) [ 336.043498][ T4347] EXT4-fs (loop1): Remounting filesystem read-only [ 336.098882][T16482] netlink: 'syz.0.3633': attribute type 12 has an invalid length. [ 336.211532][T16422] EXT4-fs (loop1): Remounting filesystem read-only [ 336.218482][T16422] Quota error (device loop1): find_next_id: Can't read quota tree block 1 [ 336.306367][T16508] netlink: 'syz.4.3636': attribute type 1 has an invalid length. [ 336.314690][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3636'. [ 336.407175][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 336.495226][ T4268] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 336.536639][ T4268] EXT4-fs (loop1): Remounting filesystem read-only [ 336.565896][ T4268] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 336.602320][ T4268] EXT4-fs (loop1): Remounting filesystem read-only [ 336.625603][ T4268] EXT4-fs error (device loop1): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 336.691607][ T4268] EXT4-fs (loop1): Remounting filesystem read-only [ 337.500338][T16614] loop0: detected capacity change from 0 to 64 [ 337.679278][T15687] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 337.736382][T15687] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 337.841266][T15687] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 337.876092][T15687] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 337.959257][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 337.993242][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 338.091560][T16643] netlink: 'syz.4.3653': attribute type 4 has an invalid length. [ 338.242369][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 338.263800][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 338.311629][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 338.321649][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 338.341707][T15293] device veth0_vlan entered promiscuous mode [ 338.352807][T16653] loop1: detected capacity change from 0 to 1764 [ 338.369368][ T39] device hsr_slave_0 left promiscuous mode [ 338.417703][ T39] device hsr_slave_1 left promiscuous mode [ 338.434976][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.470030][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.512003][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.519568][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.548872][ T39] device bridge_slave_1 left promiscuous mode [ 338.589502][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.619924][T16671] nft_compat: unsupported protocol 5 [ 338.667732][ T39] device bridge_slave_0 left promiscuous mode [ 338.680834][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.777176][ T39] device veth1_macvtap left promiscuous mode [ 338.795166][ T39] device veth0_macvtap left promiscuous mode [ 338.809361][ T39] device veth1_vlan left promiscuous mode [ 338.818339][ T39] device veth0_vlan left promiscuous mode [ 339.062032][ T8356] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 339.275806][ T8356] usb 2-1: Using ep0 maxpacket: 16 [ 339.298091][ T8356] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 339.302389][ T39] bond1 (unregistering): Released all slaves [ 339.310174][ T8356] usb 2-1: config 254 has no interface number 0 [ 339.337273][ T8356] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 339.349720][ T8356] usb 2-1: config 254 interface 235 has no altsetting 0 [ 339.376364][ T8356] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 339.386962][ T8356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.397509][ T8356] usb 2-1: Product: syz [ 339.402899][ T8356] usb 2-1: Manufacturer: syz [ 339.408096][ T8356] usb 2-1: SerialNumber: syz [ 339.433283][T16681] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 339.655961][T16681] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 339.675177][ T8356] usbtest 2-1:254.235: Linux gadget zero [ 339.681414][ T8356] usbtest 2-1:254.235: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 339.916876][ T8356] usb 2-1: USB disconnect, device number 19 [ 340.137959][ T39] team0 (unregistering): Port device team_slave_1 removed [ 340.199055][ T39] team0 (unregistering): Port device team_slave_0 removed [ 340.267890][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.327128][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.010110][ T39] bond0 (unregistering): Released all slaves [ 341.191915][T15293] device veth1_vlan entered promiscuous mode [ 341.220983][T16738] netlink: 'syz.1.3679': attribute type 10 has an invalid length. [ 341.333817][T16738] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 341.350860][T16738] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 341.381767][T16738] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 341.426483][T16738] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 341.580889][T15293] device veth0_macvtap entered promiscuous mode [ 341.597649][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 341.609977][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 341.690938][T15293] device veth1_macvtap entered promiscuous mode [ 341.711310][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 341.727904][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 341.769606][T15293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.812422][T15293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.826255][T15293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.851665][T15293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.864297][T15293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.877349][T15293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.892255][T15293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.905896][T15293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.967891][T15293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.968416][T16771] SET target dimension over the limit! [ 341.991584][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 342.021787][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 342.081363][T15293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.116271][T15293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.161359][T15293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.183338][T15293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.225601][T15293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.247758][T15293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.290576][T15293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.310512][T15293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.380840][T15293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.392634][T15687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.401669][T16782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.421029][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 342.433330][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 342.463003][T15293] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.490812][T15293] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.520809][T15293] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.558002][T15293] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.618748][T15687] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.668958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 342.712161][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.732812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 342.762958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.788372][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.796717][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.830621][T16795] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3696'. [ 342.866434][T16797] netlink: 'syz.1.3697': attribute type 10 has an invalid length. [ 342.890390][T16797] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3697'. [ 342.940125][T16797] bridge0: port 3(ipvlan1) entered blocking state [ 342.971158][T16797] bridge0: port 3(ipvlan1) entered disabled state [ 342.993107][T16797] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 343.067812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 343.113425][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 343.157562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 343.219635][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.228366][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.279199][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 343.305871][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 343.389843][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 343.444306][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 343.575196][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 343.631461][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 343.684944][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 343.718862][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 343.782186][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 343.825085][T15687] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.862870][T15687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 343.920689][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 343.965995][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.122556][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.155981][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.255567][ T4362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.281090][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 344.343135][ T4362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.390028][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 344.647189][T16867] netlink: 194488 bytes leftover after parsing attributes in process `syz.1.3706'. [ 345.005846][T16881] netlink: 'syz.1.3708': attribute type 39 has an invalid length. [ 345.068117][T16885] loop6: detected capacity change from 0 to 512 [ 345.194900][T16885] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 345.217390][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 345.230675][T16885] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 345.244288][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.258165][T15687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.278120][T16898] loop1: detected capacity change from 0 to 512 [ 345.379481][T16898] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 345.443992][T16898] System zones: 0-2, 18-18, 34-34 [ 345.450404][T16898] EXT4-fs (loop1): orphan cleanup on readonly fs [ 345.470182][T16898] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 345.494195][T16898] EXT4-fs warning (device loop1): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 345.524208][T16898] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 345.533014][T16898] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.3712: bad orphan inode 4095 [ 345.555727][T16898] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 345.674258][T15293] EXT4-fs (loop6): unmounting filesystem. [ 345.677704][T16908] loop4: detected capacity change from 0 to 512 [ 345.853559][T16908] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 345.888843][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 345.920831][T16908] ext4 filesystem being mounted at /773/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.017911][T16908] EXT4-fs error (device loop4): ext4_validate_inode_bitmap:106: comm syz.4.3713: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 346.055444][T16920] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.248316][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 346.512498][T16950] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3722'. [ 346.550806][T16950] 0ªX¹¦À: renamed from caif0 [ 346.573604][T16950] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 347.082321][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 347.163429][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 347.223548][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 347.248998][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 347.283906][T15687] device veth0_vlan entered promiscuous mode [ 347.319113][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 347.352107][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 347.377819][T15687] device veth1_vlan entered promiscuous mode [ 347.521476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 347.540579][ T4312] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 347.560189][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 347.574302][T15687] device veth0_macvtap entered promiscuous mode [ 347.613483][T15687] device veth1_macvtap entered promiscuous mode [ 347.685349][T15687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.730298][T15687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.750686][ T4312] usb 2-1: Using ep0 maxpacket: 16 [ 347.758736][T15687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.764404][ T4312] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 347.776230][T17018] usb usb8: usbfs: process 17018 (syz.6.3741) did not claim interface 0 before use [ 347.810691][T15687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.825266][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.837722][T15687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.841613][ T4312] usb 2-1: Product: syz [ 347.864466][ T4312] usb 2-1: Manufacturer: syz [ 347.874618][ T4312] usb 2-1: SerialNumber: syz [ 347.889258][T15687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.901179][ T4312] r8152-cfgselector 2-1: config 0 descriptor?? [ 347.948042][T15687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.985036][T15687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.021634][T15687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.047444][T15687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.088397][T15687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.115199][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 348.173109][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 348.217883][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 348.251938][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 348.313464][T15687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.340108][T15687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.354944][ T4312] r8152-cfgselector 2-1: Unknown version 0x0000 [ 348.373906][ T4312] r8152-cfgselector 2-1: bad CDC descriptors [ 348.380153][T15687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.428331][ T4312] r8152-cfgselector 2-1: Unknown version 0x0000 [ 348.447042][ T4312] r8152-cfgselector 2-1: USB disconnect, device number 20 [ 348.457613][T15687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.516104][T15687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.550157][T15687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.578794][T15687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.604095][T15687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.624063][T15687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.647561][T15687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.681593][T15687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.724370][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 348.746361][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 348.871033][T15687] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.881190][T15687] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.926807][T15687] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.001910][T15687] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.162850][T17099] comedi comedi3: aio_iiro_16: I/O port conflict (0xc,8) [ 349.339381][ T4362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.384512][ T4362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.442815][T17125] loop4: detected capacity change from 0 to 512 [ 349.474982][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 349.539260][ T9724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.564546][ T9724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.600383][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 349.642511][T17125] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 349.670873][T17125] ext4 filesystem being mounted at /782/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.806094][T17150] loop6: detected capacity change from 0 to 512 [ 349.817065][T17151] loop1: detected capacity change from 0 to 512 [ 349.913312][T17151] EXT4-fs: Ignoring removed bh option [ 349.951545][T17150] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 349.969971][T17150] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.026604][T17151] EXT4-fs: Ignoring removed mblk_io_submit option [ 350.061194][T17151] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 350.081480][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 350.145557][T15293] EXT4-fs (loop6): unmounting filesystem. [ 350.195358][T17151] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 350.270880][T17151] ext4 filesystem being mounted at /792/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.554481][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 350.740996][T17190] device bridge1 entered promiscuous mode [ 350.806510][T17200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3765'. [ 351.363148][T17230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3776'. [ 351.444040][T17236] xt_l2tp: invalid flags combination: 4 [ 352.173405][T17274] device bridge2 entered promiscuous mode [ 352.250920][ T27] INFO: task syz-executor:4279 blocked for more than 143 seconds. [ 352.278385][ T27] Not tainted syzkaller #0 [ 352.303403][T17214] loop7: detected capacity change from 0 to 32768 [ 352.331145][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.380555][ T4319] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 352.395038][ T27] task:syz-executor state:D stack:21232 pid:4279 ppid:1 flags:0x00004004 [ 352.435177][ T27] Call Trace: [ 352.438712][ T27] [ 352.443773][ T27] __schedule+0x11d1/0x40e0 [ 352.446428][T17214] XFS (loop7): Mounting V5 Filesystem [ 352.449571][ T27] ? mark_lock+0x94/0x320 [ 352.459793][ T27] ? __sched_text_start+0x8/0x8 [ 352.465984][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 352.525468][ T27] ? lock_chain_count+0x20/0x20 [ 352.534501][T17214] XFS (loop7): Ending clean mount [ 352.549973][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 352.552824][T17214] XFS (loop7): Quotacheck needed: Please wait. [ 352.564174][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 352.577169][ T27] schedule+0xb9/0x180 [ 352.589630][ T27] io_schedule+0x7c/0xd0 [ 352.605002][ T4319] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 352.610296][ T27] folio_wait_bit_common+0x70a/0xfa0 [ 352.636294][ T27] ? folio_wait_bit+0x30/0x30 [ 352.649078][ T27] ? migration_entry_wait_on_locked+0xe90/0xe90 [ 352.662576][ T4319] usb 7-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 352.665915][ T27] ? folio_mapping+0x1ba/0x4d0 [ 352.688576][ T27] truncate_inode_pages_range+0x9fe/0x1090 [ 352.695967][ T4319] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.696401][ T27] ? mapping_evict_folio+0x520/0x520 [ 352.712512][ T4319] usb 7-1: Product: syz [ 352.717340][ T4319] usb 7-1: Manufacturer: syz [ 352.717339][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 352.736494][ T4319] usb 7-1: SerialNumber: syz [ 352.739962][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 352.747531][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 352.753566][ T4319] usb 7-1: config 0 descriptor?? [ 352.762608][ T27] evict+0x4dc/0x8d0 [ 352.766943][ T27] ? proc_nr_inodes+0x2f0/0x2f0 [ 352.772107][T17214] XFS (loop7): Quotacheck: Done. [ 352.776627][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 352.796025][ T4319] powermate: probe of 7-1:0.0 failed with error -5 [ 352.804017][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 352.834479][ T27] evict_inodes+0x60c/0x6a0 [ 352.853959][ T27] ? clear_inode+0x150/0x150 [ 352.867111][ T27] generic_shutdown_super+0x93/0x340 [ 352.879029][ T27] kill_block_super+0x7c/0xe0 [ 352.884529][ T27] deactivate_locked_super+0x93/0xf0 [ 352.898671][ T27] cleanup_mnt+0x42c/0x4b0 [ 352.905084][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 352.918719][ T27] task_work_run+0x1d0/0x260 [ 352.923667][ T27] ? task_work_cancel+0x220/0x220 [ 352.929451][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 352.964353][ T27] exit_to_user_mode_loop+0xe6/0x110 [ 352.969838][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 352.999573][ T6538] usb 7-1: USB disconnect, device number 2 [ 353.004375][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 353.020786][ T27] do_syscall_64+0x58/0xa0 [ 353.025949][ T27] ? clear_bhb_loop+0x60/0xb0 [ 353.050222][ T27] ? clear_bhb_loop+0x60/0xb0 [ 353.057143][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.064230][ T27] RIP: 0033:0x7f3e5d99c1d7 [ 353.070375][ T27] RSP: 002b:00007ffd803fdb88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 353.079592][ T27] RAX: 0000000000000000 RBX: 00007f3e5da30b3b RCX: 00007f3e5d99c1d7 [ 353.088309][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd803fdc40 [ 353.097261][ T27] RBP: 00007ffd803fdc40 R08: 00007ffd803fec40 R09: 00000000ffffffff [ 353.110668][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd803fecd0 [ 353.119863][ T27] R13: 00007f3e5da30b3b R14: 000000000002fd57 R15: 00007ffd803fed10 [ 353.130159][ T27] [ 353.135383][T15687] XFS (loop7): Unmounting Filesystem [ 353.153206][ T27] [ 353.153206][ T27] Showing all locks held in the system: [ 353.177905][ T27] 1 lock held by rcu_tasks_kthre/12: [ 353.185379][ T27] #0: ffffffff8cb2dfb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 353.197658][ T27] 1 lock held by rcu_tasks_trace/13: [ 353.205497][ T27] #0: ffffffff8cb2e7d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 353.213760][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.217899][ T27] 1 lock held by khungtaskd/27: [ 353.238408][ T27] #0: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 353.274440][ T27] 2 locks held by getty/4034: [ 353.279832][ T27] #0: ffff88814d23d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 353.299451][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 353.324781][ T27] 1 lock held by syz-executor/4279: [ 353.330401][ T27] #0: ffff888073cb00e0 (&type->s_umount_key#68){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 353.348732][ T27] 2 locks held by kworker/1:9/6524: [ 353.361821][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 353.375593][ T27] #1: ffffc90004e8fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 353.394831][ T27] 3 locks held by kworker/1:14/6533: [ 353.402136][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 353.413700][ T27] #1: ffffc900053dfd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 353.431328][ T27] #2: ffffffff8cb332f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 353.443209][ T27] 2 locks held by syz-executor/15687: [ 353.449759][ T27] #0: ffff88807d2560e0 (&type->s_umount_key#79){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 353.461106][ T27] #1: ffffffff8cb332f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 353.478486][ T27] [ 353.481017][ T27] ============================================= [ 353.481017][ T27] [ 353.490435][ T27] NMI backtrace for cpu 0 [ 353.495003][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 353.498465][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.502982][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 353.502998][ T27] Call Trace: [ 353.526094][ T27] [ 353.529790][ T27] dump_stack_lvl+0x188/0x24e [ 353.535588][ T27] ? show_regs_print_info+0x12/0x12 [ 353.542213][ T27] ? load_image+0x400/0x400 [ 353.547328][ T27] ? vprintk_emit+0x59f/0x6a0 [ 353.554215][ T27] ? printk_sprint+0x460/0x460 [ 353.560168][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 353.566987][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 353.574298][ T27] ? _printk+0xda/0x130 [ 353.579524][ T27] ? load_image+0x400/0x400 [ 353.585220][ T27] ? load_image+0x400/0x400 [ 353.591092][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 353.598453][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 353.606162][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 353.613963][ T27] watchdog+0xeee/0xf30 [ 353.619415][ T27] ? watchdog+0x1ed/0xf30 [ 353.624572][ T27] kthread+0x29d/0x330 [ 353.629482][ T27] ? hungtask_pm_notify+0x40/0x40 [ 353.635607][ T27] ? kthread_blkcg+0xd0/0xd0 [ 353.640762][ T27] ret_from_fork+0x1f/0x30 [ 353.645983][ T27] [ 353.652626][ T27] Sending NMI from CPU 0 to CPUs 1: [ 353.659052][ C1] NMI backtrace for cpu 1 [ 353.659068][ C1] CPU: 1 PID: 9724 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 353.659084][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 353.659093][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 353.659122][ C1] RIP: 0010:unwind_next_frame+0x3f8/0x20b0 [ 353.659143][ C1] Code: 39 17 00 00 41 c6 06 01 49 c7 c4 40 87 89 8a 49 8d 6c 24 04 4d 8d 7c 24 05 48 89 e8 48 c1 e8 03 48 89 44 24 48 42 0f b6 04 28 <84> c0 0f 85 72 16 00 00 4c 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 353.659156][ C1] RSP: 0018:ffffc9001ca6f610 EFLAGS: 00000a03 [ 353.659168][ C1] RAX: 0000000000000000 RBX: ffffc9001ca6f6e8 RCX: ffffffff8e36b10c [ 353.659179][ C1] RDX: ffffffff8ea9f66c RSI: ffffffff8e36b0e0 RDI: 0000000000000001 [ 353.659188][ C1] RBP: ffffffff8ea9f6ac R08: 0000000000000010 R09: 0000000000000001 [ 353.659198][ C1] R10: dffffc0000000000 R11: fffff5200394dee9 R12: ffffffff8ea9f6a8 [ 353.659209][ C1] R13: dffffc0000000000 R14: ffffffff8e36b108 R15: ffffffff8ea9f6ad [ 353.659220][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 353.659233][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.659250][ C1] CR2: 000055fbb4495950 CR3: 000000007e125000 CR4: 00000000003506e0 [ 353.659263][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 353.659272][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 353.659282][ C1] Call Trace: [ 353.659287][ C1] [ 353.659298][ C1] ? kasan_save_free_info+0x2d/0x50 [ 353.659316][ C1] ? stack_trace_save+0xf0/0xf0 [ 353.659334][ C1] arch_stack_walk+0x10c/0x140 [ 353.659354][ C1] ? kasan_save_free_info+0x2d/0x50 [ 353.659369][ C1] stack_trace_save+0xa6/0xf0 [ 353.659385][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 353.659410][ C1] ? kasan_save_free_info+0x2d/0x50 [ 353.659423][ C1] ? skb_release_data+0x5db/0x7c0 [ 353.659443][ C1] ? consume_skb+0xa2/0x100 [ 353.659459][ C1] ? nsim_dev_trap_report_work+0x76b/0xaf0 [ 353.659477][ C1] ? process_one_work+0x8a2/0x1160 [ 353.659493][ C1] ? worker_thread+0xaa2/0x1270 [ 353.659509][ C1] ? memset+0x1e/0x40 [ 353.659522][ C1] kasan_set_track+0x4b/0x70 [ 353.659543][ C1] ? kasan_set_track+0x4b/0x70 [ 353.659559][ C1] ? kasan_save_free_info+0x2d/0x50 [ 353.659593][ C1] ? kmem_cache_free+0xf7/0x290 [ 353.659607][ C1] kasan_save_free_info+0x2d/0x50 [ 353.659620][ C1] ____kasan_slab_free+0x126/0x1e0 [ 353.659639][ C1] slab_free_freelist_hook+0x131/0x1a0 [ 353.659657][ C1] ? nsim_dev_trap_report_work+0x76b/0xaf0 [ 353.659674][ C1] kmem_cache_free+0xf7/0x290 [ 353.659690][ C1] nsim_dev_trap_report_work+0x76b/0xaf0 [ 353.659715][ C1] ? process_one_work+0x7b0/0x1160 [ 353.659730][ C1] process_one_work+0x8a2/0x1160 [ 353.659751][ C1] ? worker_detach_from_pool+0x240/0x240 [ 353.659768][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 353.659783][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 353.659797][ C1] ? kthread_data+0x4b/0xc0 [ 353.659818][ C1] worker_thread+0xaa2/0x1270 [ 353.659841][ C1] ? __kthread_parkme+0x162/0x1c0 [ 353.659863][ C1] kthread+0x29d/0x330 [ 353.659874][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 353.659888][ C1] ? kthread_blkcg+0xd0/0xd0 [ 353.659908][ C1] ret_from_fork+0x1f/0x30 [ 353.659932][ C1] [ 354.065456][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 354.073603][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 354.080843][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 354.091975][ T27] Call Trace: [ 354.095751][ T27] [ 354.098873][ T27] dump_stack_lvl+0x188/0x24e [ 354.103760][ T27] ? memcpy+0x3c/0x60 [ 354.108050][ T27] ? show_regs_print_info+0x12/0x12 [ 354.113986][ T27] ? load_image+0x400/0x400 [ 354.119036][ T27] panic+0x2e5/0x730 [ 354.123495][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 354.129257][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 354.133790][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 354.139476][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 354.146884][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 354.153070][ T27] watchdog+0xf2d/0xf30 [ 354.157544][ T27] ? watchdog+0x1ed/0xf30 [ 354.162398][ T27] kthread+0x29d/0x330 [ 354.166657][ T27] ? hungtask_pm_notify+0x40/0x40 [ 354.171871][ T27] ? kthread_blkcg+0xd0/0xd0 [ 354.176868][ T27] ret_from_fork+0x1f/0x30 [ 354.181757][ T27] [ 354.186131][ T27] Kernel Offset: disabled [ 354.191376][ T27] Rebooting in 86400 seconds..