last executing test programs: 4m14.270269219s ago: executing program 2 (id=406): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000000) 4m13.910635236s ago: executing program 2 (id=411): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000120005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 4m13.811265677s ago: executing program 2 (id=414): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x6, 0x34424752, 0x2, @discrete={0xd3, 0x400}}) 4m13.650664661s ago: executing program 2 (id=415): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1524, &(0x7f0000002280)="$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") mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) 4m13.209151819s ago: executing program 2 (id=421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000000601"], 0x30}, 0x1, 0x0, 0x0, 0x4000020}, 0x0) 4m12.774755988s ago: executing program 2 (id=427): r0 = syz_open_dev$video(&(0x7f0000000000), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0xf5, 0x48524742, 0x58595556, 0x425, 0x10001, 0x8, 0x9e0, 0x1, 0x3, 0x0, 0x7}}) 4m12.399795525s ago: executing program 32 (id=427): r0 = syz_open_dev$video(&(0x7f0000000000), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0xf5, 0x48524742, 0x58595556, 0x425, 0x10001, 0x8, 0x9e0, 0x1, 0x3, 0x0, 0x7}}) 58.453585392s ago: executing program 1 (id=3072): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000480)={0xe, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 58.240223356s ago: executing program 1 (id=3075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x34d4ddce7c5c73c0}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) 58.112640738s ago: executing program 1 (id=3077): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x13, &(0x7f0000002900)=""/246, &(0x7f0000002a00)=0xf6) 57.9951989s ago: executing program 1 (id=3080): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@errors_remount}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x8c1}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_continue}, {@keep_last_dots}, {@errors_remount}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@namecase}]}, 0x1, 0x1531, &(0x7f0000001f80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 57.732758276s ago: executing program 1 (id=3084): r0 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x40000003, 0x0, 0x4, 0x0, 0x3, 0xc, 0xfeedcafe, 0x2, 0x3, 0x2}}) 57.326801983s ago: executing program 1 (id=3090): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ipv6_route\x00') pread64(r0, &(0x7f0000003e80)=""/103, 0x67, 0x400) 56.9931884s ago: executing program 33 (id=3090): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ipv6_route\x00') pread64(r0, &(0x7f0000003e80)=""/103, 0x67, 0x400) 11.211769111s ago: executing program 5 (id=3659): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffa) 11.111108183s ago: executing program 5 (id=3660): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'nicvf0\x00', {0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x3, 0x7bfd, 0x18}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) 10.958966987s ago: executing program 5 (id=3663): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000001540)='./bus\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x1502, &(0x7f0000002a80)="$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") mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x10000, 0x0) 10.623643863s ago: executing program 5 (id=3676): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@errors_remount}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x8c1}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_continue}, {@keep_last_dots}, {@errors_remount}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@namecase}]}, 0x1, 0x1531, &(0x7f0000001f80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 10.24341991s ago: executing program 5 (id=3673): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000020000100ecc2000000000000020020000000000100000000140003006c6f0000000000000000000000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) 9.75880049s ago: executing program 5 (id=3684): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 9.399905867s ago: executing program 34 (id=3684): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 3.130329149s ago: executing program 0 (id=3708): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xee) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.901670913s ago: executing program 0 (id=3712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000209000b0073797a31000000000900010073797a300000000008000a4000000004d4010000020a05000000000000000000000000000800024000000002"], 0x250}}, 0x0) 2.59212673s ago: executing program 0 (id=3717): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r0, 0x8901, 0x1000000000000) 2.453680962s ago: executing program 3 (id=3706): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{0x18}, {0x18}, 0x0, 0x7}) 2.411666353s ago: executing program 0 (id=3707): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000081000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.193654197s ago: executing program 3 (id=3715): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x0, 0x9, 0xfffffff9}, 0x10) 2.163475878s ago: executing program 0 (id=3718): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$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") syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905"], 0x0) 2.130302488s ago: executing program 4 (id=3719): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x12, 0x0, 0x37) 1.949577712s ago: executing program 6 (id=3720): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') openat(r0, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) 1.923191643s ago: executing program 3 (id=3721): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x8, 0x7fff0003}]}) io_cancel(0x0, 0x0, 0x0) 1.830671094s ago: executing program 4 (id=3722): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000540)='./bus\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)={[{@uuid_on}, {@verity_require}]}) 1.710222006s ago: executing program 3 (id=3723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000023c0001800c00028005000d002f0000002c00018014000300fc000000000000000000000000000000140004"], 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x80) 1.681757647s ago: executing program 6 (id=3724): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000140), 0x4) 1.610161739s ago: executing program 4 (id=3725): r0 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000006580)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}]}}}], 0x18}}], 0x1, 0x20000000) 1.52023043s ago: executing program 3 (id=3726): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x100000000000000, 0x0}) 1.496918991s ago: executing program 6 (id=3727): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x10d, 0x70bd2a, 0x25dfdbfd, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0xfffffffffffffe75, 0x2, {0x2, 0x20009, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 1.459388032s ago: executing program 4 (id=3728): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0xb, "0060930000efa4890200"}) 1.284450515s ago: executing program 3 (id=3729): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file1\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'lzo'}}, {@discard_async}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="62747266732ed5"]) 1.218500106s ago: executing program 6 (id=3730): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x2a, {0x2, 0x0, @multicast1=0xe000cc02}}) 1.188597647s ago: executing program 4 (id=3731): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000340)=@fd={0x5, 0xe, 0x4, 0xe000, 0xf, {0x0, 0x2710}, {0x2, 0x0, 0x26, 0xd, 0xe9, 0x8, "34631935"}, 0xbc00, 0x4, {}, 0x4}) 943.721781ms ago: executing program 6 (id=3732): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001}, [@call={0x85, 0x0, 0x0, 0x7d}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 602.657638ms ago: executing program 4 (id=3733): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x8000, 0x100000001, 0x10000, 0x1}, 0x1c) 128.165807ms ago: executing program 0 (id=3734): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 0s ago: executing program 6 (id=3735): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$cgroup_int(r0, 0x0, 0x49) kernel console output (not intermixed with test programs): escriptor of length 0, skipping remainder of the config [ 260.815342][ T27] usb 2-1: config 0 has no interfaces? [ 260.821168][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 260.845562][ T27] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 260.855243][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.863493][ T27] usb 2-1: Product: syz [ 260.867731][ T27] usb 2-1: Manufacturer: syz [ 260.874938][ T27] usb 2-1: SerialNumber: syz [ 260.883970][ T27] r8152-cfgselector 2-1: config 0 descriptor?? [ 261.019278][T10996] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 261.022851][ T8] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 261.049951][ T8] usb 5-1: config 0 has no interface number 0 [ 261.067458][ T8] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 261.078340][ T8] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 261.112400][ T27] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 261.138102][ T8] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 261.148324][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.167227][ T8] usb 5-1: Product: syz [ 261.171617][ T8] usb 5-1: Manufacturer: syz [ 261.176259][ T8] usb 5-1: SerialNumber: syz [ 261.192029][ T8] usb 5-1: config 0 descriptor?? [ 261.202410][T10980] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 261.213471][ T8] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 261.231177][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 261.246717][ T8] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 261.259165][ T1303] usb 2-1: config 0 descriptor?? [ 261.265232][T11000] loop3: detected capacity change from 0 to 256 [ 261.283917][T11000] exfat: Deprecated parameter 'utf8' [ 261.313677][ T8] usb 2-1: USB disconnect, device number 7 [ 261.320451][ T1303] usb 2-1: can't set config #0, error -71 [ 261.358885][T11000] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 261.440834][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.459333][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.469883][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 261.483188][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 261.492978][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.506565][ T9] usb 1-1: config 0 descriptor?? [ 261.546760][ T9] hub 1-1:0.0: USB hub found [ 261.672028][ T8] usb 5-1: USB disconnect, device number 8 [ 261.693426][ T8] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 261.724849][ T8] cyberjack 5-1:0.69: device disconnected [ 261.752863][ T9] hub 1-1:0.0: 14 ports detected [ 261.764117][ T9] hub 1-1:0.0: insufficient power available to use all downstream ports [ 261.775160][T11006] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2250'. [ 261.784602][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2250'. [ 261.795065][T11006] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2250'. [ 261.956718][ T9] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 261.990818][ T9] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 262.055603][ T9] usb 1-1: USB disconnect, device number 12 [ 262.073861][T11014] @: renamed from vlan0 (while UP) [ 263.185778][T11050] IPv6: NLM_F_CREATE should be specified when creating new route [ 264.049516][T11055] loop4: detected capacity change from 0 to 32768 [ 264.121292][T11055] ea_get: invalid extended attribute [ 264.127251][T11055] ffff88805d7ce8f0: 04 00 00 00 .... [ 264.466568][T11087] xt_TPROXY: Can be used only with -p tcp or -p udp [ 264.680611][ T28] audit: type=1326 audit(1757308215.591:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.1.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dee98ebe9 code=0x7ffc0000 [ 264.758843][ T28] audit: type=1326 audit(1757308215.591:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.1.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dee98ebe9 code=0x7ffc0000 [ 264.781530][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.828140][ T28] audit: type=1326 audit(1757308215.601:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.1.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f0dee98ebe9 code=0x7ffc0000 [ 264.850605][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.876173][ T28] audit: type=1326 audit(1757308215.601:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.1.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dee98ebe9 code=0x7ffc0000 [ 264.898635][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.652209][T11130] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 265.974407][T11142] vivid-003: disconnect [ 265.981815][T11141] vivid-003: reconnect [ 265.986748][T11145] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 266.005534][T11145] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 266.554478][T11168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2329'. [ 266.576087][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2329'. [ 266.784922][T11176] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 266.858376][T11180] loop1: detected capacity change from 0 to 256 [ 266.876305][T11180] exfat: Deprecated parameter 'utf8' [ 266.910479][T11180] exfat: Deprecated parameter 'namecase' [ 266.943267][T11180] exfat: Deprecated parameter 'utf8' [ 266.990293][T11180] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 267.052509][T11184] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2337'. [ 267.335580][T11195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2343'. [ 268.103954][ T9] kernel write not supported for file /1203/net/ip6_tables_matches (pid: 9 comm: kworker/0:1) [ 268.382065][T11230] loop3: detected capacity change from 0 to 4096 [ 268.389672][T11230] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 268.516408][T11240] loop4: detected capacity change from 0 to 1024 [ 268.574908][T11230] ntfs: volume version 3.1. [ 269.512638][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 269.599586][T11278] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2384'. [ 269.651040][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 269.659215][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 269.798705][T11285] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 269.825035][T11276] loop1: detected capacity change from 0 to 8192 [ 270.672138][ T48] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 270.696690][ T48] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 271.116164][T11301] loop3: detected capacity change from 0 to 32768 [ 271.137689][T11301] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2394 (11301) [ 271.185076][T11301] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 271.218607][T11301] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 271.255695][T11301] BTRFS info (device loop3): enabling auto defrag [ 271.267721][T11301] BTRFS info (device loop3): doing ref verification [ 271.277821][T11319] loop1: detected capacity change from 0 to 64 [ 271.284253][T11301] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 271.297478][T11301] BTRFS info (device loop3): force lzo compression, level 0 [ 271.360558][T11301] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 271.402979][T11301] BTRFS info (device loop3): trying to use backup root at mount time [ 271.425698][T11301] BTRFS info (device loop3): max_inline at 4096 [ 271.435981][T11301] BTRFS info (device loop3): enabling ssd optimizations [ 271.474704][T11301] BTRFS info (device loop3): using spread ssd allocation scheme [ 271.522831][T11301] BTRFS info (device loop3): using free space tree [ 271.544661][T11301] workqueue: max_active 65524 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 271.620425][T11324] tc_dump_action: action bad kind [ 271.636136][T11301] workqueue: max_active 65524 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 271.700508][T11301] workqueue: max_active 65524 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 271.717967][ T5843] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 271.739823][T11301] workqueue: max_active 65524 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 271.824857][T11301] workqueue: max_active 65524 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 271.890948][T11301] workqueue: max_active 65524 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 271.937284][T11301] workqueue: max_active 65524 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 272.053745][T11342] loop4: detected capacity change from 0 to 4096 [ 272.075223][T11342] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 272.100876][T11342] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 272.109826][T11342] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 272.143209][T11301] BTRFS info (device loop3): auto enabling async discard [ 272.179547][T11342] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 272.270256][T11342] ntfs: volume version 3.1. [ 272.285270][T11351] loop1: detected capacity change from 0 to 2048 [ 272.385117][T11351] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.944927][ T5789] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 273.631403][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 273.838255][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 273.855214][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 273.889818][ T27] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 273.909636][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.918827][ T27] usb 2-1: Product: syz [ 273.924862][ T27] usb 2-1: Manufacturer: syz [ 273.930061][ T27] usb 2-1: SerialNumber: syz [ 273.945484][ T27] usb 2-1: config 0 descriptor?? [ 273.962452][ T27] hub 2-1:0.0: bad descriptor, ignoring hub [ 273.968443][ T27] hub: probe of 2-1:0.0 failed with error -5 [ 274.024195][ T27] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input15 [ 274.351123][ T23] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 274.565435][ T23] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 274.574744][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.583354][ T23] usb 5-1: Product: syz [ 274.589955][ T23] usb 5-1: Manufacturer: syz [ 274.595306][ T23] usb 5-1: SerialNumber: syz [ 274.605016][ T786] usb 2-1: USB disconnect, device number 8 [ 274.615384][ T23] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 274.637575][ T7005] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 275.057025][ T5843] usb 5-1: USB disconnect, device number 9 [ 275.071010][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 275.217641][T11403] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32) [ 275.429446][T11410] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2438'. [ 275.716531][ T7005] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 275.737015][ T7005] ath9k_htc: Failed to initialize the device [ 275.746927][ T5843] usb 5-1: ath9k_htc: USB layer deinitialized [ 276.121225][ T5843] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 276.311818][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 276.320790][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 276.352388][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 276.362054][T11436] loop1: detected capacity change from 0 to 256 [ 276.377442][ T5843] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 276.400652][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.404251][T11436] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 276.409079][ T5843] usb 5-1: Product: syz [ 276.425488][ T5843] usb 5-1: Manufacturer: syz [ 276.430175][ T5843] usb 5-1: SerialNumber: syz [ 276.440074][ T5843] usb 5-1: config 0 descriptor?? [ 276.458888][ T5843] hub 5-1:0.0: bad descriptor, ignoring hub [ 276.470967][ T5843] hub: probe of 5-1:0.0 failed with error -5 [ 276.497195][T11436] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 276.509795][ T5843] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input16 [ 276.527133][T11436] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 276.539725][T11436] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 276.551811][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 276.572889][ T8] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 276.584192][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.593556][ T8] usb 4-1: Product: syz [ 276.597797][ T8] usb 4-1: Manufacturer: syz [ 276.605547][ T8] usb 4-1: SerialNumber: syz [ 276.641218][ T8] r8152-cfgselector 4-1: config 0 descriptor?? [ 276.786103][T11441] loop1: detected capacity change from 0 to 512 [ 276.794732][T11441] EXT4-fs: Ignoring removed nobh option [ 276.883559][T11441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.921807][T11441] ext4 filesystem being mounted at /652/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 276.946403][T11441] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2455: corrupted xattr block 33: bad e_name length [ 276.988003][T11441] EXT4-fs error (device loop1): ext4_get_inode_usage:901: inode #15: comm syz.1.2455: corrupted xattr block 33: bad e_name length [ 277.038361][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.090969][ T8] r8152-cfgselector 4-1: Unknown version 0x0000 [ 277.131052][ T8] r8152-cfgselector 4-1: USB disconnect, device number 12 [ 277.309753][T11452] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 277.995329][T11480] loop3: detected capacity change from 0 to 256 [ 278.077818][T11480] FAT-fs (loop3): Directory bread(block 64) failed [ 278.130856][T11480] FAT-fs (loop3): Directory bread(block 65) failed [ 278.137581][T11480] FAT-fs (loop3): Directory bread(block 66) failed [ 278.165854][T11480] FAT-fs (loop3): Directory bread(block 67) failed [ 278.182363][T11480] FAT-fs (loop3): Directory bread(block 68) failed [ 278.194169][T11480] FAT-fs (loop3): Directory bread(block 69) failed [ 278.206374][T11480] FAT-fs (loop3): Directory bread(block 70) failed [ 278.213424][T11480] FAT-fs (loop3): Directory bread(block 71) failed [ 278.220270][T11480] FAT-fs (loop3): Directory bread(block 72) failed [ 278.241711][T11480] FAT-fs (loop3): Directory bread(block 73) failed [ 278.398473][T11492] program syz.1.2478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.014636][T11513] loop4: detected capacity change from 0 to 256 [ 279.026543][T11515] loop3: detected capacity change from 0 to 256 [ 279.078579][T11513] FAT-fs (loop4): Directory bread(block 64) failed [ 279.103043][T11513] FAT-fs (loop4): Directory bread(block 65) failed [ 279.120024][T11513] FAT-fs (loop4): Directory bread(block 66) failed [ 279.127174][T11513] FAT-fs (loop4): Directory bread(block 67) failed [ 279.149932][T11513] FAT-fs (loop4): Directory bread(block 68) failed [ 279.170989][T11513] FAT-fs (loop4): Directory bread(block 69) failed [ 279.177717][T11513] FAT-fs (loop4): Directory bread(block 70) failed [ 279.217886][T11513] FAT-fs (loop4): Directory bread(block 71) failed [ 279.240991][T11513] FAT-fs (loop4): Directory bread(block 72) failed [ 279.247605][T11513] FAT-fs (loop4): Directory bread(block 73) failed [ 279.307949][T11519] netlink: 'syz.1.2490': attribute type 21 has an invalid length. [ 279.832596][T11537] loop4: detected capacity change from 0 to 1024 [ 279.904067][ T1129] hfsplus: b-tree write err: -5, ino 4 [ 279.951180][ T786] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 280.140882][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 280.153175][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 280.157631][T11545] loop1: detected capacity change from 0 to 1024 [ 280.175804][T11547] netlink: 'syz.4.2504': attribute type 21 has an invalid length. [ 280.191219][ T786] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 280.212067][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.232380][ T786] usb 1-1: Product: syz [ 280.249107][ T786] usb 1-1: Manufacturer: syz [ 280.264096][ T786] usb 1-1: SerialNumber: syz [ 280.305494][ T786] usb 1-1: config 0 descriptor?? [ 280.322704][ T786] hub 1-1:0.0: bad descriptor, ignoring hub [ 280.337985][ T786] hub: probe of 1-1:0.0 failed with error -5 [ 280.347143][ T1129] hfsplus: b-tree write err: -5, ino 4 [ 280.361984][ T786] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 280.373608][T11549] loop4: detected capacity change from 0 to 512 [ 282.795481][ T55] usb 1-1: USB disconnect, device number 13 [ 283.076856][T11566] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2513'. [ 283.212450][ T7005] usb 5-1: USB disconnect, device number 10 [ 283.231750][T11569] netlink: 'syz.3.2514': attribute type 21 has an invalid length. [ 283.247941][T11570] loop1: detected capacity change from 0 to 1024 [ 283.287759][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2517'. [ 283.296478][T11570] EXT4-fs: Ignoring removed bh option [ 283.300172][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2517'. [ 283.339297][T11570] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 283.384081][T11570] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800e118, mo2=0000] [ 283.401615][T11570] System zones: 0-1, 3-12 [ 283.461653][T11570] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #3: block 1: comm syz.1.2516: lblock 1 mapped to illegal pblock 1 (length 1) [ 283.522533][T11570] Quota error (device loop1): write_blk: dquota write failed [ 283.530024][T11570] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 283.551009][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 283.587670][T11570] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.2516: Failed to acquire dquot type 0 [ 283.624781][T11570] EXT4-fs error (device loop1): ext4_free_blocks:6676: comm syz.1.2516: Freeing blocks not in datazone - block = 0, count = 4096 [ 283.646809][T11570] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.2516: Invalid inode bitmap blk 0 in block_group 0 [ 283.660289][ T1303] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 283.682798][T11570] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 283.695433][ T1303] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 283.705560][T11570] EXT4-fs (loop1): 1 orphan inode deleted [ 283.731351][T11570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.744231][ T1303] EXT4-fs error (device loop1): ext4_release_dquot:6976: comm kworker/u4:7: Failed to release dquot type 0 [ 283.862340][T11570] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.2516: Invalid block bitmap block 0 in block_group 0 [ 284.024014][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.040189][ T48] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 284.055385][T11597] loop3: detected capacity change from 0 to 1024 [ 284.061522][ T48] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 284.076783][ T48] EXT4-fs error (device loop1): ext4_release_dquot:6976: comm kworker/u4:3: Failed to release dquot type 0 [ 284.251107][ T5843] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 284.270599][ T12] hfsplus: b-tree write err: -5, ino 4 [ 284.321514][T11602] loop4: detected capacity change from 0 to 1024 [ 284.335950][T11602] EXT4-fs: Ignoring removed bh option [ 284.362649][T11602] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 284.391462][T11604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2530'. [ 284.400643][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2530'. [ 284.440862][T11602] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800e118, mo2=0000] [ 284.456151][T11602] System zones: 0-1, 3-12 [ 284.475880][ T5843] usb 1-1: Using ep0 maxpacket: 16 [ 284.513370][ T5843] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 284.531542][T11602] EXT4-fs error (device loop4): ext4_map_blocks:718: inode #3: block 1: comm syz.4.2538: lblock 1 mapped to illegal pblock 1 (length 1) [ 284.555574][ T5843] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 284.599432][ T5843] usb 1-1: config 0 has no interface number 0 [ 284.627572][T11602] Quota error (device loop4): write_blk: dquota write failed [ 284.649623][ T5843] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 284.664455][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.678728][T11602] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 284.689491][ T5843] usb 1-1: Product: syz [ 284.690926][T11602] EXT4-fs error (device loop4): ext4_acquire_dquot:6940: comm syz.4.2538: Failed to acquire dquot type 0 [ 284.699358][ T5843] usb 1-1: Manufacturer: syz [ 284.710326][ T5843] usb 1-1: SerialNumber: syz [ 284.723594][ T5843] usb 1-1: config 0 descriptor?? [ 284.746047][ T5843] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 284.765249][T11602] EXT4-fs error (device loop4): ext4_free_blocks:6676: comm syz.4.2538: Freeing blocks not in datazone - block = 0, count = 4096 [ 284.786896][ T5843] usb 1-1: No valid video chain found. [ 284.803272][T11602] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.2538: Invalid inode bitmap blk 0 in block_group 0 [ 284.830557][ T12] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 284.863827][ T12] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 284.867678][T11602] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 284.893938][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6976: comm kworker/u4:1: Failed to release dquot type 0 [ 284.903419][T11602] EXT4-fs (loop4): 1 orphan inode deleted [ 284.943128][ T5843] usb 1-1: USB disconnect, device number 14 [ 284.955298][T11619] loop1: detected capacity change from 0 to 1024 [ 284.964949][T11602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.066823][T11602] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm syz.4.2538: Invalid block bitmap block 0 in block_group 0 [ 285.088241][ T1129] hfsplus: b-tree write err: -5, ino 4 [ 285.243350][ T6873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.281305][ T48] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 285.315687][ T48] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 285.338711][ T48] EXT4-fs error (device loop4): ext4_release_dquot:6976: comm kworker/u4:3: Failed to release dquot type 0 [ 285.712790][T11642] loop3: detected capacity change from 0 to 1024 [ 286.319762][T11656] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 286.407257][T11632] loop1: detected capacity change from 0 to 32768 [ 286.474521][T11632] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 286.565837][T11632] XFS (loop1): Ending clean mount [ 286.618230][T11632] XFS (loop1): Quotacheck needed: Please wait. [ 286.762183][T11632] XFS (loop1): Quotacheck: Done. [ 286.870378][T11675] 9pnet_fd: Insufficient options for proto=fd [ 286.994810][ T5795] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 287.080369][T11679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2565'. [ 288.930489][T11728] netlink: 'syz.0.2586': attribute type 1 has an invalid length. [ 288.974364][T11728] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2586'. [ 289.026269][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2595'. [ 290.230579][T11749] loop4: detected capacity change from 0 to 32768 [ 290.360041][T11749] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 290.399870][T11749] (syz.4.2593,11749,0):ocfs2_mknod:502 ERROR: status = -2 [ 290.431479][T11749] (syz.4.2593,11749,1):ocfs2_mkdir:659 ERROR: status = -2 [ 290.499695][ T6873] (syz-executor,6873,0):ocfs2_inode_is_valid_to_delete:852 ERROR: Skipping delete of root inode. [ 290.543913][ T6873] ocfs2: Unmounting device (7,4) on (node local) [ 290.569630][T11762] lo: entered promiscuous mode [ 290.595182][T11762] lo: entered allmulticast mode [ 290.608413][T11763] loop3: detected capacity change from 0 to 1764 [ 290.624197][T11762] tunl0: entered promiscuous mode [ 290.667785][T11762] tunl0: entered allmulticast mode [ 290.702605][T11762] gre0: entered promiscuous mode [ 290.707642][T11762] gre0: entered allmulticast mode [ 290.908375][T11762] gretap0: entered promiscuous mode [ 290.920623][T11762] gretap0: entered allmulticast mode [ 290.946790][T11762] erspan0: entered promiscuous mode [ 290.970203][T11762] erspan0: entered allmulticast mode [ 291.013530][T11762] ip_vti0: entered promiscuous mode [ 291.018818][T11762] ip_vti0: entered allmulticast mode [ 291.073211][T11762] ip6_vti0: entered promiscuous mode [ 291.079498][T11762] ip6_vti0: entered allmulticast mode [ 291.107274][T11762] sit0: entered promiscuous mode [ 291.116209][T11762] sit0: entered allmulticast mode [ 291.127605][T11762] ip6tnl0: entered promiscuous mode [ 291.143132][T11762] ip6tnl0: entered allmulticast mode [ 291.150469][T11762] ip6gre0: entered promiscuous mode [ 291.156208][T11762] ip6gre0: entered allmulticast mode [ 291.162802][T11762] syz_tun: entered promiscuous mode [ 291.168268][T11762] syz_tun: entered allmulticast mode [ 291.175764][T11762] ip6gretap0: entered promiscuous mode [ 291.181627][T11762] ip6gretap0: entered allmulticast mode [ 291.190037][T11762] bridge0: entered promiscuous mode [ 291.220919][T11762] bridge0: entered allmulticast mode [ 291.239404][T11762] vcan0: entered promiscuous mode [ 291.251442][T11762] vcan0: entered allmulticast mode [ 291.271170][T11762] bond0: entered promiscuous mode [ 291.290480][T11762] bond_slave_0: entered promiscuous mode [ 291.304963][T11762] bond_slave_1: entered promiscuous mode [ 291.313068][T11762] bond0: entered allmulticast mode [ 291.318339][T11762] bond_slave_0: entered allmulticast mode [ 291.355829][T11762] bond_slave_1: entered allmulticast mode [ 291.376287][T11762] team0: entered promiscuous mode [ 291.381881][T11762] team_slave_0: entered promiscuous mode [ 291.387845][T11762] team_slave_1: entered promiscuous mode [ 291.394746][T11762] team0: entered allmulticast mode [ 291.402480][T11762] team_slave_0: entered allmulticast mode [ 291.418507][T11762] team_slave_1: entered allmulticast mode [ 291.432207][T11762] dummy0: entered promiscuous mode [ 291.446975][T11762] dummy0: entered allmulticast mode [ 291.462450][T11762] nlmon0: entered promiscuous mode [ 291.478120][T11762] nlmon0: entered allmulticast mode [ 291.489421][T11762] caif0: entered promiscuous mode [ 291.496385][T11762] caif0: entered allmulticast mode [ 291.503606][T11762] net_ratelimit: 334 callbacks suppressed [ 291.503623][T11762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.526195][T11774] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.2606'. [ 291.541143][T11774] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 292.195602][T11810] netlink: 'syz.0.2621': attribute type 10 has an invalid length. [ 292.244068][T11810] team0: Device veth1_macvtap failed to register rx_handler [ 292.364028][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 292.489602][T11820] loop4: detected capacity change from 0 to 128 [ 292.507819][T11822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2630'. [ 292.560827][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 292.574642][ T8] usb 2-1: config 0 has an invalid interface number: 163 but max is 0 [ 292.590779][ T8] usb 2-1: config 0 has no interface number 0 [ 292.602740][ T8] usb 2-1: config 0 interface 163 has no altsetting 0 [ 292.622929][ T8] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=56.cc [ 292.646257][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.665365][ T8] usb 2-1: Product: syz [ 292.669621][ T8] usb 2-1: Manufacturer: syz [ 292.704047][ T8] usb 2-1: SerialNumber: syz [ 292.711401][ T8] usb 2-1: config 0 descriptor?? [ 292.785404][T11829] loop4: detected capacity change from 0 to 256 [ 293.208691][ T8] usb 2-1: USB disconnect, device number 9 [ 293.215642][ T8] f81534a_ctrl 2-1:0.163: failed to set register 0x116: -19 [ 293.232547][ T8] f81534a_ctrl 2-1:0.163: failed to enable ports: -19 [ 293.789793][T11857] dlm: no locking on control device [ 293.881047][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 294.099621][ T8] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 294.113446][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.125174][ T8] usb 4-1: Product: syz [ 294.140287][ T8] usb 4-1: Manufacturer: syz [ 294.146827][ T8] usb 4-1: SerialNumber: syz [ 294.170401][ T8] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 294.209602][ T5843] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 294.619232][T11878] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2656'. [ 294.666339][T11878] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 294.773393][ T8] usb 4-1: USB disconnect, device number 13 [ 295.183654][T11879] loop4: detected capacity change from 0 to 32768 [ 295.317482][ T5843] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 295.351062][ T5843] ath9k_htc: Failed to initialize the device [ 295.360846][ T8] usb 4-1: ath9k_htc: USB layer deinitialized [ 296.189619][T11924] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2679'. [ 296.211496][T11924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2679'. [ 296.230869][T11924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2679'. [ 296.263434][T11925] loop3: detected capacity change from 0 to 4096 [ 296.292552][T11925] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 296.387209][T11925] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 296.574789][ T5789] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 297.255018][T11955] loop4: detected capacity change from 0 to 64 [ 297.950958][T11974] netlink: 'syz.0.2706': attribute type 1 has an invalid length. [ 298.433830][T11992] @: renamed from vlan0 (while UP) [ 298.552205][ T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 298.710886][ T5843] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 298.742843][ T23] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 298.766830][ T23] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 61 [ 298.796573][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.810845][ T23] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 298.840832][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 298.874455][ T23] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 298.889214][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.914647][ T23] usb 5-1: config 0 descriptor?? [ 298.932953][ T23] usb-storage 5-1:0.0: USB Mass Storage device detected [ 298.934108][ T5843] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 298.959977][ T23] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 298.960772][ T5843] usb 2-1: config 0 has no interface number 0 [ 298.988543][ T5843] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 299.023917][ T5843] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 299.072366][ T5843] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 299.101522][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.115041][ T5843] usb 2-1: Product: syz [ 299.119295][ T5843] usb 2-1: Manufacturer: syz [ 299.124490][ T5843] usb 2-1: SerialNumber: syz [ 299.138255][ T5843] usb 2-1: config 0 descriptor?? [ 299.149431][T11994] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 299.161555][ T5843] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 299.183601][ T5843] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 299.206687][ T23] usb 5-1: USB disconnect, device number 11 [ 299.207629][T12022] loop3: detected capacity change from 0 to 256 [ 299.247584][T12022] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 299.269526][T12022] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 299.291436][T12022] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x881c1f2f, utbl_chksum : 0xe619d30d) [ 299.326819][T12022] exFAT-fs (loop3): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 299.347686][T12022] exFAT-fs (loop3): Filesystem has been set read-only [ 299.692833][ T5843] usb 2-1: USB disconnect, device number 10 [ 299.716627][ T5843] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 299.731528][ T5843] cyberjack 2-1:0.69: device disconnected [ 300.190952][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 300.385610][T12061] netlink: 'syz.4.2748': attribute type 21 has an invalid length. [ 300.554088][T12070] loop3: detected capacity change from 0 to 16 [ 300.565750][T12070] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 300.690788][ T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 300.890846][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 300.912778][ T8] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 300.936703][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.963875][ T8] usb 2-1: config 0 descriptor?? [ 300.992356][ T8] as10x_usb: device has been detected [ 300.998547][ T8] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 301.062592][ T8] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 301.096080][ T8] as10x_usb: error during firmware upload part1 [ 301.110408][ T8] Registered device nBox DVB-T Dongle [ 301.138055][T12085] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (13) [ 301.201551][T12087] netlink: 'syz.0.2760': attribute type 2 has an invalid length. [ 301.325578][ T8] usb 2-1: USB disconnect, device number 11 [ 301.380105][ T8] Unregistered device nBox DVB-T Dongle [ 301.410593][ T8] as10x_usb: device has been disconnected [ 301.488697][T12095] loop4: detected capacity change from 0 to 256 [ 301.535675][T12099] netlink: 'syz.0.2766': attribute type 1 has an invalid length. [ 301.544570][T12099] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2766'. [ 301.592132][T12095] FAT-fs (loop4): Directory bread(block 64) failed [ 301.598767][T12095] FAT-fs (loop4): Directory bread(block 65) failed [ 301.625155][T12095] FAT-fs (loop4): Directory bread(block 66) failed [ 301.645133][T12095] FAT-fs (loop4): Directory bread(block 67) failed [ 301.664237][T12095] FAT-fs (loop4): Directory bread(block 68) failed [ 301.666633][T12101] xt_TPROXY: Can be used only with -p tcp or -p udp [ 301.686309][T12095] FAT-fs (loop4): Directory bread(block 69) failed [ 301.695750][T12103] loop3: detected capacity change from 0 to 256 [ 301.702277][T12095] FAT-fs (loop4): Directory bread(block 70) failed [ 301.723336][T12095] FAT-fs (loop4): Directory bread(block 71) failed [ 301.730583][T12095] FAT-fs (loop4): Directory bread(block 72) failed [ 301.739888][T12095] FAT-fs (loop4): Directory bread(block 73) failed [ 301.827212][T12103] FAT-fs (loop3): Directory bread(block 64) failed [ 301.837184][T12103] FAT-fs (loop3): Directory bread(block 65) failed [ 301.849680][T12103] FAT-fs (loop3): Directory bread(block 66) failed [ 301.881026][T12103] FAT-fs (loop3): Directory bread(block 67) failed [ 301.887769][T12103] FAT-fs (loop3): Directory bread(block 68) failed [ 301.934440][T12103] FAT-fs (loop3): Directory bread(block 69) failed [ 301.994501][T12103] FAT-fs (loop3): Directory bread(block 70) failed [ 302.017916][T12103] FAT-fs (loop3): Directory bread(block 71) failed [ 302.030157][T12103] FAT-fs (loop3): Directory bread(block 72) failed [ 302.045840][T12103] FAT-fs (loop3): Directory bread(block 73) failed [ 302.437669][ T28] audit: type=1326 audit(1757308253.361:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.0.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4fd8ebe9 code=0x7ffc0000 [ 302.475638][ T28] audit: type=1326 audit(1757308253.361:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.0.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4fd8ebe9 code=0x7ffc0000 [ 302.551713][ T28] audit: type=1326 audit(1757308253.361:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.0.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f8d4fd8ebe9 code=0x7ffc0000 [ 302.629687][ T28] audit: type=1326 audit(1757308253.361:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.0.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4fd8ebe9 code=0x7ffc0000 [ 302.641068][ T7005] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 302.683038][ T28] audit: type=1326 audit(1757308253.361:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.0.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4fd8ebe9 code=0x7ffc0000 [ 302.872946][ T7005] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.889398][ T7005] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 302.901015][ T7005] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 302.911009][ T7005] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 302.930279][ T7005] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 302.956112][ T7005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.985734][ T7005] usb 5-1: config 0 descriptor?? [ 303.010260][ T7005] gspca_main: spca561-2.14.0 probing abcd:cdee [ 303.216719][ T7005] spca561: probe of 5-1:0.0 failed with error -22 [ 303.236768][ T7005] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 303.257503][ T7005] usb 5-1: MIDIStreaming interface descriptor not found [ 303.382447][ T5790] udevd[5790]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 303.447223][ T7005] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 303.480004][ T7005] usb 5-1: USB disconnect, device number 12 [ 304.156716][T12181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2803'. [ 304.200815][T12181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2803'. [ 304.228720][T12183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2806'. [ 304.561615][T12195] cgroup: none used incorrectly [ 304.804229][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2817'. [ 304.832709][T12205] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2817'. [ 305.028485][T12213] loop1: detected capacity change from 0 to 1024 [ 305.286698][T12224] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2826'. [ 305.294900][ T1129] hfsplus: b-tree write err: -5, ino 4 [ 305.305687][T12224] veth2: entered allmulticast mode [ 305.530521][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2830'. [ 305.574596][T12235] loop4: detected capacity change from 0 to 512 [ 305.596332][T12235] EXT4-fs: Ignoring removed nomblk_io_submit option [ 305.651138][T12235] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 305.680816][T12235] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 305.689100][T12235] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 305.718983][T12238] netlink: 'syz.3.2832': attribute type 2 has an invalid length. [ 305.762619][T12235] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 305.775530][T12235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 305.788563][T12243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2836'. [ 305.809676][T12235] EXT4-fs: Ignoring removed nomblk_io_submit option [ 305.819537][T12235] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 305.828535][T12243] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2836'. [ 305.918427][ T6873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.167579][T12255] netlink: 'syz.3.2842': attribute type 9 has an invalid length. [ 306.197697][T12255] netlink: 'syz.3.2842': attribute type 7 has an invalid length. [ 306.207247][T12255] netlink: 'syz.3.2842': attribute type 8 has an invalid length. [ 306.323141][T12259] loop4: detected capacity change from 0 to 1024 [ 306.727344][T12277] loop3: detected capacity change from 0 to 512 [ 306.765960][T12277] EXT4-fs: Ignoring removed i_version option [ 306.811274][T12277] EXT4-fs: Ignoring removed mblk_io_submit option [ 306.870799][T12277] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.2849: inode #13: comm syz.3.2849: iget: illegal inode # [ 306.940034][T12277] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2849: couldn't read orphan inode 13 (err -117) [ 307.017975][T12277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.079730][T12277] EXT4-fs error (device loop3): ext4_resize_begin:62: comm syz.3.2849: resize_inode disabled but reserved GDT blocks non-zero [ 307.246737][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.437062][T12304] loop3: detected capacity change from 0 to 256 [ 307.473231][T12304] exfat: Deprecated parameter 'utf8' [ 307.520846][T12304] exfat: Deprecated parameter 'namecase' [ 307.526706][T12304] exfat: Deprecated parameter 'utf8' [ 307.574142][T12304] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 307.760873][ T786] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 307.958000][ T786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.976050][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 307.988915][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 308.009484][ T786] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.029288][ T786] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 308.040188][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.062009][ T786] usb 2-1: config 0 descriptor?? [ 308.076408][ T786] gspca_main: spca561-2.14.0 probing abcd:cdee [ 308.282993][ T786] spca561: probe of 2-1:0.0 failed with error -22 [ 308.313858][ T786] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 308.332789][ T786] usb 2-1: MIDIStreaming interface descriptor not found [ 308.414905][T12337] loop4: detected capacity change from 0 to 256 [ 308.432091][T12337] exfat: Deprecated parameter 'utf8' [ 308.458862][T12337] exfat: Deprecated parameter 'namecase' [ 308.470862][T12337] exfat: Deprecated parameter 'utf8' [ 308.499438][T12337] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 308.515883][ T786] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 308.555524][ T786] usb 2-1: USB disconnect, device number 12 [ 308.869910][T12351] loop4: detected capacity change from 0 to 256 [ 308.896496][T12351] exfat: Deprecated parameter 'utf8' [ 308.927738][T12351] exfat: Deprecated parameter 'utf8' [ 308.938824][T12351] exfat: Deprecated parameter 'utf8' [ 308.957720][T12351] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 309.185965][T12361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2890'. [ 309.209342][T12361] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 309.219752][T12361] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 309.221283][T12359] loop1: detected capacity change from 0 to 2048 [ 309.229148][T12361] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 309.244420][T12361] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 309.322507][T12359] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 309.372471][T12363] loop3: detected capacity change from 0 to 1024 [ 309.455700][T12366] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.556316][T12370] loop4: detected capacity change from 0 to 64 [ 309.621686][T12370] syz.4.2895: attempt to access beyond end of device [ 309.621686][T12370] loop4: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 309.647691][T12370] Buffer I/O error on dev loop4, logical block 117440531, async page read [ 309.672169][T12370] syz.4.2895: attempt to access beyond end of device [ 309.672169][T12370] loop4: rw=0, sector=8548515840, nr_sectors = 2 limit=64 [ 309.701417][T12370] Buffer I/O error on dev loop4, logical block 4274257920, async page read [ 309.747307][T12370] syz.4.2895: attempt to access beyond end of device [ 309.747307][T12370] loop4: rw=0, sector=301989888, nr_sectors = 2 limit=64 [ 309.811197][T12370] Buffer I/O error on dev loop4, logical block 150994944, async page read [ 309.832137][T12370] syz.4.2895: attempt to access beyond end of device [ 309.832137][T12370] loop4: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 309.877152][T12370] Buffer I/O error on dev loop4, logical block 117440531, async page read [ 309.900948][ T28] audit: type=1800 audit(1757308260.821:4780): pid=12370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2895" name="file2" dev="loop4" ino=6 res=0 errno=0 [ 310.555390][T12403] loop4: detected capacity change from 0 to 2048 [ 310.619491][T12403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.780719][T12414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2917'. [ 310.792642][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2917'. [ 310.812338][T12414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2917'. [ 310.823205][T12414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2917'. [ 310.846961][ T6873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.091102][T12418] loop4: detected capacity change from 0 to 8192 [ 311.295437][ T28] audit: type=1326 audit(1757308262.221:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12426 comm="syz.1.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dee98ebe9 code=0x7ffc0000 [ 311.371329][ T28] audit: type=1326 audit(1757308262.221:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12426 comm="syz.1.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dee98ebe9 code=0x7ffc0000 [ 311.444048][ T28] audit: type=1326 audit(1757308262.261:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12426 comm="syz.1.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f0dee98ebe9 code=0x7ffc0000 [ 311.466564][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.581356][ T28] audit: type=1326 audit(1757308262.261:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12426 comm="syz.1.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dee98ebe9 code=0x7ffc0000 [ 311.681042][ T28] audit: type=1326 audit(1757308262.261:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12426 comm="syz.1.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dee98ebe9 code=0x7ffc0000 [ 311.981009][ T8] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 312.188471][T12458] loop1: detected capacity change from 0 to 128 [ 312.255119][T12458] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 312.278193][T12456] loop3: detected capacity change from 0 to 4096 [ 312.282103][T12458] hpfs: filesystem error: improperly stopped [ 312.304292][T12456] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 312.321371][T12458] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 312.331324][T12458] hpfs: You really don't want any checks? You are crazy... [ 312.347970][T12456] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 312.374810][T12458] hpfs: hpfs_map_sector(): read error [ 312.377986][T12456] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 312.380279][T12458] hpfs: code page support is disabled [ 312.420423][T12456] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 312.436674][T12458] hpfs: hpfs_map_4sectors(): unaligned read [ 312.446990][ T8] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 312.472275][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 312.491105][T12458] hpfs: hpfs_map_4sectors(): unaligned read [ 312.532817][T12458] hpfs: filesystem error: unable to find root dir [ 312.605529][T12456] ntfs: volume version 3.1. [ 313.420537][T12494] netlink: 'syz.3.2953': attribute type 10 has an invalid length. [ 313.489384][T12494] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 313.554226][ T1303] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 313.589061][ T1303] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 313.743137][T12506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2959'. [ 314.194339][T12526] netlink: 'syz.0.2968': attribute type 7 has an invalid length. [ 314.271072][ T786] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 314.344731][T12532] loop1: detected capacity change from 0 to 8 [ 314.465556][T12532] SQUASHFS error: Unable to read directory block [629:26] [ 314.740564][T12548] loop3: detected capacity change from 0 to 64 [ 315.234005][T12564] No such timeout policy "syz0" [ 315.499579][T12571] loop4: detected capacity change from 0 to 1764 [ 315.668374][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2993'. [ 315.793481][T12580] loop3: detected capacity change from 0 to 256 [ 315.850333][T12580] FAT-fs (loop3): Directory bread(block 64) failed [ 315.859364][T12582] xt_ecn: cannot match TCP bits for non-tcp packets [ 315.865704][T12580] FAT-fs (loop3): Directory bread(block 65) failed [ 315.875039][T12580] FAT-fs (loop3): Directory bread(block 66) failed [ 315.882450][T12580] FAT-fs (loop3): Directory bread(block 67) failed [ 315.889378][T12580] FAT-fs (loop3): Directory bread(block 68) failed [ 315.910814][T12580] FAT-fs (loop3): Directory bread(block 69) failed [ 315.917550][T12580] FAT-fs (loop3): Directory bread(block 70) failed [ 315.940834][T12580] FAT-fs (loop3): Directory bread(block 71) failed [ 315.947588][T12580] FAT-fs (loop3): Directory bread(block 72) failed [ 315.991903][T12580] FAT-fs (loop3): Directory bread(block 73) failed [ 316.508393][ T8] kernel write not supported for file /1518/net/ip6_tables_matches (pid: 8 comm: kworker/0:0) [ 317.151586][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 317.177188][T12629] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3021'. [ 317.230903][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 317.486994][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.495594][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.228527][T12668] loop3: detected capacity change from 0 to 256 [ 318.286221][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 318.286239][ T28] audit: type=1400 audit(1757308269.211:4786): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12669 comm="syz.4.3041" [ 318.349470][T12668] FAT-fs (loop3): Directory bread(block 64) failed [ 318.391602][T12668] FAT-fs (loop3): Directory bread(block 65) failed [ 318.398336][T12668] FAT-fs (loop3): Directory bread(block 66) failed [ 318.420578][T12668] FAT-fs (loop3): Directory bread(block 67) failed [ 318.440905][T12668] FAT-fs (loop3): Directory bread(block 68) failed [ 318.457767][T12668] FAT-fs (loop3): Directory bread(block 69) failed [ 318.482165][T12668] FAT-fs (loop3): Directory bread(block 70) failed [ 318.520812][T12668] FAT-fs (loop3): Directory bread(block 71) failed [ 318.527536][T12668] FAT-fs (loop3): Directory bread(block 72) failed [ 318.555055][T12668] FAT-fs (loop3): Directory bread(block 73) failed [ 318.844810][T12688] loop4: detected capacity change from 0 to 256 [ 318.932594][T12692] netlink: 648 bytes leftover after parsing attributes in process `syz.3.3052'. [ 318.934881][T12688] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 319.571953][T12716] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3059'. [ 319.591379][T12716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3059'. [ 319.624881][T12720] SET target dimension over the limit! [ 319.794109][T12725] netlink: 'syz.4.3062': attribute type 10 has an invalid length. [ 319.823752][T12725] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.834189][T12725] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.844299][T12729] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.3064'. [ 319.854481][T12725] bridge0: left promiscuous mode [ 319.860287][T12725] bridge0: left allmulticast mode [ 319.899631][T12725] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.908347][T12725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.917265][T12725] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.924551][T12725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.001928][T12725] bridge0: entered promiscuous mode [ 320.038119][T12725] bridge0: entered allmulticast mode [ 320.074129][T12725] team0: Port device bridge0 added [ 320.304699][T12744] netlink: 'syz.3.3068': attribute type 12 has an invalid length. [ 320.320835][T12744] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3068'. [ 320.535689][T12754] loop4: detected capacity change from 0 to 512 [ 320.562686][T12754] EXT4-fs: Ignoring removed nobh option [ 320.638781][T12759] netlink: 'syz.0.3076': attribute type 5 has an invalid length. [ 320.652544][T12754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.703819][T12754] ext4 filesystem being mounted at /608/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 320.784794][T12768] loop1: detected capacity change from 0 to 256 [ 320.793471][T12768] exfat: Deprecated parameter 'namecase' [ 320.821077][T12754] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.3074: corrupted xattr block 33: bad e_name length [ 320.844808][T12768] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 320.865731][T12754] EXT4-fs error (device loop4): ext4_get_inode_usage:901: inode #15: comm syz.4.3074: corrupted xattr block 33: bad e_name length [ 321.064085][ T6873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.269144][ T5795] team0: Port device syz_tun removed [ 321.276330][T12779] netlink: 'syz.3.3086': attribute type 16 has an invalid length. [ 321.623519][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.764914][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.802358][ T5843] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 321.945383][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.990891][ T5843] usb 1-1: Using ep0 maxpacket: 16 [ 322.005121][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 322.039931][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 322.087183][ T5843] usb 1-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 322.114842][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.152850][ T5843] usb 1-1: Product: syz [ 322.157098][ T5843] usb 1-1: Manufacturer: syz [ 322.175448][ T5843] usb 1-1: SerialNumber: syz [ 322.183593][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.197641][ T5843] usb 1-1: config 0 descriptor?? [ 322.212338][ T5843] kobil_sct 1-1:0.0: KOBIL USB smart card terminal converter detected [ 322.231931][ T5843] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 322.421697][ T55] usb 1-1: USB disconnect, device number 15 [ 322.451892][ T55] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 322.501450][ T55] kobil_sct 1-1:0.0: device disconnected [ 322.553328][ T5102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 322.568527][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 322.582311][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 322.594638][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 322.609275][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 322.616835][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 322.766593][T12805] loop4: detected capacity change from 0 to 4096 [ 322.836565][T12805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.105941][ T6873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.581633][ T28] audit: type=1400 audit(1757308274.511:4787): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=12831 comm="syz.4.3107" [ 324.004548][T12848] tmpfs: Bad value for 'mpol' [ 324.219223][T12802] chnl_net:caif_netlink_parms(): no params data found [ 324.671159][ T5787] Bluetooth: hci2: command tx timeout [ 324.771241][ T7005] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 324.899995][T12802] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.910975][T12802] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.918244][T12802] bridge_slave_0: entered allmulticast mode [ 324.957834][T12802] bridge_slave_0: entered promiscuous mode [ 324.969313][ T7005] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 324.999089][ T7005] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.030776][ T7005] usb 1-1: Product: syz [ 325.035029][ T7005] usb 1-1: Manufacturer: syz [ 325.067807][T12887] program syz.4.3125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.073435][ T7005] usb 1-1: SerialNumber: syz [ 325.113934][ T7005] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 325.150304][ T786] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 325.240106][T12802] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.260009][T12802] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.290863][T12802] bridge_slave_1: entered allmulticast mode [ 325.303061][T12802] bridge_slave_1: entered promiscuous mode [ 325.588576][T12802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.687027][T12898] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 325.720025][T12802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.762367][ T5817] usb 1-1: USB disconnect, device number 16 [ 326.046326][T12802] team0: Port device team_slave_0 added [ 326.086718][T12802] team0: Port device team_slave_1 added [ 326.274516][T12900] loop3: detected capacity change from 0 to 32768 [ 326.276156][ T786] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 326.300821][ T48] hsr_slave_0: left promiscuous mode [ 326.308146][ T786] ath9k_htc: Failed to initialize the device [ 326.316936][ T48] hsr_slave_1: left promiscuous mode [ 326.333135][ T5817] usb 1-1: ath9k_htc: USB layer deinitialized [ 326.362995][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.370491][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.411205][T12900] ea_get: invalid extended attribute [ 326.425739][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.450795][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.458139][T12900] ffff88805d7c95b0: 04 00 00 00 .... [ 326.479700][ T48] bridge_slave_1: left allmulticast mode [ 326.502004][ T48] bridge_slave_1: left promiscuous mode [ 326.507915][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.567450][ T48] bridge_slave_0: left allmulticast mode [ 326.584501][ T48] bridge_slave_0: left promiscuous mode [ 326.598537][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.722422][ T48] veth1_macvtap: left promiscuous mode [ 326.732260][ T48] veth0_macvtap: left promiscuous mode [ 326.737979][ T48] veth1_vlan: left promiscuous mode [ 326.750861][ T5787] Bluetooth: hci2: command tx timeout [ 326.764123][ T48] veth0_vlan: left promiscuous mode [ 326.778761][T12903] loop4: detected capacity change from 0 to 32768 [ 326.897623][T12903] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 326.936703][ T12] (kworker/u4:1,12,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 326.953527][ T5817] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 327.117396][ T6873] ocfs2: Unmounting device (7,4) on (node local) [ 327.181902][ T5817] usb 1-1: Using ep0 maxpacket: 16 [ 327.254006][ T5817] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 327.280779][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.288908][ T5817] usb 1-1: Product: syz [ 327.296639][ T5817] usb 1-1: Manufacturer: syz [ 327.314217][ T5817] usb 1-1: SerialNumber: syz [ 327.332584][ T5817] r8152-cfgselector 1-1: config 0 descriptor?? [ 327.768155][ T5817] r8152-cfgselector 1-1: Unknown version 0x0000 [ 327.801262][ T5817] r8152-cfgselector 1-1: USB disconnect, device number 17 [ 328.262941][ T48] team_slave_1 (unregistering): left promiscuous mode [ 328.270197][ T48] team_slave_1 (unregistering): left allmulticast mode [ 328.285376][ T48] team0 (unregistering): Port device team_slave_1 removed [ 328.335298][ T48] team_slave_0 (unregistering): left promiscuous mode [ 328.343052][ T48] team_slave_0 (unregistering): left allmulticast mode [ 328.354570][ T48] team0 (unregistering): Port device team_slave_0 removed [ 328.465511][T12931] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3136'. [ 328.522267][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.545271][ T48] bond_slave_1 (unregistering): left promiscuous mode [ 328.552290][ T48] bond_slave_1 (unregistering): left allmulticast mode [ 328.694337][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.712715][T12940] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3140'. [ 328.724696][ T48] bond_slave_0 (unregistering): left promiscuous mode [ 328.746240][ T48] bond_slave_0 (unregistering): left allmulticast mode [ 328.823970][T12944] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.3142'. [ 328.830788][ T5787] Bluetooth: hci2: command tx timeout [ 329.362061][T12946] loop4: detected capacity change from 0 to 32768 [ 329.410370][T12946] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.3144 (12946) [ 329.454617][T12946] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 329.477085][T12946] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 329.497165][T12946] BTRFS info (device loop4): enabling auto defrag [ 329.504195][T12946] BTRFS info (device loop4): doing ref verification [ 329.532666][T12946] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 329.553904][T12946] BTRFS info (device loop4): force lzo compression, level 0 [ 329.572608][T12946] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 329.596095][T12946] BTRFS info (device loop4): trying to use backup root at mount time [ 329.614691][T12946] BTRFS info (device loop4): max_inline at 4096 [ 329.621784][T12946] BTRFS info (device loop4): enabling ssd optimizations [ 329.628785][T12946] BTRFS info (device loop4): using spread ssd allocation scheme [ 329.647439][T12946] BTRFS info (device loop4): using free space tree [ 329.668593][T12946] workqueue: max_active 65524 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 329.691259][T12946] workqueue: max_active 65524 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 329.781043][T12946] workqueue: max_active 65524 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 329.813487][T12946] workqueue: max_active 65524 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 329.834605][T12946] workqueue: max_active 65524 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 329.855027][T12946] workqueue: max_active 65524 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 329.867456][T12946] workqueue: max_active 65524 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 329.920996][T12946] BTRFS info (device loop4): auto enabling async discard [ 329.951278][ T48] bond0 (unregistering): Released all slaves [ 330.086270][ T6873] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 330.120514][T12802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.149711][T12802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.182585][T12802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.239631][T12802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.277515][T12802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.316203][T12802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.416906][T12802] hsr_slave_0: entered promiscuous mode [ 330.434226][T12802] hsr_slave_1: entered promiscuous mode [ 330.451652][T12802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.459321][T12802] Cannot create hsr debugfs directory [ 330.911090][ T5787] Bluetooth: hci2: command tx timeout [ 330.982833][T12802] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 330.996291][T12802] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 331.013429][T12802] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 331.025933][T12802] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 331.143940][T12802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.173531][T12802] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.187766][ T1303] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.194990][ T1303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.213216][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.220862][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.579717][T12802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.010157][T12802] veth0_vlan: entered promiscuous mode [ 332.026176][T12802] veth1_vlan: entered promiscuous mode [ 332.080151][T12802] veth0_macvtap: entered promiscuous mode [ 332.098700][T12802] veth1_macvtap: entered promiscuous mode [ 332.121364][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.132369][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.142930][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.153799][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.163780][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.174355][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.186096][T12802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.193635][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 332.220282][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.232305][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.243789][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.255029][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.264927][T12802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.276470][T12802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.287785][T12802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.299550][T12802] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.308861][T12802] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.318193][T12802] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.326994][T12802] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.441953][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.458961][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.500170][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.510122][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.483191][ T55] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 333.614548][T13048] loop3: detected capacity change from 0 to 512 [ 333.691085][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 333.714480][ T55] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 333.744168][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.780876][ T55] usb 5-1: Product: syz [ 333.798536][ T55] usb 5-1: Manufacturer: syz [ 333.821464][ T55] usb 5-1: SerialNumber: syz [ 333.874992][ T55] r8152-cfgselector 5-1: config 0 descriptor?? [ 333.971290][T13055] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3151'. [ 334.244177][T13064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3157'. [ 334.298721][T13038] loop5: detected capacity change from 0 to 32768 [ 334.337502][ T55] r8152-cfgselector 5-1: Unknown version 0x0000 [ 334.363711][ T55] r8152-cfgselector 5-1: USB disconnect, device number 13 [ 334.401993][T13038] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 334.442769][ T2983] (kworker/u4:8,2983,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 334.638836][T12802] ocfs2: Unmounting device (7,5) on (node local) [ 335.104884][T13084] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (13) [ 335.816234][T13114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3175'. [ 335.839111][T13114] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3175'. [ 336.056183][T13125] loop5: detected capacity change from 0 to 256 [ 336.130515][T13125] FAT-fs (loop5): Directory bread(block 64) failed [ 336.170755][T13125] FAT-fs (loop5): Directory bread(block 65) failed [ 336.177568][T13125] FAT-fs (loop5): Directory bread(block 66) failed [ 336.238577][T13125] FAT-fs (loop5): Directory bread(block 67) failed [ 336.291928][T13125] FAT-fs (loop5): Directory bread(block 68) failed [ 336.298631][T13125] FAT-fs (loop5): Directory bread(block 69) failed [ 336.336197][T13125] FAT-fs (loop5): Directory bread(block 70) failed [ 336.362144][T13125] FAT-fs (loop5): Directory bread(block 71) failed [ 336.379107][T13125] FAT-fs (loop5): Directory bread(block 72) failed [ 336.397672][T13125] FAT-fs (loop5): Directory bread(block 73) failed [ 336.619163][T13145] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.3185'. [ 336.911603][T13152] netlink: 'syz.3.3189': attribute type 10 has an invalid length. [ 336.984058][T13152] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.993348][T13152] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.030453][T13158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3190'. [ 337.041919][T13158] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3190'. [ 337.057065][T13152] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.064673][T13152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.075337][T13152] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.082622][T13152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.103552][T13152] team0: Port device bridge0 added [ 337.494783][T13172] netlink: 'syz.0.3207': attribute type 10 has an invalid length. [ 337.541387][T13172] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.549154][T13172] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.624960][T13172] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.632504][T13172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.643042][T13172] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.650269][T13172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.678217][T13172] team0: Port device bridge0 added [ 337.813790][ T7005] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 338.020927][ T7005] usb 5-1: Using ep0 maxpacket: 16 [ 338.029758][ T7005] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 338.061126][ T7005] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 338.097146][ T7005] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 338.111411][ T7005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.131661][ T7005] usb 5-1: Product: syz [ 338.139950][ T7005] usb 5-1: Manufacturer: syz [ 338.159571][ T7005] usb 5-1: SerialNumber: syz [ 338.181946][ T7005] usb 5-1: config 0 descriptor?? [ 338.254567][ T7005] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 338.288280][ T7005] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 338.463782][T13205] tmpfs: Bad value for 'mpol' [ 338.504064][ T7005] usb 5-1: USB disconnect, device number 14 [ 338.532788][ T7005] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 338.558346][ T7005] kobil_sct 5-1:0.0: device disconnected [ 338.683786][T13212] loop3: detected capacity change from 0 to 4096 [ 338.718288][T13212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.786367][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.191051][ T28] audit: type=1400 audit(1757308290.121:4788): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=13219 comm="syz.0.3223" [ 339.198602][T13223] loop4: detected capacity change from 0 to 256 [ 339.211525][T13216] loop5: detected capacity change from 0 to 4096 [ 339.344820][T13223] FAT-fs (loop4): Directory bread(block 64) failed [ 339.365215][T13223] FAT-fs (loop4): Directory bread(block 65) failed [ 339.385660][T13223] FAT-fs (loop4): Directory bread(block 66) failed [ 339.410882][T13223] FAT-fs (loop4): Directory bread(block 67) failed [ 339.419454][T13223] FAT-fs (loop4): Directory bread(block 68) failed [ 339.433232][T13223] FAT-fs (loop4): Directory bread(block 69) failed [ 339.441539][T13223] FAT-fs (loop4): Directory bread(block 70) failed [ 339.448225][T13223] FAT-fs (loop4): Directory bread(block 71) failed [ 339.503871][T13223] FAT-fs (loop4): Directory bread(block 72) failed [ 339.541967][T13223] FAT-fs (loop4): Directory bread(block 73) failed [ 339.766967][T13235] loop5: detected capacity change from 0 to 256 [ 339.858293][T13235] FAT-fs (loop5): Directory bread(block 64) failed [ 339.865103][T13235] FAT-fs (loop5): Directory bread(block 65) failed [ 339.885860][T13235] FAT-fs (loop5): Directory bread(block 66) failed [ 339.900827][T13235] FAT-fs (loop5): Directory bread(block 67) failed [ 339.910397][T13235] FAT-fs (loop5): Directory bread(block 68) failed [ 339.922797][T13235] FAT-fs (loop5): Directory bread(block 69) failed [ 339.929547][T13235] FAT-fs (loop5): Directory bread(block 70) failed [ 339.938182][T13235] FAT-fs (loop5): Directory bread(block 71) failed [ 339.947660][T13235] FAT-fs (loop5): Directory bread(block 72) failed [ 339.957658][T13235] FAT-fs (loop5): Directory bread(block 73) failed [ 340.014458][T13241] tmpfs: Bad value for 'mpol' [ 340.100961][ T55] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 340.222870][ T28] audit: type=1400 audit(1757308291.151:4789): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=13246 comm="syz.5.3227" [ 340.290877][ T55] usb 4-1: Using ep0 maxpacket: 16 [ 340.310634][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 340.344652][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 340.383594][ T55] usb 4-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 340.400948][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.417778][ T55] usb 4-1: Product: syz [ 340.426280][ T55] usb 4-1: Manufacturer: syz [ 340.440884][ T55] usb 4-1: SerialNumber: syz [ 340.465553][ T55] usb 4-1: config 0 descriptor?? [ 340.503214][ T55] kobil_sct 4-1:0.0: KOBIL USB smart card terminal converter detected [ 340.536608][ T55] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 340.749932][ T55] usb 4-1: USB disconnect, device number 14 [ 340.774562][ T55] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 340.804297][ T55] kobil_sct 4-1:0.0: device disconnected [ 340.979023][T13271] loop5: detected capacity change from 0 to 256 [ 341.013708][T13271] exfat: Deprecated parameter 'utf8' [ 341.057635][T13271] exfat: Deprecated parameter 'utf8' [ 341.156500][T13271] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 341.509635][T13282] loop3: detected capacity change from 0 to 512 [ 341.517139][T13283] netlink: 'syz.0.3246': attribute type 21 has an invalid length. [ 341.569702][T13282] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 341.595840][T13282] System zones: 1-12 [ 341.602854][T13282] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.3245: invalid indirect mapped block 8 (level 2) [ 341.624614][T13282] EXT4-fs (loop3): Remounting filesystem read-only [ 341.666105][T13282] EXT4-fs (loop3): 1 truncate cleaned up [ 341.729691][T13282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.887717][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.020062][T13296] loop4: detected capacity change from 0 to 512 [ 342.029945][T13296] EXT4-fs: Ignoring removed orlov option [ 342.040381][T13296] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 342.087322][T13296] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.3252: corrupted in-inode xattr: e_value size too large [ 342.111284][T13296] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3252: couldn't read orphan inode 15 (err -117) [ 342.156844][T13296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.227695][T13308] loop3: detected capacity change from 0 to 4096 [ 342.426774][ T6873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.453366][T13311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3258'. [ 342.529783][T13311] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 343.675834][T13357] loop3: detected capacity change from 0 to 64 [ 343.738463][T13357] hfs: request for non-existent node -117440513 in B*Tree [ 343.760806][T13357] hfs: request for non-existent node -117440513 in B*Tree [ 343.962384][T13363] netlink: 'syz.4.3279': attribute type 27 has an invalid length. [ 344.370893][T13381] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 344.390860][T13381] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 344.398572][T13381] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 344.439983][T13383] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3287'. [ 344.468099][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3287'. [ 345.063878][T13410] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 345.158940][T13413] vivid-002: disconnect [ 345.168322][T13412] vivid-002: reconnect [ 345.379930][T13423] loop4: detected capacity change from 0 to 256 [ 345.732778][T13435] 9pnet_fd: Insufficient options for proto=fd [ 345.868727][T13439] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 346.762308][ T7005] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 346.857261][T13483] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 346.960274][T13488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3336'. [ 346.970247][T13488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3336'. [ 347.010754][ T7005] usb 6-1: Using ep0 maxpacket: 16 [ 347.022891][ T7005] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 347.031786][ T7005] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 347.039344][ T7005] usb 6-1: config 0 has no interface number 0 [ 347.062891][ T7005] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 347.080764][ T7005] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.088930][ T7005] usb 6-1: Product: syz [ 347.114351][ T7005] usb 6-1: Manufacturer: syz [ 347.119044][ T7005] usb 6-1: SerialNumber: syz [ 347.138434][ T7005] usb 6-1: config 0 descriptor?? [ 347.151952][ T7005] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 347.158436][ T7005] usb 6-1: No valid video chain found. [ 347.158939][T13492] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3338'. [ 347.294124][T13496] loop4: detected capacity change from 0 to 256 [ 347.318381][T13496] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 347.345992][T13496] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 347.393998][T13496] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x881c1f2f, utbl_chksum : 0xe619d30d) [ 347.396751][ T7005] usb 6-1: USB disconnect, device number 2 [ 347.453600][T13496] exFAT-fs (loop4): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 347.493174][T13496] exFAT-fs (loop4): Filesystem has been set read-only [ 348.313820][T13532] loop4: detected capacity change from 0 to 1024 [ 348.329092][T13539] netlink: 'syz.3.3357': attribute type 21 has an invalid length. [ 348.647764][T13548] loop5: detected capacity change from 0 to 16 [ 348.662010][T13548] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 349.091013][ T55] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 349.299603][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 349.351761][ T55] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 349.386018][ T55] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 349.413346][ T55] usb 5-1: config 0 has no interface number 0 [ 349.428377][ T55] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 349.438137][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.451518][ T55] usb 5-1: Product: syz [ 349.455758][ T55] usb 5-1: Manufacturer: syz [ 349.477783][ T55] usb 5-1: SerialNumber: syz [ 349.496385][ T55] usb 5-1: config 0 descriptor?? [ 349.523891][ T55] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 349.530342][ T55] usb 5-1: No valid video chain found. [ 349.769450][ T786] usb 5-1: USB disconnect, device number 15 [ 349.830556][T13590] loop5: detected capacity change from 0 to 256 [ 349.856432][T13590] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 349.856511][T13592] netlink: 'syz.3.3375': attribute type 1 has an invalid length. [ 349.868758][T13590] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 349.888146][T13592] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3375'. [ 349.905815][T13590] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x881c1f2f, utbl_chksum : 0xe619d30d) [ 350.003201][T13590] exFAT-fs (loop5): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 350.017640][T13590] exFAT-fs (loop5): Filesystem has been set read-only [ 350.468183][T13612] netlink: 'syz.0.3380': attribute type 21 has an invalid length. [ 350.832778][T13629] netlink: 'syz.5.3386': attribute type 1 has an invalid length. [ 350.860808][T13629] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3386'. [ 351.196200][T13644] loop3: detected capacity change from 0 to 512 [ 351.252716][T13644] EXT4-fs: Ignoring removed orlov option [ 351.304446][T13644] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 351.394457][T13644] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.3391: corrupted in-inode xattr: e_value size too large [ 351.428448][T13652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3394'. [ 351.443824][T13652] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 351.523004][T13644] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3391: couldn't read orphan inode 15 (err -117) [ 351.592678][T13644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.793428][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.787362][T13707] loop4: detected capacity change from 0 to 512 [ 352.857600][T13707] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 352.868232][T13707] System zones: 1-12 [ 352.875649][T13707] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33261: comm syz.4.3415: invalid block [ 352.961024][T13707] EXT4-fs (loop4): Remounting filesystem read-only [ 352.968038][T13707] EXT4-fs (loop4): 1 truncate cleaned up [ 353.049829][T13707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.075533][T13716] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3417'. [ 353.232696][ T6873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.296105][T13725] cgroup: none used incorrectly [ 353.947118][T13752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3433'. [ 354.051658][T13757] netlink: 'syz.5.3435': attribute type 27 has an invalid length. [ 354.466460][T13775] netlink: 'syz.0.3440': attribute type 2 has an invalid length. [ 354.871026][T13790] netlink: 'syz.0.3448': attribute type 27 has an invalid length. [ 354.920035][T13798] loop5: detected capacity change from 0 to 256 [ 354.936712][T13793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3451'. [ 354.991095][T13793] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3451'. [ 355.155109][T13798] FAT-fs (loop5): Directory bread(block 64) failed [ 355.180965][T13798] FAT-fs (loop5): Directory bread(block 65) failed [ 355.201174][T13798] FAT-fs (loop5): Directory bread(block 66) failed [ 355.207796][T13798] FAT-fs (loop5): Directory bread(block 67) failed [ 355.238598][T13798] FAT-fs (loop5): Directory bread(block 68) failed [ 355.270974][T13798] FAT-fs (loop5): Directory bread(block 69) failed [ 355.277714][T13798] FAT-fs (loop5): Directory bread(block 70) failed [ 355.300606][T13798] FAT-fs (loop5): Directory bread(block 71) failed [ 355.311004][T13798] FAT-fs (loop5): Directory bread(block 72) failed [ 355.317668][T13798] FAT-fs (loop5): Directory bread(block 73) failed [ 355.407943][T13811] netlink: 'syz.4.3454': attribute type 2 has an invalid length. [ 356.158873][T13837] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3463'. [ 356.207426][T13837] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3463'. [ 356.234073][T13841] loop5: detected capacity change from 0 to 512 [ 356.262886][T13841] EXT4-fs: Ignoring removed nomblk_io_submit option [ 356.288472][T13843] loop3: detected capacity change from 0 to 1024 [ 356.326204][T13841] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 356.351584][T13841] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 356.360125][T13841] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 356.370402][T13841] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 356.381508][T13841] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 356.471234][T13841] EXT4-fs: Ignoring removed nomblk_io_submit option [ 356.511341][T13841] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 356.714560][T12802] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.234999][T13880] loop3: detected capacity change from 0 to 8 [ 357.269496][T13880] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 357.300891][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3478'. [ 357.308964][ T6117] udevd[6117]: incorrect cramfs checksum on /dev/loop3 [ 357.334422][T13880] cramfs: Error -5 while decompressing! [ 357.359339][T13880] cramfs: ffffffff96fda308(26)->ffff88807ed41000(4096) [ 357.394892][T13880] cramfs: Error -3 while decompressing! [ 357.400524][T13880] cramfs: ffffffff96fda322(26)->ffff888074b92000(4096) [ 357.418199][ T6117] udevd[6117]: incorrect cramfs checksum on /dev/loop3 [ 357.441569][T13880] cramfs: Error -3 while decompressing! [ 357.469953][T13880] cramfs: ffffffff96fda33c(16)->ffff88805a1da000(4096) [ 357.498245][T13880] cramfs: Error -5 while decompressing! [ 357.536491][T13880] cramfs: ffffffff96fda308(26)->ffff88807ed41000(4096) [ 357.568502][ T28] audit: type=1800 audit(1757308308.481:4790): pid=13880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3477" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 357.688507][T13894] loop5: detected capacity change from 0 to 1024 [ 357.952008][ T1303] hfsplus: b-tree write err: -5, ino 4 [ 358.069966][T13906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3490'. [ 358.152377][T13906] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 358.190846][T13906] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 358.248580][T13906] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 358.293770][T13906] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 359.117630][T13950] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3506'. [ 359.159084][T13950] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 359.209394][T13950] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 359.231856][T13950] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 359.270753][T13950] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 359.624295][T13967] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 360.034420][T13981] loop5: detected capacity change from 0 to 2048 [ 360.109315][T13981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.418484][T12802] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.664251][T14010] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3534'. [ 360.679013][T14010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3534'. [ 360.688819][T14010] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3534'. [ 360.717211][T14010] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3534'. [ 361.374606][T14037] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3549'. [ 361.389209][T14037] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3549'. [ 361.448780][T14040] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 361.656374][T14047] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3562'. [ 361.692521][T14047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3562'. [ 361.914002][T14062] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3567'. [ 361.951093][T14062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3567'. [ 362.060603][T14068] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 362.068569][T14065] loop3: detected capacity change from 0 to 2048 [ 362.124311][T14065] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 362.177641][T14070] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 364.040898][T14142] netlink: 'syz.5.3600': attribute type 7 has an invalid length. [ 364.081511][T14120] loop4: detected capacity change from 0 to 32768 [ 364.184740][T14120] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 364.215955][T14120] OCFS2: ERROR (device loop4): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 263 in extent list [ 364.274527][T14120] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 364.315420][T14120] OCFS2: Returning error to the calling process. [ 364.335803][T14120] (syz.4.3589,14120,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 364.363660][T14120] (syz.4.3589,14120,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 364.396312][T14120] (syz.4.3589,14120,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 364.434015][T14120] (syz.4.3589,14120,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 364.459655][T14120] (syz.4.3589,14120,1):ocfs2_read_virt_blocks:987 ERROR: status = -30 [ 364.507212][T14120] (syz.4.3589,14120,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 364.548707][T14120] (syz.4.3589,14120,1):ocfs2_find_dir_space_el:3505 ERROR: status = -5 [ 364.568947][T14120] (syz.4.3589,14120,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -5 [ 364.585358][T14120] (syz.4.3589,14120,1):ocfs2_mknod:298 ERROR: status = -5 [ 364.598475][T14159] netlink: 'syz.0.3607': attribute type 9 has an invalid length. [ 364.606977][T14120] (syz.4.3589,14120,1):ocfs2_mknod:502 ERROR: status = -5 [ 364.616736][T14159] netlink: 'syz.0.3607': attribute type 7 has an invalid length. [ 364.626819][T14120] (syz.4.3589,14120,1):ocfs2_mkdir:659 ERROR: status = -5 [ 364.638969][T14159] netlink: 'syz.0.3607': attribute type 8 has an invalid length. [ 364.733315][T14163] netlink: 'syz.3.3610': attribute type 7 has an invalid length. [ 364.743334][ T6873] ocfs2: Unmounting device (7,4) on (node local) [ 365.326786][T14183] loop4: detected capacity change from 0 to 256 [ 365.393695][T14185] netlink: 'syz.5.3619': attribute type 9 has an invalid length. [ 365.409068][T14183] FAT-fs (loop4): Directory bread(block 64) failed [ 365.417287][T14185] netlink: 'syz.5.3619': attribute type 7 has an invalid length. [ 365.426404][T14183] FAT-fs (loop4): Directory bread(block 65) failed [ 365.439142][T14185] netlink: 'syz.5.3619': attribute type 8 has an invalid length. [ 365.450876][T14183] FAT-fs (loop4): Directory bread(block 66) failed [ 365.457611][T14183] FAT-fs (loop4): Directory bread(block 67) failed [ 365.473816][T14183] FAT-fs (loop4): Directory bread(block 68) failed [ 365.494125][T14183] FAT-fs (loop4): Directory bread(block 69) failed [ 365.521008][T14183] FAT-fs (loop4): Directory bread(block 70) failed [ 365.528558][T14183] FAT-fs (loop4): Directory bread(block 71) failed [ 365.551109][T14183] FAT-fs (loop4): Directory bread(block 72) failed [ 365.557737][T14183] FAT-fs (loop4): Directory bread(block 73) failed [ 365.846872][T14195] loop5: detected capacity change from 0 to 4096 [ 365.858812][T14195] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 365.898923][T14195] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 365.917528][T14195] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 365.951020][T14201] loop3: detected capacity change from 0 to 8 [ 365.957386][T14195] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 366.047030][T14201] SQUASHFS error: Unable to read directory block [629:26] [ 366.065230][T14195] ntfs: volume version 3.1. [ 366.189525][T14195] ntfs: (device loop5): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 366.227043][T14195] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 366.336322][T14211] __nla_validate_parse: 2 callbacks suppressed [ 366.336341][T14211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3641'. [ 366.496933][T14215] No such timeout policy "syz0" [ 367.094563][T14240] netlink: 648 bytes leftover after parsing attributes in process `syz.4.3646'. [ 367.455510][T14256] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3655'. [ 367.467088][T14256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3655'. [ 367.709851][T14266] Cannot find add_set index 0 as target [ 367.772567][T14270] netlink: 648 bytes leftover after parsing attributes in process `syz.0.3661'. [ 367.915903][T14272] loop5: detected capacity change from 0 to 256 [ 367.957222][T14272] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 368.236551][T14287] loop5: detected capacity change from 0 to 256 [ 368.262374][T14287] exfat: Deprecated parameter 'namecase' [ 368.335611][T14287] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 368.465458][T14292] netlink: 'syz.0.3681': attribute type 16 has an invalid length. [ 368.599095][T14296] netlink: 'syz.3.3672': attribute type 5 has an invalid length. [ 368.855521][T14306] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 369.096501][ T2983] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.127398][ T2983] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 369.273097][ T2983] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.286082][ T2983] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 369.443792][ T2983] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.459134][ T2983] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 369.651521][ T2983] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.676713][ T2983] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 369.698358][T14322] netlink: 'syz.4.3688': attribute type 5 has an invalid length. [ 369.871097][T14328] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 370.242230][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 370.255213][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 370.264564][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 370.280814][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 370.289004][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 370.296658][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 371.005369][T14335] chnl_net:caif_netlink_parms(): no params data found [ 371.175074][T14335] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.182588][T14335] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.189803][T14335] bridge_slave_0: entered allmulticast mode [ 371.198293][T14335] bridge_slave_0: entered promiscuous mode [ 371.209053][T14335] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.218543][T14335] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.226218][T14335] bridge_slave_1: entered allmulticast mode [ 371.235891][T14335] bridge_slave_1: entered promiscuous mode [ 371.315827][T14335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.328595][T14335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.392340][ T2983] hsr_slave_0: left promiscuous mode [ 371.398479][ T2983] hsr_slave_1: left promiscuous mode [ 371.408348][ T2983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.417041][ T2983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.426385][ T2983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.433938][ T2983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.442085][ T2983] bridge_slave_1: left allmulticast mode [ 371.447764][ T2983] bridge_slave_1: left promiscuous mode [ 371.453658][ T2983] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.463480][ T2983] bridge_slave_0: left allmulticast mode [ 371.469188][ T2983] bridge_slave_0: left promiscuous mode [ 371.478442][ T2983] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.513839][ T2983] veth1_macvtap: left promiscuous mode [ 371.519450][ T2983] veth0_macvtap: left promiscuous mode [ 371.525360][ T2983] veth1_vlan: left promiscuous mode [ 371.533876][ T2983] veth0_vlan: left promiscuous mode [ 372.302686][ T2983] team0 (unregistering): Port device team_slave_1 removed [ 372.362127][ T2983] team0 (unregistering): Port device team_slave_0 removed [ 372.421507][ T2983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.432494][ T5791] Bluetooth: hci2: command tx timeout [ 372.485279][ T2983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.134695][ T2983] bond0 (unregistering): Released all slaves [ 373.227358][T14335] team0: Port device team_slave_0 added [ 373.241860][T14335] team0: Port device team_slave_1 added [ 373.298345][T14335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.322392][T14335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.350188][T14335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.370534][T14335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.377880][T14335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.405283][T14335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.502355][T14335] hsr_slave_0: entered promiscuous mode [ 373.509713][T14335] hsr_slave_1: entered promiscuous mode [ 373.517839][T14335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.527648][T14335] Cannot create hsr debugfs directory [ 373.910575][T14335] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 373.929158][T14335] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 373.947642][T14335] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 373.960486][T14335] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 374.099401][T14335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.136270][T14335] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.157820][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.165090][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.201788][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.209284][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.511754][ T5791] Bluetooth: hci2: command tx timeout [ 374.522833][T14335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.933210][T14335] veth0_vlan: entered promiscuous mode [ 374.969574][T14335] veth1_vlan: entered promiscuous mode [ 375.014358][T14335] veth0_macvtap: entered promiscuous mode [ 375.028331][T14335] veth1_macvtap: entered promiscuous mode [ 375.048803][T14335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.066024][T14335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.076640][T14335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.094853][T14335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.105129][T14335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.120324][T14335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.143220][T14335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.163737][T14335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.175798][T14335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.192191][T14335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.205786][T14335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.218382][T14335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.234674][T14335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.252763][T14335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.273974][T14335] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.283955][T14335] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.296886][T14335] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.306862][T14335] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.441869][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.449761][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.513307][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.522380][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.709434][T14429] netlink: 'syz.6.3685': attribute type 12 has an invalid length. [ 375.739275][T14429] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3685'. [ 375.954560][T14435] netlink: 'syz.0.3712': attribute type 11 has an invalid length. [ 375.969855][T14435] netlink: 440 bytes leftover after parsing attributes in process `syz.0.3712'. [ 376.023267][T14439] netlink: 'syz.6.3701': attribute type 5 has an invalid length. [ 376.605137][ T5791] Bluetooth: hci2: command tx timeout [ 377.003922][T14482] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 377.030779][T14482] overlayfs: missing 'lowerdir' [ 377.112832][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 377.340389][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 377.363515][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 377.391080][T14496] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3727'. [ 377.395852][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 377.435237][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 377.458314][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 377.469412][ T9] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 377.494411][ T9] usb 1-1: Manufacturer: syz [ 377.506992][ T9] usb 1-1: config 0 descriptor?? [ 377.541213][T14471] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 377.568015][ T9] smsusb:smsusb_probe: board id=9, interface number 0 [ 377.618815][ T9] smsusb:siano_media_device_register: media controller created [ 377.645279][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.652710][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.660087][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.667456][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.674815][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.683891][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.691477][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.698824][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.706154][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.713430][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.727182][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.734548][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.741880][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.749188][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.756505][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.766676][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.774014][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.781361][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.788706][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.814098][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.821479][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.828820][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.836173][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.881131][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.888506][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.895874][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.903202][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.910538][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.921832][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.929233][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.936598][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.943963][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.951313][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.958659][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.967358][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.974746][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.982118][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.989421][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.996718][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.004357][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.012467][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.019857][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.027210][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.034572][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.042383][ T9] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 378.052612][ T9] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 378.059787][ T9] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 378.067826][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.075170][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.082496][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.089812][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.097223][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.104561][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.114032][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.121471][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.128803][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.136159][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.143508][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.152124][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.159489][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.166823][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.174166][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.181596][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.188936][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.196274][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.203980][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.211350][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.219108][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.226438][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.233859][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.241222][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.248514][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.255774][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.266930][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.274291][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.281704][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.289364][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.296703][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.304125][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.311442][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.318778][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.328524][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.335881][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.343215][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.350549][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.358782][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.366118][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.373439][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.380742][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.388001][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.395288][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.402544][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.409788][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.417688][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.425025][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.432348][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.439669][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.447012][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.454327][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.461626][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.468956][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.476304][ T9] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 378.489022][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.496457][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.503791][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.511120][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.518430][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.533562][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.540948][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.549513][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.556871][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.564196][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.571517][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.578855][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.586687][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.594046][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.601368][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.608676][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.615992][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.623427][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.630730][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.638574][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.645896][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.653261][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.660534][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.668258][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.675524][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.682785][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.693503][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.700850][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.708168][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.715501][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.722840][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.730275][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.737607][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.745480][ T5791] Bluetooth: hci2: command tx timeout [ 378.752073][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.752176][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 378.752257][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.752324][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.752391][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.752466][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.752532][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.752597][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.812956][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.822954][ T9] ------------[ cut here ]------------ [ 378.828491][ T9] ODEBUG: free active (active state 0) object: ffff88807b4fab08 object type: work_struct hint: do_submit_urb+0x0/0x360 [ 378.841367][ T55] ================================================================== [ 378.849477][ T55] BUG: KASAN: slab-use-after-free in __lock_acquire+0xff/0x7c80 [ 378.857158][ T55] Read of size 8 at addr ffff8880634ca098 by task kworker/0:2/55 [ 378.864924][ T55] [ 378.867299][ T55] CPU: 0 PID: 55 Comm: kworker/0:2 Not tainted syzkaller #0 [ 378.874609][ T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.884704][ T55] Workqueue: events do_submit_urb [ 378.889783][ T55] Call Trace: [ 378.893141][ T55] [ 378.896116][ T55] dump_stack_lvl+0x16c/0x230 [ 378.900839][ T55] ? __lock_acquire+0x7c80/0x7c80 [ 378.905897][ T55] ? show_regs_print_info+0x20/0x20 [ 378.911400][ T55] ? load_image+0x3b0/0x3b0 [ 378.915946][ T55] ? __virt_addr_valid+0x469/0x540 [ 378.921100][ T55] print_report+0xac/0x220 [ 378.925587][ T55] ? __lock_acquire+0xff/0x7c80 [ 378.930470][ T55] kasan_report+0x117/0x150 [ 378.932609][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.935084][ T55] ? __lock_acquire+0xff/0x7c80 [ 378.946218][ T55] __lock_acquire+0xff/0x7c80 [ 378.950933][ T55] ? mark_lock+0x94/0x320 [ 378.952471][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.955287][ T55] ? mark_lock+0x94/0x320 [ 378.955314][ T55] ? look_up_lock_class+0x75/0x140 [ 378.971041][ T55] ? verify_lock_unused+0x140/0x140 [ 378.976282][ T55] ? register_lock_class+0xb5/0x890 [ 378.981530][ T55] ? is_dynamic_key+0x260/0x260 [ 378.986422][ T55] ? mark_lock+0x94/0x320 [ 378.990786][ T55] ? __lock_acquire+0x1334/0x7c80 [ 378.995855][ T55] lock_acquire+0x197/0x410 [ 379.000400][ T55] ? smscore_getbuffer+0xa9/0x440 [ 379.005554][ T55] ? read_lock_is_recursive+0x20/0x20 [ 379.010947][ T55] _raw_spin_lock_irqsave+0xa8/0xf0 [ 379.016177][ T55] ? smscore_getbuffer+0xa9/0x440 [ 379.021226][ T55] ? _raw_spin_lock+0x40/0x40 [ 379.025976][ T55] smscore_getbuffer+0xa9/0x440 [ 379.030870][ T55] ? smscore_onresponse+0xf10/0xf10 [ 379.036092][ T55] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 379.042108][ T55] ? read_lock_is_recursive+0x20/0x20 [ 379.047506][ T55] do_submit_urb+0x98/0x360 [ 379.052033][ T55] ? process_scheduled_works+0x957/0x15b0 [ 379.057787][ T55] ? process_scheduled_works+0x957/0x15b0 [ 379.063538][ T55] process_scheduled_works+0xa45/0x15b0 [ 379.069141][ T55] ? assign_work+0x400/0x400 [ 379.073773][ T55] ? assign_work+0x39e/0x400 [ 379.078399][ T55] worker_thread+0xa55/0xfc0 [ 379.083005][ T55] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 379.089005][ T55] ? _raw_spin_unlock+0x40/0x40 [ 379.093874][ T55] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 379.099786][ T55] kthread+0x2fa/0x390 [ 379.103893][ T55] ? pr_cont_work+0x560/0x560 [ 379.108590][ T55] ? kthread_blkcg+0xd0/0xd0 [ 379.113224][ T55] ret_from_fork+0x48/0x80 [ 379.117681][ T55] ? kthread_blkcg+0xd0/0xd0 [ 379.122298][ T55] ret_from_fork_asm+0x11/0x20 [ 379.127085][ T55] [ 379.130107][ T55] [ 379.132434][ T55] Allocated by task 9: [ 379.136511][ T55] kasan_set_track+0x4e/0x70 [ 379.141107][ T55] __kasan_kmalloc+0x8f/0xa0 [ 379.145699][ T55] smscore_register_device+0x63/0x10f0 [ 379.151215][ T55] smsusb_probe+0x1362/0x1da0 [ 379.155994][ T55] usb_probe_interface+0x5a4/0xb00 [ 379.161234][ T55] really_probe+0x25b/0xb40 [ 379.165749][ T55] __driver_probe_device+0x18c/0x330 [ 379.171043][ T55] driver_probe_device+0x4f/0x420 [ 379.176076][ T55] __device_attach_driver+0x2ca/0x520 [ 379.181640][ T55] bus_for_each_drv+0x24b/0x2d0 [ 379.186509][ T55] __device_attach+0x2b5/0x400 [ 379.191281][ T55] bus_probe_device+0x180/0x260 [ 379.196139][ T55] device_add+0x85b/0xc20 [ 379.200481][ T55] usb_set_configuration+0x1a79/0x20c0 [ 379.206109][ T55] usb_generic_driver_probe+0x8d/0x150 [ 379.211582][ T55] usb_probe_device+0x13d/0x280 [ 379.216448][ T55] really_probe+0x25b/0xb40 [ 379.220968][ T55] __driver_probe_device+0x18c/0x330 [ 379.226262][ T55] driver_probe_device+0x4f/0x420 [ 379.231308][ T55] __device_attach_driver+0x2ca/0x520 [ 379.236718][ T55] bus_for_each_drv+0x24b/0x2d0 [ 379.241577][ T55] __device_attach+0x2b5/0x400 [ 379.246345][ T55] bus_probe_device+0x180/0x260 [ 379.251202][ T55] device_add+0x85b/0xc20 [ 379.255640][ T55] usb_new_device+0xa31/0x1630 [ 379.260601][ T55] hub_event+0x2962/0x49c0 [ 379.265040][ T55] process_scheduled_works+0xa45/0x15b0 [ 379.270598][ T55] worker_thread+0xa55/0xfc0 [ 379.275212][ T55] kthread+0x2fa/0x390 [ 379.279291][ T55] ret_from_fork+0x48/0x80 [ 379.283731][ T55] ret_from_fork_asm+0x11/0x20 [ 379.288505][ T55] [ 379.290837][ T55] Freed by task 9: [ 379.294563][ T55] kasan_set_track+0x4e/0x70 [ 379.299166][ T55] kasan_save_free_info+0x2e/0x50 [ 379.304207][ T55] ____kasan_slab_free+0x126/0x1e0 [ 379.309332][ T55] slab_free_freelist_hook+0x130/0x1b0 [ 379.314814][ T55] __kmem_cache_free+0xba/0x1f0 [ 379.319685][ T55] smscore_unregister_device+0x603/0x6e0 [ 379.325331][ T55] smsusb_term_device+0x18f/0x220 [ 379.330375][ T55] smsusb_probe+0x1708/0x1da0 [ 379.335078][ T55] usb_probe_interface+0x5a4/0xb00 [ 379.340376][ T55] really_probe+0x25b/0xb40 [ 379.344892][ T55] __driver_probe_device+0x18c/0x330 [ 379.350182][ T55] driver_probe_device+0x4f/0x420 [ 379.355224][ T55] __device_attach_driver+0x2ca/0x520 [ 379.360605][ T55] bus_for_each_drv+0x24b/0x2d0 [ 379.365490][ T55] __device_attach+0x2b5/0x400 [ 379.370264][ T55] bus_probe_device+0x180/0x260 [ 379.375123][ T55] device_add+0x85b/0xc20 [ 379.379467][ T55] usb_set_configuration+0x1a79/0x20c0 [ 379.384934][ T55] usb_generic_driver_probe+0x8d/0x150 [ 379.390403][ T55] usb_probe_device+0x13d/0x280 [ 379.395276][ T55] really_probe+0x25b/0xb40 [ 379.399787][ T55] __driver_probe_device+0x18c/0x330 [ 379.405177][ T55] driver_probe_device+0x4f/0x420 [ 379.410211][ T55] __device_attach_driver+0x2ca/0x520 [ 379.415588][ T55] bus_for_each_drv+0x24b/0x2d0 [ 379.420445][ T55] __device_attach+0x2b5/0x400 [ 379.425216][ T55] bus_probe_device+0x180/0x260 [ 379.430082][ T55] device_add+0x85b/0xc20 [ 379.434425][ T55] usb_new_device+0xa31/0x1630 [ 379.439230][ T55] hub_event+0x2962/0x49c0 [ 379.443676][ T55] process_scheduled_works+0xa45/0x15b0 [ 379.449246][ T55] worker_thread+0xa55/0xfc0 [ 379.453844][ T55] kthread+0x2fa/0x390 [ 379.457920][ T55] ret_from_fork+0x48/0x80 [ 379.462353][ T55] ret_from_fork_asm+0x11/0x20 [ 379.467140][ T55] [ 379.469471][ T55] The buggy address belongs to the object at ffff8880634ca000 [ 379.469471][ T55] which belongs to the cache kmalloc-2k of size 2048 [ 379.483628][ T55] The buggy address is located 152 bytes inside of [ 379.483628][ T55] freed 2048-byte region [ffff8880634ca000, ffff8880634ca800) [ 379.497540][ T55] [ 379.499881][ T55] The buggy address belongs to the physical page: [ 379.506323][ T55] page:ffffea00018d3200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x634c8 [ 379.516510][ T55] head:ffffea00018d3200 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 379.525460][ T55] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 379.533457][ T55] page_type: 0xffffffff() [ 379.537806][ T55] raw: 00fff00000000840 ffff888017842000 dead000000000122 0000000000000000 [ 379.546406][ T55] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 379.555024][ T55] page dumped because: kasan: bad access detected [ 379.561460][ T55] page_owner tracks the page as allocated [ 379.567186][ T55] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 9, tgid 9 (kworker/0:1), ts 377605056938, free_ts 374577882372 [ 379.589606][ T55] post_alloc_hook+0x1cd/0x210 [ 379.594390][ T55] get_page_from_freelist+0x195c/0x19f0 [ 379.600048][ T55] __alloc_pages+0x1e3/0x460 [ 379.604651][ T55] alloc_slab_page+0x5d/0x170 [ 379.609351][ T55] new_slab+0x87/0x2e0 [ 379.613456][ T55] ___slab_alloc+0xc6d/0x12f0 [ 379.618146][ T55] __kmem_cache_alloc_node+0x1a2/0x260 [ 379.623627][ T55] kmalloc_trace+0x2a/0xe0 [ 379.628141][ T55] __media_device_register+0x58/0x270 [ 379.633611][ T55] smsusb_probe+0x12fb/0x1da0 [ 379.638327][ T55] usb_probe_interface+0x5a4/0xb00 [ 379.643451][ T55] really_probe+0x25b/0xb40 [ 379.647967][ T55] __driver_probe_device+0x18c/0x330 [ 379.653361][ T55] driver_probe_device+0x4f/0x420 [ 379.658409][ T55] __device_attach_driver+0x2ca/0x520 [ 379.663789][ T55] bus_for_each_drv+0x24b/0x2d0 [ 379.668819][ T55] page last free stack trace: [ 379.673504][ T55] free_unref_page_prepare+0x7ce/0x8e0 [ 379.679003][ T55] free_unref_page+0x32/0x2e0 [ 379.683728][ T55] __slab_free+0x35e/0x410 [ 379.688187][ T55] qlist_free_all+0x75/0xe0 [ 379.692731][ T55] kasan_quarantine_reduce+0x143/0x160 [ 379.698221][ T55] __kasan_slab_alloc+0x22/0x80 [ 379.703101][ T55] slab_post_alloc_hook+0x6e/0x4d0 [ 379.708236][ T55] __kmem_cache_alloc_node+0x13e/0x260 [ 379.713713][ T55] __kmalloc+0xa4/0x240 [ 379.717888][ T55] load_elf_binary+0x2cd/0x2700 [ 379.722772][ T55] bprm_execve+0xaeb/0x16f0 [ 379.727306][ T55] kernel_execve+0x8bd/0x9c0 [ 379.731915][ T55] call_usermodehelper_exec_async+0x20b/0x350 [ 379.737996][ T55] ret_from_fork+0x48/0x80 [ 379.742424][ T55] ret_from_fork_asm+0x11/0x20 [ 379.747297][ T55] [ 379.749637][ T55] Memory state around the buggy address: [ 379.755274][ T55] ffff8880634c9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 379.763345][ T55] ffff8880634ca000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 379.771429][ T55] >ffff8880634ca080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 379.779498][ T55] ^ [ 379.784381][ T55] ffff8880634ca100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 379.792455][ T55] ffff8880634ca180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 379.800609][ T55] ================================================================== [ 379.808688][ T55] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 379.815885][ T55] CPU: 0 PID: 55 Comm: kworker/0:2 Not tainted syzkaller #0 [ 379.823174][ T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 379.833337][ T55] Workqueue: events do_submit_urb [ 379.838395][ T55] Call Trace: [ 379.841694][ T55] [ 379.844638][ T55] dump_stack_lvl+0x16c/0x230 [ 379.849419][ T55] ? show_regs_print_info+0x20/0x20 [ 379.854628][ T55] ? load_image+0x3b0/0x3b0 [ 379.859177][ T55] panic+0x2c0/0x710 [ 379.863281][ T55] ? bpf_jit_dump+0xd0/0xd0 [ 379.867817][ T55] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 379.873729][ T55] ? _raw_spin_unlock+0x40/0x40 [ 379.878685][ T55] ? print_memory_metadata+0x314/0x400 [ 379.884170][ T55] ? __lock_acquire+0xff/0x7c80 [ 379.889044][ T55] check_panic_on_warn+0x84/0xa0 [ 379.894016][ T55] ? __lock_acquire+0xff/0x7c80 [ 379.898887][ T55] end_report+0x6f/0x140 [ 379.903144][ T55] kasan_report+0x128/0x150 [ 379.907662][ T55] ? __lock_acquire+0xff/0x7c80 [ 379.912619][ T55] __lock_acquire+0xff/0x7c80 [ 379.917313][ T55] ? mark_lock+0x94/0x320 [ 379.921741][ T55] ? mark_lock+0x94/0x320 [ 379.926234][ T55] ? look_up_lock_class+0x75/0x140 [ 379.931402][ T55] ? verify_lock_unused+0x140/0x140 [ 379.936635][ T55] ? register_lock_class+0xb5/0x890 [ 379.941847][ T55] ? is_dynamic_key+0x260/0x260 [ 379.946735][ T55] ? mark_lock+0x94/0x320 [ 379.951073][ T55] ? __lock_acquire+0x1334/0x7c80 [ 379.956110][ T55] lock_acquire+0x197/0x410 [ 379.960625][ T55] ? smscore_getbuffer+0xa9/0x440 [ 379.965671][ T55] ? read_lock_is_recursive+0x20/0x20 [ 379.971055][ T55] _raw_spin_lock_irqsave+0xa8/0xf0 [ 379.976287][ T55] ? smscore_getbuffer+0xa9/0x440 [ 379.981420][ T55] ? _raw_spin_lock+0x40/0x40 [ 379.986124][ T55] smscore_getbuffer+0xa9/0x440 [ 379.991004][ T55] ? smscore_onresponse+0xf10/0xf10 [ 379.996217][ T55] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 380.002300][ T55] ? read_lock_is_recursive+0x20/0x20 [ 380.007696][ T55] do_submit_urb+0x98/0x360 [ 380.012215][ T55] ? process_scheduled_works+0x957/0x15b0 [ 380.017952][ T55] ? process_scheduled_works+0x957/0x15b0 [ 380.023701][ T55] process_scheduled_works+0xa45/0x15b0 [ 380.029275][ T55] ? assign_work+0x400/0x400 [ 380.033884][ T55] ? assign_work+0x39e/0x400 [ 380.038500][ T55] worker_thread+0xa55/0xfc0 [ 380.043128][ T55] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 380.049058][ T55] ? _raw_spin_unlock+0x40/0x40 [ 380.053948][ T55] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 380.059876][ T55] kthread+0x2fa/0x390 [ 380.063966][ T55] ? pr_cont_work+0x560/0x560 [ 380.068691][ T55] ? kthread_blkcg+0xd0/0xd0 [ 380.073297][ T55] ret_from_fork+0x48/0x80 [ 380.077819][ T55] ? kthread_blkcg+0xd0/0xd0 [ 380.082426][ T55] ret_from_fork_asm+0x11/0x20 [ 380.087213][ T55] [ 380.090554][ T55] Kernel Offset: disabled [ 380.094907][ T55] Rebooting in 86400 seconds..