last executing test programs: 9.25381484s ago: executing program 2 (id=666): mmap(&(0x7f00002bf000/0x4000)=nil, 0x4000, 0x2, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 8.806733125s ago: executing program 2 (id=670): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}}}, 0x32) 8.218737603s ago: executing program 2 (id=674): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) 7.708176299s ago: executing program 2 (id=678): rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, 0x0, 0x0, 0x8) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x9) 7.078141674s ago: executing program 2 (id=683): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000007c0)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@measure}, {@smackfsfloor}, {@appraise_type}]}, 0xfd, 0x573, &(0x7f0000000240)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 5.830270156s ago: executing program 2 (id=690): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty, 0x0, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @dev, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x0, 0x10}}) 3.799208221s ago: executing program 4 (id=700): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0xc04, &(0x7f0000000580), 0x3, 0x45d, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) open_by_handle_at(r0, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 3.599767291s ago: executing program 1 (id=702): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000100)='befs\x00', 0x0, 0x0) 3.214862712s ago: executing program 3 (id=703): syz_io_uring_setup(0x487, &(0x7f0000000240)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000240)={0x0, 0x0}) 3.170266835s ago: executing program 0 (id=704): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000f40)=""/159, 0x9f, 0x1, 0x0, 0x0) 2.806640986s ago: executing program 3 (id=705): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x28, r1, 0x7, 0x0, 0x0, {{0x2}, {@val={0x8, 0x2}, @void, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) 2.640661344s ago: executing program 1 (id=706): unshare(0x2c040600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0x15, &(0x7f0000000740)={r0, 0x58, &(0x7f00000006c0)}, 0x10) 2.640425465s ago: executing program 4 (id=707): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200cd4c1960b89c40ebb373", 0x39}], 0x1}, 0x0) close(r0) 2.58352391s ago: executing program 0 (id=708): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'dac02\x00', [0x4f23, 0x7f, 0x1, 0x0, 0x1, 0x5, 0xc, 0x4, 0xa, 0xfd, 0xfffffffa, 0x1, 0x1, 0x1, 0x6, 0x101, 0xf7fffffe, 0x7f, 0x2, 0x40000001, 0x8c, 0xca9f, 0x0, 0x20001e58, 0xb, 0xe66, 0x3, 0x1008, 0x4085, 0x0, 0xfbfffff8]}) 2.198614764s ago: executing program 1 (id=709): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB="636f6465706167653d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303030342c696f636861727365743d63703837342c003e7edf5f55c9c5daacaf151c376bf5599ae01ac194e7255fd3968db191bdb3dea9ab11d122deeea40b32a13ea32f2a9ff939e60ebcebbc118eb664cdd73b80d4eb6c4b56b8fe0236d453ab8a63e9857ec85fb127bfb8164fb999afc3692735e9e7d84e3c94259406c29e6b57a51b034fbb0c84a194062612c98792142feb5b609fda840123ac3ecb292c40338df923876a026fae369e0ebfa97e4ce6"], 0x1, 0x349, &(0x7f0000000880)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) 2.101043827s ago: executing program 3 (id=710): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x100b0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc}, 0x94) 1.974717097s ago: executing program 0 (id=711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x6, @local, 0x800}, 0x1c) 1.908321494s ago: executing program 4 (id=712): syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="00000800ec02"]) 1.428922873s ago: executing program 1 (id=713): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002a00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r0, &(0x7f0000004a40)={0x130, 0x0, r1, {0x7, 0x4, 0x0, '\x00', {0x10, 0x500, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x4000, '\x00', 0x6, 0x5, 0xffffffffffffff00, 0x2, {0xff, 0xf}, {0x73a, 0x80be}, {0x5, 0x8000}, {0xefd7, 0x2}, 0xffff, 0x79, 0x9, 0x9}}}, 0x130) 1.272311771s ago: executing program 3 (id=714): r0 = socket$inet_icmp(0x2, 0x2, 0x1) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x0, 0x0) 1.272182754s ago: executing program 4 (id=715): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = mq_open(&(0x7f00000001c0)='ba\xa5J_\xe5\xf9|a\x1dv]\x13mave_1\x00\xe0\xb2\xf0\xabT\x87I\xa4\xd4)c\xf2\xe0\xd0\xba\xdb\f\x16n\x96J\x90c\xc5~#\xc9\xfb\xef5\xab\xb9\xe8\xc7\xde\xc2\x80\f\x19L\xdb\xdc\x14\xb4\x86\x1d\xe0\x9b\xe4\"m\'+\xc8\x05\xa4\x1cT`\xdcL\x8f\xf0\xc9\xb7\xc8D\xcdWG\xe6%\xd9', 0x8c2, 0x30, 0x0) mq_getsetattr(r0, 0x0, 0x0) 1.247001143s ago: executing program 0 (id=716): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000550001002ebd70000400000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="00000100e0ffffffffffffff000000000000000208"], 0x38}, 0x1, 0x0, 0x0, 0x90a2c342030985a5}, 0x40) 874.546619ms ago: executing program 1 (id=717): r0 = socket$inet_udp(0x2, 0x2, 0x0) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) 747.208184ms ago: executing program 3 (id=718): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xa2d700ad}]}}}]}, 0x38}}, 0x0) 618.997003ms ago: executing program 4 (id=719): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x2, 0x0, &(0x7f0000000040)=[{0x8, 0x9f2}, {0x4, 0x80}]}) 615.184571ms ago: executing program 0 (id=720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300000071cb000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 227.52034ms ago: executing program 1 (id=721): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000001a40)=[{{&(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}}, {{&(0x7f00000003c0)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2800000000000000000000000700000001441708", @ANYRES64=r0], 0x28}}], 0x2, 0x810) 215.214563ms ago: executing program 3 (id=722): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) 137.102823ms ago: executing program 4 (id=723): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d0001000060020904001005030001000921000036012205000905810300000c00070905", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 0 (id=724): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. [ 154.635807][ T5759] cgroup: Unknown subsys name 'net' [ 154.763959][ T5759] cgroup: Unknown subsys name 'cpuset' [ 154.778464][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 160.191338][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 165.427383][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.437036][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.445905][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.464148][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.476975][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.498419][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.499623][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.513836][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.519834][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.521726][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.530041][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.552274][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.561780][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.574766][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.583987][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.617730][ T5071] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.642882][ T5071] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.653576][ T5071] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.687384][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.698374][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.719332][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.739590][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.753968][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.779899][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.790873][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.058483][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 167.189198][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 167.266216][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 167.435562][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 167.530894][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 167.622703][ T5779] Bluetooth: hci2: command tx timeout [ 167.627320][ T5787] Bluetooth: hci1: command tx timeout [ 167.628254][ T5779] Bluetooth: hci0: command tx timeout [ 167.783214][ T5779] Bluetooth: hci3: command tx timeout [ 167.865028][ T5779] Bluetooth: hci4: command tx timeout [ 167.904555][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.922720][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.930315][ T5777] bridge_slave_0: entered allmulticast mode [ 168.001316][ T5777] bridge_slave_0: entered promiscuous mode [ 168.039312][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.055075][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.072664][ T5777] bridge_slave_1: entered allmulticast mode [ 168.084019][ T5777] bridge_slave_1: entered promiscuous mode [ 168.345960][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.353830][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.361248][ T5780] bridge_slave_0: entered allmulticast mode [ 168.370200][ T5780] bridge_slave_0: entered promiscuous mode [ 168.389454][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.399069][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.406905][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.414593][ T5785] bridge_slave_0: entered allmulticast mode [ 168.423484][ T5785] bridge_slave_0: entered promiscuous mode [ 168.479731][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.487635][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.495435][ T5780] bridge_slave_1: entered allmulticast mode [ 168.504182][ T5780] bridge_slave_1: entered promiscuous mode [ 168.520847][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.531011][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.539366][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.547023][ T5785] bridge_slave_1: entered allmulticast mode [ 168.555201][ T5785] bridge_slave_1: entered promiscuous mode [ 168.564601][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.572471][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.579873][ T5792] bridge_slave_0: entered allmulticast mode [ 168.588133][ T5792] bridge_slave_0: entered promiscuous mode [ 168.680473][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.688252][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.695801][ T5792] bridge_slave_1: entered allmulticast mode [ 168.704010][ T5792] bridge_slave_1: entered promiscuous mode [ 168.714060][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.721473][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.729440][ T5789] bridge_slave_0: entered allmulticast mode [ 168.737764][ T5789] bridge_slave_0: entered promiscuous mode [ 168.838733][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.846442][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.854096][ T5789] bridge_slave_1: entered allmulticast mode [ 168.862447][ T5789] bridge_slave_1: entered promiscuous mode [ 168.878842][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.895420][ T5777] team0: Port device team_slave_0 added [ 168.909040][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.975059][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.991491][ T5777] team0: Port device team_slave_1 added [ 169.004633][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.022981][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.041590][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.217362][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.327423][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.344322][ T5780] team0: Port device team_slave_0 added [ 169.352612][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.359689][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.386111][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.405228][ T5785] team0: Port device team_slave_0 added [ 169.417884][ T5792] team0: Port device team_slave_0 added [ 169.452696][ T5780] team0: Port device team_slave_1 added [ 169.460508][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.467736][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.493962][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.513228][ T5785] team0: Port device team_slave_1 added [ 169.525007][ T5792] team0: Port device team_slave_1 added [ 169.641325][ T5789] team0: Port device team_slave_0 added [ 169.673218][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.680319][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.706856][ T5779] Bluetooth: hci1: command tx timeout [ 169.706917][ T5787] Bluetooth: hci2: command tx timeout [ 169.708876][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.712641][ T5779] Bluetooth: hci0: command tx timeout [ 169.777136][ T5789] team0: Port device team_slave_1 added [ 169.811450][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.818561][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.844663][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.858188][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.865408][ T5779] Bluetooth: hci3: command tx timeout [ 169.865534][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.897215][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.911167][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.918501][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.942127][ T5779] Bluetooth: hci4: command tx timeout [ 169.946283][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.024043][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.031153][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.057575][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.087912][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.095047][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.121465][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.157220][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.164401][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.190744][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.207355][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.214512][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.240695][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.300202][ T5777] hsr_slave_0: entered promiscuous mode [ 170.308843][ T5777] hsr_slave_1: entered promiscuous mode [ 170.408310][ T5780] hsr_slave_0: entered promiscuous mode [ 170.416841][ T5780] hsr_slave_1: entered promiscuous mode [ 170.424809][ T5780] debugfs: 'hsr0' already exists in 'hsr' [ 170.430637][ T5780] Cannot create hsr debugfs directory [ 170.686850][ T5785] hsr_slave_0: entered promiscuous mode [ 170.695354][ T5785] hsr_slave_1: entered promiscuous mode [ 170.703198][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 170.709047][ T5785] Cannot create hsr debugfs directory [ 170.729203][ T5789] hsr_slave_0: entered promiscuous mode [ 170.737587][ T5789] hsr_slave_1: entered promiscuous mode [ 170.745426][ T5789] debugfs: 'hsr0' already exists in 'hsr' [ 170.751259][ T5789] Cannot create hsr debugfs directory [ 170.770923][ T5792] hsr_slave_0: entered promiscuous mode [ 170.779206][ T5792] hsr_slave_1: entered promiscuous mode [ 170.787304][ T5792] debugfs: 'hsr0' already exists in 'hsr' [ 170.793315][ T5792] Cannot create hsr debugfs directory [ 171.782186][ T5779] Bluetooth: hci0: command tx timeout [ 171.782310][ T49] Bluetooth: hci2: command tx timeout [ 171.793756][ T5787] Bluetooth: hci1: command tx timeout [ 171.907307][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 171.942193][ T5787] Bluetooth: hci3: command tx timeout [ 171.952114][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 171.980663][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 172.011691][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 172.023387][ T5787] Bluetooth: hci4: command tx timeout [ 172.076251][ T5780] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.116204][ T5780] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.139977][ T5780] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.177551][ T5780] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.351062][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 172.393767][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 172.416390][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 172.464407][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 172.661241][ T5792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.680853][ T5792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.707796][ T5792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.753368][ T5792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 172.984486][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.008762][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.054032][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.079874][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.216355][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.298024][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.459808][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.508041][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.515582][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.538374][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.612013][ T3452] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.619371][ T3452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.677507][ T3452] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.684945][ T3452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.700438][ T3452] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.707851][ T3452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.862607][ T49] Bluetooth: hci0: command tx timeout [ 173.864631][ T5779] Bluetooth: hci2: command tx timeout [ 173.868221][ T5787] Bluetooth: hci1: command tx timeout [ 173.979774][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.018131][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.034158][ T5787] Bluetooth: hci3: command tx timeout [ 174.113173][ T5787] Bluetooth: hci4: command tx timeout [ 174.131829][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.174853][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.297457][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.305032][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.320904][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.328351][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.383546][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.390983][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.443957][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.474768][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.482220][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.679241][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.840006][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.847569][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.933636][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.941092][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.272636][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.442206][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.487864][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.035575][ T5777] veth0_vlan: entered promiscuous mode [ 176.180485][ T5777] veth1_vlan: entered promiscuous mode [ 176.315389][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.610278][ T5777] veth0_macvtap: entered promiscuous mode [ 176.688911][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.729045][ T5777] veth1_macvtap: entered promiscuous mode [ 177.017143][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.075539][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.089668][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.154067][ T5792] veth0_vlan: entered promiscuous mode [ 177.259247][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.268773][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.296337][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.313230][ T5785] veth0_vlan: entered promiscuous mode [ 177.320150][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.334596][ T5792] veth1_vlan: entered promiscuous mode [ 177.496577][ T5780] veth0_vlan: entered promiscuous mode [ 177.530981][ T5785] veth1_vlan: entered promiscuous mode [ 177.679529][ T5780] veth1_vlan: entered promiscuous mode [ 177.725412][ T5789] veth0_vlan: entered promiscuous mode [ 177.840559][ T5792] veth0_macvtap: entered promiscuous mode [ 177.873086][ T5792] veth1_macvtap: entered promiscuous mode [ 177.908712][ T5789] veth1_vlan: entered promiscuous mode [ 178.066933][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.111850][ T5785] veth0_macvtap: entered promiscuous mode [ 178.161841][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.220147][ T5785] veth1_macvtap: entered promiscuous mode [ 178.283986][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.298619][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.321401][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.330812][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.467941][ T5789] veth0_macvtap: entered promiscuous mode [ 178.524681][ T5780] veth0_macvtap: entered promiscuous mode [ 178.619153][ T5789] veth1_macvtap: entered promiscuous mode [ 178.646762][ T5780] veth1_macvtap: entered promiscuous mode [ 178.686128][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.769296][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.888484][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.905047][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.954723][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.972910][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.000859][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.056390][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.092412][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.165119][ T53] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.187035][ T53] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.295060][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.368543][ T53] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.402192][ T53] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.446873][ T53] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.558910][ T53] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.606560][ T53] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.652615][ T53] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.482307][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.490319][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.787616][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.812297][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.168622][ T5777] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 183.960825][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.984483][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.249173][ T3452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.282024][ T3452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.592350][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.623599][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.882457][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.943056][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.239203][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.289108][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.508972][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.570342][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.769603][ T5983] netlink: 11 bytes leftover after parsing attributes in process `syz.2.12'. [ 185.830597][ T5979] bond1: entered promiscuous mode [ 185.859196][ T5979] bond1: entered allmulticast mode [ 185.893745][ T5979] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.247999][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.277337][ T5986] netlink: 260 bytes leftover after parsing attributes in process `syz.3.13'. [ 186.285159][ T5988] loop2: detected capacity change from 0 to 64 [ 186.312447][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.373719][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.393123][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.130787][ T5994] loop3: detected capacity change from 0 to 256 [ 187.636210][ T5994] FAT-fs (loop3): Directory bread(block 64) failed [ 187.663863][ T5994] FAT-fs (loop3): Directory bread(block 65) failed [ 187.670738][ T5994] FAT-fs (loop3): Directory bread(block 66) failed [ 187.710348][ T5994] FAT-fs (loop3): Directory bread(block 67) failed [ 187.728069][ T5994] FAT-fs (loop3): Directory bread(block 68) failed [ 187.748439][ T5994] FAT-fs (loop3): Directory bread(block 69) failed [ 187.800729][ T5994] FAT-fs (loop3): Directory bread(block 70) failed [ 187.842187][ T5994] FAT-fs (loop3): Directory bread(block 71) failed [ 187.872569][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 187.882459][ T5994] FAT-fs (loop3): Directory bread(block 72) failed [ 187.889163][ T5994] FAT-fs (loop3): Directory bread(block 73) failed [ 187.924118][ T6006] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 188.052603][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 188.092246][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 188.156216][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 188.235423][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 188.324419][ T9] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 188.374076][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.452157][ T9] usb 3-1: Product: syz [ 188.456528][ T9] usb 3-1: Manufacturer: syz [ 188.461284][ T9] usb 3-1: SerialNumber: syz [ 188.515170][ T9] usb 3-1: config 0 descriptor?? [ 188.589005][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 188.894965][ T5833] usb 3-1: USB disconnect, device number 2 [ 188.895140][ C0] xpad 3-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 189.010526][ T6014] loop1: detected capacity change from 0 to 128 [ 189.059983][ T6014] ======================================================= [ 189.059983][ T6014] WARNING: The mand mount option has been deprecated and [ 189.059983][ T6014] and is ignored by this kernel. Remove the mand [ 189.059983][ T6014] option from the mount to silence this warning. [ 189.059983][ T6014] ======================================================= [ 189.254612][ T6014] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 189.332467][ T6014] hpfs: filesystem error: improperly stopped [ 189.338689][ T6014] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 189.427578][ T6014] hpfs: You really don't want any checks? You are crazy... [ 189.447244][ T6014] hpfs: hpfs_map_sector(): read error [ 189.461750][ T6014] hpfs: code page support is disabled [ 189.502485][ T6014] hpfs: hpfs_map_4sectors(): unaligned read [ 189.508760][ T6014] hpfs: hpfs_map_4sectors(): unaligned read [ 189.560339][ T6014] hpfs: filesystem error: unable to find root dir [ 190.803803][ T6030] loop4: detected capacity change from 0 to 512 [ 191.024060][ T6030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.046872][ T6032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.102791][ T6030] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.530552][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.600345][ T6043] netlink: 'syz.0.36': attribute type 1 has an invalid length. [ 191.632459][ T6043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.36'. [ 191.710111][ T6045] hsr0: entered promiscuous mode [ 192.516724][ T6059] loop3: detected capacity change from 0 to 8 [ 192.534943][ T6058] process 'syz.4.44' launched '/dev/fd/3' with NULL argv: empty string added [ 192.683810][ T6059] SQUASHFS error: zlib decompression failed, data probably corrupt [ 192.714276][ T6059] SQUASHFS error: Failed to read block 0x4de: -5 [ 192.721370][ T6059] SQUASHFS error: zlib decompression failed, data probably corrupt [ 192.776196][ T6059] SQUASHFS error: Failed to read block 0x4df: -5 [ 192.794507][ T6059] SQUASHFS error: zlib decompression failed, data probably corrupt [ 192.820109][ T6062] loop0: detected capacity change from 0 to 1024 [ 192.822814][ T6059] SQUASHFS error: Failed to read block 0x4e0: -5 [ 192.863545][ T6059] SQUASHFS error: zlib decompression failed, data probably corrupt [ 192.922407][ T6059] SQUASHFS error: Failed to read block 0x4de: -5 [ 192.970700][ T29] audit: type=1800 audit(1775185292.347:2): pid=6059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.43" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 193.398568][ T57] hfsplus: b-tree write err: -5, ino 25 [ 193.437405][ T57] hfsplus: b-tree write err: -5, ino 4 [ 193.472409][ T57] hfsplus: b-tree write err: -5, ino 2 [ 194.874934][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 195.450112][ T6103] netlink: 28 bytes leftover after parsing attributes in process `syz.4.64'. [ 195.782354][ T5833] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 195.867813][ T6113] loop4: detected capacity change from 0 to 64 [ 195.982456][ T6113] syz.4.69: attempt to access beyond end of device [ 195.982456][ T6113] loop4: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 196.005438][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.031210][ T6113] Buffer I/O error on dev loop4, logical block 512, async page read [ 196.062091][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.082875][ T6113] syz.4.69: attempt to access beyond end of device [ 196.082875][ T6113] loop4: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 196.093929][ T5833] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 196.165497][ T5833] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.182468][ T6113] Buffer I/O error on dev loop4, logical block 56576, async page read [ 196.209026][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.312927][ T5833] usb 3-1: config 0 descriptor?? [ 196.419292][ T6119] loop0: detected capacity change from 0 to 256 [ 196.607944][ T6119] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 196.776640][ T5833] plantronics 0003:047F:FFFF.0001: unbalanced delimiter at end of report description [ 196.884119][ T5833] plantronics 0003:047F:FFFF.0001: parse failed [ 196.947049][ T5833] plantronics 0003:047F:FFFF.0001: probe with driver plantronics failed with error -22 [ 197.082539][ T5833] usb 3-1: USB disconnect, device number 3 [ 197.648326][ T6133] loop4: detected capacity change from 0 to 64 [ 198.842913][ T5833] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 199.028272][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.067489][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.109068][ T5833] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 199.166320][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.245769][ T5833] usb 1-1: config 0 descriptor?? [ 199.770246][ T5833] hkems 0003:2006:0118.0002: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.0-1/input0 [ 199.802632][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 199.832067][ T5833] hkems 0003:2006:0118.0002: no inputs found [ 199.875310][ T5833] hkems 0003:2006:0118.0002: force feedback init failed [ 199.994849][ T5833] usb 1-1: USB disconnect, device number 2 [ 200.009566][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 200.054154][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.092875][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.124820][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 200.216549][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 200.261057][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.304928][ T9] usb 4-1: config 0 descriptor?? [ 200.567229][ T6167] fido_id[6167]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 200.795510][ T6177] loop4: detected capacity change from 0 to 128 [ 200.813379][ T9] microsoft 0003:045E:07DA.0003: unbalanced collection at end of report description [ 200.863339][ T9] microsoft 0003:045E:07DA.0003: parse failed [ 200.881030][ T9] microsoft 0003:045E:07DA.0003: probe with driver microsoft failed with error -22 [ 200.927630][ T6177] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 200.999452][ T9] usb 4-1: USB disconnect, device number 2 [ 201.032278][ T6177] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.110619][ T6177] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 201.145645][ T6182] netlink: 20 bytes leftover after parsing attributes in process `syz.0.101'. [ 201.340655][ T5780] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.693634][ T6190] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 201.706651][ T6191] capability: warning: `syz.4.103' uses 32-bit capabilities (legacy support in use) [ 202.040275][ T6194] xt_hashlimit: size too large, truncated to 1048576 [ 202.121212][ T6187] loop0: detected capacity change from 0 to 4096 [ 202.155031][ T6187] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 202.202715][ T6187] ntfs3(loop0): ino=3, mi_enum_attr [ 202.209175][ T6187] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 202.400687][ T6199] loop2: detected capacity change from 0 to 256 [ 202.450131][ T6199] exfat: Deprecated parameter 'namecase' [ 202.476952][ T6187] ntfs3(loop0): volume is dirty and "force" flag is not set! [ 202.592315][ T6187] exFAT-fs (loop0): invalid fs_name [ 202.597688][ T6187] exFAT-fs (loop0): failed to read boot sector [ 202.643364][ T6199] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 202.673289][ T6187] exFAT-fs (loop0): failed to recognize exfat type [ 202.770798][ T6204] futex_wake_op: syz.1.110 tries to shift op by 144; fix this program [ 203.293626][ T6207] loop4: detected capacity change from 0 to 256 [ 203.439313][ T6207] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 203.925825][ T6210] loop0: detected capacity change from 0 to 4096 [ 203.975037][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.982244][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.112331][ T6215] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.332736][ T6221] tipc: Started in network mode [ 204.337889][ T6221] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 204.404591][ T6221] tipc: Enabled bearer , priority 10 [ 205.522477][ T9] tipc: Node number set to 4269801488 [ 205.529090][ T6235] Bluetooth: MGMT ver 1.23 [ 205.752226][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 205.933445][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 205.964269][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.983468][ T9] usb 3-1: config 0 has no interface number 0 [ 205.989767][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.032022][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.070957][ T9] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 206.102632][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.154420][ T9] usb 3-1: config 0 descriptor?? [ 206.570870][ T6248] loop1: detected capacity change from 0 to 128 [ 206.712873][ T6248] syz.1.131: attempt to access beyond end of device [ 206.712873][ T6248] loop1: rw=8390659, sector=104, nr_sectors = 25 limit=128 [ 206.872456][ T9] uclogic 0003:28BD:0071.0004: failed retrieving string descriptor #100: -71 [ 206.881577][ T9] uclogic 0003:28BD:0071.0004: failed retrieving pen parameters: -71 [ 206.970258][ T9] uclogic 0003:28BD:0071.0004: pen probing failed: -71 [ 207.011171][ T9] uclogic 0003:28BD:0071.0004: failed probing parameters: -71 [ 207.042754][ T9] uclogic 0003:28BD:0071.0004: probe with driver uclogic failed with error -71 [ 207.086213][ T9] usb 3-1: USB disconnect, device number 4 [ 208.246473][ T6263] loop1: detected capacity change from 0 to 2048 [ 208.346128][ T6263] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.793905][ T29] audit: type=1326 audit(1775185309.207:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.3.151" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4775f9c819 code=0x0 [ 209.890683][ T6284] loop2: detected capacity change from 0 to 4096 [ 210.098020][ T6295] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.109822][ T6284] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 210.197615][ T6284] NILFS (loop2): mounting fs with errors [ 210.267971][ T6299] loop4: detected capacity change from 0 to 1024 [ 210.523795][ T6301] netlink: 'syz.0.154': attribute type 3 has an invalid length. [ 210.571331][ T6301] netlink: 'syz.0.154': attribute type 3 has an invalid length. [ 210.605429][ T6301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.154'. [ 212.252899][ T6326] loop4: detected capacity change from 0 to 64 [ 213.117004][ T6341] loop1: detected capacity change from 0 to 512 [ 213.174623][ T6341] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.324759][ T6341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.338046][ T6341] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.489455][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.682198][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 213.892035][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 213.920790][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.959188][ T9] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 214.001484][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.044371][ T9] usb 3-1: config 0 descriptor?? [ 214.349737][ T6360] bridge0: entered promiscuous mode [ 214.537021][ T9] bigben 0003:146B:0902.0005: unexpected rdesc, please submit for review [ 214.573574][ T9] bigben 0003:146B:0902.0005: unknown main item tag 0x0 [ 214.590339][ T6362] loop3: detected capacity change from 0 to 512 [ 214.605611][ T9] bigben 0003:146B:0902.0005: unknown main item tag 0x0 [ 214.640835][ T9] bigben 0003:146B:0902.0005: unknown main item tag 0x0 [ 214.653753][ T6362] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 214.662220][ T9] bigben 0003:146B:0902.0005: unknown main item tag 0x0 [ 214.704203][ T9] bigben 0003:146B:0902.0005: item fetching failed at offset 4/5 [ 214.734130][ T6362] EXT4-fs (loop3): orphan cleanup on readonly fs [ 214.760263][ T9] bigben 0003:146B:0902.0005: parse failed [ 214.817802][ T6362] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.182: Block bitmap for bg 0 marked uninitialized [ 214.854162][ T9] bigben 0003:146B:0902.0005: probe with driver bigben failed with error -22 [ 214.958484][ T6362] loop3: lost filesystem error report for type 5 error -117 [ 214.961990][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 214.976109][ C0] EXT4-fs (loop3): initial error at time 1775185314: ext4_read_block_bitmap_nowait:517 [ 214.986129][ C0] EXT4-fs (loop3): last error at time 1775185314: ext4_read_block_bitmap_nowait:517 [ 214.996453][ T6362] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 215.032701][ T9] usb 3-1: USB disconnect, device number 5 [ 215.048954][ T6362] loop3: lost filesystem error report for type 5 error -117 [ 215.050429][ T6362] EXT4-fs (loop3): 1 orphan inode deleted [ 215.091129][ T6362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 215.242646][ T6362] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 215.289175][ T6362] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 215.377169][ T6362] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.182: Block bitmap for bg 0 marked uninitialized [ 215.589050][ T6362] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.182: Block bitmap for bg 0 marked uninitialized [ 215.670059][ T6362] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.182: Block bitmap for bg 0 marked uninitialized [ 215.783273][ T6362] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.182: Block bitmap for bg 0 marked uninitialized [ 215.899521][ T6362] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.182: Block bitmap for bg 0 marked uninitialized [ 215.939663][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'. [ 216.003419][ T6362] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.182: Block bitmap for bg 0 marked uninitialized [ 216.106635][ T5833] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 216.290736][ T5833] usb 2-1: Using ep0 maxpacket: 32 [ 216.302539][ T29] audit: type=1326 audit(1775185315.697:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.4.192" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41a599c819 code=0x0 [ 216.358000][ T5833] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 216.400135][ T29] audit: type=1326 audit(1775185315.807:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb559c819 code=0x7ffc0000 [ 216.401494][ T5833] usb 2-1: config 0 has no interface number 0 [ 216.444051][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.473741][ T5833] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 216.485410][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.495721][ T29] audit: type=1326 audit(1775185315.857:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb559c819 code=0x7ffc0000 [ 216.519229][ T5833] usb 2-1: Product: syz [ 216.523962][ T5833] usb 2-1: Manufacturer: syz [ 216.537886][ T5833] usb 2-1: SerialNumber: syz [ 216.547617][ T29] audit: type=1326 audit(1775185315.867:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5bb559c819 code=0x7ffc0000 [ 216.637014][ T5833] usb 2-1: config 0 descriptor?? [ 216.656109][ T29] audit: type=1326 audit(1775185315.877:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb559c819 code=0x7ffc0000 [ 216.685116][ T29] audit: type=1326 audit(1775185315.877:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb559c819 code=0x7ffc0000 [ 216.715444][ T5833] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 216.746140][ T29] audit: type=1326 audit(1775185315.897:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f5bb559c819 code=0x7ffc0000 [ 216.879148][ T29] audit: type=1326 audit(1775185315.897:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb559c819 code=0x7ffc0000 [ 216.944152][ T5833] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 216.988485][ T6392] netlink: 'syz.0.196': attribute type 2 has an invalid length. [ 217.024734][ T5833] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 217.053012][ T29] audit: type=1326 audit(1775185315.897:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb559c819 code=0x7ffc0000 [ 217.341254][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 217.356309][ T5833] usb 2-1: USB disconnect, device number 2 [ 217.400471][ T5833] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 217.521324][ T5833] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 217.543739][ T5973] udevd[5973]: setting owner of /dev/ttyUSB1 to uid=0, gid=18 failed: No such file or directory [ 217.575049][ T5833] quatech2 2-1:0.51: device disconnected [ 217.813294][ T6402] loop0: detected capacity change from 0 to 512 [ 217.834687][ T6402] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 217.853406][ T6402] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 217.928546][ T6402] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 217.983651][ T6402] EXT4-fs (loop0): 1 truncate cleaned up [ 218.057542][ T6402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.321142][ T6411] kernel profiling enabled (shift: 9) [ 218.645536][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.724614][ T6416] loop2: detected capacity change from 0 to 512 [ 218.817564][ T6416] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.206: invalid block [ 218.839307][ T6416] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 218.841977][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 218.857839][ C0] EXT4-fs (loop2): initial error at time 1775185318: ext4_get_branch:178: inode 11: block 4294967295 [ 218.869114][ C0] EXT4-fs (loop2): last error at time 1775185318: ext4_get_branch:178: inode 11: block 4294967295 [ 218.916403][ T6416] EXT4-fs (loop2): Remounting filesystem read-only [ 218.961070][ T6416] EXT4-fs (loop2): 2 truncates cleaned up [ 218.990702][ T6423] loop0: detected capacity change from 0 to 1024 [ 219.023012][ T6416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.102855][ T6423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.169972][ T6429] loop1: detected capacity change from 0 to 64 [ 219.271722][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.513136][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.172482][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 220.374282][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.402138][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.427209][ T9] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 220.482213][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.535177][ T9] usb 1-1: config 0 descriptor?? [ 221.065311][ T9] steelseries 0003:1038:12B6.0006: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 221.196068][ T6455] loop4: detected capacity change from 0 to 512 [ 221.296423][ T9] steelseries 0003:1038:12B6.0006: hid_hw_raw_request() failed with -71 [ 221.297178][ T6455] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.223: invalid indirect mapped block 4294967295 (level 1) [ 221.354478][ T9] usb 1-1: USB disconnect, device number 3 [ 221.500549][ T6455] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 221.502040][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 221.518084][ C1] EXT4-fs (loop4): initial error at time 1775185320: ext4_free_branches:1023: inode 11 [ 221.528170][ C1] EXT4-fs (loop4): last error at time 1775185320: ext4_free_branches:1023: inode 11 [ 221.542716][ T6455] EXT4-fs (loop4): Remounting filesystem read-only [ 221.577849][ T6455] EXT4-fs (loop4): 2 truncates cleaned up [ 221.620631][ T6455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.296655][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.330307][ T6468] netlink: 'syz.3.228': attribute type 2 has an invalid length. [ 222.389798][ T6466] fido_id[6466]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 222.430986][ T6470] loop0: detected capacity change from 0 to 512 [ 222.512112][ T6470] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 222.585597][ T6470] EXT4-fs (loop0): 1 truncate cleaned up [ 222.622950][ T6470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.028796][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.428388][ T6488] loop0: detected capacity change from 0 to 512 [ 223.557441][ T6491] loop2: detected capacity change from 0 to 22 [ 223.596311][ T6491] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 223.635463][ T6484] loop1: detected capacity change from 0 to 2048 [ 223.644159][ T6488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.676659][ T6484] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 223.750138][ T6497] loop3: detected capacity change from 0 to 256 [ 223.755288][ T6488] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.861259][ T6497] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd22393c8, utbl_chksum : 0xe619d30d) [ 223.883090][ T6498] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.958503][ T6488] EXT4-fs: Ignoring sb option on remount [ 223.978493][ T6488] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 224.000183][ T6488] EXT4-fs (loop0): can't disable delalloc during remount [ 224.299148][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.872865][ T29] audit: type=1326 audit(1775185324.277:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcb9c819 code=0x7ffc0000 [ 225.002455][ T29] audit: type=1326 audit(1775185324.287:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcb9c819 code=0x7ffc0000 [ 225.203269][ T29] audit: type=1326 audit(1775185324.287:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fd7fcb9c819 code=0x7ffc0000 [ 225.348663][ T29] audit: type=1326 audit(1775185324.307:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcb9c819 code=0x7ffc0000 [ 225.510156][ T29] audit: type=1326 audit(1775185324.307:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcb9c819 code=0x7ffc0000 [ 225.652397][ T29] audit: type=1326 audit(1775185324.317:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fd7fcb9c819 code=0x7ffc0000 [ 225.767337][ T6523] loop2: detected capacity change from 0 to 64 [ 225.847791][ T29] audit: type=1326 audit(1775185324.317:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcb9c819 code=0x7ffc0000 [ 225.978663][ T29] audit: type=1326 audit(1775185324.317:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcb9c819 code=0x7ffc0000 [ 227.418553][ T6546] loop2: detected capacity change from 0 to 2048 [ 227.478136][ T6546] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 227.600490][ T6546] syz.2.264: attempt to access beyond end of device [ 227.600490][ T6546] loop2: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 227.622601][ T6555] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.838598][ T6549] loop0: detected capacity change from 0 to 4096 [ 227.971545][ T6559] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.992785][ T6549] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 228.112958][ T6549] NILFS (loop0): mounting fs with errors [ 228.164533][ T6549] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 229.510017][ T6583] loop2: detected capacity change from 0 to 256 [ 229.586118][ T6583] exfat: Deprecated parameter 'utf8' [ 229.591683][ T6583] exfat: Deprecated parameter 'utf8' [ 229.606065][ T6579] loop0: detected capacity change from 0 to 2048 [ 229.655845][ T6583] exfat: Deprecated parameter 'namecase' [ 229.748821][ T6585] loop3: detected capacity change from 0 to 1024 [ 229.772341][ T6588] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.776503][ T6583] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 229.827490][ T6587] netlink: 56 bytes leftover after parsing attributes in process `syz.1.282'. [ 230.306096][ T12] hfsplus: b-tree write err: -5, ino 25 [ 230.342293][ T12] hfsplus: b-tree write err: -5, ino 4 [ 230.366401][ T12] hfsplus: b-tree write err: -5, ino 2 [ 231.326682][ T6609] loop2: detected capacity change from 0 to 1024 [ 231.472118][ T6609] hfsplus: request for non-existent node 16777216 in B*Tree [ 231.506427][ T6609] hfsplus: request for non-existent node 16777216 in B*Tree [ 231.530172][ T6609] hfsplus: request for non-existent node 16777216 in B*Tree [ 231.553916][ T6609] hfsplus: request for non-existent node 16777216 in B*Tree [ 231.586699][ T6609] hfsplus: request for non-existent node 16777216 in B*Tree [ 231.640113][ T6609] hfsplus: request for non-existent node 16777216 in B*Tree [ 232.188135][ T29] audit: type=1800 audit(1775185331.597:21): pid=6609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.292" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 232.536075][ T6629] netlink: 'syz.3.299': attribute type 5 has an invalid length. [ 232.850947][ T6634] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 233.177650][ T6640] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 233.199597][ T9] IPVS: starting estimator thread 0... [ 233.312275][ T6641] IPVS: using max 240 ests per chain, 12000 per kthread [ 235.258659][ T6674] netlink: 'syz.0.320': attribute type 1 has an invalid length. [ 236.269168][ T6687] loop2: detected capacity change from 0 to 1024 [ 236.445108][ T6687] hfsplus: bad catalog entry type [ 236.832596][ T57] hfsplus: b-tree write err: -5, ino 25 [ 236.838666][ T57] hfsplus: b-tree write err: -5, ino 4 [ 236.902707][ T57] hfsplus: b-tree write err: -5, ino 2 [ 237.036261][ T6699] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 238.076796][ T6717] loop4: detected capacity change from 0 to 256 [ 238.223458][ T6722] devpts: Bad value for 'max' [ 239.050850][ T6736] netlink: 260 bytes leftover after parsing attributes in process `syz.2.348'. [ 239.099423][ T6736] netlink: 64 bytes leftover after parsing attributes in process `syz.2.348'. [ 239.940041][ T5833] kernel read not supported for file /sysvipc/msg (pid: 5833 comm: kworker/1:4) [ 240.432622][ T6759] loop4: detected capacity change from 0 to 164 [ 240.508390][ T6759] Unable to read rock-ridge attributes [ 240.608736][ T6759] Unable to read rock-ridge attributes [ 240.653167][ T6759] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 240.812161][ T29] audit: type=1326 audit(1775185340.217:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.2.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcb9c819 code=0x7ffc0000 [ 240.962152][ T29] audit: type=1326 audit(1775185340.237:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.2.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcb9c819 code=0x7ffc0000 [ 241.062115][ T29] audit: type=1326 audit(1775185340.257:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.2.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7fcb9c819 code=0x7ffc0000 [ 241.179584][ T29] audit: type=1326 audit(1775185340.257:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.2.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcb9c819 code=0x7ffc0000 [ 241.297445][ T29] audit: type=1326 audit(1775185340.257:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.2.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcb9c819 code=0x7ffc0000 [ 241.327612][ T6767] loop0: detected capacity change from 0 to 256 [ 241.443071][ T29] audit: type=1326 audit(1775185340.277:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.2.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd7fcb9c819 code=0x7ffc0000 [ 241.548666][ T29] audit: type=1326 audit(1775185340.277:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.2.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcb9c819 code=0x7ffc0000 [ 241.738358][ T6767] FAT-fs (loop0): Directory bread(block 64) failed [ 241.764949][ T6767] FAT-fs (loop0): Directory bread(block 65) failed [ 241.789213][ T6767] FAT-fs (loop0): Directory bread(block 66) failed [ 241.843901][ T6767] FAT-fs (loop0): Directory bread(block 67) failed [ 241.904575][ T6767] FAT-fs (loop0): Directory bread(block 68) failed [ 241.911303][ T6767] FAT-fs (loop0): Directory bread(block 69) failed [ 242.012721][ T6767] FAT-fs (loop0): Directory bread(block 70) failed [ 242.042729][ T6767] FAT-fs (loop0): Directory bread(block 71) failed [ 242.049621][ T6767] FAT-fs (loop0): Directory bread(block 72) failed [ 242.142511][ T6767] FAT-fs (loop0): Directory bread(block 73) failed [ 242.301585][ T6784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.369'. [ 242.797808][ T6792] loop4: detected capacity change from 0 to 256 [ 242.847601][ T6792] exfat: Deprecated parameter 'utf8' [ 242.938768][ T6792] exfat: Deprecated parameter 'namecase' [ 242.993330][ T6792] exfat: Deprecated parameter 'namecase' [ 243.003179][ T6792] exfat: Deprecated parameter 'utf8' [ 243.142282][ T5833] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 243.186700][ T6792] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 243.395326][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 243.417457][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.452553][ T5833] usb 1-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 243.532319][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.632968][ T5833] usb 1-1: config 0 descriptor?? [ 243.931677][ T6810] netlink: 'syz.4.382': attribute type 2 has an invalid length. [ 244.090353][ T5833] hid-generic 0003:0925:8066.0007: unbalanced collection at end of report description [ 244.231280][ T5833] hid-generic 0003:0925:8066.0007: probe with driver hid-generic failed with error -22 [ 244.540443][ T5833] usb 1-1: USB disconnect, device number 4 [ 244.767160][ T6816] loop2: detected capacity change from 0 to 32768 [ 244.917828][ T6816] JBD2: Ignoring recovery information on journal [ 244.928911][ T6816] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 244.937386][ T6816] JBD2: bad block at offset 32 [ 245.028186][ T6816] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 245.215146][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 245.566690][ T6828] RDS: rds_bind could not find a transport for 3:0:20::, load rds_tcp or rds_rdma? [ 245.832269][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 245.997533][ T6834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.392'. [ 246.034395][ T9] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 246.055143][ T9] usb 1-1: config 0 has no interface number 0 [ 246.083936][ T9] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 246.122631][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.152179][ T9] usb 1-1: Product: syz [ 246.172036][ T9] usb 1-1: Manufacturer: syz [ 246.192284][ T9] usb 1-1: SerialNumber: syz [ 246.237671][ T9] usb 1-1: config 0 descriptor?? [ 246.569069][ T9] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 246.955278][ T9] gspca_m5602: Failed to find a sensor [ 246.966274][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.398'. [ 246.971920][ T9] ALi m5602 1-1:0.88: ALi m5602 webcam failed [ 247.074285][ T9] usb 1-1: USB disconnect, device number 5 [ 247.936188][ T6856] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 249.847825][ T6872] loop4: detected capacity change from 0 to 2048 [ 249.911793][ T6872] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051 [ 249.988802][ T6872] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.878426][ T5405] kernel read not supported for file /input/mouse0 (pid: 5405 comm: kworker/1:3) [ 252.699380][ T6902] loop4: detected capacity change from 0 to 1024 [ 252.702443][ T6897] loop2: detected capacity change from 0 to 32768 [ 252.717370][ T6897] workqueue: name exceeds WQ_NAME_LEN. Truncating to: gfs2-glock/__Š°"_½z#²˱1Ä [ 252.740594][ T6897] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 252.741475][ T6902] EXT4-fs (loop4): filesystem is read-only [ 252.755437][ T6897] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 0)... [ 252.905320][ T6907] loop0: detected capacity change from 0 to 256 [ 253.005876][ T6902] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 253.049383][ T6907] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 253.076245][ T5405] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 253.139630][ T6902] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 253.151521][ T6902] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 253.162733][ T6902] EXT4-fs error (device loop4): ext4_get_journal_inode:5888: comm syz.4.423: inode #1: comm syz.4.423: iget: illegal inode # [ 253.182771][ T6902] loop4: lost filesystem error report for type 5 error -117 [ 253.191968][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 253.206119][ C1] EXT4-fs (loop4): initial error at time 1775185352: ext4_get_journal_inode:5888 [ 253.215660][ C1] EXT4-fs (loop4): last error at time 1775185352: ext4_get_journal_inode:5888 [ 253.252302][ T6902] EXT4-fs (loop4): no journal found [ 253.257689][ T6902] EXT4-fs (loop4): can't get journal size [ 253.270476][ T6897] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 253.270823][ T6902] EXT4-fs error (device loop4): __ext4_fill_super:5588: inode #2: comm syz.4.423: iget: special inode unallocated [ 253.292590][ T6897] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:6 [ 253.292782][ T6897] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0x124/0x510 [ 253.292996][ T6897] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 253.293179][ T6897] CPU: 0 UID: 0 PID: 6897 Comm: syz.2.420 Not tainted syzkaller #0 PREEMPT(full) [ 253.293311][ T6897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 253.293400][ T6897] Call Trace: [ 253.293449][ T6897] [ 253.293496][ T6897] __dump_stack+0x26/0x30 [ 253.293648][ T6897] dump_stack_lvl+0x14c/0x1c0 [ 253.293802][ T6897] dump_stack+0x1e/0x25 [ 253.293935][ T6897] gfs2_withdraw+0xd5/0x270 [ 253.294109][ T6897] gfs2_consist_inode_i+0x1a9/0x240 [ 253.294304][ T6897] gfs2_jdesc_check+0x170/0x440 [ 253.294463][ T6897] init_journal+0x1380/0x3970 [ 253.294620][ T6897] ? init_inodes+0x124/0x510 [ 253.294746][ T6897] ? init_inodes+0x124/0x510 [ 253.294865][ T6897] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 253.295005][ T6897] init_inodes+0x124/0x510 [ 253.295134][ T6897] gfs2_fill_super+0x3518/0x3ff0 [ 253.295269][ T6897] ? init_locking+0xed/0x500 [ 253.295430][ T6897] get_tree_bdev_flags+0x6e6/0x920 [ 253.295601][ T6897] ? __pfx_gfs2_fill_super+0x10/0x10 [ 253.295728][ T6897] ? __pfx_gfs2_fill_super+0x10/0x10 [ 253.295844][ T6897] ? __pfx_gfs2_get_tree+0x10/0x10 [ 253.295966][ T6897] get_tree_bdev+0x38/0x50 [ 253.296126][ T6897] gfs2_get_tree+0x57/0x350 [ 253.296252][ T6897] ? __pfx_gfs2_get_tree+0x10/0x10 [ 253.296379][ T6897] vfs_get_tree+0xb3/0x5d0 [ 253.296551][ T6897] do_new_mount+0x885/0x1dd0 [ 253.296670][ T6897] ? apparmor_capable+0x2a2/0x380 [ 253.296844][ T6897] ? kmsan_get_metadata+0xf1/0x160 [ 253.296968][ T6897] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 253.297120][ T6897] path_mount+0x7a2/0x20b0 [ 253.297251][ T6897] ? user_path_at+0x1fc/0x330 [ 253.297421][ T6897] __se_sys_mount+0x704/0x7f0 [ 253.297550][ T6897] ? kmsan_get_metadata+0xf1/0x160 [ 253.297697][ T6897] __x64_sys_mount+0xe4/0x150 [ 253.297838][ T6897] x64_sys_call+0x39f0/0x3ea0 [ 253.298000][ T6897] do_syscall_64+0x134/0xf80 [ 253.298157][ T6897] ? clear_bhb_loop+0x50/0xa0 [ 253.298299][ T6897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.298443][ T6897] RIP: 0033:0x7fd7fcb9da8a [ 253.298548][ T6897] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.298658][ T6897] RSP: 002b:00007fd7fda7be58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 253.298780][ T6897] RAX: ffffffffffffffda RBX: 00007fd7fda7bee0 RCX: 00007fd7fcb9da8a [ 253.298873][ T6897] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00007fd7fda7bea0 [ 253.298963][ T6897] RBP: 0000200000000000 R08: 00007fd7fda7bee0 R09: 000000000000881d [ 253.299050][ T6897] R10: 000000000000881d R11: 0000000000000246 R12: 0000200000000040 [ 253.299132][ T6897] R13: 00007fd7fda7bea0 R14: 000000000001272b R15: 00002000000001c0 [ 253.299253][ T6897] [ 253.299316][ T6897] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: my journal (0) is bad: -5 [ 253.309409][ T6902] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 253.669106][ T5405] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 253.692086][ T5405] usb 2-1: config 1 has no interface number 0 [ 253.756124][ T5405] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 253.796029][ T6902] EXT4-fs (loop4): get root inode failed [ 253.822167][ T5405] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 253.852922][ T6902] EXT4-fs (loop4): mount failed [ 253.859687][ T5405] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.955865][ T5405] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 253.991322][ T5405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.058772][ T5405] usb 2-1: Product: syz [ 254.083205][ T5405] usb 2-1: Manufacturer: syz [ 254.088011][ T5405] usb 2-1: SerialNumber: syz [ 254.168431][ T6903] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 254.521825][ T6903] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 254.879460][ T5405] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 255.017297][ T6919] loop0: detected capacity change from 0 to 512 [ 255.023705][ T5405] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 255.024149][ T5405] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 255.049623][ T6921] loop2: detected capacity change from 0 to 512 [ 255.105546][ T6921] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 255.139423][ T5405] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 255.179678][ T5405] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 255.210715][ T6921] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e02c, mo2=0102] [ 255.239804][ T6921] System zones: 1-12 [ 255.247627][ T6919] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.430: bad orphan inode 11862016 [ 255.275701][ T6921] EXT4-fs (loop2): orphan cleanup on readonly fs [ 255.284069][ T6919] loop0: lost filesystem error report for type 5 error -117 [ 255.292255][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 255.306429][ C1] EXT4-fs (loop0): initial error at time 1775185354: ext4_orphan_get:1423 [ 255.315323][ C1] EXT4-fs (loop0): last error at time 1775185354: ext4_orphan_get:1423 [ 255.360982][ T6919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 255.390238][ T5405] usb 2-1: USB disconnect, device number 3 [ 255.443066][ T6919] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.463048][ T6921] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.431: bg 0: block 361: padding at end of block bitmap is not set [ 255.495003][ T5405] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 255.527658][ T6921] loop2: lost filesystem error report for type 5 error -117 [ 255.529089][ T6921] EXT4-fs (loop2): Remounting filesystem read-only [ 255.536804][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 255.536890][ C0] EXT4-fs (loop2): initial error at time 1775185354: ext4_validate_block_bitmap:441 [ 255.537007][ C0] EXT4-fs (loop2): last error at time 1775185354: ext4_validate_block_bitmap:441 [ 255.599823][ T6921] EXT4-fs (loop2): 1 truncate cleaned up [ 255.669678][ T6921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 255.755447][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.433'. [ 255.796208][ T5405] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 256.044338][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 256.145735][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 257.565561][ T6953] loop3: detected capacity change from 0 to 256 [ 257.702609][ T6956] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.446'. [ 257.873620][ T6953] FAT-fs (loop3): Directory bread(block 64) failed [ 257.880356][ T6953] FAT-fs (loop3): Directory bread(block 65) failed [ 257.943034][ T6953] FAT-fs (loop3): Directory bread(block 66) failed [ 257.951034][ T6953] FAT-fs (loop3): Directory bread(block 67) failed [ 257.976633][ T6953] FAT-fs (loop3): Directory bread(block 68) failed [ 257.983663][ T6953] FAT-fs (loop3): Directory bread(block 69) failed [ 257.990984][ T6953] FAT-fs (loop3): Directory bread(block 70) failed [ 258.024459][ T6953] FAT-fs (loop3): Directory bread(block 71) failed [ 258.031385][ T6953] FAT-fs (loop3): Directory bread(block 72) failed [ 258.092300][ T6953] FAT-fs (loop3): Directory bread(block 73) failed [ 258.193108][ T6963] syz.0.449 uses obsolete (PF_INET,SOCK_PACKET) [ 259.657239][ T6986] loop4: detected capacity change from 0 to 512 [ 259.762421][ T6986] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 259.861040][ T6986] EXT4-fs (loop4): orphan cleanup on readonly fs [ 259.901219][ T6986] EXT4-fs error (device loop4): __ext4_iget:5393: inode #11: block 8: comm syz.4.460: invalid block [ 259.972698][ T6986] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 259.981972][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 259.998128][ C0] EXT4-fs (loop4): initial error at time 1775185359: __ext4_iget:5393: inode 11: block 8 [ 260.008351][ C0] EXT4-fs (loop4): last error at time 1775185359: __ext4_iget:5393: inode 11: block 8 [ 260.018878][ T6986] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.460: couldn't read orphan inode 11 (err -117) [ 260.044313][ T6982] loop0: detected capacity change from 0 to 32768 [ 260.062237][ T6991] veth0_to_bond: entered promiscuous mode [ 260.105978][ T6986] loop4: lost filesystem error report for type 5 error -117 [ 260.113816][ T6986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 260.180763][ T6991] veth0_to_bond: left promiscuous mode [ 260.222540][ T6982] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #72: inline data i_size 2199023255864 exceeds id_count 312 [ 260.240888][ T6982] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 260.256952][ T6982] OCFS2: File system is now read-only. [ 260.264696][ T6982] (syz.0.458,6982,1):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 260.273495][ T6982] (syz.0.458,6982,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 260.283391][ T6982] (syz.0.458,6982,1):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=7, slot=0 [ 260.293966][ T6982] (syz.0.458,6982,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 260.303131][ T6982] (syz.0.458,6982,1):ocfs2_mount_volume:1758 ERROR: status = -30 [ 260.312683][ T6982] (syz.0.458,6982,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 260.426295][ T6988] loop3: detected capacity change from 0 to 4096 [ 260.448382][ T6988] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 260.462108][ T6987] loop2: detected capacity change from 0 to 4096 [ 260.531587][ T6987] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 260.724419][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.826799][ T6988] ntfs3(loop3): ino=19, mi_enum_attr [ 260.885404][ T6988] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 260.982571][ T6987] ntfs3(loop2): ino=18, mi_enum_attr [ 261.042725][ T6987] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 261.057212][ T6988] ntfs3(loop3): failed to convert "c46c" to macturkish [ 261.126630][ T6988] ntfs3(loop3): ino=20, mi_enum_attr [ 261.148006][ T6987] ntfs3(loop2): new label is too long [ 261.285315][ T6998] loop1: detected capacity change from 0 to 16 [ 261.353691][ T6998] erofs (device loop1): mounted with root inode @ nid 36. [ 261.383110][ T6996] batadv0: entered promiscuous mode [ 261.485470][ T6994] loop0: detected capacity change from 0 to 4096 [ 261.511114][ T6996] batadv0: left promiscuous mode [ 261.534324][ T6998] erofs (device loop1): inline data across blocks @ nid 83 [ 262.206133][ T7002] 8021q: VLANs not supported on ipvlan1 [ 262.944865][ T7009] loop3: detected capacity change from 0 to 1024 [ 262.949111][ T7007] loop4: detected capacity change from 0 to 4096 [ 263.000210][ T7013] loop0: detected capacity change from 0 to 512 [ 263.069013][ T7009] hfsplus: b-tree write err: -5, ino 2 [ 263.130802][ T7009] hfsplus: b-tree write err: -5, ino 2 [ 263.199662][ T7013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.330995][ T7013] fs-verity (loop0, inode 15): Unknown hash algorithm number: 3 [ 263.506459][ T13] hfsplus: b-tree write err: -5, ino 25 [ 263.538814][ T13] hfsplus: b-tree write err: -5, ino 4 [ 263.580627][ T13] hfsplus: b-tree write err: -5, ino 2 [ 263.635610][ T13] hfsplus: b-tree write err: -5, ino 26 [ 263.756355][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.020536][ T7023] gretap0: entered promiscuous mode [ 264.500133][ T7031] loop4: detected capacity change from 0 to 512 [ 264.613853][ T7031] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 264.711907][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 264.718623][ C0] EXT4-fs (loop4): initial error at time 1775185364: ext4_mb_generate_buddy:1317 [ 264.728094][ C0] EXT4-fs (loop4): last error at time 1775185364: ext4_mb_generate_buddy:1317 [ 264.751650][ T7031] EXT4-fs (loop4): Remounting filesystem read-only [ 264.825580][ T7031] EXT4-fs (loop4): 1 truncate cleaned up [ 264.884527][ T7031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.216105][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 265.337529][ T7042] loop2: detected capacity change from 0 to 64 [ 265.407874][ T7036] loop3: detected capacity change from 0 to 32768 [ 265.423867][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.428371][ T9] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 265.430528][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.448457][ T7036] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.480 (7036) [ 265.493261][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.507055][ T7036] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 265.517664][ T7036] BTRFS info (device loop3): using sha256 checksum algorithm [ 265.525771][ T7036] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 265.541300][ T9] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.548697][ T7036] workqueue: max_active 8195 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 265.585148][ T7036] workqueue: max_active 8195 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 265.598711][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 265.622622][ T7036] workqueue: max_active 8195 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 265.625191][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0144, bcdDevice= 0.00 [ 265.653060][ T7036] workqueue: max_active 8195 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 265.673019][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.714533][ T9] usb 2-1: config 0 descriptor?? [ 265.862808][ T7036] workqueue: max_active 8195 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 265.889525][ T7036] workqueue: max_active 8195 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 265.959204][ T53] BTRFS warning (device loop3): checksum verify failed on logical 1052672 mirror 1 wanted 0x11f3e929624b680852cd2754314153a53c00b22ae8936d589814e00d5ed09030 found 0xab06a7dc80447b3c6130d7282cda4e35b2274aa4c9843b430310751eca95a5c4 level 0 [ 266.003894][ T7036] BTRFS error (device loop3): failed to read chunk root [ 266.049015][ T7036] BTRFS error (device loop3): open_ctree failed: -5 [ 266.516771][ T9] usb 2-1: USB disconnect, device number 4 [ 266.737837][ T7064] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 267.108266][ T7059] loop4: detected capacity change from 0 to 4096 [ 268.896774][ T7086] loop1: detected capacity change from 0 to 1024 [ 268.933967][ T7086] EXT4-fs: Ignoring removed mblk_io_submit option [ 268.962615][ T7086] EXT4-fs: Ignoring removed bh option [ 268.997206][ T7086] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 269.101686][ T7086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.147870][ T7090] sp0: Synchronizing with TNC [ 269.169501][ T7086] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.587692][ T3452] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 106: padding at end of block bitmap is not set [ 269.706711][ T3452] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 269.751000][ T3452] EXT4-fs (loop1): This should not happen!! Data will be lost [ 269.751000][ T3452] [ 269.833799][ T3452] EXT4-fs (loop1): Total free blocks count 0 [ 269.839979][ T3452] EXT4-fs (loop1): Free/Dirty block details [ 269.903116][ T3452] EXT4-fs (loop1): free_blocks=0 [ 269.908252][ T3452] EXT4-fs (loop1): dirty_blocks=16 [ 269.957191][ T3452] EXT4-fs (loop1): Block reservation details [ 270.006062][ T3452] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 270.028694][ T5792] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 270.098281][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 271.357942][ T7119] loop3: detected capacity change from 0 to 4096 [ 271.452032][ T7119] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 271.798361][ T7119] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 272.239424][ T7138] macsec2: entered promiscuous mode [ 272.259305][ T7138] macvlan0: entered promiscuous mode [ 272.332994][ T7138] macvlan0: left promiscuous mode [ 272.614402][ T7144] tipc: Enabled bearer , priority 10 [ 273.191156][ T7152] loop2: detected capacity change from 0 to 256 [ 274.120517][ T5405] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 274.230029][ T5405] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 274.872839][ T5405] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 274.973732][ T7173] fido_id[7173]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 275.014624][ T7179] loop0: detected capacity change from 0 to 2048 [ 275.062578][ T7179] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 275.082186][ T5405] usb 4-1: Using ep0 maxpacket: 16 [ 275.119182][ T5405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.146512][ T7182] loop2: detected capacity change from 0 to 128 [ 275.182567][ T5405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.226213][ T5405] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 275.235403][ T7183] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.276369][ T7182] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 275.280849][ T5405] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 275.309042][ T5405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.360359][ T5405] usb 4-1: config 0 descriptor?? [ 275.377166][ T7182] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 275.725382][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 275.853757][ T5405] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 275.943419][ T5405] microsoft 0003:045E:07DA.000A: usage index exceeded [ 275.950414][ T5405] microsoft 0003:045E:07DA.000A: item 0 0 2 0 parsing failed [ 276.002694][ T5405] microsoft 0003:045E:07DA.000A: parse failed [ 276.042880][ T5405] microsoft 0003:045E:07DA.000A: probe with driver microsoft failed with error -22 [ 276.102998][ T5405] usb 4-1: USB disconnect, device number 3 [ 276.785360][ T7202] loop4: detected capacity change from 0 to 2048 [ 276.836928][ T7208] netlink: 'syz.1.552': attribute type 1 has an invalid length. [ 276.894702][ T7202] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 276.958995][ T7202] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 277.012631][ T7202] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.127745][ T7205] loop0: detected capacity change from 0 to 4096 [ 278.656836][ T7219] loop2: detected capacity change from 0 to 32768 [ 278.667378][ T7219] xfs: Deprecated parameter 'noikeep' [ 278.673157][ T7219] XFS: noikeep mount option is deprecated. [ 278.755201][ T7219] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 278.770635][ T7219] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 278.988389][ T7219] XFS (loop2): Ending clean mount [ 279.007924][ T7219] XFS (loop2): Quotacheck needed: Please wait. [ 279.132452][ T7219] XFS (loop2): Quotacheck: Done. [ 279.237024][ T5777] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 280.465678][ T7246] loop0: detected capacity change from 0 to 8192 [ 280.499347][ T7250] loop3: detected capacity change from 0 to 4096 [ 281.093486][ T7254] loop4: detected capacity change from 0 to 1024 [ 281.117326][ T7254] EXT4-fs: Ignoring removed orlov option [ 281.308039][ T7254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.437755][ T29] audit: type=1326 audit(1775185380.767:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb559c819 code=0x7ffc0000 [ 281.663567][ T29] audit: type=1326 audit(1775185380.767:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb559c819 code=0x7ffc0000 [ 281.882559][ T29] audit: type=1326 audit(1775185380.917:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f5bb559c819 code=0x7ffc0000 [ 282.095123][ T7260] loop3: detected capacity change from 0 to 32768 [ 282.107698][ T29] audit: type=1326 audit(1775185380.917:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb559c819 code=0x7ffc0000 [ 282.130307][ T29] audit: type=1326 audit(1775185380.917:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb559c819 code=0x7ffc0000 [ 282.153985][ T29] audit: type=1326 audit(1775185380.917:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f5bb559c819 code=0x7ffc0000 [ 282.253362][ T7260] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 282.256411][ T29] audit: type=1326 audit(1775185380.917:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb559c819 code=0x7ffc0000 [ 282.289406][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.291234][ T29] audit: type=1326 audit(1775185380.917:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb559c819 code=0x7ffc0000 [ 282.509424][ T7260] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 282.587537][ T7260] XFS (loop3): Starting recovery (logdev: internal) [ 282.657820][ T7260] XFS (loop3): Ending recovery (logdev: internal) [ 282.692312][ T5405] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 282.796763][ T5785] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 282.935245][ T5405] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 282.973176][ T5405] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 283.020275][ T5405] usb 2-1: Product: syz [ 283.042194][ T5405] usb 2-1: Manufacturer: syz [ 283.062254][ T5405] usb 2-1: SerialNumber: syz [ 283.110441][ T5405] usb 2-1: config 0 descriptor?? [ 283.403867][ T5405] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 283.618525][ T5405] peak_usb 2-1:0.0 can0: sending command failure: -8 [ 283.642553][ T5405] peak_usb 2-1:0.0 can0: sending command failure: -8 [ 283.677155][ T5405] peak_usb 2-1:0.0 can0: sending command failure: -8 [ 283.786805][ T7282] loop2: detected capacity change from 0 to 4096 [ 283.818763][ T5405] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -8 [ 283.911733][ T5405] usb 2-1: USB disconnect, device number 5 [ 283.997914][ T7291] pim6reg: entered allmulticast mode [ 284.072967][ T7292] pim6reg: left allmulticast mode [ 284.157465][ T7282] ntfs3(loop2): ino=b, mi_enum_attr [ 284.183294][ T7282] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 284.232526][ T7282] ntfs3(loop2): Failed to load $Extend (-22). [ 284.249535][ T7282] ntfs3(loop2): Failed to initialize $Extend. [ 284.432253][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 284.691352][ T9] usb 4-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 284.754019][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.801098][ T9] usb 4-1: Product: syz [ 284.821590][ T9] usb 4-1: Manufacturer: syz [ 284.842705][ T9] usb 4-1: SerialNumber: syz [ 284.880945][ T9] usb 4-1: config 0 descriptor?? [ 285.181330][ T9] peak_usb 4-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 285.229405][ T7303] loop1: detected capacity change from 0 to 1024 [ 285.387146][ T9] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 285.421274][ T9] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 285.472254][ T9] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 285.724668][ T9] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 285.738122][ T57] hfsplus: b-tree write err: -5, ino 25 [ 285.796558][ T57] hfsplus: b-tree write err: -5, ino 4 [ 285.822170][ T57] hfsplus: b-tree write err: -5, ino 2 [ 285.830318][ T9] usb 4-1: USB disconnect, device number 4 [ 285.878848][ T7310] loop2: detected capacity change from 0 to 128 [ 285.990847][ T7310] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 286.012240][ T7310] System zones: 1-3, 19-19, 35-36 [ 286.047324][ T7310] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 286.142895][ T7310] ext4 filesystem being mounted at /122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 286.895191][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.072375][ T7323] loop3: detected capacity change from 0 to 128 [ 287.148143][ T7323] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 287.243468][ T7323] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 287.512423][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 287.562135][ T6817] udevd[6817]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 287.697247][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 287.724294][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 287.752436][ T3452] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 287.770202][ T9] usb 1-1: config 179 has no interface number 0 [ 287.791257][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 287.847010][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 287.908461][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 287.942451][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 287.948813][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 287.959651][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 287.967516][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 287.974555][ T5783] Bluetooth: hci4: command 0x0405 tx timeout [ 288.003713][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 288.077307][ T9] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 288.163401][ T9] usb 1-1: config 179 interface 65 has no altsetting 0 [ 288.226415][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 288.320562][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.485495][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6 [ 288.587858][ T7338] loop2: detected capacity change from 0 to 4096 [ 288.602574][ T5117] input input6: unable to receive magic message: -110 [ 288.676083][ T7346] warning: `syz.1.604' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 288.676298][ T5117] input input6: unable to receive magic message: -32 [ 288.772492][ T5117] input input6: unable to receive magic message: -32 [ 288.852438][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 288.882890][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 288.889545][ T7348] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 288.891425][ T9] usb 1-1: USB disconnect, device number 6 [ 289.929502][ T7361] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 289.962781][ T7360] [U] J"—E:ÀÆ" [ 290.786297][ T7369] loop1: detected capacity change from 0 to 1024 [ 291.090955][ T7369] hfsplus: request for non-existent node 262144 in B*Tree [ 291.153184][ T7369] hfsplus: request for non-existent node 262144 in B*Tree [ 291.306594][ T7379] netlink: 'syz.2.620': attribute type 5 has an invalid length. [ 292.342143][ T5405] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 292.535492][ T5405] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 292.562169][ T5405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.604717][ T5405] usb 5-1: config 0 descriptor?? [ 292.667420][ T5405] cp210x 5-1:0.0: cp210x converter detected [ 293.237557][ T7404] tipc: Started in network mode [ 293.253913][ T7404] tipc: Node identity , cluster identity 4711 [ 293.282055][ T5405] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 293.317659][ T5405] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 293.380619][ T5405] usb 5-1: cp210x converter now attached to ttyUSB0 [ 293.422104][ T5405] usb 5-1: USB disconnect, device number 2 [ 293.470050][ T5405] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 293.524463][ T5405] cp210x 5-1:0.0: device disconnected [ 294.777575][ T7426] loop4: detected capacity change from 0 to 256 [ 294.839459][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'. [ 294.872788][ T7426] exfat: Deprecated parameter 'namecase' [ 294.920191][ T7426] exfat: Deprecated parameter 'namecase' [ 294.947827][ T7426] exfat: Deprecated parameter 'namecase' [ 295.054312][ T7427] loop0: detected capacity change from 0 to 2048 [ 295.065933][ T7426] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd6f0c8a0, utbl_chksum : 0xe619d30d) [ 295.220757][ T7433] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 295.310024][ T29] audit: type=1800 audit(1775185394.717:37): pid=7427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.643" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 295.328661][ T7438] ptrace attach of "./syz-executor exec"[5785] was attempted by "./syz-executor exec"[7438] [ 296.082861][ T5788] Bluetooth: hci0: unexpected event for opcode 0x0c12 [ 298.169709][ T7484] loop4: detected capacity change from 0 to 512 [ 298.298190][ T7484] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 298.517679][ T7484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.943345][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.169991][ T7503] loop3: detected capacity change from 0 to 128 [ 299.241579][ T7503] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 299.332781][ T7503] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 300.102166][ T5788] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 300.121283][ T5788] Bluetooth: hci0: Injecting HCI hardware error event [ 300.128940][ T5788] Bluetooth: hci0: hardware error 0x00 [ 300.144712][ T7517] loop1: detected capacity change from 0 to 512 [ 300.155570][ T7517] EXT4-fs: Ignoring removed nobh option [ 300.230475][ T7517] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 300.334399][ T7520] loop2: detected capacity change from 0 to 1024 [ 300.382488][ T7517] EXT4-fs (loop1): 1 truncate cleaned up [ 300.433841][ T7520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.503339][ T7517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.145950][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.398357][ T7534] loop4: detected capacity change from 0 to 512 [ 301.505659][ T7538] loop1: detected capacity change from 0 to 128 [ 301.554907][ T7534] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 301.638824][ T7538] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 301.688475][ T5777] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 301.781707][ T7534] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 301.791433][ T7538] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 302.147136][ T5792] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 302.241688][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.693'. [ 302.265593][ T5788] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 302.355160][ T5777] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 302.377175][ T7543] Zero length message leads to an empty skb [ 302.558620][ T7541] loop0: detected capacity change from 0 to 4096 [ 302.887126][ T7541] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 302.908588][ T5777] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 303.488543][ T7557] loop4: detected capacity change from 0 to 512 [ 303.533244][ T5777] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 303.572716][ T7557] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 303.763282][ T7557] EXT4-fs (loop4): 1 truncate cleaned up [ 303.825129][ T7557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.826785][ T7564] hpfs: Bad magic ... probably not HPFS [ 303.924808][ T7564] befs: (nullb0): No write support. Marking filesystem read-only [ 303.967068][ T7557] EXT4-fs error (device loop4): ext4_get_parent:1836: comm syz.4.700: inode #2: comm syz.4.700: iget: illegal inode # [ 304.002860][ T7564] befs: (nullb0): invalid magic header [ 304.156514][ T5777] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 304.449728][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.703712][ T5777] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 305.138647][ T7579] loop1: detected capacity change from 0 to 64 [ 305.273504][ T5777] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 305.944289][ T5777] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 306.531204][ T5777] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 306.985397][ T5777] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 307.180131][ T5835] ===================================================== [ 307.187549][ T5835] BUG: KMSAN: uninit-value in vidtv_ts_null_write_into+0x43e/0x5c0 [ 307.195789][ T5835] vidtv_ts_null_write_into+0x43e/0x5c0 [ 307.201502][ T5835] vidtv_mux_tick+0x3480/0x3e30 [ 307.206670][ T5835] process_scheduled_works+0xb82/0x1e80 [ 307.212568][ T5835] worker_thread+0xee4/0x1590 [ 307.217395][ T5835] kthread+0x53f/0x600 [ 307.221638][ T5835] ret_from_fork+0x20f/0x910 [ 307.226618][ T5835] ret_from_fork_asm+0x1a/0x30 [ 307.231557][ T5835] [ 307.234034][ T5835] Uninit was stored to memory at: [ 307.239264][ T5835] vidtv_ts_null_write_into+0x437/0x5c0 [ 307.245144][ T5835] vidtv_mux_tick+0x3480/0x3e30 [ 307.250166][ T5835] process_scheduled_works+0xb82/0x1e80 [ 307.258176][ T5835] worker_thread+0xee4/0x1590 [ 307.263898][ T5835] kthread+0x53f/0x600 [ 307.268158][ T5835] ret_from_fork+0x20f/0x910 [ 307.273426][ T5835] ret_from_fork_asm+0x1a/0x30 [ 307.278360][ T5835] [ 307.280745][ T5835] Local variable args.i132 created at: [ 307.286377][ T5835] vidtv_mux_tick+0x3119/0x3e30 [ 307.291389][ T5835] process_scheduled_works+0xb82/0x1e80 [ 307.297210][ T5835] [ 307.299647][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.310999][ T5835] Tainted: [L]=SOFTLOCKUP [ 307.315489][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 307.325752][ T5835] Workqueue: events vidtv_mux_tick [ 307.331052][ T5835] ===================================================== [ 307.338142][ T5835] Disabling lock debugging due to kernel taint [ 307.422347][ T5405] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 307.438942][ T5777] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 307.461089][ T7614] IPVS: length: 8 != 3390824 [ 307.587751][ T5835] Kernel panic - not syncing: kmsan.panic set ... [ 307.594345][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: kworker/0:4 Tainted: G B L syzkaller #0 PREEMPT(full) [ 307.605479][ T5835] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 307.611121][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 307.621312][ T5835] Workqueue: events vidtv_mux_tick [ 307.626636][ T5835] Call Trace: [ 307.630009][ T5835] [ 307.633028][ T5835] __dump_stack+0x26/0x30 [ 307.637527][ T5835] dump_stack_lvl+0x50/0x1c0 [ 307.642284][ T5835] ? dump_stack+0x12/0x25 [ 307.646780][ T5835] dump_stack+0x1e/0x25 [ 307.651098][ T5835] vpanic+0x7b4/0x1430 [ 307.655354][ T5835] panic+0x15d/0x160 [ 307.659477][ T5835] kmsan_report+0x31a/0x320 [ 307.664188][ T5835] ? __msan_warning+0x1b/0x30 [ 307.669047][ T5835] ? vidtv_ts_null_write_into+0x43e/0x5c0 [ 307.674927][ T5835] ? vidtv_mux_tick+0x3480/0x3e30 [ 307.680123][ T5835] ? process_scheduled_works+0xb82/0x1e80 [ 307.686003][ T5835] ? worker_thread+0xee4/0x1590 [ 307.691012][ T5835] ? kthread+0x53f/0x600 [ 307.695422][ T5835] ? ret_from_fork+0x20f/0x910 [ 307.700340][ T5835] ? ret_from_fork_asm+0x1a/0x30 [ 307.705463][ T5835] ? ret_from_fork_asm+0x1a/0x30 [ 307.710582][ T5835] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 307.716544][ T5835] ? preempt_schedule_irq+0x79/0xa0 [ 307.721907][ T5835] ? kmsan_get_metadata+0xf1/0x160 [ 307.727161][ T5835] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 307.733149][ T5835] ? vidtv_ts_inc_cc+0xa1/0xf0 [ 307.738059][ T5835] ? filter_irq_stacks+0x49/0x190 [ 307.743271][ T5835] ? stack_depot_save_flags+0x35/0x790 [ 307.748908][ T5835] ? kmsan_get_metadata+0xf1/0x160 [ 307.754253][ T5835] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 307.760777][ T5835] ? kmsan_get_metadata+0xf1/0x160 [ 307.766041][ T5835] __msan_warning+0x1b/0x30 [ 307.770718][ T5835] vidtv_ts_null_write_into+0x43e/0x5c0 [ 307.776441][ T5835] vidtv_mux_tick+0x3480/0x3e30 [ 307.781614][ T5835] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 307.786986][ T5835] process_scheduled_works+0xb82/0x1e80 [ 307.792774][ T5835] worker_thread+0xee4/0x1590 [ 307.797656][ T5835] kthread+0x53f/0x600 [ 307.801908][ T5835] ? __pfx_worker_thread+0x10/0x10 [ 307.807214][ T5835] ? __pfx_kthread+0x10/0x10 [ 307.811973][ T5835] ret_from_fork+0x20f/0x910 [ 307.816713][ T5835] ? __switch_to+0x51c/0x750 [ 307.821505][ T5835] ? __pfx_kthread+0x10/0x10 [ 307.826277][ T5835] ret_from_fork_asm+0x1a/0x30 [ 307.831244][ T5835] [ 307.834729][ T5835] Kernel Offset: disabled [ 307.839110][ T5835] Rebooting in 86400 seconds..