last executing test programs: 3.860245894s ago: executing program 3 (id=917): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000980)="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", 0x61c}], 0x1) 3.331151905s ago: executing program 3 (id=921): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.869784992s ago: executing program 3 (id=928): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @flat=@handle={0x73682a85, 0x0, 0x2}, @flat=@handle={0x73682a85, 0x10a, 0xffffffff}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0xfffffffffffffe31, 0x13, 0x0}) 2.278811046s ago: executing program 3 (id=935): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 1.429556087s ago: executing program 0 (id=945): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000034000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="348b0d151f8218e3c73697e40800", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.219345939s ago: executing program 0 (id=947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x763f40ea8d19d842}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 1.147561873s ago: executing program 2 (id=949): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xfffffffa, 0x1}}]}]}]}, 0x48}}, 0x0) 1.009283001s ago: executing program 1 (id=950): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) 982.755383ms ago: executing program 0 (id=951): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000180)=[0x138b, 0x9, 0xf909, 0x899d, 0x80, 0xfffffffb, 0x7, 0x10, 0xfffffe01, 0x1, 0x4, 0x2, 0x6, 0x8811, 0x0], 0x1, 0x4000007}) 790.753104ms ago: executing program 0 (id=952): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xe8, &(0x7f0000000000), &(0x7f0000000280)=0x4) 747.332477ms ago: executing program 1 (id=953): mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='exfat\x00', 0x0, &(0x7f00000001c0)='discard') 739.656887ms ago: executing program 2 (id=954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) 587.323056ms ago: executing program 0 (id=955): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x18, 0x8, 0x40, 0x40, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) 576.976536ms ago: executing program 2 (id=956): r0 = socket$pppoe(0x18, 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 527.562819ms ago: executing program 1 (id=957): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x20000600, 0x20000630], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000800000000000000000000000000000000000000000000000000000000000000000ffffffff00ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000300000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 505.353711ms ago: executing program 3 (id=958): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 399.653687ms ago: executing program 2 (id=959): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.0:\x00', 0x0) 369.093599ms ago: executing program 1 (id=960): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0xc0800, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f00000000c0)=0xfffffe00) 224.544277ms ago: executing program 2 (id=961): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, &(0x7f0000000440)) 193.032499ms ago: executing program 0 (id=962): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x2000400, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/402], 0x1, 0x2f5, &(0x7f00000007c0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) 171.82005ms ago: executing program 1 (id=963): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x1) 91.476925ms ago: executing program 3 (id=964): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='ns\x00') getdents64(r0, 0x0, 0x0) 4.77284ms ago: executing program 2 (id=965): r0 = syz_open_dev$sg(&(0x7f0000000fc0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2205, 0x0) 0s ago: executing program 1 (id=966): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x0, 0x200000000000000}, @clear_death], 0xfc, 0x1000000, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.200' (ED25519) to the list of known hosts. [ 82.847319][ T5757] cgroup: Unknown subsys name 'net' [ 83.020028][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.740081][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.457816][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.479465][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.496996][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.504447][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.507769][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.519165][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.523518][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.530050][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.541657][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.549483][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.557013][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.564906][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.571440][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.579589][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.587796][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.594487][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.597285][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.609935][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.617851][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.630175][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.630735][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.655068][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.664620][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.672174][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.139811][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 87.364965][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 87.387754][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 87.485158][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 87.530444][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.539205][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.550955][ T5771] bridge_slave_0: entered allmulticast mode [ 87.558618][ T5771] bridge_slave_0: entered promiscuous mode [ 87.618839][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.628919][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.637606][ T5771] bridge_slave_1: entered allmulticast mode [ 87.645563][ T5771] bridge_slave_1: entered promiscuous mode [ 87.752005][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.767656][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.775059][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.782396][ T5772] bridge_slave_0: entered allmulticast mode [ 87.789466][ T5772] bridge_slave_0: entered promiscuous mode [ 87.809333][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.816741][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.824056][ T5770] bridge_slave_0: entered allmulticast mode [ 87.831612][ T5770] bridge_slave_0: entered promiscuous mode [ 87.842125][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.862646][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.869846][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.877515][ T5772] bridge_slave_1: entered allmulticast mode [ 87.885050][ T5772] bridge_slave_1: entered promiscuous mode [ 87.902865][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.910001][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.918951][ T5770] bridge_slave_1: entered allmulticast mode [ 87.927725][ T5770] bridge_slave_1: entered promiscuous mode [ 87.977848][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.985302][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.992775][ T5769] bridge_slave_0: entered allmulticast mode [ 87.999803][ T5769] bridge_slave_0: entered promiscuous mode [ 88.032253][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.045273][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.064529][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.072882][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.080166][ T5769] bridge_slave_1: entered allmulticast mode [ 88.087819][ T5769] bridge_slave_1: entered promiscuous mode [ 88.100050][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.113338][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.125944][ T5771] team0: Port device team_slave_0 added [ 88.186866][ T5771] team0: Port device team_slave_1 added [ 88.206862][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.243484][ T5770] team0: Port device team_slave_0 added [ 88.253138][ T5772] team0: Port device team_slave_0 added [ 88.262418][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.285325][ T5772] team0: Port device team_slave_1 added [ 88.303444][ T5770] team0: Port device team_slave_1 added [ 88.335917][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.343075][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.369772][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.413426][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.420444][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.447107][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.469007][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.476091][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.502637][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.522514][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.529498][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.556597][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.569608][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.577084][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.603730][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.615764][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.623103][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.649251][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.670524][ T5769] team0: Port device team_slave_0 added [ 88.680521][ T5769] team0: Port device team_slave_1 added [ 88.724497][ T51] Bluetooth: hci1: command tx timeout [ 88.724875][ T5782] Bluetooth: hci0: command tx timeout [ 88.730769][ T5785] Bluetooth: hci3: command tx timeout [ 88.738455][ T5780] Bluetooth: hci2: command tx timeout [ 88.818568][ T5770] hsr_slave_0: entered promiscuous mode [ 88.825702][ T5770] hsr_slave_1: entered promiscuous mode [ 88.838962][ T5771] hsr_slave_0: entered promiscuous mode [ 88.845829][ T5771] hsr_slave_1: entered promiscuous mode [ 88.852677][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.860530][ T5771] Cannot create hsr debugfs directory [ 88.878869][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.886213][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.912618][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.944276][ T5772] hsr_slave_0: entered promiscuous mode [ 88.951258][ T5772] hsr_slave_1: entered promiscuous mode [ 88.957484][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.965357][ T5772] Cannot create hsr debugfs directory [ 88.978101][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.985416][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.011449][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.182394][ T5769] hsr_slave_0: entered promiscuous mode [ 89.188931][ T5769] hsr_slave_1: entered promiscuous mode [ 89.196377][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.204973][ T5769] Cannot create hsr debugfs directory [ 89.591817][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.613224][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.625106][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.635661][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.723385][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.739741][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.758301][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.769678][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.863076][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.884069][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.900410][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.911939][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.027857][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.049432][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.069195][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.082408][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.148183][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.228469][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.247383][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.271254][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.278547][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.293577][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.324070][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.331399][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.372127][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.387073][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.435810][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.443441][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.454200][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.461519][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.487737][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.506112][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.513338][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.541756][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.548927][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.653758][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.736253][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.762328][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.789198][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.796437][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.804111][ T5785] Bluetooth: hci3: command tx timeout [ 90.807634][ T5780] Bluetooth: hci1: command tx timeout [ 90.810147][ T5785] Bluetooth: hci2: command tx timeout [ 90.820345][ T5780] Bluetooth: hci0: command tx timeout [ 90.860726][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.867979][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.979343][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.124474][ T5771] veth0_vlan: entered promiscuous mode [ 91.168384][ T5771] veth1_vlan: entered promiscuous mode [ 91.267348][ T5771] veth0_macvtap: entered promiscuous mode [ 91.280327][ T5771] veth1_macvtap: entered promiscuous mode [ 91.334126][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.366050][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.399045][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.413112][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.424236][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.433261][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.444087][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.495382][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.620315][ T5770] veth0_vlan: entered promiscuous mode [ 91.650465][ T5770] veth1_vlan: entered promiscuous mode [ 91.711887][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.713775][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.719931][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.784414][ T5772] veth0_vlan: entered promiscuous mode [ 91.805179][ T5772] veth1_vlan: entered promiscuous mode [ 91.828670][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.842048][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.874677][ T5770] veth0_macvtap: entered promiscuous mode [ 91.899546][ T5770] veth1_macvtap: entered promiscuous mode [ 91.944128][ T5772] veth0_macvtap: entered promiscuous mode [ 91.970132][ T5772] veth1_macvtap: entered promiscuous mode [ 91.999195][ T5769] veth0_vlan: entered promiscuous mode [ 92.043499][ T5769] veth1_vlan: entered promiscuous mode [ 92.059482][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.072604][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.085624][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.102028][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.121732][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.135507][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.152500][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.175431][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.183697][ T8] cfg80211: failed to load regulatory.db [ 92.207083][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.218132][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.231638][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.240761][ T5862] netlink: 'syz.0.1': attribute type 13 has an invalid length. [ 92.264564][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.281507][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.294995][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.307003][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.324372][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.379631][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.394992][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.405860][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.419514][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.440151][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.449865][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.461834][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.471136][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.489093][ T5769] veth0_macvtap: entered promiscuous mode [ 92.527151][ T5769] veth1_macvtap: entered promiscuous mode [ 92.686750][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.712600][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.724111][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.736007][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.747337][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.757931][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.773364][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.791918][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.805903][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.817933][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.832255][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.845134][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.871802][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.881992][ T5780] Bluetooth: hci1: command tx timeout [ 92.882033][ T5780] Bluetooth: hci3: command tx timeout [ 92.882153][ T5782] Bluetooth: hci2: command tx timeout [ 92.892696][ T5782] Bluetooth: hci0: command tx timeout [ 92.918543][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.939802][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.953111][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.965377][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.973321][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.988171][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.997393][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.158159][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.183666][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.264294][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.283441][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.393863][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.425549][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.496697][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.542971][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.648635][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.670569][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.799664][ T5885] syz.3.4[5885]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.867620][ T5885] loop3: detected capacity change from 0 to 64 [ 93.895557][ T5889] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.962953][ T5785] Bluetooth: hci0: command tx timeout [ 94.968441][ T5785] Bluetooth: hci2: command tx timeout [ 94.974648][ T5782] Bluetooth: hci3: command tx timeout [ 94.980101][ T5782] Bluetooth: hci1: command tx timeout [ 95.048893][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 95.060378][ T5925] netlink: 7 bytes leftover after parsing attributes in process `syz.0.32'. [ 95.708090][ T5919] loop3: detected capacity change from 0 to 32768 [ 95.759786][ T5919] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.29 (5919) [ 95.795649][ T5941] loop0: detected capacity change from 0 to 4096 [ 95.822489][ T5941] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 95.949154][ T5919] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 95.977891][ T5919] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 96.009667][ T5919] BTRFS info (device loop3): turning off barriers [ 96.030976][ T5919] BTRFS info (device loop3): disabling log replay at mount time [ 96.047952][ T5919] BTRFS info (device loop3): trying to use backup root at mount time [ 96.074532][ T5919] BTRFS info (device loop3): force zlib compression, level 3 [ 96.103930][ T5919] BTRFS info (device loop3): setting nodatasum [ 96.114718][ T5919] BTRFS info (device loop3): enabling auto defrag [ 96.121432][ T5941] ntfs: volume version 3.1. [ 96.142787][ T5919] BTRFS info (device loop3): using free space tree [ 96.149713][ T5919] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 96.243020][ T5919] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 96.410421][ T5919] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 96.461063][ T5919] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 96.533847][ T5919] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 96.549008][ T5919] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 96.575340][ T5919] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 96.715655][ T5919] BTRFS info (device loop3): auto enabling async discard [ 96.941805][ T5919] BTRFS error (device loop3: state M): nologreplay must be used with ro mount option [ 97.143402][ T5770] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 97.218911][ T5979] loop0: detected capacity change from 0 to 128 [ 97.939490][ T5991] ipvlan0: entered promiscuous mode [ 98.030467][ T5993] loop3: detected capacity change from 0 to 2048 [ 98.146928][ T5993] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.732352][ T6016] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 98.968465][ T6024] netlink: 'syz.0.73': attribute type 3 has an invalid length. [ 98.997751][ T6024] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.73'. [ 99.207098][ T6031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.76'. [ 99.536899][ T6044] loop3: detected capacity change from 0 to 512 [ 99.562946][ T6044] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.687823][ T6044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.711289][ T6044] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.886503][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.552243][ T6069] loop1: detected capacity change from 0 to 8192 [ 100.571642][ T6069] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 100.589494][ T6069] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 100.599971][ T6069] REISERFS (device loop1): using ordered data mode [ 100.609894][ T6069] reiserfs: using flush barriers [ 100.643313][ T6069] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 100.683149][ T6069] REISERFS (device loop1): checking transaction log (loop1) [ 100.698645][ T6069] REISERFS (device loop1): Using r5 hash to sort names [ 100.962895][ T6084] loop3: detected capacity change from 0 to 256 [ 101.892711][ T6111] Cannot find set identified by id 0 to match [ 101.998285][ T6115] netlink: 11 bytes leftover after parsing attributes in process `syz.2.107'. [ 102.425810][ T6127] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.874502][ T6141] loop1: detected capacity change from 0 to 256 [ 102.884618][ T27] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 103.120821][ T27] usb 4-1: config index 0 descriptor too short (expected 69, got 36) [ 103.157523][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.190702][ T27] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 103.220994][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.240909][ T27] usb 4-1: Product: syz [ 103.245183][ T27] usb 4-1: Manufacturer: syz [ 103.249880][ T27] usb 4-1: SerialNumber: syz [ 103.306565][ T27] usb 4-1: config 0 descriptor?? [ 103.334960][ T27] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 103.491010][ T6149] tc_dump_action: action bad kind [ 103.743663][ T27] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 103.750592][ T27] gspca_pac7302: probe of 4-1:0.0 failed with error -71 [ 103.831619][ T27] usb 4-1: USB disconnect, device number 2 [ 104.266012][ T6170] netlink: 'syz.1.133': attribute type 1 has an invalid length. [ 105.045431][ T6191] loop1: detected capacity change from 0 to 256 [ 105.152100][ T6191] FAT-fs (loop1): Directory bread(block 64) failed [ 105.169391][ T6191] FAT-fs (loop1): Directory bread(block 65) failed [ 105.196580][ T6191] FAT-fs (loop1): Directory bread(block 66) failed [ 105.219552][ T6191] FAT-fs (loop1): Directory bread(block 67) failed [ 105.238232][ T6191] FAT-fs (loop1): Directory bread(block 68) failed [ 105.248420][ T6191] FAT-fs (loop1): Directory bread(block 69) failed [ 105.255450][ T6191] FAT-fs (loop1): Directory bread(block 70) failed [ 105.271005][ T6191] FAT-fs (loop1): Directory bread(block 71) failed [ 105.295511][ T6191] FAT-fs (loop1): Directory bread(block 72) failed [ 105.323598][ T6191] FAT-fs (loop1): Directory bread(block 73) failed [ 105.358289][ T28] audit: type=1326 audit(1770488475.662:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed66f9aeb9 code=0x7ffc0000 [ 105.386727][ T6196] loop3: detected capacity change from 0 to 512 [ 105.412016][ T6196] ======================================================= [ 105.412016][ T6196] WARNING: The mand mount option has been deprecated and [ 105.412016][ T6196] and is ignored by this kernel. Remove the mand [ 105.412016][ T6196] option from the mount to silence this warning. [ 105.412016][ T6196] ======================================================= [ 105.450502][ T28] audit: type=1326 audit(1770488475.662:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed66f9aeb9 code=0x7ffc0000 [ 105.498640][ T28] audit: type=1326 audit(1770488475.712:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fed66f9aeb9 code=0x7ffc0000 [ 105.570955][ T28] audit: type=1326 audit(1770488475.712:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed66f9aeb9 code=0x7ffc0000 [ 105.639425][ T28] audit: type=1326 audit(1770488475.712:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed66f9aeb9 code=0x7ffc0000 [ 105.675051][ T6196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.721069][ T6196] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.892819][ T6196] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #2: comm syz.3.146: corrupted inode contents [ 105.946819][ T6196] EXT4-fs error (device loop3): ext4_dirty_inode:6124: inode #2: comm syz.3.146: mark_inode_dirty error [ 105.983346][ T6196] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #2: comm syz.3.146: corrupted inode contents [ 106.085379][ T6196] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.146: mark_inode_dirty error [ 106.150056][ T6209] loop2: detected capacity change from 0 to 256 [ 106.308290][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.532079][ T28] audit: type=1326 audit(1770488476.852:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc059aeb9 code=0x7ffc0000 [ 106.594388][ T28] audit: type=1326 audit(1770488476.852:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc059aeb9 code=0x7ffc0000 [ 106.631018][ T28] audit: type=1326 audit(1770488476.902:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f8dc059aeb9 code=0x7ffc0000 [ 106.711040][ T28] audit: type=1326 audit(1770488476.902:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc059aeb9 code=0x7ffc0000 [ 106.800980][ T28] audit: type=1326 audit(1770488476.912:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc059aeb9 code=0x7ffc0000 [ 106.941150][ T6223] syz.2.158 uses obsolete (PF_INET,SOCK_PACKET) [ 106.975977][ T6228] loop3: detected capacity change from 0 to 256 [ 107.787550][ T6251] loop3: detected capacity change from 0 to 512 [ 107.871522][ T6251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.884996][ T6251] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.942338][ T6251] EXT4-fs error (device loop3): ext4_xattr_block_find:1879: inode #12: comm syz.3.171: corrupted xattr block 6: invalid header [ 108.115526][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.272117][ T6257] loop1: detected capacity change from 0 to 4096 [ 108.294567][ T23] IPVS: starting estimator thread 0... [ 108.319003][ T6257] ntfs: volume version 3.1. [ 108.328959][ T6264] loop3: detected capacity change from 0 to 8 [ 108.391910][ T6262] IPVS: using max 20 ests per chain, 48000 per kthread [ 109.143641][ T6282] loop3: detected capacity change from 0 to 2048 [ 109.221132][ T6282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.342116][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.187'. [ 109.530639][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.895367][ T6306] loop3: detected capacity change from 0 to 256 [ 110.021549][ T6306] FAT-fs (loop3): Directory bread(block 64) failed [ 110.038807][ T6306] FAT-fs (loop3): Directory bread(block 65) failed [ 110.065013][ T6306] FAT-fs (loop3): Directory bread(block 66) failed [ 110.081138][ T6306] FAT-fs (loop3): Directory bread(block 67) failed [ 110.100361][ T6306] FAT-fs (loop3): Directory bread(block 68) failed [ 110.119264][ T6306] FAT-fs (loop3): Directory bread(block 69) failed [ 110.126675][ T6306] FAT-fs (loop3): Directory bread(block 70) failed [ 110.142412][ T6306] FAT-fs (loop3): Directory bread(block 71) failed [ 110.157766][ T6306] FAT-fs (loop3): Directory bread(block 72) failed [ 110.181252][ T6306] FAT-fs (loop3): Directory bread(block 73) failed [ 110.591186][ T6325] loop2: detected capacity change from 0 to 1024 [ 110.612880][ T6325] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.648219][ T6325] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 110.728953][ T6325] EXT4-fs (loop2): orphan cleanup on readonly fs [ 110.765270][ T6325] EXT4-fs error (device loop2): ext4_free_blocks:6692: comm syz.2.204: Freeing blocks not in datazone - block = 0, count = 4096 [ 110.837814][ T6325] EXT4-fs (loop2): 1 orphan inode deleted [ 110.866335][ T6325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.939912][ T6336] netlink: 'syz.3.209': attribute type 3 has an invalid length. [ 110.957128][ T6336] netlink: 132 bytes leftover after parsing attributes in process `syz.3.209'. [ 111.096401][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.790785][ T6368] capability: warning: `syz.0.225' uses deprecated v2 capabilities in a way that may be insecure [ 112.052084][ T6375] xt_policy: too many policy elements [ 112.079476][ T6378] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 112.227395][ T6382] trusted_key: encrypted_key: keylen parameter is missing [ 112.496953][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 112.741258][ T5844] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 112.964192][ T5844] usb 3-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 112.981679][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.005767][ T5844] usb 3-1: config 0 descriptor?? [ 113.054812][ T5844] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 113.071302][ T5844] dvb-usb: bulk message failed: -22 (3/0) [ 113.103139][ T5844] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 113.161840][ T5844] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 113.175080][ T5844] usb 3-1: media controller created [ 113.175920][ T6418] loop3: detected capacity change from 0 to 16 [ 113.180572][ T5844] dvb-usb: bulk message failed: -22 (5/0) [ 113.204154][ T5844] dvb-usb: MAC address reading failed. [ 113.226135][ T6418] erofs: (device loop3): mounted with root inode @ nid 36. [ 113.265671][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.324673][ T5844] dvb-usb: bulk message failed: -22 (6/0) [ 113.340653][ T5844] dvb-usb: bulk message failed: -22 (6/0) [ 113.367195][ T5844] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 113.400635][ T5844] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 113.454738][ T5844] dvb-usb: schedule remote query interval to 100 msecs. [ 113.470992][ T5844] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 113.510993][ T5844] usb 3-1: USB disconnect, device number 2 [ 113.581447][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.611512][ T6424] kernel read not supported for file / œÏüÔ¢W)ëS“§Ç-ë (pid: 6424 comm: syz.3.253) [ 113.623645][ T5944] udevd[5944]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 113.650030][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 113.650045][ T28] audit: type=1800 audit(1770488483.962:17): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.253" name=20019CCFFCD4A25729EB5393A7C72DEB dev="mqueue" ino=8658 res=0 errno=0 [ 113.724921][ T5844] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 113.808563][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 113.833037][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 113.862935][ T27] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 255 [ 113.874380][ T27] usb 2-1: config 8 interface 0 has no altsetting 0 [ 113.888655][ T6430] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615) [ 113.896710][ T27] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 113.914451][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.951108][ T27] usb 2-1: Product: syz [ 113.961269][ T27] usb 2-1: Manufacturer: syz [ 113.965943][ T27] usb 2-1: SerialNumber: syz [ 113.999023][ T6420] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 114.149428][ T6438] netlink: 'syz.0.260': attribute type 41 has an invalid length. [ 114.160389][ T6438] netlink: 40 bytes leftover after parsing attributes in process `syz.0.260'. [ 114.266467][ T27] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 114.307416][ T27] usb 2-1: selecting invalid altsetting 0 [ 114.365256][ T6436] loop2: detected capacity change from 0 to 4096 [ 114.397450][ T6436] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 114.466248][ T27] usb 2-1: USB disconnect, device number 2 [ 114.607946][ T6447] udevd[6447]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.624358][ T6446] loop0: detected capacity change from 0 to 512 [ 114.711722][ T6446] EXT4-fs error (device loop0): ext4_orphan_get:1424: comm syz.0.264: bad orphan inode 13 [ 114.744582][ T6436] ntfs3: loop2: failed to convert "c46c" to cp775 [ 114.783354][ T6446] ext4_test_bit(bit=12, block=4) = 1 [ 114.789346][ T6446] is_bad_inode(inode)=0 [ 114.798722][ T6446] NEXT_ORPHAN(inode)=0 [ 114.806962][ T6446] max_ino=32 [ 114.810409][ T6446] i_nlink=1 [ 114.815930][ T6446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.884952][ T6446] EXT4-fs warning (device loop0): dx_probe:845: inode #2: comm syz.0.264: Hash code is SIPHASH, but hash not in dirent [ 114.913080][ T6446] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.264: Corrupt directory, running e2fsck is recommended [ 114.928985][ T6446] EXT4-fs warning (device loop0): dx_probe:845: inode #2: comm syz.0.264: Hash code is SIPHASH, but hash not in dirent [ 114.961094][ T6446] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.264: Corrupt directory, running e2fsck is recommended [ 115.120509][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.139237][ T6458] loop2: detected capacity change from 0 to 8 [ 115.531599][ T6469] QAT: failed to copy from user. [ 115.547639][ T6468] netlink: 'syz.1.273': attribute type 30 has an invalid length. [ 115.594054][ T6466] loop3: detected capacity change from 0 to 4096 [ 115.616284][ T6466] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 115.761201][ T6466] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 116.198969][ T6485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.280'. [ 116.221512][ T6485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.280'. [ 116.241289][ T6488] loop0: detected capacity change from 0 to 512 [ 116.282049][ T6488] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 116.301222][ T6488] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 116.344407][ T6488] EXT4-fs error (device loop0): ext4_orphan_get:1424: comm syz.0.281: bad orphan inode 13 [ 116.357487][ T6488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.443944][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.955767][ T6506] loop0: detected capacity change from 0 to 2048 [ 116.982229][ T6506] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 116.997124][ T6480] loop1: detected capacity change from 0 to 32768 [ 117.211030][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.341065][ T5844] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.422032][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 117.429936][ T27] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 117.438517][ T27] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 117.446048][ T27] usb 4-1: config 0 has no interface number 0 [ 117.457055][ T27] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 117.466662][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.475124][ T27] usb 4-1: Product: syz [ 117.479503][ T27] usb 4-1: Manufacturer: syz [ 117.499809][ T27] usb 4-1: SerialNumber: syz [ 117.515718][ T27] usb 4-1: config 0 descriptor?? [ 117.521109][ T5844] usb 1-1: Using ep0 maxpacket: 8 [ 117.533317][ T5844] usb 1-1: config 7 has an invalid interface number: 143 but max is 1 [ 117.544482][ T27] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 117.550936][ T5844] usb 1-1: config 7 has an invalid interface number: 217 but max is 1 [ 117.550961][ T5844] usb 1-1: config 7 has an invalid descriptor of length 229, skipping remainder of the config [ 117.550981][ T5844] usb 1-1: config 7 has no interface number 0 [ 117.550998][ T5844] usb 1-1: config 7 has no interface number 1 [ 117.551057][ T5844] usb 1-1: too many endpoints for config 7 interface 217 altsetting 0: 255, using maximum allowed: 30 [ 117.551094][ T5844] usb 1-1: config 7 interface 217 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 117.551122][ T5844] usb 1-1: config 7 interface 143 has no altsetting 0 [ 117.558045][ T5844] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=ba.35 [ 117.569967][ T27] usb 4-1: No valid video chain found. [ 117.640826][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.641433][ T6520] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 117.670714][ T5844] usb 1-1: Product: syz [ 117.676180][ T5844] usb 1-1: Manufacturer: syz [ 117.688216][ T5844] usb 1-1: SerialNumber: syz [ 117.764706][ T966] usb 4-1: USB disconnect, device number 3 [ 117.929156][ T5844] qmi_wwan: probe of 1-1:7.143 failed with error -22 [ 117.988728][ T5844] usb 1-1: USB disconnect, device number 2 [ 118.393285][ T6536] netlink: 'syz.1.305': attribute type 21 has an invalid length. [ 118.413530][ T6536] netlink: 128 bytes leftover after parsing attributes in process `syz.1.305'. [ 118.429327][ T6536] netlink: 'syz.1.305': attribute type 5 has an invalid length. [ 118.448960][ T6536] netlink: 'syz.1.305': attribute type 6 has an invalid length. [ 118.458139][ T6536] netlink: 3 bytes leftover after parsing attributes in process `syz.1.305'. [ 118.735761][ T6548] loop0: detected capacity change from 0 to 256 [ 118.761153][ T6548] exfat: Deprecated parameter 'namecase' [ 118.830445][ T6548] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 118.836142][ T6547] loop2: detected capacity change from 0 to 2048 [ 118.893130][ T6547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.913376][ T6547] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.989323][ T6557] ptrace attach of "./syz-executor exec"[5772] was attempted by ""[6557] [ 119.020949][ T6547] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.309: bg 0: block 345: padding at end of block bitmap is not set [ 119.168548][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.413959][ T6569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.438315][ T6569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.471094][ T6569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.482172][ T6569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.609310][ T6572] program syz.1.321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.661151][ T6572] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 119.958213][ T6582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.324'. [ 120.001382][ T6582] netlink: 'syz.1.324': attribute type 3 has an invalid length. [ 120.025559][ T6582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.324'. [ 120.045250][ T6563] loop0: detected capacity change from 0 to 32768 [ 120.052326][ T6582] netlink: 44 bytes leftover after parsing attributes in process `syz.1.324'. [ 120.648309][ T6596] loop3: detected capacity change from 0 to 4096 [ 121.231308][ T6618] loop1: detected capacity change from 0 to 256 [ 121.509861][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 121.882459][ T6638] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 122.192345][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'. [ 122.301777][ T6655] trusted_key: encrypted_key: master key parameter is missing [ 123.081171][ T5844] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.113558][ T6686] No such timeout policy "syz0" [ 123.281341][ T5844] usb 2-1: Using ep0 maxpacket: 16 [ 123.289069][ T5844] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 123.293408][ T6692] PKCS7: Unknown OID: [4] 0.0 [ 123.320769][ T5844] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 123.331044][ T6692] PKCS7: Only support pkcs7_signedData type [ 123.348100][ T5844] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.370102][ T5844] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.380178][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.388687][ T5844] usb 2-1: Product: syz [ 123.393369][ T5844] usb 2-1: Manufacturer: syz [ 123.398129][ T5844] usb 2-1: SerialNumber: syz [ 123.574254][ T6699] netlink: 'syz.0.378': attribute type 153 has an invalid length. [ 123.587541][ T6702] loop2: detected capacity change from 0 to 64 [ 123.593877][ T6699] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.378'. [ 123.651751][ T6702] hfs: unable to locate alternate MDB [ 123.666153][ T6702] hfs: continuing without an alternate MDB [ 123.830199][ T6706] loop0: detected capacity change from 0 to 256 [ 123.831899][ T5844] usb 2-1: 0:2 : does not exist [ 123.912669][ T5844] usb 2-1: USB disconnect, device number 3 [ 123.948230][ T6706] FAT-fs (loop0): Directory bread(block 64) failed [ 123.971850][ T6706] FAT-fs (loop0): Directory bread(block 65) failed [ 123.997239][ T6454] udevd[6454]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.015525][ T6706] FAT-fs (loop0): Directory bread(block 66) failed [ 124.037144][ T6706] FAT-fs (loop0): Directory bread(block 67) failed [ 124.076335][ T6706] FAT-fs (loop0): Directory bread(block 68) failed [ 124.097344][ T6706] FAT-fs (loop0): Directory bread(block 69) failed [ 124.116504][ T6706] FAT-fs (loop0): Directory bread(block 70) failed [ 124.123209][ T6706] FAT-fs (loop0): Directory bread(block 71) failed [ 124.130094][ T6706] FAT-fs (loop0): Directory bread(block 72) failed [ 124.144023][ T6706] FAT-fs (loop0): Directory bread(block 73) failed [ 124.819754][ T6734] loop1: detected capacity change from 0 to 8 [ 124.905578][ T6734] SQUASHFS error: lzo decompression failed, data probably corrupt [ 124.967617][ T6734] SQUASHFS error: Failed to read block 0x144: -5 [ 124.974697][ T6734] SQUASHFS error: Unable to read metadata cache entry [142] [ 124.986693][ T6734] SQUASHFS error: Unable to read directory block [142:26] [ 125.067451][ T6738] netlink: 'syz.2.397': attribute type 3 has an invalid length. [ 125.321006][ T5844] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.521028][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 125.532255][ T5844] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 125.552945][ T5844] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.575224][ T5844] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.591126][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.607196][ T6726] loop0: detected capacity change from 0 to 40427 [ 125.613816][ T5844] usb 4-1: Product: syz [ 125.618038][ T5844] usb 4-1: Manufacturer: syz [ 125.636414][ T5844] usb 4-1: SerialNumber: syz [ 125.647810][ T6726] F2FS-fs (loop0): invalid crc value [ 125.674129][ T6726] F2FS-fs (loop0): Found nat_bits in checkpoint [ 125.799157][ T6726] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 125.921627][ T5844] usb 4-1: 0:2 : does not exist [ 125.926653][ T5844] usb 4-1: unit 9 not found! [ 126.002128][ T5844] usb 4-1: USB disconnect, device number 4 [ 126.597489][ T6753] loop2: detected capacity change from 0 to 40427 [ 126.623212][ T6753] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 126.659574][ T6753] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 126.703129][ T6753] F2FS-fs (loop2): Found nat_bits in checkpoint [ 126.753544][ T6759] loop1: detected capacity change from 0 to 32768 [ 126.864285][ T6753] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 126.897026][ T6753] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 127.047257][ T6753] syz.2.403: attempt to access beyond end of device [ 127.047257][ T6753] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 127.212103][ T5769] syz-executor: attempt to access beyond end of device [ 127.212103][ T5769] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 127.281652][ T5769] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 127.330957][ T966] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.551221][ T966] usb 2-1: Using ep0 maxpacket: 32 [ 127.558888][ T966] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 127.569037][ T6779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.415'. [ 127.571362][ T966] usb 2-1: config 0 has no interface number 0 [ 127.601180][ T966] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 127.630952][ T966] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 127.663768][ T966] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 127.691246][ T966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.699310][ T966] usb 2-1: Product: syz [ 127.713401][ T966] usb 2-1: Manufacturer: syz [ 127.718066][ T966] usb 2-1: SerialNumber: syz [ 127.757905][ T966] usb 2-1: config 0 descriptor?? [ 127.874366][ T6785] loop3: detected capacity change from 0 to 1024 [ 128.201278][ T1121] hfsplus: b-tree write err: -5, ino 4 [ 128.210455][ T966] radio-si470x 2-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 128.241411][ T966] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 128.305500][ T966] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 128.328170][ T966] usb 2-1: USB disconnect, device number 4 [ 129.317987][ T6827] loop3: detected capacity change from 0 to 1764 [ 129.493530][ T6827] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 129.951574][ T6817] loop1: detected capacity change from 0 to 40427 [ 129.983915][ T6817] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 130.004390][ T6817] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 130.092095][ T6817] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.132718][ T6852] x_tables: unsorted entry at hook 3 [ 130.326767][ T6817] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 130.342419][ T6817] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 130.618458][ T6867] loop0: detected capacity change from 0 to 1024 [ 130.642422][ T6867] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.681215][ T6867] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 130.729532][ T6867] EXT4-fs error (device loop0): ext4_orphan_get:1424: comm syz.0.457: bad orphan inode 11 [ 130.777490][ T6867] ext4_test_bit(bit=10, block=4) = 1 [ 130.787158][ T6867] is_bad_inode(inode)=0 [ 130.792458][ T6867] NEXT_ORPHAN(inode)=3254779904 [ 130.797459][ T6867] max_ino=32 [ 130.802577][ T6867] i_nlink=0 [ 130.858095][ T6867] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 2: comm syz.0.457: lblock 2 mapped to illegal pblock 2 (length 1) [ 130.902015][ T6867] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 130.930754][ T6867] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 48: comm syz.0.457: lblock 0 mapped to illegal pblock 48 (length 1) [ 130.991551][ T6867] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 131.014757][ T6867] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.457: Failed to acquire dquot type 0 [ 131.071256][ T6867] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 131.110961][ T6867] EXT4-fs error (device loop0): ext4_evict_inode:252: inode #11: comm syz.0.457: mark_inode_dirty error [ 131.142749][ T6867] EXT4-fs warning (device loop0): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 131.182591][ T6867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.361159][ T60] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 131.413469][ T60] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 131.430948][ T60] EXT4-fs error (device loop0): ext4_release_dquot:6985: comm kworker/u4:4: Failed to release dquot type 0 [ 131.498213][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.531966][ T5771] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 131.566855][ T5771] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 131.598719][ T5771] EXT4-fs error (device loop0): ext4_quota_off:7233: inode #3: comm syz-executor: mark_inode_dirty error [ 131.615873][ T6887] loop1: detected capacity change from 0 to 16 [ 131.700973][ T6887] erofs: (device loop1): mounted with root inode @ nid 36. [ 131.765101][ T6891] loop0: detected capacity change from 0 to 16 [ 131.791911][ T6891] erofs: (device loop0): mounted with root inode @ nid 36. [ 131.864382][ T6871] loop2: detected capacity change from 0 to 32768 [ 131.889250][ T6891] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 131.937926][ T6891] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 39 of nid 36 [ 132.012129][ T6871] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 132.012129][ T6871] [ 132.627239][ T6909] loop1: detected capacity change from 0 to 256 [ 132.674700][ T6909] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 133.028543][ T6900] loop0: detected capacity change from 0 to 32768 [ 133.125141][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.132230][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.152255][ T6923] netlink: 'syz.1.481': attribute type 1 has an invalid length. [ 133.160496][ T6923] netlink: 224 bytes leftover after parsing attributes in process `syz.1.481'. [ 133.216758][ T6900] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 133.515504][ T6900] XFS (loop0): Ending clean mount [ 133.561032][ T5759] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 133.686389][ T5771] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 133.781343][ T5759] usb 3-1: Using ep0 maxpacket: 16 [ 133.834867][ T5759] usb 3-1: config 0 has no interfaces? [ 133.860307][ T5759] usb 3-1: config 0 has no interfaces? [ 133.872527][ T5759] usb 3-1: config 0 has no interfaces? [ 133.885223][ T5759] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 133.925208][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.956459][ T5759] usb 3-1: Product: syz [ 133.960759][ T5759] usb 3-1: Manufacturer: syz [ 133.991246][ T5759] usb 3-1: SerialNumber: syz [ 134.012180][ T5759] r8152-cfgselector 3-1: config 0 descriptor?? [ 134.051909][ T6943] ±ÿ: renamed from team_slave_1 (while UP) [ 134.108006][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 134.252335][ T5759] r8152-cfgselector 3-1: Unknown version 0x0000 [ 134.414834][ T28] audit: type=1107 audit(1770488504.732:18): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ý—::— [ 134.414834][ T28] ' [ 134.468778][ T5844] r8152-cfgselector 3-1: USB disconnect, device number 3 [ 134.571298][ T5759] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 134.759475][ T6951] loop0: detected capacity change from 0 to 32768 [ 134.771399][ T5759] usb 2-1: Using ep0 maxpacket: 16 [ 134.790064][ T6951] (syz.0.487,6951,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 134.815476][ T5759] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 134.832660][ T6951] (syz.0.487,6951,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 134.849807][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.862218][ T5759] usb 2-1: Product: syz [ 134.866580][ T5759] usb 2-1: Manufacturer: syz [ 134.880935][ T5759] usb 2-1: SerialNumber: syz [ 134.904344][ T6951] JBD2: Ignoring recovery information on journal [ 134.921093][ T5759] r8152-cfgselector 2-1: config 0 descriptor?? [ 135.072252][ T6951] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 135.169285][ T5759] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 135.256833][ T6969] openvswitch: netlink: IP tunnel dst address not specified [ 135.406020][ T5844] usb 2-1: USB disconnect, device number 5 [ 135.442652][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 135.494601][ T6973] Cannot find del_set index 4 as target [ 135.649528][ T6977] Cannot find add_set index 2 as target [ 136.101182][ T6995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.514'. [ 136.808700][ T7017] loop2: detected capacity change from 0 to 1024 [ 136.868382][ T6991] loop3: detected capacity change from 0 to 32768 [ 136.892730][ T6991] (syz.3.511,6991,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 136.911281][ T7017] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 136.934517][ T7017] hfsplus: xattr searching failed [ 136.955089][ T7017] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 136.960528][ T6991] (syz.3.511,6991,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 136.982898][ T7017] hfsplus: xattr searching failed [ 137.121296][ T6991] JBD2: Ignoring recovery information on journal [ 137.193823][ T7022] netlink: 76 bytes leftover after parsing attributes in process `syz.1.526'. [ 137.235031][ T6991] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 137.429195][ T7011] loop0: detected capacity change from 0 to 32768 [ 137.512579][ T7034] netlink: 'syz.2.528': attribute type 1 has an invalid length. [ 137.520304][ T7034] netlink: 224 bytes leftover after parsing attributes in process `syz.2.528'. [ 137.522452][ T7011] XFS (loop0): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 137.665629][ T7011] XFS (loop0): null uuid in log - IRIX style log [ 137.720250][ T7011] XFS (loop0): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x41. [ 137.758967][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 137.800778][ T7011] XFS (loop0): failed to locate log tail [ 137.808648][ T7011] XFS (loop0): log mount/recovery failed: error -5 [ 137.853681][ T7011] XFS (loop0): log mount failed [ 138.379989][ T7052] bond1: entered promiscuous mode [ 139.230355][ T7083] loop3: detected capacity change from 0 to 1024 [ 139.239202][ T7083] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.246175][ T7083] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.272370][ T7083] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.296643][ T7083] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 139.360280][ T7083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.495490][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.619071][ T7065] loop1: detected capacity change from 0 to 32768 [ 139.629135][ T7065] (syz.1.540,7065,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 139.675816][ T7065] (syz.1.540,7065,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 139.721426][ T5759] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 139.748148][ T7065] JBD2: Ignoring recovery information on journal [ 139.808992][ T7065] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 139.890937][ T5798] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 139.946532][ T5759] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.977579][ T5759] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 139.989939][ T5759] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 140.011835][ T5759] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 140.049952][ T5759] usb 3-1: config 129 has no interface number 0 [ 140.060892][ T5759] usb 3-1: config 129 has no interface number 1 [ 140.067292][ T5759] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 140.104155][ T5798] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 140.111065][ T5759] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 140.131049][ T5798] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 140.143296][ T5759] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 140.168897][ T5798] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 140.177987][ T5759] usb 3-1: config 129 interface 135 has no altsetting 0 [ 140.178015][ T5759] usb 3-1: config 129 interface 5 has no altsetting 0 [ 140.188734][ T5759] usb 3-1: string descriptor 0 read error: -22 [ 140.211132][ T5759] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 140.220233][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.243501][ T5798] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 140.257408][ T5798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 140.268167][ T5798] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 140.282286][ T5772] ocfs2: Unmounting device (7,1) on (node local) [ 140.303258][ T5798] usb 1-1: string descriptor 0 read error: -22 [ 140.324058][ T5759] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 140.330528][ T5798] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 140.360235][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.371790][ T5759] usb 3-1: MIDIStreaming interface descriptor not found [ 140.400231][ T5798] usb 1-1: config 0 descriptor?? [ 140.410791][ T7093] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 140.432635][ T5798] hub 1-1:0.0: bad descriptor, ignoring hub [ 140.438619][ T5798] hub: probe of 1-1:0.0 failed with error -5 [ 140.514367][ T5798] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 140.575987][ T5759] usb 3-1: USB disconnect, device number 4 [ 140.849960][ T5773] usb 1-1: USB disconnect, device number 3 [ 141.029107][ T7109] mmap: syz.3.559 (7109) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 141.531069][ T966] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 141.721495][ T966] usb 2-1: Using ep0 maxpacket: 32 [ 141.735955][ T966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 141.764627][ T966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 141.794758][ T966] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 141.811149][ T966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.822875][ T966] usb 2-1: Product: syz [ 141.827100][ T966] usb 2-1: Manufacturer: syz [ 141.836066][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'. [ 141.841624][ T966] usb 2-1: SerialNumber: syz [ 141.851224][ T7134] netlink: 660 bytes leftover after parsing attributes in process `syz.3.573'. [ 141.881416][ T966] usb 2-1: config 0 descriptor?? [ 141.910061][ T966] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 142.226564][ T5773] usb 2-1: USB disconnect, device number 6 [ 142.657242][ T7159] netlink: 'syz.0.586': attribute type 3 has an invalid length. [ 143.043705][ T7171] bond3: entered promiscuous mode [ 143.393772][ T7184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.956763][ T7179] loop2: detected capacity change from 0 to 32768 [ 143.980544][ T7179] (syz.2.593,7179,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 144.003884][ T7179] (syz.2.593,7179,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 144.082086][ T7179] JBD2: Ignoring recovery information on journal [ 144.166159][ T7177] loop3: detected capacity change from 0 to 40427 [ 144.220931][ T7177] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 144.227797][ T7177] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 144.249982][ T7179] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 144.303347][ T7177] F2FS-fs (loop3): Found nat_bits in checkpoint [ 144.511616][ T7210] MTD: Couldn't look up '/dev/sg0': -15 [ 144.547936][ T7177] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 144.570955][ T7177] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 144.636264][ T7177] syz.3.594: attempt to access beyond end of device [ 144.636264][ T7177] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 144.702932][ T5769] ocfs2: Unmounting device (7,2) on (node local) [ 144.777958][ T5770] syz-executor: attempt to access beyond end of device [ 144.777958][ T5770] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.811096][ T5770] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 145.171437][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.611'. [ 145.273600][ T28] audit: type=1326 audit(1770488515.592:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc059aeb9 code=0x7ffc0000 [ 145.327161][ T28] audit: type=1326 audit(1770488515.612:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc059aeb9 code=0x7ffc0000 [ 145.384922][ T28] audit: type=1326 audit(1770488515.612:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc059aeb9 code=0x7ffc0000 [ 145.450959][ T5844] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 145.468756][ T28] audit: type=1326 audit(1770488515.632:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8dc059aeb9 code=0x7ffc0000 [ 145.528186][ T28] audit: type=1326 audit(1770488515.632:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc059aeb9 code=0x7ffc0000 [ 145.592100][ T28] audit: type=1326 audit(1770488515.632:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc059aeb9 code=0x7ffc0000 [ 145.640609][ T28] audit: type=1326 audit(1770488515.642:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc059aeb9 code=0x7ffc0000 [ 145.684988][ T28] audit: type=1326 audit(1770488515.642:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8dc059aeb9 code=0x7ffc0000 [ 145.715246][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 145.743857][ T5844] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 145.752303][ T5844] usb 1-1: config 0 has no interface number 0 [ 145.778439][ T28] audit: type=1326 audit(1770488515.642:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8dc059aeb9 code=0x7ffc0000 [ 145.821506][ T5844] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 145.830991][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.853979][ T5844] usb 1-1: Product: syz [ 145.860534][ T5844] usb 1-1: Manufacturer: syz [ 145.870574][ T7232] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 145.871124][ T5844] usb 1-1: SerialNumber: syz [ 145.924540][ T5844] usb 1-1: config 0 descriptor?? [ 146.142279][ T7241] loop1: detected capacity change from 0 to 256 [ 146.195279][ T5844] radio-si470x 1-1:0.35: this is not a si470x device. [ 146.236507][ T7241] FAT-fs (loop1): Directory bread(block 64) failed [ 146.250995][ T7241] FAT-fs (loop1): Directory bread(block 65) failed [ 146.257850][ T7241] FAT-fs (loop1): Directory bread(block 66) failed [ 146.284523][ T7241] FAT-fs (loop1): Directory bread(block 67) failed [ 146.316748][ T7241] FAT-fs (loop1): Directory bread(block 68) failed [ 146.344715][ T7241] FAT-fs (loop1): Directory bread(block 69) failed [ 146.371013][ T7241] FAT-fs (loop1): Directory bread(block 70) failed [ 146.377719][ T7241] FAT-fs (loop1): Directory bread(block 71) failed [ 146.406851][ T5844] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 146.414330][ T7241] FAT-fs (loop1): Directory bread(block 72) failed [ 146.426995][ T7241] FAT-fs (loop1): Directory bread(block 73) failed [ 146.441621][ T5844] usb 1-1: USB disconnect, device number 4 [ 146.618985][ T7241] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 146.657465][ T7241] FAT-fs (loop1): Filesystem has been set read-only [ 147.511710][ T5844] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 147.607827][ T7285] loop0: detected capacity change from 0 to 22 [ 147.647548][ T7285] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 147.691330][ T7285] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 147.726692][ T5844] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 147.760356][ T5844] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 147.812119][ T5844] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 147.836174][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.877373][ T7271] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 147.886639][ T7271] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 147.919024][ T5844] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 148.325956][ T5773] usb 2-1: USB disconnect, device number 7 [ 148.344014][ T7303] loop2: detected capacity change from 0 to 8 [ 148.356269][ T7303] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 148.438925][ T7303] process 'syz.2.654' launched './file2' with NULL argv: empty string added [ 148.452126][ T6454] udevd[6454]: incorrect cramfs checksum on /dev/loop2 [ 148.468822][ T7308] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 2, id = 0 [ 148.498651][ T7303] cramfs: Error -3 while decompressing! [ 148.514556][ T5944] udevd[5944]: incorrect cramfs checksum on /dev/loop2 [ 148.527031][ T7303] cramfs: ffffffff973f4368(26)->ffff88806ac61000(4096) [ 148.546719][ T7303] cramfs: bad data blocksize 524314 [ 148.558250][ T7303] cramfs: bad data blocksize 4294442596 [ 148.588674][ T7303] cramfs: Error -3 while decompressing! [ 148.599368][ T6454] udevd[6454]: incorrect cramfs checksum on /dev/loop2 [ 148.608892][ T7303] cramfs: ffffffff973f4368(26)->ffff88806ac61000(4096) [ 149.403117][ T7322] loop1: detected capacity change from 0 to 4096 [ 149.463711][ T7322] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 149.937023][ T7307] loop3: detected capacity change from 0 to 32768 [ 150.023370][ T7307] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 150.074149][ T7307] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 150.183985][ T7336] loop0: detected capacity change from 0 to 4096 [ 150.260086][ T7307] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 150.273168][ T7336] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 150.293672][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.302888][ T5773] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 150.310693][ T5773] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 150.388190][ T7336] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 150.427778][ T7336] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 150.490981][ T5773] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 180ms [ 150.513435][ T7336] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 150.535843][ T5773] gfs2: fsid=syz:syz.0: jid=0: Done [ 150.552897][ T7307] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 150.577186][ T7336] ntfs: volume version 3.1. [ 150.823936][ T5771] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 150.977085][ T7307] gfs2: fsid=syz:syz.0: found 1 quota changes [ 151.215587][ T5770] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 151.215587][ T5770] inode = 11 2339 [ 151.215587][ T5770] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472 [ 151.273076][ T5770] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 151.282728][ T5770] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5770 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 151.294402][ T5770] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 151.303065][ T5770] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 151.322648][ T5770] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 151.332099][ T5770] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 151.346353][ T5770] gfs2: fsid=syz:syz.0: File system withdrawn [ 151.355072][ T5770] CPU: 1 PID: 5770 Comm: syz-executor Not tainted syzkaller #0 [ 151.362702][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 151.372818][ T5770] Call Trace: [ 151.376147][ T5770] [ 151.379119][ T5770] dump_stack_lvl+0x18c/0x250 [ 151.383867][ T5770] ? kobject_uevent_env+0x363/0x8b0 [ 151.389114][ T5770] ? show_regs_print_info+0x20/0x20 [ 151.394361][ T5770] ? load_image+0x400/0x400 [ 151.398903][ T5770] ? kobject_uevent_env+0x363/0x8b0 [ 151.404191][ T5770] gfs2_withdraw+0xb24/0x13d0 [ 151.408924][ T5770] ? gfs2_lm+0x240/0x240 [ 151.413213][ T5770] ? preempt_schedule+0xc0/0xd0 [ 151.418125][ T5770] ? gfs2_consist_inode_i+0xf5/0x110 [ 151.423462][ T5770] gfs2_inode_refresh+0xb89/0x1000 [ 151.428648][ T5770] ? gfs2_inode_metasync+0xf0/0xf0 [ 151.433831][ T5770] ? gfs2_glock_nq+0xd4f/0x1420 [ 151.438743][ T5770] gfs2_instantiate+0x162/0x220 [ 151.443657][ T5770] gfs2_glock_wait+0x1d4/0x2a0 [ 151.448491][ T5770] do_sync+0x4c6/0xe50 [ 151.452620][ T5770] ? gfs2_quota_sync+0x411/0x5a0 [ 151.457640][ T5770] ? bh_get+0x760/0x760 [ 151.461846][ T5770] ? __lock_acquire+0x7d40/0x7d40 [ 151.466907][ T5770] ? do_raw_spin_lock+0x11f/0x2c0 [ 151.472007][ T5770] ? gfs2_quota_sync+0x411/0x5a0 [ 151.476986][ T5770] ? do_raw_spin_unlock+0x121/0x230 [ 151.482243][ T5770] gfs2_quota_sync+0x411/0x5a0 [ 151.487070][ T5770] gfs2_sync_fs+0x4c/0xb0 [ 151.491456][ T5770] sync_filesystem+0xea/0x220 [ 151.496178][ T5770] generic_shutdown_super+0x6f/0x2b0 [ 151.501520][ T5770] kill_block_super+0x44/0x90 [ 151.506233][ T5770] deactivate_locked_super+0x97/0x100 [ 151.511642][ T5770] cleanup_mnt+0x43b/0x4d0 [ 151.516127][ T5770] task_work_run+0x1d4/0x260 [ 151.520823][ T5770] ? task_work_cancel+0x220/0x220 [ 151.525921][ T5770] ? exit_to_user_mode_loop+0x3b/0x110 [ 151.531441][ T5770] exit_to_user_mode_loop+0xe6/0x110 [ 151.536782][ T5770] exit_to_user_mode_prepare+0xee/0x180 [ 151.542386][ T5770] syscall_exit_to_user_mode+0x1a/0x50 [ 151.547895][ T5770] do_syscall_64+0x61/0xa0 [ 151.552378][ T5770] ? clear_bhb_loop+0x40/0x90 [ 151.557097][ T5770] ? clear_bhb_loop+0x40/0x90 [ 151.561821][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.567767][ T5770] RIP: 0033:0x7fa93219c117 [ 151.572234][ T5770] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 151.591888][ T5770] RSP: 002b:00007ffc1b6b1ab8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 151.600355][ T5770] RAX: 0000000000000000 RBX: 00007fa93220471f RCX: 00007fa93219c117 [ 151.608384][ T5770] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1b6b1b70 [ 151.616485][ T5770] RBP: 00007ffc1b6b1b70 R08: 00007ffc1b6b2b70 R09: 00000000ffffffff [ 151.624534][ T5770] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1b6b2c00 [ 151.632549][ T5770] R13: 00007fa93220471f R14: 0000000000024de5 R15: 00007ffc1b6b2c40 [ 151.640585][ T5770] [ 151.643679][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.491644][ T7365] loop1: detected capacity change from 0 to 40427 [ 152.512584][ T7365] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 152.520382][ T7365] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 152.555236][ T7365] F2FS-fs (loop1): invalid crc value [ 152.579043][ T7365] F2FS-fs (loop1): Found nat_bits in checkpoint [ 152.715864][ T7365] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 152.739667][ T7365] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 153.136872][ T7381] loop2: detected capacity change from 0 to 32768 [ 153.256647][ T7381] find_entry called with index >= next_index [ 153.297218][ T7381] find_entry called with index >= next_index [ 153.325483][ T7381] find_entry called with index >= next_index [ 153.360128][ T7381] find_entry called with index >= next_index [ 153.380344][ T7381] find_entry called with index >= next_index [ 153.687496][ T7420] loop2: detected capacity change from 0 to 256 [ 153.756325][ T7420] FAT-fs (loop2): Directory bread(block 64) failed [ 153.799838][ T7420] FAT-fs (loop2): Directory bread(block 65) failed [ 153.819647][ T7420] FAT-fs (loop2): Directory bread(block 66) failed [ 153.841469][ T7420] FAT-fs (loop2): Directory bread(block 67) failed [ 153.861252][ T7420] FAT-fs (loop2): Directory bread(block 68) failed [ 153.879356][ T7420] FAT-fs (loop2): Directory bread(block 69) failed [ 153.891411][ T7421] loop1: detected capacity change from 0 to 4096 [ 153.898030][ T7420] FAT-fs (loop2): Directory bread(block 70) failed [ 153.906964][ T7420] FAT-fs (loop2): Directory bread(block 71) failed [ 153.918921][ T7421] ntfs3: loop1: ino=3, Correct links count -> 2. [ 153.929232][ T7420] FAT-fs (loop2): Directory bread(block 72) failed [ 153.956514][ T7420] FAT-fs (loop2): Directory bread(block 73) failed [ 154.101054][ T5773] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 154.345127][ T5773] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 154.365047][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.396837][ T5773] usb 1-1: Product: syz [ 154.413511][ T5773] usb 1-1: Manufacturer: syz [ 154.418268][ T5773] usb 1-1: SerialNumber: syz [ 154.456538][ T5773] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 154.525449][ T5759] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 154.725510][ T7437] loop1: detected capacity change from 0 to 4096 [ 154.736879][ T7439] netlink: 'syz.3.717': attribute type 2 has an invalid length. [ 154.753619][ T7437] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 154.830016][ T7441] loop2: detected capacity change from 0 to 1024 [ 154.857712][ T7437] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 154.936606][ T7441] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 154.993132][ T7441] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 155.030517][ T7441] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.718: Failed to acquire dquot type 0 [ 155.069945][ T966] usb 1-1: USB disconnect, device number 5 [ 155.097809][ T7441] EXT4-fs error (device loop2): mb_free_blocks:1954: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 155.178243][ T7441] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #13: comm syz.2.718: corrupted inode contents [ 155.201266][ T7441] EXT4-fs error (device loop2): ext4_dirty_inode:6124: inode #13: comm syz.2.718: mark_inode_dirty error [ 155.256998][ T7441] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #13: comm syz.2.718: corrupted inode contents [ 155.275539][ T7449] sctp: [Deprecated]: syz.1.720 (pid 7449) Use of int in max_burst socket option. [ 155.275539][ T7449] Use struct sctp_assoc_value instead [ 155.294799][ T7441] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #13: comm syz.2.718: mark_inode_dirty error [ 155.327936][ T7441] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #13: comm syz.2.718: corrupted inode contents [ 155.341652][ T7441] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 155.350827][ T7441] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #13: comm syz.2.718: corrupted inode contents [ 155.377833][ T7441] EXT4-fs error (device loop2): ext4_truncate:4294: inode #13: comm syz.2.718: mark_inode_dirty error [ 155.413362][ T7441] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 155.432512][ T7441] EXT4-fs (loop2): 1 truncate cleaned up [ 155.459782][ T7441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.602367][ T5759] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 155.618239][ T7441] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 155.628442][ T5759] ath9k_htc: Failed to initialize the device [ 155.640526][ T7441] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 155.681038][ T966] usb 1-1: ath9k_htc: USB layer deinitialized [ 155.691925][ T7441] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.718: Failed to acquire dquot type 0 [ 155.759673][ T7460] loop0: detected capacity change from 0 to 128 [ 155.880233][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.498202][ T7486] netlink: 'syz.2.737': attribute type 63 has an invalid length. [ 156.753000][ T7494] loop2: detected capacity change from 0 to 1024 [ 156.798197][ T7494] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.851580][ T7494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.881082][ T5844] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 156.905537][ T7494] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 156.920638][ T7494] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.741: missing EA_INODE flag [ 156.937949][ T7494] EXT4-fs (loop2): Remounting filesystem read-only [ 157.022002][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.099008][ T5844] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 157.121072][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.149644][ T5844] usb 1-1: Product: syz [ 157.167414][ T5844] usb 1-1: Manufacturer: syz [ 157.173564][ T5844] usb 1-1: SerialNumber: syz [ 157.187663][ T5844] usb 1-1: config 0 descriptor?? [ 157.244211][ T7510] netlink: 68 bytes leftover after parsing attributes in process `syz.2.746'. [ 157.384179][ T28] audit: type=1326 audit(1770488527.702:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc059aeb9 code=0x7ffc0000 [ 157.461219][ T5844] hso 1-1:0.0: Can't find BULK IN endpoint [ 157.482243][ T5844] usb-storage 1-1:0.0: USB Mass Storage device detected [ 157.489375][ T28] audit: type=1326 audit(1770488527.722:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc059aeb9 code=0x7ffc0000 [ 157.528411][ T28] audit: type=1326 audit(1770488527.742:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc059aeb9 code=0x7ffc0000 [ 157.579131][ T7519] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 157.619725][ T28] audit: type=1326 audit(1770488527.742:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc059aeb9 code=0x7ffc0000 [ 157.644742][ T28] audit: type=1326 audit(1770488527.752:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f8dc059aeb9 code=0x7ffc0000 [ 157.667857][ T28] audit: type=1326 audit(1770488527.752:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc059aeb9 code=0x7ffc0000 [ 157.690503][ T28] audit: type=1326 audit(1770488527.752:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc059aeb9 code=0x7ffc0000 [ 157.753324][ T5844] usb 1-1: USB disconnect, device number 6 [ 157.768303][ T28] audit: type=1326 audit(1770488527.752:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.1.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8dc059aeb9 code=0x7ffc0000 [ 158.036133][ T7533] misc userio: No port type given on /dev/userio [ 158.063561][ T7535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.759'. [ 158.383574][ T7547] netlink: 96 bytes leftover after parsing attributes in process `syz.2.765'. [ 158.867336][ T7563] netlink: 36 bytes leftover after parsing attributes in process `syz.3.773'. [ 159.096776][ T7569] loop1: detected capacity change from 0 to 4096 [ 159.129354][ T7569] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 159.300809][ T7569] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 159.589338][ T7583] loop2: detected capacity change from 0 to 764 [ 161.297623][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 161.494767][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 161.513573][ T9] usb 1-1: config 1 interface 0 altsetting 14 endpoint 0x82 has invalid wMaxPacketSize 0 [ 161.539265][ T9] usb 1-1: config 1 interface 0 altsetting 14 bulk endpoint 0x82 has invalid maxpacket 0 [ 161.556987][ T9] usb 1-1: config 1 interface 0 altsetting 14 endpoint 0x3 has invalid maxpacket 1600, setting to 1024 [ 161.568663][ T9] usb 1-1: config 1 interface 0 altsetting 14 bulk endpoint 0x3 has invalid maxpacket 1024 [ 161.582959][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.816'. [ 161.593728][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 161.600575][ T7652] netlink: 68 bytes leftover after parsing attributes in process `syz.2.816'. [ 161.621095][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.816'. [ 161.630667][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.641094][ T7652] netlink: 68 bytes leftover after parsing attributes in process `syz.2.816'. [ 161.653934][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.664367][ T9] usb 1-1: Product: syz [ 161.668589][ T9] usb 1-1: Manufacturer: syz [ 161.674710][ T9] usb 1-1: SerialNumber: syz [ 161.706224][ T7634] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 161.785090][ T7656] loop1: detected capacity change from 0 to 16 [ 161.818002][ T7656] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 161.859728][ T6454] udevd[6454]: incorrect cramfs checksum on /dev/loop1 [ 161.975226][ T9] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 162.021310][ T9] usb 1-1: USB disconnect, device number 7 [ 162.741749][ T7686] loop1: detected capacity change from 0 to 64 [ 162.773846][ T7688] loop2: detected capacity change from 0 to 512 [ 162.796194][ T7688] EXT4-fs: Ignoring removed nobh option [ 162.893224][ T7688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.932312][ T7688] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.999368][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.834'. [ 163.060480][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.834'. [ 163.079281][ T7697] loop1: detected capacity change from 0 to 512 [ 163.128009][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.834'. [ 163.141269][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.152127][ T7697] EXT4-fs: Ignoring removed orlov option [ 163.196496][ T7697] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.274209][ T7702] syz.0.839 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 163.287274][ T7697] EXT4-fs (loop1): orphan cleanup on readonly fs [ 163.390876][ T7697] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.836: bg 0: block 248: padding at end of block bitmap is not set [ 163.436099][ T7697] __quota_error: 1 callbacks suppressed [ 163.436116][ T7697] Quota error (device loop1): write_blk: dquota write failed [ 163.453128][ T7697] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 163.485515][ T7697] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.836: Failed to acquire dquot type 1 [ 163.512976][ T7697] EXT4-fs (loop1): 1 truncate cleaned up [ 163.533194][ T7697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.618807][ T7697] EXT4-fs: Ignoring removed orlov option [ 163.634780][ T7697] EXT4-fs: can't change dax mount option while remounting [ 163.664898][ T7707] loop2: detected capacity change from 0 to 2048 [ 163.714029][ T7707] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.822513][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.938675][ T7714] loop1: detected capacity change from 0 to 764 [ 163.980723][ T7714] 9pnet_fd: p9_fd_create_unix (7714): problem connecting socket: ./file0: -30 [ 164.154696][ T7718] MTD: Attempt to mount non-MTD device "./file0" [ 164.185711][ T7718] ./file0: Can't open blockdev [ 164.451685][ T7730] loop3: detected capacity change from 0 to 8 [ 164.484825][ T7730] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 164.533485][ T7730] cramfs: Error -3 while decompressing! [ 164.564703][ T7730] cramfs: ffffffff973f4348(18)->ffff888074f2d000(4096) [ 164.584609][ T6454] udevd[6454]: incorrect cramfs checksum on /dev/loop3 [ 164.605343][ T7730] cramfs: Error -3 while decompressing! [ 164.629017][ T7730] cramfs: ffffffff973f4348(18)->ffff888074f2d000(4096) [ 164.641899][ T5759] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 164.664663][ T28] audit: type=1800 audit(1770488534.982:37): pid=7730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.850" name="file1" dev="loop3" ino=324 res=0 errno=0 [ 164.687390][ T6454] udevd[6454]: incorrect cramfs checksum on /dev/loop3 [ 164.709050][ T7736] loop1: detected capacity change from 0 to 8 [ 164.716552][ T7736] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 164.767493][ T6454] udevd[6454]: incorrect cramfs checksum on /dev/loop3 [ 164.782927][ T5944] udevd[5944]: incorrect cramfs checksum on /dev/loop1 [ 164.841063][ T5759] usb 1-1: Using ep0 maxpacket: 32 [ 164.853487][ T5759] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.901346][ T5759] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 164.928270][ T5759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.945127][ T5759] usb 1-1: Product: syz [ 164.954887][ T5759] usb 1-1: Manufacturer: syz [ 164.972548][ T5759] usb 1-1: SerialNumber: syz [ 165.002075][ T5759] usb 1-1: config 0 descriptor?? [ 165.025074][ T5759] usb 1-1: bad CDC descriptors [ 165.043388][ T5759] usb 1-1: unsupported MDLM descriptors [ 165.282124][ T9] usb 1-1: USB disconnect, device number 8 [ 166.329714][ T7786] loop1: detected capacity change from 0 to 1024 [ 166.371734][ T7786] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.392195][ T7786] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.402504][ T7786] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 166.441797][ T7786] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 166.469780][ T7787] block device autoloading is deprecated and will be removed. [ 166.492107][ T7786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.585830][ T7793] loop0: detected capacity change from 0 to 2048 [ 166.670449][ T7793] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.765832][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.927160][ T7799] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.884'. [ 166.951614][ T7799] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 166.980179][ T7799] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 167.975042][ T51] Bluetooth: hci2: Malformed Event: 0x02 [ 168.080985][ T966] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 168.102794][ T7839] trusted_key: encrypted_key: master key parameter is missing [ 168.269303][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.907'. [ 168.309934][ T966] usb 1-1: config 1 has an invalid interface number: 28 but max is 0 [ 168.326839][ T966] usb 1-1: config 1 has no interface number 0 [ 168.340704][ T966] usb 1-1: config 1 interface 28 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 168.367370][ T966] usb 1-1: config 1 interface 28 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 168.411029][ T966] usb 1-1: config 1 interface 28 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 168.430875][ T966] usb 1-1: config 1 interface 28 has no altsetting 0 [ 168.455881][ T966] usb 1-1: New USB device found, idVendor=045e, idProduct=0473, bcdDevice=e4.34 [ 168.467164][ T966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.482593][ T966] usb 1-1: Product: syz [ 168.493471][ T966] usb 1-1: Manufacturer: syz [ 168.498212][ T966] usb 1-1: SerialNumber: syz [ 168.516553][ T7830] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 168.536000][ T966] ipaq 1-1:1.28: PocketPC PDA converter detected [ 168.802422][ T966] usb 1-1: PocketPC PDA converter now attached to ttyUSB0 [ 168.888847][ T7862] netlink: 14 bytes leftover after parsing attributes in process `syz.1.916'. [ 168.911474][ T7862] hsr_slave_0: left promiscuous mode [ 168.944481][ T7862] hsr_slave_1: left promiscuous mode [ 169.044886][ T28] audit: type=1326 audit(1770488539.362:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed66f9aeb9 code=0x7ffc0000 [ 169.096924][ T7235] usb 1-1: USB disconnect, device number 9 [ 169.110899][ T28] audit: type=1326 audit(1770488539.382:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed66f9aeb9 code=0x7ffc0000 [ 169.145438][ T7235] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 169.170041][ T7235] ipaq 1-1:1.28: device disconnected [ 169.215867][ T28] audit: type=1326 audit(1770488539.392:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed66f9aeb9 code=0x7ffc0000 [ 169.270967][ T28] audit: type=1326 audit(1770488539.392:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fed66f9aeb9 code=0x7ffc0000 [ 169.309175][ T28] audit: type=1326 audit(1770488539.392:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed66f9aeb9 code=0x7ffc0000 [ 169.377592][ T28] audit: type=1326 audit(1770488539.392:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed66f9aeb9 code=0x7ffc0000 [ 169.464257][ T28] audit: type=1326 audit(1770488539.392:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed66f9aeb9 code=0x7ffc0000 [ 169.521216][ T28] audit: type=1326 audit(1770488539.402:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fed66f9aeb9 code=0x7ffc0000 [ 169.560951][ T28] audit: type=1326 audit(1770488539.402:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fed66f9aeb9 code=0x7ffc0000 [ 169.610325][ T28] audit: type=1326 audit(1770488539.742:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed66f9aeb9 code=0x7ffc0000 [ 169.751290][ T7877] netlink: 260 bytes leftover after parsing attributes in process `syz.2.922'. [ 169.977866][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.926'. [ 170.018963][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.926'. [ 170.061289][ T7884] loop2: detected capacity change from 0 to 4096 [ 170.191832][ T7891] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.324121][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.931'. [ 170.334142][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.931'. [ 170.367693][ T7895] netlink: 20 bytes leftover after parsing attributes in process `syz.0.931'. [ 170.888676][ T7910] loop2: detected capacity change from 0 to 512 [ 171.003027][ T7910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 171.107993][ T7910] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.202233][ T7910] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.938: Failed to acquire dquot type 0 [ 171.325221][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 171.822446][ T7935] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 171.868984][ T7937] C: renamed from lo (while UP) [ 171.888668][ T7937] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 172.069287][ T7943] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 172.108525][ T7943] exFAT-fs (nullb0): invalid boot record signature [ 172.117553][ T7943] exFAT-fs (nullb0): failed to read boot sector [ 172.130991][ T7943] exFAT-fs (nullb0): failed to recognize exfat type [ 172.475631][ T7953] libceph: resolve '0.0' (ret=-3): failed [ 172.684516][ T7964] loop0: detected capacity change from 0 to 64 [ 172.822909][ T7964] [ 172.825398][ T7964] ====================================================== [ 172.832452][ T7964] WARNING: possible circular locking dependency detected [ 172.839521][ T7964] syzkaller #0 Not tainted [ 172.843995][ T7964] ------------------------------------------------------ [ 172.851075][ T7964] syz.0.962/7964 is trying to acquire lock: [ 172.857007][ T7964] ffff888059c860b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0 [ 172.866428][ T7964] [ 172.866428][ T7964] but task is already holding lock: [ 172.873830][ T7964] ffff88802537b4f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xff/0x1380 [ 172.884693][ T7964] [ 172.884693][ T7964] which lock already depends on the new lock. [ 172.884693][ T7964] [ 172.895206][ T7964] [ 172.895206][ T7964] the existing dependency chain (in reverse order) is: [ 172.904242][ T7964] [ 172.904242][ T7964] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 172.913573][ T7964] __mutex_lock+0x136/0xcc0 [ 172.918638][ T7964] hfs_extend_file+0xff/0x1380 [ 172.923953][ T7964] hfs_bmap_reserve+0x107/0x430 [ 172.929347][ T7964] __hfs_ext_write_extent+0x1fa/0x470 [ 172.935265][ T7964] hfs_ext_write_extent+0x17f/0x210 [ 172.941011][ T7964] hfs_write_inode+0xdc/0x880 [ 172.946238][ T7964] __writeback_single_inode+0x705/0xec0 [ 172.952335][ T7964] writeback_sb_inodes+0x7cd/0xf50 [ 172.957999][ T7964] wb_writeback+0x46a/0xbf0 [ 172.963060][ T7964] wb_workfn+0x400/0xe60 [ 172.967947][ T7964] process_scheduled_works+0xa5d/0x15d0 [ 172.974083][ T7964] worker_thread+0xa55/0xfc0 [ 172.979223][ T7964] kthread+0x2fa/0x390 [ 172.983841][ T7964] ret_from_fork+0x48/0x80 [ 172.989163][ T7964] ret_from_fork_asm+0x11/0x20 [ 172.994480][ T7964] [ 172.994480][ T7964] -> #0 (&tree->tree_lock/1){+.+.}-{3:3}: [ 173.002428][ T7964] __lock_acquire+0x2df1/0x7d40 [ 173.007823][ T7964] lock_acquire+0x19e/0x420 [ 173.012887][ T7964] __mutex_lock+0x136/0xcc0 [ 173.017973][ T7964] hfs_find_init+0x17e/0x1f0 [ 173.023190][ T7964] hfs_extend_file+0x361/0x1380 [ 173.028602][ T7964] hfs_bmap_reserve+0x107/0x430 [ 173.034006][ T7964] hfs_cat_create+0x1fe/0x6b0 [ 173.039235][ T7964] hfs_create+0x66/0xd0 [ 173.043952][ T7964] path_openat+0x12a0/0x3230 [ 173.049100][ T7964] do_filp_open+0x1f5/0x430 [ 173.054234][ T7964] do_sys_openat2+0x134/0x1d0 [ 173.059597][ T7964] __x64_sys_creat+0x90/0xb0 [ 173.064751][ T7964] do_syscall_64+0x55/0xa0 [ 173.069998][ T7964] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.076446][ T7964] [ 173.076446][ T7964] other info that might help us debug this: [ 173.076446][ T7964] [ 173.086843][ T7964] Possible unsafe locking scenario: [ 173.086843][ T7964] [ 173.094328][ T7964] CPU0 CPU1 [ 173.099723][ T7964] ---- ---- [ 173.105113][ T7964] lock(&HFS_I(tree->inode)->extents_lock); [ 173.111158][ T7964] lock(&tree->tree_lock/1); [ 173.118396][ T7964] lock(&HFS_I(tree->inode)->extents_lock); [ 173.126925][ T7964] lock(&tree->tree_lock/1); [ 173.131643][ T7964] [ 173.131643][ T7964] *** DEADLOCK *** [ 173.131643][ T7964] [ 173.139813][ T7964] 4 locks held by syz.0.962/7964: [ 173.144862][ T7964] #0: ffff8880250c0418 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 173.154159][ T7964] #1: ffff88802537bd38 (&type->i_mutex_dir_key#8){++++}-{3:3}, at: path_openat+0x7dc/0x3230 [ 173.164464][ T7964] #2: ffff8880783f80b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0 [ 173.174076][ T7964] #3: ffff88802537b4f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xff/0x1380 [ 173.185337][ T7964] [ 173.185337][ T7964] stack backtrace: [ 173.191416][ T7964] CPU: 0 PID: 7964 Comm: syz.0.962 Not tainted syzkaller #0 [ 173.198722][ T7964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 173.208802][ T7964] Call Trace: [ 173.212111][ T7964] [ 173.215065][ T7964] dump_stack_lvl+0x18c/0x250 [ 173.219783][ T7964] ? load_image+0x400/0x400 [ 173.224331][ T7964] ? show_regs_print_info+0x20/0x20 [ 173.229582][ T7964] ? print_circular_bug+0x12b/0x1a0 [ 173.234849][ T7964] check_noncircular+0x2fc/0x400 [ 173.239823][ T7964] ? look_up_lock_class+0x75/0x140 [ 173.244970][ T7964] ? print_deadlock_bug+0x5d0/0x5d0 [ 173.250199][ T7964] ? lockdep_lock+0xf5/0x230 [ 173.254831][ T7964] ? _find_first_zero_bit+0xd3/0x100 [ 173.260149][ T7964] __lock_acquire+0x2df1/0x7d40 [ 173.265038][ T7964] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 173.270957][ T7964] ? verify_lock_unused+0x140/0x140 [ 173.276180][ T7964] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 173.282098][ T7964] ? _raw_spin_unlock+0x40/0x40 [ 173.286974][ T7964] ? stack_trace_save+0xaa/0x100 [ 173.291956][ T7964] ? stack_trace_snprint+0xf0/0xf0 [ 173.297111][ T7964] lock_acquire+0x19e/0x420 [ 173.301655][ T7964] ? hfs_find_init+0x17e/0x1f0 [ 173.306458][ T7964] ? hfs_extend_file+0x361/0x1380 [ 173.311512][ T7964] ? hfs_bmap_reserve+0x107/0x430 [ 173.316586][ T7964] ? __x64_sys_creat+0x90/0xb0 [ 173.321403][ T7964] ? __might_sleep+0xe0/0xe0 [ 173.326032][ T7964] ? read_lock_is_recursive+0x20/0x20 [ 173.331528][ T7964] __mutex_lock+0x136/0xcc0 [ 173.336064][ T7964] ? hfs_find_init+0x17e/0x1f0 [ 173.340864][ T7964] ? hfs_find_init+0x17e/0x1f0 [ 173.345660][ T7964] ? mutex_lock_nested+0x20/0x20 [ 173.350627][ T7964] ? __kmem_cache_alloc_node+0x13a/0x250 [ 173.356296][ T7964] ? hfs_find_init+0xa7/0x1f0 [ 173.361003][ T7964] ? hfs_find_init+0xa7/0x1f0 [ 173.365749][ T7964] ? __kmalloc+0xe2/0x230 [ 173.370125][ T7964] hfs_find_init+0x17e/0x1f0 [ 173.374839][ T7964] hfs_extend_file+0x361/0x1380 [ 173.379721][ T7964] ? hfs_get_block+0xc50/0xc50 [ 173.384512][ T7964] ? rcu_is_watching+0x15/0xb0 [ 173.389316][ T7964] ? trace_contention_end+0x39/0xe0 [ 173.394537][ T7964] ? __mutex_lock+0x315/0xcc0 [ 173.399255][ T7964] ? mutex_lock_nested+0x20/0x20 [ 173.404224][ T7964] hfs_bmap_reserve+0x107/0x430 [ 173.409103][ T7964] hfs_cat_create+0x1fe/0x6b0 [ 173.413838][ T7964] ? preempt_schedule+0xc0/0xd0 [ 173.418728][ T7964] ? preempt_schedule_common+0x82/0xc0 [ 173.424237][ T7964] ? hfs_cat_build_key+0x170/0x170 [ 173.429382][ T7964] ? preempt_schedule+0xc0/0xd0 [ 173.434278][ T7964] ? _raw_spin_unlock+0x3a/0x40 [ 173.439155][ T7964] ? hfs_new_inode+0x92d/0xc00 [ 173.443951][ T7964] hfs_create+0x66/0xd0 [ 173.448215][ T7964] ? hfs_lookup+0x320/0x320 [ 173.452747][ T7964] path_openat+0x12a0/0x3230 [ 173.457393][ T7964] ? do_filp_open+0x430/0x430 [ 173.462101][ T7964] ? __virt_addr_valid+0x18c/0x540 [ 173.467240][ T7964] do_filp_open+0x1f5/0x430 [ 173.471781][ T7964] ? vfs_tmpfile+0x490/0x490 [ 173.476498][ T7964] ? _raw_spin_unlock+0x28/0x40 [ 173.481373][ T7964] ? alloc_fd+0x58f/0x630 [ 173.485822][ T7964] do_sys_openat2+0x134/0x1d0 [ 173.490525][ T7964] ? do_sys_open+0xe0/0xe0 [ 173.494981][ T7964] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 173.500997][ T7964] ? lock_chain_count+0x20/0x20 [ 173.505877][ T7964] __x64_sys_creat+0x90/0xb0 [ 173.510504][ T7964] do_syscall_64+0x55/0xa0 [ 173.514950][ T7964] ? clear_bhb_loop+0x40/0x90 [ 173.519661][ T7964] ? clear_bhb_loop+0x40/0x90 [ 173.524367][ T7964] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.530286][ T7964] RIP: 0033:0x7f031e59aeb9 [ 173.536657][ T7964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.556388][ T7964] RSP: 002b:00007f031f48e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 173.564839][ T7964] RAX: ffffffffffffffda RBX: 00007f031e815fa0 RCX: 00007f031e59aeb9 [ 173.572857][ T7964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 173.580857][ T7964] RBP: 00007f031e608c1f R08: 0000000000000000 R09: 0000000000000000 [ 173.589120][ T7964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.597123][ T7964] R13: 00007f031e816038 R14: 00007f031e815fa0 R15: 00007ffd09cc2c68 [ 173.605132][ T7964] [ 173.671037][ T7964] hfs: request for non-existent node 327680 in B*Tree [ 173.677960][ T7964] hfs: request for non-existent node 327680 in B*Tree