last executing test programs: 2m14.287917572s ago: executing program 2 (id=1363): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) 2m14.048071816s ago: executing program 2 (id=1366): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) 2m13.80471389s ago: executing program 2 (id=1371): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000001c0)={0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 2m13.622541833s ago: executing program 2 (id=1374): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x44c, &(0x7f0000000d80)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x14a0, &(0x7f0000000740)=ANY=[], 0x1, 0x0, 0x0) 2m13.295938179s ago: executing program 2 (id=1376): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x2283, &(0x7f0000000040)=0x85) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="c56961c0c9d8557bf0c19d371bcc3f8ffa00ba1aa3adedb44d45bc5ca49764d6cba6b9b99189ffab370f", 0x2a}], 0x1) 2m12.731981448s ago: executing program 2 (id=1379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_ADDR={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) 2m12.207342076s ago: executing program 32 (id=1379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_ADDR={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) 2m4.798533623s ago: executing program 3 (id=1435): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r0], 0x54}}, 0x0) 2m4.506973358s ago: executing program 3 (id=1437): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f00000007c0)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000280)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba650596000000004000000200010000000000", 0x35}], 0x1}, 0x4) 2m4.287684591s ago: executing program 3 (id=1439): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x5, 0x2, 0x7ffd}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x3c}}, 0x0) 2m4.051781545s ago: executing program 3 (id=1440): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES32], 0x1, 0x1c7, &(0x7f0000000200)="$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") mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m3.301105207s ago: executing program 3 (id=1446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) 2m2.830649875s ago: executing program 3 (id=1447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000004880)={0x40, r1, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) 2m2.191205085s ago: executing program 33 (id=1447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000004880)={0x40, r1, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) 3.708411281s ago: executing program 1 (id=2568): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, 0x0, 0x321, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044084}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) 3.613188243s ago: executing program 1 (id=2570): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4fc, 0x5d8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x5, 0xa, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0xb, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f00000001c0)={0x20, 0x21, 0x28, {0x28, 0xf, "ab53f320df4c7265e77a18676803b959c59416eb797a9d7950cd3327e43d5c6bbd0f43767287"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.064129362s ago: executing program 0 (id=2579): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) r0 = io_uring_setup(0x588f, &(0x7f00000000c0)={0x0, 0xce13, 0x3018, 0x2, 0x31c}) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000)={[0x2000000]}, 0x18) 3.035919382s ago: executing program 4 (id=2581): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000240)={0xb, 0x724f, 0xffffffffffffffff, 0x200000000000b, 0x7, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x10, 0xfffffffffffffffe, 0xa, 0x7fffffff, 0x5, 0x8000000b, 0x80000000000000, 0xcc5, 0xfffffffffffffffd, 0x85, 0x3, 0x3, 0x5, 0x3, 0x200000005, 0xfffffffffffffffe, 0x3, 0xa}) 2.880631215s ago: executing program 0 (id=2582): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setstatus(r1, 0x4, 0x6c00) readv(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/225, 0xe1}], 0x1) 2.805071816s ago: executing program 4 (id=2583): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "050000009582"}}) 2.645594868s ago: executing program 4 (id=2585): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004500)={0x2020}, 0xfffffe0c) 2.635517558s ago: executing program 0 (id=2593): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r1, 0x1, 0xfffffffd, 0x25dfdbfc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) 2.478305941s ago: executing program 0 (id=2586): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r0], 0xfd, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x2010014, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2.254385824s ago: executing program 0 (id=2588): r0 = io_uring_setup(0x7d1, &(0x7f0000000580)={0x0, 0xddf9, 0x2, 0xfffffffe, 0x183}) close_range(r0, r0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x0) 1.606346555s ago: executing program 1 (id=2594): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fcntl$notify(r0, 0x402, 0x29) getdents64(r0, &(0x7f0000000000)=""/68, 0x44) 1.449892547s ago: executing program 1 (id=2595): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) 1.416984518s ago: executing program 5 (id=2596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x321, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x14}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) 1.351858369s ago: executing program 4 (id=2597): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b40)={0x18, r1, 0x1, 0x4070bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80d0}, 0x4800) 1.26998123s ago: executing program 5 (id=2598): memfd_create(0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ca, &(0x7f0000000500)="$eJzs3EtvG0UcAPD/2nn0nVDKow9ooCAiCkmTFugBCYFA6gUJCQ5wDGmoStMWNUGiVUUThMoR8QkKRyQ+ASe4IOAE4griipAq1EsLB2S0693ErlPXtZM41L+fZHvG+5iZnR3veGd3A+hZI+lbErEtIn6NiKFqtH6GkerHjWsXp/++dnE6iUrl9b8Gs/muX7s4XcxaLLc1j4yWIkofJ7F3hXTnzl84NTU7O3Muj4/Pn35vfO78hadPnp46MXNi5szk0aNHDk889+zkM22Va9NN8bRc1/d8eHbf7mNvffbqdCXe/uGrNL/b8um15agabivdWiMxEpVKpVKq+3Yge3+847VvLNsjYjEPJ31dzgwtK0dEWl39WfsfinIsV95QvPJRVzMHrKn0+DTY8G05/+xL0umbauZND2cV4C6xGN3OAdAdxRE//f9bvNar77ERXH0xfZ/Jyn8jf1Wn9EX6vz0Zrv5jL69R+tsikoWIK28u/HMlVjwPAQCwur5J+z9PrdT/K8X9NfPtiIihC9URnoMRsTMi7o2IXRFxX0Q27wMR8eAdpp+NPy0uxxv7Pz9vbrNoLUn7f8/nY1v1/b+lUZvhch7bno0K9SfvnJydOZRvk9HoH0zjE03S+PblXz691bS0/Gnfr3il6Rd9wTwff/bddILu+NT8VCdlrnV1MWJPX335qyMAydJIQFrruyNiTxvrT7fZySe/3JeGd2xtnH778jez0EaO6lW+iHiiWv8LUVf/y6OgSXWI5Fbjk+ObYnbm0HixVzT68afLr9XG+2vCnZW/c2n9b1lx/8/LXzSDYrx2rsUVDywHL//2Sb7Oxqbc7v4/kLxRl8wHU/Pz5yYiBgai8fvJ5WWLeDF/Wv7RAxGX84Hg2va/M+Lfz/Pl9kZEuhM/FBEPR8T+PO+PRMSjEXGgyab4/qXH3m2+sW5X//3NF+9AWv7jzeo/YjipHa9vI1A+9d3XxcqWqjL/cWmt/o9kodH8m1Z+/1rN4GpsQwAAANjoStkYdFIaWwqXSmNj1Wv4d8WW0uzZufmDI/H+mePVa+WHo79UnOkaqjkfOpFfMV/EJ2+KH46Ie7IrjTZn8bHps7Pbu1146HFbb9H+U3+s1UUvwMZRd7/W7e63S9Y2L8D66lthYBboDS3fr7121yEAXeJ5DdC7tH/oXSu1/0sRN7qQFWBd3eHR/4W1ygfQDc1+AZzyg7ub///Qu7R/6EmNt8QXlwK1c6f/cmDnsY4Wv/NA8ZyKdUo0ah+J0VGgvDFyWBwDWk4iSutXuau/t7S/+O+rlo39eWAwe7T2pZb23kurtNe1tv8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8//0XAAD//5/B0CE=") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 1.155215362s ago: executing program 0 (id=2599): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file2\x00', 0x4000010, &(0x7f0000000180)={[{@filestreams}, {@quota}, {@discard}, {@qnoenforce}, {@prjquota}, {@dax}, {@sunit}, {@filestreams}, {@largeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) lseek(r0, 0x6, 0x0) 1.141122082s ago: executing program 1 (id=2600): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1bb9ec930dabfc165907d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fc9602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31c0971007f269f873e14e5fe3c46c0ac2b22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b98ade053b2f9b7918"], 0x1, 0x62d0, &(0x7f000001fb40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1.104024333s ago: executing program 4 (id=2601): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x10e, 0x3ff, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) 966.133555ms ago: executing program 5 (id=2602): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff, 0x0, 0x400}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x5c, 0x0, 0x4, 0x0, 0x2, 0x58, 0x7}}}}}]}, 0x44}}, 0x0) 795.711808ms ago: executing program 4 (id=2603): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x8, "", [{{0x9, 0x4, 0x0, 0x5f, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x8, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x20, 0x8, 0x28, {0x28, 0xc, "cd62138526792c3cbdeace918d0fb74237cc3661d67a0c5544388c76b783c96c931bcba57507"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 731.249129ms ago: executing program 5 (id=2604): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r0, 0x0, 0x4000, 0x800, &(0x7f0000000700)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1000005}, [@null, @default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x80) 598.054761ms ago: executing program 5 (id=2605): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000000000)={[{@umask={'umask', 0x3d, 0xe}}, {@type={'type', 0x3d, "103683de"}}, {}, {}, {@nobarrier}, {@umask={'umask', 0x3d, 0x3}}, {@nls={'nls', 0x3d, 'maccenteuro'}}]}, 0x44, 0x708, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/50, 0x32) 361.772664ms ago: executing program 5 (id=2606): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004500)={0x2020}, 0xfffffe0c) 0s ago: executing program 1 (id=2607): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) socket$nl_route(0x10, 0x3, 0x0) futex(0xfffffffffffffffc, 0x80, 0xfffffffc, 0x0, 0x0, 0x3ffff) kernel console output (not intermixed with test programs): eth2 [ 272.840820][ T9703] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 272.862653][ T9870] netlink: 'syz.3.1439': attribute type 2 has an invalid length. [ 273.091864][ T9875] loop3: detected capacity change from 0 to 64 [ 273.147462][ T9875] MINIX-fs: mounting file system with errors, running fsck is recommended [ 273.169339][ T9703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.264029][ T9703] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.328511][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.337144][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.378665][ T9875] overlayfs: upper fs needs to support d_type. [ 273.398599][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.405899][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.446649][ T9875] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 273.487764][ T9875] overlayfs: failed to set xattr on upper [ 273.536769][ T9875] overlayfs: ...falling back to redirect_dir=nofollow. [ 273.543701][ T9875] overlayfs: ...falling back to index=off. [ 273.562156][ T9875] overlayfs: ...falling back to uuid=null. [ 273.736625][ T5777] VFS: Lookup of '.¨' in minix loop3 would have caused loop [ 273.750142][ T5777] VFS: Lookup of '.¨' in minix loop3 would have caused loop [ 273.858723][ T5817] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 274.084084][ T5817] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 274.093067][ T9703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.108262][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 274.142991][ T5817] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 274.194748][ T5817] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 274.238396][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.246871][ T5086] Bluetooth: hci1: command tx timeout [ 274.275004][ T5817] usb 2-1: config 0 descriptor?? [ 274.280984][ T9885] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 274.376977][ T135] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.628054][ T135] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.746916][ T5817] cypress 0003:04B4:0001.0015: unexpected long global item [ 274.769967][ T135] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.780271][ T5817] cypress 0003:04B4:0001.0015: parse failed [ 274.780340][ T5817] cypress: probe of 0003:04B4:0001.0015 failed with error -22 [ 275.008295][ T135] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.019709][ T5779] usb 2-1: USB disconnect, device number 13 [ 275.226645][ T9703] veth0_vlan: entered promiscuous mode [ 275.277804][ T9703] veth1_vlan: entered promiscuous mode [ 275.481048][ T9703] veth0_macvtap: entered promiscuous mode [ 275.513911][ T9703] veth1_macvtap: entered promiscuous mode [ 275.545462][ T135] tipc: Left network mode [ 275.583754][ T9703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.619332][ T9703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.662032][ T9703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.672540][ T9703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.735081][ T9703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.777341][ T9703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.805336][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.830800][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.841902][ T9703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.864708][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.901245][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.910885][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.918357][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.154946][ T9703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.187673][ T9703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.208655][ T9703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.241203][ T9703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.261343][ T9703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.282139][ T9703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.308531][ T9703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.392576][ T9703] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.413504][ T9703] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.442398][ T9703] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.451298][ T9703] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.825965][ T9936] loop1: detected capacity change from 0 to 32768 [ 276.894606][ T9936] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 276.903463][ T9936] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 276.916624][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.958478][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.099836][ T9936] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 277.118452][ T28] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 277.133233][ T28] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 277.193550][ T28] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 56ms [ 277.221366][ T28] gfs2: fsid=syz:syz.0: jid=0: Done [ 277.239489][ T9936] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 277.336124][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.361791][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.817140][ T9936] gfs2: fsid=syz:syz.0: found 1 quota changes [ 278.016377][ T9930] chnl_net:caif_netlink_parms(): no params data found [ 278.172854][ T5775] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 278.172854][ T5775] inode = 11 2339 [ 278.172854][ T5775] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 417 [ 278.192492][ T51] Bluetooth: hci3: command tx timeout [ 278.267601][ T135] hsr_slave_0: left promiscuous mode [ 278.291095][ T135] hsr_slave_1: left promiscuous mode [ 278.296902][ T5775] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 278.332718][ T5775] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5775 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 278.355064][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.367484][ T135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.394127][ T5775] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 278.403839][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.412588][ T5775] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 278.419960][ T135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.449003][ T135] bridge_slave_1: left allmulticast mode [ 278.465929][ T135] bridge_slave_1: left promiscuous mode [ 278.471763][ T135] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.495468][ T5775] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 278.516123][ T5775] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 278.543620][ T5775] gfs2: fsid=syz:syz.0: File system withdrawn [ 278.556086][ T5775] CPU: 1 PID: 5775 Comm: syz-executor Not tainted syzkaller #0 [ 278.563532][ T135] bridge_slave_0: left allmulticast mode [ 278.563732][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 278.579539][ T5775] Call Trace: [ 278.582862][ T5775] [ 278.585837][ T5775] dump_stack_lvl+0x18c/0x250 [ 278.586307][ T135] bridge_slave_0: left promiscuous mode [ 278.590556][ T5775] ? show_regs_print_info+0x20/0x20 [ 278.601397][ T5775] ? load_image+0x420/0x420 [ 278.603147][ T135] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.605939][ T5775] ? kobject_uevent_env+0x368/0x890 [ 278.618232][ T5775] gfs2_withdraw+0xe16/0x1400 [ 278.622982][ T5775] ? gfs2_lm+0x240/0x240 [ 278.627313][ T5775] ? gfs2_consist_inode_i+0xf5/0x110 [ 278.632671][ T5775] gfs2_inode_refresh+0xb3c/0x11a0 [ 278.637838][ T5775] ? gfs2_inode_metasync+0xf0/0xf0 [ 278.643007][ T5775] ? gfs2_glock_nq+0xe2e/0x1440 [ 278.647924][ T5775] gfs2_instantiate+0x162/0x220 [ 278.652834][ T5775] gfs2_glock_wait+0x1d4/0x2a0 [ 278.657658][ T5775] do_sync+0x4b8/0xd90 [ 278.661788][ T5775] ? gfs2_quota_sync+0x411/0x5a0 [ 278.666816][ T5775] ? bh_get+0x760/0x760 [ 278.671022][ T5775] ? gfs2_quota_sync+0x318/0x5a0 [ 278.676012][ T5775] ? gfs2_quota_sync+0x411/0x5a0 [ 278.680992][ T5775] ? do_raw_spin_unlock+0x121/0x230 [ 278.686250][ T5775] ? do_raw_spin_unlock+0x121/0x230 [ 278.691507][ T5775] gfs2_quota_sync+0x411/0x5a0 [ 278.696334][ T5775] gfs2_sync_fs+0x4c/0xb0 [ 278.700715][ T5775] sync_filesystem+0xea/0x220 [ 278.705440][ T5775] generic_shutdown_super+0x6f/0x2b0 [ 278.710778][ T5775] kill_block_super+0x44/0x90 [ 278.715507][ T5775] deactivate_locked_super+0x97/0x100 [ 278.720935][ T5775] cleanup_mnt+0x3d7/0x460 [ 278.725423][ T5775] task_work_run+0x1d4/0x260 [ 278.730078][ T5775] ? task_work_cancel+0x220/0x220 [ 278.735171][ T5775] ? exit_to_user_mode_loop+0x3b/0x110 [ 278.740692][ T5775] exit_to_user_mode_loop+0xe6/0x110 [ 278.746048][ T5775] exit_to_user_mode_prepare+0xee/0x180 [ 278.751656][ T5775] syscall_exit_to_user_mode+0x1a/0x50 [ 278.757176][ T5775] do_syscall_64+0x61/0xb0 [ 278.761643][ T5775] ? clear_bhb_loop+0x40/0x90 [ 278.766367][ T5775] ? clear_bhb_loop+0x40/0x90 [ 278.771095][ T5775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.777065][ T5775] RIP: 0033:0x7f94b059e097 [ 278.781532][ T5775] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 278.801627][ T5775] RSP: 002b:00007ffdc909d0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 278.810097][ T5775] RAX: 0000000000000000 RBX: 00007f94b06322ca RCX: 00007f94b059e097 [ 278.818127][ T5775] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc909d1b0 [ 278.826175][ T5775] RBP: 00007ffdc909d1b0 R08: 00007ffdc909e1b0 R09: 00000000ffffffff [ 278.834396][ T5775] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc909e240 [ 278.842419][ T5775] R13: 00007f94b06322ca R14: 0000000000041144 R15: 00007ffdc909e280 [ 278.850466][ T5775] [ 278.984218][ T135] veth1_macvtap: left promiscuous mode [ 278.990407][ T135] veth0_macvtap: left promiscuous mode [ 278.996330][ T135] veth1_vlan: left promiscuous mode [ 279.002711][ T135] veth0_vlan: left promiscuous mode [ 279.658504][T10005] loop4: detected capacity change from 0 to 1024 [ 279.761107][T10005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 279.795448][T10005] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.821869][ T27] audit: type=1800 audit(1782260931.837:61): pid=10005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1475" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 279.912675][ T9703] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 280.407561][ T51] Bluetooth: hci3: command tx timeout [ 280.641167][ T135] team0 (unregistering): Port device team_slave_1 removed [ 280.708992][ T135] team0 (unregistering): Port device team_slave_0 removed [ 280.764072][ T135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.830569][ T135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.257842][ T135] bond0 (unregistering): Released all slaves [ 281.433824][T10023] tipc: Started in network mode [ 281.439212][T10023] tipc: Node identity 2007ff, cluster identity 4711 [ 281.456073][T10023] tipc: Node number set to 2099199 [ 281.645141][ T9930] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.669821][T10033] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 281.676985][T10033] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 281.685956][ T9930] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.700131][ T9930] bridge_slave_0: entered allmulticast mode [ 281.740569][ T9930] bridge_slave_0: entered promiscuous mode [ 281.746784][T10033] vhci_hcd vhci_hcd.0: Device attached [ 281.770811][ T9930] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.797993][ T9930] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.809120][ T9930] bridge_slave_1: entered allmulticast mode [ 281.834640][ T9930] bridge_slave_1: entered promiscuous mode [ 281.939294][ T9930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.955849][ T9930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.990563][ T28] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 282.035276][ T23] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 282.084318][ T9930] team0: Port device team_slave_0 added [ 282.105103][ T9930] team0: Port device team_slave_1 added [ 282.169432][ T9930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.199529][ T9930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.248373][ T28] usb 1-1: config 0 has no interfaces? [ 282.253972][ T28] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 282.268900][ T9930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.282249][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.322355][ T28] usb 1-1: config 0 descriptor?? [ 282.330300][ T9930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.352726][ T9930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.378696][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.418309][ T9930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.571726][ T9930] hsr_slave_0: entered promiscuous mode [ 282.591749][ T9930] hsr_slave_1: entered promiscuous mode [ 282.595443][ T28] usb 1-1: USB disconnect, device number 17 [ 282.616639][T10034] vhci_hcd: connection closed [ 282.621141][ T51] Bluetooth: hci3: command tx timeout [ 282.632868][ T9930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.658904][ T3527] vhci_hcd: stop threads [ 282.685664][ T9930] Cannot create hsr debugfs directory [ 282.694245][ T3527] vhci_hcd: release socket [ 282.740548][ T3527] vhci_hcd: disconnect device [ 282.759960][ T23] usb 33-1: device descriptor read/64, error -71 [ 283.005822][ T23] vhci_hcd: vhci_device speed not set [ 283.259628][T10075] tipc: Enabling of bearer rejected, media not registered [ 283.492431][ T9930] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 283.575755][ T9930] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 283.627192][ T9930] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 283.697853][ T9930] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 284.025950][ T9930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.035860][T10094] netlink: 209824 bytes leftover after parsing attributes in process `syz.1.1506'. [ 284.107624][ T9930] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.194684][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.201893][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.275706][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.282981][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.466372][ T9930] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 284.529725][ T9930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.862762][ T51] Bluetooth: hci3: command tx timeout [ 285.164440][T10123] loop4: detected capacity change from 0 to 1024 [ 285.178090][T10121] vlan2: entered promiscuous mode [ 285.191528][T10121] bridge0: entered promiscuous mode [ 285.231447][T10123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 285.252677][T10123] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.286912][ T9930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.412587][T10123] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: block 1: comm syz.4.1514: lblock 1 mapped to illegal pblock 1 (length 5) [ 285.428299][T10128] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 285.492753][T10123] EXT4-fs (loop4): Remounting filesystem read-only [ 285.506972][T10128] EXT4-fs (loop4): Remounting filesystem read-only [ 285.696462][ T9703] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 286.143879][T10145] netlink: 'syz.4.1517': attribute type 1 has an invalid length. [ 286.222722][ T9930] veth0_vlan: entered promiscuous mode [ 286.269738][ T9930] veth1_vlan: entered promiscuous mode [ 286.305311][T10149] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1518'. [ 286.402850][ T9930] veth0_macvtap: entered promiscuous mode [ 286.420613][T10151] usb usb9: usbfs: process 10151 (syz.4.1519) did not claim interface 0 before use [ 286.456367][ T9930] veth1_macvtap: entered promiscuous mode [ 286.527386][ T9930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.575954][ T9930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.585887][ T9930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.640407][ T9930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.650332][ T9930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.675970][T10131] loop1: detected capacity change from 0 to 32768 [ 286.704027][ T9930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.721608][ T9930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.728113][T10131] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1515 (10131) [ 286.765025][ T9930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.796215][ T9930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.807911][T10131] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 286.833502][T10131] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 286.839080][ T9930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.854699][T10131] BTRFS info (device loop1): allowing degraded mounts [ 286.868611][T10131] BTRFS info (device loop1): setting nodatasum [ 286.874881][ T9930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.888115][T10131] BTRFS info (device loop1): disabling tree log [ 286.905482][T10131] BTRFS info (device loop1): max_inline at 0 [ 286.915678][ T9930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.921709][T10131] BTRFS info (device loop1): using free space tree [ 286.944046][ T9930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.002009][ T9930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.108224][ T9930] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.164242][ T9930] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.178797][T10131] BTRFS info (device loop1): enabling ssd optimizations [ 287.196184][ T9930] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.204964][ T9930] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.208404][T10131] BTRFS info (device loop1): auto enabling async discard [ 287.310035][T10183] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 287.625499][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.658770][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.779237][ T2884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.825835][ T5775] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 287.837838][ T2884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.168308][ T5792] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (5792) [ 288.648688][ T5817] hid-generic 0004:00A9:0000.0016: unknown main item tag 0x0 [ 288.681093][ T5817] hid-generic 0004:00A9:0000.0016: unknown main item tag 0x2 [ 288.699708][ T5817] hid-generic 0004:00A9:0000.0016: unknown main item tag 0xe [ 288.763766][ T5817] hid-generic 0004:00A9:0000.0016: hidraw0: HID v1.01 Device [syz1] on syz0 [ 289.001824][T10212] fido_id[10212]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 290.935740][T10239] loop4: detected capacity change from 0 to 32768 [ 290.982182][T10239] gfs2: fsid=Ô±rÐÛ»ð_î [ 290.982182][T10239] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM: Trying to join cluster "lock_nolock", "Ô±rÐÛ»ð_î [ 290.982182][T10239] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM" [ 291.073933][T10239] gfs2: fsid=Ô±rÐÛ»ð_î [ 291.073933][T10239] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM: Now mounting FS (format 1801)... [ 291.194587][T10239] gfs2: fsid=Ô±rÐÛ»ð_î [ 291.194587][T10239] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM.s: journal 0 mapped with 5 extents in 0ms [ 291.373902][T10239] gfs2: fsid=Ô±rÐÛ»ð_î [ 291.373902][T10239] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM.s: first mount done, others may mount [ 292.171439][T10276] loop1: detected capacity change from 0 to 40427 [ 292.203405][T10276] F2FS-fs (loop1): invalid crc value [ 292.240498][T10276] F2FS-fs (loop1): Found nat_bits in checkpoint [ 292.427543][T10276] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 292.658146][ T5840] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 292.828359][T10313] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1559'. [ 292.878021][ T5840] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.921678][ T5840] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 292.968161][ T5840] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 292.977291][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.033881][ T5840] usb 5-1: config 0 descriptor?? [ 293.052789][ T5840] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 293.084601][ T5840] dvb-usb: bulk message failed: -22 (3/0) [ 293.101808][ T5840] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 293.135312][ T5840] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 293.150072][ T5840] usb 5-1: media controller created [ 293.157289][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.215110][ T5840] dvb-usb: bulk message failed: -22 (6/0) [ 293.233910][ T5840] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 293.277201][ T5840] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 293.290959][T10298] dvb-usb: bulk message failed: -22 (2/0) [ 293.369091][ T5840] dvb-usb: schedule remote query interval to 150 msecs. [ 293.417859][ T5840] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 293.454925][ T5840] usb 5-1: USB disconnect, device number 2 [ 293.573370][ T5840] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 293.588869][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'. [ 293.705646][ T10] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 293.919141][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 293.927311][ T10] usb 6-1: config 0 has no interface number 0 [ 293.934241][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 293.945964][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 293.959412][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 293.968869][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.983090][ T10] usb 6-1: config 0 descriptor?? [ 293.989329][T10325] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 294.030345][ T10] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 294.069196][ T5836] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 294.287135][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 294.296761][ T5836] usb 1-1: Using ep0 maxpacket: 32 [ 294.308274][ T10] usb 6-1: USB disconnect, device number 2 [ 294.314060][ T5836] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 294.314130][ T5836] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 294.314153][ T5836] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 294.314178][ T5836] usb 1-1: config 1 has no interface number 0 [ 294.362093][ T5836] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 294.373621][ T5836] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 294.391041][ T5836] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 294.406935][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.473263][ T5836] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 294.688633][ T5836] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 295.233200][ T5836] usb 1-1: USB disconnect, device number 18 [ 295.262214][ T5836] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 295.860767][T10394] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1582'. [ 295.907939][T10394] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1582'. [ 296.716314][T10427] loop5: detected capacity change from 0 to 1024 [ 297.667591][T10466] loop4: detected capacity change from 0 to 1024 [ 297.709641][T10466] EXT4-fs: Ignoring removed nobh option [ 297.776093][T10466] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 297.810916][T10466] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 297.869977][T10466] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 297.935644][ T5792] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 299.132234][T10504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1622'. [ 299.382552][T10509] loop5: detected capacity change from 0 to 512 [ 299.438127][T10509] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 299.528968][T10509] EXT4-fs (loop5): 1 truncate cleaned up [ 299.570969][T10509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.756607][T10509] EXT4-fs error (device loop5): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.5.1624: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 299.776854][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.819595][T10509] EXT4-fs error (device loop5) in ext4_delete_entry:2800: Corrupt filesystem [ 299.892031][ T9930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.055003][ T5817] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 300.283411][ T5817] usb 1-1: Using ep0 maxpacket: 32 [ 300.314159][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.345621][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.364927][ T5817] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 300.374037][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.434317][ T5817] usb 1-1: config 0 descriptor?? [ 300.624999][T10513] loop4: detected capacity change from 0 to 40427 [ 300.657937][T10513] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 300.686000][T10513] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 300.709998][T10513] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 300.750702][T10513] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 300.789172][T10513] F2FS-fs (loop4): Image doesn't support compression [ 300.815010][T10513] F2FS-fs (loop4): invalid crc value [ 300.875771][T10513] F2FS-fs (loop4): Found nat_bits in checkpoint [ 300.956515][ T5817] ft260 0003:0403:6030.0017: item fetching failed at offset 0/2 [ 300.985873][ T5817] ft260 0003:0403:6030.0017: failed to parse HID [ 301.017078][ T5817] ft260: probe of 0003:0403:6030.0017 failed with error -22 [ 301.117536][T10513] F2FS-fs (loop4): Start checkpoint disabled! [ 301.171764][T10513] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 301.188953][T10513] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 301.218577][ T10] usb 1-1: USB disconnect, device number 19 [ 301.264428][T10535] loop5: detected capacity change from 0 to 32768 [ 301.296930][T10535] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 301.472300][ T5792] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 301.757808][ T11] kworker/u4:0: attempt to access beyond end of device [ 301.757808][ T11] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 301.808077][ T11] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 301.815724][ T11] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 301.869175][T10559] loop5: detected capacity change from 0 to 4096 [ 301.913756][T10559] ntfs3: loop5: ino=3, Correct links count -> 2. [ 302.492197][T10578] mmap: syz.1.1645 (10578) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 303.058188][T10593] loop1: detected capacity change from 0 to 1024 [ 303.575224][T10608] loop4: detected capacity change from 0 to 2048 [ 303.632685][T10608] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 303.633426][T10608] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 303.635364][T10608] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 303.751834][T10607] loop5: detected capacity change from 0 to 4096 [ 304.170464][T10607] ntfs3: loop5: failed to convert "0080" to cp864 [ 304.552750][T10637] loop1: detected capacity change from 0 to 65 [ 304.609305][T10637] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 304.965746][T10644] netlink: 'syz.4.1666': attribute type 10 has an invalid length. [ 305.039737][T10644] team0: Port device dummy0 added [ 305.058509][ T5817] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 305.073541][T10646] netlink: 'syz.4.1666': attribute type 10 has an invalid length. [ 305.141797][T10646] team0: Port device dummy0 removed [ 305.153085][T10646] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 305.264360][ T5817] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 305.277993][ T5817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 305.315009][ T5817] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 305.329612][ T5817] usb 6-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.00 [ 305.345607][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.371960][ T5817] usb 6-1: config 0 descriptor?? [ 305.409906][T10641] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 305.757233][T10661] IPVS: Error connecting to the multicast addr [ 305.884510][ T5817] hid (null): global environment stack underflow [ 306.164571][ T5817] usb 6-1: USB disconnect, device number 3 [ 306.689845][T10696] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1685'. [ 306.725246][T10696] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1685'. [ 307.202446][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1689'. [ 307.227886][ T5840] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 307.235363][T10709] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.235478][T10709] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 307.520458][ T5840] usb 5-1: Using ep0 maxpacket: 32 [ 307.543352][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.560201][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.590840][ T5840] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 307.592130][T10727] Bluetooth: MGMT ver 1.22 [ 307.603104][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.615549][ T5840] usb 5-1: config 0 descriptor?? [ 307.655815][ T5840] hub 5-1:0.0: USB hub found [ 307.708701][ T23] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 307.893699][ T5840] hub 5-1:0.0: 4 ports detected [ 307.907987][ T5840] hub 5-1:0.0: insufficient power available to use all downstream ports [ 307.968900][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 307.979600][ T23] usb 2-1: not running at top speed; connect to a high speed hub [ 307.991463][ T23] usb 2-1: config 0 has an invalid interface number: 175 but max is 0 [ 308.010277][ T23] usb 2-1: config 0 has no interface number 0 [ 308.016520][ T23] usb 2-1: config 0 interface 175 has no altsetting 0 [ 308.028169][ T23] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice=a3.02 [ 308.038875][ T23] usb 2-1: New USB device strings: Mfr=120, Product=243, SerialNumber=26 [ 308.047778][ T23] usb 2-1: Product: syz [ 308.052396][ T23] usb 2-1: Manufacturer: syz [ 308.057070][ T23] usb 2-1: SerialNumber: syz [ 308.084101][ T23] usb 2-1: config 0 descriptor?? [ 308.116335][ T5840] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 308.137414][ T5840] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 308.174767][ T5840] usbhid 5-1:0.0: can't add hid device: -71 [ 308.189657][ T5840] usbhid: probe of 5-1:0.0 failed with error -71 [ 308.254073][ T5840] usb 5-1: USB disconnect, device number 3 [ 308.329122][ T23] usb-storage 2-1:0.175: USB Mass Storage device detected [ 308.381745][T10750] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1703'. [ 308.395514][T10750] IPVS: Error joining to the multicast group [ 308.422641][ T23] usb 2-1: USB disconnect, device number 14 [ 308.910940][ T5840] IPVS: starting estimator thread 0... [ 308.980617][ T5817] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 309.023328][T10771] IPVS: using max 22 ests per chain, 52800 per kthread [ 309.205026][ T5817] usb 1-1: Using ep0 maxpacket: 16 [ 309.221504][ T5817] usb 1-1: config 0 interface 0 has no altsetting 0 [ 309.230356][ T5817] usb 1-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 309.244754][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.256175][ T5817] usb 1-1: config 0 descriptor?? [ 309.375998][ T5840] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 309.478649][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 309.533056][ T5817] usbhid 1-1:0.0: can't add hid device: -71 [ 309.558005][ T5817] usbhid: probe of 1-1:0.0 failed with error -71 [ 309.573779][ T5817] usb 1-1: USB disconnect, device number 20 [ 309.590744][ T5840] usb 5-1: Using ep0 maxpacket: 16 [ 309.627456][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.653393][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.675430][ T5840] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 309.704856][ T5840] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 309.716934][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.723116][ T10] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 309.741759][ T5840] usb 5-1: config 0 descriptor?? [ 309.746414][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.767981][ T10] usb 2-1: config 0 descriptor?? [ 310.230624][ T5840] microsoft 0003:045E:07DA.0019: No inputs registered, leaving [ 310.241487][ T10] hackrf 2-1:0.0: Board ID: 00 [ 310.259586][ T5840] microsoft 0003:045E:07DA.0019: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 310.263624][ T10] hackrf 2-1:0.0: Firmware version: �—U ÄÞÊÏÖý(Ejfÿ_÷Aoîâ’ [ 310.285603][ T5840] microsoft 0003:045E:07DA.0019: no inputs found [ 310.292003][ T5840] microsoft 0003:045E:07DA.0019: could not initialize ff, continuing anyway [ 310.354997][ T10] hackrf 2-1:0.0: Registered as swradio24 [ 310.391530][ T10] videodev: could not get a free minor [ 310.424096][ T10] hackrf 2-1:0.0: Failed to register as video device (-23) [ 310.489500][ T10] hackrf: probe of 2-1:0.0 failed with error -23 [ 310.509339][ T5840] usb 5-1: USB disconnect, device number 4 [ 310.523004][T10805] fido_id[10805]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0019/report_descriptor': No such device [ 310.561257][ T10] usb 2-1: USB disconnect, device number 15 [ 310.690883][T10814] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1723'. [ 310.992058][T10801] loop5: detected capacity change from 0 to 32768 [ 311.088253][T10827] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 311.544427][T10835] loop1: detected capacity change from 0 to 2368 [ 311.760524][T10844] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1730'. [ 312.143307][T10856] nbd: must specify a size in bytes for the device [ 312.601820][T10876] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1750'. [ 312.612536][T10876] openvswitch: netlink: Tunnel attr 255 out of range max 16 [ 313.777846][T10885] loop4: detected capacity change from 0 to 32768 [ 313.853224][T10885] (syz.4.1755,10885,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 313.886334][T10885] (syz.4.1755,10885,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 314.039525][T10885] JBD2: Ignoring recovery information on journal [ 314.179406][T10885] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 314.293916][T10885] (syz.4.1755,10885,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 314.559813][T10885] (syz.4.1755,10885,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 314.633141][T10885] (syz.4.1755,10885,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 314.666639][T10885] (syz.4.1755,10885,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 314.705728][T10885] (syz.4.1755,10885,1):ocfs2_quota_read:201 ERROR: status = -5 [ 314.725575][T10885] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 314.753064][T10885] (syz.4.1755,10885,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 314.847217][T10954] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1780'. [ 314.908283][ T9703] ocfs2: Unmounting device (7,4) on (node local) [ 315.072271][T10959] tmpfs: Cannot retroactively limit inodes [ 315.590702][T10969] loop4: detected capacity change from 0 to 8192 [ 316.735263][T11002] loop5: detected capacity change from 0 to 4096 [ 316.771561][T11002] ntfs3: loop5: ino=3, Correct links count -> 2. [ 316.942266][T11002] ntfs3: loop5: failed to convert "0080" to cp874 [ 316.974337][T11002] ntfs3: loop5: failed to convert name for inode 1e. [ 317.287600][T11029] loop5: detected capacity change from 0 to 256 [ 319.695627][ T5817] IPVS: starting estimator thread 0... [ 319.788773][T11106] IPVS: using max 18 ests per chain, 43200 per kthread [ 319.986002][T11084] loop4: detected capacity change from 0 to 32768 [ 320.028739][T11084] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 320.251151][T11084] XFS (loop4): Ending clean mount [ 320.375117][ T9703] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 320.578690][ T23] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 320.833738][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 320.850234][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.873841][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 320.901348][ T23] usb 2-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 320.922210][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.955473][ T23] usb 2-1: config 0 descriptor?? [ 321.026552][T11139] loop4: detected capacity change from 0 to 4096 [ 321.112337][T11145] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.440807][ T28] kernel read not supported for file /adsp1 (pid: 28 comm: kworker/1:1) [ 321.455706][ T23] wacom 0003:056A:0027.001A: unknown main item tag 0x0 [ 321.473645][ T23] wacom 0003:056A:0027.001A: unknown main item tag 0x0 [ 321.508871][ T23] wacom 0003:056A:0027.001A: unknown main item tag 0x0 [ 321.520066][ T23] wacom 0003:056A:0027.001A: unknown main item tag 0x0 [ 321.538081][ T23] wacom 0003:056A:0027.001A: unknown main item tag 0x0 [ 321.551116][ T23] wacom 0003:056A:0027.001A: unknown main item tag 0x0 [ 321.591287][ T23] wacom 0003:056A:0027.001A: unknown main item tag 0x0 [ 321.613370][ T23] wacom 0003:056A:0027.001A: unknown main item tag 0x0 [ 321.655125][ T23] wacom 0003:056A:0027.001A: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 321.708122][ T23] wacom 0003:056A:0027.001A: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.1-1/input0 [ 321.771037][ T23] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0027.001A/input/input17 [ 321.951492][ T23] usb 2-1: USB disconnect, device number 16 [ 322.107044][ T5840] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 322.312632][ T5840] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 322.342566][ T5840] usb 5-1: config 0 has no interface number 0 [ 322.363507][ T5840] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.412178][ T5840] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.438681][ T5840] usb 5-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 322.447819][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.509918][ T5840] usb 5-1: config 0 descriptor?? [ 322.993158][ T5840] uclogic 0003:28BD:0905.001B: Interface probing failed: -22 [ 323.023973][ T5840] uclogic 0003:28BD:0905.001B: interface is invalid, ignoring [ 323.239336][ T5840] usb 5-1: USB disconnect, device number 5 [ 323.635832][T11221] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1864'. [ 323.655913][T11221] netlink: 212 bytes leftover after parsing attributes in process `syz.5.1864'. [ 324.211912][T11241] loop4: detected capacity change from 0 to 4096 [ 324.284072][T11249] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 325.208311][T11281] loop1: detected capacity change from 0 to 1024 [ 325.313657][ T27] audit: type=1800 audit(1782260974.385:62): pid=11281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1886" name="file2" dev="loop1" ino=21 res=0 errno=0 [ 325.558137][T11290] loop1: detected capacity change from 0 to 256 [ 325.582165][T11290] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ(ýÞHVE[*ŒUbCJ Á" or missing value [ 325.638987][T11290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1889'. [ 325.656188][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 325.858863][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 325.875254][ T23] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 325.896193][ T23] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 325.917709][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.938404][ T23] usb 5-1: Product: syz [ 325.942632][ T23] usb 5-1: Manufacturer: syz [ 325.983613][ T23] usb 5-1: SerialNumber: syz [ 326.001392][ T23] usb 5-1: config 0 descriptor?? [ 326.034233][ T23] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 326.065277][ T23] usb 5-1: setting power ON [ 326.077682][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 326.106288][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 326.146130][ T23] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 326.165933][ T23] usb 5-1: media controller created [ 326.264613][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 326.333845][ T23] usb 5-1: selecting invalid altsetting 6 [ 326.353080][ T23] usb 5-1: digital interface selection failed (-22) [ 326.367710][T11286] loop5: detected capacity change from 0 to 32768 [ 326.378916][ T23] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 326.416589][T11286] (syz.5.1888,11286,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 326.431860][ T23] usb 5-1: setting power OFF [ 326.446949][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 326.453257][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 326.479769][ T23] (NULL device *): no alternate interface [ 326.480705][T11286] (syz.5.1888,11286,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 326.592216][T11286] JBD2: Ignoring recovery information on journal [ 326.664862][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 326.753933][ T23] usb 5-1: USB disconnect, device number 6 [ 326.775357][T11286] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 326.853073][T11286] (syz.5.1888,11286,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 327.037018][ T5839] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 327.069811][T11286] (syz.5.1888,11286,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 327.085057][T11286] (syz.5.1888,11286,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 327.098636][T11313] tipc: Enabling of bearer rejected, failed to enable media [ 327.120428][T11286] (syz.5.1888,11286,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 327.130706][T11286] (syz.5.1888,11286,0):ocfs2_quota_read:201 ERROR: status = -5 [ 327.148095][T11286] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 327.161658][T11286] (syz.5.1888,11286,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 327.252726][ T5839] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 327.285744][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.330128][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.379681][ T5839] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 327.422358][ T9930] ocfs2: Unmounting device (7,5) on (node local) [ 327.428907][ T5839] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 327.448908][ T5839] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 327.473941][ T5839] usb 1-1: Manufacturer: syz [ 327.495572][ T5839] usb 1-1: config 0 descriptor?? [ 327.990639][ T5839] appleir 0003:05AC:8243.001C: item fetching failed at offset 0/1 [ 328.013373][ T5839] appleir 0003:05AC:8243.001C: parse failed [ 328.029126][ T5839] appleir: probe of 0003:05AC:8243.001C failed with error -22 [ 328.255014][ T5817] usb 1-1: USB disconnect, device number 21 [ 329.992221][T11401] loop1: detected capacity change from 0 to 512 [ 330.019684][T11401] EXT4-fs: Ignoring removed oldalloc option [ 330.096664][T11401] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 330.135484][T11401] EXT4-fs (loop1): orphan cleanup on readonly fs [ 330.176071][T11401] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 330.264705][T11401] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 330.305800][T11401] EXT4-fs error (device loop1): ext4_ext_check_inode:530: inode #13: comm syz.1.1923: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 330.413292][T11401] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1923: couldn't read orphan inode 13 (err -117) [ 330.436010][T11414] loop5: detected capacity change from 0 to 256 [ 330.466215][T11401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 330.603701][T11401] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 330.644818][T11401] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 330.648830][T11414] FAT-fs (loop5): Directory bread(block 64) failed [ 330.671333][T11401] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2840c09c, mo2=0002] [ 330.682791][T11414] FAT-fs (loop5): Directory bread(block 65) failed [ 330.689648][T11414] FAT-fs (loop5): Directory bread(block 66) failed [ 330.722159][T11414] FAT-fs (loop5): Directory bread(block 67) failed [ 330.751868][T11401] System zones: 0-2, 18-18, 34-34 [ 330.761183][T11414] FAT-fs (loop5): Directory bread(block 68) failed [ 330.772607][T11401] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 330.793492][T11414] FAT-fs (loop5): Directory bread(block 69) failed [ 330.800893][T11414] FAT-fs (loop5): Directory bread(block 70) failed [ 330.807564][T11414] FAT-fs (loop5): Directory bread(block 71) failed [ 330.822172][T11414] FAT-fs (loop5): Directory bread(block 72) failed [ 330.828949][T11414] FAT-fs (loop5): Directory bread(block 73) failed [ 331.005911][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.285583][T11433] loop1: detected capacity change from 0 to 1024 [ 331.316667][T11433] EXT4-fs: Ignoring removed i_version option [ 331.385603][ T5817] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 331.408539][T11433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.596737][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.599258][ T5817] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 331.649701][ T5817] usb 5-1: config 0 interface 0 has no altsetting 0 [ 331.695306][ T5817] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 331.726109][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.762655][ T5817] usb 5-1: config 0 descriptor?? [ 332.072968][T11458] loop1: detected capacity change from 0 to 512 [ 332.094138][T11458] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 332.165771][T11458] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.1938: invalid indirect mapped block 32768 (level 2) [ 332.213592][ T5817] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0909.001D/input/input21 [ 332.228306][T11458] EXT4-fs (loop1): Remounting filesystem read-only [ 332.236180][T11458] EXT4-fs (loop1): 1 orphan inode deleted [ 332.243639][T11458] EXT4-fs (loop1): 1 truncate cleaned up [ 332.250811][T11458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.308686][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.315240][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.341064][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.353986][ T5817] uclogic 0003:28BD:0909.001D: input,hidraw0: USB HID v0.04 Mouse [HID 28bd:0909] on usb-dummy_hcd.4-1/input0 [ 332.455405][ T5817] usb 5-1: USB disconnect, device number 7 [ 332.707936][T11463] fido_id[11463]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 333.187618][T11486] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1945'. [ 333.220742][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1945'. [ 333.703395][T11507] TCP: TCP_TX_DELAY enabled [ 334.572430][ T27] audit: type=1326 audit(1782260983.048:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11530 comm="syz.4.1961" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba939ce59 code=0x7ffc0000 [ 334.596665][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.667852][ T27] audit: type=1326 audit(1782260983.048:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11530 comm="syz.4.1961" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba939ce59 code=0x7ffc0000 [ 334.714355][T11506] loop1: detected capacity change from 0 to 32768 [ 334.755120][T11506] (syz.1.1950,11506,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 334.765681][ T27] audit: type=1326 audit(1782260983.122:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11530 comm="syz.4.1961" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba939ce59 code=0x7ffc0000 [ 334.792533][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.803027][T11506] (syz.1.1950,11506,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 334.834343][T11506] JBD2: Ignoring recovery information on journal [ 334.859406][ T27] audit: type=1326 audit(1782260983.141:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11530 comm="syz.4.1961" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f4ba939ce59 code=0x7ffc0000 [ 334.884286][ T27] audit: type=1326 audit(1782260983.141:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11530 comm="syz.4.1961" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba939ce59 code=0x7ffc0000 [ 334.909928][ T27] audit: type=1326 audit(1782260983.141:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11530 comm="syz.4.1961" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba939ce59 code=0x7ffc0000 [ 335.009414][ T27] audit: type=1326 audit(1782260983.150:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11530 comm="syz.4.1961" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4ba939ce59 code=0x7ffc0000 [ 335.041703][T11506] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 335.071481][ T27] audit: type=1326 audit(1782260983.150:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11530 comm="syz.4.1961" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4ba939ce59 code=0x7ffc0000 [ 335.136453][T11506] (syz.1.1950,11506,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 335.284115][T11506] (syz.1.1950,11506,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 335.310715][T11548] loop4: detected capacity change from 0 to 16 [ 335.316792][T11506] (syz.1.1950,11506,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 335.357854][T11548] erofs: (device loop4): mounted with root inode @ nid 36. [ 335.362095][T11506] (syz.1.1950,11506,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 335.424786][T11506] (syz.1.1950,11506,0):ocfs2_quota_read:201 ERROR: status = -5 [ 335.446443][T11506] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 335.483505][T11506] (syz.1.1950,11506,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 335.710254][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 335.959527][T11561] ALSA: mixer_oss: invalid OSS volume '' [ 336.208994][T11569] loop5: detected capacity change from 0 to 1024 [ 336.662867][T11583] loop1: detected capacity change from 0 to 4096 [ 336.695894][T11583] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 336.873514][T11583] ntfs3: loop1: Failed to load $Extend (-2). [ 336.896633][T11583] ntfs3: loop1: Failed to initialize $Extend. [ 336.997090][ T23] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 337.202968][ T23] usb 6-1: unable to get BOS descriptor or descriptor too short [ 337.214719][ T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.231109][ T23] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 337.249011][ T23] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 337.273891][ T23] usb 6-1: string descriptor 0 read error: -22 [ 337.280879][ T23] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 337.307572][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.474634][T11604] loop1: detected capacity change from 0 to 2048 [ 337.523232][T11604] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 337.565382][ T5792] udevd[5792]: incorrect nilfs2 checksum on /dev/loop1 [ 337.587856][T11606] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 337.825217][ T23] usb 6-1: Can't set UAC3 power state to 1 for id 10 [ 337.861503][ T23] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 337.876786][ T23] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 337.999861][ T23] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 338.056083][ T23] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 338.098383][ T23] usb 6-1: USB disconnect, device number 4 [ 338.170240][T11618] loop1: detected capacity change from 0 to 128 [ 338.224742][T11618] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 338.265034][T11618] hpfs: filesystem error: improperly stopped [ 338.288151][T11618] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 338.300574][T11618] hpfs: You really don't want any checks? You are crazy... [ 338.321110][T11618] hpfs: hpfs_map_sector(): read error [ 338.336611][T11618] hpfs: code page support is disabled [ 338.342163][T11618] hpfs: hpfs_map_4sectors(): unaligned read [ 338.350203][T11618] hpfs: hpfs_map_4sectors(): unaligned read [ 338.356503][T11618] hpfs: filesystem error: unable to find root dir [ 338.456565][T11623] loop4: detected capacity change from 0 to 8 [ 338.519715][T11623] SQUASHFS error: xz decompression failed, data probably corrupt [ 338.557794][ T5817] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 338.566705][T11623] SQUASHFS error: Failed to read block 0x108: -5 [ 338.600642][T11623] SQUASHFS error: Unable to read metadata cache entry [106] [ 338.610488][T11623] SQUASHFS error: Unable to read inode 0x11f [ 338.776378][ T5817] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 338.824069][ T5817] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 338.847291][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.855363][ T5817] usb 1-1: Product: syz [ 338.873097][ T5817] usb 1-1: Manufacturer: syz [ 338.877781][ T5817] usb 1-1: SerialNumber: syz [ 338.890706][ T5817] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 338.933631][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2006'. [ 339.071257][ T5839] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 339.388142][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2011'. [ 339.397383][T11620] random: crng reseeded on system resumption [ 339.405934][T11646] netlink: 'syz.4.2013': attribute type 1 has an invalid length. [ 339.424353][T11646] netlink: 'syz.4.2013': attribute type 2 has an invalid length. [ 339.908611][ T28] usb 1-1: USB disconnect, device number 22 [ 340.150526][ T5817] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 340.260636][ T5839] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 340.279304][ T5839] ath9k_htc: Failed to initialize the device [ 340.301621][ T28] usb 1-1: ath9k_htc: USB layer deinitialized [ 340.356469][T11658] loop5: detected capacity change from 0 to 1024 [ 340.369927][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 340.396312][ T5817] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 340.435970][ T5817] usb 2-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.00 [ 340.449874][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.474110][ T5817] usb 2-1: config 0 descriptor?? [ 340.552870][ T11] hfsplus: b-tree write err: -5, ino 25 [ 340.560810][ T11] hfsplus: b-tree write err: -5, ino 4 [ 340.566519][ T11] hfsplus: b-tree write err: -5, ino 2 [ 340.650057][T11656] loop4: detected capacity change from 0 to 32768 [ 340.700861][T11656] [ 340.700861][T11656] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 340.700861][T11656] [ 340.769780][T11656] [ 340.769780][T11656] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 340.769780][T11656] [ 340.790647][T11656] [ 340.790647][T11656] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 340.790647][T11656] [ 340.820409][T11656] [ 340.820409][T11656] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 340.820409][T11656] [ 340.837684][T11656] [ 340.837684][T11656] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 340.837684][T11656] [ 340.877703][ T113] [ 340.877703][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 340.877703][ T113] [ 340.977336][ T9703] [ 340.977336][ T9703] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 340.977336][ T9703] [ 341.001909][ T5817] wacom 0003:056A:0031.001E: unknown main item tag 0x3 [ 341.013589][ T9703] [ 341.013589][ T9703] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 341.013589][ T9703] [ 341.029717][ T5817] wacom 0003:056A:0031.001E: unknown main item tag 0x0 [ 341.036698][ T5817] wacom 0003:056A:0031.001E: unknown main item tag 0x0 [ 341.069754][ T5817] wacom 0003:056A:0031.001E: unknown main item tag 0x0 [ 341.076788][ T5817] wacom 0003:056A:0031.001E: unknown main item tag 0x0 [ 341.096516][ T5817] wacom 0003:056A:0031.001E: unknown main item tag 0x0 [ 341.111146][ T5817] wacom 0003:056A:0031.001E: unknown main item tag 0x0 [ 341.133936][ T5817] wacom 0003:056A:0031.001E: unknown main item tag 0x0 [ 341.165759][ T5817] wacom 0003:056A:0031.001E: hidraw0: USB HID v0.0b Device [HID 056a:0031] on usb-dummy_hcd.1-1/input0 [ 341.230772][ T5817] usb 2-1: USB disconnect, device number 17 [ 341.441093][T11671] fido_id[11671]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 341.565530][T11680] bridge_slave_0: invalid flags given to default FDB implementation [ 341.971174][T11687] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2031'. [ 342.106340][T11690] loop1: detected capacity change from 0 to 2048 [ 342.113100][T11692] loop5: detected capacity change from 0 to 2048 [ 342.143062][T11692] UDF-fs: bad mount option "novrc" or missing value [ 342.198092][T11690] loop1: p1 p4 [ 342.198092][T11690] p1: [ 342.204066][T11692] ÿÿÿÿÿÿ000000000: renamed from lo (while UP) [ 342.250326][T11690] loop1: p4 size 589824 extends beyond EOD, truncated [ 342.640005][ T6028] udevd[6028]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 342.657045][ T5792] udevd[5792]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 342.703909][T11702] QAT: Invalid ioctl 21531 [ 342.833530][ T5817] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 343.043262][ T5817] usb 2-1: config 127 has an invalid interface number: 192 but max is 0 [ 343.062657][ T5817] usb 2-1: config 127 has no interface number 0 [ 343.080400][ T5817] usb 2-1: New USB device found, idVendor=093a, idProduct=2600, bcdDevice=1a.06 [ 343.089547][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.129283][ T5817] usb 2-1: Product: syz [ 343.140452][ T5817] usb 2-1: Manufacturer: syz [ 343.151248][ T5817] usb 2-1: SerialNumber: syz [ 343.372041][T11708] loop4: detected capacity change from 0 to 32768 [ 343.400375][T11708] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 343.421670][ T5817] gspca_main: pac7311-2.14.0 probing 093a:2600 [ 343.453944][ T5839] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 343.559173][ T6028] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 343.656692][ T5839] usb 6-1: Using ep0 maxpacket: 32 [ 343.683703][ T5839] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 343.704525][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.731618][ T5839] usb 6-1: Product: syz [ 343.746975][ T5839] usb 6-1: Manufacturer: syz [ 343.751826][ T5839] usb 6-1: SerialNumber: syz [ 343.777916][ T5839] usb 6-1: config 0 descriptor?? [ 343.792965][ T5839] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 343.823457][ T5839] dvb-usb: bulk message failed: -22 (4/0) [ 343.838280][ T5839] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 343.852414][ T5817] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 343.870606][ T5817] pac7311: probe of 2-1:127.192 failed with error -71 [ 343.881136][ T5839] dvb-usb: bulk message failed: -22 (5/0) [ 343.886987][ T5839] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 343.908820][ T5817] usb 2-1: USB disconnect, device number 18 [ 343.948305][ T5839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 344.003145][ T5839] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 344.047505][T11716] dvb-usb: bulk message failed: -22 (7/0) [ 344.055475][ T5839] usb 6-1: media controller created [ 344.062788][T11716] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 344.072964][T11716] ttusb2: i2c transfer failed. [ 344.102832][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 344.135352][ T5839] usb 6-1: selecting invalid altsetting 3 [ 344.141691][ T5839] ttusb2: set interface to alts=3 failed [ 344.219147][ T5839] DVB: Unable to find symbol tda10086_attach() [ 344.225615][ T5839] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 344.236554][ T5839] dvb-usb: bulk message failed: -22 (4/0) [ 344.244419][ T5839] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 344.254753][ T5839] dvb-usb: bulk message failed: -22 (5/0) [ 344.260740][ T5839] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 344.273530][ T5839] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 344.293410][ T5839] usb 6-1: USB disconnect, device number 5 [ 344.396208][ T5839] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 344.832411][ T28] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 345.038963][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.068789][ T28] usb 2-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.00 [ 345.077942][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.104927][ T28] usb 2-1: config 0 descriptor?? [ 345.148418][T11747] loop5: detected capacity change from 0 to 256 [ 345.193919][T11747] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 345.304199][ T5840] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 345.508455][ T5840] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 345.532783][ T5840] usb 5-1: config 0 interface 0 has no altsetting 0 [ 345.549065][ T5840] usb 5-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 345.570625][ T28] hid (null): global environment stack underflow [ 345.577046][ T28] hid (null): invalid report_count 57712 [ 345.583340][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.601993][ T28] hid (null): invalid report_count 746552055 [ 345.619374][ T5840] usb 5-1: config 0 descriptor?? [ 345.630603][ T28] logitech-hidpp-device 0003:046D:0A87.001F: global environment stack underflow [ 345.662229][ T28] logitech-hidpp-device 0003:046D:0A87.001F: item 0 2 1 11 parsing failed [ 345.678281][ T28] logitech-hidpp-device 0003:046D:0A87.001F: hidpp_probe:parse failed [ 345.694708][ T28] logitech-hidpp-device: probe of 0003:046D:0A87.001F failed with error -22 [ 345.794905][ T28] usb 2-1: USB disconnect, device number 19 [ 346.110763][ T5840] itetech 0003:048D:8595.0020: unknown main item tag 0x2 [ 346.121521][ T5840] itetech 0003:048D:8595.0020: unknown main item tag 0x6 [ 346.132971][ T5840] itetech 0003:048D:8595.0020: ignoring exceeding usage max [ 346.154129][ T5840] itetech 0003:048D:8595.0020: hidraw0: USB HID v0.81 Device [HID 048d:8595] on usb-dummy_hcd.4-1/input0 [ 346.327096][ T5840] usb 5-1: USB disconnect, device number 8 [ 347.023768][T11789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2079'. [ 348.118901][T11814] loop4: detected capacity change from 0 to 4096 [ 348.188824][T11814] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 348.817704][T11836] sp0: Synchronizing with TNC [ 349.420068][T11827] loop1: detected capacity change from 0 to 32768 [ 349.795559][T11855] option changes via remount are deprecated (pid=11853 comm=syz.0.2108) [ 349.840170][T11855] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 350.478322][T11874] netlink: 'syz.5.2117': attribute type 1 has an invalid length. [ 350.624654][T11878] sd 0:0:1:0: device reset [ 350.919827][T11887] tmpfs: Too few inodes for current use [ 351.008287][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2126'. [ 351.211205][ T27] audit: type=1326 audit(1782260998.615:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11898 comm="syz.0.2129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e19ce59 code=0x7ffc0000 [ 351.279024][ T27] audit: type=1326 audit(1782260998.624:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11898 comm="syz.0.2129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e19ce59 code=0x7ffc0000 [ 351.324260][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2128'. [ 351.346774][ T27] audit: type=1326 audit(1782260998.633:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11898 comm="syz.0.2129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e19ce59 code=0x7ffc0000 [ 351.380273][T11903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2130'. [ 351.395009][T11901] netlink: 'syz.4.2128': attribute type 14 has an invalid length. [ 351.416926][ T27] audit: type=1326 audit(1782260998.643:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11898 comm="syz.0.2129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fdb6e19ce59 code=0x7ffc0000 [ 351.455284][T11901] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2128'. [ 351.495392][ T27] audit: type=1326 audit(1782260998.643:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11898 comm="syz.0.2129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e19ce59 code=0x7ffc0000 [ 351.572949][ T27] audit: type=1326 audit(1782260998.643:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11898 comm="syz.0.2129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e19ce59 code=0x7ffc0000 [ 351.648659][ T27] audit: type=1326 audit(1782260998.643:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11898 comm="syz.0.2129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e19ce59 code=0x7ffc0000 [ 351.710315][ T27] audit: type=1326 audit(1782260998.643:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11898 comm="syz.0.2129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e19ce59 code=0x7ffc0000 [ 351.821315][ T27] audit: type=1326 audit(1782260998.643:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11898 comm="syz.0.2129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e19ce59 code=0x7ffc0000 [ 351.887597][ T27] audit: type=1326 audit(1782260998.652:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11898 comm="syz.0.2129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fdb6e19ce59 code=0x7ffc0000 [ 352.250728][ T5836] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 352.277739][T11905] loop1: detected capacity change from 0 to 32768 [ 352.317047][T11905] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 352.454939][ T5836] usb 5-1: Using ep0 maxpacket: 16 [ 352.529024][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.550113][ T5839] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 352.583002][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.596503][ T5792] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 352.614106][ T5836] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 352.657353][ T5836] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 352.678288][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.714573][ T5836] usb 5-1: config 0 descriptor?? [ 352.753330][ T5839] usb 1-1: Using ep0 maxpacket: 32 [ 352.778578][ T5839] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 352.806708][ T5839] usb 1-1: config 0 has no interface number 0 [ 352.837831][ T5839] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 352.864623][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.896137][ T5839] usb 1-1: Product: syz [ 352.921880][ T5839] usb 1-1: Manufacturer: syz [ 352.933770][ T5839] usb 1-1: SerialNumber: syz [ 352.953459][ T5839] usb 1-1: config 0 descriptor?? [ 352.979736][ T5839] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 353.015522][ T5839] usb 1-1: selecting invalid altsetting 1 [ 353.031068][ T5839] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 353.072591][ T5839] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 353.116118][ T5839] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 353.134498][ T5839] usb 1-1: media controller created [ 353.187690][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.335985][ T5836] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0021/input/input25 [ 353.384625][ T5839] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 353.392572][ T5839] zl10353_read_register: readreg error (reg=127, ret==-71) [ 353.454394][ T5839] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 353.520524][ T5836] sony 0003:054C:03D5.0021: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 353.583358][ T5836] usb 5-1: USB disconnect, device number 9 [ 353.662033][ T5839] usb 1-1: USB disconnect, device number 23 [ 353.837799][T11938] fido_id[11938]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 354.035230][T11933] loop1: detected capacity change from 0 to 32768 [ 354.514313][T11950] netlink: 'syz.0.2152': attribute type 1 has an invalid length. [ 355.013877][T11962] loop5: detected capacity change from 0 to 512 [ 355.165761][T11962] EXT4-fs (loop5): 1 orphan inode deleted [ 355.197946][T11962] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.237179][ T2884] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 1 [ 355.298029][T11962] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.473466][T11978] loop1: detected capacity change from 0 to 512 [ 355.506573][ T9930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.546089][T11978] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec19c, mo2=0002] [ 355.575658][T11978] System zones: 1-12 [ 355.587955][T11978] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.2162: corrupted in-inode xattr: e_value size too large [ 355.609812][T11978] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2162: couldn't read orphan inode 15 (err -117) [ 355.661873][T11978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.824047][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.421732][ T5836] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 356.633788][ T5836] usb 6-1: Using ep0 maxpacket: 8 [ 356.669881][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.700817][ T5836] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 356.744865][ T5836] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 356.764300][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.788556][ T5836] usb 6-1: config 0 descriptor?? [ 356.832395][T12015] loop1: detected capacity change from 0 to 1024 [ 356.864388][T12015] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 356.901549][T12015] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 2: comm syz.1.2180: lblock 2 mapped to illegal pblock 2 (length 1) [ 356.939406][T12015] __quota_error: 5 callbacks suppressed [ 356.939424][T12015] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 356.955173][T12015] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 48: comm syz.1.2180: lblock 0 mapped to illegal pblock 48 (length 1) [ 356.997243][T12015] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 357.032608][T12015] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.2180: Failed to acquire dquot type 0 [ 357.056742][T12015] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 357.069039][T12015] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.2180: mark_inode_dirty error [ 357.081151][T12015] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 357.094929][T12015] EXT4-fs (loop1): 1 orphan inode deleted [ 357.102600][T12015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.147750][ T995] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 357.191075][ T995] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 357.199646][ T995] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:6: Failed to release dquot type 0 [ 357.224996][T12011] loop4: detected capacity change from 0 to 32768 [ 357.274325][T12015] EXT4-fs: Ignoring removed bh option [ 357.281735][ T5836] nintendo 0003:057E:200E.0022: ignoring exceeding usage max [ 357.289575][T12015] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 357.313525][ T5836] nintendo 0003:057E:200E.0022: unknown main item tag 0x0 [ 357.321400][ T5836] nintendo 0003:057E:200E.0022: unknown main item tag 0x0 [ 357.329732][ T5836] nintendo 0003:057E:200E.0022: unknown main item tag 0x0 [ 357.337616][ T5836] nintendo 0003:057E:200E.0022: unknown main item tag 0x0 [ 357.345461][ T5836] nintendo 0003:057E:200E.0022: unknown main item tag 0x0 [ 357.352852][ T5836] nintendo 0003:057E:200E.0022: unknown main item tag 0x0 [ 357.360406][T12015] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 48: comm syz.1.2180: lblock 0 mapped to illegal pblock 48 (length 1) [ 357.377184][T12015] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 357.394623][T12011] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 357.426028][ T5836] nintendo 0003:057E:200E.0022: unknown main item tag 0x0 [ 357.433237][ T5836] nintendo 0003:057E:200E.0022: unknown main item tag 0x0 [ 357.502426][ T5836] nintendo 0003:057E:200E.0022: item fetching failed at offset 42/43 [ 357.505947][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.537217][ T5836] nintendo 0003:057E:200E.0022: HID parse failed [ 357.567265][ T5836] nintendo 0003:057E:200E.0022: probe - fail = -22 [ 357.585552][ T5836] nintendo: probe of 0003:057E:200E.0022 failed with error -22 [ 357.627235][ T5836] usb 6-1: USB disconnect, device number 6 [ 357.764830][T12011] XFS (loop4): Ending clean mount [ 357.787353][T12011] XFS (loop4): Quotacheck needed: Please wait. [ 357.865307][T12011] XFS (loop4): Quotacheck: Done. [ 357.946122][ T9703] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 358.346035][T12047] vlan3: entered promiscuous mode [ 358.588719][ T27] audit: type=1326 audit(1782261005.519:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="syz.4.2187" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba939ce59 code=0x7ffc0000 [ 358.657929][ T27] audit: type=1326 audit(1782261005.547:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="syz.4.2187" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba939ce59 code=0x7ffc0000 [ 358.714880][ T27] audit: type=1326 audit(1782261005.547:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="syz.4.2187" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba939ce59 code=0x7ffc0000 [ 358.788098][ T27] audit: type=1326 audit(1782261005.547:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="syz.4.2187" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba939ce59 code=0x7ffc0000 [ 358.871051][ T27] audit: type=1326 audit(1782261005.547:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="syz.4.2187" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f4ba939ce59 code=0x7ffc0000 [ 358.985905][ T27] audit: type=1326 audit(1782261005.547:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="syz.4.2187" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba939ce59 code=0x7ffc0000 [ 359.119265][T12069] loop1: detected capacity change from 0 to 512 [ 359.224342][T12069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.242168][T12069] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.346473][T12069] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.2200: bg 0: block 217: padding at end of block bitmap is not set [ 359.422387][T12069] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 359.528409][T12058] loop4: detected capacity change from 0 to 32768 [ 359.568684][T12058] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 359.596126][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.904348][ T5792] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 360.460170][ T28] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 360.590509][T12111] dccp_invalid_packet: P.Data Offset(4) too small [ 360.665874][ T28] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 360.684657][ T28] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 360.714926][ T28] usb 5-1: config 220 has no interface number 2 [ 360.722018][ T28] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 360.760550][ T28] usb 5-1: config 220 interface 0 has no altsetting 0 [ 360.790393][ T28] usb 5-1: config 220 interface 76 has no altsetting 0 [ 360.812011][ T28] usb 5-1: config 220 interface 1 has no altsetting 0 [ 360.867284][ T28] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 360.888872][ T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.912554][ T28] usb 5-1: Product: syz [ 360.916809][ T28] usb 5-1: Manufacturer: syz [ 360.942989][ T28] usb 5-1: SerialNumber: syz [ 361.119993][T12119] loop5: detected capacity change from 0 to 4096 [ 361.132267][T12107] loop1: detected capacity change from 0 to 32768 [ 361.192774][T12107] (syz.1.2218,12107,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 361.248727][ T28] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 361.258336][ T28] usb 5-1: No valid video chain found. [ 361.270032][ T28] usb 5-1: selecting invalid altsetting 0 [ 361.278634][T12107] (syz.1.2218,12107,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 361.304841][T12119] ntfs: volume version 3.1. [ 361.326658][ T28] usb 5-1: selecting invalid altsetting 0 [ 361.332471][ T28] usbtest: probe of 5-1:220.1 failed with error -22 [ 361.367197][ T28] usb 5-1: USB disconnect, device number 10 [ 361.379714][T12107] (syz.1.2218,12107,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 361.417006][T12107] JBD2: Ignoring recovery information on journal [ 361.543092][T12107] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 361.758481][T12107] (syz.1.2218,12107,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 361.783160][T12107] (syz.1.2218,12107,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 361.796939][T12107] (syz.1.2218,12107,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 361.806324][T12107] (syz.1.2218,12107,1):ocfs2_quota_read:201 ERROR: status = -5 [ 361.816687][T12107] (syz.1.2218,12107,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 361.837881][T12107] (syz.1.2218,12107,1):ocfs2_symlink:1882 ERROR: status = -5 [ 361.858420][T12107] (syz.1.2218,12107,1):ocfs2_symlink:2068 ERROR: status = -5 [ 361.882616][T12131] use of bytesused == 0 is deprecated and will be removed in the future, [ 361.891711][T12131] use the actual size instead. [ 362.601228][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 362.657938][T12161] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2243'. [ 363.342332][ T5836] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 363.492018][T12191] netlink: 'syz.0.2259': attribute type 29 has an invalid length. [ 363.501364][T12191] netlink: 'syz.0.2259': attribute type 29 has an invalid length. [ 363.513118][T12191] netlink: 'syz.0.2259': attribute type 29 has an invalid length. [ 363.551753][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.592199][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.603615][ T5836] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 363.626360][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.648828][ T5836] usb 5-1: config 0 descriptor?? [ 364.113974][ T5836] hid-steam 0003:28DE:1142.0023: unknown main item tag 0x0 [ 364.134739][ T5836] hid-steam 0003:28DE:1142.0023: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 364.161399][T12205] loop1: detected capacity change from 0 to 128 [ 364.234569][T12205] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 364.246989][ T5836] hid-steam 0003:28DE:1142.0023: Steam wireless receiver connected [ 364.272085][ T5836] hid-steam 0003:28DE:1142.0023: No HID_FEATURE_REPORT submitted - nothing to read [ 364.311433][T12205] ext4 filesystem being mounted at /554/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 364.346776][T12195] loop5: detected capacity change from 0 to 32768 [ 364.399644][ T5836] hid-steam 0003:28DE:1142.0024: unknown main item tag 0x0 [ 364.402959][T12205] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.1.2265: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 364.428473][T12195] JBD2: Ignoring recovery information on journal [ 364.536382][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 364.551489][T12195] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 364.572624][ T5836] hid-steam 0003:28DE:1142.0024: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 364.614482][ T5836] usb 5-1: USB disconnect, device number 11 [ 364.635809][ T5836] hid-steam 0003:28DE:1142.0023: Steam wireless receiver disconnected [ 364.704316][T12214] fido_id[12214]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 365.004928][ T9930] ocfs2: Unmounting device (7,5) on (node local) [ 366.125762][T12257] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 366.202401][T12260] loop4: detected capacity change from 0 to 2048 [ 366.308753][T12263] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 366.549679][T12267] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 367.037198][T12282] loop1: detected capacity change from 0 to 4096 [ 367.132902][T12287] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 367.636185][T12274] loop5: detected capacity change from 0 to 40427 [ 367.674500][T12274] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 367.698674][T12274] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 367.726102][T12274] F2FS-fs (loop5): Found nat_bits in checkpoint [ 367.778852][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2306'. [ 367.876800][T12274] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 367.910081][T12274] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 368.061554][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 368.061574][ T27] audit: type=1800 audit(1782261014.378:95): pid=12274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2294" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 368.402353][ T5839] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 368.639580][ T5839] usb 1-1: unable to get BOS descriptor or descriptor too short [ 368.651506][ T5839] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 368.668763][ T5839] usb 1-1: string descriptor 0 read error: -22 [ 368.676754][ T5839] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 368.687424][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.697074][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 368.894109][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 368.906630][ T5839] usb 1-1: reset high-speed USB device number 24 using dummy_hcd [ 368.927492][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.947713][ T5836] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 368.956029][ T10] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.976065][ T10] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.002062][ T10] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.020644][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.029322][ T10] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 369.043956][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.065958][ T10] usb 5-1: config 0 descriptor?? [ 369.172254][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 369.187268][ T5836] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 369.201283][ T5836] usb 2-1: config 0 has no interface number 0 [ 369.216641][ T5836] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 369.246971][ T5836] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 369.277197][ T5836] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 369.306718][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.315407][ T5836] usb 2-1: Product: syz [ 369.319637][ T5836] usb 2-1: Manufacturer: syz [ 369.332950][ T5836] usb 2-1: SerialNumber: syz [ 369.344890][ T5836] usb 2-1: config 0 descriptor?? [ 369.352999][T12324] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 369.384020][T12324] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 369.536223][ T10] corsair-cpro 0003:1B1C:0C10.0025: unknown main item tag 0x3 [ 369.548945][ T10] corsair-cpro 0003:1B1C:0C10.0025: item fetching failed at offset 2/5 [ 369.561930][ T10] corsair-cpro: probe of 0003:1B1C:0C10.0025 failed with error -22 [ 369.624005][T12324] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 369.638367][T12324] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 369.745851][ T5839] usb 1-1: USB disconnect, device number 24 [ 369.853550][ T5817] usb 5-1: USB disconnect, device number 12 [ 369.864167][ T5836] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 369.952279][ T5839] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 370.053168][T12337] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.062928][T12337] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.072430][T12337] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.081351][T12337] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.098286][ T5836] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 370.112183][ T5836] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 370.125756][ T5836] asix: probe of 2-1:0.34 failed with error -71 [ 370.139001][ T5836] usb 2-1: USB disconnect, device number 20 [ 370.238779][ T5839] usb 1-1: unable to get BOS descriptor or descriptor too short [ 370.250023][ T5839] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 370.266932][ T5839] usb 1-1: can't read configurations, error -71 [ 370.910869][T12356] loop1: detected capacity change from 0 to 4096 [ 371.020667][T12356] ntfs: volume version 3.1. [ 371.265110][ T27] audit: type=1326 audit(1782261017.381:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.5.2337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685039ce59 code=0x7ffc0000 [ 371.330422][ T27] audit: type=1326 audit(1782261017.381:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.5.2337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f685039ce59 code=0x7ffc0000 [ 371.406537][ T27] audit: type=1326 audit(1782261017.381:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.5.2337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685039ce59 code=0x7ffc0000 [ 371.458664][ T27] audit: type=1326 audit(1782261017.381:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.5.2337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685039ce59 code=0x7ffc0000 [ 371.587692][ T5839] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 371.780123][ T5839] usb 1-1: Using ep0 maxpacket: 16 [ 371.806515][ T5839] usb 1-1: config 0 interface 0 has no altsetting 0 [ 371.815537][ T5839] usb 1-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 371.850571][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.863040][ T5839] usb 1-1: config 0 descriptor?? [ 371.931543][T12383] loop1: detected capacity change from 0 to 256 [ 372.060662][T12383] block device autoloading is deprecated and will be removed. [ 372.334923][ T5839] wacom 0003:056A:0023.0026: unknown main item tag 0x1 [ 372.357369][ T5839] wacom 0003:056A:0023.0026: item 0 1 0 8 parsing failed [ 372.366474][ T5839] wacom 0003:056A:0023.0026: parse failed [ 372.393123][ T5839] wacom: probe of 0003:056A:0023.0026 failed with error -22 [ 372.596899][T12385] loop4: detected capacity change from 0 to 32768 [ 372.615697][ T5836] usb 1-1: USB disconnect, device number 27 [ 372.662846][T12385] [ 372.662846][T12385] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 372.662846][T12385] [ 372.760108][T12385] ERROR: (device loop4): diWrite: ixpxd invalid [ 372.760108][T12385] [ 372.784141][T12385] ERROR: (device loop4): txCommit: [ 372.784141][T12385] [ 372.907304][ T9703] [ 372.907304][ T9703] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 372.907304][ T9703] [ 372.948412][ T9703] [ 372.948412][ T9703] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 372.948412][ T9703] [ 373.453964][T12415] loop4: detected capacity change from 0 to 256 [ 373.505295][T12415] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 373.871937][T12419] loop5: detected capacity change from 0 to 8192 [ 373.916121][T12419] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 373.959022][T12419] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 374.014715][T12419] REISERFS (device loop5): using ordered data mode [ 374.046688][T12419] reiserfs: using flush barriers [ 374.076385][T12419] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 374.093492][T12419] REISERFS (device loop5): checking transaction log (loop5) [ 374.100166][ T5836] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 374.309334][T12419] REISERFS (device loop5): Using tea hash to sort names [ 374.317205][ T5836] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 374.338243][T12419] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 374.368171][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 374.399729][ T5836] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 374.441742][ T5836] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 374.489373][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.518973][ T5836] usb 1-1: config 0 descriptor?? [ 374.524832][T12424] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 375.046067][ T5836] hid-multitouch 0003:1FD2:6007.0027: ignoring exceeding usage max [ 375.074046][ T5836] hid-multitouch 0003:1FD2:6007.0027: unknown main item tag 0x0 [ 375.081801][ T5836] hid-multitouch 0003:1FD2:6007.0027: unknown main item tag 0x0 [ 375.117601][ T5836] hid-multitouch 0003:1FD2:6007.0027: unknown main item tag 0x0 [ 375.125357][ T5836] hid-multitouch 0003:1FD2:6007.0027: unbalanced collection at end of report description [ 375.141952][T12429] loop4: detected capacity change from 0 to 32768 [ 375.156989][ T5836] hid-multitouch: probe of 0003:1FD2:6007.0027 failed with error -22 [ 375.175052][T12429] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 375.276630][T12429] XFS (loop4): Ending clean mount [ 375.360150][ T5817] usb 1-1: USB disconnect, device number 28 [ 375.526887][ T9703] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 376.269283][T12482] program syz.0.2386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.287179][T12483] loop5: detected capacity change from 0 to 128 [ 376.599365][T12491] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 376.646432][T12491] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 376.699605][T12495] bridge: RTM_DELNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 377.491986][T12523] loop5: detected capacity change from 0 to 1024 [ 377.734191][ T5817] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 377.962773][ T5817] usb 2-1: too many endpoints for config 0 interface 0 altsetting 127: 254, using maximum allowed: 30 [ 377.990581][ T5817] usb 2-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 378.012225][ T5817] usb 2-1: config 0 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 378.055936][ T5817] usb 2-1: config 0 interface 0 has no altsetting 0 [ 378.063258][ T5817] usb 2-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 378.091273][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.124771][ T5817] usb 2-1: config 0 descriptor?? [ 378.162012][T12522] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 378.235947][T12541] cifs: Unknown parameter 'h}#úä [ 378.235947][T12541] Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õë�ï1:ºÃÃÓ­'Ä4,�Zz-#FÇ<æõ]%gCžÊ [ 378.235947][T12541] SÃȘØÈžZ§6ŸÂ' [ 378.253387][T12537] loop5: detected capacity change from 0 to 4096 [ 378.308316][T12542] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 378.669759][ T5817] cypress 0003:04B4:ED81.0028: ignoring exceeding usage max [ 378.705276][ T5817] cypress 0003:04B4:ED81.0028: hidraw0: USB HID v0.0c Device [HID 04b4:ed81] on usb-dummy_hcd.1-1/input0 [ 378.933589][ T5836] usb 2-1: USB disconnect, device number 21 [ 379.220600][T12550] loop4: detected capacity change from 0 to 32768 [ 379.254544][T12550] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 379.341855][T12550] XFS (loop4): Ending clean mount [ 379.351376][T12544] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 379.532443][ T9703] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 379.910619][ T27] audit: type=1326 audit(1782261025.464:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12568 comm="syz.0.2424" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e19ce59 code=0x7ffc0000 [ 379.974809][ T27] audit: type=1326 audit(1782261025.492:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12568 comm="syz.0.2424" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e19ce59 code=0x7ffc0000 [ 380.042938][ T27] audit: type=1326 audit(1782261025.511:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12568 comm="syz.0.2424" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fdb6e19ce59 code=0x7ffc0000 [ 380.127147][ T27] audit: type=1326 audit(1782261025.511:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12568 comm="syz.0.2424" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e19ce59 code=0x7ffc0000 [ 380.200766][ T27] audit: type=1326 audit(1782261025.511:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12568 comm="syz.0.2424" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e19ce59 code=0x7ffc0000 [ 380.288045][ T27] audit: type=1326 audit(1782261025.511:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12568 comm="syz.0.2424" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fdb6e19ce59 code=0x7ffc0000 [ 380.338773][ T27] audit: type=1326 audit(1782261025.511:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12568 comm="syz.0.2424" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e19ce59 code=0x7ffc0000 [ 380.365384][ T27] audit: type=1326 audit(1782261025.744:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.0.2425" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e19ce59 code=0x7ffc0000 [ 380.396578][ T27] audit: type=1326 audit(1782261025.744:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.0.2425" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6e19ce59 code=0x7ffc0000 [ 380.426848][ T27] audit: type=1326 audit(1782261025.744:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.0.2425" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fdb6e19ce59 code=0x7ffc0000 [ 380.583487][T12581] netem: change failed [ 381.464734][ T173] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 381.610324][T12611] loop5: detected capacity change from 0 to 256 [ 381.622760][T12611] exfat: Deprecated parameter 'utf8' [ 381.659862][T12611] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 381.671320][ T173] usb 5-1: Using ep0 maxpacket: 32 [ 381.684328][ T173] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.708514][ T173] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.737557][ T173] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 381.758766][ T173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.783716][ T173] usb 5-1: config 0 descriptor?? [ 381.788938][ T5839] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 381.826502][ T173] hub 5-1:0.0: USB hub found [ 382.001532][ T5839] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 382.031260][ T5839] usb 2-1: config 0 has no interface number 0 [ 382.037508][ T5839] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 382.066773][ T173] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 382.087030][ T5839] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 382.109909][ T5839] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 382.138110][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.165133][ T5839] usb 2-1: config 0 descriptor?? [ 382.185486][T12608] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 382.207242][ T5839] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 382.291714][ T173] usbhid 5-1:0.0: can't add hid device: -71 [ 382.300141][ T173] usbhid: probe of 5-1:0.0 failed with error -71 [ 382.362802][ T173] usb 5-1: USB disconnect, device number 13 [ 382.487950][ T5840] usb 2-1: USB disconnect, device number 22 [ 382.638055][T12623] loop5: detected capacity change from 0 to 8192 [ 383.231858][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2456'. [ 383.300083][ T173] kernel write not supported for file /input/event0 (pid: 173 comm: kworker/0:2) [ 384.365428][T12681] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.648058][T12697] loop5: detected capacity change from 0 to 32768 [ 385.706498][T12697] JBD2: Ignoring recovery information on journal [ 385.721392][T12697] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 385.730429][T12697] JBD2: bad block at offset 32 [ 385.753428][T12697] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 385.972597][ T9930] ocfs2: Unmounting device (7,5) on (node local) [ 386.199437][T12742] loop4: detected capacity change from 0 to 512 [ 386.275806][T12742] EXT4-fs: Ignoring removed orlov option [ 386.361243][T12742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.433857][T12742] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 386.523940][ T173] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 386.645974][ T9703] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.745112][ T173] usb 2-1: Using ep0 maxpacket: 16 [ 386.758376][ T173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.788014][ T173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.808810][ T173] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 386.863223][ T173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.900844][ T173] usb 2-1: config 0 descriptor?? [ 387.330289][T12741] loop5: detected capacity change from 0 to 32768 [ 387.391095][ T173] corsair 0003:1B1C:1B02.0029: report_id 1961031690 is invalid [ 387.403679][T12741] [ 387.403679][T12741] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 387.403679][T12741] [ 387.425454][ T173] corsair 0003:1B1C:1B02.0029: item 0 4 1 8 parsing failed [ 387.458332][ T173] corsair 0003:1B1C:1B02.0029: parse failed [ 387.486316][ T173] corsair: probe of 0003:1B1C:1B02.0029 failed with error -22 [ 387.539422][ T3527] ERROR: (device loop5): diWrite: ixpxd invalid [ 387.539422][ T3527] [ 387.589716][ T3527] ERROR: (device loop5): txCommit: [ 387.589716][ T3527] [ 387.642998][ T3527] jfs_write_inode: jfs_commit_inode failed! [ 387.647790][ T5840] usb 2-1: USB disconnect, device number 23 [ 387.649877][ T9930] [ 387.649877][ T9930] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 387.649877][ T9930] [ 387.712837][ T9930] [ 387.712837][ T9930] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 387.712837][ T9930] [ 387.726631][T12771] netlink: 'syz.0.2505': attribute type 3 has an invalid length. [ 388.259901][T12762] loop4: detected capacity change from 0 to 32768 [ 388.392628][T12762] [ 388.392628][T12762] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 388.392628][T12762] [ 388.604582][ T2884] [ 388.604582][ T2884] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 388.604582][ T2884] [ 388.631559][ T2884] [ 388.631559][ T2884] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 388.631559][ T2884] [ 388.687807][ T2884] [ 388.687807][ T2884] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 388.687807][ T2884] [ 388.711315][ T9703] [ 388.711315][ T9703] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 388.711315][ T9703] [ 388.736094][ T113] [ 388.736094][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 388.736094][ T113] [ 388.752003][ T9703] [ 388.752003][ T9703] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 388.752003][ T9703] [ 388.790278][T12796] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 389.304344][T12812] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 389.364265][T12812] CIFS: Unable to determine destination address [ 389.935956][T12838] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 390.102997][ T173] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 390.243192][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 390.243209][ T27] audit: type=1326 audit(1782261035.137:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12842 comm="syz.1.2535" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b059ce59 code=0x7ffc0000 [ 390.278495][ T27] audit: type=1326 audit(1782261035.146:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12842 comm="syz.1.2535" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b059ce59 code=0x7ffc0000 [ 390.314509][T12847] loop4: detected capacity change from 0 to 128 [ 390.330673][ T173] usb 1-1: Using ep0 maxpacket: 32 [ 390.336684][ T27] audit: type=1326 audit(1782261035.146:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12842 comm="syz.1.2535" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f94b059ce59 code=0x7ffc0000 [ 390.362671][ T173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.376470][ T173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.417075][ T173] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 390.458872][ T173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.481186][ T27] audit: type=1326 audit(1782261035.146:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12842 comm="syz.1.2535" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b059ce59 code=0x7ffc0000 [ 390.506082][ T173] usb 1-1: config 0 descriptor?? [ 390.516452][ T173] hub 1-1:0.0: USB hub found [ 390.736340][ T173] hub 1-1:0.0: 1 port detected [ 390.951174][ T173] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 390.970237][ T173] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 390.992102][ T173] usbhid 1-1:0.0: can't add hid device: -71 [ 390.998181][ T173] usbhid: probe of 1-1:0.0 failed with error -71 [ 391.065073][ T173] usb 1-1: USB disconnect, device number 29 [ 391.660343][T12879] loop1: detected capacity change from 0 to 8192 [ 391.686916][T12879] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 391.704740][T12879] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 391.714197][T12879] REISERFS (device loop1): using ordered data mode [ 391.721047][T12879] reiserfs: using flush barriers [ 391.728059][T12879] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 391.746426][T12879] REISERFS (device loop1): checking transaction log (loop1) [ 391.757167][T12879] REISERFS (device loop1): Using rupasov hash to sort names [ 391.767147][T12879] REISERFS (device loop1): using 3.5.x disk format [ 391.774332][ T5836] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 391.783505][T12879] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 391.794785][T12879] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 391.806320][T12879] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 391.817719][T12879] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 391.972761][ T5836] usb 5-1: Using ep0 maxpacket: 16 [ 391.983155][ T173] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 391.992580][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.015236][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.025052][ T5836] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 392.076123][T12888] loop1: detected capacity change from 0 to 256 [ 392.079438][ T5836] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 392.096186][T12888] exfat: Deprecated parameter 'namecase' [ 392.104779][T12888] exfat: Deprecated parameter 'utf8' [ 392.114922][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.127626][ T5836] usb 5-1: config 0 descriptor?? [ 392.140113][T12888] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 392.203134][ T173] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.218432][ T173] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.260746][ T173] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.281461][ T173] usb 6-1: config 0 interface 0 has no altsetting 0 [ 392.305131][ T173] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 392.346382][ T173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.375591][ T173] usb 6-1: config 0 descriptor?? [ 392.619495][ T5836] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.002A/input/input26 [ 392.795389][ T5836] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 392.810335][T12901] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 392.895142][ T173] kye 0003:0458:5015.002B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 392.925390][ T5836] usb 5-1: USB disconnect, device number 14 [ 392.946157][ T173] kye 0003:0458:5015.002B: unknown main item tag 0x0 [ 392.971838][ T173] kye 0003:0458:5015.002B: unbalanced collection at end of report description [ 392.992477][ T173] kye 0003:0458:5015.002B: parse failed [ 393.009194][ T173] kye: probe of 0003:0458:5015.002B failed with error -22 [ 393.146398][T12905] fido_id[12905]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 393.162855][ T173] usb 6-1: USB disconnect, device number 7 [ 393.746569][ T5839] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 393.943390][ T5839] usb 2-1: Using ep0 maxpacket: 8 [ 393.957473][ T5839] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 393.986913][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.015568][ T5839] usb 2-1: config 0 descriptor?? [ 394.327433][T12948] loop5: detected capacity change from 0 to 2048 [ 394.386254][T12949] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 394.490362][ T5839] sunplus 0003:04FC:05D8.002C: unknown main item tag 0x0 [ 394.505729][ T5839] sunplus 0003:04FC:05D8.002C: unknown main item tag 0x5 [ 394.515392][ T5839] sunplus 0003:04FC:05D8.002C: item fetching failed at offset 36/40 [ 394.546533][ T5839] sunplus: probe of 0003:04FC:05D8.002C failed with error -22 [ 394.756185][ T5817] usb 2-1: USB disconnect, device number 24 [ 395.774787][T12981] loop5: detected capacity change from 0 to 512 [ 395.798539][T12981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 395.874421][T12981] EXT4-fs (loop5): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 396.011835][T12988] tipc: Started in network mode [ 396.028532][ T9930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.031189][T12988] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 396.078988][T12988] tipc: Enabled bearer , priority 10 [ 396.509949][T12996] loop5: detected capacity change from 0 to 1024 [ 396.605701][ T5840] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 396.643685][ T2884] hfsplus: b-tree write err: -5, ino 25 [ 396.649559][ T2884] hfsplus: b-tree write err: -5, ino 4 [ 396.675942][ T2884] hfsplus: b-tree write err: -5, ino 2 [ 396.691146][T12986] loop1: detected capacity change from 0 to 32768 [ 396.754660][T12986] [ 396.754660][T12986] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 396.754660][T12986] [ 396.817348][ T5840] usb 5-1: Using ep0 maxpacket: 8 [ 396.824872][ T5840] usb 5-1: config 0 interface 0 has no altsetting 0 [ 396.846738][ T5840] usb 5-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.00 [ 396.855880][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.926255][ T5840] usb 5-1: config 0 descriptor?? [ 396.994427][ T995] [ 396.994427][ T995] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 396.994427][ T995] [ 397.021369][ T995] [ 397.021369][ T995] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 397.021369][ T995] [ 397.053985][ T995] [ 397.053985][ T995] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 397.053985][ T995] [ 397.079454][ T5775] [ 397.079454][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 397.079454][ T5775] [ 397.115687][ T5775] [ 397.115687][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 397.115687][ T5775] [ 397.147160][ T113] [ 397.147160][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 397.147160][ T113] [ 397.210679][ T113] ================================================================== [ 397.218825][ T113] BUG: KASAN: slab-use-after-free in txEnd+0x32d/0x520 [ 397.225743][ T113] Write of size 8 at addr ffff88807fb40040 by task jfsCommit/113 [ 397.233522][ T113] [ 397.235874][ T113] CPU: 0 PID: 113 Comm: jfsCommit Not tainted syzkaller #0 [ 397.243129][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 397.253237][ T113] Call Trace: [ 397.256554][ T113] [ 397.259529][ T113] dump_stack_lvl+0x18c/0x250 [ 397.264336][ T113] ? __lock_acquire+0x7d80/0x7d80 [ 397.269399][ T113] ? show_regs_print_info+0x20/0x20 [ 397.274639][ T113] ? load_image+0x420/0x420 [ 397.279198][ T113] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 397.284819][ T113] ? __virt_addr_valid+0x10c/0x380 [ 397.289993][ T113] ? __virt_addr_valid+0x10c/0x380 [ 397.295145][ T113] ? __virt_addr_valid+0x10c/0x380 [ 397.300329][ T113] ? __virt_addr_valid+0x10c/0x380 [ 397.305512][ T113] print_report+0xa8/0x210 [ 397.310003][ T113] ? txEnd+0x32d/0x520 [ 397.314118][ T113] kasan_report+0x117/0x150 [ 397.318706][ T113] ? txEnd+0x32d/0x520 [ 397.322826][ T113] kasan_check_range+0x241/0x290 [ 397.327810][ T113] txEnd+0x32d/0x520 [ 397.331751][ T113] jfs_lazycommit+0x5c3/0xaa0 [ 397.336475][ T113] ? txFreelock+0x5a0/0x5a0 [ 397.338389][ T5836] tipc: Node number set to 8432298 [ 397.341011][ T113] ? do_task_dead+0xd0/0xd0 [ 397.341060][ T113] ? _raw_spin_unlock+0x40/0x40 [ 397.355616][ T113] ? __kthread_parkme+0x71/0x1c0 [ 397.360594][ T113] ? __kthread_parkme+0x15b/0x1c0 [ 397.365661][ T113] kthread+0x2fa/0x390 [ 397.369799][ T113] ? txFreelock+0x5a0/0x5a0 [ 397.374364][ T113] ? kthread_blkcg+0xd0/0xd0 [ 397.379026][ T113] ret_from_fork+0x48/0x80 [ 397.383503][ T113] ? kthread_blkcg+0xd0/0xd0 [ 397.388145][ T113] ret_from_fork_asm+0x11/0x20 [ 397.393006][ T113] [ 397.396054][ T113] [ 397.398413][ T113] Allocated by task 12986: [ 397.402864][ T113] kasan_set_track+0x4e/0x70 [ 397.407500][ T113] __kasan_kmalloc+0x8f/0xa0 [ 397.412139][ T113] lmLogOpen+0x2df/0xfa0 [ 397.416422][ T113] jfs_mount_rw+0xf4/0x670 [ 397.420891][ T113] jfs_fill_super+0x581/0xab0 [ 397.425697][ T113] mount_bdev+0x21c/0x2c0 [ 397.430124][ T113] legacy_get_tree+0xea/0x180 [ 397.434901][ T113] vfs_get_tree+0x8c/0x280 [ 397.439371][ T113] do_new_mount+0x24a/0xa40 [ 397.443917][ T113] __se_sys_mount+0x2e7/0x3d0 [ 397.448637][ T113] do_syscall_64+0x55/0xb0 [ 397.453096][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.459148][ T113] [ 397.461506][ T113] Freed by task 5775: [ 397.465519][ T113] kasan_set_track+0x4e/0x70 [ 397.470159][ T113] kasan_save_free_info+0x28/0x40 [ 397.475268][ T113] ____kasan_slab_free+0x126/0x1f0 [ 397.480417][ T113] slab_free_freelist_hook+0x130/0x1a0 [ 397.485922][ T113] __kmem_cache_free+0xba/0x1f0 [ 397.490824][ T113] lmLogClose+0x296/0x530 [ 397.495194][ T113] jfs_umount+0x2ca/0x3a0 [ 397.499579][ T113] jfs_put_super+0x8c/0x190 [ 397.504129][ T113] generic_shutdown_super+0x134/0x2b0 [ 397.509536][ T113] kill_block_super+0x44/0x90 [ 397.514254][ T113] deactivate_locked_super+0x97/0x100 [ 397.519664][ T113] cleanup_mnt+0x3d7/0x460 [ 397.524127][ T113] task_work_run+0x1d4/0x260 [ 397.528760][ T113] exit_to_user_mode_loop+0xe6/0x110 [ 397.534095][ T113] exit_to_user_mode_prepare+0xee/0x180 [ 397.539776][ T113] syscall_exit_to_user_mode+0x1a/0x50 [ 397.545277][ T113] do_syscall_64+0x61/0xb0 [ 397.549739][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.555682][ T113] [ 397.558040][ T113] Last potentially related work creation: [ 397.563798][ T113] kasan_save_stack+0x3e/0x60 [ 397.568548][ T113] __kasan_record_aux_stack+0xaf/0xc0 [ 397.573974][ T113] insert_work+0x3d/0x310 [ 397.578357][ T113] __queue_work+0xbfd/0xfd0 [ 397.582900][ T113] queue_work_on+0x128/0x1f0 [ 397.587526][ T113] p9_poll_workfn+0x261/0x5b0 [ 397.592248][ T113] process_scheduled_works+0xa60/0x1600 [ 397.597845][ T113] worker_thread+0xa5e/0xfe0 [ 397.602478][ T113] kthread+0x2fa/0x390 [ 397.606588][ T113] ret_from_fork+0x48/0x80 [ 397.611051][ T113] ret_from_fork_asm+0x11/0x20 [ 397.615953][ T113] [ 397.618334][ T113] Second to last potentially related work creation: [ 397.624958][ T113] kasan_save_stack+0x3e/0x60 [ 397.629675][ T113] __kasan_record_aux_stack+0xaf/0xc0 [ 397.635094][ T113] insert_work+0x3d/0x310 [ 397.639466][ T113] __queue_work+0xbfd/0xfd0 [ 397.644008][ T113] queue_work_on+0x128/0x1f0 [ 397.648644][ T113] p9_fd_request+0x297/0x4c0 [ 397.653278][ T113] p9_client_rpc+0x2fc/0xa90 [ 397.657956][ T113] p9_client_flush+0x270/0x3c0 [ 397.662758][ T113] p9_client_rpc+0x8bf/0xa90 [ 397.667388][ T113] p9_client_create+0xa04/0x1050 [ 397.672366][ T113] v9fs_session_init+0x1aa/0x1960 [ 397.677455][ T113] v9fs_mount+0xd0/0xb40 [ 397.681742][ T113] legacy_get_tree+0xea/0x180 [ 397.686465][ T113] vfs_get_tree+0x8c/0x280 [ 397.691135][ T113] do_new_mount+0x24a/0xa40 [ 397.695684][ T113] __se_sys_mount+0x2e7/0x3d0 [ 397.700397][ T113] do_syscall_64+0x55/0xb0 [ 397.704872][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.710821][ T113] [ 397.713180][ T113] The buggy address belongs to the object at ffff88807fb40000 [ 397.713180][ T113] which belongs to the cache kmalloc-1k of size 1024 [ 397.727276][ T113] The buggy address is located 64 bytes inside of [ 397.727276][ T113] freed 1024-byte region [ffff88807fb40000, ffff88807fb40400) [ 397.741121][ T113] [ 397.743496][ T113] The buggy address belongs to the physical page: [ 397.749955][ T113] page:ffffea0001fed000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fb40 [ 397.760145][ T113] head:ffffea0001fed000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 397.769114][ T113] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 397.777564][ T113] page_type: 0xffffffff() [ 397.781946][ T113] raw: 00fff00000000840 ffff888017c41dc0 0000000000000000 dead000000000001 [ 397.790591][ T113] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 397.799221][ T113] page dumped because: kasan: bad access detected [ 397.805668][ T113] page_owner tracks the page as allocated [ 397.811417][ T113] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 3527, tgid 3527 (kworker/u4:10), ts 89192041439, free_ts 89084696806 [ 397.832211][ T113] post_alloc_hook+0x1c1/0x200 [ 397.837064][ T113] get_page_from_freelist+0x2181/0x22a0 [ 397.842665][ T113] __alloc_pages+0x1f0/0x460 [ 397.847298][ T113] alloc_slab_page+0x5d/0x180 [ 397.852013][ T113] new_slab+0x87/0x2d0 [ 397.856124][ T113] ___slab_alloc+0xc5c/0x12f0 [ 397.860851][ T113] __kmem_cache_alloc_node+0x11f/0x250 [ 397.866375][ T113] __kmalloc+0xa7/0x240 [ 397.870575][ T113] ___neigh_create+0x6f4/0x23d0 [ 397.875582][ T113] ip6_finish_output2+0x156d/0x1620 [ 397.880825][ T113] ndisc_send_skb+0xbb9/0x1480 [ 397.885706][ T113] ndisc_send_ns+0xd8/0x160 [ 397.890259][ T113] addrconf_dad_work+0xa27/0x1550 [ 397.895320][ T113] process_scheduled_works+0xa60/0x1600 [ 397.900916][ T113] worker_thread+0xa5e/0xfe0 [ 397.905554][ T113] kthread+0x2fa/0x390 [ 397.909668][ T113] page last free stack trace: [ 397.914375][ T113] free_unref_page_prepare+0x7d7/0x8f0 [ 397.919880][ T113] free_unref_page+0x32/0x2e0 [ 397.924607][ T113] __unfreeze_partials+0x1cf/0x210 [ 397.929754][ T113] put_cpu_partial+0x17c/0x250 [ 397.934557][ T113] __slab_free+0x319/0x400 [ 397.939007][ T113] qlist_free_all+0x75/0xd0 [ 397.943559][ T113] kasan_quarantine_reduce+0x143/0x160 [ 397.949064][ T113] __kasan_slab_alloc+0x22/0x80 [ 397.953952][ T113] slab_post_alloc_hook+0x6a/0x4d0 [ 397.959112][ T113] kmem_cache_alloc+0x17e/0x2c0 [ 397.964013][ T113] __pmd_alloc+0x111/0x8c0 [ 397.968465][ T113] handle_mm_fault+0xb75/0x4a50 [ 397.973349][ T113] do_user_addr_fault+0xad2/0x12d0 [ 397.978502][ T113] exc_page_fault+0x64/0x100 [ 397.983134][ T113] asm_exc_page_fault+0x26/0x30 [ 397.988035][ T113] [ 397.990394][ T113] Memory state around the buggy address: [ 397.996056][ T113] ffff88807fb3ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 398.004152][ T113] ffff88807fb3ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 398.012260][ T113] >ffff88807fb40000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 398.020366][ T113] ^ [ 398.026554][ T113] ffff88807fb40080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 398.034641][ T113] ffff88807fb40100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 398.042814][ T113] ================================================================== [ 398.134852][ T5840] ntrig 0003:1B96:0005.002D: unknown main item tag 0x1 [ 398.144690][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 398.155651][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.194837][ T5840] ntrig 0003:1B96:0005.002D: invalid report_size 33719 [ 398.213489][ T113] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 398.220746][ T113] CPU: 0 PID: 113 Comm: jfsCommit Not tainted syzkaller #0 [ 398.227988][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 398.238070][ T113] Call Trace: [ 398.241368][ T113] [ 398.244319][ T113] dump_stack_lvl+0x18c/0x250 [ 398.249034][ T113] ? show_regs_print_info+0x20/0x20 [ 398.254263][ T113] ? load_image+0x420/0x420 [ 398.258789][ T113] panic+0x2ca/0x720 [ 398.262743][ T113] ? bpf_jit_dump+0xd0/0xd0 [ 398.267273][ T113] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 398.273289][ T113] ? _raw_spin_unlock+0x40/0x40 [ 398.278190][ T113] ? print_memory_metadata+0x314/0x400 [ 398.283673][ T113] ? txEnd+0x32d/0x520 [ 398.287768][ T113] check_panic_on_warn+0x84/0xa0 [ 398.292732][ T113] ? txEnd+0x32d/0x520 [ 398.296830][ T113] end_report+0x6f/0x130 [ 398.301097][ T113] kasan_report+0x128/0x150 [ 398.305622][ T113] ? txEnd+0x32d/0x520 [ 398.309729][ T113] kasan_check_range+0x241/0x290 [ 398.314693][ T113] txEnd+0x32d/0x520 [ 398.318627][ T113] jfs_lazycommit+0x5c3/0xaa0 [ 398.323332][ T113] ? txFreelock+0x5a0/0x5a0 [ 398.327856][ T113] ? do_task_dead+0xd0/0xd0 [ 398.332387][ T113] ? _raw_spin_unlock+0x40/0x40 [ 398.337261][ T113] ? __kthread_parkme+0x71/0x1c0 [ 398.342219][ T113] ? __kthread_parkme+0x15b/0x1c0 [ 398.347269][ T113] kthread+0x2fa/0x390 [ 398.351359][ T113] ? txFreelock+0x5a0/0x5a0 [ 398.355911][ T113] ? kthread_blkcg+0xd0/0xd0 [ 398.360522][ T113] ret_from_fork+0x48/0x80 [ 398.364962][ T113] ? kthread_blkcg+0xd0/0xd0 [ 398.369575][ T113] ret_from_fork_asm+0x11/0x20 [ 398.374369][ T113] [ 398.377998][ T113] Kernel Offset: disabled [ 398.382338][ T113] Rebooting in 86400 seconds..