last executing test programs: 49.983662349s ago: executing program 1 (id=336): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x6c, r0, 0x1, 0x70bd2d, 0x25dfdbbc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a2dc176d40eeb09eb2e9a7f3890704f66a145e15b83b44d5"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="876a531347511fd5b96bc99581a53da2f4abe1a30797e8507a6ad3fbae8d41b4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d64a6652a8a1dc6e"}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4020}, 0x4080) 49.735568458s ago: executing program 1 (id=340): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000001880), 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) 49.485553016s ago: executing program 1 (id=342): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 47.67273833s ago: executing program 1 (id=353): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000040)=ANY=[], 0xa, 0x238, &(0x7f0000000100)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 47.014189113s ago: executing program 1 (id=357): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="0d3328bd7000fedbdf256b00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4c050}, 0x800) 46.329745617s ago: executing program 1 (id=362): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 45.915392051s ago: executing program 32 (id=362): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 3.689675231s ago: executing program 0 (id=623): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0xc, 0x110, 0x1}], 0xc}, 0x8000) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) 3.329142104s ago: executing program 0 (id=628): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x400, &(0x7f0000000100)=ANY=[@ANYRESOCT]) mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 3.16443702s ago: executing program 4 (id=629): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @aes128, 0x10, @desc3}) 3.113581671s ago: executing program 2 (id=631): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x5, @local, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="a8", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) 3.037906204s ago: executing program 0 (id=632): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) 2.771044453s ago: executing program 4 (id=633): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 2.685772476s ago: executing program 2 (id=635): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000240)="f56ed761e9c8219d05f5e35c81ecb8f854b51ecdf2bd4afe000000000000c27e767666f56c32", 0x26, 0xfffffffffffffffe) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "44ee4dcf6df6b457eba45bc88153e9b5cbf7cc1af7b76983c2717759237e827d8b738dbbf41db40d00"}, 0x48, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 2.409784916s ago: executing program 4 (id=637): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 2.343092619s ago: executing program 2 (id=638): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 2.246211182s ago: executing program 3 (id=639): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x37, 0x15, 0x66, 0x80, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) 2.173847554s ago: executing program 4 (id=640): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6282, &(0x7f000000f900)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000002dc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 2.041673879s ago: executing program 2 (id=641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x28, r1, 0x5, 0xffffdfff, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x6, 0x34, @random="ed88"}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x28}}, 0x488c4) 2.02997234s ago: executing program 0 (id=642): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffd}) 2.018791999s ago: executing program 3 (id=643): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000240)) read$nci(r0, &(0x7f0000000680)=""/4096, 0x1000) 1.785563598s ago: executing program 2 (id=644): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xfa, 0x62a2, &(0x7f000001c2c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0xcc042, 0x8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 1.689280301s ago: executing program 3 (id=645): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'vcan0\x00', {0x2, 0x4e24, @multicast2}}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0xcf, 0x0}}, {{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000100), 0x10}}], 0x2, 0x45) 1.613592024s ago: executing program 0 (id=646): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="71756f74612c646973636172642c646973636172642c696f636861727365743d6b6f69382d72752c646973636172642c00f4193eb3ba2a0d5ff2cd7374288ff89ec513a53e007345decb720900f8312da2463eb0edf52fad1a00ebd41c14b3ce75d0cffefd379624b16f7260c835713b263352e03b5cb8fa0c042bd1225ed4ded2b62e12fea4d7e61b738e40781e58d5fff112364ac140f419e5dafecd283b3fab6b142ddbc893b35a81fe9265591ef35fa2928e095fee4c10b22e4212378de59bca0307cc644b9620b63f0000007bbbd422d87856b71348b8f45398b9660b6b3e8ee8a8c32f3234cb46e2cd827ec25c1ca4d046bc004f8df7b1ee690a5e50510700d80c7fa65fa724d0e1b4369f1b64fe249a0312010000004ac983de925f52d735b03fea941b1e948ad8d19cfda5b799325fd69d14fcf6cdde7700a63150eb3699e5314e0827750e244150ec19f3f3f1d8be542c084b5e40bfaa8ad206d2a33b0ddbd7f8e07dc7d17174a4549ffaf5976949cb69658c42ec7cd9fe8ad82852cefb04646edb3a41eb514eb6a772b3ee9f21e25822b54ec33e592d5c040946721101d53aff21f90351c95aa0f73f1853d6afcbf9448b220e988466066fa5c09e6198fc4520d199b93bdedee87c4043815aa05668a06f8da96680ccc1a139ade90f5c79af46208f9762f54e7c29088d9de69bd2d51c6b9c42209ddc3880051303b855853407d959a5777dce25201c5ea1faa084c36e3e349915ebec53435eb2910c59394ee84ba3baf9c440ae5833c23f46b0eaac543ce0c80ba0603213e53ea59755070b18bc10b9224aa082d96700e63d51c5bffa4f712c2d7fafb9cf506c06e1ddad4fc19038407786fedb9afdfb11a5f182676dd84c919f71d5eee2f3b740b68ee7f6518eb9d8baa26f1c3871f863b134ee942eb3af92d19e70d8268839cd7b4637f0627299f99b1873ca165e410f8bd421e1a4859fd9bd6bb34d25c07e1a52b9668a530b10b8585d797124a6975a71aedbe557a17b06bbfe547aa553c3d08b8921a4b0d938c03687bd48a9a387b4c066c056f457fba5738775b900a1e82a89aae1494b05c4bb0fc8ed1a93688bf850a4f7b0942eda1f16ecf043efa6b8c1f9e0fba31f4a58ed0031180fb1b8a00e4a86826b030000002dd1272a3d1609bed545b86ca7a6bf569ed35d0000ca23b0de742f6008fdf20928370d88f8c04bc3b97b9a9e0062e8fc5fd2337d85a66bd20730f3153db2459fb34c134c06c19364e9645e83040dd16ee08f18f0ba69ac9ca3e25e15442b07000000d30d38a64613b535fa808a9b3bae00bc371271d45db200a5cbf433e2f6dd03b7c7fcc040781e5151c9badb787e7e1e2f39d60998919aa8dbd156f31a5b7fa5f9e5ec01e8c799edc322703c7fc4a81ab9bc02dd96714ee9d7e75d28d040ff3566404fd6db547a4b553197c1f316d20ea54f9459cd81351a510d101e90eabe6dc6c6ac3ffa189c073a5fb3fc382df620bf5af9e638819c77a051e6875866a849f6f578c068c0e4c7cfbc15033997efa853c96297b3201dd30ea40dc94d010a0c33da9f63a10b8f813dc789b80be3bb3f00ee58b30d5c03a6ddbf418ac1b3d4a13839e4b273c4f914bed13f8806295495d41609478798396aeec06e8d342efd8ac6b422f6c23a011b1400000000000000bc2a02094e19a1ee8bb3c3c0c088ae8efaf68c85001faf7cf5426fb7c5c367ed93eb25c48a293549d15b91b59f1b574b3f6171f8e56a402ec56bdf51d90312b3ca5398f4050000007504be21456ec953bf06f12fff20c31e7c8b55fee5c49aa939830b09995ff149258118f9aae29206f9731288b56b10de51525665fdb4e289b1c177df97af3085f82045fbd012f1dde94ffecd90b7b63d8197d9c24a6fe5915ac7d7240847f6d0bf9099ee117c83e363f2ad36a4a9f4faa5734afe9770c38c565cae87a408d0acbb2db7db9174acab60a344814ee643fa82ba41706d2360269ed276e13dd83abbc258f07b0d58ab0b65200b18b7f9f871bcb43fec5a2e3789ecd0c1069d2da80b93c86dff8933e70c2108346003ddf6b60379eee63b66e7341cdd8f87ed9f11894c9ae040976321d87405b492f419ebfa77eb367ca6e360b808451102f54893d7d1695c24bcc184b1e7d19940a2b6931ade8638dd2b85a86dc511dbb97f5035d07ca024076e8581db332b1c5f135fe6b2e9d2c18c9d5d5a524d3d5b2657e4b28f1a09696bd5b076a1471c8b2ab2ca3ba57843af1d03590f4e8985e1c463c781bb03ad7ec816ea70bbe06411aae001e0ca72ee7e828ad14bb7a092d883ad000554bf7f00000000000075cc01f8a2e1802192f09e77bc488b3bd3f08a9ce88ba2e2bcc23cf5d7372b339ce1f5003db0ad70fa6e93aa908a2ced81f5514e23e2f94ff03c1c02f5a9195f4735563efd0a1fc7dafcfb3dae043fe0c172ec3a12747d7abf4382bf7453c13df994641017a0f461add956ef8f834b762af30408af6a61f317fd3c7b0816236a768601b7c6606ba52ff126eb13d33c915c5da99d118db488da3f3d7783a608282a93fcbe0910f0389c3ef91de7c84e23daa6554c42b2b3e9f70a9f790f29011a0b5101b23bfeba6e52877ed8a188958e39375dd203d434bef4dc82cc8a21fc40c6e6e6a2475f70bf1503beb9555036e63bdc937f8a4d61b21d06a9d3239d1df6f2e9ef16dee590b15ac028c6d873bb2965374b733d8e11ba763ab157ed91dd871b098c0543dcbba4cf67db8c83c84369dc67735fa4faa0fdcf34b1c6a862ccae9fe4fa28746504643b57f02623a2ef34ea90f2e7f7dd771f8f75217c799d978a3533fcfab6c6f5391b626d61b400f08172fc675e2a062d06c31b85452804f7b125c291f60a02a5d62271e96fe70d64bae36e28b42e197259169ebee8f64355544fb4d8b83c1c8fad02cd1a2e56a6f6e82ec7719a48a1bea803546b8af7a89faf7cef94d8ada45fc0a98a79ba90c95262f0110725c6bf7c81237534dcd6a8a113bd8ac48b7db5526ab762cec103674742476cd6b92b8c7abcfb1f8e08f0a05c1b209187049f3206bd545e8c20f8db6d8a7cdd0c9ecbb9011b611a013cd581521dfcb028d59d5c69d286fb93e4c498b3aaff7e0cdcf1f41fec65ebdbe4c2bf453140251cdd94c32b87c4634d6500000000000000000000000000000000816e6c33f92dca3e03c400"/2303], 0xff, 0x5e9b, &(0x7f000000bc00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x60843, 0x15) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xfc6, 0xfffffffffffffff7, 0x6976}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000006900)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557bae1d1d61efea623114a0b4b52f68387d2040dd08c5aa753b596ede3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f42822d1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859001e651c1d404a5f28eaf3781f2288249ae7b385a9c40929cae3fa5a6f142cd057ebdbc000000e34db2d14a6458499de0819d89f570a72fee0dd8cf744e0daf8f31b1d8edda87296ca7632e1e6e23", @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000000)) 1.43772477s ago: executing program 3 (id=647): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002600)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0xffffffffffffffff, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) 1.239025877s ago: executing program 3 (id=648): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000014"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x91) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 790.092522ms ago: executing program 4 (id=649): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = socket(0x28, 0x801, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 672.143837ms ago: executing program 3 (id=650): r0 = gettid() syz_open_procfs(r0, &(0x7f00000010c0)='setgroups\x00') exit(0xffff) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 229.685842ms ago: executing program 2 (id=651): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000020c0)={r2, 0xfffffffe}, &(0x7f0000002100)=0x8) 46.614519ms ago: executing program 4 (id=652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000013340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000013380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000013440)={0x0, 0x0, &(0x7f0000013400)={&(0x7f00000133c0)={0x1c, r1, 0x119, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4000) 0s ago: executing program 0 (id=653): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.199' (ED25519) to the list of known hosts. [ 78.910019][ T5752] cgroup: Unknown subsys name 'net' [ 79.077592][ T5752] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.772223][ T5752] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.428259][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.435004][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.440218][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.445218][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.452576][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.463211][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.469779][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.477335][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.480769][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.486196][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.493430][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.509370][ T5080] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.517061][ T5080] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.525463][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.542025][ T5080] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.549927][ T5080] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.557488][ T5080] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.565649][ T5080] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.575111][ T5080] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.583375][ T5080] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.591667][ T5080] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.633169][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.642404][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.655052][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.166908][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 83.186793][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 83.292023][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 83.366883][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 83.437894][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.445843][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.453759][ T5771] bridge_slave_0: entered allmulticast mode [ 83.461250][ T5771] bridge_slave_0: entered promiscuous mode [ 83.481983][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.489375][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.496678][ T5764] bridge_slave_0: entered allmulticast mode [ 83.507098][ T5764] bridge_slave_0: entered promiscuous mode [ 83.533391][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.540886][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.551117][ T5771] bridge_slave_1: entered allmulticast mode [ 83.558426][ T5771] bridge_slave_1: entered promiscuous mode [ 83.573477][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.580748][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.588400][ T5764] bridge_slave_1: entered allmulticast mode [ 83.595647][ T5764] bridge_slave_1: entered promiscuous mode [ 83.644765][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.652069][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.659432][ T5765] bridge_slave_0: entered allmulticast mode [ 83.666649][ T5765] bridge_slave_0: entered promiscuous mode [ 83.700589][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.724704][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.734822][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.742244][ T5765] bridge_slave_1: entered allmulticast mode [ 83.750189][ T5765] bridge_slave_1: entered promiscuous mode [ 83.769504][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.781032][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.801514][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.812114][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.819446][ T5766] bridge_slave_0: entered allmulticast mode [ 83.826484][ T5766] bridge_slave_0: entered promiscuous mode [ 83.853356][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.876263][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.883692][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.891902][ T5766] bridge_slave_1: entered allmulticast mode [ 83.899819][ T5766] bridge_slave_1: entered promiscuous mode [ 83.929196][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.964485][ T5764] team0: Port device team_slave_0 added [ 83.986600][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.009013][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.023444][ T5764] team0: Port device team_slave_1 added [ 84.033200][ T5771] team0: Port device team_slave_0 added [ 84.043106][ T5771] team0: Port device team_slave_1 added [ 84.065634][ T5765] team0: Port device team_slave_0 added [ 84.075047][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.116250][ T5765] team0: Port device team_slave_1 added [ 84.166339][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.173620][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.203188][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.226721][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.233943][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.260682][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.273455][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.282057][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.308111][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.332797][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.339998][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.366904][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.382230][ T5766] team0: Port device team_slave_0 added [ 84.391560][ T5766] team0: Port device team_slave_1 added [ 84.406291][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.413574][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.440107][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.463193][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.470420][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.496921][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.534270][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.541538][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.567902][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.608896][ T5771] hsr_slave_0: entered promiscuous mode [ 84.616313][ T5771] hsr_slave_1: entered promiscuous mode [ 84.626066][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.633166][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.659557][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.671303][ T5779] Bluetooth: hci1: command tx timeout [ 84.677907][ T5779] Bluetooth: hci3: command tx timeout [ 84.678127][ T51] Bluetooth: hci2: command tx timeout [ 84.745744][ T5765] hsr_slave_0: entered promiscuous mode [ 84.751961][ T51] Bluetooth: hci0: command tx timeout [ 84.759417][ T5765] hsr_slave_1: entered promiscuous mode [ 84.766954][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.775276][ T5765] Cannot create hsr debugfs directory [ 84.821178][ T5766] hsr_slave_0: entered promiscuous mode [ 84.827900][ T5766] hsr_slave_1: entered promiscuous mode [ 84.834378][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.843075][ T5766] Cannot create hsr debugfs directory [ 84.873450][ T5764] hsr_slave_0: entered promiscuous mode [ 84.880497][ T5764] hsr_slave_1: entered promiscuous mode [ 84.886786][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.894594][ T5764] Cannot create hsr debugfs directory [ 85.358337][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.373552][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.384562][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.396458][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.462885][ T5765] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.479236][ T5765] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.495132][ T5765] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.506104][ T5765] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.584482][ T5764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.600813][ T5764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.639700][ T5764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.653708][ T5764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.745454][ T5766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.756378][ T5766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.767390][ T5766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.778616][ T5766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.867276][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.940136][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.987418][ T2915] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.994862][ T2915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.029377][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.049548][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.056716][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.081081][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.136659][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.156193][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.163445][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.178950][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.207131][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.214324][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.251670][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.259030][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.280863][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.295249][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.302486][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.354593][ T5764] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.365549][ T5764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.420093][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.483466][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.490874][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.562699][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.569946][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.747998][ T51] Bluetooth: hci3: command tx timeout [ 86.754017][ T5772] Bluetooth: hci1: command tx timeout [ 86.761089][ T5779] Bluetooth: hci2: command tx timeout [ 86.794502][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.830146][ T51] Bluetooth: hci0: command tx timeout [ 86.975560][ T5771] veth0_vlan: entered promiscuous mode [ 87.032936][ T5771] veth1_vlan: entered promiscuous mode [ 87.069476][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.122059][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.246209][ T5771] veth0_macvtap: entered promiscuous mode [ 87.257336][ T5765] veth0_vlan: entered promiscuous mode [ 87.283160][ T5771] veth1_macvtap: entered promiscuous mode [ 87.299901][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.339834][ T5765] veth1_vlan: entered promiscuous mode [ 87.383680][ T5764] veth0_vlan: entered promiscuous mode [ 87.424654][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.462860][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.491000][ T5764] veth1_vlan: entered promiscuous mode [ 87.512025][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.522136][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.533128][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.542436][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.556574][ T5765] veth0_macvtap: entered promiscuous mode [ 87.585401][ T5766] veth0_vlan: entered promiscuous mode [ 87.601922][ T5765] veth1_macvtap: entered promiscuous mode [ 87.673727][ T5766] veth1_vlan: entered promiscuous mode [ 87.720715][ T5764] veth0_macvtap: entered promiscuous mode [ 87.750093][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.780875][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.796375][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.813793][ T5764] veth1_macvtap: entered promiscuous mode [ 87.832073][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.852821][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.865799][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.921781][ T5765] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.932518][ T5765] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.943125][ T5765] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.952492][ T5765] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.966629][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.978569][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.993581][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.004409][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.017166][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.040166][ T2915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.052809][ T2915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.075426][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.089255][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.102336][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.115079][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.127300][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.156706][ T5764] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.172148][ T5764] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.182636][ T5764] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.191961][ T5764] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.214439][ T5766] veth0_macvtap: entered promiscuous mode [ 88.289413][ T5766] veth1_macvtap: entered promiscuous mode [ 88.321936][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.333837][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.402632][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.420603][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.445938][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.456646][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.468399][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.480435][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.490937][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.502821][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.520439][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.557243][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.568833][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.581288][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.599370][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.613929][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.626537][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.639436][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.679997][ T2915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.700442][ T5766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.708758][ T2915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.729199][ T5766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.753323][ T5766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.763255][ T5766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.773620][ T5830] syz.1.2[5830]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 88.825556][ T5830] loop1: detected capacity change from 0 to 1024 [ 88.837470][ T51] Bluetooth: hci3: command tx timeout [ 88.843185][ T51] Bluetooth: hci2: command tx timeout [ 88.845151][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.848774][ T5779] Bluetooth: hci1: command tx timeout [ 88.873948][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.907939][ T51] Bluetooth: hci0: command tx timeout [ 88.942733][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.962924][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.042995][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.062901][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.217367][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.243827][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.583483][ T5836] loop3: detected capacity change from 0 to 4096 [ 89.696237][ T5840] loop2: detected capacity change from 0 to 1024 [ 89.716842][ T5836] ntfs: volume version 3.1. [ 89.741863][ T5840] EXT4-fs: Ignoring removed bh option [ 89.788952][ T5840] EXT4-fs: Ignoring removed oldalloc option [ 89.805873][ T5840] EXT4-fs: Ignoring removed nobh option [ 89.831401][ T5842] __sock_release: fasync list not empty! [ 89.864645][ T5840] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.939903][ T5840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.195937][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.808052][ T5862] loop3: detected capacity change from 0 to 1024 [ 90.908197][ T51] Bluetooth: hci2: command tx timeout [ 90.913723][ T5772] Bluetooth: hci1: command tx timeout [ 90.919309][ T5772] Bluetooth: hci3: command tx timeout [ 90.988465][ T5779] Bluetooth: hci0: command tx timeout [ 91.232025][ T5851] loop0: detected capacity change from 0 to 32768 [ 91.241800][ T5853] loop1: detected capacity change from 0 to 32768 [ 91.263513][ T5851] ======================================================= [ 91.263513][ T5851] WARNING: The mand mount option has been deprecated and [ 91.263513][ T5851] and is ignored by this kernel. Remove the mand [ 91.263513][ T5851] option from the mount to silence this warning. [ 91.263513][ T5851] ======================================================= [ 91.380834][ T5853] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 91.561787][ T5853] XFS (loop1): Ending clean mount [ 91.569479][ T5851] JBD2: Ignoring recovery information on journal [ 91.622167][ T5853] XFS (loop1): Quotacheck needed: Please wait. [ 91.723224][ T5851] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 91.805599][ T5853] XFS (loop1): Quotacheck: Done. [ 91.945673][ T28] audit: type=1800 audit(1775043306.631:2): pid=5853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9" name="file2" dev="loop1" ino=4423 res=0 errno=0 [ 92.001654][ T28] audit: type=1800 audit(1775043306.681:3): pid=5851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8" name="bus" dev="loop0" ino=17059 res=0 errno=0 [ 92.126252][ T5771] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 92.210628][ T788] cfg80211: failed to load regulatory.db [ 92.255871][ T5766] ocfs2: Unmounting device (7,0) on (node local) [ 92.676650][ T5886] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 92.712428][ T5886] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 92.735353][ T5886] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 92.743462][ T5886] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 92.758240][ T5886] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 92.771588][ T5886] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 93.183737][ T5904] loop1: detected capacity change from 0 to 2048 [ 93.218084][ T788] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.244399][ T5905] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.447101][ T788] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 93.458007][ T788] usb 4-1: config 0 has no interface number 0 [ 93.474302][ T788] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 93.484021][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.499879][ T788] usb 4-1: Product: syz [ 93.504211][ T788] usb 4-1: Manufacturer: syz [ 93.509595][ T788] usb 4-1: SerialNumber: syz [ 93.523970][ T788] usb 4-1: config 0 descriptor?? [ 93.765767][ T788] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 93.808783][ T788] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 93.828213][ T788] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 93.846273][ T788] usb 4-1: media controller created [ 93.903134][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.000066][ T788] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 94.067515][ T5913] loop2: detected capacity change from 0 to 64 [ 94.164416][ T788] usb 4-1: USB disconnect, device number 2 [ 94.267554][ T5907] loop1: detected capacity change from 0 to 32768 [ 94.301368][ T5915] loop0: detected capacity change from 0 to 4096 [ 94.352056][ T5907] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 94.370417][ T5915] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 94.636613][ T5907] XFS (loop1): Ending clean mount [ 94.808958][ T23] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 94.871281][ T5771] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 95.021276][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 95.040205][ T23] usb 3-1: not running at top speed; connect to a high speed hub [ 95.069190][ T23] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 95.097765][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.119281][ T23] usb 3-1: Product: syz [ 95.127843][ T23] usb 3-1: Manufacturer: syz [ 95.135886][ T23] usb 3-1: SerialNumber: syz [ 95.693709][ T5940] loop1: detected capacity change from 0 to 2048 [ 95.788371][ T5940] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.972041][ T5944] loop3: detected capacity change from 0 to 1024 [ 96.049318][ T23] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 96.068790][ T23] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 96.120837][ T5779] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 96.130544][ T5779] Bluetooth: hci2: Injecting HCI hardware error event [ 96.139287][ T5779] Bluetooth: hci2: hardware error 0x00 [ 96.219244][ T23] usb 3-1: USB disconnect, device number 2 [ 96.424940][ T48] hfsplus: b-tree write err: -5, ino 25 [ 96.441090][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.471976][ T48] hfsplus: b-tree write err: -5, ino 4 [ 96.484956][ T48] hfsplus: b-tree write err: -5, ino 2 [ 96.571255][ T5949] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.790093][ T5947] loop0: detected capacity change from 0 to 32768 [ 97.004734][ T5947] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 97.004734][ T5947] [ 97.074389][ T5947] xtLookup: xtSearch returned -5 [ 97.084549][ T5947] add_index: get/read_metapage failed! [ 97.097875][ T5947] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 97.097875][ T5947] [ 97.123061][ T5947] xtLookup: xtSearch returned -5 [ 97.153137][ T5947] free_index: error reading directory table [ 97.170169][ T5947] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 97.170169][ T5947] [ 97.197915][ T5947] xtLookup: xtSearch returned -5 [ 97.204351][ T5947] free_index: error reading directory table [ 97.218081][ T5947] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 97.218081][ T5947] [ 97.232618][ T5961] loop1: detected capacity change from 0 to 4096 [ 97.241250][ T5947] xtLookup: xtSearch returned -5 [ 97.246289][ T5947] free_index: error reading directory table [ 97.283898][ T5947] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 97.283898][ T5947] [ 97.302489][ T5961] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 97.315854][ T5947] xtLookup: xtSearch returned -5 [ 97.330179][ T5947] free_index: error reading directory table [ 97.337433][ T5947] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 97.337433][ T5947] [ 97.365871][ T5947] xtLookup: xtSearch returned -5 [ 97.373419][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 97.382497][ T5947] free_index: error reading directory table [ 97.423683][ T5961] ntfs3: loop1: Failed to load $Extend (-22). [ 97.433610][ T5961] ntfs3: loop1: Failed to initialize $Extend. [ 97.708680][ T5967] hsr0: entered promiscuous mode [ 97.750478][ T5967] macsec1: entered allmulticast mode [ 97.755864][ T5967] hsr0: entered allmulticast mode [ 97.770543][ T5967] hsr_slave_0: entered allmulticast mode [ 97.776559][ T5967] hsr_slave_1: entered allmulticast mode [ 97.824464][ T5967] hsr0: left allmulticast mode [ 97.829602][ T5967] hsr_slave_0: left allmulticast mode [ 97.835650][ T5967] hsr_slave_1: left allmulticast mode [ 98.250669][ T5983] devpts: called with bogus options [ 98.359803][ T5779] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 98.667814][ T5809] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.766683][ T5985] loop0: detected capacity change from 0 to 32768 [ 98.799122][ T5974] loop3: detected capacity change from 0 to 32768 [ 98.821597][ T5974] gfs2: fsid=Աrۻ_ [ 98.821597][ T5974] b瀫]k;.ĠO:.tUM: Trying to join cluster "lock_nolock", "Աrۻ_ [ 98.821597][ T5974] b瀫]k;.ĠO:.tUM" [ 98.840372][ T5985] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 98.858749][ T5974] gfs2: fsid=Աrۻ_ [ 98.858749][ T5974] b瀫]k;.ĠO:.tUM: Now mounting FS (format 1801)... [ 98.883901][ T5809] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 98.900168][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.909107][ T5809] usb 3-1: Product: syz [ 98.913405][ T5809] usb 3-1: Manufacturer: syz [ 98.918538][ T5809] usb 3-1: SerialNumber: syz [ 98.947098][ T5985] XFS (loop0): Ending clean mount [ 98.958247][ T5985] XFS (loop0): Quotacheck needed: Please wait. [ 99.027550][ T5985] XFS (loop0): Quotacheck: Done. [ 99.037798][ T5974] gfs2: fsid=Աrۻ_ [ 99.037798][ T5974] b瀫]k;.ĠO:.tUM.s: journal 0 mapped with 5 extents in 0ms [ 99.223198][ T5974] gfs2: fsid=Աrۻ_ [ 99.223198][ T5974] b瀫]k;.ĠO:.tUM.s: first mount done, others may mount [ 99.343712][ T5766] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.678550][ T5809] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 99.914233][ T5807] usb 3-1: USB disconnect, device number 3 [ 100.491363][ T6001] loop3: detected capacity change from 0 to 32768 [ 100.565041][ T6001] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 100.593454][ T6001] JBD2: Ignoring recovery information on journal [ 100.825132][ T6001] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 101.208500][ T5764] ocfs2: Unmounting device (7,3) on (node local) [ 101.398119][ T5754] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.598651][ T5754] usb 3-1: Using ep0 maxpacket: 16 [ 101.620142][ T5754] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.640755][ T5754] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.665168][ T5754] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 101.703152][ T5754] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 101.733610][ T5754] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.772629][ T5754] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 101.800461][ T5754] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 101.817754][ T5754] usb 3-1: Manufacturer: syz [ 101.833987][ T5754] usb 3-1: config 0 descriptor?? [ 101.948180][ T788] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.131416][ T788] usb 4-1: Using ep0 maxpacket: 8 [ 102.154491][ T788] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 102.177777][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.206836][ T788] usb 4-1: Product: syz [ 102.218929][ T788] usb 4-1: Manufacturer: syz [ 102.223649][ T788] usb 4-1: SerialNumber: syz [ 102.261046][ T788] usb 4-1: config 0 descriptor?? [ 102.268415][ T5754] rc_core: IR keymap rc-hauppauge not found [ 102.285342][ T5754] Registered IR keymap rc-empty [ 102.300240][ T5754] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.324910][ T6055] loop1: detected capacity change from 0 to 8192 [ 102.338197][ T5754] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.370272][ T5754] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 102.403008][ T5754] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 102.466408][ T5754] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.494277][ T788] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 102.508143][ T5754] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.546438][ T5754] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.590790][ T5754] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.637957][ T5754] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.678959][ T5754] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.731127][ T5754] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.777993][ T5754] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.817892][ T5754] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.870453][ T5754] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.910165][ T5754] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 102.941569][ T5754] mceusb 3-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 102.978134][ T5754] usb 3-1: USB disconnect, device number 4 [ 103.113090][ T788] usb write operation failed. (-71) [ 103.140327][ T788] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 103.178947][ T788] dvbdev: DVB: registering new adapter (Terratec H7) [ 103.198363][ T788] usb 4-1: media controller created [ 103.204968][ T788] usb read operation failed. (-71) [ 103.217899][ T788] usb write operation failed. (-71) [ 103.240412][ T788] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 103.255577][ T788] usb 4-1: USB disconnect, device number 3 [ 103.349932][ T6062] loop0: detected capacity change from 0 to 32768 [ 103.409327][ T6062] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 103.505448][ T6062] (syz.0.74,6062,0):ocfs2_double_lock:1190 ERROR: status = -2 [ 103.516404][ T6062] (syz.0.74,6062,0):ocfs2_rename:1299 ERROR: status = -2 [ 103.529955][ T6062] (syz.0.74,6062,0):ocfs2_rename:1690 ERROR: status = -2 [ 103.683476][ T5766] ocfs2: Unmounting device (7,0) on (node local) [ 103.787493][ T6075] netlink: 68 bytes leftover after parsing attributes in process `syz.1.80'. [ 103.884871][ T6077] loop0: detected capacity change from 0 to 1024 [ 104.065469][ T28] audit: type=1800 audit(1775043318.751:4): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.79" name="file1" dev="loop0" ino=3 res=0 errno=0 [ 104.086428][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.253498][ T60] hfsplus: b-tree write err: -5, ino 3 [ 104.453183][ T6088] loop2: detected capacity change from 0 to 2048 [ 104.546140][ T6088] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.818241][ T788] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.836893][ T6103] loop1: detected capacity change from 0 to 64 [ 104.864010][ T6103] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 105.019001][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 105.027091][ T788] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 105.040263][ T788] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 105.056078][ T788] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.079980][ T788] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 105.089540][ T788] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 105.098450][ T788] usb 4-1: Product: syz [ 105.102893][ T788] usb 4-1: Manufacturer: syz [ 105.107607][ T788] usb 4-1: SerialNumber: syz [ 105.127472][ T788] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input6 [ 105.259242][ T5809] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.448381][ T788] usb 4-1: USB disconnect, device number 4 [ 105.448456][ C1] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 105.465994][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 105.475832][ T5809] usb 3-1: Using ep0 maxpacket: 16 [ 105.487007][ T5809] usb 3-1: unable to get BOS descriptor or descriptor too short [ 105.514535][ T788] appletouch 4-1:1.0: input: appletouch disconnected [ 105.515784][ T5809] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.556627][ T5809] usb 3-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 105.592639][ T5809] usb 3-1: config 1 interface 0 has no altsetting 0 [ 105.616226][ T5809] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 105.652630][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.661257][ T5809] usb 3-1: Product: syz [ 105.665625][ T5809] usb 3-1: Manufacturer: syz [ 105.670993][ T5809] usb 3-1: SerialNumber: syz [ 105.685712][ T5809] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input7 [ 105.774126][ T6118] loop0: detected capacity change from 0 to 4096 [ 105.788572][ T6118] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 105.865960][ T6118] ntfs3: loop0: Inode r=19 is not in use! [ 105.888033][ T6118] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 105.909694][ T5120] bcm5974 3-1:1.0: could not read from device [ 105.926628][ T5809] bcm5974 3-1:1.0: could not read from device [ 105.941989][ T6118] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 105.966296][ T5809] input: failed to attach handler mousedev to device input7, error: -5 [ 105.996621][ T5120] bcm5974 3-1:1.0: could not read from device [ 106.013718][ T5809] usb 3-1: USB disconnect, device number 5 [ 106.725424][ T6120] loop1: detected capacity change from 0 to 32768 [ 106.770196][ T6133] loop0: detected capacity change from 0 to 256 [ 106.809514][ T6120] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 106.979087][ T6120] XFS (loop1): Ending clean mount [ 107.244285][ T6126] loop3: detected capacity change from 0 to 32768 [ 107.266939][ T5771] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 107.307561][ T6126] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 107.376117][ T6126] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 107.602105][ T6154] loop2: detected capacity change from 0 to 64 [ 107.736248][ T6156] Zero length message leads to an empty skb [ 107.761110][ T5764] ocfs2: Unmounting device (7,3) on (node local) [ 107.990032][ T6160] loop0: detected capacity change from 0 to 128 [ 108.567174][ T6174] warning: `syz.0.119' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.247656][ C0] sched: RT throttling activated [ 109.485824][ T6169] loop2: detected capacity change from 0 to 131072 [ 109.505920][ T6169] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 109.514479][ T6169] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 109.557005][ T6169] F2FS-fs (loop2): invalid crc value [ 109.582481][ T6169] F2FS-fs (loop2): Found nat_bits in checkpoint [ 109.653381][ T6169] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 109.660924][ T6169] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 109.795332][ T6169] overlayfs: failed to resolve './file0/file1': -2 [ 109.971941][ T6190] loop0: detected capacity change from 0 to 4096 [ 110.000876][ T6190] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.402248][ T6190] EXT4-fs (loop0): Test dummy encryption mode enabled [ 110.449923][ T6190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.463947][ T6201] loop1: detected capacity change from 0 to 256 [ 110.653166][ T6201] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d) [ 110.874722][ T6190] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 111.055221][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.688446][ T6223] loop2: detected capacity change from 0 to 64 [ 111.727249][ T6223] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 111.753251][ T6212] loop3: detected capacity change from 0 to 32768 [ 112.042308][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.137'. [ 112.772094][ T6249] loop2: detected capacity change from 0 to 256 [ 112.808647][ T6252] loop0: detected capacity change from 0 to 256 [ 112.816125][ T6252] exfat: Deprecated parameter 'utf8' [ 112.841382][ T6252] exfat: Deprecated parameter 'utf8' [ 112.860833][ T6249] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 112.925335][ T6252] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 113.286139][ T6262] loop3: detected capacity change from 0 to 256 [ 113.347581][ T6262] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 113.703377][ T6266] loop1: detected capacity change from 0 to 4096 [ 113.734828][ T6266] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 113.765628][ T6266] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 113.803360][ T6266] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 113.841912][ T6266] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 113.877789][ T6266] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 113.928175][ T6266] ntfs: volume version 3.1. [ 113.935712][ T6266] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 113.978725][ T6266] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 114.069660][ T6266] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 114.174726][ T6266] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 114.223786][ T6266] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 114.446901][ T6283] input: syz1 as /devices/virtual/input/input8 [ 114.745415][ T6292] loop2: detected capacity change from 0 to 512 [ 114.847461][ T6292] FAT-fs (loop2): error, corrupted file size (i_pos 51, 9216) [ 114.872534][ T6292] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 114.893655][ T6292] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 114.943297][ T6292] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 114.978451][ T6292] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 115.699328][ T6314] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.897789][ T5828] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.056741][ T6328] loop2: detected capacity change from 0 to 256 [ 116.087734][ T5828] usb 2-1: Using ep0 maxpacket: 16 [ 116.110362][ T5828] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 116.144369][ T5828] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 116.158003][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.187589][ T5828] usb 2-1: Product: syz [ 116.196558][ T5828] usb 2-1: Manufacturer: syz [ 116.213306][ T5828] usb 2-1: SerialNumber: syz [ 116.233116][ T5828] usb 2-1: config 0 descriptor?? [ 116.246875][ T6332] mmap: syz.3.184 (6332) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.259829][ T5828] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 116.299935][ T5828] usb 2-1: Detected FT232R [ 116.463606][ T6335] loop0: detected capacity change from 0 to 1024 [ 116.502616][ T5828] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 116.784820][ T5828] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 117.028185][ T8] usb 2-1: USB disconnect, device number 2 [ 117.064399][ T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 117.096420][ T6348] loop0: detected capacity change from 0 to 4096 [ 117.118674][ T8] ftdi_sio 2-1:0.0: device disconnected [ 117.144963][ T6348] ntfs: volume version 3.1. [ 117.461192][ T6357] loop3: detected capacity change from 0 to 1024 [ 117.714964][ T6363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.198'. [ 117.847834][ T6367] syz.3.199 uses obsolete (PF_INET,SOCK_PACKET) [ 117.973076][ T6370] process 'syz.1.202' launched '/dev/fd/3' with NULL argv: empty string added [ 118.296368][ T6359] loop2: detected capacity change from 0 to 40427 [ 118.310250][ T6359] F2FS-fs (loop2): invalid crc value [ 118.340742][ T6359] F2FS-fs (loop2): Found nat_bits in checkpoint [ 118.468731][ T6359] F2FS-fs (loop2): Start checkpoint disabled! [ 118.490178][ T6359] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 118.754543][ T6384] team_slave_0: entered promiscuous mode [ 118.760792][ T6384] team_slave_1: entered promiscuous mode [ 118.837544][ T6373] loop3: detected capacity change from 0 to 32768 [ 118.865955][ T48] kworker/u4:3: attempt to access beyond end of device [ 118.865955][ T48] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 118.896139][ T48] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 118.903989][ T48] kworker/u4:3: attempt to access beyond end of device [ 118.903989][ T48] loop2: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 118.925276][ T48] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 119.837115][ T6400] loop0: detected capacity change from 0 to 2048 [ 119.867017][ T6400] EXT4-fs: Ignoring removed i_version option [ 119.994477][ T6400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.165411][ T6400] EXT4-fs error (device loop0): ext4_find_extent:945: inode #2: comm syz.0.215: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 120.220584][ T6400] EXT4-fs (loop0): Remounting filesystem read-only [ 120.275172][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.556405][ T6426] loop1: detected capacity change from 0 to 128 [ 120.619316][ T6426] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.734953][ T6426] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.863403][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 120.863419][ T28] audit: type=1800 audit(1775043335.551:6): pid=6426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.223" name="file2" dev="loop1" ino=12 res=0 errno=0 [ 120.953229][ T5771] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.525765][ T6432] loop2: detected capacity change from 0 to 32768 [ 121.553848][ T6432] XFS: noikeep mount option is deprecated. [ 121.608541][ T6432] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 121.867605][ T6466] loop0: detected capacity change from 0 to 512 [ 121.901771][ T6466] EXT4-fs: Ignoring removed i_version option [ 121.932339][ T6466] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.962208][ T6466] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.983445][ T6466] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.148598][ T6432] XFS (loop2): Ending clean mount [ 122.179919][ T6432] XFS (loop2): Quotacheck needed: Please wait. [ 122.261073][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.294829][ T6432] XFS (loop2): Quotacheck: Done. [ 122.444364][ T6447] loop1: detected capacity change from 0 to 32768 [ 122.601521][ T5765] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.671836][ T6482] loop3: detected capacity change from 0 to 1024 [ 122.706755][ T6482] hfsplus: walked past end of dir [ 123.580635][ T6480] loop0: detected capacity change from 0 to 131072 [ 123.677297][ T6480] F2FS-fs (loop0): Found nat_bits in checkpoint [ 123.756734][ T6480] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 123.857461][ T6480] F2FS-fs (loop0): recover xattr in inode (7), error(0) [ 123.866490][ T6480] F2FS-fs (loop0): set inode (7) has corrupted xattr [ 124.010455][ T6492] input: syz0 as /devices/virtual/input/input9 [ 124.510964][ T5807] kernel write not supported for file /sequencer (pid: 5807 comm: kworker/0:4) [ 124.679725][ T6508] netlink: 136 bytes leftover after parsing attributes in process `syz.2.253'. [ 124.723282][ T6508] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 124.951887][ T6514] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.378576][ T6525] loop2: detected capacity change from 0 to 512 [ 125.428897][ T6525] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.447791][ T6525] EXT4-fs: inline encryption not supported [ 125.454457][ T6525] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.529177][ T6525] EXT4-fs (loop2): Test dummy encryption mode enabled [ 125.536133][ T6525] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 125.574567][ T6525] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 125.602988][ T6530] loop3: detected capacity change from 0 to 256 [ 125.633333][ T6525] EXT4-fs (loop2): 1 truncate cleaned up [ 125.662054][ T6525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.014980][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.046447][ T6528] loop1: detected capacity change from 0 to 32768 [ 126.123007][ T6528] [ 126.123007][ T6528] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.123007][ T6528] [ 126.320776][ T6545] loop3: detected capacity change from 0 to 256 [ 126.351237][ T11] read_mapping_page failed! [ 126.370602][ T11] ERROR: (device loop1): txCommit: [ 126.370602][ T11] [ 126.407807][ T28] audit: type=1800 audit(1775043341.091:7): pid=6545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.267" name="bus" dev="loop3" ino=1048610 res=0 errno=0 [ 126.435056][ T11] jfs_write_inode: jfs_commit_inode failed! [ 126.461933][ T5771] [ 126.461933][ T5771] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.461933][ T5771] [ 126.491551][ T6545] Invalid ELF header magic: != ELF [ 126.528033][ T5771] [ 126.528033][ T5771] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.528033][ T5771] [ 126.742449][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 126.868832][ T6555] loop3: detected capacity change from 0 to 2048 [ 126.898816][ T6555] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.370827][ T6579] loop1: detected capacity change from 0 to 32768 [ 128.419637][ T6579] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 128.464840][ T6579] XFS (loop1): Ending clean mount [ 128.650713][ T5771] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 129.009497][ T5779] Bluetooth: hci0: unknown advertising packet type: 0x39 [ 129.009606][ T5779] Bluetooth: hci0: Dropping invalid advertising data [ 129.037897][ T5779] Bluetooth: hci0: Malformed LE Event: 0x02 [ 129.163957][ T6621] loop2: detected capacity change from 0 to 256 [ 130.298254][ T6647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.311'. [ 130.335696][ T6647] bridge0: port 3(vlan2) entered blocking state [ 130.384546][ T6647] bridge0: port 3(vlan2) entered disabled state [ 130.394016][ T6647] vlan2: entered allmulticast mode [ 130.404064][ T6647] gretap0: entered allmulticast mode [ 130.413566][ T6647] vlan2: entered promiscuous mode [ 130.423532][ T6647] gretap0: entered promiscuous mode [ 130.430313][ T6647] bridge0: port 3(vlan2) entered blocking state [ 130.437107][ T6647] bridge0: port 3(vlan2) entered forwarding state [ 130.493771][ T6654] batadv1: entered allmulticast mode [ 130.510511][ T6654] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 130.541611][ T6654] bridge0: port 3(batadv1) entered blocking state [ 130.588166][ T6654] bridge0: port 3(batadv1) entered disabled state [ 130.611869][ T6654] batadv1: entered promiscuous mode [ 130.621836][ T6654] bridge0: port 3(batadv1) entered blocking state [ 130.628707][ T6654] bridge0: port 3(batadv1) entered forwarding state [ 130.982294][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 130.992403][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 131.448164][ T6650] loop0: detected capacity change from 0 to 40427 [ 131.465977][ T6650] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 1) [ 131.480671][ T6650] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 131.557997][ T6650] F2FS-fs (loop0): invalid crc value [ 131.563396][ T6650] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 131.612098][ T28] audit: type=1326 audit(1775043346.301:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.3.322" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21f0b9c819 code=0x0 [ 131.644927][ T6650] F2FS-fs (loop0): Found nat_bits in checkpoint [ 131.731003][ T6650] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 131.753244][ T6650] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 131.888432][ T6677] loop2: detected capacity change from 0 to 4096 [ 131.907238][ T6677] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 132.059626][ T5766] syz-executor: attempt to access beyond end of device [ 132.059626][ T5766] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.079763][ T5766] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 132.638228][ T5807] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 133.168565][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.176613][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.388594][ T6702] loop1: detected capacity change from 0 to 128 [ 133.549092][ T5807] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 133.795813][ T6694] loop2: detected capacity change from 0 to 40427 [ 133.827976][ T6694] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 133.837824][ T6694] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 133.860298][ T6694] F2FS-fs (loop2): invalid crc value [ 134.167952][ T6694] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 134.185696][ T6694] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 134.353261][ T5765] syz-executor: attempt to access beyond end of device [ 134.353261][ T5765] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 134.369149][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 134.391742][ T5765] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 134.403193][ T5828] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 134.411908][ T5765] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 134.420752][ T5765] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 134.428663][ T5765] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 134.567952][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 134.575792][ T23] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.587451][ T23] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.597813][ T5828] usb 1-1: Using ep0 maxpacket: 32 [ 134.616377][ T5828] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 134.636014][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.647910][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 134.673489][ T23] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 134.685469][ T5828] usb 1-1: config 0 descriptor?? [ 134.694196][ T23] usb 2-1: Product: syz [ 134.710601][ T23] usb 2-1: Manufacturer: syz [ 134.738527][ T23] hub 2-1:4.0: USB hub found [ 134.920024][ T5828] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 134.972993][ T5828] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 134.993281][ T23] hub 2-1:4.0: 2 ports detected [ 135.018828][ T5828] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 135.038293][ T5828] usb 1-1: media controller created [ 135.049698][ T6732] capability: warning: `syz.2.346' uses deprecated v2 capabilities in a way that may be insecure [ 135.106929][ T5828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.168235][ T23] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 135.187741][ T23] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 135.222035][ T5828] az6027: usb out operation failed. (-71) [ 135.246583][ T5828] az6027: usb out operation failed. (-71) [ 135.258755][ T23] usb 2-1: USB disconnect, device number 3 [ 135.272074][ T5828] stb0899_attach: Driver disabled by Kconfig [ 135.289259][ T5828] az6027: no front-end attached [ 135.289259][ T5828] [ 135.332405][ T5828] az6027: usb out operation failed. (-71) [ 135.348624][ T5828] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 135.369432][ T5828] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 135.409336][ T5828] dvb-usb: schedule remote query interval to 400 msecs. [ 135.446126][ T5828] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 135.463632][ T5828] usb 1-1: USB disconnect, device number 2 [ 135.569965][ T5828] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 135.677795][ T788] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 135.882436][ T788] usb 4-1: Using ep0 maxpacket: 16 [ 135.910865][ T788] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 135.937957][ T788] usb 4-1: config 0 has no interface number 0 [ 135.957827][ T788] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 135.998190][ T6747] loop1: detected capacity change from 0 to 64 [ 136.018021][ T788] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 136.067290][ T788] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 136.097577][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.105802][ T788] usb 4-1: Product: syz [ 136.149747][ T6747] syz.1.353: attempt to access beyond end of device [ 136.149747][ T6747] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 136.161860][ T788] usb 4-1: Manufacturer: syz [ 136.188198][ T788] usb 4-1: SerialNumber: syz [ 136.199934][ T6747] Buffer I/O error on dev loop1, logical block 512, async page read [ 136.234871][ T788] usb 4-1: config 0 descriptor?? [ 136.251389][ T6747] syz.1.353: attempt to access beyond end of device [ 136.251389][ T6747] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 136.265516][ T6736] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 136.277975][ T6736] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 136.348335][ T6747] Buffer I/O error on dev loop1, logical block 56576, async page read [ 136.472470][ T5771] syz-executor: attempt to access beyond end of device [ 136.472470][ T5771] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 136.486277][ T5771] Buffer I/O error on dev loop1, logical block 512, async page read [ 136.494915][ T5771] syz-executor: attempt to access beyond end of device [ 136.494915][ T5771] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 136.524915][ T5771] Buffer I/O error on dev loop1, logical block 56576, async page read [ 136.547081][ T6736] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 136.597424][ T6736] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 136.617184][ T5771] Bad inode number on dev loop1: 2 is out of range [ 136.638709][ T5771] Bad inode number on dev loop1: 2 is out of range [ 136.654283][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.358'. [ 136.687665][ T6758] bridge0: entered promiscuous mode [ 136.699612][ T6758] macvtap1: entered promiscuous mode [ 136.705758][ T6758] macvtap1: entered allmulticast mode [ 136.713592][ T6758] bridge0: entered allmulticast mode [ 136.721957][ T6758] bridge0: port 4(macvtap1) entered blocking state [ 136.729380][ T6758] bridge0: port 4(macvtap1) entered disabled state [ 136.747464][ T6758] bridge0: left allmulticast mode [ 136.766631][ T6758] bridge0: left promiscuous mode [ 137.033367][ T788] asix 4-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 137.047111][ T788] asix: probe of 4-1:0.251 failed with error -524 [ 137.220848][ T1017] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.251272][ T788] usb 4-1: USB disconnect, device number 5 [ 137.422919][ T1017] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.553777][ T1017] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.711591][ T1017] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.969828][ T6780] capability: warning: `syz.3.370' uses 32-bit capabilities (legacy support in use) [ 138.038333][ T6780] program syz.3.370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.543396][ T6792] loop0: detected capacity change from 0 to 4096 [ 138.564282][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 138.594667][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 138.608255][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 138.619114][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 138.630436][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 138.639694][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 138.653018][ T6798] loop3: detected capacity change from 0 to 256 [ 138.746053][ T6798] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.920666][ T28] audit: type=1800 audit(1775043353.611:9): pid=6798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.374" name="file1" dev="loop3" ino=1048613 res=0 errno=0 [ 139.033057][ T2915] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 139.037861][ T28] audit: type=1800 audit(1775043353.641:10): pid=6798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.374" name="file1" dev="loop3" ino=1048613 res=0 errno=0 [ 139.088612][ T2915] FAT-fs (loop3): Filesystem has been set read-only [ 139.108189][ T2915] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 139.175064][ T2915] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 139.207517][ T2915] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 139.262447][ T6806] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.124065][ T6814] loop2: detected capacity change from 0 to 32768 [ 140.169795][ T6814] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.378 (6814) [ 140.218283][ T1191] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 140.286037][ T6814] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 140.318758][ T6814] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 140.327601][ T6814] BTRFS info (device loop2): setting nodatasum [ 140.369976][ T6814] BTRFS info (device loop2): force zlib compression, level 3 [ 140.401885][ T6814] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 140.418920][ T1191] usb 4-1: Using ep0 maxpacket: 32 [ 140.432208][ T6814] BTRFS info (device loop2): use lzo compression, level 0 [ 140.448273][ T1191] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 140.465967][ T6814] BTRFS info (device loop2): turning on flush-on-commit [ 140.487441][ T1191] usb 4-1: config 0 has no interface number 0 [ 140.499654][ T6814] BTRFS info (device loop2): enabling auto defrag [ 140.506257][ T6814] BTRFS info (device loop2): max_inline at 4096 [ 140.515455][ T1191] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 140.547759][ T1191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.556837][ T6814] BTRFS info (device loop2): using free space tree [ 140.588104][ T1191] usb 4-1: Product: syz [ 140.592362][ T1191] usb 4-1: Manufacturer: syz [ 140.625850][ T1191] usb 4-1: SerialNumber: syz [ 140.660315][ T1191] usb 4-1: config 0 descriptor?? [ 140.688274][ T1191] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 140.751478][ T51] Bluetooth: hci3: command tx timeout [ 140.855401][ T6794] chnl_net:caif_netlink_parms(): no params data found [ 140.862788][ T6814] BTRFS info (device loop2): enabling ssd optimizations [ 140.906608][ T6840] block device autoloading is deprecated and will be removed. [ 141.027870][ T1017] hsr_slave_0: left promiscuous mode [ 141.078014][ T1017] hsr_slave_1: left promiscuous mode [ 141.094463][ T1017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.112700][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.141969][ T1017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.157734][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.207276][ T1017] batadv1: left promiscuous mode [ 141.240944][ T1017] bridge0: port 3(batadv1) entered disabled state [ 141.253864][ T1191] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 141.292624][ T1017] bridge_slave_1: left allmulticast mode [ 141.300198][ T1017] bridge_slave_1: left promiscuous mode [ 141.320954][ T1191] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 141.332337][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.356455][ T1017] bridge_slave_0: left allmulticast mode [ 141.394890][ T1017] bridge_slave_0: left promiscuous mode [ 141.419339][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.473427][ T32] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 141.483490][ T32] batman_adv: batadv1: adding TT local entry 33:33:ff:4b:47:68 to non-existent VLAN -1 [ 141.493576][ T32] batman_adv: batadv1: adding TT local entry 01:00:5e:00:00:01 to non-existent VLAN -1 [ 141.574460][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 141.575503][ T23] usb 4-1: USB disconnect, device number 6 [ 141.659796][ T1017] team_slave_0: left promiscuous mode [ 141.665682][ T1017] team_slave_1: left promiscuous mode [ 141.673597][ T23] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 141.726337][ T23] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 141.745352][ T1017] veth1_macvtap: left promiscuous mode [ 141.765943][ T1017] veth0_macvtap: left promiscuous mode [ 141.780756][ T1017] veth1_vlan: left promiscuous mode [ 141.801998][ T23] quatech2 4-1:0.51: device disconnected [ 141.806943][ T1017] veth0_vlan: left promiscuous mode [ 142.020581][ T5765] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.136657][ T48] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 142.442946][ T6871] netlink: 'syz.3.387': attribute type 1 has an invalid length. [ 142.827923][ T51] Bluetooth: hci3: command tx timeout [ 143.116087][ T788] hid-generic 0005:16C0:05DF.0001: item fetching failed at offset 0/1 [ 143.125785][ T788] hid-generic: probe of 0005:16C0:05DF.0001 failed with error -22 [ 143.357517][ T6898] loop0: detected capacity change from 0 to 16 [ 143.393645][ T6898] erofs: (device loop0): mounted with root inode @ nid 36. [ 143.443224][ T6898] syz.0.397: attempt to access beyond end of device [ 143.443224][ T6898] loop0: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 143.487998][ T6898] syz.0.397: attempt to access beyond end of device [ 143.487998][ T6898] loop0: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 144.135066][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 144.179493][ T6905] sctp: [Deprecated]: syz.0.405 (pid 6905) Use of int in max_burst socket option. [ 144.179493][ T6905] Use struct sctp_assoc_value instead [ 144.214007][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 144.355694][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.434623][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.638723][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 144.830373][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 144.860715][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.882900][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.904765][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 144.918082][ T23] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 144.934910][ T1017] bond0 (unregistering): Released all slaves [ 144.935825][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.942039][ T51] Bluetooth: hci3: command tx timeout [ 144.964620][ T23] usb 4-1: config 0 descriptor?? [ 145.139158][ T6911] batadv1: entered allmulticast mode [ 145.146026][ T6911] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 145.159906][ T6911] bridge0: port 3(batadv1) entered blocking state [ 145.166595][ T6911] bridge0: port 3(batadv1) entered disabled state [ 145.188984][ T6911] batadv1: entered promiscuous mode [ 145.194984][ T6911] bridge0: port 3(batadv1) entered blocking state [ 145.201659][ T6911] bridge0: port 3(batadv1) entered forwarding state [ 145.392354][ T6794] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.431949][ T23] a4tech 0003:09DA:000A.0002: unknown main item tag 0x0 [ 145.448014][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.452924][ T23] a4tech 0003:09DA:000A.0002: unknown main item tag 0x0 [ 145.467151][ T6794] bridge_slave_0: entered allmulticast mode [ 145.509567][ T6794] bridge_slave_0: entered promiscuous mode [ 145.517104][ T23] a4tech 0003:09DA:000A.0002: unknown main item tag 0x0 [ 145.526731][ T23] a4tech 0003:09DA:000A.0002: unknown main item tag 0x0 [ 145.534412][ T6794] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.534594][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.535094][ T6794] bridge_slave_1: entered allmulticast mode [ 145.587727][ T23] a4tech 0003:09DA:000A.0002: unknown main item tag 0x0 [ 145.615775][ T23] a4tech 0003:09DA:000A.0002: unknown main item tag 0x0 [ 145.630577][ T6794] bridge_slave_1: entered promiscuous mode [ 145.648571][ T23] a4tech 0003:09DA:000A.0002: unknown global tag 0xe [ 145.655366][ T23] a4tech 0003:09DA:000A.0002: item 0 0 1 14 parsing failed [ 145.684815][ T11] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 145.694149][ T11] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 145.715816][ T23] a4tech 0003:09DA:000A.0002: parse failed [ 145.738501][ T23] a4tech: probe of 0003:09DA:000A.0002 failed with error -22 [ 145.783183][ T23] usb 4-1: USB disconnect, device number 7 [ 145.837300][ T6794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.850230][ T6923] loop2: detected capacity change from 0 to 128 [ 145.891861][ T6794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.085501][ T6794] team0: Port device team_slave_0 added [ 146.134692][ T6794] team0: Port device team_slave_1 added [ 146.227471][ T6794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.234723][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 146.252626][ T6794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.304784][ T6794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.334355][ T6794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.354867][ T6794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.386839][ T6794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.429966][ T8] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 146.438498][ T8] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 146.447421][ T8] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 146.468169][ T8] usb 1-1: config 220 has no interface number 2 [ 146.475440][ T8] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 146.527710][ T8] usb 1-1: config 220 interface 0 has no altsetting 0 [ 146.534590][ T8] usb 1-1: config 220 interface 76 has no altsetting 0 [ 146.547445][ T6794] hsr_slave_0: entered promiscuous mode [ 146.560675][ T8] usb 1-1: config 220 interface 1 has no altsetting 0 [ 146.577164][ T8] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 146.591500][ T6794] hsr_slave_1: entered promiscuous mode [ 146.598157][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.606211][ T8] usb 1-1: Product: syz [ 146.612253][ T8] usb 1-1: Manufacturer: syz [ 146.617000][ T8] usb 1-1: SerialNumber: syz [ 146.717785][ T1191] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 146.879258][ T8] uvcvideo 1-1:220.1: Unknown video format 047d4302-0000-0000-0000-00a5e2000004 [ 146.907004][ T8] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 146.927991][ T1191] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.951323][ T8] usb 1-1: No valid video chain found. [ 146.956967][ T8] usb 1-1: selecting invalid altsetting 0 [ 146.963461][ T1191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.990721][ T51] Bluetooth: hci3: command tx timeout [ 146.997367][ T1191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.012682][ T8] usb 1-1: selecting invalid altsetting 0 [ 147.018983][ T1191] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 147.028280][ T8] usbtest: probe of 1-1:220.1 failed with error -22 [ 147.035175][ T1191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.052902][ T8] usb 1-1: USB disconnect, device number 3 [ 147.060014][ T1191] usb 3-1: config 0 descriptor?? [ 147.279587][ T6794] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 147.293729][ T6794] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 147.306457][ T6794] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 147.317802][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 147.324937][ T6794] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 147.461840][ T6794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.509463][ T1191] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x2 [ 147.516669][ T1191] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x0 [ 147.523789][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 147.535120][ T6794] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.545119][ T23] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 147.562528][ T23] usb 4-1: config 2 has no interface number 0 [ 147.592598][ T23] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 147.606733][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.613979][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.633445][ T1191] hid-rmi 0003:0461:4E72.0003: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.2-1/input0 [ 147.645002][ T23] usb 4-1: config 2 interface 88 has no altsetting 0 [ 147.658720][ T23] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 147.693418][ T2915] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.697967][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.701076][ T2915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.725634][ T23] usb 4-1: Product: syz [ 147.741650][ T23] usb 4-1: Manufacturer: syz [ 147.746340][ T23] usb 4-1: SerialNumber: syz [ 147.764497][ T1191] usb 3-1: USB disconnect, device number 6 [ 147.776061][ T6948] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 147.975903][ T6794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.080254][ T6954] fido_id[6954]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 148.096051][ T6948] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 148.501328][ T6971] loop2: detected capacity change from 0 to 764 [ 148.628976][ T6975] Driver unsupported XDP return value 0 on prog (id 28) dev N/A, expect packet loss! [ 148.717194][ T6794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.753010][ T23] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 148.793455][ T23] asix: probe of 4-1:2.88 failed with error -71 [ 148.848865][ T23] usb 4-1: USB disconnect, device number 8 [ 149.896400][ T6794] veth0_vlan: entered promiscuous mode [ 150.007952][ T6794] veth1_vlan: entered promiscuous mode [ 150.123884][ T6794] veth0_macvtap: entered promiscuous mode [ 150.166015][ T6794] veth1_macvtap: entered promiscuous mode [ 150.252836][ T7015] loop0: detected capacity change from 0 to 256 [ 150.301927][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.355635][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.395443][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.422264][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.434094][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 150.483400][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.514684][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.563101][ T6794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.582292][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.598940][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.613620][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.626687][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.642484][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.653339][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.669918][ T6794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.679474][ T7019] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.430'. [ 150.731663][ T6794] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.767781][ T6794] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.786869][ T6794] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.807785][ T6794] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.103532][ T2915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.125546][ T7027] loop2: detected capacity change from 0 to 2048 [ 151.129136][ T2915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.201074][ T7027] loop2: p1 < > p3 [ 151.226774][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.242089][ T7027] loop2: p3 size 134217728 extends beyond EOD, truncated [ 151.255653][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.829451][ T7042] netlink: 124 bytes leftover after parsing attributes in process `syz.0.436'. [ 151.888918][ T7017] loop3: detected capacity change from 0 to 32768 [ 151.934994][ T7017] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 151.988408][ T7017] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 152.111437][ T7017] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 152.137927][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 152.156320][ T7055] loop0: detected capacity change from 0 to 1024 [ 152.179428][ T5754] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 152.195183][ T5754] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 152.316381][ T7055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.322739][ T5754] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 127ms [ 152.368279][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 152.398525][ T5754] gfs2: fsid=syz:syz.0: jid=0: Done [ 152.407478][ T7017] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 152.417528][ T23] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 152.446308][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.493412][ T23] pvrusb2: Hardware description: Terratec Grabster AV400 [ 152.508775][ T23] pvrusb2: ********** [ 152.528280][ T23] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 152.558297][ T23] pvrusb2: Important functionality might not be entirely working. [ 152.580623][ T23] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 152.633333][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.642512][ T23] pvrusb2: ********** [ 152.742771][ T2319] pvrusb2: Invalid write control endpoint [ 152.894356][ T7017] gfs2: fsid=syz:syz.0: found 1 quota changes [ 152.947707][ T2319] pvrusb2: Invalid write control endpoint [ 152.953837][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 153.007692][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 153.048085][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 153.082502][ T2319] pvrusb2: Device being rendered inoperable [ 153.090439][ T7017] syz.3.428: attempt to access beyond end of device [ 153.090439][ T7017] loop3: rw=12288, sector=6755399441055880, nr_sectors = 8 limit=32768 [ 153.122742][ T7047] pvrusb2: Attempted to execute control transfer when device not ok [ 153.138205][ T5806] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 153.173014][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 153.192522][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 153.201119][ T1191] usb 5-1: USB disconnect, device number 2 [ 153.222009][ T2319] pvrusb2: Attached sub-driver cx25840 [ 153.244141][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 153.263519][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 153.294560][ T5764] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 153.294560][ T5764] inode = 11 2339 [ 153.294560][ T5764] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472 [ 153.316304][ T5764] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 153.326505][ T5764] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5764 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 153.337549][ T5764] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 153.347545][ T5764] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 153.365931][ T5764] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 153.376493][ T5764] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 153.389920][ T5806] usb 1-1: Using ep0 maxpacket: 8 [ 153.421157][ T5764] gfs2: fsid=syz:syz.0: File system withdrawn [ 153.424970][ T5806] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 153.442463][ T5764] CPU: 1 PID: 5764 Comm: syz-executor Not tainted syzkaller #0 [ 153.450106][ T5764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 153.457987][ T5806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.460244][ T5764] Call Trace: [ 153.471588][ T5764] [ 153.474569][ T5764] dump_stack_lvl+0x18c/0x250 [ 153.479328][ T5764] ? kobject_uevent_env+0x363/0x8b0 [ 153.484581][ T5764] ? show_regs_print_info+0x20/0x20 [ 153.489840][ T5764] ? load_image+0x400/0x400 [ 153.494422][ T5764] ? kobject_uevent_env+0x363/0x8b0 [ 153.499691][ T5764] gfs2_withdraw+0xb24/0x13d0 [ 153.504447][ T5764] ? gfs2_lm+0x240/0x240 [ 153.508755][ T5764] ? preempt_schedule+0xc0/0xd0 [ 153.513678][ T5764] ? gfs2_consist_inode_i+0xf5/0x110 [ 153.519023][ T5764] gfs2_inode_refresh+0xb89/0x1000 [ 153.524191][ T5764] ? gfs2_inode_metasync+0xf0/0xf0 [ 153.529412][ T5764] ? gfs2_glock_nq+0xd4f/0x1420 [ 153.534287][ T5764] gfs2_instantiate+0x162/0x220 [ 153.539176][ T5764] gfs2_glock_wait+0x1d4/0x2a0 [ 153.544007][ T5764] do_sync+0x4c6/0xe50 [ 153.548124][ T5764] ? gfs2_quota_sync+0x411/0x5a0 [ 153.553115][ T5764] ? bh_get+0x760/0x760 [ 153.557325][ T5764] ? __lock_acquire+0x7d40/0x7d40 [ 153.562392][ T5764] ? do_raw_spin_lock+0x11f/0x2c0 [ 153.567457][ T5764] ? gfs2_quota_sync+0x411/0x5a0 [ 153.572454][ T5764] ? do_raw_spin_unlock+0x121/0x230 [ 153.577708][ T5764] gfs2_quota_sync+0x411/0x5a0 [ 153.582535][ T5764] gfs2_sync_fs+0x4c/0xb0 [ 153.586924][ T5764] sync_filesystem+0xea/0x220 [ 153.591651][ T5764] generic_shutdown_super+0x6f/0x2b0 [ 153.596997][ T5764] kill_block_super+0x44/0x90 [ 153.601727][ T5764] deactivate_locked_super+0x97/0x100 [ 153.607158][ T5764] cleanup_mnt+0x43b/0x4d0 [ 153.611640][ T5764] task_work_run+0x1d4/0x260 [ 153.616291][ T5764] ? task_work_cancel+0x220/0x220 [ 153.621389][ T5764] ? exit_to_user_mode_loop+0x3b/0x110 [ 153.626920][ T5764] exit_to_user_mode_loop+0xe6/0x110 [ 153.632270][ T5764] exit_to_user_mode_prepare+0xee/0x180 [ 153.637879][ T5764] syscall_exit_to_user_mode+0x1a/0x50 [ 153.643403][ T5764] do_syscall_64+0x61/0xa0 [ 153.647894][ T5764] ? clear_bhb_loop+0x40/0x90 [ 153.652632][ T5764] ? clear_bhb_loop+0x40/0x90 [ 153.657367][ T5764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.663317][ T5764] RIP: 0033:0x7f21f0b9da57 [ 153.667795][ T5764] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 153.687463][ T5764] RSP: 002b:00007fff66a4a238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 153.696030][ T5764] RAX: 0000000000000000 RBX: 00007f21f0c32048 RCX: 00007f21f0b9da57 [ 153.704061][ T5764] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff66a4a2f0 [ 153.712087][ T5764] RBP: 00007fff66a4a2f0 R08: 00007fff66a4b2f0 R09: 00000000ffffffff [ 153.720118][ T5764] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff66a4b380 [ 153.728151][ T5764] R13: 00007f21f0c32048 R14: 0000000000025621 R15: 00007fff66a4b3c0 [ 153.736197][ T5764] [ 153.739343][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.813926][ T5806] pvrusb2: Hardware description: Terratec Grabster AV400 [ 153.872040][ T5806] pvrusb2: ********** [ 153.876120][ T5806] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 153.921138][ T5806] pvrusb2: Important functionality might not be entirely working. [ 153.943268][ T5806] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 153.987981][ T5806] pvrusb2: ********** [ 154.073768][ T2319] pvrusb2: Invalid write control endpoint [ 154.227040][ T2319] pvrusb2: Invalid write control endpoint [ 154.248597][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 154.271580][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 154.312116][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 154.347184][ T2319] pvrusb2: Device being rendered inoperable [ 154.374122][ T1191] usb 1-1: USB disconnect, device number 4 [ 154.389553][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 154.413308][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 154.447061][ T2319] pvrusb2: Attached sub-driver cx25840 [ 154.484717][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 154.531209][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 154.595874][ T7095] Bluetooth: MGMT ver 1.22 [ 154.921611][ T7104] loop9: detected capacity change from 0 to 7 [ 154.954156][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.963464][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.021831][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.031136][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.051810][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.061104][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.070103][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.079372][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.138637][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.147933][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.156269][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.165669][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.174656][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.183976][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.192514][ T7104] ldm_validate_partition_table(): Disk read failed. [ 155.202764][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.212066][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.220908][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.230245][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.248043][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.257279][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.277826][ T7104] Dev loop9: unable to read RDB block 0 [ 155.324649][ T7104] loop9: unable to read partition table [ 155.331360][ T7104] loop9: partition table beyond EOD, truncated [ 155.347809][ T7104] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 155.981664][ T7134] loop4: detected capacity change from 0 to 4096 [ 156.024860][ T7134] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 156.045547][ T7139] serio: Serial port pty24 [ 156.065839][ T7134] NILFS (loop4): mounting unchecked fs [ 156.078357][ T5754] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 156.156283][ T5774] udevd[5774]: incorrect nilfs2 checksum on /dev/loop4 [ 156.168738][ T7134] NILFS (loop4): recovery complete [ 156.180623][ T7141] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.292988][ T5754] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 156.315575][ T5754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.352243][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 156.369370][ T5754] usb 1-1: config 0 descriptor?? [ 156.639310][ T5754] [drm] vendor descriptor length:c3 data:00 00 00 00 00 00 00 00 00 00 00 [ 156.676359][ T5754] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 156.856142][ T5754] [drm:udl_init] *ERROR* Selecting channel failed [ 156.946532][ T5754] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 156.965061][ T5754] [drm] Initialized udl on minor 2 [ 156.982402][ T5754] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 157.048477][ T5754] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 157.076991][ T5828] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 157.108078][ T788] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 157.134605][ T5754] usb 1-1: USB disconnect, device number 5 [ 157.164176][ T5828] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 157.357892][ T788] usb 5-1: Using ep0 maxpacket: 16 [ 157.369927][ T788] usb 5-1: config 0 has no interfaces? [ 157.379347][ T788] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 157.407836][ T788] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 157.424516][ T788] usb 5-1: Manufacturer: syz [ 157.459148][ T788] usb 5-1: config 0 descriptor?? [ 157.653383][ T7167] loop3: detected capacity change from 0 to 2048 [ 157.731282][ T7170] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.836008][ T7152] loop2: detected capacity change from 0 to 32768 [ 157.904308][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 157.930195][ T7152] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 157.988204][ T5754] usb 5-1: USB disconnect, device number 3 [ 158.133768][ T7152] XFS (loop2): Ending clean mount [ 158.174951][ T7152] XFS (loop2): Quotacheck needed: Please wait. [ 158.349305][ T1191] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 158.357230][ T7152] XFS (loop2): Quotacheck: Done. [ 158.506263][ T5765] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 158.573610][ T1191] usb 1-1: Using ep0 maxpacket: 16 [ 158.603055][ T1191] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.617742][ T7194] program syz.3.472 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.636659][ T1191] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.673796][ T1191] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 158.704599][ T1191] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 158.714822][ T1191] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.730006][ T1191] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 158.739377][ T1191] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 158.747426][ T1191] usb 1-1: Manufacturer: syz [ 158.758916][ T1191] usb 1-1: config 0 descriptor?? [ 158.854526][ T7197] loop4: detected capacity change from 0 to 128 [ 158.999761][ T7197] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.104507][ T7197] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 159.136313][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.327792][ T1191] rc_core: IR keymap rc-hauppauge not found [ 159.333788][ T1191] Registered IR keymap rc-empty [ 159.368029][ T1191] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 159.403510][ T1191] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 159.415241][ T6794] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.425286][ T5806] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 159.444387][ T1191] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 159.499890][ T1191] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 159.562195][ T1191] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 159.583140][ T7211] loop2: detected capacity change from 0 to 1024 [ 159.618515][ T7211] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 159.628547][ T1191] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 159.658670][ T5806] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 159.667570][ T7211] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 159.685786][ T7211] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 159.692799][ T1191] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 159.708804][ T5806] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 159.725043][ T7211] EXT4-fs error (device loop2): ext4_ext_check_inode:530: inode #3: comm syz.2.476: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 159.742546][ T5806] usb 4-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 159.742609][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.742629][ T5806] usb 4-1: Product: syz [ 159.742657][ T5806] usb 4-1: Manufacturer: syz [ 159.742673][ T5806] usb 4-1: SerialNumber: syz [ 159.779728][ T1191] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 159.819418][ T1191] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 159.845740][ T7211] EXT4-fs (loop2): no journal found [ 159.857961][ T1191] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 159.872230][ T7211] EXT4-fs (loop2): can't get journal size [ 159.881971][ T7211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.908316][ T1191] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 159.937988][ T1191] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 159.967896][ T1191] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 159.998764][ T1191] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 160.046346][ T788] usb 4-1: USB disconnect, device number 9 [ 160.057833][ T1191] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 160.080528][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.109449][ T1191] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version cf [ 160.133939][ T1191] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 160.155109][ T1191] usb 1-1: USB disconnect, device number 6 [ 160.336767][ T7222] loop2: detected capacity change from 0 to 512 [ 160.575742][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 160.898779][ T7235] netem: change failed [ 161.487755][ T1191] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 161.552702][ T7253] pim6reg: entered allmulticast mode [ 161.608399][ T7253] pim6reg: left allmulticast mode [ 161.689808][ T1191] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.708037][ T1191] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 161.724187][ T1191] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.780355][ T1191] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 161.797909][ T1191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 161.806085][ T1191] usb 5-1: Product: syz [ 161.828077][ T1191] usb 5-1: Manufacturer: syz [ 161.832777][ T1191] usb 5-1: SerialNumber: syz [ 161.934985][ T7256] loop3: detected capacity change from 0 to 512 [ 161.993724][ T7256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.087146][ T1191] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 162.106995][ T7248] loop2: detected capacity change from 0 to 40427 [ 162.157127][ T7261] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 162.169332][ T7248] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x7ffff [ 162.214963][ T7248] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0xe4 [ 162.245478][ T7248] F2FS-fs (loop2): invalid crc value [ 162.264174][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.290373][ T5828] usb 5-1: USB disconnect, device number 4 [ 162.303056][ T5828] usblp0: removed [ 162.319785][ T7248] F2FS-fs (loop2): Found nat_bits in checkpoint [ 162.458018][ T7248] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 162.512186][ T7248] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 162.542511][ T1191] kernel read not supported for file /dsp1 (pid: 1191 comm: kworker/0:2) [ 162.599929][ T7248] F2FS-fs (loop2): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x754/0x1c70 [ 162.626704][ T7248] F2FS-fs (loop2): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x127/0xb50 [ 162.682904][ T5765] syz-executor: attempt to access beyond end of device [ 162.682904][ T5765] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 162.706198][ T5765] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 163.252085][ T7281] dccp_invalid_packet: pskb_may_pull failed [ 163.857914][ T1191] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 164.053976][ T1191] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 164.076848][ T1191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.116907][ T1191] usb 1-1: Product: syz [ 164.137972][ T1191] usb 1-1: Manufacturer: syz [ 164.145393][ T1191] usb 1-1: SerialNumber: syz [ 164.162318][ T1191] usb 1-1: config 0 descriptor?? [ 164.182169][ T7289] loop3: detected capacity change from 0 to 32768 [ 164.252078][ T7289] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 164.297769][ T5754] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 164.399353][ T7289] XFS (loop3): Ending clean mount [ 164.404432][ T1191] usb 1-1: ignoring: probably an ADSL modem [ 164.436994][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.514'. [ 164.551311][ T5764] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 164.566183][ T5754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 164.587444][ T5754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 8 [ 164.601569][ T5754] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 164.613132][ T5754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.632892][ T5754] usb 5-1: config 0 descriptor?? [ 164.641257][ T7304] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 164.652668][ T5828] kernel write not supported for file /cpuinfo (pid: 5828 comm: kworker/1:5) [ 164.820818][ T1191] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 164.918077][ T5754] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 165.043287][ T5811] usb 1-1: USB disconnect, device number 7 [ 165.109622][ C1] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -1 [ 165.122564][ T5754] usb 5-1: USB disconnect, device number 5 [ 165.594059][ T5811] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 165.797755][ T5811] usb 3-1: Using ep0 maxpacket: 8 [ 165.811415][ T5811] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.831329][ T7347] loop0: detected capacity change from 0 to 128 [ 165.839440][ T5811] usb 3-1: config 0 has no interfaces? [ 165.849739][ T7345] netlink: 1 bytes leftover after parsing attributes in process `syz.4.524'. [ 165.860197][ T5811] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 165.871099][ T7347] EXT4-fs: Ignoring removed nobh option [ 165.887751][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.922236][ T5811] usb 3-1: Product: syz [ 165.929009][ T7347] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.951991][ T5811] usb 3-1: Manufacturer: syz [ 165.967447][ T7347] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.978962][ T5811] usb 3-1: SerialNumber: syz [ 165.997069][ T5811] usb 3-1: config 0 descriptor?? [ 166.137243][ T7347] fscrypt (loop0, inode 12): Reserved bits set in encryption policy [ 166.167032][ T7354] loop4: detected capacity change from 0 to 4096 [ 166.196153][ T7354] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 166.216875][ T7354] NILFS (loop4): mounting unchecked fs [ 166.252981][ T5811] usb 3-1: USB disconnect, device number 7 [ 166.260645][ T5766] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.272402][ T7354] NILFS (loop4): recovery complete [ 166.284860][ T7357] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.662725][ T7365] loop0: detected capacity change from 0 to 512 [ 166.671528][ T7365] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.714724][ T7365] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 166.738375][ T7365] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 166.777236][ T7365] EXT4-fs (loop0): orphan cleanup on readonly fs [ 166.786009][ T7365] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 166.816425][ T7365] EXT4-fs warning (device loop0): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 166.867831][ T5828] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 166.905224][ T7365] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 166.935086][ T7365] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.532: bg 0: block 40: padding at end of block bitmap is not set [ 166.966815][ T7365] EXT4-fs (loop0): Remounting filesystem read-only [ 166.974290][ T7365] EXT4-fs (loop0): 1 truncate cleaned up [ 166.981380][ T7365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.106010][ T5828] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.136696][ T5828] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.144687][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.155252][ T5828] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 167.155282][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 167.155303][ T5828] usb 5-1: SerialNumber: syz [ 167.399339][ T5828] usb 5-1: 0:2 : does not exist [ 167.461301][ T5828] usb 5-1: USB disconnect, device number 6 [ 167.660129][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.765374][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 167.795860][ T7387] n: the hash_elasticity option has been deprecated and is always 16 [ 167.806533][ T7387] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 167.851367][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 167.867919][ T7390] n: the hash_elasticity option has been deprecated and is always 16 [ 167.886412][ T7390] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 167.896843][ T788] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 168.101907][ T788] usb 4-1: Using ep0 maxpacket: 8 [ 168.144486][ T788] usb 4-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 168.174715][ T788] usb 4-1: config 0 interface 0 altsetting 33 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.212645][ T788] usb 4-1: config 0 interface 0 altsetting 33 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.226819][ T788] usb 4-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 168.248354][ T788] usb 4-1: config 0 interface 0 has no altsetting 0 [ 168.255442][ T788] usb 4-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 168.272577][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.286117][ T788] usb 4-1: config 0 descriptor?? [ 168.557528][ T7385] loop2: detected capacity change from 0 to 32768 [ 168.579146][ T7385] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.539 (7385) [ 168.618305][ T7385] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 168.658940][ T7385] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 168.697962][ T7385] BTRFS info (device loop2): using free space tree [ 168.752028][ T788] wacom 0003:056A:010E.0004: unbalanced collection at end of report description [ 168.768781][ T788] wacom 0003:056A:010E.0004: parse failed [ 168.774843][ T788] wacom: probe of 0003:056A:010E.0004 failed with error -22 [ 168.968919][ T7385] BTRFS info (device loop2): enabling ssd optimizations [ 168.976012][ T7385] BTRFS info (device loop2): auto enabling async discard [ 168.984155][ T1191] usb 4-1: USB disconnect, device number 10 [ 169.158302][ T7385] BTRFS info (device loop2): Snapshot src from another FS [ 169.278151][ T5765] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 169.554426][ T5774] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 9 /dev/loop2 scanned by udevd (5774) [ 169.722319][ T7442] loop3: detected capacity change from 0 to 256 [ 169.764575][ T7442] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.815946][ T7442] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 169.968508][ T7442] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 170.303188][ T7430] loop0: detected capacity change from 0 to 32768 [ 170.433217][ T7430] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 170.511127][ T7430] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 170.626288][ T7430] XFS (loop0): Ending clean mount [ 170.669549][ T7430] XFS (loop0): Quotacheck needed: Please wait. [ 170.794470][ T7430] XFS (loop0): Quotacheck: Done. [ 171.113004][ T5766] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 171.444167][ T7471] loop4: detected capacity change from 0 to 8192 [ 172.287235][ T7501] kvm: kvm [7499]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x400003 [ 172.688139][ T5754] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 172.898723][ T5754] usb 3-1: Using ep0 maxpacket: 8 [ 172.918899][ T5754] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 172.941406][ T5754] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.006599][ T5754] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 173.033697][ T5754] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.073826][ T5754] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.103575][ T5754] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 173.126423][ T5754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.391566][ T5754] usb 3-1: GET_CAPABILITIES returned 0 [ 173.397170][ T5754] usbtmc 3-1:16.0: can't read capabilities [ 173.620675][ T5754] usb 3-1: USB disconnect, device number 8 [ 173.945650][ T7562] netlink: 132 bytes leftover after parsing attributes in process `syz.3.587'. [ 173.983292][ T7562] netlink: 'syz.3.587': attribute type 12 has an invalid length. [ 173.996201][ T7562] netlink: 132 bytes leftover after parsing attributes in process `syz.3.587'. [ 174.057025][ T7567] netlink: 24 bytes leftover after parsing attributes in process `syz.4.589'. [ 174.369496][ T7576] IPv6: NLM_F_CREATE should be specified when creating new route [ 174.625590][ T7583] loop2: detected capacity change from 0 to 1024 [ 174.811872][ T7587] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.819153][ T7587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.935232][ T1017] hfsplus: b-tree write err: -5, ino 25 [ 174.967880][ T1017] hfsplus: b-tree write err: -5, ino 4 [ 174.974147][ T1017] hfsplus: b-tree write err: -5, ino 2 [ 175.038484][ T1017] hfsplus: b-tree write err: -5, ino 20 [ 175.116241][ T7563] loop0: detected capacity change from 0 to 32768 [ 175.244771][ T7592] loop2: detected capacity change from 0 to 4096 [ 175.272162][ T7563] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 175.283587][ T7592] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 175.366241][ T7592] NILFS (loop2): mounting unchecked fs [ 175.370004][ T5774] udevd[5774]: incorrect nilfs2 checksum on /dev/loop2 [ 175.462517][ T7592] NILFS (loop2): recovery complete [ 175.468181][ T7563] XFS (loop0): Ending clean mount [ 175.489352][ T7608] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.605588][ T5766] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 176.320395][ T7624] netlink: 32 bytes leftover after parsing attributes in process `syz.0.600'. [ 176.507807][ T788] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 176.703642][ T788] usb 4-1: Using ep0 maxpacket: 16 [ 176.716137][ T788] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.764255][ T788] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.801715][ T788] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 176.853421][ T788] usb 4-1: config 0 interface 0 has no altsetting 0 [ 176.873769][ T788] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 176.904366][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.924035][ T7615] loop4: detected capacity change from 0 to 32768 [ 176.938145][ T788] usb 4-1: config 0 descriptor?? [ 177.074325][ T7647] Falling back ldisc for ttyS3. [ 177.108131][ T7615] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 177.289322][ T7615] XFS (loop4): Ending clean mount [ 177.318784][ T7615] XFS (loop4): Quotacheck needed: Please wait. [ 177.405581][ T7615] XFS (loop4): Quotacheck: Done. [ 177.602025][ T5828] usb 4-1: USB disconnect, device number 11 [ 177.616792][ T6794] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 177.715761][ T7633] loop0: detected capacity change from 0 to 32768 [ 177.930999][ T7633] JBD2: Ignoring recovery information on journal [ 178.180950][ T7633] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 178.575773][ T7675] loop3: detected capacity change from 0 to 1024 [ 178.725099][ T5766] ocfs2: Unmounting device (7,0) on (node local) [ 178.850710][ T7680] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 178.992196][ T3484] hfsplus: b-tree write err: -5, ino 25 [ 179.012281][ T3484] hfsplus: b-tree write err: -5, ino 4 [ 179.034051][ T3484] hfsplus: b-tree write err: -5, ino 2 [ 179.068172][ T3484] hfsplus: b-tree write err: -5, ino 20 [ 179.935656][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 180.437045][ T7730] loop4: detected capacity change from 0 to 128 [ 180.494436][ T7730] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.573971][ T7730] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.620721][ T7730] fscrypt (loop4, inode 12): Unsupported encryption flags (0x10) [ 180.742412][ T6794] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.346808][ T7766] loop4: detected capacity change from 0 to 32768 [ 182.396601][ T7766] [ 182.396601][ T7766] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.396601][ T7766] [ 182.443948][ T7766] ERROR: (device loop4): diWrite: ixpxd invalid [ 182.443948][ T7766] [ 182.474200][ T7766] ERROR: (device loop4): txCommit: [ 182.474200][ T7766] [ 182.504196][ T7766] [ 182.504196][ T7766] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.504196][ T7766] [ 182.543868][ T7766] [ 182.543868][ T7766] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.543868][ T7766] [ 182.602729][ T7766] read_mapping_page failed! [ 182.623493][ T7766] ERROR: (device loop4): txCommit: [ 182.623493][ T7766] [ 182.714136][ T1017] ERROR: (device loop4): diWrite: ixpxd invalid [ 182.714136][ T1017] [ 182.738422][ T1017] ERROR: (device loop4): txCommit: [ 182.738422][ T1017] [ 182.767905][ T1017] jfs_write_inode: jfs_commit_inode failed! [ 182.774396][ T6794] [ 182.774396][ T6794] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.774396][ T6794] [ 182.802508][ T6794] [ 182.802508][ T6794] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.802508][ T6794] [ 182.919178][ T7776] loop2: detected capacity change from 0 to 32768 [ 183.000475][ T28] audit: type=1800 audit(1775043397.691:11): pid=7776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.644" name="file2" dev="loop2" ino=5 res=0 errno=0 [ 183.025202][ T7781] loop0: detected capacity change from 0 to 32768 [ 183.092733][ T7776] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 183.092733][ T7776] [ 183.137285][ T7781] ERROR: (device loop0): dbAdjCtl: the maximum free buddy is not the old root [ 183.137285][ T7781] [ 183.161885][ T7781] ERROR: (device loop0): remounting filesystem as read-only [ 183.168003][ T7776] ERROR: (device loop2): remounting filesystem as read-only [ 183.497577][ T113] BUG: Bad page state in process jfsCommit pfn:79304 [ 183.506795][ T113] page:ffffea0001e4c100 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x79304 [ 183.536612][ T113] flags: 0xfff0800000820d(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 183.552793][ T113] page_type: 0xffffffff() [ 183.557379][ T113] raw: 00fff0800000820d dead000000000100 dead000000000122 0000000000000000 [ 183.575395][ T113] raw: 000000000000001c ffff888076020000 00000000ffffffff 0000000000000000 [ 183.585576][ T113] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 183.601132][ T113] page_owner tracks the page as allocated [ 183.607123][ T113] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 7781, tgid 7780 (syz.0.646), ts 183068421438, free_ts 172051611033 [ 183.633998][ T113] post_alloc_hook+0x1c1/0x200 [ 183.640580][ T113] get_page_from_freelist+0x1951/0x19e0 [ 183.646332][ T113] __alloc_pages+0x1f0/0x460 [ 183.662668][ T113] folio_alloc+0x1e/0x30 [ 183.667204][ T113] filemap_alloc_folio+0xdf/0x490 [ 183.694540][ T113] do_read_cache_folio+0x364/0x7d0 [ 183.700836][ T113] do_read_cache_page+0x32/0x250 [ 183.706499][ T113] __get_metapage+0x31a/0xfa0 [ 183.711897][ T113] diRead+0x6d3/0xb90 [ 183.716130][ T113] jfs_iget+0x90/0x440 [ 183.720539][ T113] jfs_fill_super+0x712/0xad0 [ 183.725414][ T113] mount_bdev+0x221/0x2d0 [ 183.746392][ T113] legacy_get_tree+0xea/0x180 [ 183.757688][ T113] vfs_get_tree+0x8c/0x280 [ 183.767773][ T113] do_new_mount+0x24b/0xa40 [ 183.773980][ T113] __se_sys_mount+0x2e7/0x3d0 [ 183.780062][ T113] page last free stack trace: [ 183.804155][ T113] free_unref_page_prepare+0x7b2/0x8c0 [ 183.810912][ T113] free_unref_page+0x32/0x2e0 [ 183.815851][ T113] __unfreeze_partials+0x1cf/0x210 [ 183.821402][ T113] put_cpu_partial+0x17c/0x250 [ 183.826321][ T113] __slab_free+0x319/0x400 [ 183.836783][ T113] qlist_free_all+0x75/0xd0 [ 183.841601][ T113] kasan_quarantine_reduce+0x143/0x160 [ 183.847228][ T113] __kasan_slab_alloc+0x22/0x80 [ 183.856906][ T113] slab_post_alloc_hook+0x6e/0x4b0 [ 183.883450][ T113] kmem_cache_alloc+0x11a/0x2d0 [ 183.891828][ T113] getname_flags+0xbb/0x500 [ 183.896550][ T113] do_sys_openat2+0xda/0x1d0 [ 183.901647][ T113] __x64_sys_openat+0x139/0x160 [ 183.912960][ T113] do_syscall_64+0x55/0xa0 [ 183.917579][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.931421][ T113] Modules linked in: [ 183.937173][ T113] CPU: 1 PID: 113 Comm: jfsCommit Not tainted syzkaller #0 [ 183.944441][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 183.954554][ T113] Call Trace: [ 183.957884][ T113] [ 183.960886][ T113] dump_stack_lvl+0x18c/0x250 [ 183.965636][ T113] ? show_regs_print_info+0x20/0x20 [ 183.970896][ T113] ? swiotlb_print_info+0x70/0x70 [ 183.975991][ T113] ? dump_page+0xba3/0x14a0 [ 183.980620][ T113] bad_page+0x14b/0x170 [ 183.984833][ T113] free_unref_page_prepare+0x85f/0x8c0 [ 183.990449][ T113] free_unref_page+0x32/0x2e0 [ 183.995187][ T113] ? __folio_put+0xef/0x210 [ 183.999769][ T113] txUnlock+0x27e/0xcb0 [ 184.004003][ T113] ? lockdep_hardirqs_on+0x98/0x150 [ 184.009266][ T113] jfs_lazycommit+0x56e/0xa70 [ 184.014018][ T113] ? txFreelock+0x5a0/0x5a0 [ 184.018582][ T113] ? do_task_dead+0xd0/0xd0 [ 184.023140][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 184.028161][ T113] kthread+0x2fa/0x390 [ 184.032266][ T113] ? txFreelock+0x5a0/0x5a0 [ 184.036815][ T113] ? kthread_blkcg+0xd0/0xd0 [ 184.041436][ T113] ret_from_fork+0x48/0x80 [ 184.045891][ T113] ? kthread_blkcg+0xd0/0xd0 [ 184.050536][ T113] ret_from_fork_asm+0x11/0x20 [ 184.055352][ T113] [ 184.059550][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.079566][ T113] Disabling lock debugging due to kernel taint [ 184.085873][ T113] page:ffffea0001e4c100 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x79304 [ 184.102614][ T113] flags: 0xfff0800000820d(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 184.116331][ T113] page_type: 0xffffffff() [ 184.122308][ T113] raw: 00fff0800000820d dead000000000100 dead000000000122 0000000000000000 [ 184.143125][ T113] raw: 000000000000001c ffff888076020000 00000000ffffffff 0000000000000000 [ 184.151943][ T113] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 184.162449][ T113] page_owner tracks the page as allocated [ 184.169406][ T113] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 7781, tgid 7780 (syz.0.646), ts 183068421438, free_ts 172051611033 [ 184.189633][ T113] post_alloc_hook+0x1c1/0x200 [ 184.194563][ T113] get_page_from_freelist+0x1951/0x19e0 [ 184.203163][ T113] __alloc_pages+0x1f0/0x460 [ 184.208875][ T113] folio_alloc+0x1e/0x30 [ 184.213194][ T113] filemap_alloc_folio+0xdf/0x490 [ 184.219047][ T113] do_read_cache_folio+0x364/0x7d0 [ 184.224337][ T113] do_read_cache_page+0x32/0x250 [ 184.229452][ T113] __get_metapage+0x31a/0xfa0 [ 184.234225][ T113] diRead+0x6d3/0xb90 [ 184.238289][ T113] jfs_iget+0x90/0x440 [ 184.242414][ T113] jfs_fill_super+0x712/0xad0 [ 184.247145][ T113] mount_bdev+0x221/0x2d0 [ 184.251705][ T113] legacy_get_tree+0xea/0x180 [ 184.256614][ T113] vfs_get_tree+0x8c/0x280 [ 184.261168][ T113] do_new_mount+0x24b/0xa40 [ 184.265709][ T113] __se_sys_mount+0x2e7/0x3d0 [ 184.271098][ T113] page last free stack trace: [ 184.275813][ T113] free_unref_page_prepare+0x7b2/0x8c0 [ 184.281349][ T113] free_unref_page+0x32/0x2e0 [ 184.286073][ T113] __unfreeze_partials+0x1cf/0x210 [ 184.291287][ T113] put_cpu_partial+0x17c/0x250 [ 184.296090][ T113] __slab_free+0x319/0x400 [ 184.300627][ T113] qlist_free_all+0x75/0xd0 [ 184.305177][ T113] kasan_quarantine_reduce+0x143/0x160 [ 184.310782][ T113] __kasan_slab_alloc+0x22/0x80 [ 184.315668][ T113] slab_post_alloc_hook+0x6e/0x4b0 [ 184.320941][ T113] kmem_cache_alloc+0x11a/0x2d0 [ 184.325845][ T113] getname_flags+0xbb/0x500 [ 184.330449][ T113] do_sys_openat2+0xda/0x1d0 [ 184.335076][ T113] __x64_sys_openat+0x139/0x160 [ 184.340008][ T113] do_syscall_64+0x55/0xa0 [ 184.344515][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.355716][ T113] ------------[ cut here ]------------ [ 184.361833][ T113] kernel BUG at include/linux/mm.h:1458! [ 184.367501][ T113] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 184.373676][ T113] CPU: 0 PID: 113 Comm: jfsCommit Tainted: G B syzkaller #0 [ 184.382392][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 184.392473][ T113] RIP: 0010:put_metapage+0x253/0x340 [ 184.397797][ T113] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 57 78 d9 fe e9 25 ff ff ff e8 5d 3c 81 fe 48 8b 3c 24 48 c7 c6 80 07 04 8b e8 7d aa c1 fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 76 40 81 [ 184.417434][ T113] RSP: 0018:ffffc90002ce7cc0 EFLAGS: 00010246 [ 184.423525][ T113] RAX: 0e2a66189530e200 RBX: ffff888076020000 RCX: 0e2a66189530e200 [ 184.431520][ T113] RDX: 0000000000000000 RSI: ffffffff8b1c8980 RDI: ffffffff8b1c8940 [ 184.440241][ T113] RBP: 000000000000007f R08: ffffffff8e8b02af R09: 1ffffffff1d16055 [ 184.448235][ T113] R10: dffffc0000000000 R11: fffffbfff1d16056 R12: ffff888076020028 [ 184.456316][ T113] R13: ffffea0001e4c134 R14: 1ffff1100ec04005 R15: 1ffff1100ec04012 [ 184.464312][ T113] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 184.473276][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.479891][ T113] CR2: 00005577a8c9e168 CR3: 00000000306f5000 CR4: 00000000003506f0 [ 184.487897][ T113] Call Trace: [ 184.491200][ T113] [ 184.494154][ T113] txUnlock+0x427/0xcb0 [ 184.498353][ T113] jfs_lazycommit+0x56e/0xa70 [ 184.503063][ T113] ? txFreelock+0x5a0/0x5a0 [ 184.507592][ T113] ? do_task_dead+0xd0/0xd0 [ 184.512153][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 184.517118][ T113] kthread+0x2fa/0x390 [ 184.521212][ T113] ? txFreelock+0x5a0/0x5a0 [ 184.525741][ T113] ? kthread_blkcg+0xd0/0xd0 [ 184.530357][ T113] ret_from_fork+0x48/0x80 [ 184.534803][ T113] ? kthread_blkcg+0xd0/0xd0 [ 184.539420][ T113] ret_from_fork_asm+0x11/0x20 [ 184.544217][ T113] [ 184.547263][ T113] Modules linked in: [ 184.558675][ T113] ---[ end trace 0000000000000000 ]--- [ 184.564267][ T113] RIP: 0010:put_metapage+0x253/0x340 [ 184.569766][ T113] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 57 78 d9 fe e9 25 ff ff ff e8 5d 3c 81 fe 48 8b 3c 24 48 c7 c6 80 07 04 8b e8 7d aa c1 fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 76 40 81 [ 184.591341][ T113] RSP: 0018:ffffc90002ce7cc0 EFLAGS: 00010246 [ 184.597441][ T113] RAX: 0e2a66189530e200 RBX: ffff888076020000 RCX: 0e2a66189530e200 [ 184.605850][ T113] RDX: 0000000000000000 RSI: ffffffff8b1c8980 RDI: ffffffff8b1c8940 [ 184.614012][ T113] RBP: 000000000000007f R08: ffffffff8e8b02af R09: 1ffffffff1d16055 [ 184.622948][ T113] R10: dffffc0000000000 R11: fffffbfff1d16056 R12: ffff888076020028 [ 184.631023][ T113] R13: ffffea0001e4c134 R14: 1ffff1100ec04005 R15: 1ffff1100ec04012 [ 184.639249][ T113] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 184.648292][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.654919][ T113] CR2: 00005577a8c9e168 CR3: 00000000306f5000 CR4: 00000000003506f0 [ 184.665543][ T113] Kernel panic - not syncing: Fatal exception [ 184.671794][ T113] Kernel Offset: disabled [ 184.676124][ T113] Rebooting in 86400 seconds..