last executing test programs: 32.722749113s ago: executing program 2 (id=1263): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001180)={0x8, {"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", 0x1000}}, 0x1006) 32.511283898s ago: executing program 2 (id=1265): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') lseek(r0, 0x2, 0x0) getdents64(r0, 0xffffffffffffffff, 0x18) 32.295075004s ago: executing program 2 (id=1268): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmmsg$inet(r0, &(0x7f0000005cc0)=[{{&(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x20044000) 32.03085148s ago: executing program 2 (id=1272): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000), 0x3, 0x470, &(0x7f0000000dc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 31.553498532s ago: executing program 2 (id=1277): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000100060000000000040000000000000008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\a', @ANYRES32=0x0, @ANYBLOB="080004", @ANYRES32=0x0, @ANYBLOB="100002"], 0x3c, 0x3) 30.798425411s ago: executing program 2 (id=1281): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0x2a}, @local}, 0xc) close(r0) 30.385933961s ago: executing program 32 (id=1281): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0x2a}, @local}, 0xc) close(r0) 3.844540794s ago: executing program 0 (id=1483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a000001300004802c0001800a00010071756575650000001c0002800600034035e487b2060001400001000006000240000c00000900020073797a32000000000900010073797a31"], 0x84}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000840) 3.526436672s ago: executing program 0 (id=1486): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x4fed0) 3.504010712s ago: executing program 1 (id=1487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x7, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 3.268952578s ago: executing program 1 (id=1489): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1a0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x400040, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x38728a2, &(0x7f0000000140)={[{@mode={'mode', 0x3d, 0xffffff7f}}]}) 3.20052744s ago: executing program 0 (id=1490): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) 2.953078896s ago: executing program 1 (id=1493): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000240)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@sysvgroups}, {@nodioread_nolock}, {@nodelalloc}, {@resuid}, {@errors_remount}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, 0x0) 2.77952635s ago: executing program 5 (id=1495): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21880b00000000000000215dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3be5e6bd03cbe773a938f621809345ec07cfceb013e3d76d500d97c8bee6ff54980ac3d221fcb35724ba64adb29ae8db909e097d78ff9542196635a14266944b850c9d436e96cc806a88090cbfc9db7ce83231bc043ded67966cfd68b800f6030a85f6bb070a2a5b372be2dacea7884b42e76e164af04e47f90ce0694623dce23cd1471f1a6029f68331317073e1a2d8cfb16f821c867d35a609649cf36aa781fa0a381f934844366d4e3ab8dd239c6ec35c15f307a7ed07869aacec38d787fd9c08e9dda1a28bf1a15b004bb1d88aa429ee8e927f5a1e1445685d8923cad92c90c79726d5e73dfe741de35498842cf51a4f09b97b1c14d33213705b95e84a8853fab4e1ced6faecea9d9203b038594bceb202a9d47f862c4f1853db9a0a7bf98ed9d2e3012358b38d092bd1ed7efb1a9e582ac5ef30c9b476e185f537f40ae8189528b480436122a939967e8d862e01172245ebced9f5251dd302e7e974c1db40be1e9e79799c27384caf6485e7c469b77cd6b28f71e39f84d2adbe074dd2bed6636e6853655adc3d1a47eff697e8edba53e6b281aea94798d82da7d3e86d09d869e5e345316eeeced4e15fc39234a0b0104e0b205c95eda632d0e86b095b284f441a62cb0e7262bc1967ee75f5c2d459011b0c15f4c85b02150a8834eda7f84cc96dde04e4abbdf5985a9c7218797820251b5804cae80c9a726afddf36793ae52cfb38e4e19740d6e07e4ed7c01001ab87b7fb12d5b70a75938d234c83d863b1763aec37b41d204fc319c6e802734ed681ea179fe6cad4857c3ca0e236e7b9867688d8bd7749e919f2d4f57f2249c9ccaf76a23760569b0fbde2db12ca0169e74982c1f4f0494aae13f4838b3f50d9ab0f6e328250d6fc34c0156e4b754c5c648b4ef8af32c91859f9706048f029634cefd0d767e8b7743262cb8a468ad37dfa47a745495e3f03cfa1d4ed71af55453c0a25fa1122a9054bcc4d9960c9a54f36b6db55154ab7dd19890d9f8ff3549e0fbd5a655319566b7f9c72be0242e7ffb59020356c3ffb5b9c43858e69d7b677a9bc5b8a64721a51b75a254e07199a73726834bea05901455ad53b38116b953c970b2002d0d1f91deb73ccb7266fbb21aa8555599daed7585575ef3efbd737f2523018ba4645d862889d5c3d91b12f04166db8bffecde54ee278d0d5351f3bf1f8902ff3f4c24a8c0c8a4e6addc9baadc471813589324d3128a1b193137c15c01be9f367317b1c885301ff8e9df728efa37df27f65eb0464055091f2ed469fdab48f413e3978f73ff9dffeb85453e841f86594612ac91b50add8d14910748bfa903033662f3e735ce6d299ce52338a96035aa89f63bd59d151fb20c38125236cbc0d795ac6f8da4cafc74714ed62a23b017e15adcaade58385b78c6945fb30a2539c42b1e415879433b9fb6966c6d19ed19f9f90cbd360d936a8b9f8e03bca5a83c063651b4636a7783bbda6417c83e470a16dfb115344a527436242ace9341432b5816b5e6609d97d600e142ca3cf74cbc00e1d9ee203cdfad339ce460b294f3931c5bd8ae6da8fc14d66a01bae4a212ef3d914e58c13217c8ad91628636b56257c7ca41b404cc2d4b5d50e26ebefc74656c62b1b4e9b6c5b6cc8d79101460f719d95925630bf99e042018439c50026513d680ea573620132ded57dea9e2da4e16f17dbc171642b1e80a3f41311ee73441302285668792160db6614fdb30d25a5719d2ae03ab98ea167597c48dd8197e7faf6189d801134462027901506c5ff1ae2558d96722217f65131d2f429693ae9fae19c101319473608976d08cc1c0d98f789b0c364e8aca574321ab2857af1015f1588afd313503085db4d99961a9391db06c10477ceb44199f1648594e8f9b452fafdab49b1962d02ee77ebd31b7931174a729fa943cb18102130e7e08eaba77df066069c2c3564fc85881ba0dad12c4f06a9e6dea9fea53931ff85e38505eb7ad60a52e2a8a248b3f4d0d55eee31f75f110c70e3b12409a79a5a98b0156c6d2a5d94604b8fa202b12746a365c708c671316cc0ffff6e9b7139b337953be22672a4910e1eb28cccc023b77028e20a6d377a339372f0dc235069f41c2692b0a3a7e0f315f4aebeef435a46b2e8b8462739293f9184c01b1434e87bf3fd48be54bf437056a1d2cff0c7aa52578013f96b1d5100ca936ff029cfd6f9a093621f684196ed7e1d363a97c647c34fe5f2370e7ab9dc718a1fc317779ab8a04bc12c01b778d17eea0b546bce03475fc6373c860714df0322dde550186c553ebd61ed18c0b80655f0827a63d209117ca23b026c1ad30bac4d43a4611292c7049f855b829a3a17fd2b83c142078beed8ca07b7cb7cd624705ccc160246c81174a4d3a9f2057caffe84b1ac073375e065c1ff4e9e22e7d87b3adb40ff796132e4ed86e5fc9f9616f8e4116be96497621692fb516e9316cfd15ad01742a1de4aa35fe02861236295823edf4c48fc37faf55226044e393a3733d58e8ef0f0c7941bc30f09739f37dea2f395f2e9e9b2c31a11923a2d6c9b14f1bacce15094cbbd6445f3581c6d45b76943b4d0db8fd4d4acbdb91780f57c872827abd7a1f13290a0d17dda220493476c92ce65e33f07afcf763aec0e67450f547101f1a5ada0f760c8f12137679324e22c7a13fdf78575115acb0ae4a2818b7b3ead27eea5eccba6f7a34c61819382eebfad742a3c603c6d2f332726996b3e8fcbdfd56b436c1173b1b3bc1ab66a717e31f2f918f0bea3f4801e04c14c881c59324fd9bc38745dd0e47da6bc8e98fe74a760304d74f17cd3cfceb33503397cf592d2b6a51b641d559ba8d6dc449e19b289fd1a4b3772b3998181e787723fe3893362d8f3e346c0ab0abe933e9bdd9a82b377914018377af9d2cbc58ab4fc08cea2623174239cea585603b8acd20da923a44799b1745c3bd65640508f96a0d92a6a2fd8314573f10b4f6e6cbf61e8828bd6e69b1b0c47f5795917a5035b3424dc3cadd2aadbbafb9d18349fab41d79ba13660f2c9400ff87784b26c3e88785db8522c93d3d4f12608736a235c8b9fff98a17934fe36792cb1992ea1b72b5e151cfe82b4ebc4f510882e4b34ee9f6ada188b104ba36e8acbd7bafe39b32f957da45c2743017545fd61667d36d58952de0cdbacb3abc549e1001bf6d9b19f9a353bb84bd152e04c061c691b514d6f1b36a8895424ce210a4cd75d537443a2791dc68e9fff510358f7586d3b73ed04223e683adf6a1c79d3bc92aa595cc6167", 0xa91}], 0x3}, 0x0) 2.435470369s ago: executing program 1 (id=1496): io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYRESDEC, @ANYRES8, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x5) 2.42272429s ago: executing program 5 (id=1497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0f0700000000fcffffff0c00000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2.00333801s ago: executing program 5 (id=1500): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff43052f002000636777fbac141443e000000d62079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) 1.912070123s ago: executing program 0 (id=1501): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x32, 0x0, 0x0, 0xfd, @time, {}, {0xe}, @queue}], 0x1c) 1.827637954s ago: executing program 1 (id=1502): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, 0x0) 1.645060799s ago: executing program 0 (id=1504): r0 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.499921142s ago: executing program 1 (id=1505): syz_mount_image$xfs(&(0x7f0000000240), &(0x7f0000000180)='./file0\x00', 0xa00086, &(0x7f0000000200)={[{@quota}]}, 0x1, 0x9759, &(0x7f000000e040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={r0, 0x0, 0x401, 0x0, 0x80000000, 0x0, 0x0}) 1.408706305s ago: executing program 4 (id=1506): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) unshare(0x22020600) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={0x0, r0}, 0x18) 1.386369215s ago: executing program 5 (id=1507): r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000034000b47564cb6281406000007000000", 0x14}], 0x1}, 0x0) 1.221581819s ago: executing program 3 (id=1508): unshare(0x400) r0 = mq_open(&(0x7f0000000040)='\x96++\xe7\a+\rV\xf4\x82\xa1\xa3&\xe8z\x95:\xff!\xf4o\xf3\xd6\x11\xecVG}\x02\x85Nn\xd9\xbdF\x88\x162z\x8e\xd5b\xb3\x95\xe64*\xeet8\n\xb2\x0e\x19\x89\x86\x04\xb6\x1f\xb8\xb3*\xea\xf5\x99\x1du\xe6!V:Z\xb4H\xf4\xf4`B)Z\xe4\xa7\x8f\xbb\xd8\\LN\xf8f\x8aH\xc1\xc9:;^^<\xcb(\xbf\xee\x16\xf5\x85\f\xc2`\x1b]\xfb\x90\xce\xc7z~\xc7B\x14\xbc\n\xfe+\x8b\x865V\x0e\x8a\xd9>\xe1\x02\xd2\xb4\xbe\xdeG\xbb}tp\x8bR\x00\x86+j\xb8\x05\x00\x00\x00\x00\x00\x00\x00\xb4u\x86\xa6k%\xfeNt\x89/Z=\x96V\x92\xe4}\xdbt\x02\x8b\xa1O\x8c\xcav\xa5\x83u}\xfd\xdb\xea\xf1\x05\xa6\xc6\x9dR\xa5m\xb8\x19\x13\"g\xf440\t\xa9\xaf\xb2\x9f1\xa6\x8f~\x1c\xd9N\xa0\xd7\xb4\x13\xf7\xd9[\xeal*\xe3\xb1k\xe4y\x0f\x9eM~\x12\xca\xa8\xf6\xd4\xbd\xf6\xc8%\x98\\\xb9B\xcf\x12OH\xc8\xe2\xba`\xb2\x9bC+\"\xf9\xf5n@\xea\x8b\xa4\xa4\x85u\xc4\x9e\x14\xadne1o6z\xe8\x10\xc7\x19\xd1\xe2\xf7K\xe1|\xda`)C\xa9)R?7\x87\x10\xdbH\xf9n\xbc\xc42\xbeE\x9e\x0e\x99\xf1r:\xb6\x1d\x9a\xd1u\xc5\xcf\x85=\xae!%%\xd9\xb04\xdd\xbeS\xd8\xf7jlc\xac\xd9\fh1\x03\x9d\x83\x83;\xaaM\xed1(\xbe\x959\xff\b\x01\x926\xfc\xaen\xed\x02\x95J\x9aG*\x1c2\xcb\x9b&\x91\xcdzw\xc0\x18\tG\x1cWAs*_6\xfcQ\x06\f<&\xa9\xe4t\xf6N\xf6\'\x90\x01\x00\xaf\xcd|\xf7\x8d\xaf\x18)^7\xee\xda\xd9\xddy\x9e\x93\xfc\xca\a#\xc8\xbeC\xdd\xefv\x17E\xbe\x15\x1f\xa2\xf1\xd4\xd4\x86s\xb4\xcc\x1a\x18\xb9~\x9dp\xa4\a\x00\xb4\x13Y]\x18YG2\xe9\xf2\xe8\xe9\x87\xae\xa4\a\x95\a\xea\xa4\xe4\xf1\xb0\x9a\xda\xb8\x12&\xad\xe3\xca\xca\xe8kD\x8fSJ\x8a\xf5\\+\xc8v\x10\x91\xb4\x97\xadD\xb5\xe4mD\xe8c\xb7\xb7\x7f\x96\xce\x7f\xc6\x01\x10z\xc0R_\x02jEEA\x89[\x14`\x00-\xc2YJ\xf2\xcc.\x04D\xdb\xc9\x06N(\x9d\x88\xb0V\xf0E5\x16Hz\xcdU\x1dO6\x10\x01\x98\xd4\xd0pa\xb6\xef\xe1\x89e43G\xd98RBG\x8d%\xd2l\x93\x89\xf2\x14n\xbc\x91~<\x01t\xda\xa9=\xa8bl\xd8\x01:\xfb\xff\x95\xcdP\x1e\xf5\xe9\'\x0f\x9aG\xa2\r,wllgZ \x1dS\x14\x87\xf6\x8c\x8bo\xc6\xa5M\xb6\t\xe1\xe1~\x94Ou\xc6\xf8=\xf0\xb1\xe1N\x1f\xca&Nx\xb2\x9d\x16/\x9f\xc4\xdbO!\xfb\xea\x135P\x86\xe8\b\xafW\x185\xee\xa4\x1b\xc6g\xd6K\x10J_\x80\x03\xb7\x10\xb8\xf0\x86!\x89\x94\xa2\xf9i\xb5bNN\xc8\x9f>\x84q\xd9\xc7Z\xbbq\x13DS\x0e\x94\x9a\xcb\xcd\x91\xb5\n\xb4\x9a\xaf\x00-', 0x40, 0x1ce, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x0, @thr={0x0, 0x0}}) 1.220898109s ago: executing program 0 (id=1509): syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f0000000140)=ANY=[], 0xfe, 0x6241, &(0x7f000000ea80)="$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") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x17f18a1, 0x0, 0x83, 0x0, &(0x7f0000000480)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000005580)=ANY=[], 0xd, 0x0, &(0x7f0000000000)) 1.149890902s ago: executing program 4 (id=1510): r0 = memfd_create(&(0x7f0000000000)='\xa3\xcb\x04=\x827\xe7\x81S\bDVK| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xea\xb9o\xdbM\x11ca\v\xeb#\xaf\xcf\xb5\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4) ftruncate(r0, 0x200000) preadv(r0, &(0x7f00000002c0)=[{0x0, 0x204}, {&(0x7f0000000100)=""/168, 0xa8}], 0x2, 0x1fffff, 0xfffffffe) 1.090231743s ago: executing program 5 (id=1511): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/288, 0x120}], 0x1, &(0x7f0000000480)=""/19, 0x13}, 0x40011013) 1.034086434s ago: executing program 3 (id=1512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@udp6=r1, 0x2}, 0x20) 915.282947ms ago: executing program 5 (id=1513): r0 = io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x800, 0x0, 0x1000000}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x13, &(0x7f0000001bc0), 0x2) 884.133308ms ago: executing program 4 (id=1514): r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x62, 0x0, 0x0) 770.361541ms ago: executing program 3 (id=1515): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0xc) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000023000d"], &(0x7f0000000f80)=""/4115, 0x26, 0x1013, 0x1}, 0x28) 685.249113ms ago: executing program 4 (id=1516): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000040)={r0, 0x5, 0x7}) 668.587443ms ago: executing program 3 (id=1517): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt(r0, 0xff, 0x7, 0x0, &(0x7f0000000000)) 486.118488ms ago: executing program 4 (id=1518): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x19, 0x3, 0x10000, 0x7e, 0x7f, "000000d3001400", 0x8, 0x9}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) 481.764878ms ago: executing program 3 (id=1519): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) semtimedop(0x0, &(0x7f0000000080), 0x50, &(0x7f00000014c0)={0x0, 0x3938700}) 311.824092ms ago: executing program 4 (id=1520): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x0, &(0x7f0000004180)) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=1521): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.1.357'. [ 131.433717][ T5331] loop2: detected capacity change from 0 to 256 [ 131.463501][ T5331] exfat: Deprecated parameter 'utf8' [ 131.502362][ T5331] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 131.564871][ T5331] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 132.114676][ T5352] tipc: Enabling of bearer rejected, failed to enable media [ 132.296945][ T5358] loop4: detected capacity change from 0 to 1024 [ 132.351566][ T5362] netlink: 64 bytes leftover after parsing attributes in process `syz.3.373'. [ 132.580684][ T47] hfsplus: b-tree write err: -5, ino 25 [ 132.589578][ T47] hfsplus: b-tree write err: -5, ino 4 [ 132.598010][ T5368] netlink: 44 bytes leftover after parsing attributes in process `syz.0.375'. [ 132.624840][ T47] hfsplus: b-tree write err: -5, ino 2 [ 132.631507][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.638338][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.011359][ T5383] syz.4.383[5383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.011504][ T5383] syz.4.383[5383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.132951][ T5378] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 133.325857][ T5378] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 133.389489][ T5378] REISERFS (device loop3): using ordered data mode [ 133.418958][ T5378] reiserfs: using flush barriers [ 133.454355][ T5378] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 133.503929][ T5380] syz.0.378 (5380): drop_caches: 2 [ 133.532892][ T5378] REISERFS (device loop3): checking transaction log (loop3) [ 133.560745][ T5378] REISERFS (device loop3): Using rupasov hash to sort names [ 133.597560][ T5378] REISERFS (device loop3): using 3.5.x disk format [ 133.642537][ T5378] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 133.707955][ T5378] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 133.733418][ T5378] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 133.779413][ T5378] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 133.843106][ T5378] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 133.881997][ T5400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 133.911593][ T5400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.390'. [ 133.935896][ T5400] netlink: 'syz.4.390': attribute type 18 has an invalid length. [ 133.980125][ T5400] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 768 - 0 [ 133.989521][ T5400] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 768 - 0 [ 133.998872][ T5400] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 768 - 0 [ 134.007737][ T5400] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 768 - 0 [ 134.024802][ T5378] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 134.073714][ T5378] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 134.379848][ T5413] set_capacity_and_notify: 1 callbacks suppressed [ 134.379864][ T5413] loop4: detected capacity change from 0 to 64 [ 134.707939][ T5421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 134.775732][ T5423] netlink: 44 bytes leftover after parsing attributes in process `syz.3.401'. [ 135.009883][ T5431] syz.3.402 (5431): drop_caches: 2 [ 135.097795][ T5435] loop0: detected capacity change from 0 to 164 [ 135.163998][ T5435] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 135.263097][ T5435] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 135.407503][ T5409] loop2: detected capacity change from 0 to 32768 [ 135.462531][ T5409] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 135.482184][ T5409] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 135.548032][ T5409] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 135.789913][ T5409] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 136.276839][ T5438] loop4: detected capacity change from 0 to 32768 [ 136.384804][ T5438] XFS (loop4): Mounting V5 Filesystem [ 136.512563][ T5438] XFS (loop4): Ending clean mount [ 136.549174][ T27] audit: type=1800 audit(1786709230.980:12): pid=5438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.405" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 136.610748][ T5474] syz.2.420 (5474): drop_caches: 2 [ 136.644595][ T4272] XFS (loop4): Unmounting Filesystem [ 136.840929][ T5476] UHID_CREATE from different security context by process 165 (syz.2.422), this is not allowed. [ 137.277349][ T5488] netlink: 'syz.3.428': attribute type 49 has an invalid length. [ 137.349508][ T5490] loop1: detected capacity change from 0 to 1024 [ 138.001049][ T5504] loop4: detected capacity change from 0 to 8192 [ 138.057729][ T5504] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 138.072905][ T5517] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 138.083187][ T5504] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 138.133617][ T5504] REISERFS (device loop4): using ordered data mode [ 138.171832][ T5504] reiserfs: using flush barriers [ 138.197361][ T5520] loop0: detected capacity change from 0 to 512 [ 138.219319][ T5504] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.272195][ T5262] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 138.321569][ T5520] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 138.337855][ T5504] REISERFS (device loop4): checking transaction log (loop4) [ 138.394182][ T5520] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.474584][ T5504] REISERFS (device loop4): Using rupasov hash to sort names [ 138.492276][ T5262] usb 4-1: Using ep0 maxpacket: 32 [ 138.500153][ T5262] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 138.524366][ T5504] REISERFS (device loop4): using 3.5.x disk format [ 138.531131][ T5504] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 138.562197][ T5262] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 138.593164][ T5262] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 138.612603][ T5504] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 138.644515][ T5262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.669816][ T5504] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 138.671803][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 138.688894][ T5262] usb 4-1: config 0 descriptor?? [ 138.716347][ T5504] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 138.790967][ T5504] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 138.866339][ T954] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 138.894916][ T5504] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 138.940644][ T5504] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 139.064953][ T954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.108562][ T954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.129657][ T954] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.135159][ T5262] microsoft 0003:045E:009D.0006: unknown main item tag 0x0 [ 139.162136][ T954] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 139.176271][ T5262] microsoft 0003:045E:009D.0006: unknown main item tag 0x6 [ 139.191758][ T954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.196610][ T5262] microsoft 0003:045E:009D.0006: hidraw0: USB HID v2.05 Device [HID 045e:009d] on usb-dummy_hcd.3-1/input0 [ 139.231281][ T954] usb 2-1: config 0 descriptor?? [ 139.248507][ T5262] microsoft 0003:045E:009D.0006: no inputs found [ 139.255587][ T5262] microsoft 0003:045E:009D.0006: could not initialize ff, continuing anyway [ 139.325154][ T5262] usb 4-1: USB disconnect, device number 4 [ 139.519208][ T5540] fido_id[5540]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 139.671117][ T954] logitech-hidpp-device 0003:046D:C262.0007: No inputs registered, leaving [ 139.691282][ T954] logitech-hidpp-device 0003:046D:C262.0007: hidraw0: USB HID v0.00 Joystick [HID 046d:c262] on usb-dummy_hcd.1-1/input0 [ 139.698350][ T5535] loop0: detected capacity change from 0 to 32768 [ 139.889034][ T954] usb 2-1: USB disconnect, device number 4 [ 140.001671][ T5547] usb usb8: usbfs: process 5547 (syz.4.451) did not claim interface 0 before use [ 140.037971][ T5545] fido_id[5545]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 140.420319][ T5559] tipc: Enabling of bearer rejected, failed to enable media [ 140.532424][ T954] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.548545][ T5565] Bluetooth: MGMT ver 1.22 [ 140.723689][ T954] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 140.739838][ T954] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 140.750597][ T954] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.774061][ T954] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 140.783669][ T954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.791769][ T954] usb 5-1: Product: syz [ 140.795344][ T4624] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.798117][ T954] usb 5-1: Manufacturer: syz [ 140.808573][ T954] usb 5-1: SerialNumber: syz [ 140.827464][ T954] hub 5-1:1.0: bad descriptor, ignoring hub [ 140.842974][ T954] hub: probe of 5-1:1.0 failed with error -5 [ 140.986423][ T5575] loop1: detected capacity change from 0 to 1024 [ 140.993263][ T4624] usb 4-1: Using ep0 maxpacket: 8 [ 141.005843][ T4624] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 141.019044][ T5575] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 141.028033][ T4624] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.057758][ T954] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 141.079786][ T4624] usb 4-1: config 0 descriptor?? [ 141.109219][ T4624] gm12u320 4-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 141.145499][ T4624] gm12u320: probe of 4-1:0.0 failed with error -5 [ 141.158278][ T4624] usb-storage 4-1:0.0: USB Mass Storage device detected [ 141.175747][ T4624] usb-storage 4-1:0.0: device ignored [ 141.304305][ T5263] usb 4-1: USB disconnect, device number 5 [ 141.392705][ T4624] usb 5-1: USB disconnect, device number 4 [ 141.403853][ T4624] usblp0: removed [ 141.604095][ T5590] loop0: detected capacity change from 0 to 256 [ 141.630127][ T5590] exfat: Deprecated parameter 'namecase' [ 141.638441][ T5590] exfat: Deprecated parameter 'namecase' [ 141.681099][ T5590] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 142.638818][ T5620] loop3: detected capacity change from 0 to 2048 [ 142.733596][ T5620] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.989312][ T5605] loop4: detected capacity change from 0 to 32768 [ 143.001548][ T5263] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 143.033513][ T5605] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.478 (5605) [ 143.074272][ T4962] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 143.083339][ T5605] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 143.100161][ T5605] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 143.110272][ T5605] BTRFS info (device loop4): force clearing of disk cache [ 143.144024][ T5605] BTRFS info (device loop4): metadata ratio 0 [ 143.161834][ T5605] BTRFS info (device loop4): enabling ssd optimizations [ 143.181082][ T5605] BTRFS info (device loop4): using spread ssd allocation scheme [ 143.211349][ T5605] BTRFS info (device loop4): using free space tree [ 143.234168][ T5263] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.262409][ T5263] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.274428][ T4962] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.287279][ T5263] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 143.305666][ T4962] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 143.312529][ T5263] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.362545][ T5263] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 143.371697][ T5263] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.390799][ T4962] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.447155][ T4962] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 143.459161][ T5649] loop2: detected capacity change from 0 to 2048 [ 143.497698][ T5605] BTRFS info (device loop4): rebuilding free space tree [ 143.514583][ T5649] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8802c029, mo2=0003] [ 143.544588][ T4962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.573887][ T5649] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 143.602690][ T4962] usb 2-1: Product: syz [ 143.623001][ T4962] usb 2-1: Manufacturer: syz [ 143.633111][ T4962] usb 2-1: SerialNumber: syz [ 143.673862][ T4962] hub 2-1:1.0: bad descriptor, ignoring hub [ 143.694060][ T4962] hub: probe of 2-1:1.0 failed with error -5 [ 143.694436][ T5649] EXT4-fs error (device loop2): ext4_ext_precache:645: inode #2: comm syz.2.494: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 143.765945][ T5649] EXT4-fs (loop2): Remounting filesystem read-only [ 143.846448][ T76] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 143.881165][ T4962] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 143.893947][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 144.003427][ T4272] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 144.018596][ T5263] gud 1-1:1.0: Failed to get properties (error=-71) [ 144.036043][ T5263] gud: probe of 1-1:1.0 failed with error -71 [ 144.119243][ T5263] usb 1-1: USB disconnect, device number 8 [ 144.323017][ T5663] usb 2-1: USB disconnect, device number 5 [ 144.341040][ T5663] usblp0: removed [ 144.409367][ T5643] loop3: detected capacity change from 0 to 40427 [ 144.467532][ T5643] F2FS-fs (loop3): invalid crc value [ 144.495595][ T5643] F2FS-fs (loop3): Found nat_bits in checkpoint [ 144.502950][ T5667] loop4: detected capacity change from 0 to 1024 [ 144.609597][ T27] audit: type=1800 audit(1786709239.040:13): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.497" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 144.712139][ T5643] F2FS-fs (loop3): Start checkpoint disabled! [ 144.785308][ T5643] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 145.035743][ T5682] loop0: detected capacity change from 0 to 1024 [ 145.166515][ T5686] loop2: detected capacity change from 0 to 16 [ 145.183654][ T5686] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 145.389472][ T47] kworker/u4:3: attempt to access beyond end of device [ 145.389472][ T47] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 145.481188][ T47] kworker/u4:3: attempt to access beyond end of device [ 145.481188][ T47] loop3: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 145.544666][ T5691] netlink: 16 bytes leftover after parsing attributes in process `syz.4.507'. [ 145.863162][ T5698] sp0: Synchronizing with TNC [ 146.072137][ T5663] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 146.277622][ T5663] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 146.321925][ T5663] usb 3-1: config 0 interface 0 has no altsetting 0 [ 146.325712][ T5680] loop1: detected capacity change from 0 to 32768 [ 146.349467][ T5663] usb 3-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 146.373531][ T5680] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 146.397842][ T5663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.426538][ T5663] usb 3-1: config 0 descriptor?? [ 146.429473][ T5680] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 146.501439][ T5680] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 146.606075][ T5716] netlink: 822 bytes leftover after parsing attributes in process `syz.4.518'. [ 146.719833][ T5680] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 146.869942][ T5663] uclogic 0003:28BD:0075.0008: interface is invalid, ignoring [ 147.084856][ T4961] usb 3-1: USB disconnect, device number 6 [ 147.391970][ T5731] loop4: detected capacity change from 0 to 256 [ 147.672285][ T5733] nvme0: failed to create debugfs attr [ 147.711555][ T4961] nvmet: connect request for invalid subsystem n! [ 147.724681][ T5733] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n" [ 148.001123][ T5745] loop2: detected capacity change from 0 to 256 [ 148.027929][ T5746] loop4: detected capacity change from 0 to 128 [ 148.426326][ T5759] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 148.492561][ T5759] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 148.526650][ T5759] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 148.551095][ T5759] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 148.587509][ T5759] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 148.610927][ T5759] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 148.663004][ T5759] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 148.684203][ T5759] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 148.742282][ T5759] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 148.764728][ T5759] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 148.785942][ T5759] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 148.815443][ T5759] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 148.838522][ T5759] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 149.156060][ T5775] loop0: detected capacity change from 0 to 64 [ 149.344582][ T5779] netlink: 44 bytes leftover after parsing attributes in process `syz.1.547'. [ 149.414784][ T4299] kworker/u4:5: attempt to access beyond end of device [ 149.414784][ T4299] loop0: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 149.458862][ T4299] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 149.505866][ T5756] loop2: detected capacity change from 0 to 32768 [ 149.602658][ T5784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.550'. [ 149.672290][ T5756] XFS (loop2): Mounting V5 Filesystem [ 149.740124][ T5794] netlink: 104 bytes leftover after parsing attributes in process `syz.4.551'. [ 149.753762][ T5756] XFS (loop2): Ending clean mount [ 149.951255][ T5796] loop1: detected capacity change from 0 to 2048 [ 149.972658][ T4282] XFS (loop2): Unmounting Filesystem [ 150.069554][ T5796] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.249289][ T5802] loop0: detected capacity change from 0 to 128 [ 150.299429][ T5802] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 150.403452][ T5802] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.801803][ T5815] loop4: detected capacity change from 0 to 512 [ 150.890375][ T5815] EXT4-fs (loop4): orphan cleanup on readonly fs [ 150.914006][ T5815] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz.4.563: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 151.009678][ T5815] EXT4-fs error (device loop4): ext4_quota_enable:7052: comm syz.4.563: Bad quota inode: 4, type: 1 [ 151.087839][ T5815] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 151.126417][ T5815] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 151.157880][ T5815] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 151.186520][ T5824] 9pnet_fd: p9_fd_create_unix (5824): problem connecting socket: ./file0: -111 [ 151.230200][ T5815] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 151.237293][ T5825] loop3: detected capacity change from 0 to 1024 [ 151.319145][ T5825] hfsplus: small file entry [ 151.480507][ T5829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 151.618333][ T5815] EXT4-fs warning (device loop4): ext4_multi_mount_protect:338: MMP startup interrupted, failing mount [ 151.618333][ T5815] [ 151.674727][ T5833] loop0: detected capacity change from 0 to 16 [ 151.717579][ T5833] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 151.798445][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 151.875364][ T5835] loop2: detected capacity change from 0 to 1024 [ 152.312050][ T5845] netlink: 'syz.0.574': attribute type 10 has an invalid length. [ 152.324881][ T5845] netlink: 40 bytes leftover after parsing attributes in process `syz.0.574'. [ 152.352746][ T5845] device nr15 entered promiscuous mode [ 152.369187][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): nr15: link becomes ready [ 152.399443][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): nr15: link becomes ready [ 152.428649][ T5845] A link change request failed with some changes committed already. Interface nr15 may have been left with an inconsistent configuration, please check. [ 152.451559][ T5841] loop4: detected capacity change from 0 to 4096 [ 152.617783][ T5841] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 152.809553][ T5044] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 152.836817][ T4272] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 152.847257][ T4272] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 152.882172][ T4272] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 152.905406][ T4299] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 152.913282][ T4272] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 152.950539][ T5831] loop3: detected capacity change from 0 to 32768 [ 153.071022][ T5831] XFS (loop3): Mounting V5 Filesystem [ 153.146881][ T5866] loop4: detected capacity change from 0 to 1024 [ 153.165446][ T5866] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.186046][ T5831] XFS (loop3): Ending clean mount [ 153.336751][ T5261] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 153.457488][ T4277] XFS (loop3): Unmounting Filesystem [ 153.552168][ T5261] usb 2-1: Using ep0 maxpacket: 16 [ 153.560257][ T5261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.612740][ T5261] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 153.688602][ T5261] usb 2-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 153.728260][ T5261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.750991][ T5261] usb 2-1: config 0 descriptor?? [ 154.224833][ T5261] waltop 0003:172F:0500.0009: unknown main item tag 0x7 [ 154.231981][ T4624] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 154.250482][ T5261] waltop 0003:172F:0500.0009: collection stack underflow [ 154.272191][ T5261] waltop 0003:172F:0500.0009: item 0 2 0 12 parsing failed [ 154.291372][ T5261] waltop: probe of 0003:172F:0500.0009 failed with error -22 [ 154.418207][ T27] audit: type=1326 audit(1786709248.850:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5897 comm="syz.0.597" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1af19e0d9 code=0x7ffc0000 [ 154.453908][ T4624] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.477333][ T27] audit: type=1326 audit(1786709248.850:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5897 comm="syz.0.597" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1af19e0d9 code=0x7ffc0000 [ 154.478337][ T4624] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.565049][ T27] audit: type=1326 audit(1786709248.900:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5897 comm="syz.0.597" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fc1af19e0d9 code=0x7ffc0000 [ 154.592531][ T27] audit: type=1326 audit(1786709248.900:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5897 comm="syz.0.597" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1af19e0d9 code=0x7ffc0000 [ 154.602980][ T4624] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 154.618263][ T27] audit: type=1326 audit(1786709248.900:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5897 comm="syz.0.597" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1af19e0d9 code=0x7ffc0000 [ 154.712210][ T4624] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.742517][ T4624] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 154.761935][ T4624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.799751][ T5263] usb 2-1: USB disconnect, device number 6 [ 155.048221][ T5914] loop4: detected capacity change from 0 to 512 [ 155.168365][ T5920] netlink: 48 bytes leftover after parsing attributes in process `syz.1.606'. [ 155.178305][ T5914] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 155.198188][ T5914] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.320031][ T5914] EXT4-fs error (device loop4): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.4.604: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 155.364416][ T5922] tipc: Started in network mode [ 155.369400][ T5922] tipc: Node identity _, cluster identity 4711 [ 155.378842][ T5922] tipc: Enabling of bearer rejected, failed to enable media [ 155.405224][ T5914] EXT4-fs error (device loop4): ext4_get_first_dir_block:3594: inode #12: comm syz.4.604: directory missing '.' [ 155.430656][ T4624] gud 3-1:1.0: Failed to get properties (error=-71) [ 155.449066][ T4624] gud: probe of 3-1:1.0 failed with error -71 [ 155.509876][ T4624] usb 3-1: USB disconnect, device number 7 [ 155.614997][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 155.829064][ T5936] loop0: detected capacity change from 0 to 256 [ 155.856958][ T5936] exfat: Deprecated parameter 'namecase' [ 155.864867][ T5934] loop4: detected capacity change from 0 to 8192 [ 155.886858][ T5936] exfat: Deprecated parameter 'namecase' [ 155.906981][ T5936] exfat: Deprecated parameter 'utf8' [ 155.969641][ T5936] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 156.222246][ T5942] loop1: detected capacity change from 0 to 256 [ 156.312117][ T5942] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 156.871812][ T5965] loop1: detected capacity change from 0 to 64 [ 157.042296][ T5263] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 157.234741][ T5263] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 157.262236][ T5263] usb 1-1: config 0 has no interface number 0 [ 157.268401][ T5263] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.301704][ T5263] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.332262][ T5263] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 157.362496][ T5263] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.391630][ T5263] usb 1-1: config 0 descriptor?? [ 157.809980][ T5263] prodikeys 0003:041E:2801.000A: unknown main item tag 0x3 [ 157.842164][ T5263] prodikeys 0003:041E:2801.000A: unknown main item tag 0xd [ 157.849510][ T5263] prodikeys 0003:041E:2801.000A: item fetching failed at offset 6/7 [ 157.871635][ T5263] prodikeys 0003:041E:2801.000A: hid parse failed [ 157.882393][ T5263] prodikeys: probe of 0003:041E:2801.000A failed with error -22 [ 158.036732][ T5261] usb 1-1: USB disconnect, device number 9 [ 158.542600][ T4286] Bluetooth: hci0: command 0x0c20 tx timeout [ 158.621324][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.653'. [ 159.045128][ T6041] loop3: detected capacity change from 0 to 256 [ 159.150512][ T6041] FAT-fs (loop3): Directory bread(block 64) failed [ 159.164392][ T6041] FAT-fs (loop3): Directory bread(block 65) failed [ 159.171071][ T6041] FAT-fs (loop3): Directory bread(block 66) failed [ 159.212204][ T6041] FAT-fs (loop3): Directory bread(block 67) failed [ 159.230836][ T6041] FAT-fs (loop3): Directory bread(block 68) failed [ 159.244215][ T6043] loop4: detected capacity change from 0 to 256 [ 159.265448][ T6041] FAT-fs (loop3): Directory bread(block 69) failed [ 159.273258][ T6041] FAT-fs (loop3): Directory bread(block 70) failed [ 159.325606][ T6041] FAT-fs (loop3): Directory bread(block 71) failed [ 159.339028][ T6041] FAT-fs (loop3): Directory bread(block 72) failed [ 159.354532][ T6043] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 159.372428][ T6041] FAT-fs (loop3): Directory bread(block 73) failed [ 159.485988][ T6047] loop1: detected capacity change from 0 to 164 [ 160.085122][ T5663] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 160.131291][ T6069] loop4: detected capacity change from 0 to 512 [ 160.143498][ T6069] EXT4-fs: Ignoring removed i_version option [ 160.223843][ T6076] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.234245][ T6069] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 160.243446][ T6069] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.284839][ T5663] usb 3-1: unable to get BOS descriptor or descriptor too short [ 160.298570][ T5663] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.309600][ T5663] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.322980][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 160.331989][ T5663] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 160.341723][ T5663] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.350122][ T5663] usb 3-1: Product: syz [ 160.354626][ T5663] usb 3-1: Manufacturer: syz [ 160.359297][ T5663] usb 3-1: SerialNumber: syz [ 160.377071][ T5663] usb 3-1: selecting invalid altsetting 1 [ 160.423256][ T5663] usb 3-1: unit 6 not found! [ 160.888953][ T5663] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 161.000921][ T4378] udevd[4378]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.091569][ T5663] usb 3-1: USB disconnect, device number 8 [ 161.176515][ T6098] loop3: detected capacity change from 0 to 256 [ 161.913299][ T6089] loop0: detected capacity change from 0 to 32768 [ 162.348766][ T6120] loop2: detected capacity change from 0 to 256 [ 162.474324][ T6120] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 162.618661][ T6105] loop4: detected capacity change from 0 to 32768 [ 162.811619][ T6105] XFS (loop4): Mounting V5 Filesystem [ 162.906555][ T6136] loop2: detected capacity change from 0 to 512 [ 162.968075][ T6105] XFS (loop4): Ending clean mount [ 162.974464][ T6136] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.697: corrupted inode contents [ 162.996923][ T6112] loop3: detected capacity change from 0 to 32768 [ 163.015090][ T6136] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 163.084780][ T4272] XFS (loop4): Unmounting Filesystem [ 163.119508][ T6136] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.697: corrupted inode contents [ 163.144599][ T6112] JBD2: Ignoring recovery information on journal [ 163.199112][ T6136] EXT4-fs error (device loop2): ext4_evict_inode:329: inode #15: comm syz.2.697: mark_inode_dirty error [ 163.264284][ T6136] EXT4-fs (loop2): 1 orphan inode deleted [ 163.270976][ T6136] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 163.354343][ T6112] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 163.670291][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 163.696346][ T4277] ocfs2: Unmounting device (7,3) on (node local) [ 163.925134][ T6161] loop2: detected capacity change from 0 to 512 [ 164.097455][ T6161] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.702: couldn't read orphan inode 26 (err -116) [ 164.123269][ T6166] loop4: detected capacity change from 0 to 4096 [ 164.232925][ T6161] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 164.257364][ T6161] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.275458][ T6166] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 164.395831][ T6161] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 164.464483][ T6166] ntfs3: loop4: failed to convert "0080" to cp437 [ 164.529198][ T6166] ntfs3: loop4: failed to convert name for inode 1e. [ 164.607324][ T6179] loop1: detected capacity change from 0 to 1024 [ 164.640719][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 165.276208][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.713'. [ 165.505485][ T6198] loop1: detected capacity change from 0 to 2048 [ 165.567281][ T6202] device ip6gretap0 entered promiscuous mode [ 165.659480][ T6198] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 165.669141][ T6159] XFS (loop3): Mounting V5 Filesystem [ 165.677299][ T6206] netlink: 20 bytes leftover after parsing attributes in process `syz.0.716'. [ 165.803453][ T6159] XFS (loop3): Ending clean mount [ 165.875330][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 166.024885][ T4277] XFS (loop3): Unmounting Filesystem [ 166.405465][ T6232] xt_hashlimit: size too large, truncated to 1048576 [ 166.440177][ T6232] xt_hashlimit: max too large, truncated to 1048576 [ 166.458976][ T6233] set_capacity_and_notify: 1 callbacks suppressed [ 166.458993][ T6233] loop4: detected capacity change from 0 to 1024 [ 167.061606][ T6241] loop4: detected capacity change from 0 to 8192 [ 167.162199][ T6241] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 2068) [ 167.197479][ T6241] FAT-fs (loop4): Filesystem has been set read-only [ 167.267120][ T6249] loop1: detected capacity change from 0 to 8192 [ 168.770023][ T6299] ip_tables: iptables: counters copy to user failed while replacing table [ 169.097852][ T6283] loop0: detected capacity change from 0 to 40427 [ 169.132330][ T6283] F2FS-fs (loop0): Small segment_count (20 < 1 * 24) [ 169.159662][ T6283] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 169.180084][ T6283] F2FS-fs (loop0): build fault injection attr: rate: 16, type: 0x3ffff [ 169.444038][ T6313] loop3: detected capacity change from 0 to 512 [ 169.554779][ T6313] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.764: couldn't read orphan inode 26 (err -116) [ 169.617901][ T6313] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 169.720547][ T6313] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.754277][ T6320] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 169.868247][ T6313] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 170.047310][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 170.199105][ T6329] loop3: detected capacity change from 0 to 8 [ 170.222197][ T4279] Bluetooth: hci4: command 0x0405 tx timeout [ 170.657498][ T6318] loop0: detected capacity change from 0 to 32768 [ 170.681935][ T6324] loop1: detected capacity change from 0 to 32768 [ 170.700857][ T6324] XFS: ikeep mount option is deprecated. [ 170.751288][ T6318] jfs_lookup: iget failed on inum 4 [ 170.760987][ T6318] jfs_lookup: iget failed on inum 4 [ 170.799190][ T6324] XFS (loop1): Mounting V5 Filesystem [ 170.890699][ T6344] netlink: 20 bytes leftover after parsing attributes in process `syz.4.775'. [ 170.933964][ T6324] XFS (loop1): Ending clean mount [ 170.971150][ T6324] XFS (loop1): Quotacheck needed: Please wait. [ 170.987601][ T6349] binder: 6348:6349 ioctl c00c620f 200000000240 returned -22 [ 171.053652][ T6324] XFS (loop1): Quotacheck: Done. [ 171.221459][ T4278] XFS (loop1): Unmounting Filesystem [ 171.631303][ T6357] loop0: detected capacity change from 0 to 128 [ 171.691106][ T6357] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 171.748235][ T6357] hpfs: filesystem error: improperly stopped [ 171.758347][ T6357] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 171.792122][ T6357] hpfs: You really don't want any checks? You are crazy... [ 171.809982][ T6357] hpfs: hpfs_map_sector(): read error [ 171.815972][ T6357] hpfs: code page support is disabled [ 171.828929][ T6341] loop3: detected capacity change from 0 to 32768 [ 171.834411][ T6357] hpfs: hpfs_map_4sectors(): unaligned read [ 171.841417][ T6357] hpfs: hpfs_map_4sectors(): unaligned read [ 171.874802][ T6341] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.774 (6341) [ 171.886528][ T6357] hpfs: filesystem error: unable to find root dir [ 171.952194][ T6341] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 171.989107][ T6341] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 172.034262][ T6341] BTRFS info (device loop3): using free space tree [ 172.229575][ T6353] loop2: detected capacity change from 0 to 32768 [ 172.309804][ T6353] XFS (loop2): Mounting V5 Filesystem [ 172.341418][ T27] audit: type=1326 audit(1786709266.770:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz.0.784" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1af19e0d9 code=0x0 [ 172.451173][ T6341] BTRFS info (device loop3): enabling ssd optimizations [ 172.510710][ T6400] loop4: detected capacity change from 0 to 512 [ 172.597421][ T6353] XFS (loop2): Ending clean mount [ 172.612430][ T6400] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 172.647296][ T6400] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.686587][ T4277] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 172.713225][ T6353] XFS (loop2): Quotacheck needed: Please wait. [ 172.756805][ T6400] EXT4-fs warning (device loop4): ext4_group_add:1723: Can't resize non-sparse filesystem further [ 172.949984][ T6353] XFS (loop2): Quotacheck: Done. [ 172.994696][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 173.205843][ T4282] XFS (loop2): Unmounting Filesystem [ 173.460806][ T6414] loop0: detected capacity change from 0 to 512 [ 173.944156][ T6423] loop1: detected capacity change from 0 to 2048 [ 174.088845][ T6425] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.207322][ T6423] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=80, inode=15, rec_len=1498, name_len=5 [ 174.237963][ T6423] Remounting filesystem read-only [ 174.252381][ T6423] NILFS error (device loop1): nilfs_readdir: bad page in #2 [ 174.312707][ T6407] loop3: detected capacity change from 0 to 32768 [ 174.385331][ T6407] XFS (loop3): Mounting V5 Filesystem [ 174.475961][ T6407] XFS (loop3): Ending clean mount [ 174.492546][ T6438] loop2: detected capacity change from 0 to 2048 [ 174.593956][ T6438] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 174.609138][ T27] audit: type=1800 audit(1786709269.040:20): pid=6407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.790" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 174.678391][ T6419] loop4: detected capacity change from 0 to 32768 [ 174.798643][ T4277] XFS (loop3): Unmounting Filesystem [ 174.843254][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 175.233025][ T6428] loop0: detected capacity change from 0 to 32768 [ 175.631070][ T6458] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 176.108329][ T6471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.815'. [ 176.539262][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.821'. [ 176.820985][ T6462] set_capacity_and_notify: 2 callbacks suppressed [ 176.821002][ T6462] loop3: detected capacity change from 0 to 32768 [ 176.879248][ T6496] loop4: detected capacity change from 0 to 64 [ 176.930328][ T6462] JBD2: Ignoring recovery information on journal [ 176.946271][ T6492] loop1: detected capacity change from 0 to 4096 [ 177.084694][ T6462] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 177.121856][ T6492] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 177.532668][ T4277] ocfs2: Unmounting device (7,3) on (node local) [ 177.648511][ T6516] loop0: detected capacity change from 0 to 512 [ 177.776419][ T6516] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 177.977709][ T6516] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 178.028432][ T6516] FAT-fs (loop0): Filesystem has been set read-only [ 178.056490][ T6526] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 178.841649][ T6544] loop2: detected capacity change from 0 to 4096 [ 178.919360][ T6521] loop1: detected capacity change from 0 to 32768 [ 178.932370][ T6544] NILFS (loop2): invalid segment: Checksum error in segment payload [ 178.967206][ T6544] NILFS (loop2): trying rollback from an earlier position [ 179.022284][ T6544] NILFS (loop2): recovery complete [ 179.077308][ T6521] XFS (loop1): Mounting V5 Filesystem [ 179.090517][ T6557] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 179.147027][ T6532] loop4: detected capacity change from 0 to 32768 [ 179.226330][ T6532] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.843 (6532) [ 179.339407][ T6521] XFS (loop1): Ending clean mount [ 179.362740][ T6521] XFS (loop1): Quotacheck needed: Please wait. [ 179.363475][ T6532] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 179.442421][ T6532] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 179.451223][ T6532] BTRFS info (device loop4): setting nodatasum [ 179.478866][ T6532] BTRFS info (device loop4): force zlib compression, level 3 [ 179.528575][ T6532] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 179.551573][ T6521] XFS (loop1): Quotacheck: Done. [ 179.566085][ T6532] BTRFS info (device loop4): use lzo compression, level 0 [ 179.612362][ T6532] BTRFS info (device loop4): turning on flush-on-commit [ 179.619386][ T6532] BTRFS info (device loop4): enabling auto defrag [ 179.672145][ T6532] BTRFS info (device loop4): max_inline at 4096 [ 179.678484][ T6532] BTRFS info (device loop4): using free space tree [ 179.787616][ T4278] XFS (loop1): Unmounting Filesystem [ 179.980386][ T6582] loop2: detected capacity change from 0 to 256 [ 180.258519][ T6532] BTRFS info (device loop4): enabling ssd optimizations [ 180.461642][ T6563] loop0: detected capacity change from 0 to 32768 [ 180.506476][ T6563] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.854 (6563) [ 180.573615][ T4272] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 180.591498][ T6563] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 180.661865][ T6563] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 180.711664][ T6563] BTRFS info (device loop0): using free space tree [ 181.055191][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.868'. [ 181.078774][ T6563] BTRFS info (device loop0): enabling ssd optimizations [ 181.130070][ T6627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.868'. [ 181.266883][ T4370] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (4370) [ 181.328371][ T4271] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 181.487629][ T6639] process 'syz.4.872' launched '/dev/fd/3' with NULL argv: empty string added [ 181.987504][ T6654] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 182.106981][ T6658] loop0: detected capacity change from 0 to 1024 [ 182.202222][ T4625] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 182.376683][ T6664] loop3: detected capacity change from 0 to 256 [ 182.402202][ T4625] usb 5-1: Using ep0 maxpacket: 16 [ 182.409926][ T4625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.471734][ T4625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.511947][ T4625] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 182.562285][ T4625] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 182.597913][ T4625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.671510][ T4625] usb 5-1: config 0 descriptor?? [ 182.911040][ T6672] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 182.919431][ T6672] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 182.927335][ T6672] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 182.935224][ T6672] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 182.943103][ T6672] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 182.950999][ T6672] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 182.958867][ T6672] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 182.966737][ T6672] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 182.974721][ T6672] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 182.982614][ T6672] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 183.007688][ T6675] loop0: detected capacity change from 0 to 512 [ 183.078163][ T6675] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 183.110316][ T6675] ext4 filesystem being mounted at /174/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.177644][ T4625] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000B/input/input8 [ 183.226601][ T6665] loop2: detected capacity change from 0 to 32768 [ 183.247481][ T4625] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 183.280545][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 183.297246][ T6665] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.884 (6665) [ 183.364451][ T4625] usb 5-1: USB disconnect, device number 5 [ 183.420620][ T6665] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 183.502301][ T6665] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 183.544080][ T6665] BTRFS info (device loop2): using free space tree [ 183.711872][ T6682] fido_id[6682]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 183.861247][ T6665] BTRFS info (device loop2): enabling ssd optimizations [ 184.104891][ T4282] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 184.188911][ T6719] loop3: detected capacity change from 0 to 16 [ 184.206303][ T27] audit: type=1326 audit(1786709278.640:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.4.898" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7c99e0d9 code=0x7ffc0000 [ 184.335644][ T27] audit: type=1326 audit(1786709278.680:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.4.898" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7c99e0d9 code=0x7ffc0000 [ 184.400429][ T6719] erofs: (device loop3): mounted with root inode @ nid 36. [ 184.457925][ T27] audit: type=1326 audit(1786709278.680:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.4.898" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7c99e0d9 code=0x7ffc0000 [ 184.512502][ T6719] erofs: (device loop3): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 184.546244][ T6719] erofs: (device loop3): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 184.562398][ T27] audit: type=1326 audit(1786709278.680:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.4.898" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7a7c99e0d9 code=0x7ffc0000 [ 184.691126][ T27] audit: type=1326 audit(1786709278.680:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.4.898" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7a7c99de42 code=0x7ffc0000 [ 184.807642][ T27] audit: type=1326 audit(1786709278.680:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.4.898" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7a7c99de42 code=0x7ffc0000 [ 184.856904][ T27] audit: type=1326 audit(1786709278.680:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.4.898" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7c99e0d9 code=0x7ffc0000 [ 184.940210][ T27] audit: type=1326 audit(1786709278.680:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.4.898" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7c99e0d9 code=0x7ffc0000 [ 185.020626][ T27] audit: type=1326 audit(1786709278.690:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.4.898" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7c99e0d9 code=0x7ffc0000 [ 185.089768][ T27] audit: type=1326 audit(1786709278.690:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.4.898" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7c99e0d9 code=0x7ffc0000 [ 185.684422][ T6765] loop4: detected capacity change from 0 to 512 [ 185.741035][ T6765] EXT4-fs (loop4): Test dummy encryption mode enabled [ 185.811416][ T6763] loop0: detected capacity change from 0 to 4096 [ 185.852998][ T6765] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0022] [ 185.864406][ T6765] System zones: 1-2, 4-12, 8-8 [ 185.908399][ T6765] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.920: iget: bad i_size value: 38620345925642 [ 185.944849][ T6763] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 185.954549][ T6765] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.920: couldn't read orphan inode 15 (err -117) [ 185.968518][ T6765] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 186.011545][ T6774] loop2: detected capacity change from 0 to 2048 [ 186.061116][ T6774] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 186.081305][ T6774] NILFS (loop2): mounting unchecked fs [ 186.096378][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 186.164437][ T6774] NILFS (loop2): recovery complete [ 186.172952][ T4315] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 186.184243][ T6775] overlayfs: upper fs does not support tmpfile. [ 186.244516][ T6775] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 186.251712][ T6779] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.276196][ T6775] overlayfs: failed to verify origin (/, ino=5, err=-22) [ 186.342299][ T6775] overlayfs: failed to verify upper root origin [ 186.416895][ T4315] usb 4-1: config 0 interface 0 has no altsetting 0 [ 186.432387][ T4315] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 186.465278][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.509730][ T4315] usb 4-1: config 0 descriptor?? [ 186.562217][ T5044] ntfs3: loop0: ntfs3_write_inode r=9 failed, -22. [ 186.569642][ T4271] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 186.578971][ T4271] ntfs3: loop0: ntfs_evict_inode r=9 failed, -22. [ 186.837432][ T6793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.931'. [ 186.950399][ T4315] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x1 [ 186.961485][ T6795] loop2: detected capacity change from 0 to 64 [ 186.983271][ T4315] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x5 [ 187.018928][ T4315] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x6 [ 187.032590][ T4315] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x0 [ 187.091546][ T4315] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x0 [ 187.110796][ T4315] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x0 [ 187.139615][ T4315] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x0 [ 187.164296][ T4315] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x0 [ 187.189392][ T4315] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x0 [ 187.227999][ T6801] loop1: detected capacity change from 0 to 512 [ 187.229054][ T4315] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x0 [ 187.272330][ T4315] hid-led: probe of 0003:0FC5:B080.000C failed with error -71 [ 187.300454][ T4315] usb 4-1: USB disconnect, device number 6 [ 187.433588][ T6801] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 187.487436][ T6801] ext4 filesystem being mounted at /196/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.518665][ T6812] loop0: detected capacity change from 0 to 512 [ 187.540851][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 187.617002][ T6811] loop2: detected capacity change from 0 to 4096 [ 187.663729][ T6812] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 187.678695][ T6817] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.722284][ T6812] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.956476][ T6822] loop3: detected capacity change from 0 to 512 [ 188.001268][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 188.054255][ T6822] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 188.124913][ T6827] loop0: detected capacity change from 0 to 64 [ 188.161387][ T6830] loop1: detected capacity change from 0 to 64 [ 188.170123][ T6831] netlink: 56 bytes leftover after parsing attributes in process `syz.4.946'. [ 188.242335][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.946'. [ 188.243311][ T6827] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 188.542663][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 188.657164][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'. [ 188.977451][ T6853] netlink: 24 bytes leftover after parsing attributes in process `syz.3.957'. [ 189.279184][ T6867] loop1: detected capacity change from 0 to 24 [ 189.345874][ T6861] loop0: detected capacity change from 0 to 4096 [ 189.394896][ T6861] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 189.469412][ T6871] loop4: detected capacity change from 0 to 64 [ 189.989316][ T6883] loop1: detected capacity change from 0 to 1024 [ 190.063049][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 190.063065][ T27] audit: type=1800 audit(1786709284.500:51): pid=6883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.970" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 190.106840][ T6883] syz.1.970: attempt to access beyond end of device [ 190.106840][ T6883] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 190.464732][ T6863] F2FS-fs (loop3): invalid crc value [ 190.484141][ T6892] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 190.528744][ T6892] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.548968][ T6863] F2FS-fs (loop3): Found nat_bits in checkpoint [ 190.772000][ T6863] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 190.829340][ T6863] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 190.846656][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 191.787129][ T6931] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 191.988338][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 192.018523][ T6939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.038572][ T6939] team0: Port device bond1 added [ 192.112305][ T26] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 192.342126][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 192.349311][ T26] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.381391][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.410672][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 192.469940][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 192.522084][ T26] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.582099][ T26] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 192.619150][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.632948][ T6923] set_capacity_and_notify: 5 callbacks suppressed [ 192.632964][ T6923] loop1: detected capacity change from 0 to 40427 [ 192.649129][ T26] usb 1-1: config 0 descriptor?? [ 192.677485][ T6923] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x3ffff [ 192.703018][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1000'. [ 192.745484][ T6923] F2FS-fs (loop1): invalid crc value [ 192.765290][ T6923] F2FS-fs (loop1): Found nat_bits in checkpoint [ 192.862573][ T26] rc_core: IR keymap rc-hauppauge not found [ 192.880027][ T26] Registered IR keymap rc-empty [ 192.904060][ T26] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 192.917076][ T6923] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 192.952307][ T26] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 192.994402][ T26] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 193.046829][ T26] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 193.130078][ T26] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 193.192353][ T26] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 193.232853][ T26] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 193.293196][ T26] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 193.332399][ T26] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 193.372302][ T26] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 193.412272][ T26] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 193.442404][ T26] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 193.482244][ T26] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 193.512184][ T26] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 193.562321][ T26] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 193.623895][ T26] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 193.672127][ T26] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 193.724565][ T26] usb 1-1: USB disconnect, device number 10 [ 194.064985][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.071490][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.460444][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1022'. [ 194.490167][ T7006] netlink: 580 bytes leftover after parsing attributes in process `syz.2.1022'. [ 194.662357][ T4625] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 194.754700][ T7018] loop2: detected capacity change from 0 to 256 [ 194.855269][ T7018] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 194.880759][ T4625] usb 1-1: Using ep0 maxpacket: 16 [ 194.888290][ T4625] usb 1-1: config 0 interface 0 has no altsetting 0 [ 194.910761][ T4625] usb 1-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 194.948624][ T4625] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.000463][ T4625] usb 1-1: config 0 descriptor?? [ 195.014266][ T7018] exFAT-fs (loop2): error, broken FAT chain. [ 195.035703][ T7018] exFAT-fs (loop2): Filesystem has been set read-only [ 195.048607][ T7018] exFAT-fs (loop2): error, failed to bmap (inode : ffff8880725c94e0 iblock : 0, err : -5) [ 195.118261][ T7022] IPVS: Scheduler module ip_vs_ not found [ 195.462692][ T4625] wacom 0003:056A:00BB.000D: unknown main item tag 0x6 [ 195.490099][ T4625] wacom 0003:056A:00BB.000D: ignoring exceeding usage max [ 195.506204][ T4625] wacom 0003:056A:00BB.000D: unbalanced collection at end of report description [ 195.566693][ T4625] wacom 0003:056A:00BB.000D: parse failed [ 195.586515][ T4625] wacom: probe of 0003:056A:00BB.000D failed with error -22 [ 195.728505][ T4958] usb 1-1: USB disconnect, device number 11 [ 195.824995][ T7043] loop3: detected capacity change from 0 to 4096 [ 195.869898][ T7043] EXT4-fs (loop3): Test dummy encryption mode enabled [ 195.904746][ T7043] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 195.915293][ T4961] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 196.071855][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 196.113945][ T4961] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 196.131026][ T4961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.166439][ T4961] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 196.196986][ T4961] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 196.226405][ T4961] usb 3-1: Manufacturer: syz [ 196.253052][ T4961] usb 3-1: config 0 descriptor?? [ 196.320934][ T7039] loop1: detected capacity change from 0 to 32768 [ 196.361921][ T7039] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.1036 (7039) [ 196.438434][ T7039] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 196.480896][ T7039] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 196.482742][ T4625] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 196.532492][ T7039] BTRFS info (device loop1): enabling ssd optimizations [ 196.542287][ T7039] BTRFS info (device loop1): not using ssd optimizations [ 196.556532][ T7039] BTRFS info (device loop1): turning off barriers [ 196.563569][ T4961] rc_core: IR keymap rc-hauppauge not found [ 196.563613][ T4961] Registered IR keymap rc-empty [ 196.565034][ T4961] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 196.601635][ T7039] BTRFS info (device loop1): use no compression [ 196.621669][ T7039] BTRFS info (device loop1): using free space tree [ 196.631153][ T4961] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 196.712131][ T4625] usb 4-1: Using ep0 maxpacket: 16 [ 196.719749][ T4625] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.731585][ T4625] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.741669][ T4625] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 196.754909][ T4625] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 196.764143][ T4625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.779051][ T4625] usb 4-1: config 0 descriptor?? [ 197.039916][ T4278] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 197.081143][ T4358] usb 3-1: USB disconnect, device number 10 [ 197.391924][ T4625] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000E/input/input11 [ 197.441268][ T4625] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 197.514732][ T4625] usb 4-1: USB disconnect, device number 7 [ 197.770157][ T7093] fido_id[7093]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 199.247949][ T7105] loop2: detected capacity change from 0 to 40427 [ 199.264166][ T4960] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 199.277766][ T7105] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 199.308170][ T7105] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 199.336854][ T7105] F2FS-fs (loop2): invalid crc value [ 199.413966][ T7105] F2FS-fs (loop2): Found nat_bits in checkpoint [ 199.459899][ T7142] loop0: detected capacity change from 0 to 1024 [ 199.472474][ T4960] usb 4-1: Using ep0 maxpacket: 8 [ 199.483903][ T4960] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 199.506822][ T4960] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 199.542271][ T4960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.581103][ T4960] usb 4-1: Product: syz [ 199.601354][ T4960] usb 4-1: Manufacturer: syz [ 199.621635][ T4960] usb 4-1: SerialNumber: syz [ 199.659220][ T4960] usb 4-1: config 0 descriptor?? [ 199.686225][ T4960] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 199.717707][ T7105] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 199.733859][ T7105] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 199.772971][ T4960] usb 4-1: setting power ON [ 199.788434][ T4960] dvb-usb: bulk message failed: -22 (2/0) [ 199.823589][ T4960] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 199.871336][ T4960] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 199.893934][ T7128] dvb-usb: bulk message failed: -22 (3/0) [ 199.913112][ T7151] loop4: detected capacity change from 0 to 256 [ 199.927739][ T4960] usb 4-1: media controller created [ 199.939286][ T7151] exfat: Deprecated parameter 'utf8' [ 199.964932][ T7151] exfat: Deprecated parameter 'namecase' [ 200.029460][ T4960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.048908][ T7151] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 200.112540][ T4960] usb 4-1: selecting invalid altsetting 6 [ 200.120544][ T7105] syz.2.1055: attempt to access beyond end of device [ 200.120544][ T7105] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 200.145448][ T4960] usb 4-1: digital interface selection failed (-22) [ 200.177028][ T4960] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 200.196724][ T4960] usb 4-1: setting power OFF [ 200.201909][ T4960] dvb-usb: bulk message failed: -22 (2/0) [ 200.218707][ T4960] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 200.239866][ T4960] (NULL device *): no alternate interface [ 200.302810][ T4960] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 200.368894][ T4960] usb 4-1: USB disconnect, device number 8 [ 200.821678][ T7161] loop3: detected capacity change from 0 to 2048 [ 200.966345][ T7161] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 201.016214][ T7161] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 201.131620][ T7153] loop0: detected capacity change from 0 to 32768 [ 201.138482][ T7161] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 201.157850][ T7161] EXT4-fs (loop3): This should not happen!! Data will be lost [ 201.157850][ T7161] [ 201.196569][ T7161] EXT4-fs (loop3): Total free blocks count 0 [ 201.210838][ T7166] loop1: detected capacity change from 0 to 4096 [ 201.212883][ T7161] EXT4-fs (loop3): Free/Dirty block details [ 201.262329][ T7161] EXT4-fs (loop3): free_blocks=4096 [ 201.267839][ T7161] EXT4-fs (loop3): dirty_blocks=32 [ 201.274833][ T7161] EXT4-fs (loop3): Block reservation details [ 201.281018][ T7161] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 201.296544][ T7153] XFS (loop0): Mounting V5 Filesystem [ 201.397576][ T7153] XFS (loop0): Ending clean mount [ 201.473757][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 201.533308][ T4278] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 201.563381][ T4278] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 201.757678][ T4271] XFS (loop0): Unmounting Filesystem [ 202.059619][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1091'. [ 202.336910][ T7201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1094'. [ 202.975911][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'. [ 203.346896][ T7206] loop2: detected capacity change from 0 to 32768 [ 203.393611][ T4960] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 203.431198][ T7206] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 203.465011][ T7206] JBD2: Ignoring recovery information on journal [ 203.582931][ T4960] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 203.602951][ T4960] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.645695][ T7206] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 203.668278][ T4960] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.697333][ T4960] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.728366][ T4960] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.768360][ T4960] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.795442][ T4960] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.847205][ T4960] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.869314][ T4960] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.885714][ T4960] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.900516][ T4960] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.942178][ T4960] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.976243][ T7206] syz.2.1096 (7206) used greatest stack depth: 19200 bytes left [ 203.984173][ T4960] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.999126][ T4960] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.031419][ T4960] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.082081][ T4960] usb 1-1: config 0 interface 0 has no altsetting 0 [ 204.101839][ T4960] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.125908][ T4282] ocfs2: Unmounting device (7,2) on (node local) [ 204.131747][ T4960] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.154304][ T4960] usb 1-1: config 0 interface 0 has no altsetting 0 [ 204.176527][ T4960] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.195804][ T4960] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.247548][ T4960] usb 1-1: config 0 interface 0 has no altsetting 0 [ 204.274260][ T4960] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.311042][ T4960] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.332188][ T4960] usb 1-1: config 0 interface 0 has no altsetting 0 [ 204.355180][ T4960] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 204.382114][ T4960] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 204.405191][ T4960] usb 1-1: Product: syz [ 204.429447][ T4960] usb 1-1: Manufacturer: syz [ 204.445182][ T4960] usb 1-1: SerialNumber: syz [ 204.479960][ T4960] usb 1-1: config 0 descriptor?? [ 204.519950][ T4960] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 204.814289][ T5665] usb 1-1: USB disconnect, device number 12 [ 204.842867][ T5665] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 204.990429][ T7243] loop4: detected capacity change from 0 to 40427 [ 205.040154][ T7243] F2FS-fs (loop4): invalid crc value [ 205.066870][ T7243] F2FS-fs (loop4): Found nat_bits in checkpoint [ 205.218002][ T7243] F2FS-fs (loop4): Start checkpoint disabled! [ 205.290241][ T7243] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 205.506474][ T7270] Zero length message leads to an empty skb [ 205.937536][ T7258] loop2: detected capacity change from 0 to 40427 [ 205.986622][ T7258] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x3ffff [ 206.025554][ T7279] loop1: detected capacity change from 0 to 4096 [ 206.056431][ T7258] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0xe4 [ 206.108685][ T7258] F2FS-fs (loop2): invalid crc value [ 206.140386][ T7288] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.186818][ T7258] F2FS-fs (loop2): Found nat_bits in checkpoint [ 206.220906][ T7279] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 206.365861][ T7258] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00 [ 206.382202][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 206.388584][ T4279] Bluetooth: hci3: command 0x0406 tx timeout [ 206.395401][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 206.401453][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 206.408052][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 206.494163][ T7258] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 206.599103][ T7302] loop0: detected capacity change from 0 to 512 [ 206.714595][ T7302] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 206.727827][ T7258] F2FS-fs (loop2) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x178/0x910 [ 206.759776][ T7302] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.760003][ T7305] loop1: detected capacity change from 0 to 1024 [ 206.889703][ T7302] EXT4-fs error (device loop0): ext4_validate_inode_bitmap:106: comm syz.0.1138: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 206.946472][ T7311] loop4: detected capacity change from 0 to 8 [ 207.023817][ T7311] SQUASHFS error: Unable to read inode 0xe3 [ 207.159931][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 207.225833][ T7316] loop3: detected capacity change from 0 to 256 [ 207.303226][ T7316] exfat: Deprecated parameter 'namecase' [ 207.395813][ T7316] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 207.533171][ T7322] net_ratelimit: 48 callbacks suppressed [ 207.533190][ T7322] Dead loop on virtual device ip6_vti0, fix it urgently! [ 207.981883][ T7334] netlink: 'syz.4.1154': attribute type 10 has an invalid length. [ 208.102443][ T7334] team0: Port device dummy0 added [ 208.125609][ T7335] netlink: 'syz.4.1154': attribute type 10 has an invalid length. [ 208.151738][ T7330] loop0: detected capacity change from 0 to 8192 [ 208.203463][ T7330] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.259937][ T7335] team0: Port device dummy0 removed [ 208.267676][ T7341] loop1: detected capacity change from 0 to 512 [ 208.315763][ T7335] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 208.333054][ T7341] EXT4-fs: Ignoring removed orlov option [ 208.376122][ T7341] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 208.471555][ T7341] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #16: comm syz.1.1156: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 208.648202][ T7341] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.1156: couldn't read orphan inode 16 (err -117) [ 208.675722][ T7354] loop3: detected capacity change from 0 to 256 [ 208.693044][ T7341] EXT4-fs (loop1): 1 orphan inode deleted [ 208.698857][ T7341] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 208.713947][ T7354] exfat: Deprecated parameter 'namecase' [ 208.760681][ T7354] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d) [ 209.005846][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 209.325311][ T7370] 0x000000000010-0x000000000020 : "" [ 209.380807][ T7370] ftl_cs: FTL header corrupt! [ 209.712260][ T7379] use of bytesused == 0 is deprecated and will be removed in the future, [ 209.779981][ T7379] use the actual size instead. [ 210.024494][ T7387] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1175'. [ 210.673940][ T7407] set_capacity_and_notify: 1 callbacks suppressed [ 210.673957][ T7407] loop1: detected capacity change from 0 to 2048 [ 210.728504][ T7403] loop0: detected capacity change from 0 to 4096 [ 210.743591][ T7412] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.768974][ T7407] syz.1.1183: attempt to access beyond end of device [ 210.768974][ T7407] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 210.857520][ T7407] NILFS error (device loop1): nilfs_readdir: bad page in #2 [ 210.910638][ T7407] Remounting filesystem read-only [ 211.126175][ T7417] loop4: detected capacity change from 0 to 2048 [ 211.805090][ T7443] netlink: 'syz.0.1198': attribute type 7 has an invalid length. [ 211.850917][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1198'. [ 211.878704][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'. [ 212.152354][ T7450] loop0: detected capacity change from 0 to 256 [ 212.208516][ T7450] FAT-fs (loop0): Directory bread(block 64) failed [ 212.252204][ T7450] FAT-fs (loop0): Directory bread(block 65) failed [ 212.258950][ T7450] FAT-fs (loop0): Directory bread(block 66) failed [ 212.288088][ T7450] FAT-fs (loop0): Directory bread(block 67) failed [ 212.312327][ T7450] FAT-fs (loop0): Directory bread(block 68) failed [ 212.334114][ T7450] FAT-fs (loop0): Directory bread(block 69) failed [ 212.370746][ T7450] FAT-fs (loop0): Directory bread(block 70) failed [ 212.407990][ T7450] FAT-fs (loop0): Directory bread(block 71) failed [ 212.429352][ T7450] FAT-fs (loop0): Directory bread(block 72) failed [ 212.455465][ T7450] FAT-fs (loop0): Directory bread(block 73) failed [ 212.580027][ T7436] loop2: detected capacity change from 0 to 32768 [ 212.647312][ T7436] [ 212.647312][ T7436] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.647312][ T7436] [ 212.688359][ T7456] binder: 7455:7456 ioctl c0046209 0 returned -22 [ 212.740674][ T7436] [ 212.740674][ T7436] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.740674][ T7436] [ 212.782849][ T7458] device vlan2 entered promiscuous mode [ 212.788476][ T7458] device batadv0 entered promiscuous mode [ 212.796322][ T7436] [ 212.796322][ T7436] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.796322][ T7436] [ 212.842246][ T108] [ 212.842246][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.842246][ T108] [ 212.978133][ T4282] [ 212.978133][ T4282] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.978133][ T4282] [ 212.993918][ T4282] [ 212.993918][ T4282] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.993918][ T4282] [ 213.096729][ T7464] netlink: 'syz.0.1210': attribute type 10 has an invalid length. [ 213.133615][ T7468] Driver unsupported XDP return value 0 on prog (id 69) dev N/A, expect packet loss! [ 213.147605][ T7466] loop3: detected capacity change from 0 to 2048 [ 213.177938][ T7465] loop4: detected capacity change from 0 to 1024 [ 213.197133][ T7448] loop1: detected capacity change from 0 to 32768 [ 213.230213][ T7470] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.230819][ T7464] team0: Port device dummy0 added [ 213.259710][ T7448] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1201 (7448) [ 213.304823][ T7469] netlink: 'syz.0.1210': attribute type 10 has an invalid length. [ 213.345764][ T7448] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 213.419452][ T7448] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 213.481029][ T7448] BTRFS info (device loop1): using free space tree [ 213.574230][ T5043] hfsplus: b-tree write err: -5, ino 8 [ 213.581391][ T7469] team0: Port device dummy0 removed [ 213.655903][ T7477] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 213.684070][ T7469] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 213.927838][ T7496] loop2: detected capacity change from 0 to 512 [ 213.949850][ T7448] BTRFS info (device loop1): enabling ssd optimizations [ 214.103676][ T7496] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 214.143516][ T7496] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.425337][ T4278] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 214.577545][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 214.644859][ T7515] loop0: detected capacity change from 0 to 512 [ 214.730308][ T7515] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 214.802311][ T7515] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.1223: corrupted in-inode xattr [ 214.840015][ T7515] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1223: couldn't read orphan inode 15 (err -117) [ 214.860402][ T4378] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop1 scanned by udevd (4378) [ 214.976191][ T7515] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 215.134894][ T7515] EXT4-fs: Ignoring sb option on remount [ 215.141671][ T7515] EXT4-fs (loop0): changing journal_checksum during remount not supported; ignoring [ 215.252140][ T7515] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 215.453147][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 215.805352][ T7538] loop0: detected capacity change from 0 to 4096 [ 215.845035][ T7538] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 215.942483][ T7538] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 215.985693][ T27] audit: type=1326 audit(1786709310.420:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7547 comm="syz.2.1238" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1859e0d9 code=0x7ffc0000 [ 216.032153][ T4315] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 216.043145][ T7538] ntfs3: loop0: ino=0, attr_set_size [ 216.055575][ T7538] ntfs3: loop0: ino=0, attr_set_size [ 216.126136][ T27] audit: type=1326 audit(1786709310.450:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7547 comm="syz.2.1238" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f2a1859e0d9 code=0x7ffc0000 [ 216.244037][ T27] audit: type=1326 audit(1786709310.490:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7547 comm="syz.2.1238" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1859e0d9 code=0x7ffc0000 [ 216.272316][ T4315] usb 5-1: Using ep0 maxpacket: 32 [ 216.279402][ T4315] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.322185][ T4315] usb 5-1: config 0 interface 0 has no altsetting 0 [ 216.349675][ T4315] usb 5-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 216.387823][ T27] audit: type=1326 audit(1786709310.490:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7547 comm="syz.2.1238" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1859e0d9 code=0x7ffc0000 [ 216.399903][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.478428][ T4315] usb 5-1: config 0 descriptor?? [ 216.493914][ T27] audit: type=1326 audit(1786709310.490:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7547 comm="syz.2.1238" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f2a1859e0d9 code=0x7ffc0000 [ 216.588746][ T27] audit: type=1326 audit(1786709310.490:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7547 comm="syz.2.1238" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1859e0d9 code=0x7ffc0000 [ 216.677349][ T27] audit: type=1326 audit(1786709310.490:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7547 comm="syz.2.1238" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1859e0d9 code=0x7ffc0000 [ 216.827665][ T7562] loop2: detected capacity change from 0 to 32768 [ 216.897434][ T7562] Dev loop2 SGI disklabel: csum bad, label corrupted [ 216.982185][ T4625] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 217.043091][ T4315] saitek 0003:06A3:0CD0.000F: unknown main item tag 0x1 [ 217.050186][ T4315] saitek 0003:06A3:0CD0.000F: unknown main item tag 0x6 [ 217.082470][ T4315] saitek 0003:06A3:0CD0.000F: collection stack underflow [ 217.089598][ T4315] saitek 0003:06A3:0CD0.000F: item 0 1 0 12 parsing failed [ 217.122630][ T4315] saitek 0003:06A3:0CD0.000F: parse failed [ 217.128532][ T4315] saitek: probe of 0003:06A3:0CD0.000F failed with error -22 [ 217.186294][ T4625] usb 1-1: Using ep0 maxpacket: 32 [ 217.193205][ T4625] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 217.201418][ T4625] usb 1-1: config 0 has no interface number 0 [ 217.252179][ T4625] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 217.270996][ T4321] usb 5-1: USB disconnect, device number 6 [ 217.282098][ T4625] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 217.317773][ T4625] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 217.348340][ T4625] usb 1-1: config 0 interface 196 has no altsetting 0 [ 217.362442][ T7556] loop1: detected capacity change from 0 to 32768 [ 217.374061][ T7560] loop3: detected capacity change from 0 to 40427 [ 217.383381][ T4625] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 217.392933][ T4625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.401057][ T4625] usb 1-1: Product: syz [ 217.408890][ T4625] usb 1-1: Manufacturer: syz [ 217.424641][ T7560] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 217.433568][ T4625] usb 1-1: SerialNumber: syz [ 217.443125][ T7560] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 217.494038][ T4625] usb 1-1: config 0 descriptor?? [ 217.511614][ T7559] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 217.523796][ T7560] F2FS-fs (loop3): invalid crc value [ 217.569981][ T7560] F2FS-fs (loop3): Found nat_bits in checkpoint [ 217.853910][ T7560] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 217.877969][ T7560] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 217.968923][ T4625] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 217.988482][ T4625] ipheth: probe of 1-1:0.196 failed with error -22 [ 218.131125][ T7578] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1250'. [ 218.171255][ T7560] syz.3.1243: attempt to access beyond end of device [ 218.171255][ T7560] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 218.206130][ T4321] usb 1-1: USB disconnect, device number 13 [ 218.480530][ T7582] loop1: detected capacity change from 0 to 4096 [ 219.797620][ T7622] loop4: detected capacity change from 0 to 64 [ 219.848022][ T7599] loop0: detected capacity change from 0 to 32768 [ 219.985968][ T7630] loop2: detected capacity change from 0 to 512 [ 219.993927][ T7630] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 220.010469][ T7630] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.1272: bad orphan inode 131083 [ 220.038113][ T7599] XFS (loop0): Mounting V5 Filesystem [ 220.048161][ T7630] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 220.204124][ T7630] overlayfs: upper fs needs to support d_type. [ 220.235416][ T7599] XFS (loop0): Ending clean mount [ 220.316004][ T27] audit: type=1800 audit(1786709314.750:59): pid=7599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1261" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 220.434094][ T4271] XFS (loop0): Unmounting Filesystem [ 220.473960][ T4321] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 220.493308][ T5663] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 220.702412][ T4321] usb 2-1: Using ep0 maxpacket: 16 [ 220.707751][ T5663] usb 5-1: Using ep0 maxpacket: 32 [ 220.720013][ T4321] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 220.731454][ T5663] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 220.762299][ T4321] usb 2-1: config 0 has no interface number 0 [ 220.768510][ T4321] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 220.779833][ T5663] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 220.800135][ T5663] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.817056][ T4321] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 220.830177][ T5663] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 220.850590][ T5663] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.869073][ T5663] usb 5-1: Product: syz [ 220.880660][ T4321] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 220.892726][ T5663] usb 5-1: Manufacturer: syz [ 220.897374][ T5663] usb 5-1: SerialNumber: syz [ 220.914711][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.935243][ T5663] usb 5-1: config 0 descriptor?? [ 220.942301][ T4321] usb 2-1: Product: syz [ 220.956715][ T4321] usb 2-1: Manufacturer: syz [ 220.961368][ T4321] usb 2-1: SerialNumber: syz [ 220.982350][ T4321] usb 2-1: config 0 descriptor?? [ 221.021338][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 221.023887][ T7639] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 221.054941][ T7639] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 221.219119][ T76] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.299069][ T7639] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 221.316737][ T7639] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 221.348980][ T5663] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 221.420840][ T76] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.446397][ T7645] loop3: detected capacity change from 0 to 32768 [ 221.528497][ T76] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.550570][ T5663] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 221.577057][ T5663] gs_usb: probe of 5-1:0.0 failed with error -71 [ 221.612507][ T5663] usb 5-1: USB disconnect, device number 7 [ 221.665443][ T7652] loop0: detected capacity change from 0 to 512 [ 221.731270][ T7652] EXT4-fs error (device loop0): ext4_get_journal_inode:5762: comm syz.0.1283: inode #2147418112: comm syz.0.1283: iget: illegal inode # [ 221.754529][ T4321] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 221.775033][ T4321] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 221.788365][ T7652] EXT4-fs (loop0): no journal found [ 221.802601][ T7652] EXT4-fs (loop0): can't get journal size [ 221.816595][ T76] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.834179][ T4321] asix: probe of 2-1:0.251 failed with error -71 [ 221.841787][ T7652] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 221.864558][ T7652] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 221.872800][ T7652] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 221.907684][ T4321] usb 2-1: USB disconnect, device number 7 [ 222.006083][ T7652] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 222.018430][ T7657] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 222.037699][ T7657] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 222.233885][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 222.742166][ T4627] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 222.772245][ T7672] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1291'. [ 222.803501][ T7672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1291'. [ 222.818174][ T7674] mmap: syz.1.1290 (7674) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 222.840188][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 222.850036][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 222.858358][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 222.868478][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 222.876581][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 222.893308][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 222.942459][ T4627] usb 4-1: Using ep0 maxpacket: 32 [ 222.949609][ T4627] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.022480][ T4627] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.057346][ T4627] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 223.089719][ T4627] usb 4-1: config 0 interface 0 has no altsetting 0 [ 223.113087][ T7687] loop1: detected capacity change from 0 to 128 [ 223.120155][ T4627] usb 4-1: New USB device found, idVendor=056a, idProduct=0002, bcdDevice= 0.00 [ 223.135610][ T4627] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.152514][ T7687] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 223.187854][ T4627] usb 4-1: config 0 descriptor?? [ 223.192703][ T4321] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 223.221249][ T7687] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 223.352876][ T7687] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 223.396846][ T4321] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 223.412516][ T7687] FAT-fs (loop1): Filesystem has been set read-only [ 223.424557][ T4321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.465164][ T4321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.505804][ T4321] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 223.567626][ T4321] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 223.588686][ T4278] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 223.611796][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.637017][ T4321] usb 1-1: config 0 descriptor?? [ 223.645044][ T4627] wacom 0003:056A:0002.0010: Unknown device_type for 'HID 056a:0002'. Ignoring. [ 223.714359][ T7696] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by ""[7696] [ 223.832452][ T7700] loop1: detected capacity change from 0 to 64 [ 223.872689][ T5663] usb 4-1: USB disconnect, device number 9 [ 224.024243][ T7703] loop4: detected capacity change from 0 to 1024 [ 224.059932][ T4321] holtek_kbd 0003:04D9:A055.0011: unbalanced collection at end of report description [ 224.080373][ T4321] holtek_kbd: probe of 0003:04D9:A055.0011 failed with error -22 [ 224.287341][ T4321] usb 1-1: USB disconnect, device number 14 [ 224.389917][ T7675] chnl_net:caif_netlink_parms(): no params data found [ 224.942194][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 225.176165][ T7675] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.230877][ T7675] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.260601][ T7675] device bridge_slave_0 entered promiscuous mode [ 225.573266][ T7675] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.597832][ T7675] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.631143][ T7675] device bridge_slave_1 entered promiscuous mode [ 225.650962][ T7718] loop3: detected capacity change from 0 to 32768 [ 225.726584][ T76] device hsr_slave_0 left promiscuous mode [ 225.750494][ T76] device hsr_slave_1 left promiscuous mode [ 225.760021][ T7718] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 225.760021][ T7718] [ 225.777553][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.805371][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.822534][ T7718] ERROR: (device loop3): remounting filesystem as read-only [ 225.880811][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.907915][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.940437][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.018396][ T76] device bridge_slave_0 left promiscuous mode [ 226.037499][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.211444][ T76] device veth1_macvtap left promiscuous mode [ 226.241214][ T76] device veth0_macvtap left promiscuous mode [ 226.254004][ T7728] loop0: detected capacity change from 0 to 32768 [ 226.267019][ T76] device veth1_vlan left promiscuous mode [ 226.285588][ T76] device veth0_vlan left promiscuous mode [ 227.022254][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 227.144758][ T76] team0 (unregistering): Port device bond1 removed [ 227.154059][ T76] bond1 (unregistering): Released all slaves [ 227.205730][ T7763] loop0: detected capacity change from 0 to 32768 [ 227.280372][ T7763] XFS (loop0): Mounting V5 Filesystem [ 227.325403][ T7763] XFS (loop0): Ending clean mount [ 227.411813][ T4271] XFS (loop0): Unmounting Filesystem [ 228.144023][ T76] team0 (unregistering): Port device team_slave_1 removed [ 228.194871][ T76] team0 (unregistering): Port device team_slave_0 removed [ 228.240222][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.287926][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.630735][ T76] bond0 (unregistering): Released all slaves [ 228.743154][ T7765] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1319'. [ 228.822789][ T7675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.910199][ T7675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.004988][ T7785] loop4: detected capacity change from 0 to 128 [ 229.043746][ T7791] loop3: detected capacity change from 0 to 8 [ 229.051573][ T7675] team0: Port device team_slave_0 added [ 229.069991][ T7788] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 229.093257][ T7675] team0: Port device team_slave_1 added [ 229.102359][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 229.152547][ T7791] SQUASHFS error: Corrupted symlink [ 229.307946][ T7675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.371509][ T7675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.476549][ T7675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.549593][ T7675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.567146][ T7675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.599543][ T7801] netlink: 'syz.4.1330': attribute type 9 has an invalid length. [ 229.647874][ T7801] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1330'. [ 229.712115][ T7675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.887321][ T7675] device hsr_slave_0 entered promiscuous mode [ 229.943236][ T7675] device hsr_slave_1 entered promiscuous mode [ 229.990129][ T7675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.009889][ T7675] Cannot create hsr debugfs directory [ 230.289432][ T7819] loop4: detected capacity change from 0 to 128 [ 230.650635][ T7675] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.704847][ T7675] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.739779][ T7675] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 230.798155][ T7799] loop3: detected capacity change from 0 to 32768 [ 230.808660][ T7675] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 230.945249][ T7799] XFS (loop3): Mounting V5 Filesystem [ 231.018428][ T7675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.036705][ T7675] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.047991][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.122781][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.182203][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 231.188456][ T7799] XFS (loop3): Ending clean mount [ 231.196147][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.242924][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.317941][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.325178][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.356763][ T4277] XFS (loop3): Unmounting Filesystem [ 231.366893][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.446058][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.482989][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.522988][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.531814][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.590497][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.619290][ T7854] loop4: detected capacity change from 0 to 512 [ 231.627340][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.656042][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.695907][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.706215][ T7854] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 231.721167][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.762461][ T7854] ext4 filesystem being mounted at /279/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 231.785951][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.863115][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.913390][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.967851][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.004595][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.051619][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.333118][ T7872] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 232.518391][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 233.050302][ T7892] loop0: detected capacity change from 0 to 128 [ 233.157040][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.190257][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.227553][ T5663] Process accounting resumed [ 233.234244][ T5663] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 233.271041][ T7675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.277027][ T5663] FAT-fs (loop0): Filesystem has been set read-only [ 233.387715][ T7897] loop1: detected capacity change from 0 to 64 [ 233.572172][ T7902] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 234.938467][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 234.967628][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.079963][ T7675] device veth0_vlan entered promiscuous mode [ 235.109699][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 235.123637][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 235.175154][ T7675] device veth1_vlan entered promiscuous mode [ 235.206677][ T7908] loop0: detected capacity change from 0 to 40427 [ 235.215833][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.231546][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.237142][ T7908] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 235.258921][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 235.272802][ T7908] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 235.315500][ T7908] F2FS-fs (loop0): invalid crc value [ 235.335370][ T7908] F2FS-fs (loop0): Found nat_bits in checkpoint [ 235.381252][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 235.398320][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.449726][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.527609][ T7675] device veth0_macvtap entered promiscuous mode [ 235.570660][ T7675] device veth1_macvtap entered promiscuous mode [ 235.584942][ T7908] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 235.607821][ T7908] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 235.677299][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.688903][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.698928][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.709423][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.732065][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.782229][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.829462][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.865902][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.906545][ T7675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.984208][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 236.000466][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 236.032755][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 236.087078][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 236.127544][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.164953][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.222103][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.248107][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.282149][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.332861][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.367291][ T7675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.404512][ T7675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.444143][ T7675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.453727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 236.505039][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 236.537373][ T7675] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.572151][ T7675] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.581032][ T7675] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.624087][ T7675] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.881070][ T5043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.903345][ T5043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.947998][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 237.027316][ T5043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.057631][ T5043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.098000][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 237.920786][ T7968] loop4: detected capacity change from 0 to 32768 [ 237.972206][ T4960] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 238.013534][ T7968] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 238.013534][ T7968] [ 238.056785][ T7968] ERROR: (device loop4): remounting filesystem as read-only [ 238.184963][ T4960] usb 6-1: not running at top speed; connect to a high speed hub [ 238.207814][ T4960] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 238.269741][ T4960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.294592][ T4960] usb 6-1: Product: syz [ 238.309474][ T4960] usb 6-1: Manufacturer: syz [ 238.358924][ T4960] usb 6-1: SerialNumber: syz [ 238.371379][ T4960] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected [ 238.441443][ T4960] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 238.475504][ T4960] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 238.523587][ T4960] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 238.561481][ T4960] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 238.607954][ C0] usb 6-1: malformed indat packet [ 238.613449][ C0] usb 6-1: malformed indat packet [ 238.618816][ C0] usb 6-1: malformed indat packet [ 238.628117][ C0] usb 6-1: malformed indat packet [ 238.641122][ C0] usb 6-1: malformed indat packet [ 238.648398][ C0] usb 6-1: malformed indat packet [ 238.654581][ C0] usb 6-1: malformed indat packet [ 238.919546][ T4960] usb 6-1: USB disconnect, device number 2 [ 238.944290][ T4960] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 239.006374][ T4960] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 239.039883][ T4960] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 239.067788][ T4960] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 239.094078][ T4960] keyspan 6-1:1.0: device disconnected [ 239.821341][ T7870] Set syz0 is full, maxelem 65536 reached [ 239.975400][ T8033] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 240.030610][ T8035] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=io+mem:owns=io+mem [ 240.651184][ T8017] loop1: detected capacity change from 0 to 40427 [ 240.707665][ T8017] F2FS-fs (loop1): invalid crc value [ 240.744700][ T8017] F2FS-fs (loop1): Found nat_bits in checkpoint [ 240.979022][ T8017] F2FS-fs (loop1): Start checkpoint disabled! [ 241.079832][ T8017] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 241.287650][ T8075] loop4: detected capacity change from 0 to 2048 [ 241.359887][ T8075] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 241.462130][ T8078] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.664483][ T47] kworker/u4:3: attempt to access beyond end of device [ 241.664483][ T47] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 241.860910][ T8090] netlink: 'syz.4.1421': attribute type 29 has an invalid length. [ 241.869060][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1420'. [ 241.919320][ T8090] netlink: 'syz.4.1421': attribute type 29 has an invalid length. [ 241.970665][ T8092] netlink: 'syz.4.1421': attribute type 29 has an invalid length. [ 242.358777][ T8101] loop4: detected capacity change from 0 to 256 [ 242.962481][ T8117] loop3: detected capacity change from 0 to 256 [ 243.065305][ T8117] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 243.145357][ T8117] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 243.205907][ T8117] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 243.722465][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1442'. [ 244.403532][ T8160] loop5: detected capacity change from 0 to 8192 [ 244.491169][ T8174] loop1: detected capacity change from 0 to 65 [ 244.521099][ T8160] loop5: p1 < > p3 < p5 > p4 [ 244.532171][ T8160] loop5: partition table partially beyond EOD, truncated [ 244.549849][ T8160] loop5: p1 start 4294967040 is beyond EOD, truncated [ 244.563735][ T8174] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 245.114521][ T5663] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 245.178940][ T8190] loop5: detected capacity change from 0 to 4096 [ 245.219079][ T8190] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 245.324318][ T5663] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 245.343230][ T5663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.389513][ T5663] usb 4-1: config 0 descriptor?? [ 245.615212][ T5663] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 245.634265][ T5663] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 245.747464][ T4357] udevd[4357]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 245.755097][ T7655] udevd[7655]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 245.760818][ T4370] udevd[4370]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 245.825381][ T5663] [drm:udl_init] *ERROR* Selecting channel failed [ 245.880316][ T5663] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 245.937293][ T5663] [drm] Initialized udl on minor 2 [ 245.969477][ T5663] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 246.009833][ T5663] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 246.048174][ T5663] usb 4-1: USB disconnect, device number 10 [ 246.073526][ T4960] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 246.116430][ T4960] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 246.131066][ T4960] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 246.168598][ T8181] loop4: detected capacity change from 0 to 40427 [ 246.233149][ T8181] F2FS-fs (loop4): invalid crc value [ 246.277746][ T8181] F2FS-fs (loop4): Found nat_bits in checkpoint [ 246.512692][ T8181] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 246.701466][ T8220] loop5: detected capacity change from 0 to 4096 [ 246.792356][ T4627] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 246.894589][ T8220] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 246.954974][ T8236] loop1: detected capacity change from 0 to 16 [ 247.001228][ T4627] usb 1-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 247.011632][ T4627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.035549][ T8236] erofs: (device loop1): mounted with root inode @ nid 36. [ 247.069425][ T4627] usb 1-1: Product: syz [ 247.090329][ T4627] usb 1-1: Manufacturer: syz [ 247.107302][ T8236] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 247.127592][ T4627] usb 1-1: SerialNumber: syz [ 247.202416][ T8236] syz.1.1474: attempt to access beyond end of device [ 247.202416][ T8236] loop1: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 247.294691][ T8236] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 247.382135][ T4627] usb 1-1: unable to issue vendor read request (ret = -71) [ 247.419822][ T4627] usb 1-1: unable to issue vendor read request (ret = -71) [ 247.427238][ T27] audit: type=1800 audit(1786709341.860:60): pid=8236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1474" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 247.456621][ T4627] usb 1-1: unable to issue vendor read request (ret = -71) [ 247.482552][ T4627] usb 1-1: unable to issue vendor read request (ret = -71) [ 247.573854][ T4627] usb 1-1: USB disconnect, device number 15 [ 247.865133][ T7655] udevd[7655]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.109685][ T8258] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1472'. [ 248.146365][ T49] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 248.148706][ T8258] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1472'. [ 248.155211][ T49] Bluetooth: hci3: Injecting HCI hardware error event [ 248.166108][ T4286] Bluetooth: hci3: hardware error 0x00 [ 248.223696][ T8258] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1472'. [ 248.232947][ T8258] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1472'. [ 248.511937][ T8271] loop5: detected capacity change from 0 to 1024 [ 248.605238][ T8271] hfsplus: bad catalog entry type [ 248.779506][ T47] hfsplus: b-tree write err: -5, ino 25 [ 248.820396][ T47] hfsplus: b-tree write err: -5, ino 4 [ 248.837417][ T47] hfsplus: b-tree write err: -5, ino 2 [ 249.136810][ T8287] loop1: detected capacity change from 0 to 1024 [ 249.218799][ T8293] loop3: detected capacity change from 0 to 128 [ 249.226602][ T8287] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 249.235520][ T8287] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.271781][ T8293] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 249.378508][ T8293] hpfs: filesystem error: improperly stopped [ 249.388603][ T8293] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 249.413380][ T8293] hpfs: You really don't want any checks? You are crazy... [ 249.434972][ T8293] hpfs: hpfs_map_sector(): read error [ 249.440418][ T8293] hpfs: code page support is disabled [ 249.464519][ T8266] loop4: detected capacity change from 0 to 32768 [ 249.484875][ T8293] hpfs: hpfs_map_4sectors(): unaligned read [ 249.498844][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 249.521833][ T8293] hpfs: hpfs_map_4sectors(): unaligned read [ 249.562514][ T8293] hpfs: filesystem error: unable to find root dir [ 249.580854][ T4331] JFS: metapage_get_blocks failed [ 249.606682][ T8266] JFS: metapage_get_blocks failed [ 249.611956][ T107] blkno = 50030, nblocks = 1 [ 249.617629][ T11] JFS: metapage_get_blocks failed [ 249.631547][ T107] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 249.631547][ T107] [ 249.695408][ T107] ERROR: (device loop4): remounting filesystem as read-only [ 249.739019][ T107] blkno = 5002c, nblocks = 4 [ 249.764701][ T107] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 249.764701][ T107] [ 249.845202][ T8299] loop1: detected capacity change from 0 to 128 [ 249.897479][ T4272] JFS: metapage_get_blocks failed [ 249.914715][ T4272] JFS: metapage_get_blocks failed [ 250.303051][ T4286] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 250.439404][ T8315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1503'. [ 250.459481][ T8316] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 250.522886][ T8316] CIFS: Attempting to mount \\127.0.0.1\share [ 250.542918][ T8316] CIFS: VFS: No username specified [ 251.065782][ T27] audit: type=1326 audit(1786709345.500:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.5.1513" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f622f99e0d9 code=0x0 [ 251.519714][ T8318] loop1: detected capacity change from 0 to 32768 [ 251.581804][ T8327] loop0: detected capacity change from 0 to 32768 [ 251.643495][ T8318] XFS (loop1): Mounting V5 Filesystem [ 251.678962][ T4299] JFS: metapage_get_blocks failed [ 251.700292][ T107] blkno = 50030, nblocks = 1 [ 251.705374][ T8327] JFS: metapage_get_blocks failed [ 251.710824][ T107] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 251.710824][ T107] [ 251.711546][ T47] JFS: metapage_get_blocks failed [ 251.742990][ T8318] XFS (loop1): Ending clean mount [ 251.760442][ T107] ERROR: (device loop0): remounting filesystem as read-only [ 251.776503][ T107] blkno = 5002c, nblocks = 4 [ 251.797047][ T107] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 251.797047][ T107] [ 251.801549][ T8318] XFS (loop1): Quotacheck needed: Please wait. [ 251.860156][ T107] ERROR: (device loop0): remounting filesystem as read-only [ 251.888557][ T107] BUG: Bad page state in process jfsCommit pfn:50b4d [ 251.951721][ T107] page:ffffea000142d340 refcount:0 mapcount:0 mapping:0000000000000000 index:0x50030 pfn:0x50b4d [ 252.005401][ T8318] XFS (loop1): Quotacheck: Done. [ 252.049902][ T107] flags: 0xfff00000002007(locked|referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 252.084497][ T107] raw: 00fff00000002007 dead000000000100 dead000000000122 0000000000000000 [ 252.121242][ T107] raw: 0000000000050030 ffff88807e5859b0 00000000ffffffff 0000000000000000 [ 252.149284][ T107] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 252.175960][ T107] page_owner tracks the page as allocated [ 252.183530][ T107] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 8327, tgid 8325 (syz.0.1509), ts 251676024782, free_ts 251660357632 [ 252.233471][ T107] post_alloc_hook+0x173/0x1a0 [ 252.247464][ T107] get_page_from_freelist+0x206b/0x2180 [ 252.271070][ T107] __alloc_pages+0x1ec/0x4f0 [ 252.298069][ T107] folio_alloc+0x1c/0x60 [ 252.312181][ T107] filemap_alloc_folio+0xdb/0x480 [ 252.317374][ T107] __filemap_get_folio+0x6ba/0xde0 [ 252.332126][ T107] pagecache_get_page+0x26/0x260 [ 252.337151][ T107] __get_metapage+0x2a7/0xfb0 [ 252.341879][ T107] dtSplitRoot+0x1dc/0x1520 [ 252.362059][ T107] dtInsert+0xe7f/0x57e0 [ 252.366386][ T107] jfs_mkdir+0x764/0xb00 [ 252.377151][ T107] vfs_mkdir+0x386/0x570 [ 252.381465][ T107] do_mkdirat+0x1d8/0x440 [ 252.396133][ T107] __x64_sys_mkdirat+0x85/0x90 [ 252.400958][ T107] do_syscall_64+0x4c/0xa0 [ 252.405733][ T107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.411652][ T107] page last free stack trace: [ 252.416420][ T107] free_unref_page_prepare+0x8e5/0x9e0 [ 252.421930][ T107] free_unref_page+0x2e/0x3f0 [ 252.426753][ T107] qlist_free_all+0x76/0xe0 [ 252.431311][ T107] kasan_quarantine_reduce+0x144/0x160 [ 252.436856][ T107] __kasan_slab_alloc+0x1e/0x80 [ 252.441762][ T107] slab_post_alloc_hook+0x4b/0x490 [ 252.446973][ T107] kmem_cache_alloc+0x18b/0x2f0 [ 252.451874][ T107] ptlock_alloc+0x1c/0x60 [ 252.457089][ T107] pte_alloc_one+0xc0/0x310 [ 252.461645][ T107] __pte_alloc+0x21/0x150 [ 252.467191][ T107] copy_page_range+0x322f/0x3a60 [ 252.473456][ T107] copy_mm+0xeb0/0x1680 [ 252.477673][ T107] copy_process+0x19a6/0x40c0 [ 252.482487][ T107] kernel_clone+0x24b/0x900 [ 252.487034][ T107] __x64_sys_clone+0x1a7/0x220 [ 252.491846][ T107] do_syscall_64+0x4c/0xa0 [ 252.503356][ T4278] XFS (loop1): Unmounting Filesystem [ 252.512705][ T107] Modules linked in: [ 252.516673][ T107] CPU: 1 PID: 107 Comm: jfsCommit Not tainted syzkaller #0 [ 252.523909][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.534104][ T107] Call Trace: [ 252.537426][ T107] [ 252.540469][ T107] dump_stack_lvl+0x188/0x24e [ 252.545205][ T107] ? show_regs_print_info+0x12/0x12 [ 252.550467][ T107] ? swiotlb_print_info+0x60/0x60 [ 252.555542][ T107] ? dump_page+0x9df/0x1290 [ 252.560122][ T107] bad_page+0x14b/0x170 [ 252.564316][ T107] free_unref_page_prepare+0x447/0x9e0 [ 252.569835][ T107] free_unref_page+0x2e/0x3f0 [ 252.574565][ T107] txUnlock+0x275/0xcb0 [ 252.578770][ T107] ? _raw_spin_lock_irqsave+0x100/0x100 [ 252.584411][ T107] ? lockdep_hardirqs_on+0x94/0x140 [ 252.589658][ T107] jfs_lazycommit+0x588/0xa90 [ 252.594385][ T107] ? txFreelock+0x5a0/0x5a0 [ 252.598951][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 252.604923][ T107] ? do_task_dead+0xd0/0xd0 [ 252.609506][ T107] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 252.615445][ T107] ? __kthread_parkme+0x71/0x1c0 [ 252.620454][ T107] ? __kthread_parkme+0x15b/0x1c0 [ 252.625538][ T107] kthread+0x29d/0x330 [ 252.629657][ T107] ? txFreelock+0x5a0/0x5a0 [ 252.634214][ T107] ? kthread_blkcg+0xd0/0xd0 [ 252.638861][ T107] ret_from_fork+0x1f/0x30 [ 252.643316][ T107] [ 252.661338][ T107] Disabling lock debugging due to kernel taint [ 252.667777][ T107] page:ffffea000142d340 refcount:0 mapcount:0 mapping:0000000000000000 index:0x50030 pfn:0x50b4d [ 252.678975][ T107] flags: 0xfff00000002007(locked|referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 252.693408][ T107] raw: 00fff00000002007 dead000000000100 dead000000000122 0000000000000000 [ 252.702077][ T107] raw: 0000000000050030 ffff88807e5859b0 00000000ffffffff 0000000000000000 [ 252.716953][ T107] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 252.727392][ T107] page_owner tracks the page as allocated [ 252.733708][ T107] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 8327, tgid 8325 (syz.0.1509), ts 251676024782, free_ts 251660357632 [ 252.751960][ T107] post_alloc_hook+0x173/0x1a0 [ 252.757836][ T107] get_page_from_freelist+0x206b/0x2180 [ 252.764115][ T107] __alloc_pages+0x1ec/0x4f0 [ 252.768843][ T107] folio_alloc+0x1c/0x60 [ 252.773274][ T107] filemap_alloc_folio+0xdb/0x480 [ 252.778359][ T107] __filemap_get_folio+0x6ba/0xde0 [ 252.785947][ T107] pagecache_get_page+0x26/0x260 [ 252.790911][ T107] __get_metapage+0x2a7/0xfb0 [ 252.796224][ T107] dtSplitRoot+0x1dc/0x1520 [ 252.800771][ T107] dtInsert+0xe7f/0x57e0 [ 252.805092][ T107] jfs_mkdir+0x764/0xb00 [ 252.809470][ T107] vfs_mkdir+0x386/0x570 [ 252.813777][ T107] do_mkdirat+0x1d8/0x440 [ 252.818216][ T107] __x64_sys_mkdirat+0x85/0x90 [ 252.823043][ T107] do_syscall_64+0x4c/0xa0 [ 252.827547][ T107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.833508][ T107] page last free stack trace: [ 252.838274][ T107] free_unref_page_prepare+0x8e5/0x9e0 [ 252.843835][ T107] free_unref_page+0x2e/0x3f0 [ 252.848604][ T107] qlist_free_all+0x76/0xe0 [ 252.853262][ T107] kasan_quarantine_reduce+0x144/0x160 [ 252.858757][ T107] __kasan_slab_alloc+0x1e/0x80 [ 252.863677][ T107] slab_post_alloc_hook+0x4b/0x490 [ 252.868922][ T107] kmem_cache_alloc+0x18b/0x2f0 [ 252.873968][ T107] ptlock_alloc+0x1c/0x60 [ 252.878412][ T107] pte_alloc_one+0xc0/0x310 [ 252.883295][ T107] __pte_alloc+0x21/0x150 [ 252.887690][ T107] copy_page_range+0x322f/0x3a60 [ 252.892715][ T107] copy_mm+0xeb0/0x1680 [ 252.896966][ T107] copy_process+0x19a6/0x40c0 [ 252.901660][ T107] kernel_clone+0x24b/0x900 [ 252.906248][ T107] __x64_sys_clone+0x1a7/0x220 [ 252.911147][ T107] do_syscall_64+0x4c/0xa0 [ 252.919848][ T107] ------------[ cut here ]------------ [ 252.925564][ T107] kernel BUG at include/linux/mm.h:1146! [ 252.931459][ T107] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 252.937571][ T107] CPU: 1 PID: 107 Comm: jfsCommit Tainted: G B syzkaller #0 [ 252.946279][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.956372][ T107] RIP: 0010:put_metapage+0x244/0x330 [ 252.961677][ T107] Code: 38 c1 0f 8c 31 ff ff ff 4c 89 ef e8 86 c8 e0 fe e9 24 ff ff ff e8 cc 9b 8f fe 48 8b 3c 24 48 c7 c6 40 1a c6 8a e8 fc be ca fe <0f> 0b 48 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 89 9f 8f fe 48 89 2c [ 252.981317][ T107] RSP: 0018:ffffc900026b7cf0 EFLAGS: 00010246 [ 252.987413][ T107] RAX: 6c8865202f557800 RBX: ffff88807e5859b0 RCX: 6c8865202f557800 [ 252.995414][ T107] RDX: 0000000000000000 RSI: ffffffff8adf5dc0 RDI: ffffffff8adf5d80 [ 253.003407][ T107] RBP: 000000000000007f R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 253.011407][ T107] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: ffff88807e5859d8 [ 253.019488][ T107] R13: ffffea000142d374 R14: 1ffff1100fcb0b3b R15: 1ffff1100fcb0b48 [ 253.027498][ T107] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 253.036447][ T107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.043054][ T107] CR2: 00005650f6663660 CR3: 000000007e59c000 CR4: 00000000003506e0 [ 253.051139][ T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 253.059136][ T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 253.067142][ T107] Call Trace: [ 253.070453][ T107] [ 253.073413][ T107] txUnlock+0x426/0xcb0 [ 253.077608][ T107] jfs_lazycommit+0x588/0xa90 [ 253.082316][ T107] ? txFreelock+0x5a0/0x5a0 [ 253.086852][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 253.092782][ T107] ? do_task_dead+0xd0/0xd0 [ 253.097327][ T107] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 253.103246][ T107] ? __kthread_parkme+0x71/0x1c0 [ 253.108234][ T107] ? __kthread_parkme+0x15b/0x1c0 [ 253.113297][ T107] kthread+0x29d/0x330 [ 253.117392][ T107] ? txFreelock+0x5a0/0x5a0 [ 253.121920][ T107] ? kthread_blkcg+0xd0/0xd0 [ 253.126536][ T107] ret_from_fork+0x1f/0x30 [ 253.130988][ T107] [ 253.134040][ T107] Modules linked in: [ 253.154886][ T107] ---[ end trace 0000000000000000 ]--- [ 253.169258][ T107] RIP: 0010:put_metapage+0x244/0x330 [ 253.176867][ T107] Code: 38 c1 0f 8c 31 ff ff ff 4c 89 ef e8 86 c8 e0 fe e9 24 ff ff ff e8 cc 9b 8f fe 48 8b 3c 24 48 c7 c6 40 1a c6 8a e8 fc be ca fe <0f> 0b 48 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 89 9f 8f fe 48 89 2c [ 253.197399][ T107] RSP: 0018:ffffc900026b7cf0 EFLAGS: 00010246 [ 253.203623][ T107] RAX: 6c8865202f557800 RBX: ffff88807e5859b0 RCX: 6c8865202f557800 [ 253.211694][ T107] RDX: 0000000000000000 RSI: ffffffff8adf5dc0 RDI: ffffffff8adf5d80 [ 253.219817][ T107] RBP: 000000000000007f R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 253.227906][ T107] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: ffff88807e5859d8 [ 253.236022][ T107] R13: ffffea000142d374 R14: 1ffff1100fcb0b3b R15: 1ffff1100fcb0b48 [ 253.244291][ T107] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 253.253367][ T107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.260035][ T107] CR2: 00007ffc51bbff30 CR3: 0000000073b33000 CR4: 00000000003506e0 [ 253.268627][ T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 253.279842][ T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 253.287966][ T107] Kernel panic - not syncing: Fatal exception [ 253.294632][ T107] Kernel Offset: disabled [ 253.298972][ T107] Rebooting in 86400 seconds..