last executing test programs: 1m15.706240904s ago: executing program 4 (id=533): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={&(0x7f00000001c0)=[r2], 0x1, r1, 0x0, 0x3, 0x7, 0x2, 0x0, {0x0, 0x7, 0xf7, 0x40, 0x7, 0xfd, 0x80, 0x200, 0x9, 0x3, 0x4, 0x8, 0xb880000, 0x8e, "4033a51083b8aa778affffffff64a535f51e8c8434d084d3b5ed601cf62fd83e"}}) 1m15.542950452s ago: executing program 4 (id=534): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x80007) 1m15.412835578s ago: executing program 4 (id=535): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x20006, 0x1}) fcntl$lock(r0, 0x5, &(0x7f0000000400)={0x1, 0x0, 0x1, 0x1000d69}) 1m15.287836813s ago: executing program 4 (id=537): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000700)='./file2\x00', 0x100004e, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x53e, &(0x7f00000001c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000000)='./file0\x00') lstat(&(0x7f0000005a00)='./file2\x00', 0x0) 1m14.796872344s ago: executing program 4 (id=540): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x7}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24001090}, 0x80d4) 1m13.9566842s ago: executing program 4 (id=548): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r0, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}, 0x81000000}], 0x1, 0x1a123, 0x0) sendmsg$802154_dgram(r0, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x300, 0x0) 1m13.813651806s ago: executing program 32 (id=548): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r0, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}, 0x81000000}], 0x1, 0x1a123, 0x0) sendmsg$802154_dgram(r0, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x300, 0x0) 3.703163524s ago: executing program 1 (id=1118): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$eJzs3M1vFOUfAPDv7G7hx2v3h/gCoqJoJL60tKBy8KKJiQdNTPSAx1oKQRZqaE2ENLYYghcTJeFuTLyY+Bd48kTUk4lXvBsSYriAelkz3dllu91tt91tt3U/n2To83Sf3ef7nZln55kZpgH0rYPpP0nEzoi4GRGDEZGrb7CtsqTt7t2ZGf/rzsx4EuXyu38m6dvi7p2Z8WrTJPu5o1IppB+Uu5JEsUm/UxcvnR0rlSYuZPXh6XMfDU9dvPTimXNjpydOT5wfPX782NGRV14efakreaYx3d3/6eSBfW++f+3t8RPXPvj5+0q85fL1G0cW5NEdAxExU1snjZ7pbmc9t6uunBR6GAgrsjUiCtneejMGI39ld+21wXjjs54GB6ypcrlcHm398lwZ+A9LotcRAL1RPdCn57/VpX4C8M/aTj967vZrlROgNO972VJ5pRCXszYDDee33XQwIk7M/f11ukTD9RQAgLXwYzr/eaHJ/K8Y8VBdu93ZvaFiRPw/IvZExAMRsTciHoxK24cj4pEV9n+wob54/pO7tbrM2pPO/17N7m0tnP/V7oIV81lt13z+A8mpM6WJI9k6ORwDW9P6SNNPTyLm0p+/fdmq//r5X7qk/VfnglkctwpbF77n5Nj0WMeJZ25fjthfaJZ/EoX7WcS+iNi/yj7OPPfdgYW/yddKy+e/hC7cZyp/E/FsZfvPRUP+VcnS9yeH/xeliSPD1b1isV9+vfpOq/47yr8L0u2/ven+X8u/mNTfr51a9BFbluvj6u+ftzynWe3+vyV5b0Hnn4xNT18YidiSvLX493UXuKv1avs0/8OHmo//PXF/TTwaEelO/FhEPB4RT2SxPxkRT0XEoSXy/+n1pz9cff5rK81/dkXbf+WF/NkbP7Tqv73tf6xamQ+qne+/dgPsZN0BAADAZpGLiJ2R5IZq5VxuaKjy/+X3xvZcaXJq+vlTkx+fP1l5RqAYA7nqla7BuuuhI9m14Wp9NKvPZvWj2XXj6/lt8/Wh8cnSyV4nD31uR4vxn/oj3+vogDXneS3oX8Y/9K/Vj3/fHLDZLTOKc+sVB7D+HMWhfzUb/7M9iANYf47/0L9q4/+rNhrXPe7V+PAmsPk4/kP/Mv6hL3XyXP+GKMS3EUu3STZKqCsqfNHJ2wvrEGHkNsaKWsfCaD6ih2EU2v2rFnGxPNtxp73+ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiOfwMAAP//Oyno9g==") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f000001f940)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) renameat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.478312163s ago: executing program 1 (id=1121): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f00000003c0)={[{@gid}, {@barrier}, {@nls={'nls', 0x3d, 'iso8859-15'}}, {@gid}, {@type={'type', 0x3d, "e481e91c"}}, {@barrier}, {@creator={'creator', 0x3d, "317e9a3a"}}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000000680)="$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") syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x22004d0, &(0x7f00000001c0)={[{@codepage={'codepage', 0x3d, 'cp737'}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}]}, 0x4, 0x335, &(0x7f0000000880)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x163100, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 3.264779132s ago: executing program 1 (id=1123): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000200)={0x0, 0xd, 0x2, '*z'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.054672921s ago: executing program 0 (id=1126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={0x5c, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7fff}, @device_b, @device_a, @from_mac=@device_b, {0x1}, @value=@ver_80211n={0x0, 0x4, 0x1, 0x0, 0x0, 0x3, 0x1}}, 0x120000000000000, @random, 0x880, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @val={0x4, 0x6, {0xcb, 0x1, 0x5, 0x5}}, @val={0x6, 0x2, 0x1}, @void, @void, @void}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.872915959s ago: executing program 3 (id=1128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) 2.872630199s ago: executing program 0 (id=1129): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000000}) 2.807154351s ago: executing program 3 (id=1131): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000077cb0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.665039608s ago: executing program 0 (id=1132): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close(0x3) 2.664721277s ago: executing program 3 (id=1133): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f00000000c0), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) write$binfmt_elf32(r0, &(0x7f000001a240)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x2, 0x2, 0x8d, 0x4, 0x3, 0x6, 0x4, 0x19, 0x38, 0x25e, 0x8, 0x3, 0x20, 0x1, 0x5, 0x3ff, 0x600}, [{0x6474e551, 0x6, 0x4, 0x10, 0x5, 0x8000, 0x2, 0x9}]}, 0x58) close(r0) 2.612051219s ago: executing program 0 (id=1135): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, 'port1\x00', 0x46, 0x0, 0x10000000, 0x3, 0x1ff, 0x4, 0x80008001}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x4, 0xe1d9, 0x1101, 0x101}) close(r0) 2.521443923s ago: executing program 0 (id=1136): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808004, &(0x7f0000000c00)=ANY=[], 0x5, 0x5593, &(0x7f000000b780)="$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") mknod$loop(0x0, 0x0, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x80000000, 0x4) 1.478371407s ago: executing program 5 (id=1147): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 1.440435599s ago: executing program 3 (id=1148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005100)={&(0x7f0000000740)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x800}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008004}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 1.160996281s ago: executing program 0 (id=1149): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r0, &(0x7f0000000140)="02", 0x1, 0x8000c61) truncate(&(0x7f0000000900)='./file1\x00', 0x300008c) 1.117795633s ago: executing program 5 (id=1151): unshare(0x62020600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, {0x2, 0x0, @empty}, 0x2a0}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x8}, {0x2, 0x3ffd, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd72d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0xffff}) 1.115687573s ago: executing program 2 (id=1152): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0xa, 0x0, 0x1, [{0x8, 0x18, 0x0, 0x0, 0x1}]}}]}]}, 0x34}}, 0x0) 1.036273686s ago: executing program 3 (id=1153): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001ec0), 0x800, 0x0) poll(&(0x7f0000001f80)=[{r1, 0x18100}, {r0, 0x8002}], 0x2, 0x7fffffff) write$P9_RSYMLINK(r0, &(0x7f00000000c0)={0x14, 0x11, 0x1, {0xa1, 0x1}}, 0x14) 1.035301316s ago: executing program 1 (id=1154): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x125d, 0x0) 1.015103507s ago: executing program 2 (id=1155): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048c5) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x80000000) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x10000000) 914.925531ms ago: executing program 1 (id=1156): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x28, r2, 0x1, 0x70bd2b, 0x25dedbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x48011}, 0x800) 849.168034ms ago: executing program 2 (id=1157): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 833.118474ms ago: executing program 1 (id=1158): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000006140)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000002600)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000003100)=""/4080, 0xff0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002d80)=""/136, 0x88}], 0x1}}], 0x3, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 748.874418ms ago: executing program 3 (id=1159): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000400, &(0x7f00000004c0)=ANY=[], 0x6, 0x237, &(0x7f0000000fc0)="$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") r0 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) bpf$MAP_CREATE(0x0, 0x0, 0x48) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 610.974764ms ago: executing program 2 (id=1160): r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x20000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000000)) 373.951614ms ago: executing program 2 (id=1161): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) readv(r0, &(0x7f0000000a00)=[{&(0x7f00000001c0)=""/59, 0x3b}], 0x1) 320.601256ms ago: executing program 5 (id=1162): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000001c0)={0x400009, 0xffffffff, 0x3, 0x400e0a, 0x1, "223c5e0000008270a46b52ffdfff61ebfffff2", 0x80000000, 0x102}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x26) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) 201.121281ms ago: executing program 5 (id=1163): r0 = socket(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x70bd2e, 0x25dfdbfe, {0x2, 0x0, 0x0, r2, 0x40, 0x10, 0x2}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x3c}}, 0x20024090) 200.594651ms ago: executing program 2 (id=1164): r0 = syz_usb_connect$midi(0x2, 0x24, &(0x7f0000001400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x5, 0x0, 0x10, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x3}}}}}]}}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000018c0)={0x2c, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000002240)={0x14, 0x0, &(0x7f0000002200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000066c0)={0x24, 0x0, &(0x7f00000065c0)={0x0, 0x3, 0x14, @string={0x14, 0x3, "acf552ab845e98c2eaf0ce550ff8cc7d3700"}}, 0x0, 0x0}, 0x0) 73.235207ms ago: executing program 5 (id=1165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000) 0s ago: executing program 5 (id=1166): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x41) r1 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r1, 0x402, 0x0) kernel console output (not intermixed with test programs): : 100 bytes leftover after parsing attributes in process `syz.2.372'. [ 111.548150][ T5285] netlink: 44 bytes leftover after parsing attributes in process `syz.0.374'. [ 111.567519][ T5284] tipc: Started in network mode [ 111.581380][ T4229] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 111.604881][ T5284] tipc: Node identity ac14140f, cluster identity 4711 [ 111.679441][ T5284] tipc: New replicast peer: 255.255.255.255 [ 111.727096][ T5284] tipc: Enabled bearer , priority 10 [ 111.987219][ T4229] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.011357][ T4229] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.046635][ T5298] set_capacity_and_notify: 4 callbacks suppressed [ 112.046651][ T5298] loop2: detected capacity change from 0 to 1024 [ 112.117987][ T5302] loop1: detected capacity change from 0 to 1024 [ 112.125279][ T4229] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 112.145217][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 112.175720][ T4229] usb 4-1: SerialNumber: syz [ 112.200570][ T5298] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 2: comm syz.2.380: lblock 2 mapped to illegal pblock 2 (length 1) [ 112.335085][ T5298] EXT4-fs (loop2): Remounting filesystem read-only [ 112.391406][ T5298] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 112.411398][ T5298] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 48: comm syz.2.380: lblock 0 mapped to illegal pblock 48 (length 1) [ 112.445101][ T5295] loop4: detected capacity change from 0 to 32768 [ 112.474291][ T4229] usb 4-1: 0:2 : does not exist [ 112.504172][ T5298] EXT4-fs (loop2): Remounting filesystem read-only [ 112.541590][ T4229] usb 4-1: USB disconnect, device number 5 [ 112.549496][ T5298] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 112.569313][ T5298] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.380: Failed to acquire dquot type 0 [ 112.604366][ T5298] EXT4-fs (loop2): Remounting filesystem read-only [ 112.622098][ T5298] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 112.675134][ T5298] EXT4-fs (loop2): Remounting filesystem read-only [ 112.682170][ T5298] EXT4-fs error (device loop2): ext4_evict_inode:284: inode #11: comm syz.2.380: mark_inode_dirty error [ 112.692618][ T5295] XFS (loop4): Mounting V5 Filesystem [ 112.713056][ T5298] EXT4-fs (loop2): Remounting filesystem read-only [ 112.772742][ T4566] tipc: Node number set to 2886997007 [ 112.781574][ T5298] EXT4-fs warning (device loop2): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 112.842376][ T5295] XFS (loop4): Ending clean mount [ 112.860406][ T5298] EXT4-fs (loop2): 1 orphan inode deleted [ 112.898849][ T154] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 112.926459][ T5298] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,nojournal_checksum,errors=remount-ro,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,. Quota mode: none. [ 112.952702][ T4270] udevd[4270]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.021552][ T154] EXT4-fs (loop2): Remounting filesystem read-only [ 113.028131][ T154] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 113.061052][ T5334] loop0: detected capacity change from 0 to 128 [ 113.089647][ T154] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:2: Failed to release dquot type 0 [ 113.173519][ T154] EXT4-fs (loop2): Remounting filesystem read-only [ 113.185019][ T5334] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 113.220598][ T4197] XFS (loop4): Unmounting Filesystem [ 113.234389][ T5334] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.390179][ T4195] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 113.453833][ T4195] EXT4-fs (loop2): Remounting filesystem read-only [ 113.467227][ T4195] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 113.519693][ T4195] EXT4-fs (loop2): Remounting filesystem read-only [ 113.531499][ T4195] EXT4-fs error (device loop2): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 113.587117][ T4195] EXT4-fs (loop2): Remounting filesystem read-only [ 114.163380][ T5361] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 114.199951][ T5361] xt_hashlimit: max too large, truncated to 1048576 [ 114.221576][ T5361] xt_hashlimit: Unknown mode mask E0, kernel too old? [ 114.315268][ T5349] loop1: detected capacity change from 0 to 40427 [ 114.417638][ T5349] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 114.439521][ T5349] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 114.487206][ T5349] F2FS-fs (loop1): invalid crc value [ 114.528849][ T5349] F2FS-fs (loop1): Found nat_bits in checkpoint [ 114.707925][ T5349] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 114.725577][ T5349] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 114.899575][ T144] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 114.918943][ T144] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 114.945858][ T5384] loop3: detected capacity change from 0 to 2048 [ 115.022617][ T144] attempt to access beyond end of device [ 115.022617][ T144] loop1: rw=1, want=45112, limit=40427 [ 115.038062][ T5388] loop0: detected capacity change from 0 to 64 [ 115.088761][ T5384] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.539211][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 115.558613][ T5394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.419'. [ 115.594349][ T5369] loop4: detected capacity change from 0 to 40427 [ 115.629120][ T5374] loop2: detected capacity change from 0 to 32768 [ 115.659939][ T5369] F2FS-fs (loop4): invalid crc value [ 115.782509][ T5369] F2FS-fs (loop4): Found nat_bits in checkpoint [ 115.832212][ T5411] net_ratelimit: 110 callbacks suppressed [ 115.832227][ T5411] IPVS: fo: FWM 3 0x00000003 - no destination available [ 115.899191][ T5369] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 115.906258][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 115.974223][ T5369] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 116.019867][ T5374] XFS (loop2): Mounting V5 Filesystem [ 116.049532][ T5402] loop3: detected capacity change from 0 to 8192 [ 116.051845][ T13] Bluetooth: hci4: command 0x0407 tx timeout [ 116.154565][ T5402] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 116.189167][ T5402] REISERFS (device loop3): using ordered data mode [ 116.212988][ T5374] XFS (loop2): Ending clean mount [ 116.221167][ T5402] reiserfs: using flush barriers [ 116.238536][ T5402] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.267324][ T5374] XFS (loop2): Quotacheck needed: Please wait. [ 116.281430][ T4229] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.320317][ T5402] REISERFS (device loop3): checking transaction log (loop3) [ 116.374289][ T5374] XFS (loop2): Quotacheck: Done. [ 116.442548][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.541382][ T4229] usb 1-1: Using ep0 maxpacket: 32 [ 116.585253][ T5402] REISERFS (device loop3): Using tea hash to sort names [ 116.599799][ T5402] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 116.621890][ T4195] XFS (loop2): Unmounting Filesystem [ 116.671627][ T4229] usb 1-1: config 0 has too many interfaces: 193, using maximum allowed: 32 [ 116.680669][ T4229] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 193 [ 116.740226][ T4229] usb 1-1: config 0 has no interface number 0 [ 116.764654][ T4229] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.810238][ T4229] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 116.835675][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.862245][ T4229] usb 1-1: config 0 descriptor?? [ 116.961870][ T13] usb 2-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 116.977084][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.985538][ T13] usb 2-1: Product: syz [ 116.989740][ T13] usb 2-1: Manufacturer: syz [ 117.027338][ T13] usb 2-1: SerialNumber: syz [ 117.068947][ T13] usb 2-1: config 0 descriptor?? [ 117.133458][ T13] sierra 2-1:0.0: Sierra USB modem converter detected [ 117.223960][ T5433] loop4: detected capacity change from 0 to 32768 [ 117.257479][ T5433] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.431 (5433) [ 117.298591][ T5439] binder: 5438:5439 ioctl 400c620e 200000000340 returned -22 [ 117.318451][ T5433] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 117.343907][ T4229] corsair 0003:1B1C:1B34.0002: unknown main item tag 0x0 [ 117.352616][ T13] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 117.372224][ T5433] BTRFS info (device loop4): using free space tree [ 117.389032][ T13] usb 2-1: USB disconnect, device number 2 [ 117.395153][ T5433] BTRFS info (device loop4): has skinny extents [ 117.404180][ T4229] corsair 0003:1B1C:1B34.0002: unknown main item tag 0x0 [ 117.432749][ T13] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 117.458263][ T4229] corsair 0003:1B1C:1B34.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.0-1/input1 [ 117.469870][ T13] sierra 2-1:0.0: device disconnected [ 117.535674][ T4566] usb 1-1: USB disconnect, device number 2 [ 117.548971][ T5449] device ip6gre1 entered promiscuous mode [ 117.605813][ T5453] fido_id[5453]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 117.656670][ T5463] tmpfs: Bad value for 'uid' [ 117.749746][ T5433] BTRFS info (device loop4): enabling ssd optimizations [ 117.906533][ T5473] loop1: detected capacity change from 0 to 1764 [ 117.972114][ T5473] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 118.199160][ T5477] netlink: 72 bytes leftover after parsing attributes in process `syz.0.443'. [ 118.437641][ T5486] loop1: detected capacity change from 0 to 512 [ 118.574800][ T26] audit: type=1326 audit(1778577404.818:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5469 comm="syz.2.438" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0737eb9dd9 code=0x7fc00000 [ 118.939072][ T5494] loop4: detected capacity change from 0 to 8192 [ 118.972759][ T5504] loop0: detected capacity change from 0 to 1024 [ 119.012032][ T5483] loop3: detected capacity change from 0 to 32768 [ 119.029570][ T5494] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 119.045294][ T5494] REISERFS (device loop4): using ordered data mode [ 119.054257][ T5494] reiserfs: using flush barriers [ 119.060492][ T5494] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 119.077298][ T5494] REISERFS (device loop4): checking transaction log (loop4) [ 119.121447][ T4229] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 119.156080][ T26] audit: type=1800 audit(1778577405.398:21): pid=5483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.445" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 119.243275][ T5494] REISERFS (device loop4): Using tea hash to sort names [ 119.266942][ T5494] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 119.272619][ T5507] hfsplus: request for non-existent node 262144 in B*Tree [ 119.315334][ T5507] hfsplus: request for non-existent node 262144 in B*Tree [ 119.391663][ T4229] usb 2-1: Using ep0 maxpacket: 32 [ 119.406801][ T5504] hfsplus: request for non-existent node 262144 in B*Tree [ 119.483466][ T5504] hfsplus: request for non-existent node 262144 in B*Tree [ 119.591540][ T4229] usb 2-1: unable to get BOS descriptor or descriptor too short [ 119.691548][ T4229] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 119.714502][ T4229] usb 2-1: config 7 has no interface number 0 [ 119.720675][ T4229] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 119.773987][ T4229] usb 2-1: config 7 interface 187 has no altsetting 0 [ 119.878196][ T5524] ALSA: mixer_oss: invalid OSS volume '' [ 119.941771][ T4229] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 119.969488][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.006991][ T4229] usb 2-1: Product: syz [ 120.015048][ T4229] usb 2-1: Manufacturer: syz [ 120.019938][ T4229] usb 2-1: SerialNumber: syz [ 120.138643][ T5533] loop0: detected capacity change from 0 to 1024 [ 120.194885][ T4236] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 120.285947][ T5533] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.305497][ T4229] usb 2-1: Unknown endpoint type found, address 0x07 [ 120.335517][ T4229] usb 2-1: Unknown endpoint type found, address 0x03 [ 120.356471][ T4229] usb 2-1: Not enough endpoints found in device, aborting! [ 120.382012][ T5533] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 120.410687][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.442856][ T26] audit: type=1800 audit(1778577406.688:22): pid=5533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.467" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 120.517708][ T1326] usb 2-1: USB disconnect, device number 3 [ 120.634611][ T5537] loop4: detected capacity change from 0 to 32768 [ 120.791606][ T4236] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 120.821044][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.841723][ T4236] usb 4-1: Product: syz [ 120.852114][ T4236] usb 4-1: Manufacturer: syz [ 120.861602][ T4236] usb 4-1: SerialNumber: syz [ 120.889963][ T4236] usb 4-1: config 0 descriptor?? [ 121.316704][ T5558] loop0: detected capacity change from 0 to 2048 [ 121.384423][ T5558] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 121.391640][ T4236] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.426527][ T5558] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 121.479843][ T5558] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.477: bg 0: block 234: padding at end of block bitmap is not set [ 121.557187][ T5558] EXT4-fs (loop0): Remounting filesystem read-only [ 121.651377][ T5562] loop2: detected capacity change from 0 to 32768 [ 121.729343][ T5562] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.743460][ T5562] lbmIODone: I/O error in JFS log [ 121.750294][ T5562] *** Log Format Error ! *** [ 121.756826][ T5562] lmLogInit: exit(-22) [ 121.761019][ T5562] lmLogOpen: exit(-22) [ 121.775563][ T5562] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.796058][ T5562] lbmIODone: I/O error in JFS log [ 121.803792][ T5562] *** Log Format Error ! *** [ 121.808823][ T5562] lmLogInit: exit(-22) [ 121.813918][ T4236] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 121.829572][ T4236] usb 5-1: config 0 has no interface number 0 [ 121.836821][ T5562] lmLogOpen: exit(-22) [ 121.841219][ T4236] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.874813][ T13] kernel read not supported for file /dsp1 (pid: 13 comm: kworker/0:1) [ 122.081681][ T4236] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 122.102240][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.110621][ T4236] usb 5-1: Product: syz [ 122.115486][ T4236] usb 5-1: Manufacturer: syz [ 122.120583][ T4236] usb 5-1: SerialNumber: syz [ 122.138579][ T4236] usb 5-1: config 0 descriptor?? [ 122.204558][ T4236] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 122.221566][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.308072][ T5584] CUSE: unknown device info "" [ 122.317432][ T5584] CUSE: unknown device info "" [ 122.323951][ T5584] CUSE: unknown device info "@" [ 122.328928][ T5584] CUSE: zero length info key specified [ 122.390502][ T4234] usb 5-1: USB disconnect, device number 4 [ 122.413132][ T4234] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 122.466366][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 122.591647][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.603151][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.616602][ T13] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 122.625879][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.647718][ T13] usb 1-1: config 0 descriptor?? [ 122.887372][ T4568] usb 4-1: USB disconnect, device number 6 [ 123.020431][ T5596] loop1: detected capacity change from 0 to 40427 [ 123.045298][ T5596] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 123.076769][ T5596] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 123.097663][ T5603] loop3: detected capacity change from 0 to 512 [ 123.117424][ T5596] F2FS-fs (loop1): invalid crc value [ 123.134459][ T13] uclogic 0003:28BD:0071.0003: interface is invalid, ignoring [ 123.149762][ T5603] EXT4-fs (loop3): Ignoring removed orlov option [ 123.191501][ T5603] EXT4-fs (loop3): Test dummy encryption mode enabled [ 123.201905][ T5603] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.223454][ T5596] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.311054][ T5603] EXT4-fs (loop3): 1 truncate cleaned up [ 123.333973][ T5603] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,data_err=ignore,nogrpid,,errors=continue. Quota mode: writeback. [ 123.335969][ T5596] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 123.354829][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.371695][ T4568] usb 1-1: USB disconnect, device number 3 [ 123.381614][ T5596] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 123.440237][ T26] audit: type=1800 audit(1778577409.678:23): pid=5603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.494" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 123.462314][ T5596] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 123.462394][ T5596] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 123.470612][ T5596] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 123.487191][ T5596] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 123.507691][ T5596] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 123.515703][ T5596] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 123.551482][ T5596] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 123.656570][ T5621] loop4: detected capacity change from 0 to 256 [ 123.714029][ T4236] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 123.729021][ T5621] exfat: Deprecated parameter 'utf8' [ 123.775429][ T5621] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe1018169, utbl_chksum : 0xe619d30d) [ 123.971712][ T4236] usb 3-1: Using ep0 maxpacket: 16 [ 124.108120][ T4236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.119977][ T4236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.155309][ T4236] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.189087][ T4236] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 124.224565][ T4236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.258633][ T4236] usb 3-1: config 0 descriptor?? [ 124.268316][ T5636] loop3: detected capacity change from 0 to 256 [ 124.392888][ T5636] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 124.682012][ T5626] loop0: detected capacity change from 0 to 40427 [ 124.749377][ T4236] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 124.771047][ T5626] F2FS-fs (loop0): invalid crc value [ 124.796873][ T4236] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0004/input/input9 [ 124.879559][ T5626] F2FS-fs (loop0): Found nat_bits in checkpoint [ 124.897416][ T4236] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 124.945240][ T4236] usb 3-1: USB disconnect, device number 4 [ 125.109364][ T5659] fido_id[5659]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 125.124893][ T5661] netlink: 24 bytes leftover after parsing attributes in process `syz.4.514'. [ 125.134464][ T5626] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 125.299064][ T4189] attempt to access beyond end of device [ 125.299064][ T4189] loop0: rw=2049, want=45104, limit=40427 [ 125.506101][ T5667] loop4: detected capacity change from 0 to 8192 [ 125.611309][ T5667] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 125.620621][ T5667] REISERFS (device loop4): using ordered data mode [ 125.663384][ T5667] reiserfs: using flush barriers [ 125.684992][ T5667] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 125.704092][ T5667] REISERFS (device loop4): checking transaction log (loop4) [ 125.831383][ T4470] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.997521][ T5667] REISERFS (device loop4): Using r5 hash to sort names [ 126.006819][ T5667] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 126.101498][ T4470] usb 2-1: Using ep0 maxpacket: 32 [ 126.196685][ T4234] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.221605][ T4470] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.239342][ T4470] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.278890][ T5692] netlink: 256 bytes leftover after parsing attributes in process `syz.3.529'. [ 126.326918][ T5694] loop0: detected capacity change from 0 to 1024 [ 126.348985][ T5694] EXT4-fs (loop0): Ignoring removed orlov option [ 126.382234][ T5694] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 126.414971][ T5696] loop3: detected capacity change from 0 to 512 [ 126.434502][ T5698] loop4: detected capacity change from 0 to 512 [ 126.441612][ T4470] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 126.456501][ T5694] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 126.479815][ T4470] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 126.489893][ T4470] usb 2-1: Product: syz [ 126.494437][ T4470] usb 2-1: Manufacturer: syz [ 126.499072][ T4470] usb 2-1: SerialNumber: syz [ 126.527831][ T5696] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 126.597416][ T4470] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input10 [ 126.639119][ T5696] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 126.711997][ T5696] Quota error (device loop3): write_blk: dquota write failed [ 126.719616][ T5696] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 126.729543][ T5696] Quota error (device loop3): write_blk: dquota write failed [ 126.771657][ T4234] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 126.790027][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.819437][ T5696] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 126.849458][ T5696] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.531: Failed to acquire dquot type 1 [ 126.872738][ T4234] usb 3-1: Product: syz [ 126.891513][ T4234] usb 3-1: Manufacturer: syz [ 126.909703][ T4234] usb 3-1: SerialNumber: syz [ 126.922764][ T5696] EXT4-fs (loop3): 1 truncate cleaned up [ 126.945536][ T4234] usb 3-1: config 0 descriptor?? [ 126.965921][ T5696] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,noblock_validity,inode_readahead_blks=0x0000000000010000,resgid=0x0000000000000000,norecovery,quota,auto_da_alloc,auto_da_alloc=0x0000000000000001,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 126.993445][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.004243][ T4234] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 005 [ 127.030524][ T13] usb 2-1: USB disconnect, device number 4 [ 127.114645][ T5696] EXT4-fs (loop3): Ignoring removed bh option [ 127.169738][ T5709] loop0: detected capacity change from 0 to 512 [ 127.189124][ T13] appletouch 2-1:1.0: input: appletouch disconnected [ 127.282232][ T5709] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nodiscard,grpjquota=,,errors=continue. Quota mode: none. [ 127.454187][ T5714] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 127.486338][ T5714] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 127.494967][ T5714] System zones: 0-1, 15-15, 18-18, 34-34 [ 127.502188][ T5714] EXT4-fs (loop4): orphan cleanup on readonly fs [ 127.508927][ T5714] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 127.519154][ T5714] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 127.534291][ T5714] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 127.551859][ T5714] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.537: bad orphan inode 16 [ 127.581209][ T5714] ext4_test_bit(bit=15, block=18) = 1 [ 127.587556][ T5714] is_bad_inode(inode)=0 [ 127.594837][ T5714] NEXT_ORPHAN(inode)=0 [ 127.599277][ T5714] max_ino=32 [ 127.602885][ T5714] i_nlink=2 [ 127.606194][ T5714] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 127.657884][ T5714] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 127.678953][ T4234] i2c i2c-1: connected i2c-tiny-usb device [ 127.689768][ T5717] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 127.751609][ T5717] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 127.784727][ T4197] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 127.834310][ T5717] EXT4-fs (loop3): 1 truncate cleaned up [ 127.840036][ T5717] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 127.841974][ T4197] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 127.876088][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.883250][ T1108] usb 3-1: USB disconnect, device number 5 [ 127.901377][ T4236] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.954040][ T5726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.542'. [ 128.177923][ T5729] set_capacity_and_notify: 2 callbacks suppressed [ 128.177939][ T5729] loop3: detected capacity change from 0 to 8 [ 128.301660][ T4236] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 128.340400][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.360221][ T4236] usb 2-1: config 0 descriptor?? [ 128.519209][ T5736] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 128.530855][ T5736] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 128.793240][ T5744] netlink: 148 bytes leftover after parsing attributes in process `syz.2.551'. [ 128.831694][ T4236] hackrf 2-1:0.0: Board ID: 00 [ 128.836659][ T4236] hackrf 2-1:0.0: Firmware version: [ 128.864172][ T4236] hackrf 2-1:0.0: Registered as swradio24 [ 128.906628][ T4236] hackrf 2-1:0.0: Registered as swradio25 [ 128.922079][ T4236] hackrf 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 128.923045][ T5746] netlink: 'syz.2.552': attribute type 5 has an invalid length. [ 129.040170][ T1326] usb 2-1: USB disconnect, device number 5 [ 129.130921][ T5750] loop0: detected capacity change from 0 to 512 [ 129.141194][ T5752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.554'. [ 129.191679][ T5750] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 129.259504][ T5750] EXT4-fs (loop0): 1 truncate cleaned up [ 129.271005][ T5750] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,discard,barrier=0x0000000000000001,,errors=continue. Quota mode: none. [ 129.987932][ T5756] chnl_net:caif_netlink_parms(): no params data found [ 130.106299][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.155085][ T5785] loop3: detected capacity change from 0 to 1024 [ 130.298041][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.495276][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.576869][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.589858][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.598388][ T5756] device bridge_slave_0 entered promiscuous mode [ 130.607603][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.614936][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.652427][ T5756] device bridge_slave_1 entered promiscuous mode [ 130.721575][ T5777] loop0: detected capacity change from 0 to 32768 [ 130.777693][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.820146][ T5793] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 130.885606][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.906655][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.914088][ T5777] XFS (loop0): Mounting V5 Filesystem [ 130.939466][ T5797] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 131.034668][ T5808] loop1: detected capacity change from 0 to 4096 [ 131.130260][ T5777] XFS (loop0): Ending clean mount [ 131.139129][ T5777] XFS (loop0): Quotacheck needed: Please wait. [ 131.153735][ T5756] team0: Port device team_slave_0 added [ 131.171172][ T5756] team0: Port device team_slave_1 added [ 131.195655][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.222409][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.299394][ T5814] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.314237][ T26] audit: type=1800 audit(1778577417.558:24): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.571" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 131.339386][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 131.359429][ T5777] XFS (loop0): Quotacheck: Done. [ 131.391838][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.446068][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.501458][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.527789][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.610818][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.625843][ T4189] XFS (loop0): Unmounting Filesystem [ 131.923034][ T5756] device hsr_slave_0 entered promiscuous mode [ 131.991907][ T5756] device hsr_slave_1 entered promiscuous mode [ 132.012929][ T5756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.026657][ T5756] Cannot create hsr debugfs directory [ 132.471080][ T154] tipc: Disabling bearer [ 132.496188][ T154] tipc: Left network mode [ 132.601618][ T5850] loop2: detected capacity change from 0 to 256 [ 132.623977][ T5822] loop1: detected capacity change from 0 to 32768 [ 132.660682][ T5850] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 132.686700][ T5822] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.577 (5822) [ 132.781034][ T5822] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 132.792931][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.799357][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.822584][ T5822] BTRFS info (device loop1): using free space tree [ 132.839400][ T5822] BTRFS info (device loop1): has skinny extents [ 132.850814][ T5756] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 132.868963][ T5756] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 132.905598][ T5756] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 132.927913][ T5756] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 133.088078][ T5822] BTRFS info (device loop1): enabling ssd optimizations [ 133.344111][ T4289] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4289) [ 133.421226][ T4568] Bluetooth: hci4: command 0x041b tx timeout [ 133.673387][ T5896] loop0: detected capacity change from 0 to 764 [ 133.727461][ T5900] netlink: set zone limit has 4 unknown bytes [ 133.736222][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.867213][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.904804][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.917693][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.985160][ T5910] loop0: detected capacity change from 0 to 128 [ 133.992846][ T5906] loop3: detected capacity change from 0 to 1764 [ 134.008074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.038347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.067770][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.074945][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.093396][ T5912] loop1: detected capacity change from 0 to 256 [ 134.118773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.148452][ T5915] openvswitch: netlink: Actions may not be safe on all matching packets [ 134.190191][ T5912] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 134.203486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.251481][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.258633][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.324858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.427977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.495993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.621503][ T4236] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 134.808638][ T5922] loop0: detected capacity change from 0 to 8192 [ 134.857323][ T5922] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 134.902804][ T5922] REISERFS (device loop0): using ordered data mode [ 134.940969][ T5922] reiserfs: using flush barriers [ 134.969938][ T5922] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 135.040065][ T5922] REISERFS (device loop0): checking transaction log (loop0) [ 135.370089][ T5922] REISERFS (device loop0): Using tea hash to sort names [ 135.386778][ T5922] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 135.408779][ T5922] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 135.661294][ C1] sched: RT throttling activated [ 135.678348][ T1326] Bluetooth: hci4: command 0x040f tx timeout [ 136.301902][ T5932] loop1: detected capacity change from 0 to 262144 [ 136.329376][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.339306][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.405713][ T5932] F2FS-fs (loop1): invalid crc value [ 136.409140][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.433417][ T5932] F2FS-fs (loop1): Found nat_bits in checkpoint [ 136.449886][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.480044][ T5932] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 136.511459][ T4236] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 136.529467][ T4236] usb 4-1: config 0 has no interface number 0 [ 136.536307][ T4236] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.546358][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.591488][ T5942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.669326][ T5942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.761448][ T4236] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 136.800280][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.866256][ T4236] usb 4-1: Product: syz [ 136.890917][ T4236] usb 4-1: Manufacturer: syz [ 136.904561][ T4236] usb 4-1: SerialNumber: syz [ 136.948934][ T4236] usb 4-1: config 0 descriptor?? [ 137.081853][ T4236] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 137.273059][ T4236] usb 4-1: USB disconnect, device number 7 [ 137.307024][ T4236] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 137.473378][ T5954] netlink: 256 bytes leftover after parsing attributes in process `syz.1.607'. [ 137.489964][ T5948] loop0: detected capacity change from 0 to 131072 [ 137.514435][ T5950] netlink: 'syz.2.606': attribute type 1 has an invalid length. [ 137.541475][ T5950] netlink: 108 bytes leftover after parsing attributes in process `syz.2.606'. [ 137.560862][ T5956] loop1: detected capacity change from 0 to 1024 [ 137.630262][ T5948] F2FS-fs (loop0): Found nat_bits in checkpoint [ 137.659703][ T154] device hsr_slave_0 left promiscuous mode [ 137.688797][ T5956] hfsplus: request for non-existent node 262144 in B*Tree [ 137.705280][ T5956] hfsplus: request for non-existent node 262144 in B*Tree [ 137.712625][ T5948] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 137.731088][ T154] device hsr_slave_1 left promiscuous mode [ 137.737860][ T4568] Bluetooth: hci4: command 0x0419 tx timeout [ 137.778195][ T5956] hfsplus: request for non-existent node 262144 in B*Tree [ 137.792650][ T5956] hfsplus: request for non-existent node 262144 in B*Tree [ 137.806030][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.857205][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.925493][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.984975][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.019608][ T154] device bridge_slave_1 left promiscuous mode [ 138.050148][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.151488][ T154] device bridge_slave_0 left promiscuous mode [ 138.164484][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.221206][ T154] device veth1_macvtap left promiscuous mode [ 138.228328][ T154] device veth0_macvtap left promiscuous mode [ 138.236332][ T154] device veth1_vlan left promiscuous mode [ 138.246756][ T154] device veth0_vlan left promiscuous mode [ 138.868935][ T154] team0 (unregistering): Port device team_slave_1 removed [ 138.899858][ T154] team0 (unregistering): Port device team_slave_0 removed [ 138.939067][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.970827][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.212391][ T154] bond0 (unregistering): Released all slaves [ 139.310159][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.321504][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.352102][ T5756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.851041][ T5998] loop0: detected capacity change from 0 to 256 [ 139.894475][ T6000] input: syz1 as /devices/virtual/input/input11 [ 140.090035][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.172154][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.187010][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.633723][ T5976] loop1: detected capacity change from 0 to 40427 [ 140.767026][ T5976] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x1ffff [ 140.805241][ T5976] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 140.888387][ T5976] F2FS-fs (loop1): invalid crc value [ 140.964572][ T5976] F2FS-fs (loop1): Found nat_bits in checkpoint [ 141.130454][ T5976] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 141.159439][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.184642][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.250935][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 141.292845][ T5976] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 141.334157][ T5756] device veth0_vlan entered promiscuous mode [ 141.377375][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.421918][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.451697][ T6057] loop3: detected capacity change from 0 to 1024 [ 141.464728][ T5756] device veth1_vlan entered promiscuous mode [ 141.482181][ T5976] F2FS-fs (loop1) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x185/0x8f0 [ 141.529046][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.542823][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.571945][ T5976] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_convert_inline_inode+0x41a/0x5a0 [ 141.587184][ T6064] loop2: detected capacity change from 0 to 256 [ 141.628695][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.648990][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.673025][ T6064] exfat: Deprecated parameter 'namecase' [ 141.678769][ T6064] exfat: Deprecated parameter 'utf8' [ 141.712015][ T6066] netlink: 'syz.0.644': attribute type 4 has an invalid length. [ 141.728917][ T5756] device veth0_macvtap entered promiscuous mode [ 141.754556][ T4193] attempt to access beyond end of device [ 141.754556][ T4193] loop1: rw=2049, want=45104, limit=40427 [ 141.767972][ T6064] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 141.823864][ T5756] device veth1_macvtap entered promiscuous mode [ 141.907666][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.950346][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.990910][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.053364][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.087330][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.131669][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.161331][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.201324][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.240540][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.265678][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.325239][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.350019][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.391924][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.470010][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.497484][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.521384][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.561400][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.584186][ T6090] loop3: detected capacity change from 0 to 4096 [ 142.590660][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.641418][ T5892] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 142.652454][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.669233][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.733497][ T6090] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 142.750972][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.779419][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.805640][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.817045][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.869304][ T5756] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.888546][ T5756] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.901328][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 142.910176][ T5756] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.919610][ T5756] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.181612][ T5892] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 143.191152][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.211442][ T5892] usb 3-1: Product: syz [ 143.215908][ T5892] usb 3-1: Manufacturer: syz [ 143.220628][ T5892] usb 3-1: SerialNumber: syz [ 143.282718][ T5892] usb 3-1: config 0 descriptor?? [ 143.359477][ T5892] gspca_main: sq930x-2.14.0 probing 2770:930c [ 143.377520][ T1263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.416963][ T1263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.463719][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.533147][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.555377][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.612374][ T5942] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.674473][ T6119] program syz.0.663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.874537][ T6127] program syz.3.666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.138659][ T6132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.667'. [ 144.221441][ T5892] gspca_sq930x: ucbus_write failed -71 [ 144.229568][ T5892] sq930x: probe of 3-1:0.0 failed with error -71 [ 144.264482][ T5892] usb 3-1: USB disconnect, device number 6 [ 144.511534][ T4470] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 144.771910][ T4470] usb 2-1: Using ep0 maxpacket: 16 [ 144.786919][ T6156] netlink: 7986 bytes leftover after parsing attributes in process `syz.3.674'. [ 144.891514][ T4470] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 144.916719][ T4470] usb 2-1: config 0 has no interface number 0 [ 144.943546][ T4470] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 144.989658][ T4470] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 145.237132][ T4470] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 145.261534][ T4470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.293532][ T4470] usb 2-1: Product: syz [ 145.308733][ T4470] usb 2-1: Manufacturer: syz [ 145.323176][ T4470] usb 2-1: SerialNumber: syz [ 145.383673][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.684'. [ 145.399463][ T4470] usb 2-1: config 0 descriptor?? [ 145.431697][ T6138] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 145.449449][ T6138] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 145.464999][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.684'. [ 145.622916][ T6188] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.697848][ T6138] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 145.715673][ T6138] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 145.743800][ T6193] loop5: detected capacity change from 0 to 256 [ 145.763776][ T6190] loop3: detected capacity change from 0 to 2048 [ 145.887659][ T6190] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.945061][ T6193] FAT-fs (loop5): Directory bread(block 64) failed [ 145.982182][ T6193] FAT-fs (loop5): Directory bread(block 65) failed [ 146.001572][ T6193] FAT-fs (loop5): Directory bread(block 66) failed [ 146.008182][ T6193] FAT-fs (loop5): Directory bread(block 67) failed [ 146.072026][ T6193] FAT-fs (loop5): Directory bread(block 68) failed [ 146.092620][ T6200] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 146.131499][ T6193] FAT-fs (loop5): Directory bread(block 69) failed [ 146.138188][ T6193] FAT-fs (loop5): Directory bread(block 70) failed [ 146.182729][ T6193] FAT-fs (loop5): Directory bread(block 71) failed [ 146.189407][ T6193] FAT-fs (loop5): Directory bread(block 72) failed [ 146.227357][ T6193] FAT-fs (loop5): Directory bread(block 73) failed [ 146.262242][ T6172] loop0: detected capacity change from 0 to 32768 [ 146.417019][ T6209] sctp: [Deprecated]: syz.2.693 (pid 6209) Use of int in maxseg socket option. [ 146.417019][ T6209] Use struct sctp_assoc_value instead [ 146.432840][ T4470] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 146.471364][ T4470] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 146.508320][ T4470] asix: probe of 2-1:0.251 failed with error -71 [ 146.535625][ T4470] usb 2-1: USB disconnect, device number 6 [ 146.801040][ T6193] attempt to access beyond end of device [ 146.801040][ T6193] loop5: rw=524288, want=1196, limit=256 [ 146.825172][ T6193] attempt to access beyond end of device [ 146.825172][ T6193] loop5: rw=0, want=1196, limit=256 [ 146.862336][ T26] audit: type=1800 audit(1778577433.108:25): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.688" name="file1" dev="loop5" ino=1048610 res=0 errno=0 [ 146.890320][ T6228] attempt to access beyond end of device [ 146.890320][ T6228] loop5: rw=0, want=1196, limit=256 [ 146.926561][ T6230] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.700'. [ 146.971901][ T6230] netlink: zone id is out of range [ 146.977551][ T6230] netlink: zone id is out of range [ 146.985553][ T26] audit: type=1804 audit(1778577433.128:26): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.688" name="/newroot/4/file0/file1" dev="loop5" ino=1048610 res=1 errno=0 [ 147.020774][ T6230] netlink: zone id is out of range [ 147.048859][ T6230] netlink: zone id is out of range [ 147.062238][ T6230] netlink: zone id is out of range [ 147.075402][ T6230] netlink: zone id is out of range [ 147.083302][ T26] audit: type=1800 audit(1778577433.188:27): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.688" name="file1" dev="loop5" ino=1048610 res=0 errno=0 [ 147.112928][ T6230] netlink: zone id is out of range [ 147.130598][ T6230] netlink: zone id is out of range [ 147.150114][ T6230] netlink: zone id is out of range [ 147.191219][ T6230] netlink: zone id is out of range [ 147.390773][ T6239] loop3: detected capacity change from 0 to 128 [ 147.430842][ T6239] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.507976][ T6239] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.618906][ T144] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.829769][ T6253] loop2: detected capacity change from 0 to 1024 [ 147.872721][ T6255] loop0: detected capacity change from 0 to 8 [ 148.009306][ T6253] hfsplus: request for non-existent node 262144 in B*Tree [ 148.043541][ T6234] loop1: detected capacity change from 0 to 32768 [ 148.081460][ T6253] hfsplus: request for non-existent node 262144 in B*Tree [ 148.116967][ T6261] hfsplus: request for non-existent node 262144 in B*Tree [ 148.144946][ T6261] hfsplus: request for non-existent node 262144 in B*Tree [ 148.197520][ T6234] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 148.257647][ T6234] JBD2: Ignoring recovery information on journal [ 148.439317][ T6273] loop2: detected capacity change from 0 to 1024 [ 148.458160][ T6234] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 148.561372][ T4470] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 148.582283][ T26] audit: type=1804 audit(1778577434.828:28): pid=6234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.701" name="/newroot/137/file0/file0" dev="loop1" ino=17058 res=1 errno=0 [ 148.667923][ T4193] ocfs2: Unmounting device (7,1) on (node local) [ 148.937830][ T4470] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 148.957930][ T4470] usb 1-1: config 0 has no interface number 0 [ 148.988319][ T4470] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.078848][ T6248] loop5: detected capacity change from 0 to 40427 [ 149.120256][ T6248] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 149.128487][ T6248] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 149.146465][ T6293] loop1: detected capacity change from 0 to 512 [ 149.164174][ T6248] F2FS-fs (loop5): invalid crc value [ 149.171666][ T1108] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 149.186056][ T4470] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 149.197106][ T4470] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.206682][ T6248] F2FS-fs (loop5): Found nat_bits in checkpoint [ 149.224439][ T4470] usb 1-1: Product: syz [ 149.234984][ T6293] EXT4-fs (loop1): Ignoring removed orlov option [ 149.248087][ T4470] usb 1-1: Manufacturer: syz [ 149.266525][ T6293] EXT4-fs (loop1): Test dummy encryption mode enabled [ 149.286022][ T4470] usb 1-1: SerialNumber: syz [ 149.289848][ T6293] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 149.322197][ T4470] usb 1-1: config 0 descriptor?? [ 149.353706][ T6293] EXT4-fs (loop1): 1 truncate cleaned up [ 149.361757][ T6293] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,data_err=ignore,nogrpid,,errors=continue. Quota mode: writeback. [ 149.376598][ T6248] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 149.399085][ T26] audit: type=1800 audit(1778577435.638:29): pid=6293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.714" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 149.420561][ T4470] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 149.429638][ T6248] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 149.431542][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 149.581706][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.612861][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.638949][ T4229] usb 1-1: USB disconnect, device number 4 [ 149.673197][ T4229] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 149.673991][ T1108] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 149.729537][ T1108] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 149.741830][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.770980][ T1108] usb 4-1: config 0 descriptor?? [ 149.829092][ T6307] netlink: 20 bytes leftover after parsing attributes in process `syz.2.718'. [ 150.253515][ T1108] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 150.282058][ T1108] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input12 [ 150.329473][ T6325] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.434384][ T1108] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 150.488342][ T1108] usb 4-1: USB disconnect, device number 8 [ 150.703257][ T6336] fido_id[6336]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 150.752903][ T6333] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 150.769386][ T6333] REISERFS (device loop5): using ordered data mode [ 150.776466][ T4229] Bluetooth: hci4: command 0x0407 tx timeout [ 150.788457][ T6333] reiserfs: using flush barriers [ 150.796246][ T6333] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 150.825555][ T6333] REISERFS (device loop5): checking transaction log (loop5) [ 150.908891][ T6343] set_capacity_and_notify: 2 callbacks suppressed [ 150.908908][ T6343] loop0: detected capacity change from 0 to 1764 [ 151.015648][ T6343] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 151.036224][ T6333] REISERFS (device loop5): Using r5 hash to sort names [ 151.052196][ T6333] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 151.122313][ T6347] tmpfs: Bad value for 'uid' [ 151.381487][ T4560] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 151.432463][ T6340] loop1: detected capacity change from 0 to 32768 [ 151.564800][ T5892] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 151.589382][ T6340] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 151.598846][ T6340] BTRFS info (device loop1): using free space tree [ 151.611700][ T6340] BTRFS info (device loop1): has skinny extents [ 151.634502][ T4560] usb 3-1: Using ep0 maxpacket: 32 [ 151.701479][ T4229] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 151.744811][ T6374] loop5: detected capacity change from 0 to 512 [ 151.781889][ T4560] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.802847][ T6374] EXT4-fs (loop5): Ignoring removed orlov option [ 151.811903][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 151.819758][ T4560] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.837833][ T6374] EXT4-fs (loop5): Test dummy encryption mode enabled [ 151.845495][ T6374] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 151.864828][ T6374] EXT4-fs (loop5): 1 truncate cleaned up [ 151.870611][ T6374] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,data_err=ignore,nogrpid,,errors=continue. Quota mode: writeback. [ 151.896754][ T6340] BTRFS info (device loop1): enabling ssd optimizations [ 151.912404][ T26] audit: type=1800 audit(1778577438.158:30): pid=6374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.734" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 151.951578][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.969035][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 151.975451][ T4229] usb 1-1: Using ep0 maxpacket: 32 [ 152.005986][ T5892] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 152.036354][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.071913][ T4560] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 152.074318][ T5892] usb 4-1: config 0 descriptor?? [ 152.089664][ T4560] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 152.098879][ T4560] usb 3-1: Product: syz [ 152.103528][ T4560] usb 3-1: Manufacturer: syz [ 152.108585][ T4560] usb 3-1: SerialNumber: syz [ 152.171664][ T4229] usb 1-1: unable to get BOS descriptor or descriptor too short [ 152.182596][ T4560] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input13 [ 152.238685][ T4270] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (4270) [ 152.255707][ T4229] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 152.281545][ T4229] usb 1-1: config 7 has no interface number 0 [ 152.287699][ T4229] usb 1-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 152.308761][ T4229] usb 1-1: config 7 interface 187 has no altsetting 0 [ 152.494877][ T4229] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 152.504247][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.516063][ T4470] usb 3-1: USB disconnect, device number 7 [ 152.526471][ T4229] usb 1-1: Product: syz [ 152.557898][ T4229] usb 1-1: Manufacturer: syz [ 152.583077][ T4229] usb 1-1: SerialNumber: syz [ 152.604424][ T5892] uclogic 0003:28BD:0071.0006: interface is invalid, ignoring [ 152.735232][ T6393] loop1: detected capacity change from 0 to 1024 [ 152.769127][ T4470] appletouch 3-1:1.0: input: appletouch disconnected [ 152.840204][ T6385] usb 4-1: USB disconnect, device number 9 [ 152.852030][ T4229] usb 1-1: Unknown endpoint type found, address 0x07 [ 152.869760][ T4229] usb 1-1: Unknown endpoint type found, address 0x03 [ 152.882645][ T4229] usb 1-1: Not enough endpoints found in device, aborting! [ 152.917360][ T6395] loop5: detected capacity change from 0 to 1024 [ 153.048301][ T26] audit: type=1800 audit(1778577439.288:31): pid=6395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.739" name="file1" dev="loop5" ino=2 res=0 errno=0 [ 153.101538][ T4229] usb 1-1: USB disconnect, device number 5 [ 153.121130][ T6395] hfsplus: b-tree write err: -5, ino 3 [ 153.194584][ T1238] hfsplus: bad catalog file entry [ 153.200278][ T1238] hfsplus: b-tree write err: -5, ino 3 [ 153.461578][ T4560] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 153.580263][ T6418] loop3: detected capacity change from 0 to 1024 [ 153.665327][ T6418] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 2: comm syz.3.749: lblock 2 mapped to illegal pblock 2 (length 1) [ 153.698409][ T6418] EXT4-fs (loop3): Remounting filesystem read-only [ 153.711311][ T4560] usb 2-1: Using ep0 maxpacket: 16 [ 153.719182][ T6418] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 153.721022][ T6426] loop0: detected capacity change from 0 to 764 [ 153.729734][ T6418] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 48: comm syz.3.749: lblock 0 mapped to illegal pblock 48 (length 1) [ 153.750696][ T6418] EXT4-fs (loop3): Remounting filesystem read-only [ 153.757338][ T6418] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 153.762569][ T6424] loop2: detected capacity change from 0 to 512 [ 153.775064][ T6418] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.749: Failed to acquire dquot type 0 [ 153.787292][ T6418] EXT4-fs (loop3): Remounting filesystem read-only [ 153.793997][ T6418] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 153.814957][ T6418] EXT4-fs (loop3): Remounting filesystem read-only [ 153.829561][ T6424] EXT4-fs (loop2): Ignoring removed orlov option [ 153.846865][ T6424] EXT4-fs (loop2): Test dummy encryption mode enabled [ 153.849558][ T6426] rock: directory entry would overflow storage [ 153.854126][ T4560] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.871828][ T6418] EXT4-fs error (device loop3): ext4_evict_inode:284: inode #11: comm syz.3.749: mark_inode_dirty error [ 153.888852][ T6424] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 153.901958][ T4560] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.912142][ T6426] rock: sig=0x5245, size=8, remaining=5 [ 153.929327][ T6418] EXT4-fs (loop3): Remounting filesystem read-only [ 153.939677][ T6418] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 153.949355][ T6424] EXT4-fs (loop2): 1 truncate cleaned up [ 153.960362][ T4560] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 153.976546][ T6418] EXT4-fs (loop3): 1 orphan inode deleted [ 153.984550][ T4560] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 153.997771][ T6418] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,nojournal_checksum,errors=remount-ro,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,. Quota mode: none. [ 154.008182][ T154] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 154.029998][ T4560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.049998][ T4560] usb 2-1: config 0 descriptor?? [ 154.055330][ T6424] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,data_err=ignore,nogrpid,,errors=continue. Quota mode: writeback. [ 154.083397][ T154] EXT4-fs (loop3): Remounting filesystem read-only [ 154.090261][ T154] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 154.112566][ T154] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:2: Failed to release dquot type 0 [ 154.125767][ T154] EXT4-fs (loop3): Remounting filesystem read-only [ 154.136120][ T26] audit: type=1800 audit(1778577440.378:32): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.750" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 154.443623][ T6437] loop2: detected capacity change from 0 to 64 [ 154.498812][ T4194] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 154.522623][ T4194] EXT4-fs (loop3): Remounting filesystem read-only [ 154.546498][ T4194] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 154.557147][ T4560] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 154.569271][ T4560] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input14 [ 154.588349][ T4194] EXT4-fs (loop3): Remounting filesystem read-only [ 154.599559][ T4194] EXT4-fs error (device loop3): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 154.628131][ T4194] EXT4-fs (loop3): Remounting filesystem read-only [ 154.635071][ T4470] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 154.668858][ T4560] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 154.748748][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 154.775857][ T6439] loop0: detected capacity change from 0 to 1024 [ 154.801228][ T4560] usb 2-1: USB disconnect, device number 7 [ 154.911438][ T4470] usb 6-1: Using ep0 maxpacket: 32 [ 155.019048][ T6446] fido_id[6446]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 155.032374][ T4470] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.069334][ T4470] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.083176][ T5891] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 155.220919][ T6451] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 155.260793][ T6451] REISERFS (device loop2): using ordered data mode [ 155.267893][ T6451] reiserfs: using flush barriers [ 155.275679][ T6451] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 155.297992][ T4470] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 155.304499][ T6451] REISERFS (device loop2): checking transaction log (loop2) [ 155.318616][ T4470] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 155.327996][ T4470] usb 6-1: Product: syz [ 155.358177][ T4470] usb 6-1: Manufacturer: syz [ 155.371446][ T4470] usb 6-1: SerialNumber: syz [ 155.402913][ T6443] netlink: 36 bytes leftover after parsing attributes in process `syz.3.757'. [ 155.479239][ T4470] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input15 [ 155.501388][ T5891] usb 4-1: unable to get BOS descriptor or descriptor too short [ 155.561436][ T5891] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 155.581380][ T5891] usb 4-1: can't read configurations, error -71 [ 155.607013][ T6451] REISERFS (device loop2): Using tea hash to sort names [ 155.624979][ T6451] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 155.772418][ T1326] usb 6-1: USB disconnect, device number 2 [ 155.781333][ C1] appletouch 6-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 155.818389][ T1326] appletouch 6-1:1.0: input: appletouch disconnected [ 156.239773][ T6477] set_capacity_and_notify: 1 callbacks suppressed [ 156.239789][ T6477] loop1: detected capacity change from 0 to 1024 [ 156.402729][ T6478] loop3: detected capacity change from 0 to 8192 [ 156.428599][ T6477] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 2: comm syz.1.768: lblock 2 mapped to illegal pblock 2 (length 1) [ 156.454672][ T6477] EXT4-fs (loop1): Remounting filesystem read-only [ 156.466739][ T6488] loop0: detected capacity change from 0 to 512 [ 156.475141][ T6477] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 156.487084][ T6477] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.768: lblock 0 mapped to illegal pblock 48 (length 1) [ 156.506535][ T4229] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 156.507388][ T6488] EXT4-fs (loop0): Ignoring removed orlov option [ 156.520625][ T6488] EXT4-fs (loop0): Test dummy encryption mode enabled [ 156.527821][ T6488] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 156.551515][ T6478] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 156.563577][ T6488] EXT4-fs (loop0): 1 truncate cleaned up [ 156.569479][ T6488] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,data_err=ignore,nogrpid,,errors=continue. Quota mode: writeback. [ 156.598541][ T6477] EXT4-fs (loop1): Remounting filesystem read-only [ 156.642090][ T6478] REISERFS (device loop3): using ordered data mode [ 156.648670][ T6478] reiserfs: using flush barriers [ 156.660356][ T6478] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 156.662561][ T6477] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 156.686003][ T6477] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.768: Failed to acquire dquot type 0 [ 156.705339][ T6478] REISERFS (device loop3): checking transaction log (loop3) [ 156.712998][ T6477] EXT4-fs (loop1): Remounting filesystem read-only [ 156.742037][ T26] audit: type=1800 audit(1778577442.988:33): pid=6488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.767" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 156.775053][ T6477] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 156.804583][ T6477] EXT4-fs (loop1): Remounting filesystem read-only [ 156.820152][ T6477] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #11: comm syz.1.768: mark_inode_dirty error [ 156.856790][ T6477] EXT4-fs (loop1): Remounting filesystem read-only [ 156.883014][ T6477] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 156.901436][ T4229] usb 3-1: Using ep0 maxpacket: 32 [ 156.907564][ T6477] EXT4-fs (loop1): 1 orphan inode deleted [ 156.925753][ T6477] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,nojournal_checksum,errors=remount-ro,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,. Quota mode: none. [ 156.927559][ T1263] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 156.967704][ T6478] REISERFS (device loop3): Using tea hash to sort names [ 156.990491][ T6478] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 157.005744][ T1263] EXT4-fs (loop1): Remounting filesystem read-only [ 157.017954][ T1263] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 157.083495][ T1263] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 157.095843][ T4229] usb 3-1: unable to get BOS descriptor or descriptor too short [ 157.125690][ T1263] EXT4-fs (loop1): Remounting filesystem read-only [ 157.153778][ T6497] loop5: detected capacity change from 0 to 64 [ 157.191664][ T4229] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 157.225305][ T4229] usb 3-1: config 7 has no interface number 0 [ 157.241380][ T4229] usb 3-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 157.288371][ T4229] usb 3-1: config 7 interface 187 has no altsetting 0 [ 157.459139][ T4193] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 157.472429][ T4229] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 157.486707][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.501896][ T4193] EXT4-fs (loop1): Remounting filesystem read-only [ 157.505860][ T4229] usb 3-1: Product: syz [ 157.509858][ T4193] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 157.521800][ T4229] usb 3-1: Manufacturer: syz [ 157.535729][ T4193] EXT4-fs (loop1): Remounting filesystem read-only [ 157.542581][ T4229] usb 3-1: SerialNumber: syz [ 157.547638][ T4193] EXT4-fs error (device loop1): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 157.559727][ T4193] EXT4-fs (loop1): Remounting filesystem read-only [ 157.703177][ T6511] program syz.3.773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.872767][ T4229] usb 3-1: Unknown endpoint type found, address 0x07 [ 157.882457][ T4229] usb 3-1: Unknown endpoint type found, address 0x03 [ 157.889200][ T4229] usb 3-1: Not enough endpoints found in device, aborting! [ 158.083319][ T5891] usb 3-1: USB disconnect, device number 8 [ 158.241883][ T6524] loop0: detected capacity change from 0 to 512 [ 158.309033][ T6524] EXT4-fs (loop0): Ignoring removed orlov option [ 158.320974][ T6524] EXT4-fs (loop0): Test dummy encryption mode enabled [ 158.340879][ T6524] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 158.403709][ T6524] EXT4-fs (loop0): 1 truncate cleaned up [ 158.411855][ T6524] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,data_err=ignore,nogrpid,,errors=continue. Quota mode: writeback. [ 158.462686][ T26] audit: type=1800 audit(1778577444.708:34): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.783" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 158.528385][ T6526] loop1: detected capacity change from 0 to 4096 [ 158.648097][ T6526] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 158.662000][ T5891] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 158.752047][ T6526] ntfs3: loop1: Failed to load $Extend. [ 158.905425][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 159.051801][ T5891] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.074370][ T5891] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.216337][ T6546] loop0: detected capacity change from 0 to 1024 [ 159.268416][ T6548] loop1: detected capacity change from 0 to 4096 [ 159.293794][ T5891] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 159.343231][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 159.352005][ T5891] usb 4-1: Product: syz [ 159.356228][ T5891] usb 4-1: Manufacturer: syz [ 159.358599][ T6546] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.789: lblock 2 mapped to illegal pblock 2 (length 1) [ 159.360847][ T5891] usb 4-1: SerialNumber: syz [ 159.366496][ T6385] kernel read not supported for file /dsp1 (pid: 6385 comm: kworker/0:20) [ 159.424390][ T5891] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input16 [ 159.438991][ T6552] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.492879][ T6546] EXT4-fs (loop0): Remounting filesystem read-only [ 159.499452][ T6546] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 159.541601][ T6546] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.789: lblock 0 mapped to illegal pblock 48 (length 1) [ 159.607120][ T6546] EXT4-fs (loop0): Remounting filesystem read-only [ 159.690005][ T6546] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 159.730162][ T6546] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.789: Failed to acquire dquot type 0 [ 159.743619][ T5891] usb 4-1: USB disconnect, device number 12 [ 159.774356][ T6546] EXT4-fs (loop0): Remounting filesystem read-only [ 159.781080][ T6546] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 159.794648][ T6546] EXT4-fs (loop0): Remounting filesystem read-only [ 159.801211][ T6546] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.789: mark_inode_dirty error [ 159.838912][ T6546] EXT4-fs (loop0): Remounting filesystem read-only [ 159.848819][ T5891] appletouch 4-1:1.0: input: appletouch disconnected [ 159.866987][ T6546] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 159.904762][ T6546] EXT4-fs (loop0): 1 orphan inode deleted [ 159.941222][ T5942] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 159.950794][ T6546] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,nojournal_checksum,errors=remount-ro,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,. Quota mode: none. [ 159.987170][ T5942] EXT4-fs (loop0): Remounting filesystem read-only [ 160.006135][ T5942] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 160.022203][ T5942] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:9: Failed to release dquot type 0 [ 160.047426][ T5942] EXT4-fs (loop0): Remounting filesystem read-only [ 160.220449][ T6547] loop5: detected capacity change from 0 to 32768 [ 160.300971][ T4189] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 160.314920][ T4189] EXT4-fs (loop0): Remounting filesystem read-only [ 160.321996][ T4189] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 160.332573][ T4189] EXT4-fs (loop0): Remounting filesystem read-only [ 160.339124][ T4189] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 160.457226][ T6579] loop3: detected capacity change from 0 to 4096 [ 160.466710][ T4189] EXT4-fs (loop0): Remounting filesystem read-only [ 160.495003][ T6547] XFS (loop5): Mounting V5 Filesystem [ 160.672498][ T6579] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 160.740699][ T6547] XFS (loop5): Ending clean mount [ 160.760461][ T6547] XFS (loop5): Quotacheck needed: Please wait. [ 160.781936][ T6579] ntfs3: loop3: Failed to load $Extend. [ 160.814996][ T6573] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 160.881890][ T6573] REISERFS (device loop1): using ordered data mode [ 160.968293][ T6573] reiserfs: using flush barriers [ 161.008283][ T6573] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 161.083331][ T6573] REISERFS (device loop1): checking transaction log (loop1) [ 161.269018][ T6547] XFS (loop5): Quotacheck: Done. [ 161.290399][ T6575] XFS (loop2): Mounting V5 Filesystem [ 161.474359][ T6575] XFS (loop2): Ending clean mount [ 161.525171][ T6575] XFS (loop2): Quotacheck needed: Please wait. [ 161.554988][ T5756] XFS (loop5): Unmounting Filesystem [ 161.661698][ T6573] REISERFS (device loop1): Using tea hash to sort names [ 161.713509][ T6573] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 161.730081][ T6575] XFS (loop2): Quotacheck: Done. [ 161.974091][ T4195] XFS (loop2): Unmounting Filesystem [ 162.084244][ T6595] set_capacity_and_notify: 2 callbacks suppressed [ 162.084262][ T6595] loop0: detected capacity change from 0 to 32768 [ 162.303938][ T6607] loop3: detected capacity change from 0 to 40427 [ 162.320953][ T6607] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 162.348833][ T6595] XFS (loop0): Mounting V5 Filesystem [ 162.390842][ T6607] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 162.490772][ T6607] F2FS-fs (loop3): invalid crc value [ 162.506270][ T6595] XFS (loop0): Ending clean mount [ 162.605969][ T6607] F2FS-fs (loop3): Found nat_bits in checkpoint [ 162.799216][ T4189] XFS (loop0): Unmounting Filesystem [ 162.821424][ T4570] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 162.838364][ T6607] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 162.864520][ T6607] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 163.126756][ T4570] usb 6-1: Using ep0 maxpacket: 32 [ 163.160277][ T154] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 163.166031][ T6652] loop2: detected capacity change from 0 to 512 [ 163.179705][ T154] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 163.219810][ T6652] EXT4-fs (loop2): Ignoring removed orlov option [ 163.239728][ T6652] EXT4-fs (loop2): Test dummy encryption mode enabled [ 163.265898][ T6652] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 163.311724][ T4570] usb 6-1: unable to get BOS descriptor or descriptor too short [ 163.345515][ T6652] EXT4-fs (loop2): 1 truncate cleaned up [ 163.361466][ T6652] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,data_err=ignore,nogrpid,,errors=continue. Quota mode: writeback. [ 163.388867][ T154] attempt to access beyond end of device [ 163.388867][ T154] loop3: rw=1, want=45112, limit=40427 [ 163.405715][ T4570] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 163.418207][ T4570] usb 6-1: config 7 has no interface number 0 [ 163.430945][ T4570] usb 6-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 163.452587][ T4570] usb 6-1: config 7 interface 187 has no altsetting 0 [ 163.478321][ T26] audit: type=1800 audit(1778577449.718:35): pid=6652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.801" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 163.621727][ T4570] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 163.646472][ T4570] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.661583][ T4570] usb 6-1: Product: syz [ 163.665901][ T4570] usb 6-1: Manufacturer: syz [ 163.670713][ T4570] usb 6-1: SerialNumber: syz [ 163.931920][ T4570] usb 6-1: Unknown endpoint type found, address 0x07 [ 163.938794][ T4570] usb 6-1: Unknown endpoint type found, address 0x03 [ 163.999581][ T4570] usb 6-1: Not enough endpoints found in device, aborting! [ 164.032948][ T6662] loop3: detected capacity change from 0 to 4096 [ 164.190514][ T1326] usb 6-1: USB disconnect, device number 3 [ 164.206712][ T6674] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.309095][ T6677] loop1: detected capacity change from 0 to 512 [ 164.439137][ T6677] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.471491][ T6677] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.534330][ T6677] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.818: corrupted inode contents [ 164.559628][ T6677] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #2: comm syz.1.818: mark_inode_dirty error [ 164.582368][ T6677] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.818: corrupted inode contents [ 164.606403][ T6685] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.818: corrupted inode contents [ 164.661552][ T6685] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #2: comm syz.1.818: mark_inode_dirty error [ 164.697920][ T6688] sp0: Synchronizing with TNC [ 164.715722][ T6685] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.818: corrupted inode contents [ 164.734534][ T6689] sp0: Found TNC [ 164.770048][ T6685] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.818: mark_inode_dirty error [ 164.806998][ T6685] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.818: corrupted inode contents [ 164.827019][ T6693] loop5: detected capacity change from 0 to 2048 [ 164.860913][ T6685] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #2: comm syz.1.818: mark_inode_dirty error [ 164.987432][ T6693] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 165.058306][ T6699] loop3: detected capacity change from 0 to 512 [ 165.101525][ T6693] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 165.161417][ T6699] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 165.280661][ T6699] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.810: invalid indirect mapped block 9 (level 0) [ 165.345773][ T6693] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.808: bg 0: block 234: padding at end of block bitmap is not set [ 165.361791][ T6699] EXT4-fs (loop3): 1 truncate cleaned up [ 165.367503][ T6699] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none. [ 165.466514][ T6693] EXT4-fs (loop5): Remounting filesystem read-only [ 165.838177][ T6723] loop2: detected capacity change from 0 to 1024 [ 165.879588][ T6729] loop3: detected capacity change from 0 to 64 [ 165.890483][ T6725] loop5: detected capacity change from 0 to 1024 [ 165.973992][ T6725] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 166.002279][ T6725] hfsplus: failed to load root directory [ 166.043169][ T6721] ntfs3: loop1: ino=3, Correct links count -> 2. [ 166.286265][ T4270] Dev loop9: unable to read RDB block 7 [ 166.306203][ T4270] loop9: unable to read partition table [ 166.320559][ T6721] ntfs3: loop1: ino=5, "/" directory corrupted [ 166.339145][ T4270] loop9: partition table beyond EOD, truncated [ 166.387673][ T6739] Dev loop9: unable to read RDB block 7 [ 166.424137][ T6744] IPVS: ip_vs_add_dest(): server weight less than zero [ 166.447004][ T6739] loop9: unable to read partition table [ 166.454712][ T6739] loop9: partition table beyond EOD, truncated [ 166.492045][ T6739] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 166.492045][ T6739] ) failed (rc=-5) [ 167.088662][ T6773] bond0: (slave bond_slave_1): Releasing backup interface [ 167.142298][ T6773] net_ratelimit: 110 callbacks suppressed [ 167.142318][ T6773] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 167.173112][ T6772] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.235852][ T6779] netlink: 'syz.2.839': attribute type 6 has an invalid length. [ 167.512826][ T6790] set_capacity_and_notify: 4 callbacks suppressed [ 167.512843][ T6790] loop5: detected capacity change from 0 to 2048 [ 167.696120][ T6803] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.795370][ T6806] loop2: detected capacity change from 0 to 128 [ 167.855121][ T6790] syz.5.841 (6790) used greatest stack depth: 19224 bytes left [ 167.890856][ T6806] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.951602][ T6806] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.998850][ T6806] EXT4-fs warning (device loop2): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 168.327994][ T6833] loop2: detected capacity change from 0 to 512 [ 168.440618][ T6837] loop3: detected capacity change from 0 to 2048 [ 168.565854][ T6837] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.633526][ T26] audit: type=1800 audit(1778577454.878:36): pid=6837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.854" name="file2" dev="loop3" ino=1416 res=0 errno=0 [ 168.641996][ T6385] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 168.931695][ T6385] usb 6-1: Using ep0 maxpacket: 8 [ 169.051556][ T6385] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 169.060255][ T6385] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.101408][ T6385] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 169.112270][ T6385] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.149620][ T6385] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.176531][ T6855] netlink: 104 bytes leftover after parsing attributes in process `syz.2.862'. [ 169.191369][ T6385] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 169.220909][ T6385] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.382359][ T6840] loop1: detected capacity change from 0 to 32768 [ 169.417076][ T6858] loop0: detected capacity change from 0 to 2048 [ 169.555911][ T6385] usb 6-1: GET_CAPABILITIES returned 0 [ 169.562291][ T6385] usbtmc 6-1:16.0: can't read capabilities [ 169.735557][ T6865] loop1: detected capacity change from 0 to 1024 [ 169.769687][ T6385] usb 6-1: USB disconnect, device number 4 [ 169.794112][ T6858] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.838777][ T6870] loop3: detected capacity change from 0 to 4096 [ 169.871645][ T6865] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 169.884988][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.868'. [ 169.898912][ T6870] EXT4-fs (loop3): Ignoring removed bh option [ 169.922262][ T6870] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bh,grpquota,stripe=0x0000000000000001,. Quota mode: writeback. [ 170.133231][ T4243] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 170.152046][ T6870] EXT4-fs error (device loop3): ext4_empty_dir:3154: inode #12: block 80: comm syz.3.867: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 170.221614][ T4243] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 170.271329][ T4243] EXT4-fs (loop0): This should not happen!! Data will be lost [ 170.271329][ T4243] [ 170.298981][ T6870] EXT4-fs (loop3): Remounting filesystem read-only [ 170.328155][ T6870] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz.3.867: directory missing '..' [ 170.339922][ T4243] EXT4-fs (loop0): Total free blocks count 0 [ 170.378053][ T4243] EXT4-fs (loop0): Free/Dirty block details [ 170.396116][ T4243] EXT4-fs (loop0): free_blocks=66060288 [ 170.407464][ T6882] loop5: detected capacity change from 0 to 256 [ 170.441386][ T4243] EXT4-fs (loop0): dirty_blocks=32 [ 170.446569][ T4243] EXT4-fs (loop0): Block reservation details [ 170.462935][ T6880] block nbd0: server does not support multiple connections per device. [ 170.479767][ T4243] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 170.488130][ T6880] block nbd0: shutting down sockets [ 170.543734][ T5212] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 170.601324][ T5212] EXT4-fs (loop0): This should not happen!! Data will be lost [ 170.601324][ T5212] [ 170.745295][ T6889] loop3: detected capacity change from 0 to 1024 [ 171.225135][ T6896] EXT4-fs (loop5): inline encryption not supported [ 171.303964][ T6896] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,inlinecrypt,,errors=continue. Quota mode: none. [ 171.379250][ T6896] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.390363][ T6898] XFS: attr2 mount option is deprecated. [ 171.542747][ T6898] XFS (loop3): Mounting V5 Filesystem [ 171.787754][ T6898] XFS (loop3): Ending clean mount [ 171.800960][ T6898] XFS (loop3): Quotacheck needed: Please wait. [ 171.961394][ T6918] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.980038][ T6898] XFS (loop3): Quotacheck: Done. [ 172.072274][ T4194] XFS (loop3): Unmounting Filesystem [ 172.609067][ T6888] XFS (loop2): Mounting V5 Filesystem [ 172.846690][ T6888] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 172.865225][ T6940] netlink: 48 bytes leftover after parsing attributes in process `syz.3.886'. [ 172.944705][ T6888] XFS (loop2): Starting recovery (logdev: internal) [ 173.038956][ T6888] XFS (loop2): Ending recovery (logdev: internal) [ 173.137666][ T6888] XFS (loop2): Metadata corruption detected at xfs_inobt_verify+0xc1/0x220, xfs_finobt block 0x8 [ 173.253816][ T6888] XFS (loop2): Unmount and run xfs_repair [ 173.331580][ T6888] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 173.359542][ T6888] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 173.399533][ T6888] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 173.434041][ T6888] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 173.473223][ T6888] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 173.502689][ T6888] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 173.521915][ T6888] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 173.541148][ T6888] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 173.561423][ T6888] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 173.581639][ T6888] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 8 error 117 [ 173.643145][ T4195] XFS (loop2): Unmounting Filesystem [ 173.661355][ T4470] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 173.883372][ T6956] set_capacity_and_notify: 4 callbacks suppressed [ 173.883389][ T6956] loop5: detected capacity change from 0 to 256 [ 173.970102][ T6956] exfat: Deprecated parameter 'utf8' [ 174.033816][ T6956] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 174.231617][ T4470] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 174.260872][ T4470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.272839][ T4470] usb 4-1: Product: syz [ 174.277053][ T4470] usb 4-1: Manufacturer: syz [ 174.292461][ T4470] usb 4-1: SerialNumber: syz [ 174.536985][ T6975] loop2: detected capacity change from 0 to 512 [ 174.735941][ T6975] EXT4-fs (loop2): Ignoring removed bh option [ 174.833838][ T6975] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 174.933569][ T6975] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.011645][ T4470] (unnamed net_device) (uninitialized): Assigned a random MAC address: 4e:3e:42:c1:a7:77 [ 175.069323][ T4470] rtl8150 4-1:1.0: eth5: rtl8150 is detected [ 175.227032][ T4470] usb 4-1: USB disconnect, device number 13 [ 175.260959][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.909'. [ 176.932927][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.920'. [ 177.028584][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.920'. [ 177.118422][ T7030] bridge0: port 3(vlan2) entered blocking state [ 177.159611][ T7030] bridge0: port 3(vlan2) entered disabled state [ 177.192523][ T7001] loop5: detected capacity change from 0 to 262144 [ 177.444125][ T7001] F2FS-fs (loop5): invalid crc value [ 177.494035][ T7001] F2FS-fs (loop5): Found nat_bits in checkpoint [ 177.540937][ T7001] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 177.546071][ T7043] loop3: detected capacity change from 0 to 512 [ 177.854145][ T7052] program syz.2.925 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.245267][ T7062] input: syz1 as /devices/virtual/input/input17 [ 179.019465][ T7088] loop2: detected capacity change from 0 to 1024 [ 179.095184][ T7088] EXT4-fs (loop2): Ignoring removed bh option [ 179.179103][ T7088] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 179.884580][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.946'. [ 180.084507][ T7111] loop2: detected capacity change from 0 to 4096 [ 180.220298][ T7111] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 180.326300][ T7076] loop0: detected capacity change from 0 to 40427 [ 181.359371][ T7076] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 181.382300][ T7076] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 181.426101][ T7076] F2FS-fs (loop0): invalid crc value [ 181.467479][ T7076] F2FS-fs (loop0): Found nat_bits in checkpoint [ 181.592498][ T7076] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 181.617510][ T7076] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 182.585199][ T7147] loop5: detected capacity change from 0 to 512 [ 182.594111][ T7141] tipc: Started in network mode [ 182.599043][ T7141] tipc: Node identity ac14140f, cluster identity 4711 [ 182.656404][ T7141] tipc: New replicast peer: 255.255.255.255 [ 182.677881][ T7141] tipc: Enabled bearer , priority 10 [ 182.804652][ T7147] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 182.909177][ T7147] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.069054][ T7147] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.958: corrupted inode contents [ 183.127486][ T7156] loop0: detected capacity change from 0 to 2048 [ 183.180505][ T7147] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #2: comm syz.5.958: mark_inode_dirty error [ 183.288543][ T7147] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.958: corrupted inode contents [ 183.327875][ T7159] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.475132][ T7158] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.958: corrupted inode contents [ 183.567338][ T7158] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #2: comm syz.5.958: mark_inode_dirty error [ 183.620016][ T7158] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.958: corrupted inode contents [ 183.729427][ T7158] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.958: mark_inode_dirty error [ 183.793756][ T5891] tipc: Node number set to 2886997007 [ 183.826845][ T7164] loop3: detected capacity change from 0 to 512 [ 183.859717][ T7158] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.958: corrupted inode contents [ 183.940020][ T7158] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #2: comm syz.5.958: mark_inode_dirty error [ 184.291016][ T7146] loop2: detected capacity change from 0 to 262144 [ 184.496361][ T7146] F2FS-fs (loop2): invalid crc value [ 184.616686][ T7146] F2FS-fs (loop2): Found nat_bits in checkpoint [ 184.671401][ T7146] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 185.209193][ T7181] loop0: detected capacity change from 0 to 2048 [ 185.216020][ T7178] block nbd0: server does not support multiple connections per device. [ 185.252513][ T7178] block nbd0: shutting down sockets [ 185.278000][ T7181] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.351993][ T26] audit: type=1800 audit(1778577471.598:37): pid=7181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.972" name="file2" dev="loop0" ino=1416 res=0 errno=0 [ 185.486788][ T7183] loop3: detected capacity change from 0 to 512 [ 185.596250][ T7183] EXT4-fs (loop3): 1 truncate cleaned up [ 185.630188][ T7183] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 185.802959][ T7187] loop0: detected capacity change from 0 to 4096 [ 185.963433][ T7187] EXT4-fs (loop0): Ignoring removed bh option [ 186.067741][ T7192] loop5: detected capacity change from 0 to 512 [ 186.078058][ T7187] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bh,grpquota,stripe=0x0000000000000001,. Quota mode: writeback. [ 186.267388][ T7187] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz.0.973: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 186.288510][ T7192] EXT4-fs (loop5): Test dummy encryption mode enabled [ 186.358271][ T7192] EXT4-fs (loop5): 1 truncate cleaned up [ 186.373835][ T7187] EXT4-fs (loop0): Remounting filesystem read-only [ 186.379256][ T7192] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,test_dummy_encryption=v1,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,discard,grpjquota=,errors=remount-ro,nodiscard,. Quota mode: none. [ 186.380396][ T7187] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.973: directory missing '..' [ 186.816537][ T7205] loop3: detected capacity change from 0 to 1024 [ 186.904702][ T7205] EXT4-fs (loop3): Ignoring removed bh option [ 187.012196][ T7205] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 187.551766][ T7213] block nbd0: server does not support multiple connections per device. [ 187.580740][ T7213] block nbd0: shutting down sockets [ 187.763133][ T7220] loop5: detected capacity change from 0 to 512 [ 187.836385][ T7220] EXT4-fs (loop5): Ignoring removed orlov option [ 187.855482][ T7220] EXT4-fs (loop5): Test dummy encryption mode enabled [ 187.888743][ T7220] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 187.943658][ T7222] loop2: detected capacity change from 0 to 8192 [ 187.955895][ T7220] EXT4-fs (loop5): 1 truncate cleaned up [ 187.965090][ T7220] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,data_err=ignore,nogrpid,,errors=continue. Quota mode: writeback. [ 188.025800][ T26] audit: type=1800 audit(1778577474.268:38): pid=7220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.986" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 188.063875][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.991'. [ 188.128094][ T7238] loop3: detected capacity change from 0 to 128 [ 188.142554][ T7222] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 188.162220][ T7222] REISERFS (device loop2): using ordered data mode [ 188.169020][ T7222] reiserfs: using flush barriers [ 188.181070][ T7222] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 188.206263][ T7222] REISERFS (device loop2): checking transaction log (loop2) [ 188.310423][ T7238] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.351548][ T7222] REISERFS (device loop2): Using tea hash to sort names [ 188.366917][ T7238] ext4 filesystem being mounted at /218/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.370189][ T7222] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 188.393535][ T7222] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 189.268717][ T7247] loop2: detected capacity change from 0 to 32768 [ 189.430597][ T7247] JBD2: Ignoring recovery information on journal [ 189.547444][ T7247] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 189.616220][ T7247] OCFS2: ERROR (device loop2): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 189.616253][ T7247] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 189.676392][ T7254] OCFS2: ERROR (device loop2): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 189.676426][ T7254] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 189.686453][ T7247] OCFS2: File system is now read-only. [ 189.939629][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 190.845515][ T7273] program syz.2.1006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.858352][ T7257] loop3: detected capacity change from 0 to 32768 [ 190.961671][ T7257] JBD2: Ignoring recovery information on journal [ 191.171504][ T4470] Bluetooth: hci3: command 0x0406 tx timeout [ 191.184267][ T4470] Bluetooth: hci1: command 0x0406 tx timeout [ 191.213060][ T7257] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 191.241361][ T4470] Bluetooth: hci0: command 0x0406 tx timeout [ 191.251593][ T4470] Bluetooth: hci2: command 0x0406 tx timeout [ 191.528662][ T4194] ocfs2: Unmounting device (7,3) on (node local) [ 192.147060][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 192.158350][ T7315] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1026'. [ 192.517285][ T7323] program syz.0.1030 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.791362][ T4470] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 192.887304][ T7342] loop2: detected capacity change from 0 to 512 [ 192.937777][ T7342] EXT4-fs (loop2): Ignoring removed orlov option [ 192.965652][ T7342] EXT4-fs (loop2): Test dummy encryption mode enabled [ 192.977156][ T7311] loop3: detected capacity change from 0 to 40427 [ 192.981979][ T7342] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 193.005031][ T7342] EXT4-fs (loop2): 1 truncate cleaned up [ 193.010844][ T7342] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,data_err=ignore,nogrpid,,errors=continue. Quota mode: writeback. [ 193.049758][ T26] audit: type=1800 audit(1778577479.288:39): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1039" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 193.071924][ T4470] usb 2-1: Using ep0 maxpacket: 32 [ 193.098867][ T7311] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 193.107177][ T7311] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 193.147244][ T7311] F2FS-fs (loop3): invalid crc value [ 193.191530][ T4470] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 193.213753][ T4470] usb 2-1: config 0 has no interface number 0 [ 193.239358][ T7311] F2FS-fs (loop3): Found nat_bits in checkpoint [ 193.411817][ T4470] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 193.439485][ T4470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.442486][ T7311] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 193.479581][ T4470] usb 2-1: Product: syz [ 193.488570][ T7311] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 193.489295][ T4470] usb 2-1: Manufacturer: syz [ 193.521776][ T4470] usb 2-1: SerialNumber: syz [ 193.528431][ T4470] usb 2-1: config 0 descriptor?? [ 193.582803][ T4470] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 193.775059][ T144] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 193.807467][ T144] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 193.817461][ T4470] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 193.852013][ T4470] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 193.969111][ T7373] loop5: detected capacity change from 0 to 512 [ 193.976499][ T144] attempt to access beyond end of device [ 193.976499][ T144] loop3: rw=1, want=45112, limit=40427 [ 194.094840][ T7378] loop0: detected capacity change from 0 to 256 [ 194.104691][ T7373] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 194.117554][ T7380] loop2: detected capacity change from 0 to 512 [ 194.148157][ T7373] EXT4-fs (loop5): 1 truncate cleaned up [ 194.155367][ T7373] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000007,journal_dev=0x0000000000000001,debug_want_extra_isize=0x000000000000006a,auto_da_alloc=0x0000000000008001,errors=remount-ro,nouid32,. Quota mode: none. [ 194.199420][ T7380] EXT4-fs (loop2): Ignoring removed orlov option [ 194.224415][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.230850][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.275954][ T4470] usb 2-1: USB disconnect, device number 8 [ 194.281939][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 194.296341][ T7380] EXT4-fs (loop2): Test dummy encryption mode enabled [ 194.302227][ T4470] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 194.343917][ T4470] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 194.367143][ T7380] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 194.429156][ T4470] quatech2 2-1:0.51: device disconnected [ 194.450300][ T7380] EXT4-fs (loop2): 1 truncate cleaned up [ 194.490550][ T7380] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,data_err=ignore,nogrpid,,errors=continue. Quota mode: writeback. [ 194.608132][ T26] audit: type=1800 audit(1778577480.848:40): pid=7380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1055" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 194.628589][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1057'. [ 194.665743][ T7386] netlink: del zone limit has 8 unknown bytes [ 194.852827][ T7388] loop5: detected capacity change from 0 to 2048 [ 194.947415][ T7395] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.979886][ T7390] loop0: detected capacity change from 0 to 4096 [ 195.028935][ T7390] EXT4-fs (loop0): inline encryption not supported [ 195.057537][ T7390] EXT4-fs (loop0): Test dummy encryption mode enabled [ 195.079964][ T7392] loop3: detected capacity change from 0 to 4096 [ 195.110832][ T7390] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 195.128292][ T7390] System zones: 0-5 [ 195.170471][ T7390] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 195.231024][ T7392] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 195.231581][ T6384] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 195.390878][ T7401] kvm [7399]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x81 [ 195.408721][ T7392] ntfs3: loop3: ntfs3_write_inode r=1e failed, -22. [ 195.430924][ T26] audit: type=1800 audit(1778577481.668:41): pid=7390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1059" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 195.463865][ T7390] fs-verity: sha512 using implementation "sha512-avx2" [ 195.511744][ T7404] ntfs3: loop3: ntfs_sync_inode r=1e failed, -22. [ 195.514814][ T7406] loop5: detected capacity change from 0 to 16 [ 195.554214][ T7406] erofs: (device loop5): mounted with root inode @ nid 36. [ 195.561863][ T6384] usb 2-1: not running at top speed; connect to a high speed hub [ 195.641492][ T6384] usb 2-1: config 2 has an invalid interface number: 242 but max is 0 [ 195.649723][ T6384] usb 2-1: config 2 has no interface number 0 [ 195.686991][ T6384] usb 2-1: config 2 interface 242 has no altsetting 0 [ 195.718234][ T4194] ntfs3: loop3: ntfs_evict_inode r=1e failed, -22. [ 195.763423][ T4194] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 195.871617][ T6384] usb 2-1: New USB device found, idVendor=0830, idProduct=0050, bcdDevice=4b.0f [ 195.919402][ T6384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.930590][ T7413] kernel profiling enabled (shift: 6) [ 195.961321][ T6384] usb 2-1: Product: syz [ 195.974057][ T6384] usb 2-1: Manufacturer: syz [ 195.998449][ T6384] usb 2-1: SerialNumber: syz [ 196.032617][ T7418] loop3: detected capacity change from 0 to 1024 [ 196.106843][ T7418] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 196.106843][ T7418] [ 196.153222][ T7418] netlink: 'syz.3.1067': attribute type 1 has an invalid length. [ 196.161026][ T7418] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1067'. [ 196.353070][ T6384] usb 2-1: active config #2 != 1 ?? [ 196.382897][ T6384] usb 2-1: USB disconnect, device number 9 [ 196.527694][ T7439] comedi comedi0: No channels found! [ 196.812853][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1087'. [ 197.310350][ T7488] loop3: detected capacity change from 0 to 512 [ 197.329716][ T7486] loop0: detected capacity change from 0 to 2048 [ 197.366611][ T7485] loop2: detected capacity change from 0 to 4096 [ 197.391428][ T7486] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 197.431788][ T7491] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.151463][ T4568] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 198.259676][ T7522] loop0: detected capacity change from 0 to 2048 [ 198.334004][ T7522] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 198.363452][ T7522] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 198.391382][ T7522] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 198.411363][ T4568] usb 3-1: Using ep0 maxpacket: 16 [ 198.416820][ T7522] UDF-fs: Scanning with blocksize 512 failed [ 198.477403][ T7522] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.561550][ T4568] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.584937][ T7506] loop3: detected capacity change from 0 to 32768 [ 198.606379][ T4568] usb 3-1: config 0 interface 0 has no altsetting 0 [ 198.623603][ T4568] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 198.640366][ T4568] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.666173][ T4568] usb 3-1: config 0 descriptor?? [ 198.673020][ T7506] (syz.3.1107,7506,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "" or missing value [ 198.691543][ T7506] (syz.3.1107,7506,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 198.813977][ T7536] input: syz1 as /devices/virtual/input/input18 [ 199.033014][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1119'. [ 199.089349][ T7542] device erspan0 entered promiscuous mode [ 199.165035][ T4568] mcp2221 0003:04D8:00DD.0008: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 199.450446][ T7529] loop5: detected capacity change from 0 to 32768 [ 199.581320][ T4470] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 199.607578][ T7529] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 199.665619][ T6384] usb 3-1: USB disconnect, device number 9 [ 199.717969][ T7564] binder: 7563:7564 ioctl c018620c 200000000040 returned -22 [ 199.779077][ T5756] ocfs2: Unmounting device (7,5) on (node local) [ 199.843685][ T4470] usb 2-1: Using ep0 maxpacket: 16 [ 199.972947][ T4470] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 200.114088][ T7572] loop3: detected capacity change from 0 to 8192 [ 200.161615][ T4470] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 200.177894][ T4470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.200619][ T4470] usb 2-1: Product: syz [ 200.206987][ T4470] usb 2-1: Manufacturer: syz [ 200.212101][ T4470] usb 2-1: SerialNumber: syz [ 200.220041][ T4470] usb 2-1: config 0 descriptor?? [ 200.253131][ T7572] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 200.278119][ T4470] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 200.310276][ T7572] REISERFS (device loop3): using ordered data mode [ 200.337025][ T4470] usb 2-1: Detected FT232RL [ 200.342892][ T7572] reiserfs: using flush barriers [ 200.384071][ T7572] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 200.488574][ T7572] REISERFS (device loop3): checking transaction log (loop3) [ 200.496610][ T4470] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 200.553531][ T7589] sp0: Synchronizing with TNC [ 200.764384][ T4470] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 200.782709][ T7572] REISERFS (device loop3): Using tea hash to sort names [ 200.805032][ T7572] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 200.978811][ T4568] usb 2-1: USB disconnect, device number 10 [ 201.000280][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1144'. [ 201.025692][ T4568] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 201.038878][ T7579] loop0: detected capacity change from 0 to 40427 [ 201.047532][ T4568] ftdi_sio 2-1:0.0: device disconnected [ 201.138228][ T7579] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 201.149218][ T7579] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 201.165280][ T7604] overlayfs: statfs failed on './file0' [ 201.182167][ T7579] F2FS-fs (loop0): invalid crc value [ 201.202685][ T7605] loop5: detected capacity change from 0 to 2048 [ 201.227892][ T7579] F2FS-fs (loop0): Found nat_bits in checkpoint [ 201.269599][ T7605] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.339303][ T7579] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 201.349191][ T7579] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 201.882935][ T7633] loop3: detected capacity change from 0 to 16 [ 201.976600][ T7633] erofs: (device loop3): mounted with root inode @ nid 36. [ 202.049062][ T26] audit: type=1800 audit(1778577488.288:42): pid=7633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1159" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 202.091205][ T7633] attempt to access beyond end of device [ 202.091205][ T7633] loop3: rw=16777216, want=34359739512, limit=16 [ 202.270601][ T7636] loop0: detected capacity change from 0 to 8192 [ 202.382262][ T7636] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 202.391635][ T7636] REISERFS (device loop0): using ordered data mode [ 202.400506][ T7636] reiserfs: using flush barriers [ 202.416023][ T7636] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 202.432731][ T7636] REISERFS (device loop0): checking transaction log (loop0) [ 202.531872][ T5891] ------------[ cut here ]------------ [ 202.538178][ T5891] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x801 with flags 0x40 [ 202.549031][ T5891] WARNING: CPU: 0 PID: 5891 at net/mac80211/rate.c:376 __rate_control_send_low+0x630/0x880 [ 202.559246][ T5891] Modules linked in: [ 202.563238][ T5891] CPU: 0 PID: 5891 Comm: kworker/0:15 Not tainted syzkaller #0 [ 202.570823][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 202.580969][ T5891] Workqueue: mld mld_ifc_work [ 202.585751][ T5891] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 202.592093][ T5891] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 80 86 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 80 f1 69 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 202.611787][ T5891] RSP: 0018:ffffc900033f6b28 EFLAGS: 00010246 [ 202.617917][ T5891] RAX: 9c733fc69521b600 RBX: 000000000000000c RCX: ffff888027943b80 [ 202.625995][ T5891] RDX: 0000000000000000 RSI: 0000000000000402 RDI: 0000000000000000 [ 202.634063][ T5891] RBP: 0000000000000084 R08: ffffc900033f6647 R09: 1ffff9200067ecc8 [ 202.642138][ T5891] R10: dffffc0000000000 R11: fffff5200067ecc9 R12: ffff8880273793e8 [ 202.650170][ T5891] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 202.658336][ T5891] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 202.667345][ T5891] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.671422][ T4229] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 202.674033][ T5891] CR2: 0000200000654000 CR3: 000000007d467000 CR4: 00000000003506f0 [ 202.689586][ T5891] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 202.697659][ T5891] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 202.705713][ T5891] Call Trace: [ 202.709030][ T5891] [ 202.712068][ T5891] rate_control_send_low+0x194/0x790 [ 202.717412][ T5891] rate_control_get_rate+0x207/0x5c0 [ 202.722822][ T5891] ieee80211_tx_h_rate_ctrl+0xb02/0x1700 [ 202.728528][ T5891] ? ieee80211_tx_h_select_key+0x17f0/0x17f0 [ 202.734782][ T5891] ? ieee80211_queue_skb+0xbc/0x2060 [ 202.740140][ T5891] invoke_tx_handlers_late+0xaa/0x16a0 [ 202.746304][ T5891] ? ieee80211_tx_h_select_key+0x8dc/0x17f0 [ 202.752507][ T5891] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 202.758570][ T5891] ieee80211_tx+0x2d4/0x460 [ 202.763200][ T5891] ? ieee80211_skb_resize+0x630/0x630 [ 202.768655][ T5891] __ieee80211_subif_start_xmit+0x1036/0x3290 [ 202.774831][ T5891] ? unwind_next_frame+0x1548/0x1d90 [ 202.780176][ T5891] ? ret_from_fork+0x1f/0x30 [ 202.784880][ T5891] ? mark_lock+0x94/0x320 [ 202.789263][ T5891] ? __lock_acquire+0x13bc/0x7d10 [ 202.794437][ T5891] ? mark_lock+0x94/0x320 [ 202.798911][ T5891] ? ieee80211_txq_schedule_start+0xa0/0xa0 [ 202.804921][ T5891] ? __lock_acquire+0x12e8/0x7d10 [ 202.810007][ T5891] ? verify_lock_unused+0x140/0x140 [ 202.815318][ T5891] ? skb_network_protocol+0x51d/0x770 [ 202.820733][ T5891] ? validate_xmit_xfrm+0xb2/0x1010 [ 202.826052][ T5891] ieee80211_subif_start_xmit+0xed/0x5d0 [ 202.831780][ T5891] ? ieee80211_build_hdr+0x23c0/0x23c0 [ 202.837294][ T5891] ? netif_skb_features+0x833/0xbc0 [ 202.842637][ T5891] dev_hard_start_xmit+0x2a5/0x7e0 [ 202.848353][ T5891] sch_direct_xmit+0x25a/0x4b0 [ 202.853328][ T5891] ? mrp_pdu_append_vecattr_event+0x1590/0x1590 [ 202.859628][ T5891] ? ieee80211_stop+0x190/0x190 [ 202.864625][ T5891] __dev_queue_xmit+0x179f/0x2f80 [ 202.869706][ T5891] ? lockdep_hardirqs_on+0x94/0x140 [ 202.875014][ T5891] ? dev_queue_xmit+0x20/0x20 [ 202.879740][ T5891] ? eth_header+0x117/0x200 [ 202.884349][ T5891] ? llc_sysctl_exit+0x60/0x60 [ 202.889165][ T5891] ? neigh_resolve_output+0x5d7/0x6a0 [ 202.894665][ T5891] ip6_finish_output2+0x108c/0x1510 [ 202.899916][ T5891] ? nf_hook+0x360/0x360 [ 202.904271][ T5891] ? ip6_finish_output+0x64c/0x7d0 [ 202.909440][ T5891] NF_HOOK+0x163/0x460 [ 202.913610][ T5891] ? mld_send_report+0x2e0/0x2e0 [ 202.918588][ T5891] ? NF_HOOK+0x460/0x460 [ 202.922912][ T5891] ? icmp6_dst_alloc+0x41c/0x4a0 [ 202.927909][ T5891] mld_sendpack+0x6f2/0xc00 [ 202.932493][ T5891] ? add_grhead+0xe3/0x240 [ 202.936971][ T5891] ? add_grec+0x15d0/0x15d0 [ 202.941580][ T5891] mld_ifc_work+0x836/0xb40 [ 202.946131][ T5891] ? _raw_spin_unlock_irq+0x1f/0x40 [ 202.951423][ T5891] process_one_work+0x85f/0x1010 [ 202.956423][ T5891] ? worker_detach_from_pool+0x240/0x240 [ 202.962320][ T5891] ? lockdep_hardirqs_off+0x70/0x100 [ 202.967651][ T5891] ? _raw_spin_lock_irq+0xb7/0xf0 [ 202.972768][ T5891] ? _raw_spin_lock_irqsave+0x100/0x100 [ 202.978364][ T5891] ? wq_worker_running+0x97/0x170 [ 202.983611][ T5891] worker_thread+0xaa6/0x1290 [ 202.988387][ T5891] kthread+0x436/0x520 [ 202.992549][ T5891] ? rcu_lock_release+0x20/0x20 [ 202.997444][ T5891] ? kthread_blkcg+0xd0/0xd0 [ 203.002118][ T5891] ret_from_fork+0x1f/0x30 [ 203.006593][ T5891] [ 203.009664][ T5891] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 203.016981][ T5891] CPU: 0 PID: 5891 Comm: kworker/0:15 Not tainted syzkaller #0 [ 203.024558][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 203.025075][ T7636] REISERFS (device loop0): Using tea hash to sort names [ 203.034768][ T5891] Workqueue: mld mld_ifc_work [ 203.034801][ T5891] Call Trace: [ 203.034811][ T5891] [ 203.034819][ T5891] dump_stack_lvl+0x188/0x250 [ 203.034848][ T5891] ? show_regs_print_info+0x20/0x20 [ 203.062632][ T5891] ? load_image+0x400/0x400 [ 203.067197][ T5891] panic+0x2e5/0x810 [ 203.071149][ T5891] ? bpf_jit_dump+0xd0/0xd0 [ 203.075697][ T5891] ? ret_from_fork+0x1f/0x30 [ 203.079579][ T4229] usb 3-1: not running at top speed; connect to a high speed hub [ 203.080323][ T5891] ? __rate_control_send_low+0x630/0x880 [ 203.093698][ T5891] __warn+0x248/0x2b0 [ 203.097720][ T5891] ? __rate_control_send_low+0x630/0x880 [ 203.103397][ T5891] report_bug+0x1b7/0x2e0 [ 203.107780][ T5891] handle_bug+0x3a/0x70 [ 203.110388][ T7636] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 203.111973][ T5891] exc_invalid_op+0x16/0x40 [ 203.112001][ T5891] asm_exc_invalid_op+0x16/0x20 [ 203.112023][ T5891] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 203.112053][ T5891] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 80 86 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 80 f1 69 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 203.112072][ T5891] RSP: 0018:ffffc900033f6b28 EFLAGS: 00010246 [ 203.112092][ T5891] RAX: 9c733fc69521b600 RBX: 000000000000000c RCX: ffff888027943b80 [ 203.112109][ T5891] RDX: 0000000000000000 RSI: 0000000000000402 RDI: 0000000000000000 [ 203.112122][ T5891] RBP: 0000000000000084 R08: ffffc900033f6647 R09: 1ffff9200067ecc8 [ 203.112138][ T5891] R10: dffffc0000000000 R11: fffff5200067ecc9 R12: ffff8880273793e8 [ 203.112155][ T5891] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 203.112190][ T5891] ? __rate_control_send_low+0x630/0x880 [ 203.112230][ T5891] rate_control_send_low+0x194/0x790 [ 203.112261][ T5891] rate_control_get_rate+0x207/0x5c0 [ 203.112297][ T5891] ieee80211_tx_h_rate_ctrl+0xb02/0x1700 [ 203.112341][ T5891] ? ieee80211_tx_h_select_key+0x17f0/0x17f0 [ 203.230684][ T5891] ? ieee80211_queue_skb+0xbc/0x2060 [ 203.236020][ T5891] invoke_tx_handlers_late+0xaa/0x16a0 [ 203.241533][ T5891] ? ieee80211_tx_h_select_key+0x8dc/0x17f0 [ 203.247484][ T5891] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 203.253352][ T5891] ieee80211_tx+0x2d4/0x460 [ 203.257908][ T5891] ? ieee80211_skb_resize+0x630/0x630 [ 203.263373][ T5891] __ieee80211_subif_start_xmit+0x1036/0x3290 [ 203.269494][ T5891] ? unwind_next_frame+0x1548/0x1d90 [ 203.274834][ T5891] ? ret_from_fork+0x1f/0x30 [ 203.279473][ T5891] ? mark_lock+0x94/0x320 [ 203.283845][ T5891] ? __lock_acquire+0x13bc/0x7d10 [ 203.288925][ T5891] ? mark_lock+0x94/0x320 [ 203.293314][ T5891] ? ieee80211_txq_schedule_start+0xa0/0xa0 [ 203.299262][ T5891] ? __lock_acquire+0x12e8/0x7d10 [ 203.304351][ T5891] ? verify_lock_unused+0x140/0x140 [ 203.309608][ T5891] ? skb_network_protocol+0x51d/0x770 [ 203.315023][ T5891] ? validate_xmit_xfrm+0xb2/0x1010 [ 203.320274][ T5891] ieee80211_subif_start_xmit+0xed/0x5d0 [ 203.325955][ T5891] ? ieee80211_build_hdr+0x23c0/0x23c0 [ 203.331463][ T5891] ? netif_skb_features+0x833/0xbc0 [ 203.336723][ T5891] dev_hard_start_xmit+0x2a5/0x7e0 [ 203.341899][ T5891] sch_direct_xmit+0x25a/0x4b0 [ 203.346712][ T5891] ? mrp_pdu_append_vecattr_event+0x1590/0x1590 [ 203.352995][ T5891] ? ieee80211_stop+0x190/0x190 [ 203.357903][ T5891] __dev_queue_xmit+0x179f/0x2f80 [ 203.362979][ T5891] ? lockdep_hardirqs_on+0x94/0x140 [ 203.368223][ T5891] ? dev_queue_xmit+0x20/0x20 [ 203.372936][ T5891] ? eth_header+0x117/0x200 [ 203.377478][ T5891] ? llc_sysctl_exit+0x60/0x60 [ 203.382282][ T5891] ? neigh_resolve_output+0x5d7/0x6a0 [ 203.387720][ T5891] ip6_finish_output2+0x108c/0x1510 [ 203.392970][ T5891] ? nf_hook+0x360/0x360 [ 203.397259][ T5891] ? ip6_finish_output+0x64c/0x7d0 [ 203.402433][ T5891] NF_HOOK+0x163/0x460 [ 203.406561][ T5891] ? mld_send_report+0x2e0/0x2e0 [ 203.411547][ T5891] ? NF_HOOK+0x460/0x460 [ 203.415837][ T5891] ? icmp6_dst_alloc+0x41c/0x4a0 [ 203.420831][ T5891] mld_sendpack+0x6f2/0xc00 [ 203.425368][ T5891] ? add_grhead+0xe3/0x240 [ 203.429845][ T5891] ? add_grec+0x15d0/0x15d0 [ 203.434418][ T5891] mld_ifc_work+0x836/0xb40 [ 203.438966][ T5891] ? _raw_spin_unlock_irq+0x1f/0x40 [ 203.444218][ T5891] process_one_work+0x85f/0x1010 [ 203.449400][ T5891] ? worker_detach_from_pool+0x240/0x240 [ 203.455082][ T5891] ? lockdep_hardirqs_off+0x70/0x100 [ 203.460428][ T5891] ? _raw_spin_lock_irq+0xb7/0xf0 [ 203.465589][ T5891] ? _raw_spin_lock_irqsave+0x100/0x100 [ 203.471187][ T5891] ? wq_worker_running+0x97/0x170 [ 203.476378][ T5891] worker_thread+0xaa6/0x1290 [ 203.481140][ T5891] kthread+0x436/0x520 [ 203.485248][ T5891] ? rcu_lock_release+0x20/0x20 [ 203.490135][ T5891] ? kthread_blkcg+0xd0/0xd0 [ 203.494764][ T5891] ret_from_fork+0x1f/0x30 [ 203.499240][ T5891] [ 203.502524][ T5891] Kernel Offset: disabled [ 203.507236][ T5891] Rebooting in 86400 seconds..