last executing test programs: 6.621975952s ago: executing program 3 (id=1128): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x10800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}}}]}, 0x40}}, 0x4000080) 5.977062831s ago: executing program 3 (id=1135): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 3.716005855s ago: executing program 3 (id=1156): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0xfffffff9, 0x7, 0xfb2c, 0x10405, 0x4, "008ef1ffa278887cb0baba0000000000000008"}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000020c0)={0x18, {"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", 0x1000}}, 0x1006) 3.614239436s ago: executing program 3 (id=1157): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 3.510165338s ago: executing program 4 (id=1158): r0 = syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000080)='./file0\x00', 0x204818, &(0x7f0000000000)=ANY=[@ANYBLOB='utf8,check=strict,cruft,map=off,unhide,iocharset=euc-jp,map=normal,mode=0x0000000000020483,\x00'], 0x1, 0x551, &(0x7f00000003c0)="$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") r1 = epoll_create(0x90) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x4}) epoll_pwait(r1, &(0x7f0000003a80)=[{}], 0x1, 0x6, 0x0, 0x0) 3.057444555s ago: executing program 4 (id=1162): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, 0x0) 2.69600656s ago: executing program 3 (id=1166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x300, {0x1}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 2.571028592s ago: executing program 3 (id=1169): pipe2(0x0, 0x800) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000400)={&(0x7f0000000700)=[{0x4, 0x8c01, 0x45, &(0x7f0000000440)="253ae1ff09423e082b90f40900000000000000fae52c8745ffb6c9b07820ba0a7da757dc4f648ed7aed50713c965c3404a3169b921fe2c0b93c0e66e21421bd29fcb0c911a"}], 0x1}) 1.922094841s ago: executing program 0 (id=1186): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80940, 0xd2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r1, 0x2) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.600045886s ago: executing program 1 (id=1191): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) copy_file_range(r0, 0x0, r1, &(0x7f0000000640)=0x8800000, 0x20000009, 0x0) 1.599940826s ago: executing program 1 (id=1192): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x8000}, 0x90) 1.558128437s ago: executing program 1 (id=1193): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.456438938s ago: executing program 1 (id=1194): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@block_validity}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}, {@jqfmt_vfsold}, {@min_batch_time}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) rename(&(0x7f0000000200)='./file3\x00', &(0x7f0000000240)='./file1\x00') setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) 1.229861222s ago: executing program 4 (id=1199): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) close(r2) 1.113552833s ago: executing program 1 (id=1201): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x2210448, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1de, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x60840, 0x8) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.110497153s ago: executing program 4 (id=1202): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000002c0)={0x0, 0x9, 0xd, 0x1, 0xfffffffa}) 1.007950855s ago: executing program 0 (id=1204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 968.389455ms ago: executing program 4 (id=1206): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000001540)=ANY=[@ANYBLOB='codepage=855,uni_xlate=0,quiet,shortname=win95,uni_xlate=1,shortname=mixed,iocharset=cp1250,uni_xlate=0,shortname=winnt,uni_xlate=1,iocharset=macinuit,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=iso8859-3,\x00'], 0x2a, 0x35f, &(0x7f0000001740)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 909.647347ms ago: executing program 0 (id=1207): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) r1 = accept4(r0, 0x0, 0x0, 0x80800) write(r1, 0x0, 0x0) 798.212628ms ago: executing program 0 (id=1209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={{{}, {}, @device_b}, @addba_req={0x3, 0x0, {0x8, {0x0, 0x1, 0x4, 0x9}, 0xed6, {0x5, 0x4}}}}}]}, 0x44}}, 0x40010) 710.81108ms ago: executing program 2 (id=1210): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) 686.54696ms ago: executing program 0 (id=1211): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x800818, &(0x7f00000004c0)=ANY=[], 0x3, 0x2d6, &(0x7f00000005c0)="$eJzs3b1PFE8cx/HP7N3B8YPwWx4MiSVKYmUUG2ODIfwRFmpU7kwIF0wUE7Ui1sbYaeztrI2NpY0V0dqHyso/4Lo1Ozt7LLC7twccE/D9Su6yx8539ju3TzOXLCMA/6zllZ/vrvyOX0aqqSbpmhRIakp1SWc013y8sbm22Wm3yiqq2Yj4ZZREmn1lVjfaeaFxnI1wwvhTXRPZv2E4oiiKfn2rlZf5/9jSgSf27M8RSKPu7LTrm8ee2XBs+U7AM9PViJ5o0nceAAC/3P0/cPf5Cdd/DwJpwd32T9X9v+s7Ac9MV113/7ejrMjE+9d29M3OeM8O4epjktJRYkmNhWtGlBxZuzqYpt+o0uYSjN1f67Qvrj7otAI915KTKTZr31vJoZvqk+18SbI5+re9iG1x0IjbsFiQ/8xBtvh68FR6zBezbW6bUG/V6vX/6pH9RuyeCm3eYS8gyf9ScY3jtlpjSxW0cspu5Kzbgj6+r9DKZv6IpJfnlHb/QBCmeb4aKYma3hOVtO5yXvkfE72omdyoxaL8XNRsNspdOd3RXBx5cAXN3sO8NDfMvP7og1Yy/f8g/rYXVOXMjMvYku7IKGlPelKGFRILKqWPqhqla1/onq5q8tHTZ+t3O532w6oLn74PUPioF2qHCU9bPoTEotGk6mG1vT60mrML6QHjaeeejIX4gn74elS8aqtaPTWNaj29Zg6jpUnN+R2lsSO5QMG/zOVx7qbvZOBDfA0xyfjP9uSTXt11uy4+/UPbT28or58e9avc1vjm1nYyfMiMDXY6q9P2/b+BRnDjxSO4TBtKx1znLkjn7cdG7hY/7642dHmeEmZFX3WH3/8BAAAAAAAAAAAAAAAAAABOmmrPA7jHWw74ZIjnJgIAAAAAAAAAAAAAAAAAAAAAcOKVzf9r58jsM/9v+mRA8fy/mf/q3X/+36XltPj++X/LJ6kFMLC/AQAA///jE3LA") r0 = open(&(0x7f0000000240)='./bus\x00', 0x145942, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 613.816361ms ago: executing program 2 (id=1212): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="7cfe29ee8cd5c3f53e9ebf03f7d940fd0826df033eae3a60393b20594d64e5c7f1def652", 0x24}, {&(0x7f0000000180)="639aea4ffa762cf8e78ceadc", 0xc}], 0x2}, 0x40) 435.521334ms ago: executing program 2 (id=1213): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000001300)="86", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x9, 0x10}, 0x8) 424.971194ms ago: executing program 2 (id=1214): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000740)=""/180, 0xb4}], 0x1, 0x33, 0x800) 367.998645ms ago: executing program 2 (id=1215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000240)={0x5, 0x0, [{0x2, 0x0, 0x0, 0x8, 0x0, 0x2}, {0x0, 0x6, 0x6}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x80000001, 0xffffffff, 0x7, 0x1008, 0x5, 0x110, 0x3}, {0x80000000, 0x5dd3, 0x6, 0x6, 0xe231, 0x1, 0xffffffff}]}) 346.203875ms ago: executing program 0 (id=1216): accept$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000003ec0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x0, 0x20, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0x8, 0x7, {0x7, 0x25, 0x1, 0xc, 0x5, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xfa, 0x8, 0xfb, {0x7, 0x25, 0x1, 0x8, 0x6, 0x400}}}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 29.45396ms ago: executing program 2 (id=1217): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000140)={0x2}) 5.29368ms ago: executing program 1 (id=1218): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1400000000000000290000000b000000000006b3000000001400000000000000290000000b000000ff"], 0x30}, 0x0) 0s ago: executing program 4 (id=1219): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100003d2ab420720c0d009b27010203010902120001000000000904"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000200)={0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): =0, Product=0, SerialNumber=0 [ 84.335354][ T4237] usb 1-1: config 0 descriptor?? [ 84.344763][ T5006] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.351958][ T5006] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.502607][ T5015] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 84.820420][ T5031] loop3: detected capacity change from 0 to 2048 [ 84.901264][ T5031] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.932681][ T5041] loop1: detected capacity change from 0 to 256 [ 85.090458][ T5049] loop4: detected capacity change from 0 to 2048 [ 85.226058][ T5049] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,max_dir_size_kb=0x0000000000000004,grpjquota=,. Quota mode: writeback. [ 85.335297][ T5049] EXT4-fs error (device loop4): ext4_find_extent:929: inode #2: comm syz.4.303: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 85.352698][ T5049] EXT4-fs (loop4): Remounting filesystem read-only [ 85.375955][ T5049] EXT4-fs error (device loop4): ext4_ext_precache:608: inode #2: comm syz.4.303: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 85.380473][ T5067] process 'syz.3.311' launched './file2' with NULL argv: empty string added [ 85.393893][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.415997][ T1325] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 85.515013][ T5049] EXT4-fs (loop4): Remounting filesystem read-only [ 85.576682][ T5061] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 85.614452][ T5061] EXT4-fs (loop4): Remounting filesystem read-only [ 85.776629][ T1325] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 85.799141][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.834799][ T1325] usb 3-1: config 0 descriptor?? [ 86.018282][ T5093] loop9: detected capacity change from 0 to 7 [ 86.031776][ T4699] Dev loop9: unable to read RDB block 7 [ 86.051787][ T4699] loop9: unable to read partition table [ 86.091356][ T1269] loop: Write error at byte offset 1, length 3584. [ 86.092378][ T4699] loop9: partition table beyond EOD, truncated [ 86.132596][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 86.144320][ C0] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 86.163824][ T5093] Dev loop9: unable to read RDB block 7 [ 86.170672][ T5093] loop9: unable to read partition table [ 86.184347][ T5093] loop9: partition table beyond EOD, truncated [ 86.195046][ T5093] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 86.285627][ T5102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'. [ 86.315287][ T1325] hackrf 3-1:0.0: Board ID: 00 [ 86.320095][ T1325] hackrf 3-1:0.0: Firmware version: [ 86.350595][ T1325] hackrf 3-1:0.0: Registered as swradio24 [ 86.358731][ T1325] hackrf 3-1:0.0: Registered as swradio25 [ 86.364713][ T1325] hackrf 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 86.518918][ T1325] usb 3-1: USB disconnect, device number 4 [ 86.563564][ T5110] loop3: detected capacity change from 0 to 512 [ 86.632576][ T5110] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.665215][ T4237] usbhid 1-1:0.0: can't add hid device: -71 [ 86.672656][ T4237] usbhid: probe of 1-1:0.0 failed with error -71 [ 86.685161][ T4237] usb 1-1: USB disconnect, device number 5 [ 86.725819][ T5110] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.778376][ T5110] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.328: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 86.819842][ T5110] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 12: comm syz.3.328: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 86.848267][ T5110] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz.3.328: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 86.875497][ T5110] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 14: comm syz.3.328: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 86.903447][ T5110] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 15: comm syz.3.328: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 86.943259][ T5125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.331'. [ 86.956465][ T5110] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz.3.328: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 86.984976][ T5125] netlink: 32 bytes leftover after parsing attributes in process `syz.0.331'. [ 87.011106][ T5110] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 17: comm syz.3.328: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 87.036785][ T5129] device ipvlan0 entered promiscuous mode [ 87.070108][ T5110] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 18: comm syz.3.328: lblock 23 mapped to illegal pblock 18 (length 1) [ 87.095968][ T5129] device ipvlan0 left promiscuous mode [ 87.123464][ T5110] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 19: comm syz.3.328: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=2, size=2048 fake=0 [ 87.176380][ T5110] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 20: comm syz.3.328: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 87.238550][ T5146] loop0: detected capacity change from 0 to 512 [ 87.392041][ T5146] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.338: missing EA_INODE flag [ 87.450342][ T5146] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.338: error while reading EA inode 12 err=-117 [ 87.474026][ T5146] EXT4-fs (loop0): 1 orphan inode deleted [ 87.479974][ T5146] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 87.585216][ T1325] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 87.791829][ T5163] loop3: detected capacity change from 0 to 256 [ 87.825068][ T1325] usb 3-1: Using ep0 maxpacket: 32 [ 87.945270][ T1325] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 87.953665][ T1325] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 88.012840][ T1325] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 88.049975][ T1325] usb 3-1: config 1 has no interface number 0 [ 88.062422][ T1325] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.120825][ T1325] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 88.167377][ T1325] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 88.191869][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.270049][ T1325] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 88.469911][ T5195] loop4: detected capacity change from 0 to 256 [ 88.479265][ T1325] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 88.516294][ T4234] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.790279][ T5202] loop4: detected capacity change from 0 to 512 [ 88.885332][ T4234] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.913570][ T4234] usb 4-1: config 0 interface 0 has no altsetting 0 [ 88.925158][ T5202] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2826c018, mo2=0002] [ 88.928277][ T4234] usb 4-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 88.948939][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.957361][ T5202] System zones: 1-12 [ 88.964152][ T5202] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.353: corrupted inode contents [ 88.971314][ T4234] usb 4-1: config 0 descriptor?? [ 89.059976][ T5202] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 89.088034][ T5202] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.353: corrupted inode contents [ 89.129322][ T5202] EXT4-fs error (device loop4): ext4_evict_inode:332: inode #15: comm syz.4.353: mark_inode_dirty error [ 89.161361][ T5202] EXT4-fs (loop4): 1 orphan inode deleted [ 89.176251][ T5202] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,debug,debug_want_extra_isize=0x0000000000000006,noinit_itable,prjquota,,errors=continue. Quota mode: writeback. [ 89.286822][ T5206] loop0: detected capacity change from 0 to 8192 [ 89.294533][ T5202] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5893: inode #18: comm syz.4.353: bad extra_isize 6 (inode size 256) [ 89.315184][ T4234] usbhid 4-1:0.0: can't add hid device: -71 [ 89.321311][ T4234] usbhid: probe of 4-1:0.0 failed with error -71 [ 89.350467][ T4234] usb 4-1: USB disconnect, device number 3 [ 89.364793][ T5206] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 89.403091][ T5206] REISERFS (device loop0): using ordered data mode [ 89.412014][ T5206] reiserfs: using flush barriers [ 89.439659][ T5200] loop1: detected capacity change from 0 to 32768 [ 89.446328][ T5206] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 89.463636][ T5206] REISERFS (device loop0): checking transaction log (loop0) [ 89.485125][ T5206] REISERFS (device loop0): Using r5 hash to sort names [ 89.492811][ T5206] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 89.509337][ T4237] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 89.535014][ T5206] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 89.642928][ T5210] tipc: Started in network mode [ 89.645059][ T5206] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 89.662571][ T5210] tipc: Node identity ac14140f, cluster identity 4711 [ 89.663189][ T5210] tipc: New replicast peer: 172.20.20.187 [ 89.691722][ T5210] tipc: Enabled bearer , priority 10 [ 89.719979][ T5206] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 89.764089][ T5206] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 90.184268][ T5216] loop3: detected capacity change from 0 to 512 [ 90.192911][ T21] usb 3-1: USB disconnect, device number 5 [ 90.215889][ T21] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 90.312908][ T5216] EXT4-fs (loop3): 1 truncate cleaned up [ 90.355518][ T5216] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 90.392674][ T5221] 9pnet: Insufficient options for proto=fd [ 90.418854][ T5214] loop4: detected capacity change from 0 to 32768 [ 90.456442][ T5216] autofs4:pid:5216:autofs_fill_super: pipe file descriptor does not contain proper ops [ 90.609716][ T5214] XFS (loop4): Mounting V5 Filesystem [ 90.702253][ T21] tipc: Node number set to 2886997007 [ 90.734263][ T5243] loop1: detected capacity change from 0 to 64 [ 90.812032][ T5214] XFS (loop4): Ending clean mount [ 91.015455][ T5250] input: syz1 as /devices/virtual/input/input10 [ 91.041134][ T4191] hfs: request for non-existent node 131072 in B*Tree [ 91.186606][ T5214] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 91.256152][ T5214] XFS (loop4): Unmount and run xfs_repair [ 91.262550][ T5254] netlink: 296 bytes leftover after parsing attributes in process `syz.0.373'. [ 91.312655][ T5214] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 91.380341][ T5214] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 91.415521][ T5238] loop3: detected capacity change from 0 to 32768 [ 91.445126][ T5214] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 91.503445][ T5214] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 91.508108][ T5253] loop1: detected capacity change from 0 to 32768 [ 91.535249][ T5214] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 91.544145][ T5214] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 91.562726][ T5214] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 91.564453][ T5238] XFS (loop3): Mounting V5 Filesystem [ 91.578291][ T5253] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 91.586677][ T5253] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 91.602944][ T5214] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 91.666589][ T5214] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 91.739839][ T5238] XFS (loop3): Ending clean mount [ 91.758272][ T5214] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74 [ 91.802113][ T5238] XFS (loop3): Quotacheck needed: Please wait. [ 91.836985][ T5253] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 91.846958][ T5214] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 91.849060][ T21] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 91.889011][ T21] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 91.896240][ T5247] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 91.896436][ T5214] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 91.903983][ T5247] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 92.045444][ T4199] XFS (loop4): Unmounting Filesystem [ 92.060701][ T21] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 171ms [ 92.067364][ T5238] XFS (loop3): Quotacheck: Done. [ 92.109426][ T5247] F2FS-fs (loop2): Found nat_bits in checkpoint [ 92.118491][ T21] gfs2: fsid=syz:syz.0: jid=0: Done [ 92.154199][ T5253] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 92.319771][ T5247] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 92.355146][ T5247] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 92.621615][ T4196] XFS (loop3): Unmounting Filesystem [ 93.056249][ T5266] set_capacity_and_notify: 1 callbacks suppressed [ 93.056263][ T5266] loop0: detected capacity change from 0 to 32768 [ 93.070035][ T5278] loop4: detected capacity change from 0 to 2048 [ 93.105110][ T5278] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.555322][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.625970][ T5289] loop0: detected capacity change from 0 to 2048 [ 93.692249][ T5289] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.734701][ T25] audit: type=1800 audit(1782365976.543:3): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.382" name="file2" dev="loop0" ino=1347 res=0 errno=0 [ 93.825123][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 93.877637][ T5302] loop3: detected capacity change from 0 to 65 [ 93.971060][ T21] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 93.972356][ T5307] loop2: detected capacity change from 0 to 512 [ 93.986170][ T21] usb 2-1: config 0 has no interface number 0 [ 94.010033][ T5302] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 94.014969][ T21] usb 2-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 94.077480][ T21] usb 2-1: config 0 interface 1 has no altsetting 0 [ 94.183310][ T5307] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.204694][ T5307] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.296946][ T21] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 94.339113][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.404956][ T21] usb 2-1: Product: syz [ 94.409315][ T21] usb 2-1: Manufacturer: syz [ 94.413911][ T21] usb 2-1: SerialNumber: syz [ 94.445797][ T21] usb 2-1: config 0 descriptor?? [ 94.719434][ T5327] loop3: detected capacity change from 0 to 8192 [ 94.757247][ T5309] loop4: detected capacity change from 0 to 32768 [ 94.790556][ T5333] loop2: detected capacity change from 0 to 1024 [ 94.831457][ T5309] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.390 (5309) [ 94.893660][ T5309] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 94.925042][ T5309] BTRFS info (device loop4): force zlib compression, level 3 [ 94.932474][ T5309] BTRFS info (device loop4): turning on flush-on-commit [ 94.981316][ T21] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 94.991709][ T5309] BTRFS info (device loop4): max_inline at 4096 [ 95.035380][ T21] cx231xx 2-1:0.1: Failed to read PCB config [ 95.041694][ T5309] BTRFS info (device loop4): using free space tree [ 95.061981][ T21] cx231xx: probe of 2-1:0.1 failed with error -71 [ 95.120799][ T5309] BTRFS info (device loop4): has skinny extents [ 95.127472][ T21] usb 2-1: USB disconnect, device number 4 [ 95.487644][ T5309] BTRFS info (device loop4): enabling ssd optimizations [ 95.592884][ T5340] loop0: detected capacity change from 0 to 32768 [ 95.612753][ T5372] loop2: detected capacity change from 0 to 512 [ 95.724800][ T5340] XFS (loop0): Mounting V5 Filesystem [ 95.767920][ T5372] EXT4-fs (loop2): Ignoring removed orlov option [ 95.857779][ T5372] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,init_itable,sysvgroups,orlov,. Quota mode: writeback. [ 95.875315][ T5372] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.967741][ T5340] XFS (loop0): Ending clean mount [ 95.981528][ T5389] exFAT-fs (loop1): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 96.033352][ T5340] XFS (loop0): Quotacheck needed: Please wait. [ 96.079173][ T5389] handle_bad_sector: 1405 callbacks suppressed [ 96.079189][ T5389] attempt to access beyond end of device [ 96.079189][ T5389] loop1: rw=524288, want=4281, limit=256 [ 96.095404][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.130659][ T5389] attempt to access beyond end of device [ 96.130659][ T5389] loop1: rw=0, want=4281, limit=256 [ 96.156708][ T5397] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 96.167845][ T5340] XFS (loop0): Quotacheck: Done. [ 96.202729][ T5396] exFAT-fs (loop1): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 96.265150][ T5397] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 96.300075][ T25] audit: type=1800 audit(1782365979.113:4): pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.410" name="file1" dev="loop1" ino=1048594 res=0 errno=0 [ 96.300199][ T5396] exFAT-fs (loop1): Filesystem has been set read-only [ 96.462528][ T5402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'. [ 96.476600][ T4192] XFS (loop0): Unmounting Filesystem [ 96.539759][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.580826][ T5404] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 96.597052][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.630579][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.649488][ T21] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.663756][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.694810][ T21] usb 4-1: config 0 descriptor?? [ 96.758461][ T5404] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 96.768094][ T5406] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.177383][ T21] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 97.247226][ T21] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 97.337675][ T5424] program syz.2.426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.380448][ T21] usb 4-1: USB disconnect, device number 4 [ 97.454787][ T5425] fido_id[5425]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 97.523870][ T5431] vxcan0: tx address claim with dest, not broadcast [ 97.612853][ T5435] mkiss: ax0: crc mode is auto. [ 97.699915][ T5442] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.749803][ T5442] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.791923][ T5442] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.834112][ T5442] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.432: Invalid block bitmap block 0 in block_group 0 [ 97.871097][ T5442] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 97.928023][ T5442] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.432: attempt to clear invalid blocks 983261 len 1 [ 98.054653][ T5442] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.432: Invalid inode table block 0 in block_group 0 [ 98.072565][ T5451] set_capacity_and_notify: 4 callbacks suppressed [ 98.072578][ T5451] loop2: detected capacity change from 0 to 2048 [ 98.115981][ T5442] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 98.156896][ T5442] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 98.204048][ T5457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 98.221781][ T5442] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.432: Invalid inode table block 0 in block_group 0 [ 98.250470][ T5451] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 98.282895][ T5451] System zones: 0-7 [ 98.334362][ T5451] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,nodioread_nolock,barrier=0x0000000000000007,debug,nojournal_checksum,min_batch_time=0x000000000000c619,errors=remount-ro,. Quota mode: none. [ 98.369704][ T5457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.400355][ T5442] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 98.445262][ T5457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.475055][ T5442] EXT4-fs error (device loop1): ext4_truncate:4286: inode #11: comm syz.1.432: mark_inode_dirty error [ 98.498837][ T5457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.521421][ T5442] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 98.562917][ T5451] EXT4-fs error (device loop2): ext4_find_extent:929: inode #2: comm syz.2.437: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 98.564467][ T5469] loop0: detected capacity change from 0 to 64 [ 98.581312][ T5442] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.432: Invalid inode table block 0 in block_group 0 [ 98.615008][ T5457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.624872][ T5457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.642895][ T5442] EXT4-fs (loop1): 1 truncate cleaned up [ 98.648864][ T5451] EXT4-fs (loop2): Remounting filesystem read-only [ 98.660932][ T5442] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,nojournal_checksum,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 98.678600][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.693550][ T5451] EXT4-fs error (device loop2): ext4_find_extent:929: inode #2: comm syz.2.437: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 98.711931][ T5457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.722293][ T5457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.733490][ T5451] EXT4-fs (loop2): Remounting filesystem read-only [ 98.745423][ T5457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.782220][ T5442] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.432: Invalid inode table block 0 in block_group 0 [ 98.807058][ T5471] loop4: detected capacity change from 0 to 4096 [ 98.808672][ T5457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.833456][ T5442] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 98.851363][ T5457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.853304][ T5442] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #2: comm syz.1.432: mark_inode_dirty error [ 98.866779][ T5457] batman_adv: batadv0: Adding interface: ipvlan2 [ 98.881656][ T5457] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.907947][ T5457] batman_adv: batadv0: Interface activated: ipvlan2 [ 98.965088][ T4245] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 99.037280][ T5478] loop2: detected capacity change from 0 to 512 [ 99.171538][ T5478] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 99.209972][ T5478] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.446: bad orphan inode 131083 [ 99.231198][ T5485] loop1: detected capacity change from 0 to 128 [ 99.272174][ T4199] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 99.325233][ T26] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 99.337542][ T5478] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 99.355533][ T4199] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 99.528121][ T5494] loop3: detected capacity change from 0 to 512 [ 99.595714][ T5494] EXT4-fs (loop3): Ignoring removed bh option [ 99.681215][ T5498] sctp: [Deprecated]: syz.2.454 (pid 5498) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.681215][ T5498] Use struct sctp_sack_info instead [ 99.735754][ T26] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 99.744738][ T26] usb 1-1: config 0 has no interface number 0 [ 99.752435][ T5494] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 99.844230][ T5494] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.935389][ T26] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 99.959513][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.986530][ T26] usb 1-1: Product: syz [ 99.990815][ T26] usb 1-1: Manufacturer: syz [ 100.020929][ T26] usb 1-1: SerialNumber: syz [ 100.031861][ T5492] loop4: detected capacity change from 0 to 32768 [ 100.038263][ T5511] loop1: detected capacity change from 0 to 164 [ 100.046182][ T26] usb 1-1: config 0 descriptor?? [ 100.195172][ T4234] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 100.296691][ T5519] loop4: detected capacity change from 0 to 1024 [ 100.337003][ T26] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 100.346598][ T26] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 100.354473][ T26] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 100.362822][ T26] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 100.387716][ T26] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 100.430891][ T5522] loop1: detected capacity change from 0 to 512 [ 100.445074][ T4234] usb 3-1: Using ep0 maxpacket: 32 [ 100.459517][ T5519] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 100.477720][ T5519] System zones: 0-1, 3-12 [ 100.492120][ T5528] team0: No ports can be present during mode change [ 100.507841][ T5522] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 100.509061][ T5519] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,stripe=0x0000000000000fdc,debug,resgid=0x0000000000000000,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 100.544477][ T5522] EXT4-fs (loop1): invalid journal inode [ 100.550345][ T5522] EXT4-fs (loop1): can't get journal size [ 100.572084][ T5519] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 100.580065][ T4234] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 100.593103][ T5522] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 100.619866][ T5522] System zones: 1-12, 13-13 [ 100.629361][ T5522] EXT4-fs (loop1): 1 truncate cleaned up [ 100.635095][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.639743][ T4234] usb 3-1: config 0 descriptor?? [ 100.643785][ T5522] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue. Quota mode: writeback. [ 100.672319][ T25] audit: type=1800 audit(1782365983.483:5): pid=5522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.465" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 100.708230][ T4199] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 100.736990][ T5531] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.737024][ T4234] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 101.045790][ T26] usb 1-1: USB disconnect, device number 6 [ 101.095220][ T26] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 101.131171][ T26] keyspan 1-1:0.133: device disconnected [ 101.362796][ T5536] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 101.380779][ T5536] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 101.389569][ T4234] gspca_nw80x: reg_w err -71 [ 101.395297][ T4234] nw80x: probe of 3-1:0.0 failed with error -71 [ 101.422749][ T4234] usb 3-1: USB disconnect, device number 6 [ 101.438695][ T5536] F2FS-fs (loop1): invalid crc value [ 101.476373][ T4235] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 101.498103][ T5536] F2FS-fs (loop1): Found nat_bits in checkpoint [ 101.583046][ T5536] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 101.594798][ T5536] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 101.682261][ T5536] attempt to access beyond end of device [ 101.682261][ T5536] loop1: rw=2049, want=53384, limit=40427 [ 101.759359][ T4235] usb 4-1: Using ep0 maxpacket: 8 [ 101.801620][ T4191] attempt to access beyond end of device [ 101.801620][ T4191] loop1: rw=2049, want=45104, limit=40427 [ 101.925510][ T4235] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 101.935353][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.964249][ T4235] usb 4-1: config 0 descriptor?? [ 102.009177][ T4235] gm12u320 4-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 102.034065][ T4235] gm12u320: probe of 4-1:0.0 failed with error -5 [ 102.058298][ T4235] usb-storage 4-1:0.0: USB Mass Storage device detected [ 102.075540][ T4235] usb-storage 4-1:0.0: device ignored [ 102.210430][ T4235] usb 4-1: USB disconnect, device number 5 [ 102.293741][ T5594] tap0: tun_chr_ioctl cmd 1074812118 [ 102.615308][ T5611] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 102.622387][ T5611] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 102.667473][ T5611] vhci_hcd vhci_hcd.0: Device attached [ 102.687584][ T5621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.506'. [ 102.793652][ T5627] program syz.2.508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.875145][ T4235] vhci_hcd: vhci_device speed not set [ 102.904511][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'. [ 102.945294][ T4287] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 102.955194][ T4235] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 102.992347][ T5638] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 103.019431][ T5645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.518'. [ 103.028870][ T5645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.518'. [ 103.049888][ T5638] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.058109][ T5645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.518'. [ 103.082398][ T5645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.518'. [ 103.097464][ T5639] set_capacity_and_notify: 5 callbacks suppressed [ 103.097477][ T5639] loop1: detected capacity change from 0 to 4096 [ 103.159291][ T5639] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 103.185751][ T4287] usb 5-1: Using ep0 maxpacket: 16 [ 103.229692][ T5639] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 103.325225][ T4287] usb 5-1: config 0 has no interfaces? [ 103.505419][ T4287] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 103.520327][ T4287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.535217][ T4287] usb 5-1: Product: syz [ 103.539949][ T4287] usb 5-1: Manufacturer: syz [ 103.540123][ T5658] block nbd0: server does not support multiple connections per device. [ 103.544650][ T4287] usb 5-1: SerialNumber: syz [ 103.567613][ T4287] usb 5-1: config 0 descriptor?? [ 103.582680][ T5658] block nbd0: shutting down sockets [ 103.902535][ T5678] loop0: detected capacity change from 0 to 1024 [ 103.931274][ T4287] usb 5-1: USB disconnect, device number 6 [ 103.943374][ T5615] vhci_hcd: connection closed [ 103.955540][ T1146] vhci_hcd: stop threads [ 103.966785][ T1146] vhci_hcd: release socket [ 103.976170][ T5684] loop2: detected capacity change from 0 to 736 [ 104.000707][ T1146] vhci_hcd: disconnect device [ 104.015230][ T4235] vhci_hcd: vhci_device speed not set [ 104.078742][ T5678] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 104.099576][ T5678] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.153142][ T5693] loop3: detected capacity change from 0 to 1024 [ 104.201029][ T5695] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 104.401479][ T9] hfsplus: b-tree write err: -5, ino 25 [ 104.423096][ T9] hfsplus: b-tree write err: -5, ino 4 [ 104.478549][ T9] hfsplus: b-tree write err: -5, ino 2 [ 104.510587][ T9] hfsplus: b-tree write err: -5, ino 26 [ 104.530318][ T9] hfsplus: b-tree write err: -5, ino 27 [ 104.553726][ T5709] loop2: detected capacity change from 0 to 1024 [ 104.554049][ T5708] netlink: 16 bytes leftover after parsing attributes in process `syz.4.544'. [ 104.625486][ T4287] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.648850][ T5711] loop4: detected capacity change from 0 to 1024 [ 104.657503][ T5709] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 104.681724][ T5709] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 104.721390][ T5709] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #3: comm syz.2.545: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 104.769217][ T5709] EXT4-fs (loop2): no journal found [ 104.804980][ T5709] EXT4-fs (loop2): can't get journal size [ 104.825330][ T5709] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000008,noinit_itable,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback. [ 105.062894][ T5703] loop0: detected capacity change from 0 to 32768 [ 105.070181][ T4287] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.090435][ T4287] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 105.105898][ T4287] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.121017][ T4287] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 105.132912][ T4287] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 105.167004][ T5703] [ 105.167004][ T5703] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.167004][ T5703] [ 105.275191][ T4287] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.304711][ T4287] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.320377][ T5703] [ 105.320377][ T5703] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.320377][ T5703] [ 105.340930][ T4287] usb 2-1: Product: syz [ 105.351541][ T5703] [ 105.351541][ T5703] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.351541][ T5703] [ 105.368241][ T4287] usb 2-1: Manufacturer: syz [ 105.407295][ T5703] [ 105.407295][ T5703] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.407295][ T5703] [ 105.438654][ T4287] cdc_wdm 2-1:1.0: skipping garbage [ 105.444484][ T4287] cdc_wdm 2-1:1.0: skipping garbage [ 105.445098][ T275] [ 105.445098][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.445098][ T275] [ 105.491255][ T4287] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 105.506743][ T5733] loop3: detected capacity change from 0 to 64 [ 105.513897][ T4287] cdc_wdm 2-1:1.0: Unknown control protocol [ 105.532750][ T4192] [ 105.532750][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.532750][ T4192] [ 105.550748][ T4192] [ 105.550748][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.550748][ T4192] [ 105.596360][ T5733] MINIX-fs: mounting file system with errors, running fsck is recommended [ 105.733225][ T26] usb 2-1: USB disconnect, device number 5 [ 106.466061][ T5737] loop0: detected capacity change from 0 to 32768 [ 106.511783][ T5737] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.557 (5737) [ 106.524499][ T5739] loop3: detected capacity change from 0 to 32768 [ 106.591038][ T5737] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 106.627707][ T5737] BTRFS info (device loop0): using free space tree [ 106.634874][ T5737] BTRFS info (device loop0): has skinny extents [ 106.652345][ T5739] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.559 (5739) [ 106.720550][ T5739] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 106.773033][ T5723] XFS (loop4): Mounting V5 Filesystem [ 106.781872][ T5739] BTRFS info (device loop3): enabling disk space caching [ 106.872591][ T5739] BTRFS info (device loop3): force clearing of disk cache [ 106.938632][ T5739] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 106.956617][ T5723] XFS (loop4): Ending clean mount [ 106.983885][ T5739] BTRFS info (device loop3): use zstd compression, level 3 [ 107.022518][ T5739] BTRFS info (device loop3): disk space caching is enabled [ 107.064188][ T5739] BTRFS info (device loop3): has skinny extents [ 107.085042][ T5737] BTRFS info (device loop0): enabling ssd optimizations [ 107.087132][ T4199] XFS (loop4): Unmounting Filesystem [ 107.132067][ T25] audit: type=1800 audit(1782365989.943:6): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.557" name="file3" dev="loop0" ino=261 res=0 errno=0 [ 107.420659][ T5739] BTRFS info (device loop3): enabling ssd optimizations [ 107.449044][ T5739] BTRFS info (device loop3): clearing free space tree [ 107.475683][ T5739] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 107.517340][ T5814] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 107.553580][ T5739] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 107.775792][ T5814] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 107.818379][ T5814] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 107.860460][ T5814] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 107.910599][ T5814] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 107.980970][ T5775] XFS (loop2): Mounting V5 Filesystem [ 108.046399][ T5814] ntfs: volume version 3.1. [ 108.178524][ T5775] XFS (loop2): Ending clean mount [ 108.234169][ T5814] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 108.305359][ T5814] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 108.518833][ T5775] XFS (loop2): Quotacheck needed: Please wait. [ 108.570933][ T5775] XFS (loop2): Quotacheck: Done. [ 108.692884][ T4190] XFS (loop2): Unmounting Filesystem [ 108.819502][ T5857] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 109.075170][ T4631] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 109.205051][ T4233] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 109.236518][ T5857] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.256892][ T5857] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 109.273313][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.284116][ T5857] usb 5-1: config 0 descriptor?? [ 109.315054][ T4631] usb 4-1: Using ep0 maxpacket: 8 [ 109.344116][ T5857] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 109.439534][ T4631] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.450455][ T4631] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 109.466153][ T4631] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.481636][ T4631] usb 4-1: config 0 descriptor?? [ 109.527298][ T4631] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 109.546130][ T4234] usb 5-1: USB disconnect, device number 7 [ 109.570451][ T5908] set_capacity_and_notify: 3 callbacks suppressed [ 109.570477][ T5908] loop2: detected capacity change from 0 to 512 [ 109.625152][ T4233] usb 2-1: unable to get BOS descriptor or descriptor too short [ 109.636759][ T5908] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 109.649865][ T5908] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.713190][ T4233] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.730179][ T4233] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 109.740805][ T4233] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 109.752611][ T4233] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 109.767096][ T4233] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 109.777956][ T4233] usb 2-1: config 1 interface 1 has no altsetting 0 [ 109.949551][ T5920] tap0: tun_chr_ioctl cmd 2147767520 [ 110.015138][ T4233] usb 2-1: string descriptor 0 read error: -22 [ 110.021454][ T4233] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 110.036833][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.204255][ T5932] loop2: detected capacity change from 0 to 256 [ 110.229553][ T5934] loop4: detected capacity change from 0 to 256 [ 110.405246][ T4631] gspca_vc032x: reg_w err -71 [ 110.410025][ T4631] vc032x: probe of 4-1:0.0 failed with error -71 [ 110.461513][ T5941] loop2: detected capacity change from 0 to 512 [ 110.471607][ T4631] usb 4-1: USB disconnect, device number 6 [ 110.541288][ T5941] EXT4-fs (loop2): 1 truncate cleaned up [ 110.555165][ T5941] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 110.592175][ T5941] autofs4:pid:5941:autofs_fill_super: pipe file descriptor does not contain proper ops [ 110.641411][ T5946] loop0: detected capacity change from 0 to 512 [ 110.649502][ T5944] program syz.4.620 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.742682][ T5946] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 110.795205][ T5946] EXT4-fs (loop0): invalid journal inode [ 110.801004][ T5946] EXT4-fs (loop0): can't get journal size [ 110.820667][ T5946] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 110.855814][ T5946] System zones: 1-12, 13-13 [ 110.868822][ T5946] EXT4-fs (loop0): 1 truncate cleaned up [ 110.874653][ T5946] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue. Quota mode: writeback. [ 110.901241][ T25] audit: type=1800 audit(1782365993.713:7): pid=5946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.629" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 110.954142][ T4234] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 110.962291][ T4233] usb 2-1: USB disconnect, device number 6 [ 110.981093][ T5856] kernel write not supported for file /sequencer (pid: 5856 comm: kworker/1:17) [ 111.101020][ T5962] tipc: Started in network mode [ 111.106292][ T5962] tipc: Node identity ac14140f, cluster identity 4711 [ 111.130599][ T5962] tipc: New replicast peer: 172.20.20.187 [ 111.146201][ T5962] tipc: Enabled bearer , priority 10 [ 111.219941][ T4234] usb 5-1: Using ep0 maxpacket: 16 [ 111.315081][ T5856] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 111.345166][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.358900][ T4234] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.373141][ T4234] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 111.382402][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.391751][ T4234] usb 5-1: config 0 descriptor?? [ 111.516834][ T5975] loop1: detected capacity change from 0 to 1024 [ 111.530666][ T4238] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 111.553279][ T5975] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 111.577314][ T5975] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 111.585107][ T5856] usb 4-1: Using ep0 maxpacket: 32 [ 111.590490][ T5975] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #3: comm syz.1.630: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 111.626983][ T5979] loop2: detected capacity change from 0 to 512 [ 111.633944][ T5975] EXT4-fs (loop1): no journal found [ 111.645694][ T5975] EXT4-fs (loop1): can't get journal size [ 111.652478][ T5975] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000008,noinit_itable,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback. [ 111.753324][ T5979] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 111.769869][ T5856] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 111.780420][ T5856] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 111.800373][ T5856] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 111.812572][ T5856] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 111.826240][ T5856] usb 4-1: config 0 interface 0 has no altsetting 0 [ 111.849080][ T5985] netlink: 6 bytes leftover after parsing attributes in process `syz.1.634'. [ 111.859885][ T5985] netlink: 6 bytes leftover after parsing attributes in process `syz.1.634'. [ 111.990232][ T4238] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.999668][ T4238] usb 1-1: config 0 interface 0 has no altsetting 0 [ 112.035103][ T5856] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 112.044295][ T5856] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 112.053182][ T5856] usb 4-1: Product: syz [ 112.057731][ T5856] usb 4-1: Manufacturer: syz [ 112.062327][ T5856] usb 4-1: SerialNumber: syz [ 112.069088][ T5856] usb 4-1: config 0 descriptor?? [ 112.106568][ T5856] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 112.119392][ T5856] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 112.167005][ T4238] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 112.176383][ T4238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 112.185144][ T4238] usb 1-1: Product: syz [ 112.189352][ T4238] usb 1-1: Manufacturer: syz [ 112.193946][ T4238] usb 1-1: SerialNumber: syz [ 112.199146][ T5856] tipc: Node number set to 2886997007 [ 112.214335][ T4238] usb 1-1: config 0 descriptor?? [ 112.219918][ T5857] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 112.277203][ T4238] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 112.286632][ T4238] pctv452e: pctv452e_power_ctrl: 1 [ 112.286632][ T4238] [ 112.337280][ T4235] usb 4-1: USB disconnect, device number 7 [ 112.349873][ T4235] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 112.505597][ T4238] dvb-usb: bulk message failed: -22 (5/0) [ 112.521879][ T4238] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 112.543427][ T4238] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 112.605404][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.616602][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.626406][ T5857] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.639729][ T5857] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.648871][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.661773][ T5857] usb 2-1: config 0 descriptor?? [ 112.717286][ T4631] usb 1-1: USB disconnect, device number 7 [ 113.157340][ T5857] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 113.192347][ T5857] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 113.209570][ T6010] loop3: detected capacity change from 0 to 4096 [ 113.233159][ T6010] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 113.319299][ T6010] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 113.384471][ T5857] usb 2-1: USB disconnect, device number 7 [ 113.532714][ T6008] loop2: detected capacity change from 0 to 32768 [ 113.621187][ T6008] XFS (loop2): Mounting V5 Filesystem [ 113.815238][ T4234] usbhid 5-1:0.0: can't add hid device: -71 [ 113.821416][ T4234] usbhid: probe of 5-1:0.0 failed with error -71 [ 113.841219][ T4234] usb 5-1: USB disconnect, device number 8 [ 113.862898][ T6008] XFS (loop2): Ending clean mount [ 113.936886][ T6021] loop3: detected capacity change from 0 to 40427 [ 114.004775][ T6021] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 114.010914][ T6008] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 114.022398][ T6021] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 114.072220][ T6021] F2FS-fs (loop3): invalid crc value [ 114.092206][ T6008] XFS (loop2): Unmount and run xfs_repair [ 114.121479][ T6008] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 114.142880][ T6021] F2FS-fs (loop3): Found nat_bits in checkpoint [ 114.149896][ T6008] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 114.215899][ T6008] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 114.279097][ T6008] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 114.322204][ T6021] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 114.322227][ T6008] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 114.322252][ T6008] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 114.339777][ T6021] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 114.434434][ T6008] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 114.451226][ T6057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.663'. [ 114.476459][ T6008] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 114.528437][ T6008] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 114.560648][ T6021] attempt to access beyond end of device [ 114.560648][ T6021] loop3: rw=2049, want=53384, limit=40427 [ 114.595068][ T6008] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74 [ 114.596584][ T25] audit: type=1326 audit(1782365997.403:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.1.665" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc925b5ee59 code=0x0 [ 114.616536][ T6008] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 114.673464][ T6008] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 114.717092][ T4196] attempt to access beyond end of device [ 114.717092][ T4196] loop3: rw=2049, want=45104, limit=40427 [ 114.752061][ T4190] XFS (loop2): Unmounting Filesystem [ 114.867113][ T6049] loop0: detected capacity change from 0 to 32768 [ 114.976936][ T6049] XFS (loop0): Mounting V5 Filesystem [ 115.166179][ T6049] XFS (loop0): Ending clean mount [ 115.234182][ T6085] netlink: 20 bytes leftover after parsing attributes in process `syz.3.673'. [ 115.267541][ T4192] XFS (loop0): Unmounting Filesystem [ 115.519350][ T6091] loop1: detected capacity change from 0 to 512 [ 115.585561][ T6091] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 115.632003][ T6091] EXT4-fs (loop1): 1 truncate cleaned up [ 115.645454][ T6091] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.836243][ T6103] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.676: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 116.149439][ T6119] loop0: detected capacity change from 0 to 256 [ 116.376669][ T6130] loop4: detected capacity change from 0 to 512 [ 116.467667][ T6130] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 116.488334][ T6134] loop0: detected capacity change from 0 to 256 [ 116.519268][ T6130] EXT4-fs (loop4): orphan cleanup on readonly fs [ 116.527352][ T6130] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 116.535533][ T6130] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 116.551603][ T6130] EXT4-fs (loop4): 1 truncate cleaned up [ 116.593195][ T6106] loop2: detected capacity change from 0 to 32768 [ 116.601418][ T6130] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,usrjquota="errors=continue,noload,user_xattr,grpjquota="errors=continue,grpquota,jqfmt=vfsv1,lazytime,,errors=continue. Quota mode: writeback. [ 116.681466][ T6134] FAT-fs (loop0): Directory bread(block 64) failed [ 116.724471][ T6134] FAT-fs (loop0): Directory bread(block 65) failed [ 116.731374][ T6106] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.682 (6106) [ 116.767406][ T6134] FAT-fs (loop0): Directory bread(block 66) failed [ 116.773980][ T6134] FAT-fs (loop0): Directory bread(block 67) failed [ 116.782576][ T6134] FAT-fs (loop0): Directory bread(block 68) failed [ 116.798422][ T6106] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 116.837690][ T6134] FAT-fs (loop0): Directory bread(block 69) failed [ 116.851220][ T6106] BTRFS info (device loop2): using free space tree [ 116.863428][ T6134] FAT-fs (loop0): Directory bread(block 70) failed [ 116.878754][ T6141] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #2: block 4: comm syz.4.691: lblock 0 mapped to illegal pblock 4 (length 1) [ 116.882974][ T6106] BTRFS info (device loop2): has skinny extents [ 116.906117][ T6134] FAT-fs (loop0): Directory bread(block 71) failed [ 116.913767][ T6134] FAT-fs (loop0): Directory bread(block 72) failed [ 116.927349][ T6134] FAT-fs (loop0): Directory bread(block 73) failed [ 117.196060][ T6137] loop3: detected capacity change from 0 to 32768 [ 117.214965][ T6106] BTRFS info (device loop2): enabling ssd optimizations [ 117.311758][ T6171] loop0: detected capacity change from 0 to 1024 [ 117.330334][ T6167] loop1: detected capacity change from 0 to 4096 [ 117.339093][ T6137] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.694 (6137) [ 117.449210][ T6173] loop4: detected capacity change from 0 to 256 [ 117.458031][ T6137] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 117.477168][ T6137] BTRFS info (device loop3): using free space tree [ 117.497521][ T6137] BTRFS info (device loop3): has skinny extents [ 117.575063][ T6173] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 117.935359][ T6137] BTRFS info (device loop3): enabling ssd optimizations [ 118.079636][ T6137] BTRFS warning (device loop3): qgroup rescan init failed, qgroup is not enabled [ 118.590173][ T6215] sctp: [Deprecated]: syz.4.712 (pid 6215) Use of int in max_burst socket option deprecated. [ 118.590173][ T6215] Use struct sctp_assoc_value instead [ 119.110718][ T6198] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 119.152151][ T6198] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 119.208681][ T6198] F2FS-fs (loop2): invalid crc value [ 119.251445][ T6198] F2FS-fs (loop2): Found nat_bits in checkpoint [ 119.325077][ T6202] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 119.332879][ T6202] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 119.366645][ T6198] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 119.373823][ T6198] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 119.390132][ T6202] F2FS-fs (loop1): invalid crc value [ 119.416721][ T6202] F2FS-fs (loop1): Found nat_bits in checkpoint [ 119.495477][ T6198] attempt to access beyond end of device [ 119.495477][ T6198] loop2: rw=2049, want=53384, limit=40427 [ 119.545238][ T1325] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 119.553903][ T6202] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 119.572234][ T6202] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 119.631417][ T4190] attempt to access beyond end of device [ 119.631417][ T4190] loop2: rw=2049, want=45104, limit=40427 [ 119.815195][ T1325] usb 5-1: Using ep0 maxpacket: 8 [ 119.965235][ T1325] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 119.977009][ T1325] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.018704][ T1325] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.049421][ T1325] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.062652][ T1325] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.081887][ T1325] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.101680][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.405262][ T1325] usb 5-1: GET_CAPABILITIES returned 0 [ 120.410790][ T1325] usbtmc 5-1:16.0: can't read capabilities [ 120.614146][ T1325] usb 5-1: USB disconnect, device number 9 [ 120.922398][ T6262] set_capacity_and_notify: 2 callbacks suppressed [ 120.922413][ T6262] loop2: detected capacity change from 0 to 32768 [ 120.959763][ T6269] loop0: detected capacity change from 0 to 32768 [ 121.030080][ T6269] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.730 (6269) [ 121.047703][ T6271] loop3: detected capacity change from 0 to 32768 [ 121.069449][ T6269] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 121.078505][ T6269] BTRFS info (device loop0): enabling disk space caching [ 121.085941][ T6269] BTRFS info (device loop0): force clearing of disk cache [ 121.090905][ T6262] XFS (loop2): Mounting V5 Filesystem [ 121.094540][ T6269] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 121.108970][ T6269] BTRFS info (device loop0): use zstd compression, level 3 [ 121.120215][ T6269] BTRFS info (device loop0): disk space caching is enabled [ 121.141767][ T6269] BTRFS info (device loop0): has skinny extents [ 121.248913][ T6271] XFS (loop3): Mounting V5 Filesystem [ 121.276160][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 121.318056][ T6262] XFS (loop2): Ending clean mount [ 121.320307][ T6271] XFS (loop3): Ending clean mount [ 121.329685][ T6269] BTRFS info (device loop0): enabling ssd optimizations [ 121.339357][ T6309] loop1: detected capacity change from 0 to 512 [ 121.377282][ T6269] BTRFS info (device loop0): clearing free space tree [ 121.384223][ T6269] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 121.402223][ T6262] XFS (loop2): Quotacheck needed: Please wait. [ 121.405157][ T6269] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 121.537656][ T6262] XFS (loop2): Quotacheck: Done. [ 121.544640][ T6309] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.580015][ T4196] XFS (loop3): Unmounting Filesystem [ 121.585215][ T6309] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.651935][ T6262] XFS (loop2): User initiated shutdown received. [ 121.663780][ T6329] loop4: detected capacity change from 0 to 1024 [ 121.708536][ T6262] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 121.781264][ T6262] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 121.810744][ T6329] EXT4-fs (loop4): Ignoring removed orlov option [ 121.883604][ T6329] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 121.894586][ T4190] XFS (loop2): Unmounting Filesystem [ 122.657557][ T6353] netlink: 'syz.3.752': attribute type 1 has an invalid length. [ 122.851801][ T6362] loop3: detected capacity change from 0 to 512 [ 123.000998][ T6362] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.107073][ T6362] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.280320][ T6378] loop4: detected capacity change from 0 to 128 [ 123.530746][ T6392] loop4: detected capacity change from 0 to 16 [ 123.572185][ T6394] loop0: detected capacity change from 0 to 1024 [ 123.588436][ T6396] input: syz0 as /devices/virtual/input/input11 [ 123.599783][ T6392] erofs: (device loop4): mounted with root inode @ nid 36. [ 123.653725][ T25] audit: type=1800 audit(1782366006.463:9): pid=6392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.766" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 123.830537][ T6410] netlink: 'syz.0.772': attribute type 1 has an invalid length. [ 123.878905][ T6410] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.772'. [ 124.018091][ T4267] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 124.090676][ T6412] loop2: detected capacity change from 0 to 4096 [ 124.240047][ T6392] syz.4.766 (6392): drop_caches: 2 [ 124.240451][ T6412] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 124.266275][ T4267] usb 2-1: Using ep0 maxpacket: 16 [ 124.342536][ T6412] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 124.405172][ T4267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.433082][ T4267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.462864][ T4267] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.500924][ T4267] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 124.521796][ T4267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.553554][ T4267] usb 2-1: config 0 descriptor?? [ 124.696138][ T6430] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.719374][ T6427] NILFS (loop0): error -22 preparing GC: cannot mark copying blocks dirty [ 124.840785][ T6414] XFS (loop3): Mounting V5 Filesystem [ 124.942958][ T6414] XFS (loop3): Ending clean mount [ 124.996240][ T6414] XFS (loop3): Quotacheck needed: Please wait. [ 125.051340][ T6414] XFS (loop3): Quotacheck: Done. [ 125.058366][ T4267] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 125.078486][ T4267] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input12 [ 125.181161][ T4267] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 125.239801][ T4196] XFS (loop3): Unmounting Filesystem [ 125.373083][ T4925] usb 2-1: USB disconnect, device number 8 [ 125.458481][ T6447] fido_id[6447]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 125.525867][ T6453] Context (ID=0x0) not attached to queue pair (handle=0x4da:0xdc) [ 125.559863][ T6444] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.788 (6444) [ 125.575467][ T4267] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 125.652560][ T6444] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 125.667695][ T6444] BTRFS info (device loop2): setting nodatasum [ 125.674420][ T6444] BTRFS info (device loop2): force zlib compression, level 3 [ 125.687609][ T6444] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 125.699841][ T6444] BTRFS info (device loop2): use lzo compression, level 0 [ 125.710672][ T6444] BTRFS info (device loop2): turning on flush-on-commit [ 125.719810][ T6444] BTRFS info (device loop2): enabling auto defrag [ 125.731447][ T6444] BTRFS info (device loop2): max_inline at 4096 [ 125.741643][ T6444] BTRFS info (device loop2): using free space tree [ 125.753238][ T6444] BTRFS info (device loop2): has skinny extents [ 125.874958][ T6444] BTRFS info (device loop2): enabling ssd optimizations [ 125.965125][ T4234] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 125.965292][ T4267] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 125.976007][ T6480] set_capacity_and_notify: 4 callbacks suppressed [ 125.976022][ T6480] loop1: detected capacity change from 0 to 8 [ 125.989264][ T4267] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 126.055114][ T5848] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 126.185650][ T4267] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 126.204962][ T4267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.218036][ T6480] SQUASHFS error: Unable to read directory block [249:c] [ 126.263335][ T4267] usb 1-1: Product: syz [ 126.273558][ T4267] usb 1-1: Manufacturer: syz [ 126.280833][ T4267] usb 1-1: SerialNumber: syz [ 126.315246][ T4267] usb 1-1: config 0 descriptor?? [ 126.367301][ T4267] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 126.384751][ T4234] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 204, changing to 11 [ 126.420757][ T4234] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 126.435358][ T5848] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 126.456238][ T5848] usb 4-1: config 0 has no interface number 0 [ 126.461335][ T4234] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 126.577967][ T6493] loop1: detected capacity change from 0 to 256 [ 126.595279][ T4234] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.604352][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 126.615390][ T5848] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 126.623565][ T4234] usb 5-1: SerialNumber: syz [ 126.634713][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.644090][ T5848] usb 4-1: Product: syz [ 126.654519][ T5848] usb 4-1: Manufacturer: syz [ 126.655314][ T6457] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 126.659563][ T5848] usb 4-1: SerialNumber: syz [ 126.701870][ T5848] usb 4-1: config 0 descriptor?? [ 126.967507][ T5848] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 126.998510][ T5848] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 127.027970][ T5848] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 127.038659][ T5848] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 127.063647][ T5848] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 127.163143][ T6499] loop2: detected capacity change from 0 to 32768 [ 127.207322][ T5848] usb 1-1: USB disconnect, device number 8 [ 127.240677][ T6499] XFS (loop2): Mounting V5 Filesystem [ 127.286909][ T6499] XFS (loop2): Ending clean mount [ 127.317630][ T6457] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 127.349617][ T4190] XFS (loop2): Unmounting Filesystem [ 127.443835][ T6533] loop1: detected capacity change from 0 to 128 [ 127.524589][ T6533] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.543229][ T6533] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.577878][ T4234] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 127.595368][ T4234] usb 5-1: USB disconnect, device number 10 [ 127.610488][ T6533] fscrypt (loop1, inode 12): Mutually exclusive encryption flags (0x0c) [ 127.640070][ T5854] usb 4-1: USB disconnect, device number 8 [ 127.683171][ T5854] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 127.730559][ T5854] keyspan 4-1:0.133: device disconnected [ 127.771579][ T6539] loop0: detected capacity change from 0 to 128 [ 127.831521][ T6539] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.845451][ T6539] ext4 filesystem being mounted at /178/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.994256][ T6546] loop1: detected capacity change from 0 to 8192 [ 128.000808][ T4236] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 128.027020][ T6546] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 128.036531][ T6546] REISERFS (device loop1): using ordered data mode [ 128.043106][ T6546] reiserfs: using flush barriers [ 128.069510][ T6546] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 128.086788][ T6546] REISERFS (device loop1): checking transaction log (loop1) [ 128.100544][ T6546] REISERFS (device loop1): Using rupasov hash to sort names [ 128.108138][ T6546] REISERFS (device loop1): using 3.5.x disk format [ 128.114834][ T6546] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 128.129862][ T6546] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 128.147352][ T6546] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 128.158922][ T6546] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 128.192741][ T6554] loop3: detected capacity change from 0 to 1024 [ 128.425391][ T4236] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 128.444960][ T4236] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 128.498039][ T4236] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.520931][ T4236] usb 3-1: config 0 interface 0 has no altsetting 0 [ 128.531188][ T4236] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 128.544503][ T4236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.562786][ T4236] usb 3-1: config 0 descriptor?? [ 128.595527][ T6537] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 128.893295][ T6552] loop4: detected capacity change from 0 to 32768 [ 129.059361][ T4236] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 129.095755][ T4236] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 129.145099][ T4236] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 129.177531][ T6569] loop3: detected capacity change from 0 to 4096 [ 129.184849][ T4236] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 129.232305][ T4236] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 129.280510][ T4236] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 129.321076][ T4236] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 129.351476][ T4236] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 129.380385][ T4236] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 129.399578][ T4236] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 129.413685][ T6563] loop0: detected capacity change from 0 to 131072 [ 129.426709][ T4236] kovaplus 0003:1E7D:2D50.0008: hidraw0: USB HID v0.05 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 129.442319][ T4236] usb 3-1: USB disconnect, device number 7 [ 129.516949][ T6563] F2FS-fs (loop0): invalid crc value [ 129.564683][ T6563] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.617800][ T6563] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 129.659560][ T6573] fido_id[6573]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 129.912838][ T6567] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 129.964995][ T6567] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 129.999142][ T6567] F2FS-fs (loop1): invalid crc value [ 130.035290][ T4267] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 130.057447][ T6567] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.197368][ T6593] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 130.276319][ T6567] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 130.283801][ T6567] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 130.391895][ T6567] attempt to access beyond end of device [ 130.391895][ T6567] loop1: rw=2049, want=45112, limit=40427 [ 130.405249][ T4267] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.424109][ T4267] usb 4-1: config 0 has no interface number 0 [ 130.455377][ T4267] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 130.466990][ T6603] batman_adv: batadv0: Adding interface: dummy0 [ 130.473248][ T6603] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.523749][ T4267] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 130.545031][ T4267] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 130.570103][ T4267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.578797][ T6603] batman_adv: batadv0: Interface activated: dummy0 [ 130.623643][ T4267] usb 4-1: config 0 descriptor?? [ 130.665247][ T6576] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 130.689991][ T4267] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 130.915320][ T4267] usb 4-1: USB disconnect, device number 9 [ 131.423296][ T6628] set_capacity_and_notify: 2 callbacks suppressed [ 131.423312][ T6628] loop2: detected capacity change from 0 to 4096 [ 131.446907][ T6612] loop4: detected capacity change from 0 to 32768 [ 131.559318][ T6612] JBD2: Ignoring recovery information on journal [ 131.692174][ T6645] loop3: detected capacity change from 0 to 64 [ 131.749076][ T6612] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 131.806398][ T4190] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 131.812875][ T4190] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 132.158957][ T6664] loop1: detected capacity change from 0 to 512 [ 132.254782][ T4199] ocfs2: Unmounting device (7,4) on (node local) [ 132.328452][ T6664] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,delalloc,,errors=continue. Quota mode: writeback. [ 132.439781][ T6664] EXT4-fs error (device loop1): ext4_validate_block_bitmap:420: comm syz.1.860: bg 0: bad block bitmap checksum [ 132.443548][ T6680] tipc: Started in network mode [ 132.475423][ T6648] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 132.491011][ T6648] netdevsim netdevsim0 netdevsim0: Failed to get key data for SA table [ 132.535429][ T6680] tipc: Node identity ac14140f, cluster identity 4711 [ 132.557358][ T6680] tipc: New replicast peer: 255.255.255.255 [ 132.599672][ T6680] tipc: Enabled bearer , priority 10 [ 132.765998][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 132.787461][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.793791][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.811913][ T6691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.826577][ T6699] netlink: 'syz.3.871': attribute type 3 has an invalid length. [ 132.881005][ T6703] netlink: 192 bytes leftover after parsing attributes in process `syz.0.872'. [ 132.885584][ T6699] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.871'. [ 133.007052][ T6711] loop2: detected capacity change from 0 to 16 [ 133.011112][ T6712] program syz.1.877 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.063603][ T6711] erofs: (device loop2): mounted with root inode @ nid 36. [ 133.223869][ T6723] loop0: detected capacity change from 0 to 256 [ 133.226545][ T6720] loop1: detected capacity change from 0 to 128 [ 133.296052][ T6720] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.363434][ T6720] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 133.525633][ T6720] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 133.585371][ T6720] FAT-fs (loop1): Filesystem has been set read-only [ 133.676588][ T6741] loop4: detected capacity change from 0 to 64 [ 133.707701][ T4191] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 133.715404][ T4267] tipc: Node number set to 2886997007 [ 133.801347][ T6743] loop3: detected capacity change from 0 to 128 [ 133.829424][ T6743] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.862964][ T6746] loop1: detected capacity change from 0 to 1024 [ 133.871109][ T6743] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.889103][ T6743] EXT4-fs warning (device loop3): ext4_group_extend:1847: will only finish group (8193 blocks, 8129 new) [ 133.908383][ T6743] EXT4-fs warning (device loop3): ext4_group_extend:1852: can't read last block, resize aborted [ 133.931965][ T6746] EXT4-fs (loop1): Ignoring removed bh option [ 134.027751][ T6746] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,noblock_validity,nolazytime,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 134.098915][ T6746] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.161502][ T6746] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.892: bg 0: block 112: padding at end of block bitmap is not set [ 134.172514][ T6728] XFS (loop2): Mounting V5 Filesystem [ 134.199679][ T6746] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 134.264134][ T6728] XFS (loop2): Ending clean mount [ 134.269885][ T6746] EXT4-fs (loop1): This should not happen!! Data will be lost [ 134.269885][ T6746] [ 134.280115][ T6746] EXT4-fs (loop1): Total free blocks count 0 [ 134.288336][ T6746] EXT4-fs (loop1): Free/Dirty block details [ 134.293694][ T6728] XFS (loop2): Quotacheck needed: Please wait. [ 134.294435][ T6746] EXT4-fs (loop1): free_blocks=0 [ 134.306969][ T6746] EXT4-fs (loop1): dirty_blocks=64 [ 134.312390][ T6746] EXT4-fs (loop1): Block reservation details [ 134.319233][ T6746] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 134.488061][ T6772] program syz.0.901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.518115][ T6728] XFS (loop2): Quotacheck: Done. [ 134.628229][ T4190] XFS (loop2): Unmounting Filesystem [ 134.859863][ T6782] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 134.912085][ T6782] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.085055][ T4267] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 135.189170][ T6792] netlink: 'syz.3.910': attribute type 10 has an invalid length. [ 135.314368][ T6777] XFS (loop4): Mounting V5 Filesystem [ 135.380943][ T6777] XFS (loop4): Ending clean mount [ 135.391120][ T6777] XFS (loop4): Quotacheck needed: Please wait. [ 135.476353][ T6777] XFS (loop4): Quotacheck: Done. [ 135.510288][ T6792] team0 (unregistering): Port device team_slave_0 removed [ 135.534811][ T6792] team0 (unregistering): Port device team_slave_1 removed [ 135.585866][ T25] audit: type=1326 audit(1782366018.403:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.2.913" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fabfa31ae59 code=0x0 [ 135.625141][ T4267] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 135.651216][ T4267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.662312][ T4267] usb 1-1: Product: syz [ 135.671280][ T4199] XFS (loop4): Unmounting Filesystem [ 135.696277][ T4267] usb 1-1: Manufacturer: syz [ 135.700973][ T4267] usb 1-1: SerialNumber: syz [ 135.719720][ T4267] usb 1-1: config 0 descriptor?? [ 135.820709][ T6813] erofs: (device loop3): mounted with root inode @ nid 36. [ 135.909619][ T25] audit: type=1800 audit(1782366018.723:11): pid=6813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.915" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 136.074570][ T5848] usb 1-1: USB disconnect, device number 9 [ 137.321025][ T6813] syz.3.915 (6813): drop_caches: 2 [ 137.355108][ T4236] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 137.451550][ T6870] set_capacity_and_notify: 4 callbacks suppressed [ 137.451565][ T6870] loop4: detected capacity change from 0 to 4096 [ 137.661973][ T6885] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 137.685122][ T4236] usb 2-1: Using ep0 maxpacket: 32 [ 137.805254][ T4236] usb 2-1: config 0 has no interfaces? [ 137.810921][ T4236] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 137.865030][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.898949][ T4236] usb 2-1: config 0 descriptor?? [ 138.057208][ T6905] loop4: detected capacity change from 0 to 128 [ 138.079664][ T6897] loop0: detected capacity change from 0 to 8192 [ 138.122433][ T6903] loop2: detected capacity change from 0 to 4096 [ 138.180852][ T4234] usb 2-1: USB disconnect, device number 9 [ 138.195301][ T6897] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 138.214781][ T6905] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.215518][ T6897] REISERFS (device loop0): using ordered data mode [ 138.263110][ T6897] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.280387][ T6897] REISERFS (device loop0): checking transaction log (loop0) [ 138.283159][ T6905] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.300125][ T6897] REISERFS (device loop0): Using r5 hash to sort names [ 138.307688][ T6897] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 138.342685][ T6903] ntfs: volume version 3.1. [ 138.361164][ T6897] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 138.427747][ T6905] fscrypt (loop4, inode 12): Direct key flag not allowed with different contents and filenames modes [ 138.466265][ T6914] loop3: detected capacity change from 0 to 512 [ 138.773298][ T6920] loop2: detected capacity change from 0 to 512 [ 138.916150][ T6920] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 139.020391][ T6920] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.278775][ T6944] loop0: detected capacity change from 0 to 512 [ 139.420298][ T6944] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 139.430095][ T6944] EXT4-fs (loop0): orphan cleanup on readonly fs [ 139.437811][ T6944] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 139.449303][ T6944] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 139.465367][ T6944] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 139.520182][ T6944] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.970: bg 0: block 64: padding at end of block bitmap is not set [ 139.567293][ T6944] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 139.601004][ T6944] EXT4-fs (loop0): 1 truncate cleaned up [ 139.612390][ T6944] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 139.687502][ T6956] loop2: detected capacity change from 0 to 4096 [ 139.909527][ T6960] bond0: (slave bond_slave_0): Releasing backup interface [ 139.953186][ T6938] loop4: detected capacity change from 0 to 40427 [ 140.032485][ T6938] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 140.061155][ T6938] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 140.143605][ T6938] F2FS-fs (loop4): Found nat_bits in checkpoint [ 140.285486][ T6978] loop1: detected capacity change from 0 to 256 [ 140.312248][ T6938] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 140.334607][ T6938] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 140.426100][ T6978] FAT-fs (loop1): Directory bread(block 64) failed [ 140.439318][ T6978] FAT-fs (loop1): Directory bread(block 65) failed [ 140.450370][ T6981] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 140.500874][ T6978] FAT-fs (loop1): Directory bread(block 66) failed [ 140.514276][ T6938] attempt to access beyond end of device [ 140.514276][ T6938] loop4: rw=524288, want=45072, limit=40427 [ 140.522269][ T6981] EXT4-fs (loop0): 1 truncate cleaned up [ 140.526811][ T6938] attempt to access beyond end of device [ 140.526811][ T6938] loop4: rw=0, want=45072, limit=40427 [ 140.575245][ T6981] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 140.600299][ T4199] attempt to access beyond end of device [ 140.600299][ T4199] loop4: rw=2049, want=45104, limit=40427 [ 140.605064][ T6978] FAT-fs (loop1): Directory bread(block 67) failed [ 140.618905][ T6978] FAT-fs (loop1): Directory bread(block 68) failed [ 140.625744][ T6978] FAT-fs (loop1): Directory bread(block 69) failed [ 140.632361][ T6978] FAT-fs (loop1): Directory bread(block 70) failed [ 140.639023][ T6978] FAT-fs (loop1): Directory bread(block 71) failed [ 140.645760][ T6978] FAT-fs (loop1): Directory bread(block 72) failed [ 140.653157][ T6978] FAT-fs (loop1): Directory bread(block 73) failed [ 141.095722][ T6974] XFS: attr2 mount option is deprecated. [ 141.147007][ T4634] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 141.254145][ T6974] XFS (loop3): Mounting V5 Filesystem [ 141.345715][ T6986] XFS (loop2): Mounting V5 Filesystem [ 141.409171][ T7018] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 141.442455][ T6974] XFS (loop3): Ending clean mount [ 141.464784][ T6974] XFS (loop3): Quotacheck needed: Please wait. [ 141.488345][ T6986] XFS (loop2): Ending clean mount [ 141.533627][ T6986] XFS (loop2): Quotacheck needed: Please wait. [ 141.558396][ T6974] XFS (loop3): Quotacheck: Done. [ 141.595097][ T4634] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.603127][ T4634] usb 1-1: config 0 has no interface number 0 [ 141.635255][ T4634] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 141.668299][ T4196] XFS (loop3): Unmounting Filesystem [ 141.670423][ T4634] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 141.688839][ T13] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 141.717008][ T4634] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 141.730423][ T4634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.742882][ T4634] usb 1-1: config 0 descriptor?? [ 141.751646][ T6986] XFS (loop2): Quotacheck: Done. [ 141.766657][ T6989] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 141.788310][ T4634] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 141.920086][ T4190] XFS (loop2): Unmounting Filesystem [ 142.067535][ T5854] usb 1-1: USB disconnect, device number 10 [ 142.085328][ T13] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 142.093616][ T13] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 142.110727][ T13] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 142.123871][ T13] usb 5-1: config 220 has no interface number 2 [ 142.132276][ T13] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 142.148596][ T13] usb 5-1: config 220 interface 0 has no altsetting 0 [ 142.165270][ T13] usb 5-1: config 220 interface 76 has no altsetting 0 [ 142.206103][ T13] usb 5-1: config 220 interface 1 has no altsetting 0 [ 142.352612][ T7036] EXT4-fs (loop1): filesystem is read-only [ 142.387310][ T13] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 142.417541][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.422578][ T7036] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 142.449932][ T7036] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 142.450364][ T13] usb 5-1: Product: syz [ 142.490255][ T7036] EXT4-fs error (device loop1): ext4_get_journal_inode:5187: comm syz.1.1005: inode #1: comm syz.1.1005: iget: illegal inode # [ 142.504983][ T13] usb 5-1: Manufacturer: syz [ 142.509612][ T13] usb 5-1: SerialNumber: syz [ 142.510557][ T7036] EXT4-fs (loop1): no journal found [ 142.521537][ T7036] EXT4-fs (loop1): can't get journal size [ 142.535384][ T7036] EXT4-fs error (device loop1): ext4_fill_super:4872: inode #2: comm syz.1.1005: iget: bad extra_isize 65535 (inode size 1024) [ 142.554107][ T7036] EXT4-fs (loop1): get root inode failed [ 142.566629][ T7036] EXT4-fs (loop1): mount failed [ 142.572686][ T7043] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1000'. [ 142.635140][ T7045] set_capacity_and_notify: 5 callbacks suppressed [ 142.635154][ T7045] loop2: detected capacity change from 0 to 4096 [ 142.740319][ T7045] EXT4-fs (loop2): Test dummy encryption mode enabled [ 142.751040][ T7045] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 142.795782][ T7045] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 142.811166][ T7045] System zones: 0-5 [ 142.853176][ T7045] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000005,acl,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 142.968676][ T13] usb 5-1: selecting invalid altsetting 0 [ 142.988924][ T13] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 143.023906][ T13] usb 5-1: No valid video chain found. [ 143.160305][ T7062] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 143.176212][ T13] usb 5-1: selecting invalid altsetting 0 [ 143.182013][ T13] usbtest: probe of 5-1:220.1 failed with error -22 [ 143.215176][ T13] usb 5-1: USB disconnect, device number 11 [ 143.296798][ T7068] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1016'. [ 143.335324][ T7068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1016'. [ 143.701177][ T7056] loop2: detected capacity change from 0 to 40427 [ 143.733247][ T7056] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 143.779744][ T7086] loop4: detected capacity change from 0 to 512 [ 143.784636][ T7056] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 143.830843][ T7056] F2FS-fs (loop2): invalid crc value [ 143.877387][ T7086] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0003] [ 143.900348][ T7086] System zones: 1-2, 4-12, 8-8 [ 143.909261][ T7056] F2FS-fs (loop2): Found nat_bits in checkpoint [ 143.950844][ T7086] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.1025: iget: bad i_size value: 38620345925642 [ 143.992779][ T7086] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1025: couldn't read orphan inode 15 (err -117) [ 144.011137][ T7056] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 144.019624][ T7056] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 144.084124][ T7086] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=continue,delalloc,bsddf,journal_ioprio=0x0000000000000001,debug,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 144.099809][ T7056] attempt to access beyond end of device [ 144.099809][ T7056] loop2: rw=2049, want=45112, limit=40427 [ 144.103356][ T4267] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 144.188158][ T1136] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:3: bg 0: block 5: invalid block bitmap [ 144.233217][ T1136] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 144.279044][ T1136] EXT4-fs (loop4): This should not happen!! Data will be lost [ 144.279044][ T1136] [ 144.289305][ T1136] EXT4-fs (loop4): Total free blocks count 0 [ 144.295762][ T1136] EXT4-fs (loop4): Free/Dirty block details [ 144.301776][ T1136] EXT4-fs (loop4): free_blocks=0 [ 144.307950][ T1136] EXT4-fs (loop4): dirty_blocks=1 [ 144.313165][ T1136] EXT4-fs (loop4): Block reservation details [ 144.320103][ T1136] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 144.536603][ T7110] loop0: detected capacity change from 0 to 256 [ 144.604773][ T7110] FAT-fs (loop0): Directory bread(block 64) failed [ 144.611762][ T7110] FAT-fs (loop0): Directory bread(block 65) failed [ 144.628201][ T7110] FAT-fs (loop0): Directory bread(block 66) failed [ 144.651495][ T7110] FAT-fs (loop0): Directory bread(block 67) failed [ 144.665330][ T4267] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 144.674414][ T4267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.690664][ T7110] FAT-fs (loop0): Directory bread(block 68) failed [ 144.699345][ T7110] FAT-fs (loop0): Directory bread(block 69) failed [ 144.710580][ T4267] usb 2-1: Product: syz [ 144.714777][ T4267] usb 2-1: Manufacturer: syz [ 144.721038][ T7110] FAT-fs (loop0): Directory bread(block 70) failed [ 144.732439][ T4267] usb 2-1: SerialNumber: syz [ 144.738685][ T7110] FAT-fs (loop0): Directory bread(block 71) failed [ 144.751961][ T4267] usb 2-1: config 0 descriptor?? [ 144.758347][ T7110] FAT-fs (loop0): Directory bread(block 72) failed [ 144.770107][ T7110] FAT-fs (loop0): Directory bread(block 73) failed [ 144.774348][ T7112] loop2: detected capacity change from 0 to 512 [ 144.815487][ T7112] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.854785][ T7112] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.1029: bad orphan inode 15 [ 144.880361][ T7116] netlink: 'syz.4.1038': attribute type 2 has an invalid length. [ 144.917379][ T7112] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000005,dioread_nolock,auto_da_alloc=0x000000007fffffff,inode_readahead_blks=0x0000000001000000,,errors=continue. Quota mode: writeback. [ 144.980472][ T7116] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1038'. [ 145.045149][ T4267] int51x1: probe of 2-1:0.0 failed with error -71 [ 145.071995][ T4267] usb 2-1: USB disconnect, device number 10 [ 145.147913][ T7112] EXT4-fs error (device loop2): __ext4_new_inode:1082: comm syz.2.1029: reserved inode found cleared - inode=17 [ 145.409423][ T25] audit: type=1326 audit(2000000006.309:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.2.1046" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fabfa31ae59 code=0x0 [ 145.461832][ T7143] loop2: detected capacity change from 0 to 16 [ 145.471250][ T21] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 145.489961][ T7143] erofs: (device loop2): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 145.506733][ T7143] erofs: (device loop2): mounted with root inode @ nid 36. [ 145.715137][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 145.817759][ T1136] wlan1: Trigger new scan to find an IBSS to join [ 145.850376][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 145.859581][ T21] usb 5-1: too many configurations: 245, using maximum allowed: 8 [ 145.936310][ T21] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 145.944377][ T21] usb 5-1: can't read configurations, error -71 [ 145.955186][ T5854] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 146.195215][ T5854] usb 4-1: Using ep0 maxpacket: 32 [ 146.318726][ T5854] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 146.349845][ T5854] usb 4-1: config 0 has no interface number 0 [ 146.369813][ T5854] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 146.387601][ T7184] loop4: detected capacity change from 0 to 128 [ 146.393301][ T5854] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 146.413806][ T5854] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 146.475611][ T7184] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 146.493690][ T7184] hpfs: filesystem error: improperly stopped [ 146.500702][ T7184] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 146.509623][ T7184] hpfs: You really don't want any checks? You are crazy... [ 146.519381][ T7184] hpfs: hpfs_map_sector(): read error [ 146.524875][ T7184] hpfs: code page support is disabled [ 146.541364][ T7184] hpfs: hpfs_map_4sectors(): unaligned read [ 146.554652][ T7184] hpfs: hpfs_map_4sectors(): unaligned read [ 146.569054][ T7184] hpfs: filesystem error: unable to find root dir [ 146.576125][ T5854] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 146.590161][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.607925][ T5854] usb 4-1: Product: syz [ 146.616724][ T5854] usb 4-1: Manufacturer: syz [ 146.626989][ T5854] usb 4-1: SerialNumber: syz [ 146.640436][ T5854] usb 4-1: config 0 descriptor?? [ 146.675311][ T7153] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 146.955975][ T5854] usb-storage 4-1:0.20: USB Mass Storage device detected [ 146.981586][ T5854] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 147.025147][ T5854] scsi host1: usb-storage 4-1:0.20 [ 147.049443][ T7192] loop0: detected capacity change from 0 to 32768 [ 147.065077][ T5854] usb 4-1: USB disconnect, device number 10 [ 147.097550][ T7200] loop4: detected capacity change from 0 to 8192 [ 147.164622][ T7192] JBD2: Ignoring recovery information on journal [ 147.181438][ T7200] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 147.231634][ T7200] REISERFS (device loop4): using ordered data mode [ 147.248743][ T7195] loop1: detected capacity change from 0 to 32768 [ 147.273345][ T7211] mkiss: ax0: crc mode is auto. [ 147.275072][ T7200] reiserfs: using flush barriers [ 147.292093][ T7200] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 147.309315][ T7200] REISERFS (device loop4): checking transaction log (loop4) [ 147.323358][ T7200] REISERFS (device loop4): Using r5 hash to sort names [ 147.333988][ T7192] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 147.344727][ T7200] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 147.390938][ T7195] XFS (loop1): Mounting V5 Filesystem [ 147.431141][ T25] audit: type=1800 audit(2000000008.329:13): pid=7200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1075" name="file1" dev="loop4" ino=2 res=0 errno=0 [ 147.451425][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.540821][ T7219] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 147.548343][ T7195] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 147.572734][ T4192] ocfs2: Unmounting device (7,0) on (node local) [ 147.651322][ T7195] XFS (loop1): Starting recovery (logdev: internal) [ 147.720073][ T7224] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.766665][ T7224] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 147.778763][ T7195] XFS (loop1): Ending recovery (logdev: internal) [ 147.801025][ T7228] set_capacity_and_notify: 2 callbacks suppressed [ 147.801039][ T7228] loop2: detected capacity change from 0 to 512 [ 147.835925][ T7224] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 147.924560][ T7224] exFAT-fs (loop3): failed to exfat_utf8_to_utf16 (estr:ENAMETOOLONG) nls len : 260, unilen : 257 > 255 [ 147.938973][ T4191] XFS (loop1): Unmounting Filesystem [ 147.973916][ T7228] EXT4-fs (loop2): Test dummy encryption mode enabled [ 147.975314][ T21] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 148.021892][ T7228] EXT4-fs (loop2): 1 truncate cleaned up [ 148.034522][ T7228] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 148.285042][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 148.406186][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.427526][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.463889][ T7253] loop4: detected capacity change from 0 to 64 [ 148.471821][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 148.502524][ T7228] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 148.503091][ T21] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 148.520420][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.534075][ T21] usb 1-1: config 0 descriptor?? [ 148.856670][ T1269] wlan1: Trigger new scan to find an IBSS to join [ 148.924638][ T7266] loop2: detected capacity change from 0 to 8192 [ 148.971662][ T7268] sp0: Synchronizing with TNC [ 148.985596][ T7266] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.026965][ T21] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 149.049091][ T21] microsoft 0003:045E:07DA.0009: unsupported Resolution Multiplier 0 [ 149.070146][ T21] microsoft 0003:045E:07DA.0009: implement() called with n (152) > 32! (kworker/1:0) [ 149.198834][ T7266] netlink: 'syz.2.1095': attribute type 5 has an invalid length. [ 149.207067][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 149.210232][ T7263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.245555][ T21] microsoft 0003:045E:07DA.0009: unsupported Resolution Multiplier 0 [ 149.285294][ T21] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 149.323757][ T21] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 149.361043][ T21] microsoft 0003:045E:07DA.0009: no inputs found [ 149.368630][ T7272] loop1: detected capacity change from 0 to 2048 [ 149.375244][ T21] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 149.426256][ T7275] loop3: detected capacity change from 0 to 2048 [ 149.465251][ T21] usb 1-1: USB disconnect, device number 11 [ 149.491547][ T7275] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 149.538795][ T7272] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsv1,. Quota mode: none. [ 149.554895][ T7275] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.672290][ T25] audit: type=1800 audit(2000000010.569:14): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1100" name="file1" dev="loop3" ino=1367 res=0 errno=0 [ 149.731863][ T7282] fido_id[7282]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 149.870184][ T7292] loop1: detected capacity change from 0 to 256 [ 150.062752][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1109'. [ 150.115214][ T21] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 150.475285][ T21] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 150.498829][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.520644][ T21] usb 3-1: config 0 descriptor?? [ 150.534577][ T7329] loop3: detected capacity change from 0 to 1024 [ 150.567177][ T21] cp210x 3-1:0.0: cp210x converter detected [ 150.689361][ T5196] hfsplus: b-tree write err: -5, ino 25 [ 150.697688][ T5196] hfsplus: b-tree write err: -5, ino 4 [ 150.704068][ T5196] hfsplus: b-tree write err: -5, ino 2 [ 150.928878][ T7342] loop3: detected capacity change from 0 to 32768 [ 150.975347][ T5848] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 151.029190][ T7342] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1125 (7342) [ 151.055085][ T7342] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 151.063805][ T7342] BTRFS info (device loop3): using free space tree [ 151.070625][ T7342] BTRFS info (device loop3): has skinny extents [ 151.181787][ T7342] BTRFS info (device loop3): enabling ssd optimizations [ 151.303868][ T21] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 151.320081][ T21] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 151.345173][ T5848] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.357962][ T21] usb 3-1: cp210x converter now attached to ttyUSB0 [ 151.365949][ T5848] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 151.378872][ T21] usb 3-1: USB disconnect, device number 8 [ 151.384893][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.430292][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.434678][ T21] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 151.447144][ T5848] usb 1-1: config 0 descriptor?? [ 151.453599][ T21] cp210x 3-1:0.0: device disconnected [ 151.504139][ T4702] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4702) [ 151.504487][ T5848] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 151.746465][ T13] usb 1-1: USB disconnect, device number 12 [ 151.826420][ T154] wlan1: Creating new IBSS network, BSSID fe:3a:70:5f:89:7f [ 152.175069][ T5849] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 152.361115][ T7402] program syz.2.1143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.370927][ T5848] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 152.391589][ T7390] loop4: detected capacity change from 0 to 32768 [ 152.425784][ T5849] usb 4-1: Using ep0 maxpacket: 32 [ 152.464885][ T7390] XFS (loop4): Mounting V5 Filesystem [ 152.503175][ T7390] XFS (loop4): Ending clean mount [ 152.545512][ T5849] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 152.549691][ T4199] XFS (loop4): Unmounting Filesystem [ 152.553765][ T5849] usb 4-1: config 2 has no interface number 0 [ 152.566654][ T5849] usb 4-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 152.577498][ T5849] usb 4-1: config 2 interface 88 has no altsetting 0 [ 152.625020][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 152.735261][ T5849] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 152.744520][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 152.753104][ T5848] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 152.773042][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.781448][ T5849] usb 4-1: Product: syz [ 152.795144][ T5849] usb 4-1: Manufacturer: syz [ 152.802156][ T5848] usb 2-1: config 0 descriptor?? [ 152.807792][ T5849] usb 4-1: SerialNumber: syz [ 152.838864][ T7383] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 152.976278][ T7413] loop2: detected capacity change from 0 to 32768 [ 153.065230][ T5848] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 153.086021][ T5848] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 153.105123][ T7383] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 153.139042][ T7413] XFS (loop2): Mounting V5 Filesystem [ 153.151782][ T5848] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 153.192657][ T7419] loop4: detected capacity change from 0 to 4096 [ 153.199470][ T5848] usb 2-1: media controller created [ 153.220521][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.285303][ T5848] az6027: usb out operation failed. (-71) [ 153.305278][ T5848] az6027: usb out operation failed. (-71) [ 153.306481][ T7419] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 153.311055][ T5848] stb0899_attach: Driver disabled by Kconfig [ 153.311069][ T5848] az6027: no front-end attached [ 153.311069][ T5848] [ 153.319057][ T7413] XFS (loop2): Starting recovery (logdev: internal) [ 153.339378][ T5848] az6027: usb out operation failed. (-71) [ 153.345223][ T5848] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 153.354660][ T5848] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 153.384686][ T5848] dvb-usb: schedule remote query interval to 400 msecs. [ 153.392457][ T5848] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 153.434641][ T7431] netlink: 'syz.0.1149': attribute type 11 has an invalid length. [ 153.442027][ T5848] usb 2-1: USB disconnect, device number 11 [ 153.462348][ T7431] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.1149'. [ 153.499313][ T7413] XFS (loop2): Ending recovery (logdev: internal) [ 153.545347][ T5849] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 153.561841][ T4199] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 153.585144][ T5849] asix: probe of 4-1:2.88 failed with error -71 [ 153.603107][ T5848] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 153.625657][ T5849] usb 4-1: USB disconnect, device number 11 [ 153.650706][ T4190] XFS (loop2): Unmounting Filesystem [ 153.981242][ T7439] loop4: detected capacity change from 0 to 512 [ 154.050195][ T7439] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.127323][ T7439] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.1154: bad orphan inode 15 [ 154.179871][ T7433] loop0: detected capacity change from 0 to 32768 [ 154.183837][ T7445] loop2: detected capacity change from 0 to 128 [ 154.199965][ T7441] loop1: detected capacity change from 0 to 4096 [ 154.225613][ T7439] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000005,dioread_nolock,auto_da_alloc=0x000000007fffffff,inode_readahead_blks=0x0000000001000000,,errors=continue. Quota mode: writeback. [ 154.257791][ T7439] EXT4-fs error (device loop4): __ext4_new_inode:1082: comm syz.4.1154: reserved inode found cleared - inode=17 [ 154.265278][ T25] audit: type=1326 audit(2000000015.159:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.3.1157" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75b6d61e59 code=0x0 [ 154.283661][ T7445] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 154.321941][ T7441] EXT4-fs (loop1): Test dummy encryption mode enabled [ 154.324710][ T7445] hpfs: filesystem error: improperly stopped [ 154.338581][ T7445] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 154.355122][ T7441] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 154.369746][ T7445] hpfs: You really don't want any checks? You are crazy... [ 154.383736][ T7441] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 154.392286][ T7441] System zones: 0-5 [ 154.395312][ T7445] hpfs: hpfs_map_sector(): read error [ 154.397979][ T7441] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000005,acl,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 154.402061][ T7445] hpfs: code page support is disabled [ 154.448958][ T7445] hpfs: hpfs_map_4sectors(): unaligned read [ 154.455248][ T7445] hpfs: hpfs_map_4sectors(): unaligned read [ 154.461176][ T7445] hpfs: filesystem error: unable to find root dir [ 154.618395][ T7453] loop4: detected capacity change from 0 to 164 [ 154.835790][ T7459] loop1: detected capacity change from 0 to 1024 [ 154.879429][ T7455] loop2: detected capacity change from 0 to 8192 [ 154.919751][ T7455] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 154.942525][ T7455] REISERFS (device loop2): using ordered data mode [ 154.955903][ T7455] reiserfs: using flush barriers [ 154.963640][ T7455] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 155.017963][ T7455] REISERFS (device loop2): checking transaction log (loop2) [ 155.043718][ T7455] REISERFS (device loop2): Using r5 hash to sort names [ 155.051907][ T7455] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 155.135244][ T5848] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 155.143401][ T25] audit: type=1800 audit(2000000016.039:16): pid=7455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1160" name="file1" dev="loop2" ino=2 res=0 errno=0 [ 155.514320][ T7484] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1172'. [ 155.534404][ T5848] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.554025][ T5848] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.568957][ T5848] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.589630][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.655115][ T4236] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 155.788236][ T7503] loop2: detected capacity change from 0 to 2048 [ 155.870813][ T5848] usb 5-1: GET_CAPABILITIES returned 0 [ 155.883360][ T5848] usbtmc 5-1:16.0: can't read capabilities [ 155.905745][ T4236] usb 4-1: Using ep0 maxpacket: 32 [ 155.914126][ T7503] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.973936][ T154] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 156.018458][ T154] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 156.031309][ T154] EXT4-fs (loop2): This should not happen!! Data will be lost [ 156.031309][ T154] [ 156.041675][ T154] EXT4-fs (loop2): Total free blocks count 0 [ 156.045645][ T4236] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 156.047759][ T154] EXT4-fs (loop2): Free/Dirty block details [ 156.069546][ T154] EXT4-fs (loop2): free_blocks=66060288 [ 156.083858][ T4236] usb 4-1: config 0 has no interface number 0 [ 156.100040][ T154] EXT4-fs (loop2): dirty_blocks=32 [ 156.115706][ T4634] usb 5-1: USB disconnect, device number 14 [ 156.122848][ T154] EXT4-fs (loop2): Block reservation details [ 156.171880][ T154] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 156.184023][ T154] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 156.226786][ T154] EXT4-fs (loop2): This should not happen!! Data will be lost [ 156.226786][ T154] [ 156.295368][ T4236] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 156.331569][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.351370][ T4236] usb 4-1: Product: syz [ 156.364354][ T4236] usb 4-1: Manufacturer: syz [ 156.375266][ T4236] usb 4-1: SerialNumber: syz [ 156.400900][ T4236] usb 4-1: config 0 descriptor?? [ 156.447101][ T4236] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 156.464637][ T4236] usb 4-1: selecting invalid altsetting 1 [ 156.470891][ T4236] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 156.492851][ T7538] EXT4-fs (loop1): Ignoring removed orlov option [ 156.515385][ T4236] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 156.527760][ T4236] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 156.545172][ T4236] usb 4-1: media controller created [ 156.573324][ T4236] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.600118][ T7538] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,jqfmt=vfsold,min_batch_time=0x0000000000000000,,errors=continue. Quota mode: none. [ 156.700930][ T7538] EXT4-fs error (device loop1): __ext4_new_inode:1292: comm syz.1.1194: failed to insert inode 16: doubly allocated? [ 156.921013][ T7558] erofs: (device loop1): mounted with root inode @ nid 36. [ 156.984870][ T25] audit: type=1800 audit(2000000017.879:17): pid=7558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1201" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 157.329645][ T25] audit: type=1800 audit(2000000018.229:18): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1211" name="bus" dev="loop0" ino=21 res=0 errno=0 [ 157.346051][ T7562] FAT-fs (loop4): Directory bread(block 64) failed [ 157.410967][ T7562] FAT-fs (loop4): Directory bread(block 65) failed [ 157.430994][ T7562] FAT-fs (loop4): Directory bread(block 66) failed [ 157.483213][ T7562] FAT-fs (loop4): Directory bread(block 67) failed [ 157.507485][ T7562] FAT-fs (loop4): Directory bread(block 68) failed [ 157.514064][ T7562] FAT-fs (loop4): Directory bread(block 69) failed [ 157.521364][ T7562] FAT-fs (loop4): Directory bread(block 70) failed [ 157.533197][ T7562] FAT-fs (loop4): Directory bread(block 71) failed [ 157.540053][ T7562] FAT-fs (loop4): Directory bread(block 72) failed [ 157.558303][ T7562] FAT-fs (loop4): Directory bread(block 73) failed [ 157.574591][ T4192] hfs: node 4:3 still has 1 user(s)! [ 157.643111][ T7558] syz.1.1201 (7558): drop_caches: 2 [ 157.745583][ T7478] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 157.815388][ T5196] wlan1: Trigger new scan to find an IBSS to join [ 157.825208][ T4236] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 157.834661][ T4236] zl10353_read_register: readreg error (reg=127, ret==-71) [ 157.843131][ T7588] binder: 7587:7588 ioctl c018620c 200000000140 returned -1 [ 157.865334][ T5196] ------------[ cut here ]------------ [ 157.871404][ T5196] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 157.882042][ T5196] WARNING: CPU: 0 PID: 5196 at net/mac80211/rate.c:376 __rate_control_send_low+0x62c/0x880 [ 157.892077][ T5196] Modules linked in: [ 157.896025][ T5196] CPU: 0 PID: 5196 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 157.903569][ T5196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 157.913656][ T5196] Workqueue: phy7 ieee80211_scan_work [ 157.919102][ T5196] RIP: 0010:__rate_control_send_low+0x62c/0x880 [ 157.925056][ T4235] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 157.925411][ T5196] Code: 42 0f b6 04 28 84 c0 0f 85 ea 01 00 00 48 8b 04 24 8b 08 48 c7 c7 60 1a 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 64 aa 69 00 <0f> 0b e9 74 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fa ff [ 157.952560][ T5196] RSP: 0018:ffffc9000152f508 EFLAGS: 00010246 [ 157.958765][ T5196] RAX: 50ef6bd01ab6c400 RBX: 000000000000000c RCX: ffff888027fb8000 [ 157.966788][ T5196] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 157.974774][ T5196] RBP: 0000000000000084 R08: ffffc9000152f027 R09: 1ffff920002a5e04 [ 157.982781][ T5196] R10: dffffc0000000000 R11: fffff520002a5e05 R12: ffff88807a1ec168 [ 157.990798][ T5196] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 157.999193][ T5196] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 158.008240][ T5196] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.014824][ T5196] CR2: 00007f6a9155ca08 CR3: 000000000c08e000 CR4: 00000000003506f0 [ 158.022839][ T5196] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 158.030860][ T5196] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 158.038914][ T5196] Call Trace: [ 158.042221][ T5196] [ 158.045208][ T5196] rate_control_send_low+0x194/0x790 [ 158.050539][ T5196] ? ieee80211_scan_work+0x41f/0x1aa0 [ 158.055959][ T5196] rate_control_get_rate+0x207/0x5c0 [ 158.061275][ T5196] ieee80211_tx_h_rate_ctrl+0xaeb/0x16e0 [ 158.066970][ T5196] ? ieee80211_tx_h_select_key+0x1710/0x1710 [ 158.072977][ T5196] ? sta_info_hash_lookup+0x53e/0x580 [ 158.078386][ T5196] ? ieee80211_queue_skb+0xbd/0x20e0 [ 158.083686][ T5196] invoke_tx_handlers_late+0xae/0x1720 [ 158.089283][ T5196] ? ieee80211_tx_h_select_key+0x11fb/0x1710 [ 158.095318][ T5196] ? sta_info_get+0x220/0x230 [ 158.100026][ T5196] ? invoke_tx_handlers_early+0xa26/0x1ca0 [ 158.105872][ T5196] ieee80211_tx+0x2d4/0x460 [ 158.110387][ T5196] ? ieee80211_skb_resize+0x610/0x610 [ 158.115835][ T5196] ? ieee80211_xmit+0x309/0x420 [ 158.120794][ T5196] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 158.126852][ T5196] ieee80211_scan_state_send_probe+0x556/0x8e0 [ 158.133053][ T5196] ieee80211_scan_work+0x41f/0x1aa0 [ 158.138297][ T5196] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 158.144217][ T5196] ? _raw_spin_unlock_irq+0x1f/0x40 [ 158.149493][ T5196] process_one_work+0x867/0xff0 [ 158.154383][ T5196] ? worker_detach_from_pool+0x240/0x240 [ 158.160086][ T5196] ? lockdep_hardirqs_off+0x70/0x100 [ 158.165436][ T5196] ? _raw_spin_lock_irq+0xb7/0xf0 [ 158.170500][ T5196] ? _raw_spin_lock_irqsave+0x100/0x100 [ 158.176105][ T5196] ? wq_worker_running+0x97/0x170 [ 158.181153][ T5196] worker_thread+0xad7/0x12a0 [ 158.185890][ T5196] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 158.186854][ T4235] usb 1-1: Using ep0 maxpacket: 8 [ 158.191805][ T5196] kthread+0x42e/0x520 [ 158.191831][ T5196] ? rcu_lock_release+0x20/0x20 [ 158.191849][ T5196] ? kthread_blkcg+0xd0/0xd0 [ 158.191867][ T5196] ret_from_fork+0x1f/0x30 [ 158.191896][ T5196] [ 158.217904][ T5196] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 158.225188][ T5196] CPU: 0 PID: 5196 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 158.232723][ T5196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 158.242942][ T5196] Workqueue: phy7 ieee80211_scan_work [ 158.248317][ T5196] Call Trace: [ 158.251579][ T5196] [ 158.254602][ T5196] dump_stack_lvl+0x188/0x250 [ 158.259296][ T5196] ? show_regs_print_info+0x20/0x20 [ 158.264512][ T5196] ? load_image+0x410/0x410 [ 158.269026][ T5196] panic+0x2f8/0x850 [ 158.272939][ T5196] ? bpf_jit_dump+0xd0/0xd0 [ 158.277453][ T5196] ? ret_from_fork+0x1f/0x30 [ 158.282030][ T5196] ? __rate_control_send_low+0x62c/0x880 [ 158.287831][ T5196] __warn+0x248/0x2b0 [ 158.291798][ T5196] ? __rate_control_send_low+0x62c/0x880 [ 158.297419][ T5196] report_bug+0x1b9/0x2e0 [ 158.301783][ T5196] handle_bug+0x3a/0x70 [ 158.305922][ T5196] exc_invalid_op+0x16/0x40 [ 158.310411][ T5196] asm_exc_invalid_op+0x16/0x20 [ 158.315261][ T5196] RIP: 0010:__rate_control_send_low+0x62c/0x880 [ 158.321491][ T5196] Code: 42 0f b6 04 28 84 c0 0f 85 ea 01 00 00 48 8b 04 24 8b 08 48 c7 c7 60 1a 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 64 aa 69 00 <0f> 0b e9 74 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fa ff [ 158.341105][ T5196] RSP: 0018:ffffc9000152f508 EFLAGS: 00010246 [ 158.347250][ T5196] RAX: 50ef6bd01ab6c400 RBX: 000000000000000c RCX: ffff888027fb8000 [ 158.355210][ T5196] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 158.363258][ T5196] RBP: 0000000000000084 R08: ffffc9000152f027 R09: 1ffff920002a5e04 [ 158.371216][ T5196] R10: dffffc0000000000 R11: fffff520002a5e05 R12: ffff88807a1ec168 [ 158.379175][ T5196] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 158.387150][ T5196] ? __rate_control_send_low+0x62c/0x880 [ 158.392899][ T5196] rate_control_send_low+0x194/0x790 [ 158.398186][ T5196] ? ieee80211_scan_work+0x41f/0x1aa0 [ 158.403547][ T5196] rate_control_get_rate+0x207/0x5c0 [ 158.408823][ T5196] ieee80211_tx_h_rate_ctrl+0xaeb/0x16e0 [ 158.414454][ T5196] ? ieee80211_tx_h_select_key+0x1710/0x1710 [ 158.420431][ T5196] ? sta_info_hash_lookup+0x53e/0x580 [ 158.425795][ T5196] ? ieee80211_queue_skb+0xbd/0x20e0 [ 158.431071][ T5196] invoke_tx_handlers_late+0xae/0x1720 [ 158.436519][ T5196] ? ieee80211_tx_h_select_key+0x11fb/0x1710 [ 158.442485][ T5196] ? sta_info_get+0x220/0x230 [ 158.447205][ T5196] ? invoke_tx_handlers_early+0xa26/0x1ca0 [ 158.453008][ T5196] ieee80211_tx+0x2d4/0x460 [ 158.457503][ T5196] ? ieee80211_skb_resize+0x610/0x610 [ 158.462875][ T5196] ? ieee80211_xmit+0x309/0x420 [ 158.467716][ T5196] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 158.473510][ T5196] ieee80211_scan_state_send_probe+0x556/0x8e0 [ 158.479668][ T5196] ieee80211_scan_work+0x41f/0x1aa0 [ 158.484855][ T5196] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 158.490739][ T5196] ? _raw_spin_unlock_irq+0x1f/0x40 [ 158.495928][ T5196] process_one_work+0x867/0xff0 [ 158.500778][ T5196] ? worker_detach_from_pool+0x240/0x240 [ 158.506396][ T5196] ? lockdep_hardirqs_off+0x70/0x100 [ 158.511671][ T5196] ? _raw_spin_lock_irq+0xb7/0xf0 [ 158.516684][ T5196] ? _raw_spin_lock_irqsave+0x100/0x100 [ 158.522222][ T5196] ? wq_worker_running+0x97/0x170 [ 158.527261][ T5196] worker_thread+0xad7/0x12a0 [ 158.531937][ T5196] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 158.537918][ T5196] kthread+0x42e/0x520 [ 158.541979][ T5196] ? rcu_lock_release+0x20/0x20 [ 158.546825][ T5196] ? kthread_blkcg+0xd0/0xd0 [ 158.551491][ T5196] ret_from_fork+0x1f/0x30 [ 158.555904][ T5196] [ 158.559133][ T5196] Kernel Offset: disabled [ 158.563778][ T5196] Rebooting in 86400 seconds..