last executing test programs: 2.749058013s ago: executing program 1 (id=1106): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x13, 0x8041) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d00010000"], 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x1, 0x1}]}) 2.677368855s ago: executing program 4 (id=1109): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@noquota}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x45f, &(0x7f00000004c0)="$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") unlink(&(0x7f0000000240)='./file0/file0\x00') chdir(&(0x7f0000000400)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 2.328099484s ago: executing program 3 (id=1115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.243141475s ago: executing program 0 (id=1116): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}, {@err_cont}, {@journal_async_commit}]}, 0x1, 0x4426, &(0x7f0000008940)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000040), 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 2.243001355s ago: executing program 3 (id=1117): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000005c0)="80", 0x1, 0x30040084, &(0x7f0000000600)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) recvmsg(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x40000000) 2.128381028s ago: executing program 3 (id=1120): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@resuid}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@bsdgroups}, {@mb_optimize_scan}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, 0x0, 0x0) utimes(&(0x7f0000000000)='./file1\x00', 0x0) 2.045319091s ago: executing program 4 (id=1121): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.707415788s ago: executing program 3 (id=1124): getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x2c, 0x10, 0x401, 0x210000, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x404b}, [@IFLA_ADDRESS={0xa}]}, 0x2c}}, 0x48090) 1.707187448s ago: executing program 4 (id=1125): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 1.668600369s ago: executing program 4 (id=1126): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002180)=@newqdisc={0x48, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x6, 0x306b, 0x4, 0x5}}}}]}, 0x48}}, 0x800) 1.596373071s ago: executing program 4 (id=1127): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x15d) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) 1.528666053s ago: executing program 3 (id=1129): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 1.206396631s ago: executing program 0 (id=1132): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1411, 0x2, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x44004) 1.073608134s ago: executing program 1 (id=1133): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 872.567048ms ago: executing program 0 (id=1134): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0x9a, 0x400c010, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 872.482378ms ago: executing program 1 (id=1135): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1ea, 0x0, &(0x7f0000000280)="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", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5}, 0x50) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 832.866589ms ago: executing program 1 (id=1136): unshare(0x62040200) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x94d12, &(0x7f0000000b40)=ANY=[], 0x9, 0x120d, &(0x7f0000001280)="$eJzs3M+LG2UYB/Bnd2u3bt0faq22IL7oRS9Ddw9e9BJkC9KA0jZCKwhTN9GwYxIyYSEiVk+eBP8OEUTwJog3vezF/0DwthdvVhBHNqlto6k0omYpn88lDzzzTZ43IYEJ78zBi5+8s9sqs1Y+iMWFhVjsRaQbKVIsxh8+iOde+Pa7Jy9duXqhVq9vX0zpfO3y5vMppbWnvn79vc+e/mZw8rUv175ajv2NNw5+2vpx//T+mYPfLr/dLlO7TJ3uIOXpWrc7yK8VzbTTLnezlF4tmnnZTO1O2exP9FtFt9cbpryzs7rS6zfLMuWdpZuTpEF/mPK38nYnZVmWVleC2R27VTU+vVFVVURVPRDHo6qq6sFYiZPxUKzGWqzHRjwcj8SjcSoei9PxeDwRX/zw+fAwAQAAAAAAAAAAAAAAAAAAAPx7Zr3+/8zoqHlPDQAAAAAAAAAAAAAAAAAAAPeXS1euXqjV69sXUzoRUXy019hrjB/H/Vor2lFEM87Fevwao6v/x8b1+Zfr2+fSyEZ8WFy/mb++11iazG+ObicwNb85zqfJ/HKs3JnfivU4NT2/NTV/Ip595o58Fuvx/ZvRjSJ24jB7O//+ZkovvVL/U/7s6DgAAAC4H2Tplqnn71l2t/44P8P/AxPn14fZs8fmunQiohy+u5sXRbOvOPLF8fmO8UtVVf/VSywdgbf3b4u7f1OWI+Jenufnaa2FiDgaC/xLMe9fJv4Ptz/0eU8CAAAAAAAAAADALP7pDsGPx9vD72nn47zXCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Ds7cCwAAAAAIMzfOo2ODQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACArwIAAP//GgHNcg==") r0 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000140)={'mangle\x00', 0x0, [0x6, 0x20003f, 0x0, 0x4, 0x28]}, &(0x7f0000000440)=0x54) 818.57102ms ago: executing program 0 (id=1137): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000140)='./file1\x00', 0x2004890, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xfd, 0x2a7, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 548.374706ms ago: executing program 3 (id=1139): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @remote, 0x9}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffe26, &(0x7f0000000080)=[{&(0x7f00000000c0)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4044) 513.832507ms ago: executing program 2 (id=1140): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDADDIO(r0, 0x4b34, 0x0) 436.601929ms ago: executing program 2 (id=1141): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x2) 382.87051ms ago: executing program 4 (id=1142): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000400)="cde0095f3d90dc2f", 0x32, 0x800, &(0x7f00000021c0)={0x2, 0x4e26, @multicast1}, 0x10) 379.895031ms ago: executing program 0 (id=1143): socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0xc}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 361.27842ms ago: executing program 2 (id=1144): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003"], 0x174}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x1000000, 0x0}) 326.203572ms ago: executing program 2 (id=1145): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10) 176.443275ms ago: executing program 2 (id=1146): openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/fscreate\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 176.045955ms ago: executing program 1 (id=1147): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 127.787457ms ago: executing program 0 (id=1148): capset(0x0, 0x0) unshare(0x22020600) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fstat(r0, &(0x7f00000004c0)) 103.168637ms ago: executing program 1 (id=1149): sched_setscheduler(0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0xc0) read$hidraw(r0, &(0x7f0000000140)=""/244, 0xf4) write$cgroup_subtree(r0, 0x0, 0x6) 0s ago: executing program 2 (id=1150): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@bridge_setlink={0x24, 0x13, 0xa29, 0x4, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): ected capacity change from 0 to 512 [ 67.382897][ T4528] EXT4-fs (loop4): Ignoring removed orlov option [ 67.404919][ T4506] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 67.455516][ T4528] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 67.496183][ T4541] loop1: detected capacity change from 0 to 1024 [ 67.574097][ T4528] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.620682][ T4528] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #16: comm syz.4.109: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 67.696982][ T4528] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.109: couldn't read orphan inode 16 (err -117) [ 67.721409][ T4191] ocfs2: Unmounting device (7,0) on (node local) [ 67.745364][ T4541] hfsplus: xattr searching failed [ 67.757848][ T4528] EXT4-fs (loop4): 1 orphan inode deleted [ 67.763639][ T4528] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,lazytime,,errors=continue. Quota mode: none. [ 67.895810][ T429] hfsplus: bad catalog file entry [ 67.918840][ T429] hfsplus: b-tree write err: -5, ino 3 [ 67.954030][ T4528] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 68.112239][ T4549] loop2: detected capacity change from 0 to 16384 [ 68.270946][ T4560] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.499960][ T4576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.125'. [ 68.979204][ T4590] EXT4-fs (loop4): 1 orphan inode deleted [ 68.994546][ T4553] [ 68.994546][ T4553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 68.994546][ T4553] [ 69.046289][ T4590] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 69.063588][ T4590] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.152226][ T4553] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 69.152226][ T4553] [ 69.220030][ T4553] ERROR: (device loop0): jfs_unlink: [ 69.220030][ T4553] [ 69.290608][ T4553] ERROR: (device loop0): diWrite: ixpxd invalid [ 69.290608][ T4553] [ 69.327468][ T4553] ERROR: (device loop0): txCommit: [ 69.327468][ T4553] [ 69.455990][ T4553] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 69.455990][ T4553] [ 69.514418][ T1107] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.520528][ T4553] [ 69.520528][ T4553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.520528][ T4553] [ 69.588207][ T4553] [ 69.588207][ T4553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.588207][ T4553] [ 69.953955][ T1107] usb 4-1: unable to get BOS descriptor or descriptor too short [ 69.993219][ T4630] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 70.066126][ T1107] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.165629][ T4644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 70.354235][ T1107] usb 4-1: string descriptor 0 read error: -22 [ 70.360584][ T1107] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 70.399987][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.414176][ T4652] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.475067][ T4655] EXT4-fs (loop1): can't mount with commit=10, fs mounted w/o journal [ 70.478306][ T4652] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,nojournal_checksum,lazytime,noauto_da_alloc,. Quota mode: writeback. [ 70.817189][ T4675] set_capacity_and_notify: 6 callbacks suppressed [ 70.817201][ T4675] loop2: detected capacity change from 0 to 64 [ 70.833885][ T4231] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.916248][ T4677] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.924979][ T4677] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.969047][ T4677] netlink: 104 bytes leftover after parsing attributes in process `syz.0.158'. [ 71.013531][ T4679] loop0: detected capacity change from 0 to 256 [ 71.077285][ T4683] loop2: detected capacity change from 0 to 2048 [ 71.094636][ T4679] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 71.143989][ T1107] usb 4-1: failed to read current rate; disabling the check [ 71.185787][ T4683] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 71.193956][ T4231] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 71.214793][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.250637][ T4231] usb 5-1: config 0 descriptor?? [ 71.258243][ T4687] device erspan0 entered promiscuous mode [ 71.285291][ T4683] EXT4-fs (loop2): shut down requested (2) [ 71.296151][ T4231] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 71.353717][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.360373][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.392874][ T26] usb 4-1: USB disconnect, device number 2 [ 71.655870][ T4702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'. [ 71.734034][ T4231] gspca_cpia1: usb_control_msg 03, error -32 [ 71.743194][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 71.773976][ T4231] gspca_cpia1: usb_control_msg 03, error -71 [ 71.793922][ T4231] gspca_cpia1: usb_control_msg 01, error -71 [ 71.839225][ T4231] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 71.875019][ T4231] usb 5-1: USB disconnect, device number 3 [ 72.012909][ T4712] loop0: detected capacity change from 0 to 4096 [ 72.046503][ T4720] netlink: 24 bytes leftover after parsing attributes in process `syz.3.173'. [ 72.090435][ T4712] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 72.159154][ T1107] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 72.162761][ T4693] loop1: detected capacity change from 0 to 32768 [ 72.424037][ T26] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 72.454260][ T1107] usb 3-1: Using ep0 maxpacket: 16 [ 72.584230][ T1107] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.606076][ T1107] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.638112][ T1107] usb 3-1: config 0 interface 0 has no altsetting 0 [ 72.645097][ T1107] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 72.664646][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.709050][ T1107] usb 3-1: config 0 descriptor?? [ 72.793982][ T26] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 72.814405][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.859360][ T4745] loop1: detected capacity change from 0 to 512 [ 72.862519][ T26] usb 4-1: config 0 descriptor?? [ 72.877245][ T4735] loop4: detected capacity change from 0 to 32768 [ 72.905053][ T26] cp210x 4-1:0.0: cp210x converter detected [ 72.973105][ T4735] XFS (loop4): Mounting V5 Filesystem [ 72.984860][ T4710] udc-core: couldn't find an available UDC or it's busy [ 73.010450][ T4710] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 73.062580][ T4745] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 73.113160][ T4745] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.171691][ T4735] XFS (loop4): Ending clean mount [ 73.323884][ T4232] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.333121][ T4195] XFS (loop4): Unmounting Filesystem [ 73.520035][ T4691] usb 3-1: USB disconnect, device number 3 [ 73.567186][ T26] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 73.585743][ T26] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 73.607102][ T26] usb 4-1: cp210x converter now attached to ttyUSB0 [ 73.610555][ T4771] loop1: detected capacity change from 0 to 512 [ 73.644586][ T26] usb 4-1: USB disconnect, device number 3 [ 73.707328][ T4771] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.725114][ T26] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 73.733471][ T26] cp210x 4-1:0.0: device disconnected [ 73.744060][ T4232] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 73.767896][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.791524][ T4232] usb 1-1: config 0 descriptor?? [ 73.844906][ T4232] cp210x 1-1:0.0: cp210x converter detected [ 74.109018][ T4786] loop4: detected capacity change from 0 to 256 [ 74.217893][ T4791] loop1: detected capacity change from 0 to 64 [ 74.298462][ T4232] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 74.310517][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 74.378570][ T4232] usb 1-1: cp210x converter now attached to ttyUSB0 [ 74.459480][ T4793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.583110][ T1107] usb 1-1: USB disconnect, device number 2 [ 74.614113][ T1107] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 74.639707][ T1107] cp210x 1-1:0.0: device disconnected [ 74.665731][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 74.710712][ T4807] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.728639][ T4796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.150237][ T4830] erofs: (device loop4): mounted with root inode @ nid 36. [ 75.255972][ T25] audit: type=1800 audit(1784856949.324:4): pid=4830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.203" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 75.930410][ T4870] set_capacity_and_notify: 2 callbacks suppressed [ 75.930425][ T4870] loop2: detected capacity change from 0 to 2048 [ 76.103826][ T4880] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.132820][ T4882] loop4: detected capacity change from 0 to 512 [ 76.521119][ T4894] loop2: detected capacity change from 0 to 2048 [ 76.574742][ T4895] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.580522][ T4861] loop3: detected capacity change from 0 to 32768 [ 76.638053][ T4894] attempt to access beyond end of device [ 76.638053][ T4894] loop2: rw=0, want=281474976710724, limit=2048 [ 76.694106][ T4894] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 76.702862][ T4894] attempt to access beyond end of device [ 76.702862][ T4894] loop2: rw=0, want=281474976710724, limit=2048 [ 76.733131][ T4894] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 76.763841][ T4187] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.781568][ T4861] XFS (loop3): Mounting V5 Filesystem [ 76.805735][ T4894] attempt to access beyond end of device [ 76.805735][ T4894] loop2: rw=0, want=281474976710724, limit=2048 [ 76.819646][ T4894] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 76.828832][ T4894] attempt to access beyond end of device [ 76.828832][ T4894] loop2: rw=0, want=281474976710724, limit=2048 [ 76.841297][ T4894] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 76.850245][ T4894] attempt to access beyond end of device [ 76.850245][ T4894] loop2: rw=0, want=281474976710724, limit=2048 [ 76.862933][ T4894] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 76.872799][ T4894] attempt to access beyond end of device [ 76.872799][ T4894] loop2: rw=0, want=281474976710724, limit=2048 [ 76.885242][ T4894] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 76.894458][ T4894] attempt to access beyond end of device [ 76.894458][ T4894] loop2: rw=0, want=281474976710724, limit=2048 [ 76.906825][ T4894] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 76.912944][ T4861] XFS (loop3): Ending clean mount [ 76.922537][ T4894] attempt to access beyond end of device [ 76.922537][ T4894] loop2: rw=0, want=281474976710724, limit=2048 [ 76.938944][ T4894] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 77.013949][ T4187] usb 1-1: Using ep0 maxpacket: 8 [ 77.054158][ T4894] attempt to access beyond end of device [ 77.054158][ T4894] loop2: rw=0, want=281474976710724, limit=2048 [ 77.110456][ T4894] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 77.127614][ T4894] attempt to access beyond end of device [ 77.127614][ T4894] loop2: rw=0, want=281474976710724, limit=2048 [ 77.140295][ T4894] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 77.151105][ T4894] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 77.161622][ T4894] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 77.174158][ T4187] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 77.184241][ T4894] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 77.188539][ T4187] usb 1-1: config 179 has no interface number 0 [ 77.204082][ T4894] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 77.220473][ T4187] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 77.223111][ T4894] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 77.242249][ T4187] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 77.264252][ T4894] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 77.279089][ T4187] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 77.290442][ T25] audit: type=1800 audit(1784856951.354:5): pid=4894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.230" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 77.310187][ T4232] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.319938][ T4187] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 77.331880][ T4187] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 77.345882][ T4187] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 77.355999][ T4187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.364443][ T4894] syz.2.230 (4894) used greatest stack depth: 19696 bytes left [ 77.375903][ T4186] XFS (loop3): Unmounting Filesystem [ 77.378763][ T4893] loop1: detected capacity change from 0 to 32768 [ 77.394637][ T4890] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.551812][ T4910] program syz.2.237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.599042][ T4232] usb 5-1: Using ep0 maxpacket: 32 [ 77.755165][ T4187] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5 [ 77.794169][ T4232] usb 5-1: unable to get BOS descriptor or descriptor too short [ 77.863060][ T4914] netlink: 'syz.1.238': attribute type 3 has an invalid length. [ 77.873040][ T4914] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.238'. [ 77.886019][ T4232] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 27, changing to 7 [ 77.931989][ T1107] usb 1-1: USB disconnect, device number 3 [ 77.937935][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 77.938077][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 78.005527][ T1107] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 78.010907][ T4913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.094212][ T4232] usb 5-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 78.127113][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.154557][ T4232] usb 5-1: Product: syz [ 78.158752][ T4232] usb 5-1: Manufacturer: syz [ 78.163444][ T4232] usb 5-1: SerialNumber: syz [ 78.196093][ T4924] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.460428][ T4908] udc-core: couldn't find an available UDC or it's busy [ 78.522571][ T4908] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 78.553306][ T4908] udc-core: couldn't find an available UDC or it's busy [ 78.610128][ T4908] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 78.640252][ T4945] loop0: detected capacity change from 0 to 1024 [ 78.651720][ T4950] netlink: 6 bytes leftover after parsing attributes in process `syz.2.252'. [ 78.739424][ T4945] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.254: lblock 2 mapped to illegal pblock 2 (length 1) [ 78.796441][ T4945] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 78.806794][ T4945] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.254: lblock 0 mapped to illegal pblock 48 (length 1) [ 78.843531][ T4232] usb 5-1: USB disconnect, device number 4 [ 78.846937][ T4961] input: syz0 as /devices/virtual/input/input6 [ 78.917525][ T4945] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 79.029023][ T4945] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.254: Failed to acquire dquot type 0 [ 79.085277][ T4945] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 79.105871][ T4945] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.254: mark_inode_dirty error [ 79.142729][ T4945] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 79.203380][ T4945] EXT4-fs (loop0): 1 orphan inode deleted [ 79.229090][ T1235] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 79.237498][ T4945] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 79.301865][ T1235] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 79.337359][ T1235] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:4: Failed to release dquot type 0 [ 79.604022][ T4945] EXT4-fs (loop0): Ignoring removed bh option [ 79.616037][ T4945] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.254: lblock 0 mapped to illegal pblock 48 (length 1) [ 79.694992][ T4945] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 79.759756][ T4945] EXT4-fs (loop0): Ignoring removed bh option [ 79.960395][ T4691] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.215772][ T4691] usb 2-1: Using ep0 maxpacket: 16 [ 80.296877][ T5042] program syz.4.294 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.333687][ T5045] loop3: detected capacity change from 0 to 512 [ 80.340408][ T4691] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 80.354400][ T4691] usb 2-1: config 0 has no interface number 0 [ 80.377914][ T4691] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.424041][ T4691] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.446244][ T5045] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 80.447579][ T5050] loop4: detected capacity change from 0 to 256 [ 80.462343][ T4691] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 80.489607][ T5052] loop0: detected capacity change from 0 to 2048 [ 80.497337][ T4691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.512269][ T4691] usb 2-1: config 0 descriptor?? [ 80.555457][ T429] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 80.575833][ T5050] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 80.615688][ T5052] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.653610][ T5056] loop2: detected capacity change from 0 to 512 [ 80.763912][ T5059] erofs: (device loop3): mounted with root inode @ nid 36. [ 81.090654][ T5071] set_capacity_and_notify: 1 callbacks suppressed [ 81.090670][ T5071] loop2: detected capacity change from 0 to 2048 [ 81.135035][ T5073] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 81.136826][ T5071] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 81.200992][ T5071] NILFS (loop2): mounting unchecked fs [ 81.218524][ T4691] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0002/input/input7 [ 81.240441][ T5079] netlink: 'syz.4.312': attribute type 1 has an invalid length. [ 81.273121][ T4713] udevd[4713]: incorrect nilfs2 checksum on /dev/loop2 [ 81.280974][ T4691] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0002/input/input8 [ 81.290610][ T5071] NILFS (loop2): recovery complete [ 81.292973][ T5079] netlink: 'syz.4.312': attribute type 2 has an invalid length. [ 81.329466][ T5083] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.337449][ T4691] uclogic 0003:28BD:0071.0002: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 81.352894][ T5082] netlink: 'syz.4.312': attribute type 1 has an invalid length. [ 81.375483][ T5082] netlink: 'syz.4.312': attribute type 2 has an invalid length. [ 81.508236][ T4690] usb 2-1: USB disconnect, device number 2 [ 81.623662][ T13] cfg80211: failed to load regulatory.db [ 81.705532][ T5091] netlink: 'syz.3.317': attribute type 5 has an invalid length. [ 81.716810][ T5086] fido_id[5086]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 81.787039][ T4691] kernel write not supported for file [eventfd] (pid: 4691 comm: kworker/1:6) [ 82.163855][ T13] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 82.175133][ T5113] loop1: detected capacity change from 0 to 64 [ 82.185469][ T5114] netem: change failed [ 82.314099][ T4690] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 82.553875][ T4690] usb 4-1: Using ep0 maxpacket: 8 [ 82.619146][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.658236][ T13] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 82.673928][ T13] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 82.674038][ T4690] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 82.683204][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.755909][ T13] usb 1-1: config 0 descriptor?? [ 82.820504][ T13] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 82.836173][ T13] dvb-usb: bulk message failed: -22 (3/0) [ 82.847294][ T5143] loop2: detected capacity change from 0 to 128 [ 82.866342][ T4690] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 82.884037][ T4690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.885314][ T13] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 82.922705][ T4690] usb 4-1: Product: syz [ 82.942005][ T4690] usb 4-1: Manufacturer: syz [ 82.953149][ T13] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 82.978844][ T4690] usb 4-1: SerialNumber: syz [ 82.981220][ T13] usb 1-1: media controller created [ 82.995432][ T4690] usb 4-1: config 0 descriptor?? [ 83.008463][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.032914][ T5149] loop1: detected capacity change from 0 to 512 [ 83.051215][ T13] dvb-usb: bulk message failed: -22 (6/0) [ 83.055455][ T4690] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 83.073577][ T4690] usb 4-1: setting power ON [ 83.078082][ T13] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 83.089139][ T4690] dvb-usb: bulk message failed: -22 (2/0) [ 83.098279][ T4690] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 83.134150][ T4690] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 83.155875][ T13] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 83.205594][ T13] dvb-usb: schedule remote query interval to 150 msecs. [ 83.206311][ T5149] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.212580][ T13] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 83.242710][ T13] usb 1-1: USB disconnect, device number 4 [ 83.246573][ T5106] dvb-usb: bulk message failed: -22 (2/0) [ 83.256117][ T4690] usb 4-1: media controller created [ 83.276992][ T5106] dvb-usb: bulk message failed: -22 (2/0) [ 83.316697][ T13] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 83.363954][ T4690] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.408153][ T4690] usb 4-1: selecting invalid altsetting 6 [ 83.427615][ T4690] usb 4-1: digital interface selection failed (-22) [ 83.434792][ T4690] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 83.474270][ T4690] usb 4-1: setting power OFF [ 83.479391][ T4690] dvb-usb: bulk message failed: -22 (2/0) [ 83.485889][ T4690] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 83.495598][ T4690] (NULL device *): no alternate interface [ 83.511897][ T4690] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 83.530663][ T4690] usb 4-1: USB disconnect, device number 4 [ 83.593689][ T5165] loop1: detected capacity change from 0 to 128 [ 83.685602][ T5168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'. [ 83.718325][ T5168] netlink: 20 bytes leftover after parsing attributes in process `syz.2.350'. [ 83.887806][ T5183] netlink: 36 bytes leftover after parsing attributes in process `syz.2.353'. [ 84.335461][ T5213] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 84.342574][ T5213] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 84.462214][ T5219] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.489664][ T5222] loop0: detected capacity change from 0 to 64 [ 84.562161][ T5223] loop4: detected capacity change from 0 to 2048 [ 84.587402][ T25] audit: type=1800 audit(1784856958.654:6): pid=5222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.366" name="file2" dev="loop0" ino=21 res=0 errno=0 [ 84.660027][ T25] audit: type=1800 audit(1784856958.724:7): pid=5222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.366" name="file2" dev="loop0" ino=21 res=0 errno=0 [ 84.717009][ T5223] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 84.743876][ T5223] NILFS (loop4): mounting unchecked fs [ 84.796589][ T5223] NILFS (loop4): recovery complete [ 84.865620][ T5235] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.972295][ T5241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'. [ 85.169969][ T5245] loop0: detected capacity change from 0 to 4096 [ 85.283101][ T5256] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.381702][ T25] audit: type=1800 audit(1784856959.444:8): pid=5258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.374" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 85.750875][ T5275] loop3: detected capacity change from 0 to 64 [ 85.788979][ T5238] loop2: detected capacity change from 0 to 32768 [ 85.833895][ T4690] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.853336][ T5238] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.372 (5238) [ 85.869683][ T5277] EXT4-fs (loop0): Ignoring removed bh option [ 85.876981][ T5277] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.911319][ T25] audit: type=1800 audit(1784856959.974:9): pid=5275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.385" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 85.942456][ T5277] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,norecovery,bsddf,dioread_nolock,. Quota mode: none. [ 86.021306][ T5238] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 86.032929][ T5238] BTRFS info (device loop2): force zlib compression, level 3 [ 86.040641][ T5238] BTRFS info (device loop2): turning on flush-on-commit [ 86.047779][ T5238] BTRFS info (device loop2): max_inline at 4096 [ 86.051682][ T5277] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 86.054208][ T5238] BTRFS info (device loop2): using free space tree [ 86.054254][ T5238] BTRFS info (device loop2): has skinny extents [ 86.103857][ T4690] usb 2-1: Using ep0 maxpacket: 32 [ 86.159753][ T5283] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 86.224124][ T4690] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.245639][ T4690] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 86.255259][ T4690] usb 2-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 86.266576][ T4690] usb 2-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 86.280806][ T4690] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 86.290684][ T4690] usb 2-1: config 1 interface 1 has no altsetting 0 [ 86.345294][ T5238] BTRFS info (device loop2): enabling ssd optimizations [ 86.454022][ T4690] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 86.478768][ T4690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.514037][ T4690] usb 2-1: Product: syz [ 86.533454][ T4690] usb 2-1: Manufacturer: syz [ 86.553556][ T4690] usb 2-1: SerialNumber: syz [ 86.574178][ T5317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'. [ 86.633193][ T5312] set_capacity_and_notify: 2 callbacks suppressed [ 86.633217][ T5312] loop3: detected capacity change from 0 to 4096 [ 86.781385][ T5312] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 86.847590][ T4690] usb 2-1: selecting invalid altsetting 0 [ 86.874072][ T5312] ntfs3: loop3: Failed to load $Extend. [ 87.066616][ T4690] usb 2-1: 1:1: cannot get freq (v2/v3): err -32 [ 87.223845][ T4231] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 87.328084][ T4690] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 87.412864][ T4690] usb 2-1: USB disconnect, device number 3 [ 87.432091][ T5346] loop0: detected capacity change from 0 to 64 [ 87.485138][ T4231] usb 5-1: Using ep0 maxpacket: 16 [ 87.523243][ T5348] loop3: detected capacity change from 0 to 1024 [ 87.560256][ T5346] Trying to free block not in datazone [ 87.609153][ T4231] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.633968][ T4231] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.658492][ T4231] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.674008][ T4478] udevd[4478]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.698880][ T5348] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 87.712246][ T4231] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 87.727333][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.758192][ T4231] usb 5-1: config 0 descriptor?? [ 87.922428][ T5338] loop2: detected capacity change from 0 to 40427 [ 87.962739][ T5338] F2FS-fs (loop2): invalid crc value [ 88.030309][ T5338] F2FS-fs (loop2): Found nat_bits in checkpoint [ 88.123995][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 88.131692][ T5360] loop1: detected capacity change from 0 to 2048 [ 88.146230][ T5338] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 88.209315][ T5360] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 88.239766][ T4231] hid (null): unknown global tag 0xe [ 88.248543][ T5360] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.249171][ T4231] hid (null): unknown global tag 0xd [ 88.304937][ T5338] handle_bad_sector: 6 callbacks suppressed [ 88.304954][ T5338] attempt to access beyond end of device [ 88.304954][ T5338] loop2: rw=2049, want=45192, limit=40427 [ 88.307663][ T4231] hid (null): unknown global tag 0xe [ 88.372603][ T5338] attempt to access beyond end of device [ 88.372603][ T5338] loop2: rw=2049, want=45232, limit=40427 [ 88.393885][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 88.421786][ T5338] attempt to access beyond end of device [ 88.421786][ T5338] loop2: rw=2049, want=45184, limit=40427 [ 88.524110][ T7] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 88.525551][ T4231] usb 5-1: USB disconnect, device number 5 [ 88.551789][ T4193] attempt to access beyond end of device [ 88.551789][ T4193] loop2: rw=2049, want=45240, limit=40427 [ 88.558655][ T7] usb 1-1: config 0 has no interface number 0 [ 88.741322][ T5374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'. [ 88.760726][ T5374] netlink: 24 bytes leftover after parsing attributes in process `syz.1.417'. [ 88.794281][ T7] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 88.823784][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.838585][ T7] usb 1-1: Product: syz [ 88.863882][ T7] usb 1-1: Manufacturer: syz [ 88.868704][ T7] usb 1-1: SerialNumber: syz [ 88.914892][ T7] usb 1-1: config 0 descriptor?? [ 88.955361][ T7] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 89.065697][ T4232] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 89.157845][ T5383] loop1: detected capacity change from 0 to 4096 [ 89.190385][ T7] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 89.218649][ T5389] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.235103][ T7] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 89.245692][ T5383] attempt to access beyond end of device [ 89.245692][ T5383] loop1: rw=0, want=67108866, limit=4096 [ 89.281875][ T5383] attempt to access beyond end of device [ 89.281875][ T5383] loop1: rw=0, want=8589934596, limit=4096 [ 89.302327][ T5383] attempt to access beyond end of device [ 89.302327][ T5383] loop1: rw=0, want=18446744073709551612, limit=4096 [ 89.323859][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 89.325632][ T5383] NILFS (loop1): nilfs_ioctl_move_inode_block: invalid virtual block address (data): ino=0, cno=7, offset=4, blocknr=0, vblocknr=0 [ 89.368326][ T5383] NILFS (loop1): error -2 preparing GC: cannot read source blocks [ 89.494144][ T4232] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 89.502214][ T4232] usb 4-1: config 0 has no interface number 0 [ 89.514551][ T4232] usb 4-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 89.527084][ T4232] usb 4-1: config 0 interface 1 has no altsetting 0 [ 89.649198][ T7] usb 1-1: USB disconnect, device number 5 [ 89.674025][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 89.686762][ T7] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 89.716474][ T7] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 89.735967][ T7] quatech2 1-1:0.51: device disconnected [ 89.764140][ T4232] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 89.778893][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.793786][ T4232] usb 4-1: Product: syz [ 89.800421][ T4232] usb 4-1: Manufacturer: syz [ 89.812895][ T4232] usb 4-1: SerialNumber: syz [ 89.825797][ T4232] usb 4-1: config 0 descriptor?? [ 89.844064][ T5401] loop4: detected capacity change from 0 to 4096 [ 89.871084][ T5403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 90.062355][ T5405] loop1: detected capacity change from 0 to 2048 [ 90.149723][ T5409] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.196440][ T4232] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 90.254043][ T4232] cx231xx 4-1:0.1: Failed to read PCB config [ 90.260181][ T4232] cx231xx: probe of 4-1:0.1 failed with error -71 [ 90.292705][ T5412] tun0: tun_chr_ioctl cmd 1074025681 [ 90.304227][ T4232] usb 4-1: USB disconnect, device number 5 [ 90.728328][ T5422] loop0: detected capacity change from 0 to 4096 [ 90.859534][ T5407] loop2: detected capacity change from 0 to 40427 [ 90.867902][ T5425] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.901250][ T5407] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 90.909033][ T5407] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 90.934099][ T5407] F2FS-fs (loop2): invalid crc value [ 90.966324][ T5407] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 91.108716][ T5431] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.207453][ T5407] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 91.240660][ T25] audit: type=1800 audit(1784856965.304:10): pid=5433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.438" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 91.289859][ T5407] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 91.315593][ T5439] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.433575][ T5439] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 91.475579][ T5435] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.526875][ T5435] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.573944][ T4690] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 91.658557][ T5447] set_capacity_and_notify: 4 callbacks suppressed [ 91.658572][ T5447] loop3: detected capacity change from 0 to 256 [ 91.691939][ T4193] attempt to access beyond end of device [ 91.691939][ T4193] loop2: rw=2049, want=45104, limit=40427 [ 91.714855][ T1235] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 91.813875][ T4690] usb 5-1: Using ep0 maxpacket: 16 [ 92.094069][ T4690] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 92.103146][ T4690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.133831][ T4690] usb 5-1: Product: syz [ 92.138033][ T4690] usb 5-1: Manufacturer: syz [ 92.142635][ T4690] usb 5-1: SerialNumber: syz [ 92.194633][ T4690] r8152-cfgselector 5-1: config 0 descriptor?? [ 92.296610][ T5474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 92.339808][ T5474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.445'. [ 92.476020][ T5456] loop0: detected capacity change from 0 to 32768 [ 92.506251][ T5485] loop3: detected capacity change from 0 to 256 [ 92.532641][ T5456] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.449 (5456) [ 92.567420][ T5485] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.587337][ T5456] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 92.617896][ T5485] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 92.643919][ T5456] BTRFS info (device loop0): force zlib compression, level 3 [ 92.651343][ T5456] BTRFS info (device loop0): turning on flush-on-commit [ 92.663948][ T4690] r8152-cfgselector 5-1: Unknown version 0x0000 [ 92.670568][ T4690] r8152-cfgselector 5-1: bad CDC descriptors [ 92.688622][ T5485] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 92.706948][ T5456] BTRFS info (device loop0): max_inline at 4096 [ 92.714132][ T5456] BTRFS info (device loop0): using free space tree [ 92.734126][ T4690] r8152-cfgselector 5-1: Unknown version 0x0000 [ 92.747453][ T5456] BTRFS info (device loop0): has skinny extents [ 92.754599][ T4690] r8152-cfgselector 5-1: USB disconnect, device number 6 [ 92.776711][ T5485] exFAT-fs (loop3): failed to exfat_utf8_to_utf16 (estr:ENAMETOOLONG) nls len : 260, unilen : 257 > 255 [ 92.792590][ T5483] loop1: detected capacity change from 0 to 4096 [ 93.071794][ T5510] netlink: 192 bytes leftover after parsing attributes in process `syz.2.466'. [ 93.268819][ T5523] loop4: detected capacity change from 0 to 2048 [ 93.282668][ T5456] BTRFS info (device loop0): enabling ssd optimizations [ 93.372917][ T5523] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.610925][ T5537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 93.621991][ T5537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.477'. [ 93.658408][ T5537] netlink: 'syz.1.477': attribute type 18 has an invalid length. [ 93.720747][ T5537] netlink: 'syz.1.477': attribute type 15 has an invalid length. [ 93.813364][ T5547] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 93.863516][ T5548] IPVS: stopping backup sync thread 5547 ... [ 94.052801][ T5533] loop2: detected capacity change from 0 to 32768 [ 94.088180][ T5555] loop0: detected capacity change from 0 to 2048 [ 94.171018][ T5555] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.299554][ T5533] XFS (loop2): Mounting V5 Filesystem [ 94.520603][ T5533] XFS (loop2): Ending clean mount [ 94.572116][ T5533] XFS (loop2): Quotacheck needed: Please wait. [ 94.681953][ T5588] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.492'. [ 94.702007][ T5581] loop4: detected capacity change from 0 to 8192 [ 94.714232][ T5588] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.492'. [ 94.722136][ T5533] XFS (loop2): Quotacheck: Done. [ 94.724490][ T5589] netem: change failed [ 94.783375][ T5581] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 94.806341][ T5569] loop1: detected capacity change from 0 to 32768 [ 94.865196][ T5581] REISERFS (device loop4): using ordered data mode [ 94.871840][ T5581] reiserfs: using flush barriers [ 94.892194][ T4193] XFS (loop2): Unmounting Filesystem [ 94.902137][ T5581] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.907164][ T5595] loop3: detected capacity change from 0 to 512 [ 94.989084][ T5581] REISERFS (device loop4): checking transaction log (loop4) [ 95.012467][ T5569] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 95.035518][ T5581] REISERFS (device loop4): Using r5 hash to sort names [ 95.075343][ T5581] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 95.107229][ T5569] JBD2: Ignoring recovery information on journal [ 95.136851][ T5595] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,errors=continue,acl,,errors=continue. Quota mode: none. [ 95.171871][ T5595] EXT4-fs (loop3): shut down requested (0) [ 95.181223][ T5595] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.495: error -117 reading directory block [ 95.210423][ T5569] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 95.302716][ T5606] program syz.3.498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.603151][ T25] audit: type=1800 audit(1784856969.664:11): pid=5569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.485" name="file1" dev="loop1" ino=17059 res=0 errno=0 [ 95.752657][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 95.755527][ T5623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'. [ 95.781689][ T5612] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 95.894722][ T5612] ntfs: volume version 3.1. [ 96.002370][ T5612] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 96.037270][ T5612] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 96.060025][ T5612] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to map page. [ 96.070460][ T5612] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 96.146675][ T5612] ntfs: (device loop0): ntfs_truncate(): Cannot truncate inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 96.147453][ T5633] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 96.206821][ T5633] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 96.275309][ T5633] overlayfs: failed to resolve './bus': -2 [ 96.377028][ T4191] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 96.393890][ T4187] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.654272][ T4187] usb 2-1: Using ep0 maxpacket: 8 [ 96.655443][ T5657] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.671332][ T5660] set_capacity_and_notify: 3 callbacks suppressed [ 96.671346][ T5660] loop2: detected capacity change from 0 to 16 [ 96.686365][ T5628] XFS (loop4): Mounting V5 Filesystem [ 96.691872][ T5660] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 96.833936][ T4187] usb 2-1: unable to get BOS descriptor or descriptor too short [ 96.924039][ T4187] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.966634][ T4187] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 96.988618][ T5628] XFS (loop4): Ending clean mount [ 97.006888][ T5628] XFS (loop4): Quotacheck needed: Please wait. [ 97.120929][ T5628] XFS (loop4): Quotacheck: Done. [ 97.154112][ T4187] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 97.193902][ T4187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.208672][ T4187] usb 2-1: Product: syz [ 97.220808][ T4187] usb 2-1: Manufacturer: syz [ 97.230221][ T4187] usb 2-1: SerialNumber: syz [ 97.301165][ T4195] XFS (loop4): Unmounting Filesystem [ 97.633886][ T4690] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 97.677344][ T4187] usb 2-1: MIDIStreaming interface descriptor not found [ 97.777202][ T4187] usb 2-1: USB disconnect, device number 4 [ 97.866180][ T5704] loop0: detected capacity change from 0 to 128 [ 97.909738][ T4690] usb 3-1: Using ep0 maxpacket: 32 [ 97.941241][ T5690] loop3: detected capacity change from 0 to 32768 [ 97.971922][ T5704] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 98.000903][ T5704] hpfs: filesystem error: improperly stopped [ 98.009086][ T5704] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 98.017149][ T5704] hpfs: You really don't want any checks? You are crazy... [ 98.025265][ T5704] hpfs: hpfs_map_sector(): read error [ 98.030654][ T5704] hpfs: code page support is disabled [ 98.036486][ T4690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.048501][ T5704] hpfs: hpfs_map_4sectors(): unaligned read [ 98.054552][ T4690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.064546][ T5704] hpfs: hpfs_map_4sectors(): unaligned read [ 98.070919][ T5704] hpfs: filesystem error: unable to find root dir [ 98.077526][ T4690] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 98.093820][ T4690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.103632][ T4690] usb 3-1: config 0 descriptor?? [ 98.132598][ T5718] loop1: detected capacity change from 0 to 512 [ 98.143159][ T5690] XFS (loop3): Mounting V5 Filesystem [ 98.149909][ T4690] hub 3-1:0.0: USB hub found [ 98.156627][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.167562][ T5710] loop4: detected capacity change from 0 to 4096 [ 98.373962][ T4690] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 98.377606][ T5690] XFS (loop3): Ending clean mount [ 98.438164][ T5690] XFS (loop3): Quotacheck needed: Please wait. [ 98.474028][ T21] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 98.579474][ T5690] XFS (loop3): Quotacheck: Done. [ 98.677512][ T4186] XFS (loop3): Unmounting Filesystem [ 98.840503][ T4690] hid-generic 0003:046D:C31C.0004: item fetching failed at offset 0/1 [ 98.849523][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.874257][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.900361][ T4690] hid-generic: probe of 0003:046D:C31C.0004 failed with error -22 [ 98.911440][ T21] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 98.934509][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.955215][ T21] usb 1-1: config 0 descriptor?? [ 99.118047][ T5748] loop1: detected capacity change from 0 to 4096 [ 99.137052][ T5748] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 99.164711][ T7] usb 3-1: USB disconnect, device number 4 [ 99.238643][ T5748] ntfs: volume version 3.1. [ 99.257146][ T5754] loop4: detected capacity change from 0 to 128 [ 99.303423][ T5748] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 99.323561][ T5748] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 99.333885][ T5754] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 99.353076][ T5748] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to map page. [ 99.374725][ T5748] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 99.414155][ T5758] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 99.440491][ T5748] ntfs: (device loop1): ntfs_truncate(): Cannot truncate inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 99.446859][ T21] sony 0003:054C:0BA0.0005: item fetching failed at offset 0/7 [ 99.489808][ T21] sony 0003:054C:0BA0.0005: parse failed [ 99.502908][ T21] sony: probe of 0003:054C:0BA0.0005 failed with error -22 [ 99.505756][ T5758] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 99.560201][ T5758] overlayfs: failed to resolve './bus': -2 [ 99.674725][ T4185] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 99.715160][ T4231] usb 1-1: USB disconnect, device number 6 [ 99.811841][ T5774] netlink: 72 bytes leftover after parsing attributes in process `syz.1.565'. [ 99.821837][ T5774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.565'. [ 99.834578][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'. [ 99.843686][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'. [ 99.902030][ T5777] loop2: detected capacity change from 0 to 512 [ 99.933855][ T4187] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 99.955066][ T4690] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 99.964122][ T5777] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 99.988303][ T5777] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.110090][ T5785] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.110448][ T5783] syz.1.569 (5783) used greatest stack depth: 18864 bytes left [ 100.203941][ T4690] usb 5-1: Using ep0 maxpacket: 16 [ 100.249760][ T5791] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 100.324065][ T4690] usb 5-1: config 0 has no interfaces? [ 100.379981][ T4187] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.402258][ T4187] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.465523][ T5802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'. [ 100.489003][ T4690] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 100.499249][ T4690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.517157][ T4690] usb 5-1: Product: syz [ 100.521667][ T4690] usb 5-1: Manufacturer: syz [ 100.524075][ T4187] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 100.554016][ T4187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 100.558948][ T4690] usb 5-1: SerialNumber: syz [ 100.576080][ T4187] usb 4-1: SerialNumber: syz [ 100.602781][ T4690] usb 5-1: config 0 descriptor?? [ 100.655178][ T5808] netlink: 11 bytes leftover after parsing attributes in process `syz.2.581'. [ 100.755003][ T5794] loop1: detected capacity change from 0 to 32768 [ 100.848248][ T5819] loop0: detected capacity change from 0 to 256 [ 100.858470][ T5794] XFS (loop1): Mounting V5 Filesystem [ 100.903886][ T5819] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 100.906147][ T4187] usb 4-1: 0:2 : does not exist [ 100.928542][ T4187] usb 4-1: usbmixer: too many channels (61) in unit 5 [ 100.942445][ T4187] usb 4-1: USB disconnect, device number 6 [ 100.972796][ T4690] usb 5-1: USB disconnect, device number 7 [ 101.113357][ T5794] XFS (loop1): Ending clean mount [ 101.129087][ T5794] XFS (loop1): Quotacheck needed: Please wait. [ 101.174734][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.209022][ T5834] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 101.220184][ T5834] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 101.257933][ T5794] XFS (loop1): Quotacheck: Done. [ 101.409246][ T4185] XFS (loop1): Unmounting Filesystem [ 101.682552][ T5846] set_capacity_and_notify: 1 callbacks suppressed [ 101.682566][ T5846] loop2: detected capacity change from 0 to 1024 [ 101.709636][ T5840] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 101.786392][ T5840] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 101.843565][ T5840] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 101.905997][ T5832] loop0: detected capacity change from 0 to 32768 [ 101.913955][ T5840] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 102.003959][ T5840] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 102.012726][ T5840] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 102.042687][ T5832] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 102.081592][ T5840] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 102.103683][ T5832] JBD2: Ignoring recovery information on journal [ 102.115477][ T5853] loop1: detected capacity change from 0 to 256 [ 102.138326][ T5840] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 102.205888][ T5853] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 102.267942][ T5832] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 102.274448][ T5840] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 102.319156][ T5840] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 102.345848][ T4200] Bluetooth: hci2: link tx timeout [ 102.351507][ T4200] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 102.370848][ T5859] loop2: detected capacity change from 0 to 128 [ 102.371258][ T5840] ntfs: volume version 3.1. [ 102.474154][ T5861] mmap: syz.4.598 (5861) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 102.673504][ T4191] ocfs2: Unmounting device (7,0) on (node local) [ 102.802730][ T5863] device vti0 entered promiscuous mode [ 103.509928][ T5890] Bluetooth: hci1: too big key_count value 37575 [ 103.669565][ T5888] loop0: detected capacity change from 0 to 4096 [ 103.680567][ T5897] process 'syz.1.617' launched '/dev/fd/4' with NULL argv: empty string added [ 103.774405][ T5901] capability: warning: `syz.1.619' uses deprecated v2 capabilities in a way that may be insecure [ 103.778236][ T5868] loop3: detected capacity change from 0 to 32768 [ 103.816578][ T5888] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 103.918444][ T5907] loop1: detected capacity change from 0 to 512 [ 103.959019][ T5868] XFS (loop3): Mounting V5 Filesystem [ 103.980594][ T5917] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.622'. [ 104.034190][ T5907] EXT4-fs (loop1): inline encryption not supported [ 104.042341][ T5868] XFS (loop3): Ending clean mount [ 104.049997][ T5907] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 104.049997][ T5907] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 104.049997][ T5907] [ 104.069682][ T5907] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 104.090046][ T5907] EXT4-fs (loop1): 1 truncate cleaned up [ 104.096135][ T5907] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,nouser_xattr,jqfmt=vfsold,errors=remount-ro,. Quota mode: none. [ 104.236911][ T4186] XFS (loop3): Unmounting Filesystem [ 104.389318][ T4231] Bluetooth: hci2: command 0x0406 tx timeout [ 104.934573][ T5943] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.635'. [ 105.296290][ T5956] loop0: detected capacity change from 0 to 256 [ 105.332973][ T5956] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 105.583989][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.720888][ T5961] loop1: detected capacity change from 0 to 16 [ 105.749159][ T5961] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 105.761092][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop1 [ 105.799934][ T5961] cramfs: Error -3 while decompressing! [ 105.817108][ T5961] cramfs: ffffffff9641c088(27)->ffff888051fa7000(4096) [ 105.831379][ T5961] cramfs: Error -3 while decompressing! [ 105.843670][ T5965] loop4: detected capacity change from 0 to 4096 [ 105.848835][ T5961] cramfs: ffffffff9641c088(27)->ffff888051fa7000(4096) [ 105.866624][ T5965] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 105.883974][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 105.955596][ T5965] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 105.983604][ T5965] ntfs3: loop4: Failed to load $Extend. [ 106.017740][ T7] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 106.079785][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 106.132612][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.196420][ T7] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.228116][ T5980] input: syz1 as /devices/virtual/input/input11 [ 106.237283][ T7] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.258497][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.448270][ T5989] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 106.554400][ T7] usb 3-1: GET_CAPABILITIES returned 0 [ 106.559976][ T7] usbtmc 3-1:16.0: can't read capabilities [ 106.844169][ T5958] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -71 [ 106.875482][ T4232] usb 3-1: USB disconnect, device number 5 [ 107.019835][ T5991] loop1: detected capacity change from 0 to 40427 [ 107.059570][ T5991] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 107.139091][ T5991] F2FS-fs (loop1): invalid crc value [ 107.154996][ T6017] program syz.4.667 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.163179][ T5991] F2FS-fs (loop1): Found nat_bits in checkpoint [ 107.272517][ T6023] loop4: detected capacity change from 0 to 256 [ 107.289302][ T5991] F2FS-fs (loop1): recover fsync data on readonly fs [ 107.305798][ T5991] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 107.330435][ T6023] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 107.369011][ T5991] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 107.424337][ T5991] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 107.505993][ T6029] loop2: detected capacity change from 0 to 128 [ 107.572299][ T6007] loop3: detected capacity change from 0 to 40427 [ 107.652172][ T6034] loop0: detected capacity change from 0 to 512 [ 107.695608][ T6007] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x1ffff [ 107.727746][ T6007] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x724 [ 107.738422][ T6007] F2FS-fs (loop3): invalid crc value [ 107.745157][ T6034] EXT4-fs (loop0): 1 truncate cleaned up [ 107.750833][ T6034] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.838104][ T6007] F2FS-fs (loop3): Found nat_bits in checkpoint [ 108.039293][ T6007] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 108.075248][ T6049] loop1: detected capacity change from 0 to 256 [ 108.101399][ T6007] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 108.145918][ T6007] F2FS-fs (loop3) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x7f4/0x1f80 [ 108.167311][ T6007] attempt to access beyond end of device [ 108.167311][ T6007] loop3: rw=2049, want=45104, limit=40427 [ 108.663621][ T6062] loop0: detected capacity change from 0 to 2048 [ 108.716007][ T6062] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 108.759429][ T6062] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.875531][ T6056] loop4: detected capacity change from 0 to 131072 [ 108.947464][ T6064] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 108.998000][ T6068] loop2: detected capacity change from 0 to 128 [ 109.024881][ T6056] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 109.033039][ T6056] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 109.044165][ T6056] F2FS-fs (loop4): invalid crc value [ 109.076893][ T6056] F2FS-fs (loop4): Found nat_bits in checkpoint [ 109.149009][ T6056] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 109.156218][ T6056] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 109.260809][ T6080] loop3: detected capacity change from 0 to 256 [ 109.397761][ T6080] FAT-fs (loop3): Directory bread(block 64) failed [ 109.415879][ T6080] FAT-fs (loop3): Directory bread(block 65) failed [ 109.446477][ T6080] FAT-fs (loop3): Directory bread(block 66) failed [ 109.453587][ T6080] FAT-fs (loop3): Directory bread(block 67) failed [ 109.466615][ T6080] FAT-fs (loop3): Directory bread(block 68) failed [ 109.495596][ T6080] FAT-fs (loop3): Directory bread(block 69) failed [ 109.531968][ T6080] FAT-fs (loop3): Directory bread(block 70) failed [ 109.539842][ T6080] FAT-fs (loop3): Directory bread(block 71) failed [ 109.554873][ T6095] SQUASHFS error: xz decompression failed, data probably corrupt [ 109.562106][ T6080] FAT-fs (loop3): Directory bread(block 72) failed [ 109.579249][ T6080] FAT-fs (loop3): Directory bread(block 73) failed [ 109.607742][ T6095] SQUASHFS error: Failed to read block 0x108: -5 [ 109.629527][ T6095] SQUASHFS error: Unable to read metadata cache entry [106] [ 109.659005][ T6095] SQUASHFS error: Unable to read inode 0x11f [ 109.751286][ T6097] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 109.863942][ T6097] REISERFS (device loop1): using ordered data mode [ 109.914356][ T6097] reiserfs: using flush barriers [ 109.962830][ T6097] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 109.980298][ T6104] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 110.093658][ T6097] REISERFS (device loop1): checking transaction log (loop1) [ 110.136361][ T25] kauditd_printk_skb: 14 callbacks suppressed [ 110.136374][ T25] audit: type=1800 audit(1784856984.204:17): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.700" name="file1" dev="loop3" ino=1048619 res=0 errno=0 [ 110.177764][ T6108] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 110.260481][ T6108] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.444145][ T6097] REISERFS (device loop1): Using tea hash to sort names [ 110.451407][ T6097] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 111.187461][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 111.360575][ T6128] XFS (loop0): Mounting V5 Filesystem [ 111.400625][ T6148] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 2: comm syz.2.719: lblock 2 mapped to illegal pblock 2 (length 1) [ 111.425507][ T6148] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 111.494119][ T6148] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 48: comm syz.2.719: lblock 0 mapped to illegal pblock 48 (length 1) [ 111.509665][ T6128] XFS (loop0): Ending clean mount [ 111.520192][ T6160] FAT-fs (loop3): Directory bread(block 64) failed [ 111.545436][ T6148] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 111.558773][ T6148] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.719: Failed to acquire dquot type 0 [ 111.561298][ T6160] FAT-fs (loop3): Directory bread(block 65) failed [ 111.577162][ T6148] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 111.593483][ T6148] EXT4-fs error (device loop2): ext4_evict_inode:284: inode #11: comm syz.2.719: mark_inode_dirty error [ 111.613975][ T6148] EXT4-fs warning (device loop2): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 111.639684][ T6160] FAT-fs (loop3): Directory bread(block 66) failed [ 111.652669][ T6148] EXT4-fs (loop2): 1 orphan inode deleted [ 111.659552][ T4191] XFS (loop0): Unmounting Filesystem [ 111.659931][ T6160] FAT-fs (loop3): Directory bread(block 67) failed [ 111.668771][ T6148] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 111.678590][ T4885] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.715223][ T6160] FAT-fs (loop3): Directory bread(block 68) failed [ 111.722746][ T6160] FAT-fs (loop3): Directory bread(block 69) failed [ 111.730362][ T6160] FAT-fs (loop3): Directory bread(block 70) failed [ 111.737794][ T6160] FAT-fs (loop3): Directory bread(block 71) failed [ 111.744902][ T6160] FAT-fs (loop3): Directory bread(block 72) failed [ 111.751915][ T6160] FAT-fs (loop3): Directory bread(block 73) failed [ 111.772214][ T4885] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 111.801860][ T4885] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0 [ 111.882339][ T4270] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.918458][ T4270] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 111.927319][ T4270] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:6: Failed to release dquot type 0 [ 111.942503][ T4193] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 111.971451][ T4193] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 111.982994][ T4193] EXT4-fs error (device loop2): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 112.140564][ T6167] set_capacity_and_notify: 10 callbacks suppressed [ 112.140578][ T6167] loop4: detected capacity change from 0 to 256 [ 112.167117][ T6164] loop3: detected capacity change from 0 to 2048 [ 112.203355][ T6167] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 112.290465][ T25] audit: type=1800 audit(1784856986.354:18): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.724" name="file1" dev="loop4" ino=1048625 res=0 errno=0 [ 112.301978][ T6175] loop0: detected capacity change from 0 to 512 [ 112.371076][ T6164] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 112.393293][ T6175] EXT4-fs (loop0): 1 orphan inode deleted [ 112.399092][ T6175] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 112.413376][ T5543] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 112.421006][ T6175] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.442466][ T6164] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 112.496829][ T6164] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 112.511060][ T6164] EXT4-fs (loop3): This should not happen!! Data will be lost [ 112.511060][ T6164] [ 112.521152][ T6164] EXT4-fs (loop3): Total free blocks count 0 [ 112.533256][ T6164] EXT4-fs (loop3): Free/Dirty block details [ 112.539556][ T6164] EXT4-fs (loop3): free_blocks=2415919504 [ 112.550876][ T6164] EXT4-fs (loop3): dirty_blocks=48 [ 112.559631][ T6164] EXT4-fs (loop3): Block reservation details [ 112.568168][ T6164] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 112.573887][ T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.584155][ T6180] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 112.602184][ T6180] EXT4-fs (loop3): This should not happen!! Data will be lost [ 112.602184][ T6180] [ 112.668767][ T5543] usb 3-1: Using ep0 maxpacket: 16 [ 112.776203][ T6182] loop0: detected capacity change from 0 to 512 [ 112.820607][ T6190] loop4: detected capacity change from 0 to 256 [ 112.827465][ T5543] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.838751][ T5543] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.848811][ T5543] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 112.859256][ T6190] exfat: Deprecated parameter 'utf8' [ 112.877428][ T6190] exfat: Deprecated parameter 'utf8' [ 112.884748][ T5543] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 112.891646][ T6190] exfat: Deprecated parameter 'namecase' [ 112.907876][ T5543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.922974][ T5543] usb 3-1: config 0 descriptor?? [ 112.948265][ T6190] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 113.144136][ T13] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 113.158116][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.181146][ T13] usb 2-1: Product: syz [ 113.201104][ T13] usb 2-1: Manufacturer: syz [ 113.212761][ T13] usb 2-1: SerialNumber: syz [ 113.229112][ T13] usb 2-1: config 0 descriptor?? [ 113.276039][ T13] hub 2-1:0.0: bad descriptor, ignoring hub [ 113.282834][ T13] hub: probe of 2-1:0.0 failed with error -5 [ 113.402224][ T6215] netlink: 72 bytes leftover after parsing attributes in process `syz.0.742'. [ 113.413396][ T5543] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 113.423212][ T5543] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 113.447303][ T5543] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 113.455065][ T5543] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 113.462384][ T5543] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 113.476623][ T5543] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 113.486995][ T5543] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 113.496417][ T5543] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 113.503676][ T5543] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 113.504121][ T13] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 113.516137][ T5543] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 113.530735][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.543213][ T5543] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 113.550953][ T5543] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 113.563701][ T5543] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 113.564735][ T13] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 113.572473][ T5543] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 113.588432][ T13] usb 2-1: media controller created [ 113.607324][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.624646][ T5543] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 113.641433][ T5543] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 113.645526][ T13] DVB: Unable to find symbol dib7000p_attach() [ 113.653069][ T5543] microsoft 0003:045E:07DA.0006: no inputs found [ 113.659483][ T13] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 113.671842][ T5543] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 113.709749][ T6173] dib0700: tx buffer length is larger than 4. Not supported. [ 113.733868][ T13] rc_core: IR keymap rc-dib0700-rc5 not found [ 113.740204][ T13] Registered IR keymap rc-empty [ 113.752384][ T13] dvb-usb: could not initialize remote control. [ 113.766996][ T13] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 113.804553][ T13] usb 2-1: USB disconnect, device number 5 [ 113.872374][ T13] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 113.887720][ T5543] usb 3-1: USB disconnect, device number 6 [ 114.087727][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 114.146180][ T6234] netlink: 209832 bytes leftover after parsing attributes in process `syz.4.750'. [ 114.343878][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 114.427800][ T6242] device erspan0 entered promiscuous mode [ 114.470216][ T13] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 114.514088][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 114.644045][ T7] usb 4-1: config 5 has an invalid interface number: 248 but max is 0 [ 114.652454][ T7] usb 4-1: config 5 has no interface number 0 [ 114.664871][ T7] usb 4-1: config 5 interface 248 altsetting 4 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 114.680508][ T7] usb 4-1: config 5 interface 248 has no altsetting 0 [ 114.688033][ T6240] loop1: detected capacity change from 0 to 32768 [ 114.773921][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 114.924031][ T13] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.934942][ T13] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 114.953333][ T13] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.970600][ T13] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.985937][ T7] usb 4-1: string descriptor 0 read error: -22 [ 114.992262][ T7] usb 4-1: New USB device found, idVendor=2304, idProduct=022e, bcdDevice=32.6b [ 115.012187][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.020785][ T13] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.036940][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.057818][ T4232] kernel write not supported for file /sg0 (pid: 4232 comm: kworker/0:7) [ 115.128150][ T6269] loop2: detected capacity change from 0 to 256 [ 115.180312][ T6269] exfat: Deprecated parameter 'utf8' [ 115.214020][ T5334] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 115.221764][ T6269] exfat: Deprecated parameter 'utf8' [ 115.227676][ T6269] exfat: Deprecated parameter 'utf8' [ 115.290754][ T6269] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x0afbdf60, utbl_chksum : 0xe619d30d) [ 115.303291][ T7] dvb-usb: found a 'Pinnacle Expresscard 320cx' in warm state. [ 115.323901][ T13] usb 5-1: GET_CAPABILITIES returned 0 [ 115.329431][ T13] usbtmc 5-1:16.0: can't read capabilities [ 115.345539][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 115.394213][ T7] dvbdev: DVB: registering new adapter (Pinnacle Expresscard 320cx) [ 115.407927][ T7] usb 4-1: media controller created [ 115.427707][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.504937][ T7] DVB: Unable to find symbol dib7000p_attach() [ 115.521632][ T7] dvb-usb: no frontend was attached by 'Pinnacle Expresscard 320cx' [ 115.589040][ T6279] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 115.590563][ T6236] usb 5-1: usbtmc_ioctl_clear_out_halt returned -32 [ 115.641558][ T13] usb 5-1: USB disconnect, device number 8 [ 115.647992][ T7] rc_core: IR keymap rc-dib0700-rc5 not found [ 115.654853][ T7] Registered IR keymap rc-empty [ 115.676597][ T7] dvb-usb: could not initialize remote control. [ 115.683018][ T7] dvb-usb: Pinnacle Expresscard 320cx successfully initialized and connected. [ 115.724275][ T7] dib0700: There's no endpoint for remote controller [ 115.794148][ T5334] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 115.794921][ T6283] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 115.803217][ T5334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.803242][ T5334] usb 2-1: Product: syz [ 115.803255][ T5334] usb 2-1: Manufacturer: syz [ 115.803268][ T5334] usb 2-1: SerialNumber: syz [ 115.878992][ T5334] usb 2-1: config 0 descriptor?? [ 115.925684][ T5334] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 115.967328][ T5334] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 115.989045][ T13] usb 4-1: USB disconnect, device number 7 [ 116.014057][ T5334] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 116.032755][ T6287] loop0: detected capacity change from 0 to 1024 [ 116.039562][ T5334] usb 2-1: media controller created [ 116.039796][ T6278] loop2: detected capacity change from 0 to 32768 [ 116.046858][ T13] dvb-usb: Pinnacle Expresscard 320cx successfully deinitialized and disconnected. [ 116.072513][ T5334] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.134175][ T5334] DVB: Unable to find symbol mt352_attach() [ 116.170751][ T6287] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.774: lblock 2 mapped to illegal pblock 2 (length 1) [ 116.177055][ T6278] XFS (loop2): Mounting V5 Filesystem [ 116.201617][ T5334] DVB: Unable to find symbol nxt6000_attach() [ 116.226277][ T6278] XFS (loop2): Ending clean mount [ 116.241611][ T6278] XFS (loop2): Quotacheck needed: Please wait. [ 116.258925][ T5334] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 116.263723][ T6287] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 116.279210][ T6287] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.774: lblock 0 mapped to illegal pblock 48 (length 1) [ 116.304952][ T6287] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 116.314200][ T6287] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.774: Failed to acquire dquot type 0 [ 116.345172][ T6287] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 116.359561][ T6287] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.774: mark_inode_dirty error [ 116.365068][ T5334] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 116.375001][ T6278] XFS (loop2): Quotacheck: Done. [ 116.386124][ T6287] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 116.423952][ T6287] EXT4-fs (loop0): 1 orphan inode deleted [ 116.429714][ T6287] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 116.442067][ T5334] dvb-usb: schedule remote query interval to 1000 msecs. [ 116.465519][ T5334] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 116.479707][ T5334] dvb-usb: bulk message failed: -22 (7/0) [ 116.488043][ T5334] dvb-usb: bulk message failed: -22 (7/0) [ 116.540846][ T5334] usb 2-1: USB disconnect, device number 6 [ 116.556912][ T4885] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 116.584301][ T4193] XFS (loop2): Unmounting Filesystem [ 116.636861][ T4885] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 116.694523][ T4885] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0 [ 116.782795][ T5334] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 116.827836][ T4885] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 116.844443][ T4885] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 116.853432][ T4885] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0 [ 116.870173][ T4191] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 116.931425][ T4191] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 116.963328][ T4191] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 117.021373][ T6317] loop3: detected capacity change from 0 to 8192 [ 117.117542][ T6317] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 117.144015][ T6317] REISERFS (device loop3): using ordered data mode [ 117.175100][ T6317] reiserfs: using flush barriers [ 117.224166][ T6317] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.241182][ T6317] REISERFS (device loop3): checking transaction log (loop3) [ 117.322604][ T6317] REISERFS (device loop3): Using tea hash to sort names [ 117.343825][ T6317] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 117.514872][ T6338] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 117.515558][ T6340] loop2: detected capacity change from 0 to 256 [ 117.668053][ T6340] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 117.711761][ T6344] netem: change failed [ 117.754808][ T25] audit: type=1800 audit(1784856991.824:19): pid=6340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.791" name="file1" dev="loop2" ino=1048630 res=0 errno=0 [ 117.932960][ T6331] loop0: detected capacity change from 0 to 40427 [ 117.967493][ T6358] loop2: detected capacity change from 0 to 512 [ 118.042343][ T6331] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 118.062238][ T6331] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 118.115470][ T6331] F2FS-fs (loop0): invalid crc value [ 118.170101][ T6331] F2FS-fs (loop0): Found nat_bits in checkpoint [ 118.322223][ T6365] loop4: detected capacity change from 0 to 8192 [ 118.372854][ T6331] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 118.424570][ T6365] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 118.426736][ T6331] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 118.453385][ T6365] REISERFS (device loop4): using ordered data mode [ 118.460906][ T6365] reiserfs: using flush barriers [ 118.475311][ T6365] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 118.509346][ T6365] REISERFS (device loop4): checking transaction log (loop4) [ 118.777703][ T6365] REISERFS (device loop4): Using tea hash to sort names [ 118.789256][ T6365] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 118.845940][ T6393] loop3: detected capacity change from 0 to 256 [ 118.900338][ T6395] netlink: 'syz.1.816': attribute type 2 has an invalid length. [ 118.920431][ T6395] netlink: 'syz.1.816': attribute type 2 has an invalid length. [ 119.201234][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.820'. [ 119.210713][ T6401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.820'. [ 119.932494][ T6450] loop1: detected capacity change from 0 to 512 [ 119.967335][ T6453] loop0: detected capacity change from 0 to 8 [ 120.049800][ T6460] loop2: detected capacity change from 0 to 16 [ 120.070372][ T6450] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 120.099292][ T6415] loop4: detected capacity change from 0 to 32768 [ 120.106961][ T6450] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.149466][ T6453] SQUASHFS error: lzo decompression failed, data probably corrupt [ 120.172363][ T6453] SQUASHFS error: Failed to read block 0x1dd: -5 [ 120.185193][ T6460] erofs: (device loop2): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 120.214696][ T6460] erofs: (device loop2): mounted with root inode @ nid 36. [ 120.217480][ T6453] SQUASHFS error: Unable to read metadata cache entry [1db] [ 120.260159][ T6453] SQUASHFS error: Unable to read inode 0xa7 [ 120.364191][ T6415] XFS (loop4): Mounting V5 Filesystem [ 120.550129][ T6415] XFS (loop4): Ending clean mount [ 120.591571][ T6415] XFS (loop4): Quotacheck needed: Please wait. [ 120.730196][ T6490] loop2: detected capacity change from 0 to 256 [ 120.736870][ T6415] XFS (loop4): Quotacheck: Done. [ 120.772231][ T6495] netlink: 72 bytes leftover after parsing attributes in process `syz.1.850'. [ 120.828535][ T4195] XFS (loop4): Unmounting Filesystem [ 120.922631][ T6490] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x28ba01bf, utbl_chksum : 0xe619d30d) [ 121.045468][ T6504] syz.1.860 (6504): /proc/6503/oom_adj is deprecated, please use /proc/6503/oom_score_adj instead. [ 121.083863][ T6498] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 121.154262][ T6498] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 121.325411][ T6515] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 121.423136][ T6519] netlink: 104 bytes leftover after parsing attributes in process `syz.0.868'. [ 121.582388][ T6510] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 121.626439][ T6510] REISERFS (device loop2): using ordered data mode [ 121.644301][ T6528] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.871'. [ 121.682915][ T6510] reiserfs: using flush barriers [ 121.683807][ T4231] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 121.698827][ T6510] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 121.787319][ T6510] REISERFS (device loop2): checking transaction log (loop2) [ 121.794663][ T6526] minix_free_block (loop0:21): bit already cleared [ 121.933865][ T4231] usb 2-1: Using ep0 maxpacket: 32 [ 121.990943][ T6510] REISERFS (device loop2): Using tea hash to sort names [ 122.046581][ T6510] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 122.094006][ T6510] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 122.125149][ T6538] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 122.198550][ T6538] EXT4-fs (loop0): 1 truncate cleaned up [ 122.220552][ T6538] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 122.324608][ T6510] REISERFS error (device loop2): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 122.343295][ T6510] REISERFS (device loop2): Remounting filesystem read-only [ 122.364386][ T4231] usb 2-1: unable to get BOS descriptor or descriptor too short [ 122.438990][ T4231] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 122.464848][ T4231] usb 2-1: can't read configurations, error -71 [ 122.709695][ T6557] set_capacity_and_notify: 4 callbacks suppressed [ 122.709714][ T6557] loop2: detected capacity change from 0 to 256 [ 122.738281][ T6559] overlayfs: upper fs does not support tmpfile. [ 122.769403][ T6561] loop0: detected capacity change from 0 to 256 [ 122.807269][ T6557] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.833177][ T6557] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 122.856690][ T6561] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 122.899956][ T6557] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 123.130794][ T6570] loop2: detected capacity change from 0 to 256 [ 123.160136][ T6572] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 123.196643][ T6570] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 123.209141][ T6572] syzkaller1: linktype set to 778 [ 123.516780][ T6587] loop4: detected capacity change from 0 to 16 [ 123.574052][ T6587] erofs: (device loop4): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 123.593894][ T4231] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 123.597710][ T6587] erofs: (device loop4): mounted with root inode @ nid 36. [ 123.709309][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 123.724094][ C0] sd 0:0:1:0: tag#7170 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 123.734032][ C0] sd 0:0:1:0: tag#7170 CDB: Request Sense [ 123.739772][ C0] sd 0:0:1:0: tag#7170 CDB[00]: 03 00 00 00 02 00 10 00 00 00 00 00 00 00 00 00 [ 123.748878][ C0] sd 0:0:1:0: tag#7170 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 123.757946][ C0] sd 0:0:1:0: tag#7170 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 123.767159][ C0] sd 0:0:1:0: tag#7170 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 123.776261][ C0] sd 0:0:1:0: tag#7170 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 123.785355][ C0] sd 0:0:1:0: tag#7170 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 123.794458][ C0] sd 0:0:1:0: tag#7170 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 123.803554][ C0] sd 0:0:1:0: tag#7170 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 123.812619][ C0] sd 0:0:1:0: tag#7170 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 123.821696][ C0] sd 0:0:1:0: tag#7170 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 123.830770][ C0] sd 0:0:1:0: tag#7170 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 123.839935][ C0] sd 0:0:1:0: tag#7170 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 123.848076][ T4231] usb 2-1: Using ep0 maxpacket: 32 [ 123.984097][ T4231] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 123.997429][ T6610] loop4: detected capacity change from 0 to 256 [ 124.009179][ T4231] usb 2-1: config 0 has no interface number 0 [ 124.072377][ T6610] FAT-fs (loop4): Directory bread(block 64) failed [ 124.094742][ T6610] FAT-fs (loop4): Directory bread(block 65) failed [ 124.108016][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 124.113492][ T6610] FAT-fs (loop4): Directory bread(block 66) failed [ 124.152514][ T6610] FAT-fs (loop4): Directory bread(block 67) failed [ 124.166603][ T6610] FAT-fs (loop4): Directory bread(block 68) failed [ 124.173170][ T6610] FAT-fs (loop4): Directory bread(block 69) failed [ 124.194123][ T4231] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 124.220104][ T6610] FAT-fs (loop4): Directory bread(block 70) failed [ 124.227881][ T6610] FAT-fs (loop4): Directory bread(block 71) failed [ 124.232350][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.239844][ T6610] FAT-fs (loop4): Directory bread(block 72) failed [ 124.242600][ T4231] usb 2-1: Product: syz [ 124.254110][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.263546][ T4231] usb 2-1: Manufacturer: syz [ 124.281648][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 124.301262][ T4231] usb 2-1: SerialNumber: syz [ 124.304964][ T6610] FAT-fs (loop4): Directory bread(block 73) failed [ 124.323310][ T4231] usb 2-1: config 0 descriptor?? [ 124.333990][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.374369][ T7] usb 1-1: config 0 descriptor?? [ 124.393136][ T4231] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 124.425826][ T7] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 124.614694][ T4231] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 124.654532][ T4231] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 124.658107][ T6624] loop3: detected capacity change from 0 to 16 [ 124.760127][ T6624] erofs: (device loop3): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 124.783331][ T6624] erofs: (device loop3): mounted with root inode @ nid 36. [ 124.923900][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 170 [ 125.074039][ T7] gspca_vc032x: reg_r err -71 [ 125.078804][ T7] vc032x: probe of 1-1:0.0 failed with error -71 [ 125.096065][ T7] usb 1-1: USB disconnect, device number 7 [ 125.125431][ T13] usb 2-1: USB disconnect, device number 8 [ 125.143823][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 125.153403][ T13] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 125.212608][ T13] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 125.247957][ T13] quatech2 2-1:0.51: device disconnected [ 125.347829][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.385569][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.463957][ T5543] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 125.583439][ T6635] loop4: detected capacity change from 0 to 32768 [ 125.714092][ T5543] usb 3-1: Using ep0 maxpacket: 8 [ 125.714456][ T6635] XFS (loop4): Mounting V5 Filesystem [ 125.854444][ T6661] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 125.884054][ T5543] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.908426][ T6635] XFS (loop4): Ending clean mount [ 125.964099][ T5543] usb 3-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 125.986597][ T5543] usb 3-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 126.029820][ T4195] XFS (loop4): Unmounting Filesystem [ 126.204022][ T5543] usb 3-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 126.216507][ T5543] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.233584][ T5543] usb 3-1: Product: syz [ 126.242320][ T5543] usb 3-1: Manufacturer: syz [ 126.252580][ T5543] usb 3-1: SerialNumber: syz [ 126.304014][ T1107] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 126.461194][ T6669] loop1: detected capacity change from 0 to 40427 [ 126.507221][ T6669] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff [ 126.538996][ T6669] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 126.570773][ T6676] loop4: detected capacity change from 0 to 1024 [ 126.575266][ T5543] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 126.597615][ T6669] F2FS-fs (loop1): invalid crc value [ 126.643015][ T6669] F2FS-fs (loop1): Found nat_bits in checkpoint [ 126.648316][ T6676] hfsplus: failed to extend attributes file [ 126.724064][ T1107] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 126.742529][ T1107] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1015, setting to 64 [ 126.754597][ T1107] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 126.758031][ T6669] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 126.768166][ T1107] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.833552][ T1107] usb 1-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 126.863335][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.876076][ T1107] usb 1-1: config 0 descriptor?? [ 126.878472][ T6669] attempt to access beyond end of device [ 126.878472][ T6669] loop1: rw=2049, want=45104, limit=40427 [ 126.906762][ T6666] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 127.020805][ T6688] loop7: detected capacity change from 0 to 7 [ 127.041283][ T4713] Dev loop7: unable to read RDB block 7 [ 127.058045][ T4713] loop7: unable to read partition table [ 127.068303][ T4713] loop7: partition table beyond EOD, truncated [ 127.090167][ T144] loop: Write error at byte offset 2, length 3584. [ 127.101768][ T5543] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 127.116995][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 127.128329][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 127.147847][ T6688] Dev loop7: unable to read RDB block 7 [ 127.157449][ T6688] loop7: unable to read partition table [ 127.163347][ T6688] loop7: partition table beyond EOD, truncated [ 127.177368][ T6688] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 127.263896][ T3558] Dev loop7: unable to read RDB block 7 [ 127.273562][ T3558] loop7: unable to read partition table [ 127.282372][ T6695] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 127.292227][ T3558] loop7: partition table beyond EOD, truncated [ 127.376969][ T6695] EXT4-fs (loop3): 1 truncate cleaned up [ 127.382906][ T6695] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,noquota,discard,max_batch_time=0x0000000000000003,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 127.403586][ T1107] elecom 0003:056E:00FB.0007: unknown main item tag 0x2 [ 127.411376][ T1107] elecom 0003:056E:00FB.0007: item fetching failed at offset 6/40 [ 127.420200][ T1107] elecom: probe of 0003:056E:00FB.0007 failed with error -22 [ 127.447050][ T6695] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.946: invalid indirect mapped block 4294901760 (level 0) [ 127.471069][ T6699] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 127.478010][ T6695] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.946: invalid indirect mapped block 2185560079 (level 0) [ 127.512181][ T6695] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #13: comm syz.3.946: corrupted inode contents [ 127.523990][ T5543] usb 3-1: unable to get BOS descriptor or descriptor too short [ 127.537098][ T6695] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #13: comm syz.3.946: mark_inode_dirty error [ 127.553829][ T25] audit: type=1800 audit(1784857002.622:20): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.947" name="file1" dev="loop4" ino=1048656 res=0 errno=0 [ 127.578179][ T6695] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.946: invalid indirect mapped block 65535 (level 2) [ 127.584103][ T5543] usb 3-1: device firmware changed [ 127.646105][ T5543] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 127.695800][ T7] usb 1-1: USB disconnect, device number 8 [ 127.713679][ T6695] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #13: comm syz.3.946: corrupted inode contents [ 127.716155][ T5543] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 127.802550][ T6695] EXT4-fs error (device loop3): ext4_truncate:4286: inode #13: comm syz.3.946: mark_inode_dirty error [ 127.805533][ T5543] usb 3-1: USB disconnect, device number 7 [ 127.834773][ T6695] EXT4-fs error (device loop3): ext4_evict_inode:295: comm syz.3.946: couldn't truncate inode 13 (err -117) [ 127.897565][ T5542] usb 3-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 127.907626][ T5542] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 127.916156][ T5542] kobject_add_internal failed for firmware (error: -2 parent: 3-1) [ 127.928455][ T5542] firmware ueagle-atm!eagleI.fw: fw_load_sysfs_fallback: device_register failed [ 127.954177][ T5542] usb 3-1: [UEAGLE-ATM] firmware is not available [ 128.154620][ T6720] tmpfs: Too few inodes for current use [ 128.232869][ T6727] set_capacity_and_notify: 2 callbacks suppressed [ 128.232884][ T6727] loop2: detected capacity change from 0 to 8 [ 128.300808][ T6734] loop0: detected capacity change from 0 to 16 [ 128.351871][ T6727] SQUASHFS error: Unable to read directory block [629:fe] [ 128.367917][ T6734] erofs: (device loop0): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms fffe [ 128.499539][ T6746] loop1: detected capacity change from 0 to 256 [ 128.712949][ T6762] loop3: detected capacity change from 0 to 512 [ 128.794525][ T6762] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.866914][ T6762] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.099629][ T6783] trusted_key: encrypted_key: key user:syz not found [ 129.228129][ T6789] loop0: detected capacity change from 0 to 512 [ 129.346852][ T6789] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 129.435853][ T6789] EXT4-fs (loop0): 1 truncate cleaned up [ 129.441686][ T6789] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 129.517920][ T6803] netlink: 200 bytes leftover after parsing attributes in process `syz.2.994'. [ 129.632281][ T6810] loop4: detected capacity change from 0 to 1764 [ 130.255288][ T6850] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1013'. [ 130.524629][ T6868] Invalid ELF header len 1 [ 130.648911][ T6872] loop3: detected capacity change from 0 to 1024 [ 130.736411][ T6876] loop4: detected capacity change from 0 to 512 [ 130.754003][ T13] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 130.932501][ T6876] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.968356][ T6876] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.050201][ T6889] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1032'. [ 131.166060][ T13] usb 1-1: config 0 has no interfaces? [ 131.171631][ T13] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 131.209142][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.271368][ T13] usb 1-1: config 0 descriptor?? [ 131.333173][ T6904] loop2: detected capacity change from 0 to 64 [ 131.485473][ T6908] loop4: detected capacity change from 0 to 2048 [ 131.526465][ T6908] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.551060][ T13] usb 1-1: USB disconnect, device number 9 [ 131.744190][ T6896] ERROR: (device loop3): dtSearch: DT_GETPAGE: dtree page corrupt [ 131.744190][ T6896] [ 131.785102][ T6896] ERROR: (device loop3): remounting filesystem as read-only [ 131.837873][ T6896] jfs_lookup: dtSearch returned -5 [ 131.849724][ T6923] ERROR: (device loop3): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 131.849724][ T6923] [ 132.029159][ T4690] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 132.279948][ T4690] usb 2-1: Using ep0 maxpacket: 8 [ 132.414088][ T4690] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 132.597537][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 132.604047][ T4690] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 132.614643][ T4690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.623677][ T4690] usb 2-1: Product: syz [ 132.628307][ T4690] usb 2-1: Manufacturer: syz [ 132.632898][ T4690] usb 2-1: SerialNumber: syz [ 132.639251][ T4690] usb 2-1: config 0 descriptor?? [ 132.652922][ T6928] F2FS-fs (loop3): invalid crc value [ 132.667885][ T6928] F2FS-fs (loop3): Found nat_bits in checkpoint [ 132.694430][ T6928] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 132.707159][ T4690] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 132.715647][ T4690] usb 2-1: setting power ON [ 132.715670][ T6928] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 132.720835][ T4690] dvb-usb: bulk message failed: -22 (2/0) [ 132.756574][ T4690] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 132.792702][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.799848][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.812456][ T4690] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 132.823531][ T4690] usb 2-1: media controller created [ 132.839788][ T4690] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.872116][ T4690] usb 2-1: selecting invalid altsetting 6 [ 132.878968][ T4690] usb 2-1: digital interface selection failed (-22) [ 132.887224][ T4690] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 132.907969][ T6920] dvb-usb: bulk message failed: -22 (3/0) [ 132.916806][ T6920] dvb-usb: bulk message failed: -22 (3/0) [ 132.923476][ T6920] dvb-usb: bulk message failed: -22 (4/0) [ 132.930189][ T6920] cxusb: i2c read failed [ 132.943066][ T4690] usb 2-1: setting power OFF [ 132.949399][ T4690] dvb-usb: bulk message failed: -22 (2/0) [ 132.960986][ T4690] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 132.970569][ T4690] (NULL device *): no alternate interface [ 132.997817][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.014634][ T7] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 133.015536][ T4690] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 133.023659][ T7] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 133.044013][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.060091][ T7] usb 5-1: config 0 descriptor?? [ 133.069563][ T4690] usb 2-1: USB disconnect, device number 9 [ 133.432351][ T13] usb 5-1: USB disconnect, device number 9 [ 133.474507][ T6956] set_capacity_and_notify: 2 callbacks suppressed [ 133.474521][ T6956] loop3: detected capacity change from 0 to 1024 [ 133.544407][ T25] audit: type=1800 audit(1784857264.615:21): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1056" name="bus" dev="loop3" ino=26 res=0 errno=0 [ 133.579553][ T6962] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1063'. [ 133.663925][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 134.014191][ T6983] loop1: detected capacity change from 0 to 512 [ 134.065765][ T4200] Bluetooth: hci2: link tx timeout [ 134.070922][ T4200] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 134.079207][ T4200] Bluetooth: hci2: link tx timeout [ 134.084479][ T4200] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.099917][ T6983] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 134.187981][ T6978] loop0: detected capacity change from 0 to 65536 [ 134.202495][ T6983] EXT4-fs (loop1): inline encryption not supported [ 134.219602][ T6983] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 134.316485][ T6983] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 134.375221][ T7] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 134.386911][ T6978] XFS (loop0): Mounting V5 Filesystem [ 134.413584][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1077'. [ 134.433178][ T7] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 134.446563][ T6983] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1074: bg 0: block 248: padding at end of block bitmap is not set [ 134.483032][ T7] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 134.489499][ T6983] Quota error (device loop1): write_blk: dquota write failed [ 134.499728][ T6979] loop3: detected capacity change from 0 to 32768 [ 134.518799][ T6983] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 134.525119][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.532869][ T6983] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.1074: Failed to acquire dquot type 1 [ 134.561664][ T6978] XFS (loop0): Ending clean mount [ 134.594296][ T25] audit: type=1800 audit(1784857265.655:22): pid=6978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1072" name="file1" dev="loop0" ino=70 res=0 errno=0 [ 134.628141][ T6954] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 134.658626][ T6983] EXT4-fs (loop1): 1 truncate cleaned up [ 134.692817][ T6983] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 134.769627][ T6979] XFS (loop3): Mounting V5 Filesystem [ 134.771671][ T4191] XFS (loop0): Unmounting Filesystem [ 135.014096][ T7014] loop4: detected capacity change from 0 to 32768 [ 135.095871][ T7014] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1082 (7014) [ 135.148680][ T6979] XFS (loop3): Ending clean mount [ 135.163081][ T7014] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 135.172995][ T7014] BTRFS info (device loop4): enabling auto defrag [ 135.179808][ T7014] BTRFS info (device loop4): force zlib compression, level 3 [ 135.187836][ T7014] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 135.198082][ T7014] BTRFS info (device loop4): use zstd compression, level 3 [ 135.205562][ T7014] BTRFS info (device loop4): allowing degraded mounts [ 135.212345][ T7014] BTRFS info (device loop4): using free space tree [ 135.218935][ T7014] BTRFS info (device loop4): has skinny extents [ 135.370446][ T4186] XFS (loop3): Unmounting Filesystem [ 135.497485][ T7024] loop1: detected capacity change from 0 to 4096 [ 135.543909][ T7014] BTRFS info (device loop4): enabling ssd optimizations [ 135.548043][ T7024] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 135.577732][ T7014] BTRFS info (device loop4): force zlib compression, level 3 [ 135.589190][ T7014] BTRFS info (device loop4): use zstd compression, level 3 [ 135.596717][ T7014] BTRFS info (device loop4): allowing degraded mounts [ 136.144065][ T4690] Bluetooth: hci2: command 0x0406 tx timeout [ 136.166479][ T7058] loop4: detected capacity change from 0 to 4096 [ 136.179926][ T1107] usb 3-1: USB disconnect, device number 8 [ 136.216242][ T7058] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 136.243487][ T7058] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 136.257552][ T7058] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 136.270472][ T7058] ntfs: volume version 3.1. [ 136.425484][ T7064] loop1: detected capacity change from 0 to 512 [ 136.468286][ T7067] loop0: detected capacity change from 0 to 512 [ 136.490082][ T7064] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 136.518878][ T7067] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 136.536652][ T4195] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 136.556072][ T7067] EXT4-fs (loop0): 1 truncate cleaned up [ 136.584738][ T7067] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,nombcache,max_batch_time=0x0000000000000006,nouid32,noinit_itable,auto_da_alloc,,errors=continue. Quota mode: none. [ 136.639969][ T7064] EXT4-fs (loop1): 1 truncate cleaned up [ 136.646337][ T7064] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 136.892165][ T7088] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1093'. [ 137.170420][ T7102] loop3: detected capacity change from 0 to 2048 [ 137.242114][ T7102] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.313529][ T7109] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 137.363350][ T7109] EXT4-fs (loop4): 1 truncate cleaned up [ 137.377720][ T7109] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,noquota,discard,max_batch_time=0x0000000000000003,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 137.443212][ T7109] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1109: invalid indirect mapped block 4294901760 (level 0) [ 137.468185][ T7109] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1109: invalid indirect mapped block 2185560079 (level 0) [ 137.508884][ T13] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 137.521600][ T7120] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.550930][ T7109] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #13: comm syz.4.1109: corrupted inode contents [ 137.633120][ T7109] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #13: comm syz.4.1109: mark_inode_dirty error [ 137.698940][ T7109] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1109: invalid indirect mapped block 65535 (level 2) [ 137.739977][ T7109] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #13: comm syz.4.1109: corrupted inode contents [ 137.784878][ T7109] EXT4-fs error (device loop4): ext4_truncate:4286: inode #13: comm syz.4.1109: mark_inode_dirty error [ 137.805703][ T7109] EXT4-fs error (device loop4): ext4_evict_inode:295: comm syz.4.1109: couldn't truncate inode 13 (err -117) [ 137.871429][ T7136] EXT4-fs (loop3): Ignoring removed oldalloc option [ 137.944268][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.969602][ T7136] EXT4-fs error (device loop3): ext4_xattr_inode_iget:397: comm syz.3.1120: Parent and EA inode have the same ino 15 [ 137.983831][ T13] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 137.992882][ T7136] EXT4-fs (loop3): Remounting filesystem read-only [ 138.000873][ T7136] EXT4-fs (loop3): 1 orphan inode deleted [ 138.006986][ T13] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 138.016612][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.027949][ T13] usb 2-1: config 0 descriptor?? [ 138.033038][ T7136] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,debug_want_extra_isize=0x0000000000000040,resuid=0x0000000000000000,noauto_da_alloc,bsdgroups,oldalloc,bsdgroups,mb_optimize_scan=0x0000000000000000,. Quota mode: none. [ 138.071448][ T7136] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.1120: deleted inode referenced: 15 [ 138.104216][ T7136] EXT4-fs (loop3): Remounting filesystem read-only [ 138.293705][ T13] usb 2-1: USB disconnect, device number 10 [ 138.489233][ T7132] set_capacity_and_notify: 3 callbacks suppressed [ 138.489248][ T7132] loop0: detected capacity change from 0 to 32768 [ 138.553149][ T7132] JBD2: Ignoring recovery information on journal [ 138.615330][ T7163] loop2: detected capacity change from 0 to 2048 [ 138.631905][ T7132] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 138.714738][ T4191] ocfs2: Unmounting device (7,0) on (node local) [ 138.721405][ T7165] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.769561][ T7163] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 138.827745][ T7163] Remounting filesystem read-only [ 138.851923][ T7163] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 138.877716][ T7154] loop4: detected capacity change from 0 to 40427 [ 138.885952][ T7163] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 138.902923][ T7163] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 138.913229][ T7154] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 138.945460][ T7154] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 138.964055][ T7163] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 138.988262][ T7163] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 139.000443][ T7154] F2FS-fs (loop4): invalid crc value [ 139.011491][ T7171] program syz.1.1135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.022402][ T7163] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 139.060637][ T7163] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 139.091146][ T7154] F2FS-fs (loop4): Found nat_bits in checkpoint [ 139.102770][ T7179] loop0: detected capacity change from 0 to 64 [ 139.119454][ T25] audit: type=1800 audit(1784857270.185:23): pid=7163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1131" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 139.279886][ T7154] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 139.296639][ T7154] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 139.436369][ T7154] F2FS-fs (loop4): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem [ 139.459235][ T7181] loop1: detected capacity change from 0 to 8192 [ 139.559890][ T7194] binder: 7193:7194 ioctl c0306201 200000000480 returned -14 [ 139.769916][ T7] kernel write not supported for file /499/attr/fscreate (pid: 7 comm: kworker/0:0) [ 139.824369][ T154] wlan1: Trigger new scan to find an IBSS to join [ 139.874951][ T4270] ------------[ cut here ]------------ [ 139.881308][ T4270] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x20 [ 139.892195][ T4270] WARNING: CPU: 1 PID: 4270 at net/mac80211/rate.c:376 __rate_control_send_low+0x62c/0x880 [ 139.902271][ T4270] Modules linked in: [ 139.906243][ T4270] CPU: 1 PID: 4270 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 139.913859][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 139.923990][ T4270] Workqueue: phy10 ieee80211_scan_work [ 139.929527][ T4270] RIP: 0010:__rate_control_send_low+0x62c/0x880 [ 139.935840][ T4270] Code: 42 0f b6 04 28 84 c0 0f 85 ea 01 00 00 48 8b 04 24 8b 08 48 c7 c7 20 73 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 94 ba 69 00 <0f> 0b e9 74 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fa ff [ 139.955536][ T4270] RSP: 0018:ffffc9000318f508 EFLAGS: 00010246 [ 139.961620][ T4270] RAX: 866cdca891de0400 RBX: 000000000000000c RCX: ffff888025793b80 [ 139.969696][ T4270] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 139.977732][ T4270] RBP: 0000000000000084 R08: ffffc9000318f027 R09: 1ffff92000631e04 [ 139.985769][ T4270] R10: dffffc0000000000 R11: fffff52000631e05 R12: ffff88807dfacde8 [ 139.993798][ T4270] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020 [ 140.001788][ T4270] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 140.010778][ T4270] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.017422][ T4270] CR2: 0000001b32423ffc CR3: 0000000073ae3000 CR4: 00000000003506e0 [ 140.025455][ T4270] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 140.033458][ T4270] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 140.041516][ T4270] Call Trace: [ 140.044834][ T4270] [ 140.047787][ T4270] rate_control_send_low+0x194/0x790 [ 140.053088][ T4270] ? ieee80211_scan_work+0x41f/0x1aa0 [ 140.058508][ T4270] rate_control_get_rate+0x207/0x5c0 [ 140.063835][ T4270] ieee80211_tx_h_rate_ctrl+0xaeb/0x16e0 [ 140.069508][ T4270] ? ieee80211_tx_h_select_key+0x1710/0x1710 [ 140.075550][ T4270] ? sta_info_hash_lookup+0x53e/0x580 [ 140.080937][ T4270] ? ieee80211_queue_skb+0xbd/0x20e0 [ 140.086273][ T4270] invoke_tx_handlers_late+0xae/0x1720 [ 140.091754][ T4270] ? ieee80211_tx_h_select_key+0x11fb/0x1710 [ 140.097781][ T4270] ? sta_info_get+0x220/0x230 [ 140.102477][ T4270] ? invoke_tx_handlers_early+0xa26/0x1ca0 [ 140.108337][ T4270] ieee80211_tx+0x2d4/0x460 [ 140.112862][ T4270] ? ieee80211_skb_resize+0x610/0x610 [ 140.118299][ T4270] ? ieee80211_xmit+0x309/0x420 [ 140.123174][ T4270] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 140.129074][ T4270] ieee80211_scan_state_send_probe+0x556/0x8e0 [ 140.135324][ T4270] ieee80211_scan_work+0x41f/0x1aa0 [ 140.140556][ T4270] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 140.146518][ T4270] ? _raw_spin_unlock_irq+0x1f/0x40 [ 140.151742][ T4270] process_one_work+0x867/0xff0 [ 140.156649][ T4270] ? worker_detach_from_pool+0x240/0x240 [ 140.162290][ T4270] ? lockdep_hardirqs_off+0x70/0x100 [ 140.167649][ T4270] ? _raw_spin_lock_irq+0xb7/0xf0 [ 140.172699][ T4270] ? _raw_spin_lock_irqsave+0x100/0x100 [ 140.178320][ T4270] ? wq_worker_running+0x97/0x170 [ 140.183366][ T4270] worker_thread+0xad7/0x12a0 [ 140.188125][ T4270] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 140.194096][ T4270] kthread+0x42e/0x520 [ 140.198196][ T4270] ? rcu_lock_release+0x20/0x20 [ 140.203075][ T4270] ? kthread_blkcg+0xd0/0xd0 [ 140.207740][ T4270] ret_from_fork+0x1f/0x30 [ 140.212201][ T4270] [ 140.215289][ T4270] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 140.222578][ T4270] CPU: 1 PID: 4270 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 140.223497][ T7213] loop1: detected capacity change from 0 to 2048 [ 140.230136][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 140.230228][ T4270] Workqueue: phy10 ieee80211_scan_work [ 140.230255][ T4270] Call Trace: [ 140.230264][ T4270] [ 140.230272][ T4270] dump_stack_lvl+0x188/0x250 [ 140.230296][ T4270] ? show_regs_print_info+0x20/0x20 [ 140.230312][ T4270] ? load_image+0x410/0x410 [ 140.230339][ T4270] panic+0x2f8/0x850 [ 140.276731][ T4270] ? bpf_jit_dump+0xd0/0xd0 [ 140.281267][ T4270] ? ret_from_fork+0x1f/0x30 [ 140.285863][ T4270] ? __rate_control_send_low+0x62c/0x880 [ 140.291486][ T4270] __warn+0x248/0x2b0 [ 140.295458][ T4270] ? __rate_control_send_low+0x62c/0x880 [ 140.301082][ T4270] report_bug+0x1b9/0x2e0 [ 140.305407][ T4270] handle_bug+0x3a/0x70 [ 140.309553][ T4270] exc_invalid_op+0x16/0x40 [ 140.314042][ T4270] asm_exc_invalid_op+0x16/0x20 [ 140.318879][ T4270] RIP: 0010:__rate_control_send_low+0x62c/0x880 [ 140.325133][ T4270] Code: 42 0f b6 04 28 84 c0 0f 85 ea 01 00 00 48 8b 04 24 8b 08 48 c7 c7 20 73 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 94 ba 69 00 <0f> 0b e9 74 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fa ff [ 140.344733][ T4270] RSP: 0018:ffffc9000318f508 EFLAGS: 00010246 [ 140.350793][ T4270] RAX: 866cdca891de0400 RBX: 000000000000000c RCX: ffff888025793b80 [ 140.358755][ T4270] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 140.366990][ T4270] RBP: 0000000000000084 R08: ffffc9000318f027 R09: 1ffff92000631e04 [ 140.374965][ T4270] R10: dffffc0000000000 R11: fffff52000631e05 R12: ffff88807dfacde8 [ 140.382926][ T4270] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020 [ 140.390901][ T4270] ? __rate_control_send_low+0x62c/0x880 [ 140.396534][ T4270] rate_control_send_low+0x194/0x790 [ 140.401815][ T4270] ? ieee80211_scan_work+0x41f/0x1aa0 [ 140.407179][ T4270] rate_control_get_rate+0x207/0x5c0 [ 140.412453][ T4270] ieee80211_tx_h_rate_ctrl+0xaeb/0x16e0 [ 140.418088][ T4270] ? ieee80211_tx_h_select_key+0x1710/0x1710 [ 140.424058][ T4270] ? sta_info_hash_lookup+0x53e/0x580 [ 140.429517][ T4270] ? ieee80211_queue_skb+0xbd/0x20e0 [ 140.434812][ T4270] invoke_tx_handlers_late+0xae/0x1720 [ 140.440283][ T4270] ? ieee80211_tx_h_select_key+0x11fb/0x1710 [ 140.446256][ T4270] ? sta_info_get+0x220/0x230 [ 140.450925][ T4270] ? invoke_tx_handlers_early+0xa26/0x1ca0 [ 140.456726][ T4270] ieee80211_tx+0x2d4/0x460 [ 140.461235][ T4270] ? ieee80211_skb_resize+0x610/0x610 [ 140.466613][ T4270] ? ieee80211_xmit+0x309/0x420 [ 140.471470][ T4270] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 140.477289][ T4270] ieee80211_scan_state_send_probe+0x556/0x8e0 [ 140.483460][ T4270] ieee80211_scan_work+0x41f/0x1aa0 [ 140.488647][ T4270] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 140.494532][ T4270] ? _raw_spin_unlock_irq+0x1f/0x40 [ 140.499727][ T4270] process_one_work+0x867/0xff0 [ 140.504577][ T4270] ? worker_detach_from_pool+0x240/0x240 [ 140.510200][ T4270] ? lockdep_hardirqs_off+0x70/0x100 [ 140.515475][ T4270] ? _raw_spin_lock_irq+0xb7/0xf0 [ 140.520487][ T4270] ? _raw_spin_lock_irqsave+0x100/0x100 [ 140.526020][ T4270] ? wq_worker_running+0x97/0x170 [ 140.531039][ T4270] worker_thread+0xad7/0x12a0 [ 140.535715][ T4270] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 140.541610][ T4270] kthread+0x42e/0x520 [ 140.545669][ T4270] ? rcu_lock_release+0x20/0x20 [ 140.550549][ T4270] ? kthread_blkcg+0xd0/0xd0 [ 140.555127][ T4270] ret_from_fork+0x1f/0x30 [ 140.559543][ T4270] [ 140.562760][ T4270] Kernel Offset: disabled [ 140.567441][ T4270] Rebooting in 86400 seconds..