last executing test programs: 4.95414737s ago: executing program 1 (id=793): syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x2a00000, &(0x7f0000000440)=ANY=[], 0x1, 0x6224, &(0x7f0000007240)="$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") r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 4.02986574s ago: executing program 2 (id=803): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/34, 0x22) 3.731216709s ago: executing program 2 (id=805): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0xf, &(0x7f0000019200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) 3.424309649s ago: executing program 0 (id=808): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x4}]}}]}, 0x3c}}, 0x0) 3.389128211s ago: executing program 1 (id=809): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 3.365729252s ago: executing program 2 (id=810): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x1, 0xc8ff9f55e8dc000f, 0x0, 0x0, '\x00', {0x0, 0x6, "00b295", 0x0, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], "caa7c1b7f4c336af"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) 3.156337558s ago: executing program 2 (id=811): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@noop, @noop, @end, @cipso={0x86, 0x6, 0x3}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x2, 0x0, 0xe7}}}}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070900be00832ddb00000b09"], 0x0}, 0x0) 3.145366268s ago: executing program 0 (id=812): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r0, r1}, 0xc) 3.021639543s ago: executing program 1 (id=813): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001b00850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.876346517s ago: executing program 0 (id=814): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000100)={0x0, 0x6}, 0x8) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) 2.497313839s ago: executing program 0 (id=815): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r1, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 2.321141165s ago: executing program 4 (id=817): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./bus\x00', 0x200000, &(0x7f00000023c0)=ANY=[], 0x13, 0x70a, &(0x7f0000000740)="$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") lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) listxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/236, 0xec) 2.285883066s ago: executing program 0 (id=818): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x16, &(0x7f0000005440)={[{@noenospc_debug}, {@nossd_spread}, {@nodatasum}, {@notreelog}, {@max_inline={'max_inline', 0x3d, [0x6b, 0x39, 0x67, 0x3d, 0x31]}}, {@discard}]}, 0x9, 0x50f6, &(0x7f0000000340)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1309403, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x5b) getdents(r0, &(0x7f0000000080)=""/58, 0x3a) 2.107576222s ago: executing program 4 (id=819): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'veth1_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 1.804577662s ago: executing program 1 (id=820): syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x502) syz_open_procfs(0x0, &(0x7f00000025c0)='fd/3\x00') r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x20, 0x24, 0x6, 0x2, 0x1, 0xffffd7c1, &(0x7f0000000040)="03"}) 1.670491536s ago: executing program 4 (id=821): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x44, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x449e}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3d7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x40}]}]}, 0x44}}, 0x0) 1.516317241s ago: executing program 1 (id=822): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e9b, &(0x7f000000bc00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x60843, 0x15) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xfc6, 0xfffffffffffffff7, 0x6976}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000006900)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000000)) 1.436143314s ago: executing program 4 (id=824): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x2, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1.209058161s ago: executing program 3 (id=825): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000019300)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x58e3}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x3], [0x173f, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x5}]}}]}, 0xa8}}, 0x0) 1.201797961s ago: executing program 4 (id=826): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xfffffffffffffdbf, 0x0, &(0x7f0000000200)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904fcee14db4241544716b9ea42231ed3373a3e299531fd05dacf5bb80b4b7ee0fae7aea53492b18c3e6c807bc4b5d29a0ed834a6bd8c6", 0x0, 0x7ffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xd}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1.144063704s ago: executing program 2 (id=827): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1010400, &(0x7f00000002c0)={[{@rodir}, {@shortname_lower}, {@uni_xlate}, {@numtail}, {@uni_xlate}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_winnt}, {@shortname_lower}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_lower}, {@shortname_winnt}, {@shortname_win95}, {@shortname_winnt}, {@fat=@quiet}]}, 0x1, 0x37b, &(0x7f0000000940)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 952.84452ms ago: executing program 4 (id=828): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x2) 952.27486ms ago: executing program 3 (id=829): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "efce948b40d1d1af5e21d6d9472bb7d7f040f493bab5442d"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x5c}}, 0x400c8a4) 645.648309ms ago: executing program 3 (id=830): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a40)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) read$alg(r1, &(0x7f0000001b40)=""/4096, 0x1000) 630.34693ms ago: executing program 0 (id=831): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000180)=ANY=[], 0xfe, 0xa7f, &(0x7f0000000b40)="$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") mount(0x0, &(0x7f0000000400)='./file2\x00', 0x0, 0x90000, 0x0) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32], 0x5, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x181102, 0x8c) 476.354255ms ago: executing program 3 (id=832): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000001000000000000000e0000f0"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 359.941599ms ago: executing program 2 (id=833): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="400004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 273.443281ms ago: executing program 3 (id=834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x10, 0x0, 0x5}]}) 269.78µs ago: executing program 3 (id=835): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 0s ago: executing program 1 (id=836): syz_mount_image$reiserfs(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000000), 0xfe, 0x10fd, &(0x7f0000002240)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): link becomes ready [ 67.612964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.625981][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.640878][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.650821][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.671651][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 67.685689][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.716770][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.727006][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.745943][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.753863][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 67.761751][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 67.767767][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 67.774040][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 67.780940][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.803598][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.822198][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.829308][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.851888][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.890416][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.915090][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.945372][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.952537][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.016382][ T4281] device veth0_vlan entered promiscuous mode [ 68.037113][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.053131][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.067930][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.075728][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.083704][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.093126][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.101741][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.109930][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.118261][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.126167][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.134276][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.161862][ T4281] device veth1_vlan entered promiscuous mode [ 68.179187][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.188252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.200254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.210320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.220954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.232786][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.245127][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.267964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.278078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.302400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.309869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.345586][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.382831][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.402014][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.437769][ T4281] device veth0_macvtap entered promiscuous mode [ 68.446902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.463898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.493696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.513575][ T4281] device veth1_macvtap entered promiscuous mode [ 68.546902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.557876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.566341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.574230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.583758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.598790][ T4272] device veth0_vlan entered promiscuous mode [ 68.614254][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.624566][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.633885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.643919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.652462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.661995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.675730][ T4272] device veth1_vlan entered promiscuous mode [ 68.687505][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.712910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.727783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.737325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.764449][ T4281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.781599][ T4281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.790316][ T4281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.808691][ T4281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.826537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.834896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.844420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.897198][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.915175][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.929004][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.937963][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.945739][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.959625][ T4273] device veth0_vlan entered promiscuous mode [ 68.973649][ T4272] device veth0_macvtap entered promiscuous mode [ 68.991823][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.016220][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.026505][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.039196][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.047769][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.060117][ T4272] device veth1_macvtap entered promiscuous mode [ 69.088517][ T4273] device veth1_vlan entered promiscuous mode [ 69.142144][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.150954][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.161956][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.170449][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.181482][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.193726][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.204177][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.219478][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.226972][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.252227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.260166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.268976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.279716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.289598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.298718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.307007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.320666][ T4278] device veth0_vlan entered promiscuous mode [ 69.334405][ T4274] device veth0_vlan entered promiscuous mode [ 69.349177][ T4273] device veth0_macvtap entered promiscuous mode [ 69.357984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.366781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.375370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.384345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.407533][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.419322][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.430482][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.440940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.449265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.457428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.465686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.474632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.485938][ T4278] device veth1_vlan entered promiscuous mode [ 69.504249][ T4273] device veth1_macvtap entered promiscuous mode [ 69.518900][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.528406][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.537283][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.546896][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.559017][ T4274] device veth1_vlan entered promiscuous mode [ 69.574619][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.586230][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.610603][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.619297][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.627858][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.636140][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.644204][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.652445][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.660088][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.669172][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.683463][ T4278] device veth0_macvtap entered promiscuous mode [ 69.718893][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.735187][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.745884][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.756937][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.761765][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 69.771932][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.786073][ T4274] device veth0_macvtap entered promiscuous mode [ 69.795320][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.804825][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.813575][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.822743][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.831413][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.839968][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.848128][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 69.851366][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 69.854225][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 69.860086][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 69.880971][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.892776][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.903903][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.916586][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.928485][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.937167][ T4278] device veth1_macvtap entered promiscuous mode [ 69.946496][ T4274] device veth1_macvtap entered promiscuous mode [ 69.992452][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.000488][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.017073][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.027091][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.039136][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.049070][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.057916][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.066940][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.111894][ T4340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.119781][ T4340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.150766][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.168209][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.179409][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.191063][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.205240][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.216946][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.228806][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.237993][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.250801][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.260850][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.271998][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.284798][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.308938][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.321018][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.332297][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.349952][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.359683][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.370941][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.380403][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.390308][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.399646][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.421797][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.439388][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.452937][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.468441][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.479123][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.495711][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.508811][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.521288][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.532528][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.542616][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.553761][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.563771][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.574291][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.584103][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.595143][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.606029][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.620425][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.629173][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.643296][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.654301][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.668251][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.686275][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.701709][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.710860][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.730983][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.746802][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.756033][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.769350][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.769886][ T4364] loop2: detected capacity change from 0 to 128 [ 70.789419][ T4340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.824763][ T4364] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.836559][ T4340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.865577][ T4364] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.895487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.001736][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.009554][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.041293][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.060984][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.077437][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.100781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.169762][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.170175][ T4367] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.178200][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.197003][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.222373][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.223659][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.230067][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.259518][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.280097][ T4370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10'. [ 71.299511][ T4370] Zero length message leads to an empty skb [ 71.300107][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.357682][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.405975][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.412199][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.427918][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.441619][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.460689][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.500201][ T4376] loop2: detected capacity change from 0 to 64 [ 71.833060][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 71.911678][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 71.916005][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 71.917761][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 71.923749][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 71.964074][ T2185] hid-generic 0005:4C4A:0A0E.0001: item fetching failed at offset 0/1 [ 71.981862][ T2185] hid-generic: probe of 0005:4C4A:0A0E.0001 failed with error -22 [ 72.058996][ T4395] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 72.211384][ T4318] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.411304][ T4318] usb 3-1: Using ep0 maxpacket: 32 [ 72.420246][ T4318] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 72.475812][ T4318] usb 3-1: config 0 has no interface number 0 [ 72.497179][ T4318] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 72.522683][ T4417] binder: 4416:4417 ioctl c018620c 200000000140 returned -1 [ 72.526767][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.570756][ T4318] usb 3-1: Product: syz [ 72.591023][ T4318] usb 3-1: Manufacturer: syz [ 72.606728][ T4318] usb 3-1: SerialNumber: syz [ 72.632911][ T4318] usb 3-1: config 0 descriptor?? [ 72.648815][ T4318] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 72.812432][ T4419] syz.3.26 (4419) used greatest stack depth: 19888 bytes left [ 72.890774][ T4318] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 72.913876][ T4318] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 73.380060][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 73.412236][ T4318] usb 3-1: USB disconnect, device number 2 [ 73.462112][ T4318] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 73.527509][ T4318] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 73.590132][ T4318] quatech2 3-1:0.51: device disconnected [ 73.707129][ T4442] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 73.904416][ T4429] loop4: detected capacity change from 0 to 32768 [ 74.035782][ T4429] XFS (loop4): Mounting V5 Filesystem [ 74.040482][ T4447] loop0: detected capacity change from 0 to 4096 [ 74.122506][ T4456] netlink: 36 bytes leftover after parsing attributes in process `syz.2.41'. [ 74.179923][ T4456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41'. [ 74.246378][ T4429] XFS (loop4): Ending clean mount [ 74.501305][ T4440] loop1: detected capacity change from 0 to 32768 [ 74.514401][ T4272] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 74.520998][ T4272] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 74.559537][ T4278] XFS (loop4): Unmounting Filesystem [ 74.594153][ T4440] XFS (loop1): Mounting V5 Filesystem [ 74.760764][ T4440] XFS (loop1): Ending clean mount [ 74.775994][ T4459] loop3: detected capacity change from 0 to 32768 [ 74.863942][ T27] audit: type=1800 audit(1778969923.857:2): pid=4440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.35" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 74.912030][ T4459] XFS (loop3): Mounting V5 Filesystem [ 75.073674][ T4274] XFS (loop1): Unmounting Filesystem [ 75.129107][ T4459] XFS (loop3): Ending clean mount [ 75.171969][ T4459] XFS (loop3): Quotacheck needed: Please wait. [ 75.239244][ T4459] XFS (loop3): Quotacheck: Done. [ 75.251646][ T4261] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.466436][ T4273] XFS (loop3): Unmounting Filesystem [ 75.475453][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.488690][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16648, setting to 1024 [ 75.501938][ T4261] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 75.528172][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.531409][ T951] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 75.557424][ T4261] usb 1-1: config 0 descriptor?? [ 75.741346][ T951] usb 3-1: Using ep0 maxpacket: 32 [ 75.748292][ T951] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 75.782426][ T951] usb 3-1: config 0 has no interface number 0 [ 75.819128][ T951] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 75.851238][ T951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.859255][ T951] usb 3-1: Product: syz [ 75.897611][ T951] usb 3-1: Manufacturer: syz [ 75.905775][ T951] usb 3-1: SerialNumber: syz [ 75.920370][ T951] usb 3-1: config 0 descriptor?? [ 75.943564][ T951] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 75.977636][ T4261] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 76.016817][ T4261] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input5 [ 76.135046][ T4513] loop4: detected capacity change from 0 to 64 [ 76.149097][ T951] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 76.149705][ T4261] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 76.176506][ C1] usb 1-1: input irq status -75 received [ 76.179240][ T951] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 76.202509][ T27] audit: type=1800 audit(1778969925.197:3): pid=4513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.55" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 76.376104][ T4511] loop3: detected capacity change from 0 to 4096 [ 76.554417][ T4261] usb 1-1: USB disconnect, device number 2 [ 76.674437][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 76.683530][ T4319] usb 3-1: USB disconnect, device number 3 [ 76.696667][ T4273] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 76.701770][ T4319] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 76.744032][ T4515] fido_id[4515]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 76.761576][ T4273] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 76.802516][ T4319] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 76.830057][ T4319] quatech2 3-1:0.51: device disconnected [ 77.328571][ T4541] loop2: detected capacity change from 0 to 16 [ 77.366858][ T4541] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 77.371218][ T4319] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.561195][ T4319] usb 4-1: Using ep0 maxpacket: 16 [ 77.568472][ T4319] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 77.587306][ T4319] usb 4-1: config 0 has no interface number 0 [ 77.595195][ T4549] Illegal XDP return value 1976991744 on prog (id 3) dev N/A, expect packet loss! [ 77.605631][ T4319] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 77.633570][ T4319] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 77.656699][ T4319] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 77.680075][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.689117][ T951] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.712914][ T4319] usb 4-1: Product: syz [ 77.717110][ T4319] usb 4-1: Manufacturer: syz [ 77.727354][ T4319] usb 4-1: SerialNumber: syz [ 77.748329][ T4319] usb 4-1: config 0 descriptor?? [ 77.759023][ T4531] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 77.777626][ T4531] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 77.789018][ T4553] loop1: detected capacity change from 0 to 2048 [ 77.829193][ T4553] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 77.868282][ T4553] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.877433][ T951] usb 1-1: Using ep0 maxpacket: 16 [ 77.889155][ T951] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 77.898573][ T951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.906894][ T951] usb 1-1: Product: syz [ 77.924036][ T4318] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.933142][ T951] usb 1-1: Manufacturer: syz [ 77.938015][ T951] usb 1-1: SerialNumber: syz [ 78.006259][ T4531] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 78.021659][ T4531] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 78.080284][ T4557] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 78.135378][ T4318] usb 5-1: Using ep0 maxpacket: 16 [ 78.157237][ T4318] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 78.178672][ T951] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 78.197906][ T4318] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 78.214034][ T951] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 78.232013][ T4318] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 78.242570][ T951] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 78.261201][ T4318] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.269866][ T951] usb 1-1: media controller created [ 78.280358][ T4318] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 78.310326][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.312144][ T4562] loop2: detected capacity change from 0 to 8192 [ 78.333909][ T951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.340215][ T4562] FAT-fs (loop2): Unrecognized mount option "1844674407370955161518446744073709551615" or missing value [ 78.342547][ T4318] usb 5-1: Product: syz [ 78.368907][ T4318] usb 5-1: Manufacturer: syz [ 78.394017][ T4318] usb 5-1: SerialNumber: syz [ 78.408335][ T4318] usb 5-1: config 0 descriptor?? [ 78.593993][ T951] zl10353_read_register: readreg error (reg=127, ret==-32) [ 78.625407][ T4318] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 78.634873][ T4565] loop2: detected capacity change from 0 to 512 [ 78.642109][ T4565] EXT4-fs: Ignoring removed bh option [ 78.644092][ T4319] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 78.672284][ T4565] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 78.679714][ T4319] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 78.698015][ T3623] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 78.703244][ T951] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 78.715355][ T4319] asix: probe of 4-1:0.251 failed with error -71 [ 78.751336][ T951] usb 1-1: USB disconnect, device number 3 [ 78.757862][ T4319] usb 4-1: USB disconnect, device number 2 [ 78.777697][ T4565] EXT4-fs (loop2): 1 truncate cleaned up [ 78.816892][ T4565] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 78.826614][ T3623] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 78.844758][ T4551] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 78.868176][ T27] audit: type=1800 audit(1778969927.857:4): pid=4565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.78" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 78.902235][ T3623] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 78.994610][ T3623] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 79.005624][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 79.007477][ T4316] usb 5-1: USB disconnect, device number 2 [ 79.082328][ T4518] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 79.287711][ T4573] loop1: detected capacity change from 0 to 512 [ 79.372367][ T4573] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 79.392949][ T4573] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.419742][ T4577] device batadv_slave_1 entered promiscuous mode [ 79.426348][ T4579] loop0: detected capacity change from 0 to 1024 [ 79.486288][ T4574] device batadv_slave_1 left promiscuous mode [ 79.500321][ T4579] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 79.606121][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 79.913933][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 80.201222][ T4261] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 80.236822][ T4610] loop4: detected capacity change from 0 to 8 [ 80.363279][ T4613] loop2: detected capacity change from 0 to 512 [ 80.402946][ T4261] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 80.426065][ T4261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.440289][ T4261] usb 4-1: config 0 descriptor?? [ 80.448791][ T4261] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 80.464037][ T4613] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 80.567458][ T4613] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.630814][ T27] audit: type=1326 audit(1778969929.617:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4611 comm="syz.1.106" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37d039ce59 code=0x0 [ 80.654061][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.671347][ T4261] gp8psk: usb in 128 operation failed. [ 80.830697][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 80.880929][ T4261] gp8psk: FW Version = 168.172.30 (0xa8ac1e) Build 2166/109/231 [ 81.082062][ T4261] gp8psk: usb in 149 operation failed. [ 81.102336][ T4261] gp8psk: failed to get FPGA version [ 81.130424][ T4261] gp8psk: usb in 138 operation failed. [ 81.147274][ T4261] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 81.166821][ T4261] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 81.188067][ T4629] set_capacity_and_notify: 2 callbacks suppressed [ 81.188079][ T4629] loop0: detected capacity change from 0 to 1024 [ 81.208915][ T4261] usb 4-1: USB disconnect, device number 3 [ 81.239112][ T4629] ======================================================= [ 81.239112][ T4629] WARNING: The mand mount option has been deprecated and [ 81.239112][ T4629] and is ignored by this kernel. Remove the mand [ 81.239112][ T4629] option from the mount to silence this warning. [ 81.239112][ T4629] ======================================================= [ 81.273961][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.435319][ T126] cfg80211: failed to load regulatory.db [ 81.517392][ T4340] hfsplus: b-tree write err: -5, ino 25 [ 81.524239][ T4340] hfsplus: b-tree write err: -5, ino 4 [ 81.559979][ T4340] hfsplus: b-tree write err: -5, ino 2 [ 81.601262][ T4340] hfsplus: b-tree write err: -5, ino 26 [ 81.929409][ T4646] loop0: detected capacity change from 0 to 512 [ 81.962104][ T4650] loop4: detected capacity change from 0 to 256 [ 82.042069][ T4654] loop2: detected capacity change from 0 to 128 [ 82.058007][ T4650] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 82.178235][ T4646] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 82.257434][ T4646] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.611549][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 82.891386][ T4319] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.966617][ T4678] loop0: detected capacity change from 0 to 128 [ 83.002229][ T4678] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 83.048044][ T4678] sysv_free_block: trying to free block not in datazone [ 83.092763][ T4319] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 83.121267][ T4319] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.146861][ T4272] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 83.151921][ T4319] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 83.184406][ T4319] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.232702][ T4319] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 83.267839][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 83.304962][ T4319] usb 2-1: Product: syz [ 83.309251][ T4319] usb 2-1: Manufacturer: syz [ 83.334051][ T4319] cdc_wdm 2-1:1.0: skipping garbage [ 83.339287][ T4319] cdc_wdm 2-1:1.0: skipping garbage [ 83.390033][ T4319] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 83.416707][ T4319] cdc_wdm 2-1:1.0: Unknown control protocol [ 83.539337][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 83.546022][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 83.552434][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 83.559049][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 83.569006][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 83.575613][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 83.582101][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 83.588704][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 83.595070][ T4319] usb 2-1: USB disconnect, device number 2 [ 83.601730][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 83.601753][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 83.601770][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 83.781445][ T4318] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 83.971479][ T4318] usb 1-1: Using ep0 maxpacket: 32 [ 83.978243][ T4318] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 84.018738][ T4318] usb 1-1: config 0 has no interface number 0 [ 84.027730][ T4318] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 84.039929][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.048156][ T4318] usb 1-1: Product: syz [ 84.055121][ T4318] usb 1-1: Manufacturer: syz [ 84.059730][ T4318] usb 1-1: SerialNumber: syz [ 84.065712][ T4318] usb 1-1: config 0 descriptor?? [ 84.076474][ T4318] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 84.280373][ T4318] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 84.326348][ T4318] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 84.463344][ T4699] loop3: detected capacity change from 0 to 512 [ 84.542723][ T4699] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 84.580228][ T4699] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.680968][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 84.689278][ T951] usb 1-1: USB disconnect, device number 4 [ 84.704707][ T951] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 84.768076][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 84.779110][ T951] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 84.829900][ T951] quatech2 1-1:0.51: device disconnected [ 84.929267][ T4713] tap0: tun_chr_ioctl cmd 1074025677 [ 84.945196][ T4713] tap0: linktype set to 772 [ 85.162248][ T4721] input: syz0 as /devices/virtual/input/input7 [ 85.177645][ T4722] loop4: detected capacity change from 0 to 764 [ 85.634133][ T4736] loop0: detected capacity change from 0 to 512 [ 85.684588][ T4736] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 85.726947][ T4736] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.736203][ T4742] loop4: detected capacity change from 0 to 256 [ 85.787332][ T4742] exfat: Deprecated parameter 'utf8' [ 85.812071][ T4742] exfat: Deprecated parameter 'utf8' [ 85.871907][ T4742] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 85.906016][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 85.911714][ T951] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.963578][ T27] audit: type=1804 audit(1778969934.957:6): pid=4742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.152" name="/newroot/38/file0/file1" dev="loop4" ino=1048600 res=1 errno=0 [ 85.985306][ C1] vkms_vblank_simulate: vblank timer overrun [ 86.003050][ T4748] loop3: detected capacity change from 0 to 128 [ 86.115290][ T951] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 86.139804][ T951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.181172][ T951] usb 2-1: Product: syz [ 86.200573][ T951] usb 2-1: Manufacturer: syz [ 86.221225][ T951] usb 2-1: SerialNumber: syz [ 86.519935][ T951] rtl8150 2-1:1.0: couldn't reset the device [ 86.545078][ T951] rtl8150: probe of 2-1:1.0 failed with error -5 [ 86.571544][ T951] usb 2-1: USB disconnect, device number 3 [ 86.629829][ T4768] loop3: detected capacity change from 0 to 512 [ 86.798787][ T4772] loop4: detected capacity change from 0 to 512 [ 86.866581][ T4772] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 86.935787][ T4772] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.096331][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 87.410242][ T4798] loop0: detected capacity change from 0 to 256 [ 87.532653][ T4318] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 87.731820][ T4318] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 87.747581][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.767035][ T4318] usb 4-1: Product: syz [ 87.772034][ T4318] usb 4-1: Manufacturer: syz [ 87.776799][ T4318] usb 4-1: SerialNumber: syz [ 87.790749][ T4318] usb 4-1: config 0 descriptor?? [ 88.019840][ T4318] usb 4-1: USB disconnect, device number 4 [ 88.293979][ T27] audit: type=1326 audit(1778969937.287:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.1.188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d039ce59 code=0x7ffc0000 [ 88.371304][ T27] audit: type=1326 audit(1778969937.287:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.1.188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f37d039ce59 code=0x7ffc0000 [ 88.435083][ T4809] loop4: detected capacity change from 0 to 32768 [ 88.437229][ T27] audit: type=1326 audit(1778969937.287:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.1.188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d039ce59 code=0x7ffc0000 [ 88.486168][ T27] audit: type=1326 audit(1778969937.287:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4820 comm="syz.1.188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d039ce59 code=0x7ffc0000 [ 88.541349][ T126] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 88.729424][ T126] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.751219][ T126] usb 1-1: config 0 has no interface number 0 [ 88.757348][ T126] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 88.788031][ T126] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 88.804507][ T126] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 88.836718][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.857198][ T126] usb 1-1: config 0 descriptor?? [ 88.870591][ T4821] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.890850][ T4839] loop3: detected capacity change from 0 to 16 [ 88.901634][ T126] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 88.941081][ T4839] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 143300) [ 89.143791][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 89.167744][ T4365] usb 1-1: USB disconnect, device number 5 [ 89.242816][ T4850] loop4: detected capacity change from 0 to 256 [ 89.271262][ T126] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 89.276051][ T4850] exfat: Deprecated parameter 'namecase' [ 89.304365][ T4850] exfat: Deprecated parameter 'namecase' [ 89.336434][ T4850] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 89.471638][ T126] usb 2-1: Using ep0 maxpacket: 8 [ 89.479548][ T126] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 89.504534][ T126] usb 2-1: config 179 has no interface number 0 [ 89.510900][ T126] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 89.522505][ T126] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 89.534485][ T126] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 89.546061][ T126] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 89.558075][ T126] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 89.574944][ T126] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 89.584317][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.596845][ T4844] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 90.018013][ T951] usb 2-1: USB disconnect, device number 4 [ 90.018044][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 90.033605][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 90.601188][ T4261] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 90.735830][ T4898] loop3: detected capacity change from 0 to 256 [ 90.811227][ T4261] usb 3-1: Using ep0 maxpacket: 16 [ 90.819123][ T4261] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 90.866458][ T4261] usb 3-1: config 127 has no interface number 0 [ 90.891509][ T4261] usb 3-1: config 127 interface 124 has no altsetting 0 [ 90.911728][ T4261] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 90.929610][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.947174][ T4261] usb 3-1: Product: syz [ 90.956124][ T4261] usb 3-1: Manufacturer: syz [ 90.960831][ T4261] usb 3-1: SerialNumber: syz [ 91.176232][ T4890] loop0: detected capacity change from 0 to 32768 [ 91.250412][ T4890] XFS (loop0): Mounting V5 Filesystem [ 91.342488][ T4890] XFS (loop0): Ending clean mount [ 91.507301][ T4272] XFS (loop0): Unmounting Filesystem [ 91.895374][ T4261] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 91.930623][ T4902] loop3: detected capacity change from 0 to 32768 [ 91.988521][ T4902] [ 91.988521][ T4902] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.988521][ T4902] [ 92.104486][ T4261] usb 3-1: unable to get BOS descriptor or descriptor too short [ 92.111332][ T4923] loop4: detected capacity change from 0 to 1024 [ 92.119506][ T4261] usb 3-1: device firmware changed [ 92.175171][ T4925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 92.191320][ T4261] usb 3-1: USB disconnect, device number 4 [ 92.228503][ T4340] ERROR: (device loop3): diWrite: ixpxd invalid [ 92.228503][ T4340] [ 92.317227][ T4340] ERROR: (device loop3): txCommit: [ 92.317227][ T4340] [ 92.344692][ T4340] jfs_write_inode: jfs_commit_inode failed! [ 92.362678][ T11] hfsplus: b-tree write err: -5, ino 8 [ 92.370989][ T4273] [ 92.370989][ T4273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.370989][ T4273] [ 92.401555][ T4273] [ 92.401555][ T4273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.401555][ T4273] [ 92.947149][ T4950] mmap: syz.3.245 (4950) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.115036][ T4953] netlink: 60 bytes leftover after parsing attributes in process `syz.4.246'. [ 93.267224][ T4959] loop3: detected capacity change from 0 to 512 [ 93.297312][ T4959] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.352750][ T4959] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.249: iget: bad i_size value: 38620345925642 [ 93.395412][ T4959] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.249: couldn't read orphan inode 15 (err -117) [ 93.487427][ T4959] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 93.774307][ T4971] loop0: detected capacity change from 0 to 256 [ 93.889646][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 93.899494][ T4264] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.068593][ T4965] loop1: detected capacity change from 0 to 32768 [ 94.099037][ T4975] loop3: detected capacity change from 0 to 1024 [ 94.177516][ T4965] XFS (loop1): Mounting V5 Filesystem [ 94.355424][ T4965] XFS (loop1): Ending clean mount [ 94.409827][ T4965] XFS (loop1): Quotacheck needed: Please wait. [ 94.560856][ T4965] XFS (loop1): Quotacheck: Done. [ 94.582794][ T4995] loop4: detected capacity change from 0 to 512 [ 94.682410][ T4965] XFS (loop1): Unmounting Filesystem [ 94.728350][ T4995] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 94.773726][ T4995] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.062924][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 95.088156][ T5008] loop3: detected capacity change from 0 to 512 [ 95.200804][ T5008] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.265: inode has both inline data and extents flags [ 95.271151][ T5008] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.265: couldn't read orphan inode 15 (err -117) [ 95.286028][ T5008] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 95.405389][ T5017] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 95.614950][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 95.823773][ T5025] netlink: 'syz.3.272': attribute type 4 has an invalid length. [ 95.873122][ T5025] netlink: 17 bytes leftover after parsing attributes in process `syz.3.272'. [ 95.904791][ T5030] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.272'. [ 95.956218][ T5027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.273'. [ 96.016323][ T5018] loop1: detected capacity change from 0 to 32768 [ 96.138038][ T5018] JBD2: Ignoring recovery information on journal [ 96.343182][ T5018] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 96.389766][ T5044] tap0: tun_chr_ioctl cmd 1074025681 [ 96.555890][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 96.726777][ T5047] loop2: detected capacity change from 0 to 8192 [ 96.778041][ T5047] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 96.804299][ T5047] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 96.841493][ T5047] REISERFS (device loop2): using ordered data mode [ 96.867867][ T5047] reiserfs: using flush barriers [ 96.946891][ T5047] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 97.015912][ T5047] REISERFS (device loop2): checking transaction log (loop2) [ 97.063673][ T5064] loop4: detected capacity change from 0 to 512 [ 97.101194][ T4318] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 97.303314][ T4318] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 97.325016][ T4318] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 97.368144][ T5047] REISERFS (device loop2): Using tea hash to sort names [ 97.371661][ T4318] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 97.400365][ T5047] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 97.413527][ T5072] loop4: detected capacity change from 0 to 64 [ 97.451316][ T4318] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 97.484096][ T4318] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 97.517544][ T4318] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 97.544227][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 97.595133][ T4318] usb 4-1: Product: syz [ 97.605624][ T4318] usb 4-1: Manufacturer: syz [ 97.656016][ T4318] cdc_wdm 4-1:1.0: skipping garbage [ 97.673369][ T4318] cdc_wdm 4-1:1.0: skipping garbage [ 97.689900][ T4318] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 97.717761][ T5080] loop4: detected capacity change from 0 to 64 [ 97.717938][ T4318] cdc_wdm 4-1:1.0: Unknown control protocol [ 98.081360][ T7] usb 4-1: USB disconnect, device number 5 [ 98.285412][ T5078] loop0: detected capacity change from 0 to 32768 [ 98.549431][ T5097] loop4: detected capacity change from 0 to 256 [ 98.633371][ T5097] FAT-fs (loop4): Directory bread(block 64) failed [ 98.661205][ T5097] FAT-fs (loop4): Directory bread(block 65) failed [ 98.689843][ T5097] FAT-fs (loop4): Directory bread(block 66) failed [ 98.764182][ T5097] FAT-fs (loop4): Directory bread(block 67) failed [ 98.770860][ T5097] FAT-fs (loop4): Directory bread(block 68) failed [ 98.821235][ T5097] FAT-fs (loop4): Directory bread(block 69) failed [ 98.860898][ T5097] FAT-fs (loop4): Directory bread(block 70) failed [ 98.891237][ T5097] FAT-fs (loop4): Directory bread(block 71) failed [ 98.916737][ T5097] FAT-fs (loop4): Directory bread(block 72) failed [ 98.941303][ T5097] FAT-fs (loop4): Directory bread(block 73) failed [ 99.077431][ T5097] process 'syz.4.304' launched './file1' with NULL argv: empty string added [ 99.612270][ T4261] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.714067][ T5130] loop0: detected capacity change from 0 to 256 [ 99.744408][ T5130] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 99.811411][ T4261] usb 5-1: Using ep0 maxpacket: 32 [ 99.818180][ T4261] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 99.837197][ T4261] usb 5-1: config 0 has no interface number 0 [ 99.843515][ T27] audit: type=1800 audit(1778969948.827:11): pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.316" name="file1" dev="loop0" ino=1048612 res=0 errno=0 [ 99.888098][ T4261] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 99.917726][ T4261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.948048][ T4261] usb 5-1: Product: syz [ 99.968308][ T4261] usb 5-1: Manufacturer: syz [ 99.978447][ T4261] usb 5-1: SerialNumber: syz [ 99.993932][ T4261] usb 5-1: config 0 descriptor?? [ 100.027188][ T4261] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 100.233943][ T4261] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 100.255046][ T4261] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 100.309862][ T5139] loop1: detected capacity change from 0 to 8192 [ 100.348738][ T5139] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 100.386908][ T5139] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 100.401418][ T5139] REISERFS (device loop1): using ordered data mode [ 100.407980][ T5139] reiserfs: using flush barriers [ 100.423021][ T5139] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 100.441668][ T5139] REISERFS (device loop1): checking transaction log (loop1) [ 100.449381][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 100.477657][ T5139] REISERFS (device loop1): Using r5 hash to sort names [ 100.516855][ T5139] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 100.654618][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 100.666003][ T4261] usb 5-1: USB disconnect, device number 3 [ 100.686962][ T4261] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 100.735142][ T4261] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 100.779806][ T4261] quatech2 5-1:0.51: device disconnected [ 101.285467][ T5162] loop0: detected capacity change from 0 to 256 [ 101.365816][ T5145] loop2: detected capacity change from 0 to 40427 [ 101.411500][ T5145] F2FS-fs (loop2): invalid crc value [ 101.487661][ T5145] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 101.721452][ T5145] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.879473][ T4281] syz-executor: attempt to access beyond end of device [ 101.879473][ T4281] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 102.209624][ T5185] raw_sendmsg: syz.3.340 forgot to set AF_INET. Fix it! [ 102.356701][ T5168] loop4: detected capacity change from 0 to 32768 [ 102.461491][ T5168] XFS (loop4): Mounting V5 Filesystem [ 102.641547][ T5168] XFS (loop4): Ending clean mount [ 102.791248][ T4318] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 102.890027][ T4278] XFS (loop4): Unmounting Filesystem [ 102.981416][ T4318] usb 1-1: Using ep0 maxpacket: 16 [ 102.990411][ T4318] usb 1-1: unable to get BOS descriptor or descriptor too short [ 103.012353][ T4318] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.046950][ T4318] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.098322][ T4318] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 103.136980][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.163700][ T4318] usb 1-1: Product: syz [ 103.192727][ T4318] usb 1-1: Manufacturer: syz [ 103.207315][ T4318] usb 1-1: SerialNumber: syz [ 103.500939][ T4318] usb 1-1: unit 14 not found! [ 103.609424][ T4318] usb 1-1: USB disconnect, device number 6 [ 104.051970][ T5244] Bluetooth: MGMT ver 1.22 [ 104.175802][ T4318] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 104.361275][ T4318] usb 3-1: Using ep0 maxpacket: 16 [ 104.368279][ T4318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.390227][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.421178][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 104.430845][ T4318] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 104.440121][ T5253] loop3: detected capacity change from 0 to 8192 [ 104.492072][ T4318] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.493575][ T5253] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 104.531990][ T4318] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 104.542110][ T4318] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 104.569468][ T4318] usb 3-1: Manufacturer: syz [ 104.582159][ T4318] usb 3-1: config 0 descriptor?? [ 104.597455][ T5253] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 104.606921][ T5253] REISERFS (device loop3): using ordered data mode [ 104.613849][ T5253] reiserfs: using flush barriers [ 104.620331][ T5253] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 104.639160][ T5253] REISERFS (device loop3): checking transaction log (loop3) [ 104.852525][ T5253] REISERFS (device loop3): Using tea hash to sort names [ 104.883801][ T5253] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 104.925326][ T5253] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 105.041269][ T4318] rc_core: IR keymap rc-hauppauge not found [ 105.048954][ T4318] Registered IR keymap rc-empty [ 105.066448][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.131386][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.177184][ T5268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'. [ 105.186021][ T4318] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 105.187021][ T4318] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 105.281587][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.311285][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.341298][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.371248][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.411281][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.451295][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.491384][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.525410][ T5276] overlayfs: upper fs does not support tmpfile. [ 105.533728][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.571270][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.611241][ T4318] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.642588][ T4318] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 105.663041][ T4318] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 105.681279][ T4261] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 105.690335][ T4318] usb 3-1: USB disconnect, device number 5 [ 105.729530][ T5281] loop3: detected capacity change from 0 to 2048 [ 105.856797][ T5284] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.884919][ T4261] usb 1-1: unable to get BOS descriptor or descriptor too short [ 105.904861][ T4261] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 105.922065][ T4261] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 105.930365][ T5281] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=128, inode=7696581394448, rec_len=0, name_len=5 [ 105.957307][ T4261] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 105.977594][ T4261] usb 1-1: config 129 has no interface number 0 [ 105.993304][ T4261] usb 1-1: config 129 has no interface number 1 [ 106.006114][ T4261] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 106.027985][ T4261] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 106.039145][ T5281] Remounting filesystem read-only [ 106.070082][ T4261] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 106.120263][ T4261] usb 1-1: config 129 interface 135 has no altsetting 0 [ 106.145877][ T4261] usb 1-1: config 129 interface 5 has no altsetting 0 [ 106.183571][ T4261] usb 1-1: string descriptor 0 read error: -22 [ 106.200266][ T4261] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 106.226420][ T4261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.291417][ T4261] usb 1-1: MIDIStreaming interface descriptor not found [ 106.540613][ T7] usb 1-1: USB disconnect, device number 7 [ 106.587621][ T5295] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 106.621395][ T5295] syzkaller0: linktype set to 825 [ 106.650429][ T5299] loop4: detected capacity change from 0 to 128 [ 106.709831][ T5299] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 106.774769][ T5299] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.929116][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 107.006250][ T5297] loop3: detected capacity change from 0 to 8192 [ 107.068956][ T5297] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 107.123188][ T5297] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 107.166286][ T5297] REISERFS (device loop3): using ordered data mode [ 107.204647][ T5297] reiserfs: using flush barriers [ 107.244853][ T5297] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 107.338271][ T5297] REISERFS (device loop3): checking transaction log (loop3) [ 107.382949][ T5308] loop4: detected capacity change from 0 to 32768 [ 107.524997][ T5308] XFS (loop4): Mounting V5 Filesystem [ 107.646131][ T5297] REISERFS (device loop3): Using tea hash to sort names [ 107.658963][ T5308] XFS (loop4): Ending clean mount [ 107.687113][ T5297] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 107.797891][ T4278] XFS (loop4): Unmounting Filesystem [ 108.420346][ T5345] loop4: detected capacity change from 0 to 512 [ 108.425104][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 108.469761][ T5345] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.513568][ T5345] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.391: iget: bad i_size value: 38620345925642 [ 108.547101][ T5345] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.391: couldn't read orphan inode 15 (err -117) [ 108.589252][ T5345] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 108.611216][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 108.617983][ T7] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 108.641531][ T7] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 108.660913][ T7] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 108.701165][ T7] usb 4-1: Product: syz [ 108.705383][ T7] usb 4-1: Manufacturer: syz [ 108.710009][ T7] usb 4-1: SerialNumber: syz [ 108.738537][ T7] usb 4-1: config 0 descriptor?? [ 108.773270][ T5338] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 108.785274][ T4338] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:6: bg 0: block 5: invalid block bitmap [ 108.803273][ T7] hub 4-1:0.0: bad descriptor, ignoring hub [ 108.809204][ T7] hub: probe of 4-1:0.0 failed with error -5 [ 108.821075][ T4338] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 68 with error 28 [ 108.848510][ T4338] EXT4-fs (loop4): This should not happen!! Data will be lost [ 108.848510][ T4338] [ 108.859802][ T4338] EXT4-fs (loop4): Total free blocks count 0 [ 108.866465][ T4338] EXT4-fs (loop4): Free/Dirty block details [ 108.880956][ T4338] EXT4-fs (loop4): free_blocks=0 [ 108.899024][ T4338] EXT4-fs (loop4): dirty_blocks=68 [ 108.904401][ T4338] EXT4-fs (loop4): Block reservation details [ 108.910394][ T4338] EXT4-fs (loop4): i_reserved_data_blocks=68 [ 108.943927][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 109.446690][ T5369] loop4: detected capacity change from 0 to 128 [ 111.146534][ T4365] usb 4-1: USB disconnect, device number 6 [ 111.491185][ T5380] loop1: detected capacity change from 0 to 64 [ 111.545750][ T27] audit: type=1800 audit(1778969960.537:12): pid=5380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.412" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 112.000986][ T5399] loop1: detected capacity change from 0 to 256 [ 112.030803][ T5399] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.683439][ T5411] loop2: detected capacity change from 0 to 256 [ 112.738399][ T5411] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 112.806626][ T27] audit: type=1800 audit(1778969961.797:13): pid=5411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.425" name="file1" dev="loop2" ino=1048615 res=0 errno=0 [ 113.000787][ T5416] loop1: detected capacity change from 0 to 128 [ 113.119855][ T5416] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 113.120483][ T5418] loop2: detected capacity change from 0 to 64 [ 113.182132][ T5416] hpfs: filesystem error: improperly stopped [ 113.218131][ T5416] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 113.249110][ T5416] hpfs: You really don't want any checks? You are crazy... [ 113.279276][ T5416] hpfs: hpfs_map_sector(): read error [ 113.286518][ T5405] loop4: detected capacity change from 0 to 32768 [ 113.298500][ T27] audit: type=1800 audit(1778969962.287:14): pid=5418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.428" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 113.327280][ T5416] hpfs: code page support is disabled [ 113.334097][ T5416] hpfs: hpfs_map_4sectors(): unaligned read [ 113.357858][ T5416] hpfs: hpfs_map_4sectors(): unaligned read [ 113.366164][ T5416] hpfs: filesystem error: unable to find root dir [ 113.442690][ T5428] loop0: detected capacity change from 0 to 2048 [ 113.452372][ T5416] hpfs: hpfs_map_4sectors(): unaligned read [ 113.459451][ T5416] hpfs: hpfs_map_sector(): read error [ 113.521932][ T5428] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.533995][ T5405] XFS (loop4): Mounting V5 Filesystem [ 113.655664][ T5405] XFS (loop4): Ending clean mount [ 113.661203][ T5434] loop2: detected capacity change from 0 to 8192 [ 113.745991][ T5405] XFS (loop4): Quotacheck needed: Please wait. [ 113.856668][ T5405] XFS (loop4): Quotacheck: Done. [ 114.114429][ T4278] XFS (loop4): Unmounting Filesystem [ 114.724990][ T5453] loop1: detected capacity change from 0 to 256 [ 114.746043][ T5455] input: syz1 as /devices/virtual/input/input9 [ 114.800639][ T5453] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 114.873169][ T27] audit: type=1800 audit(1778969963.867:15): pid=5453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.439" name="file1" dev="loop1" ino=1048616 res=0 errno=0 [ 115.079124][ T5461] loop4: detected capacity change from 0 to 64 [ 115.386519][ T5470] loop2: detected capacity change from 0 to 64 [ 115.449188][ T5470] gfs2: path_lookup on c::: returned error -2 [ 115.584213][ T5474] loop4: detected capacity change from 0 to 256 [ 115.602408][ T5474] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 116.300409][ T5490] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 116.325399][ T5476] XFS (loop2): Mounting V5 Filesystem [ 116.370060][ T5476] XFS (loop2): Ending clean mount [ 116.376789][ T5490] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 116.389016][ T5476] XFS (loop2): Quotacheck needed: Please wait. [ 116.419197][ T5490] REISERFS (device loop4): using ordered data mode [ 116.430509][ T5476] XFS (loop2): Quotacheck: Done. [ 116.457864][ T5490] reiserfs: using flush barriers [ 116.497862][ T5490] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.535866][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 116.544818][ T5490] REISERFS (device loop4): checking transaction log (loop4) [ 116.568740][ T4281] XFS (loop2): Unmounting Filesystem [ 116.586817][ T5490] REISERFS (device loop4): Using r5 hash to sort names [ 116.605377][ T5490] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 116.723128][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 116.736492][ T7] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 116.766013][ T7] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 116.789852][ T7] usb 2-1: Product: syz [ 116.804548][ T7] usb 2-1: Manufacturer: syz [ 116.809179][ T7] usb 2-1: SerialNumber: syz [ 116.836161][ T7] usb 2-1: config 0 descriptor?? [ 117.078783][ T4318] usb 2-1: USB disconnect, device number 5 [ 117.173978][ T5513] Dev loop5: unable to read RDB block 7 [ 117.188895][ T5513] loop5: unable to read partition table [ 117.209570][ T5516] device syz_tun entered promiscuous mode [ 117.211068][ T5513] loop5: partition table beyond EOD, [ 117.218574][ T5516] device macvtap1 entered promiscuous mode [ 117.225031][ T5513] truncated [ 117.238666][ T5516] device syz_tun left promiscuous mode [ 117.242716][ T5513] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 118.456724][ T5532] set_capacity_and_notify: 3 callbacks suppressed [ 118.456738][ T5532] loop2: detected capacity change from 0 to 32768 [ 118.516846][ T5534] loop1: detected capacity change from 0 to 32768 [ 118.617483][ T5532] XFS (loop2): Mounting V5 Filesystem [ 118.699656][ T5534] XFS (loop1): Mounting V5 Filesystem [ 118.837004][ T5532] XFS (loop2): Ending clean mount [ 118.853842][ T5568] binder: 5567:5568 ioctl c018620c 200000000140 returned -1 [ 118.887694][ T5534] XFS (loop1): Ending clean mount [ 118.902375][ T5566] loop3: detected capacity change from 0 to 2048 [ 118.943647][ T5566] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 119.003659][ T5566] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.004084][ T4281] XFS (loop2): Unmounting Filesystem [ 119.139774][ T5572] loop0: detected capacity change from 0 to 64 [ 119.215838][ T4274] XFS (loop1): Unmounting Filesystem [ 119.628613][ T5580] tap0: tun_chr_ioctl cmd 1074025677 [ 119.635542][ T5584] loop3: detected capacity change from 0 to 128 [ 119.640518][ T5580] tap0: linktype set to 772 [ 119.689171][ T4319] hid-generic 0005:4C4A:0A0E.0003: item fetching failed at offset 0/1 [ 119.711370][ T4319] hid-generic: probe of 0005:4C4A:0A0E.0003 failed with error -22 [ 119.815156][ T5589] loop2: detected capacity change from 0 to 256 [ 119.837308][ T5589] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 119.998993][ T5592] loop3: detected capacity change from 0 to 1024 [ 120.095990][ T5596] loop1: detected capacity change from 0 to 1024 [ 120.188795][ T56] hfsplus: b-tree write err: -5, ino 25 [ 120.210150][ T56] hfsplus: b-tree write err: -5, ino 4 [ 120.233969][ T56] hfsplus: b-tree write err: -5, ino 2 [ 120.254242][ T56] hfsplus: b-tree write err: -5, ino 26 [ 120.276749][ T5600] device batadv_slave_1 entered promiscuous mode [ 120.302567][ T5597] device batadv_slave_1 left promiscuous mode [ 120.701378][ T4365] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 120.718904][ T5605] loop3: detected capacity change from 0 to 8192 [ 120.756614][ T5605] FAT-fs (loop3): Unrecognized mount option "1844674407370955161518446744073709551615" or missing value [ 120.801164][ T4261] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 120.921197][ T4365] usb 2-1: Using ep0 maxpacket: 16 [ 120.929253][ T4365] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 120.957979][ T4365] usb 2-1: config 0 has no interface number 0 [ 120.974972][ T4365] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 120.991769][ T4261] usb 3-1: Using ep0 maxpacket: 32 [ 121.004154][ T4261] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 121.021298][ T4365] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 121.047179][ T4261] usb 3-1: config 0 has no interface number 0 [ 121.064779][ T4261] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 121.076188][ T4365] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 121.097704][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.112252][ T4365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.130469][ T4365] usb 2-1: Product: syz [ 121.134870][ T4261] usb 3-1: Product: syz [ 121.139074][ T4365] usb 2-1: Manufacturer: syz [ 121.144075][ T4261] usb 3-1: Manufacturer: syz [ 121.148716][ T4261] usb 3-1: SerialNumber: syz [ 121.161155][ T4365] usb 2-1: SerialNumber: syz [ 121.181509][ T4261] usb 3-1: config 0 descriptor?? [ 121.187022][ T4365] usb 2-1: config 0 descriptor?? [ 121.203711][ T5604] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.213845][ T4261] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 121.223247][ T5604] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.447367][ T4261] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 121.461907][ T5604] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.472341][ T5604] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.479873][ T4261] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 121.679194][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 121.880288][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 121.881012][ T4318] usb 3-1: USB disconnect, device number 6 [ 121.923066][ T4318] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 121.979801][ T4318] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 122.033639][ T4318] quatech2 3-1:0.51: device disconnected [ 122.100087][ T4365] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 122.122211][ T4365] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 122.141468][ T4365] asix: probe of 2-1:0.251 failed with error -71 [ 122.160020][ T4365] usb 2-1: USB disconnect, device number 6 [ 122.175471][ T5631] loop0: detected capacity change from 0 to 1024 [ 122.594485][ T5643] netlink: 'syz.2.507': attribute type 30 has an invalid length. [ 122.880756][ T5649] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 122.922939][ T5649] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 123.538126][ T5664] set_capacity_and_notify: 1 callbacks suppressed [ 123.538141][ T5664] loop2: detected capacity change from 0 to 512 [ 123.553271][ T5641] loop0: detected capacity change from 0 to 32768 [ 123.604238][ T5664] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.698885][ T5641] XFS (loop0): Mounting V5 Filesystem [ 123.730423][ T5664] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.518: iget: bad i_size value: 38620345925642 [ 123.797573][ T5664] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.518: couldn't read orphan inode 15 (err -117) [ 123.827211][ T5679] loop3: detected capacity change from 0 to 512 [ 123.834715][ T5664] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 123.861348][ T5679] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 123.888765][ T5641] XFS (loop0): Ending clean mount [ 123.901785][ T5679] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 123.949815][ T5679] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #13: comm syz.3.520: iget: bad i_size value: 12154757448730 [ 124.009183][ T5679] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.520: couldn't read orphan inode 13 (err -117) [ 124.051675][ T5679] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 124.148005][ T4272] XFS (loop0): Unmounting Filesystem [ 124.148199][ T46] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm kworker/u4:3: bg 0: block 5: invalid block bitmap [ 124.212537][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 124.219231][ T46] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 68 with error 28 [ 124.246030][ T46] EXT4-fs (loop2): This should not happen!! Data will be lost [ 124.246030][ T46] [ 124.315129][ T46] EXT4-fs (loop2): Total free blocks count 0 [ 124.322194][ T46] EXT4-fs (loop2): Free/Dirty block details [ 124.328114][ T46] EXT4-fs (loop2): free_blocks=0 [ 124.333569][ T46] EXT4-fs (loop2): dirty_blocks=68 [ 124.338702][ T46] EXT4-fs (loop2): Block reservation details [ 124.355106][ T46] EXT4-fs (loop2): i_reserved_data_blocks=68 [ 124.386721][ T5684] loop4: detected capacity change from 0 to 4096 [ 124.406672][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 125.045647][ T5701] loop0: detected capacity change from 0 to 256 [ 125.126178][ T5701] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.464494][ T4278] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 125.470968][ T4278] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 125.628888][ T5711] loop1: detected capacity change from 0 to 512 [ 125.683789][ T5711] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.779373][ T5711] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.534: iget: bad i_size value: 38620345925642 [ 125.846187][ T5711] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.534: couldn't read orphan inode 15 (err -117) [ 125.858466][ T5711] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 126.096695][ T46] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:3: bg 0: block 5: invalid block bitmap [ 126.113659][ T46] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 68 with error 28 [ 126.151462][ T46] EXT4-fs (loop1): This should not happen!! Data will be lost [ 126.151462][ T46] [ 126.170195][ T5724] loop3: detected capacity change from 0 to 4096 [ 126.181668][ T46] EXT4-fs (loop1): Total free blocks count 0 [ 126.187679][ T46] EXT4-fs (loop1): Free/Dirty block details [ 126.250464][ T46] EXT4-fs (loop1): free_blocks=0 [ 126.268740][ T46] EXT4-fs (loop1): dirty_blocks=68 [ 126.298213][ T46] EXT4-fs (loop1): Block reservation details [ 126.315193][ T46] EXT4-fs (loop1): i_reserved_data_blocks=68 [ 126.361997][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 126.444363][ T4273] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 126.450932][ T4273] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 126.642310][ T5735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.543'. [ 126.907158][ T5740] loop4: detected capacity change from 0 to 128 [ 126.926963][ T5716] loop2: detected capacity change from 0 to 32768 [ 126.949503][ T5740] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 127.035364][ T5716] XFS (loop2): Mounting V5 Filesystem [ 127.075191][ T5740] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.256662][ T5716] XFS (loop2): Ending clean mount [ 127.608455][ T5736] loop0: detected capacity change from 0 to 32768 [ 127.633283][ T4281] XFS (loop2): Unmounting Filesystem [ 127.861757][ T5768] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.901991][ T5736] XFS (loop0): Mounting V5 Filesystem [ 127.909524][ T5766] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.977345][ T5768] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.551: iget: bad i_size value: 38620345925642 [ 128.024898][ T5766] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.552: iget: bad i_size value: 38620345925642 [ 128.085426][ T5768] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.551: couldn't read orphan inode 15 (err -117) [ 128.098298][ T5736] XFS (loop0): Ending clean mount [ 128.123362][ T5766] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.552: couldn't read orphan inode 15 (err -117) [ 128.161199][ T5766] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 128.222893][ T5768] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 128.266829][ T4272] XFS (loop0): Unmounting Filesystem [ 128.443569][ T9] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm kworker/u4:0: bg 0: block 5: invalid block bitmap [ 128.472153][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 68 with error 28 [ 128.507035][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 128.507035][ T9] [ 128.519942][ T9] EXT4-fs (loop3): Total free blocks count 0 [ 128.538275][ T9] EXT4-fs (loop3): Free/Dirty block details [ 128.546008][ T9] EXT4-fs (loop3): free_blocks=0 [ 128.548932][ T5777] set_capacity_and_notify: 2 callbacks suppressed [ 128.548943][ T5777] loop2: detected capacity change from 0 to 128 [ 128.574996][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 128.621306][ T9] EXT4-fs (loop3): dirty_blocks=68 [ 128.626457][ T9] EXT4-fs (loop3): Block reservation details [ 128.647647][ T9] EXT4-fs (loop3): i_reserved_data_blocks=68 [ 128.662537][ T5777] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 128.679647][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 128.721331][ T5777] hpfs: filesystem error: improperly stopped [ 128.727356][ T5777] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 128.806899][ T5777] hpfs: You really don't want any checks? You are crazy... [ 128.808934][ T5779] netlink: 'syz.4.555': attribute type 2 has an invalid length. [ 128.888636][ T5777] hpfs: hpfs_map_sector(): read error [ 128.912044][ T5777] hpfs: code page support is disabled [ 128.938498][ T5777] hpfs: hpfs_map_4sectors(): unaligned read [ 128.995167][ T5777] hpfs: hpfs_map_4sectors(): unaligned read [ 129.006904][ T5777] hpfs: filesystem error: unable to find root dir [ 129.089972][ T5777] hpfs: hpfs_map_4sectors(): unaligned read [ 129.099996][ T5785] netlink: 'syz.4.556': attribute type 11 has an invalid length. [ 129.100023][ T5787] loop3: detected capacity change from 0 to 64 [ 129.111431][ T5777] hpfs: hpfs_map_sector(): read error [ 129.120112][ T5789] loop0: detected capacity change from 0 to 256 [ 129.181569][ T5785] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.556'. [ 129.190597][ T5789] FAT-fs (loop0): Directory bread(block 64) failed [ 129.211200][ T5789] FAT-fs (loop0): Directory bread(block 65) failed [ 129.218263][ T5789] FAT-fs (loop0): Directory bread(block 66) failed [ 129.251170][ T5789] FAT-fs (loop0): Directory bread(block 67) failed [ 129.257818][ T5789] FAT-fs (loop0): Directory bread(block 68) failed [ 129.289253][ T5789] FAT-fs (loop0): Directory bread(block 69) failed [ 129.347380][ T5789] FAT-fs (loop0): Directory bread(block 70) failed [ 129.387677][ T5783] loop1: detected capacity change from 0 to 4096 [ 129.397273][ T5789] FAT-fs (loop0): Directory bread(block 71) failed [ 129.423983][ T5789] FAT-fs (loop0): Directory bread(block 72) failed [ 129.448823][ T5789] FAT-fs (loop0): Directory bread(block 73) failed [ 129.839749][ T4274] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 129.884932][ T4274] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 130.161265][ T4318] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.189408][ T5803] loop0: detected capacity change from 0 to 8192 [ 130.262707][ T5803] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 130.283409][ T5803] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 130.292973][ T5803] REISERFS (device loop0): using ordered data mode [ 130.300457][ T5803] reiserfs: using flush barriers [ 130.330961][ T5803] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 130.351249][ T4318] usb 3-1: Using ep0 maxpacket: 16 [ 130.362546][ T4318] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 130.385614][ T5803] REISERFS (device loop0): checking transaction log (loop0) [ 130.431167][ T4318] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 130.479228][ T4318] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 130.523505][ T4318] usb 3-1: config 0 interface 0 has no altsetting 0 [ 130.539012][ T4318] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 130.587453][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.619604][ T4318] usb 3-1: Product: syz [ 130.632688][ T4318] usb 3-1: Manufacturer: syz [ 130.636913][ T5803] REISERFS (device loop0): Using tea hash to sort names [ 130.661394][ T4318] usb 3-1: SerialNumber: syz [ 130.664965][ T5803] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 130.692458][ T4318] usb 3-1: config 0 descriptor?? [ 130.722690][ T5803] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 130.922088][ T4318] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11 [ 130.948535][ T3623] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 130.954202][ T5804] loop3: detected capacity change from 0 to 32768 [ 131.001525][ T3623] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 131.069479][ T4518] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 131.146402][ T5804] XFS (loop3): Mounting V5 Filesystem [ 131.206372][ T5806] loop1: detected capacity change from 0 to 32768 [ 131.213793][ T5799] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 131.237268][ T3623] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 131.254389][ T4319] usb 3-1: USB disconnect, device number 7 [ 131.264483][ T3623] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 131.424957][ T5804] XFS (loop3): Ending clean mount [ 131.717558][ T4273] XFS (loop3): Unmounting Filesystem [ 132.091812][ T5826] loop2: detected capacity change from 0 to 128 [ 132.471523][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 132.559178][ T5822] loop0: detected capacity change from 0 to 32768 [ 132.635429][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.642114][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.736343][ T5822] XFS (loop0): Mounting V5 Filesystem [ 132.875823][ T5822] XFS (loop0): Ending clean mount [ 132.903855][ T5822] XFS (loop0): Quotacheck needed: Please wait. [ 132.965845][ T5822] XFS (loop0): Quotacheck: Done. [ 133.066728][ T5822] XFS (loop0): Unmounting Filesystem [ 133.210423][ T5843] loop1: detected capacity change from 0 to 8192 [ 133.277907][ T5843] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 133.366249][ T5843] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 133.394256][ T5843] REISERFS (device loop1): using ordered data mode [ 133.400817][ T5843] reiserfs: using flush barriers [ 133.436673][ T5843] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 133.525378][ T5843] REISERFS (device loop1): checking transaction log (loop1) [ 133.803738][ T5843] REISERFS (device loop1): Using tea hash to sort names [ 133.824338][ T5843] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 133.909055][ T5847] loop4: detected capacity change from 0 to 512 [ 133.944064][ T5849] loop0: detected capacity change from 0 to 512 [ 133.973328][ T5847] EXT4-fs: Ignoring removed bh option [ 133.979107][ T5849] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.019438][ T5847] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 134.060289][ T5849] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.577: iget: bad i_size value: 38620345925642 [ 134.090242][ T5847] EXT4-fs (loop4): 1 truncate cleaned up [ 134.145778][ T5847] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 134.176532][ T5849] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.577: couldn't read orphan inode 15 (err -117) [ 134.199546][ T5849] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 134.210106][ T27] audit: type=1800 audit(1778969983.197:16): pid=5847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.580" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 134.231219][ T2185] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 134.319604][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 134.384808][ T4340] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:7: bg 0: block 5: invalid block bitmap [ 134.421487][ T4340] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 68 with error 28 [ 134.451264][ T2185] usb 4-1: Using ep0 maxpacket: 32 [ 134.457337][ T4340] EXT4-fs (loop0): This should not happen!! Data will be lost [ 134.457337][ T4340] [ 134.460838][ T2185] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 134.479579][ T4340] EXT4-fs (loop0): Total free blocks count 0 [ 134.492782][ T4340] EXT4-fs (loop0): Free/Dirty block details [ 134.498853][ T4340] EXT4-fs (loop0): free_blocks=0 [ 134.507281][ T4340] EXT4-fs (loop0): dirty_blocks=68 [ 134.531545][ T4340] EXT4-fs (loop0): Block reservation details [ 134.536208][ T2185] usb 4-1: config 0 has no interface number 0 [ 134.545896][ T2185] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 134.551632][ T4340] EXT4-fs (loop0): i_reserved_data_blocks=68 [ 134.566555][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 134.611257][ T2185] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.634183][ T2185] usb 4-1: Product: syz [ 134.638387][ T2185] usb 4-1: Manufacturer: syz [ 134.657643][ T2185] usb 4-1: SerialNumber: syz [ 134.680060][ T2185] usb 4-1: config 0 descriptor?? [ 134.703379][ T2185] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 134.801001][ T5865] loop2: detected capacity change from 0 to 512 [ 134.918878][ T2185] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 134.941300][ T4365] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 134.943499][ T2185] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 135.124843][ T4365] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 135.147252][ T4365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.179132][ T4365] usb 1-1: Product: syz [ 135.196635][ T4365] usb 1-1: Manufacturer: syz [ 135.211128][ T4365] usb 1-1: SerialNumber: syz [ 135.233575][ T4365] usb 1-1: config 0 descriptor?? [ 135.257868][ T5871] loop1: detected capacity change from 0 to 8192 [ 135.363955][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 135.374425][ T2185] usb 4-1: USB disconnect, device number 7 [ 135.390745][ T5871] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 135.418020][ T2185] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 135.521246][ T5871] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 135.530468][ T5871] REISERFS (device loop1): using ordered data mode [ 135.545805][ T2185] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 135.547641][ T4365] usb 1-1: USB disconnect, device number 8 [ 135.590358][ T2185] quatech2 4-1:0.51: device disconnected [ 135.643828][ T5871] reiserfs: using flush barriers [ 135.684015][ T5871] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 135.791020][ T5871] REISERFS (device loop1): checking transaction log (loop1) [ 135.829143][ T5869] loop2: detected capacity change from 0 to 32768 [ 136.289314][ T5871] REISERFS (device loop1): Using tea hash to sort names [ 136.304823][ T5879] loop4: detected capacity change from 0 to 256 [ 136.322611][ T5871] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 136.452319][ T5871] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 136.552351][ T5883] loop0: detected capacity change from 0 to 512 [ 137.102995][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.599'. [ 137.625652][ T5913] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 137.651196][ T4365] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 137.651366][ T5913] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 137.844955][ T4365] usb 5-1: unable to get BOS descriptor or descriptor too short [ 137.864442][ T4365] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 137.895022][ T4365] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 137.913627][ T4365] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 137.942160][ T4365] usb 5-1: config 129 has no interface number 0 [ 137.958638][ T4365] usb 5-1: config 129 has no interface number 1 [ 137.979523][ T4365] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 138.019212][ T4365] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 138.065525][ T4365] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 138.109173][ T4365] usb 5-1: config 129 interface 135 has no altsetting 0 [ 138.131701][ T4365] usb 5-1: config 129 interface 5 has no altsetting 0 [ 138.166748][ T4365] usb 5-1: string descriptor 0 read error: -22 [ 138.173439][ T4365] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 138.195735][ T4365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.226130][ T4365] usb 5-1: MIDIStreaming interface descriptor not found [ 138.541650][ T4319] usb 5-1: USB disconnect, device number 4 [ 139.116111][ T5959] loop0: detected capacity change from 0 to 256 [ 139.155604][ T5959] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xecc0b056, utbl_chksum : 0xe619d30d) [ 139.250293][ T5959] syz.0.625: attempt to access beyond end of device [ 139.250293][ T5959] loop0: rw=2049, sector=34225520825, nr_sectors = 1 limit=256 [ 139.291382][ T5959] Buffer I/O error on dev loop0, logical block 34225520825, lost async page write [ 139.325150][ T5959] syz.0.625: attempt to access beyond end of device [ 139.325150][ T5959] loop0: rw=2049, sector=34225520826, nr_sectors = 1 limit=256 [ 139.440620][ T5959] Buffer I/O error on dev loop0, logical block 34225520826, lost async page write [ 139.521371][ T5959] syz.0.625: attempt to access beyond end of device [ 139.521371][ T5959] loop0: rw=2049, sector=34225520827, nr_sectors = 1 limit=256 [ 139.593426][ T5959] Buffer I/O error on dev loop0, logical block 34225520827, lost async page write [ 139.784380][ T5945] loop1: detected capacity change from 0 to 32768 [ 139.929021][ T5945] XFS (loop1): Mounting V5 Filesystem [ 140.117221][ T5987] loop0: detected capacity change from 0 to 8192 [ 140.133035][ T5987] FAT-fs (loop0): Unrecognized mount option "1844674407370955161518446744073709551615" or missing value [ 140.154372][ T5945] XFS (loop1): Ending clean mount [ 140.302136][ T5994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.636'. [ 140.346002][ T5996] device syz_tun entered promiscuous mode [ 140.366552][ T5996] device macvtap1 entered promiscuous mode [ 140.412598][ T5996] device syz_tun left promiscuous mode [ 140.486032][ T4274] XFS (loop1): Unmounting Filesystem [ 140.593612][ T6001] capability: warning: `syz.0.639' uses 32-bit capabilities (legacy support in use) [ 140.819733][ T5975] loop4: detected capacity change from 0 to 32768 [ 140.978943][ T5975] XFS (loop4): Mounting V5 Filesystem [ 141.062937][ T5975] XFS (loop4): Ending clean mount [ 141.478044][ T6025] loop0: detected capacity change from 0 to 1024 [ 141.484717][ T4278] XFS (loop4): Unmounting Filesystem [ 141.569501][ T6006] loop3: detected capacity change from 0 to 32768 [ 141.622417][ T6006] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.642 (6006) [ 141.658136][ T6025] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 141.751425][ T6006] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.793588][ T6006] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 141.804370][ T6006] BTRFS info (device loop3): setting nodatasum [ 141.810550][ T6006] BTRFS info (device loop3): force zlib compression, level 3 [ 141.859114][ T6006] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 141.873615][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 141.905151][ T6006] BTRFS info (device loop3): use lzo compression, level 0 [ 141.965013][ T6006] BTRFS info (device loop3): turning on flush-on-commit [ 141.985115][ T6006] BTRFS info (device loop3): enabling auto defrag [ 142.025819][ T6006] BTRFS info (device loop3): max_inline at 4096 [ 142.053508][ T6006] BTRFS info (device loop3): using free space tree [ 142.070184][ T6040] loop0: detected capacity change from 0 to 64 [ 142.530389][ T6006] BTRFS info (device loop3): enabling ssd optimizations [ 142.577613][ T6068] device syz_tun entered promiscuous mode [ 142.621849][ T6068] device macvtap1 entered promiscuous mode [ 142.630355][ T27] audit: type=1800 audit(1778969991.617:17): pid=6006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.642" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 142.693549][ T6068] device syz_tun left promiscuous mode [ 142.995498][ T6077] vcan0: tx address claim with dest, not broadcast [ 143.208245][ T4273] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.379606][ T6090] loop0: detected capacity change from 0 to 128 [ 144.220219][ T6112] loop2: detected capacity change from 0 to 128 [ 144.279447][ T6112] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 144.322955][ T6112] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.441138][ T4261] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 144.629912][ T6111] loop4: detected capacity change from 0 to 32768 [ 144.643372][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.660059][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.672593][ T4261] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 144.683104][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.707559][ T6111] XFS (loop4): Mounting V5 Filesystem [ 144.714606][ T4261] usb 1-1: config 0 descriptor?? [ 144.850493][ T6111] XFS (loop4): Ending clean mount [ 144.877009][ T6111] XFS (loop4): Quotacheck needed: Please wait. [ 144.904320][ T6122] loop2: detected capacity change from 0 to 512 [ 144.914638][ T6111] XFS (loop4): Quotacheck: Done. [ 144.943599][ T6122] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 145.028752][ T6122] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.670: invalid indirect mapped block 256 (level 2) [ 145.055087][ T6111] XFS (loop4): Unmounting Filesystem [ 145.077821][ T6122] EXT4-fs (loop2): 2 truncates cleaned up [ 145.111756][ T4285] Bluetooth: hci5: command 0x1003 tx timeout [ 145.113551][ T6122] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 145.119201][ T4289] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 145.158547][ T4261] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x2 [ 145.189475][ T4261] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 145.372133][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 145.430766][ T6129] loop3: detected capacity change from 0 to 2048 [ 145.500260][ T6129] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 145.548470][ T4261] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 145.565441][ T4261] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 145.612020][ T4261] pyra: probe of 0003:1E7D:2CF6.0004 failed with error -71 [ 145.621512][ T4261] usb 1-1: USB disconnect, device number 9 [ 145.670315][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'. [ 145.720345][ T4340] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 145.787951][ T4340] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 145.823165][ T6141] syz.4.678[6141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.823307][ T6141] syz.4.678[6141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.849835][ T4340] EXT4-fs (loop3): This should not happen!! Data will be lost [ 145.849835][ T4340] [ 145.901615][ T4340] EXT4-fs (loop3): Total free blocks count 0 [ 145.917817][ T4340] EXT4-fs (loop3): Free/Dirty block details [ 145.918667][ T6139] fido_id[6139]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 145.927926][ T4340] EXT4-fs (loop3): free_blocks=2415919504 [ 145.989809][ T4340] EXT4-fs (loop3): dirty_blocks=48 [ 146.000731][ T4340] EXT4-fs (loop3): Block reservation details [ 146.028372][ T4340] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 146.050085][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 147.969573][ T6195] loop0: detected capacity change from 0 to 256 [ 148.242959][ T6203] netlink: 36 bytes leftover after parsing attributes in process `syz.3.704'. [ 148.575141][ T6190] loop1: detected capacity change from 0 to 32768 [ 148.701437][ T6216] ERROR: (device loop1): diAllocAG: free inode not found in summary map [ 148.701437][ T6216] [ 148.759530][ T6216] ERROR: (device loop1): remounting filesystem as read-only [ 148.796842][ T6219] loop2: detected capacity change from 0 to 128 [ 148.814917][ T6216] ialloc: diAlloc returned -5! [ 149.536362][ T6235] loop4: detected capacity change from 0 to 128 [ 149.558993][ T6235] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 149.585042][ T6235] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.642548][ T6237] loop2: detected capacity change from 0 to 1024 [ 149.666367][ T6221] loop3: detected capacity change from 0 to 32768 [ 149.778998][ T6221] XFS (loop3): Mounting V5 Filesystem [ 149.780719][ T6244] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 149.930750][ T6253] loop4: detected capacity change from 0 to 256 [ 150.012931][ T6221] XFS (loop3): Ending clean mount [ 150.049647][ T6253] FAT-fs (loop4): Directory bread(block 64) failed [ 150.086380][ T6253] FAT-fs (loop4): Directory bread(block 65) failed [ 150.111228][ T6253] FAT-fs (loop4): Directory bread(block 66) failed [ 150.117817][ T6253] FAT-fs (loop4): Directory bread(block 67) failed [ 150.154469][ T6257] loop2: detected capacity change from 0 to 256 [ 150.161632][ T6253] FAT-fs (loop4): Directory bread(block 68) failed [ 150.168209][ T6253] FAT-fs (loop4): Directory bread(block 69) failed [ 150.172938][ T6257] exfat: Deprecated parameter 'namecase' [ 150.214012][ T6257] exfat: Deprecated parameter 'namecase' [ 150.240683][ T4273] XFS (loop3): Unmounting Filesystem [ 150.259694][ T6253] FAT-fs (loop4): Directory bread(block 70) failed [ 150.282525][ T6257] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 150.304382][ T6253] FAT-fs (loop4): Directory bread(block 71) failed [ 150.310995][ T6253] FAT-fs (loop4): Directory bread(block 72) failed [ 150.346860][ T6253] FAT-fs (loop4): Directory bread(block 73) failed [ 150.478404][ T6265] loop1: detected capacity change from 0 to 64 [ 150.516061][ T6263] loop0: detected capacity change from 0 to 2048 [ 150.576254][ T6265] gfs2: path_lookup on c::: returned error -2 [ 150.638962][ T6263] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 150.759965][ T6271] loop2: detected capacity change from 0 to 256 [ 150.813343][ T9] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 150.835458][ T6271] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xecc0b056, utbl_chksum : 0xe619d30d) [ 150.878677][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 150.912632][ T6271] syz.2.730: attempt to access beyond end of device [ 150.912632][ T6271] loop2: rw=2049, sector=34225520825, nr_sectors = 1 limit=256 [ 150.927322][ T9] EXT4-fs (loop0): This should not happen!! Data will be lost [ 150.927322][ T9] [ 150.973511][ T9] EXT4-fs (loop0): Total free blocks count 0 [ 150.979550][ T9] EXT4-fs (loop0): Free/Dirty block details [ 150.986893][ T6271] Buffer I/O error on dev loop2, logical block 34225520825, lost async page write [ 151.034932][ T6271] syz.2.730: attempt to access beyond end of device [ 151.034932][ T6271] loop2: rw=2049, sector=34225520826, nr_sectors = 1 limit=256 [ 151.049696][ T9] EXT4-fs (loop0): free_blocks=2415919504 [ 151.071153][ T9] EXT4-fs (loop0): dirty_blocks=48 [ 151.085422][ T9] EXT4-fs (loop0): Block reservation details [ 151.098004][ T6271] Buffer I/O error on dev loop2, logical block 34225520826, lost async page write [ 151.122889][ T9] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 151.148449][ T6271] syz.2.730: attempt to access beyond end of device [ 151.148449][ T6271] loop2: rw=2049, sector=34225520827, nr_sectors = 1 limit=256 [ 151.165500][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 151.208406][ T6271] Buffer I/O error on dev loop2, logical block 34225520827, lost async page write [ 151.500086][ T6284] loop2: detected capacity change from 0 to 1024 [ 151.576969][ T6284] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 151.728507][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 151.748744][ T6275] loop4: detected capacity change from 0 to 32768 [ 151.787406][ T6275] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.731 (6275) [ 151.855451][ T6275] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.898108][ T6275] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 151.927707][ T6275] BTRFS info (device loop4): setting nodatasum [ 151.968253][ T6275] BTRFS info (device loop4): force zlib compression, level 3 [ 152.005026][ T6275] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 152.044933][ T6275] BTRFS info (device loop4): use lzo compression, level 0 [ 152.073366][ T6275] BTRFS info (device loop4): turning on flush-on-commit [ 152.080360][ T6275] BTRFS info (device loop4): enabling auto defrag [ 152.170102][ T6275] BTRFS info (device loop4): max_inline at 4096 [ 152.193722][ T6275] BTRFS info (device loop4): using free space tree [ 152.490690][ T6275] BTRFS info (device loop4): enabling ssd optimizations [ 152.607449][ T4278] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.708643][ T4316] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 152.941174][ T4316] usb 3-1: Using ep0 maxpacket: 8 [ 152.948015][ T4316] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 152.969797][ T4316] usb 3-1: config 0 has no interface number 0 [ 152.976004][ T4316] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.991875][ T4316] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 153.009868][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.035355][ T4316] usb 3-1: config 0 descriptor?? [ 153.056425][ T4316] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 153.286553][ T4316] usb 3-1: USB disconnect, device number 8 [ 153.608845][ T6352] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.028145][ T6364] program syz.2.755 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.694306][ T6358] set_capacity_and_notify: 4 callbacks suppressed [ 154.694322][ T6358] loop4: detected capacity change from 0 to 32768 [ 154.832324][ T6358] XFS (loop4): Mounting V5 Filesystem [ 154.875997][ T6358] XFS (loop4): Ending clean mount [ 154.880073][ T6382] tap0: tun_chr_ioctl cmd 2147767506 [ 154.896732][ T6358] XFS (loop4): Quotacheck needed: Please wait. [ 154.973244][ T6358] XFS (loop4): Quotacheck: Done. [ 155.093291][ T4278] XFS (loop4): Unmounting Filesystem [ 155.772273][ T6402] loop1: detected capacity change from 0 to 256 [ 155.881025][ T6402] FAT-fs (loop1): Directory bread(block 64) failed [ 155.925359][ T6402] FAT-fs (loop1): Directory bread(block 65) failed [ 155.962988][ T6402] FAT-fs (loop1): Directory bread(block 66) failed [ 155.990458][ T6392] loop2: detected capacity change from 0 to 131072 [ 155.993252][ T6402] FAT-fs (loop1): Directory bread(block 67) failed [ 156.021330][ T6402] FAT-fs (loop1): Directory bread(block 68) failed [ 156.027898][ T6392] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 156.034764][ T6392] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 156.044710][ T6392] F2FS-fs (loop2): invalid crc value [ 156.063625][ T6402] FAT-fs (loop1): Directory bread(block 69) failed [ 156.070273][ T6402] FAT-fs (loop1): Directory bread(block 70) failed [ 156.105966][ T6402] FAT-fs (loop1): Directory bread(block 71) failed [ 156.135118][ T6392] F2FS-fs (loop2): Found nat_bits in checkpoint [ 156.176828][ T6402] FAT-fs (loop1): Directory bread(block 72) failed [ 156.186731][ T6392] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 156.193902][ T6392] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 156.231354][ T6402] FAT-fs (loop1): Directory bread(block 73) failed [ 156.309973][ T6392] F2FS-fs (loop2): sanity_check_inode: inode (ino=4, mode=1773) should not have inline_dentry, run fsck to fix [ 156.691207][ T6092] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 156.893924][ T6092] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 156.925629][ T6092] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 156.981163][ T6092] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 157.005688][ T6092] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 157.063700][ T6092] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 157.114170][ T6092] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 157.141578][ T6092] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 157.149602][ T6092] usb 4-1: Product: syz [ 157.171331][ T6092] usb 4-1: Manufacturer: syz [ 157.224890][ T6092] cdc_wdm 4-1:1.0: skipping garbage [ 157.230133][ T6092] cdc_wdm 4-1:1.0: skipping garbage [ 157.254174][ T6092] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 157.260115][ T6092] cdc_wdm 4-1:1.0: Unknown control protocol [ 157.338853][ T6447] loop2: detected capacity change from 0 to 512 [ 157.481326][ T6447] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 157.508224][ T6447] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.685232][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 157.951885][ T6092] usb 4-1: USB disconnect, device number 8 [ 158.059731][ T6465] tipc: Started in network mode [ 158.090841][ T6465] tipc: Node identity ac14140f, cluster identity 4711 [ 158.114837][ T6465] tipc: New replicast peer: 255.255.255.255 [ 158.129376][ T6442] loop0: detected capacity change from 0 to 32768 [ 158.149217][ T6465] tipc: Enabled bearer , priority 10 [ 158.361018][ T6473] loop3: detected capacity change from 0 to 1024 [ 158.704550][ T6477] loop3: detected capacity change from 0 to 4096 [ 158.740063][ T6477] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 158.798009][ T6461] loop1: detected capacity change from 0 to 32768 [ 159.273763][ T126] tipc: Node number set to 2886997007 [ 159.484894][ T6495] netlink: 'syz.0.808': attribute type 18 has an invalid length. [ 159.589827][ T6493] loop3: detected capacity change from 0 to 8192 [ 159.652300][ T6493] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 159.718354][ T6493] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 159.729835][ T6493] REISERFS (device loop3): using ordered data mode [ 159.738609][ T6493] reiserfs: using flush barriers [ 159.745030][ T6493] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 159.766624][ T6493] REISERFS (device loop3): checking transaction log (loop3) [ 159.989251][ T6493] REISERFS (device loop3): Using tea hash to sort names [ 160.018345][ T6493] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 160.081157][ T126] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 160.291506][ T126] usb 3-1: Using ep0 maxpacket: 16 [ 160.299641][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.366313][ T126] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 160.389477][ T126] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 160.395582][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 160.412773][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.429184][ T6513] device gretap0 entered promiscuous mode [ 160.437061][ T126] usb 3-1: config 0 descriptor?? [ 160.445991][ T6513] device macvtap1 entered promiscuous mode [ 160.519576][ T6515] loop4: detected capacity change from 0 to 1024 [ 160.856985][ T31] hfsplus: b-tree write err: -5, ino 25 [ 160.867899][ T126] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 160.873199][ T31] hfsplus: b-tree write err: -5, ino 4 [ 160.880654][ T31] hfsplus: b-tree write err: -5, ino 2 [ 160.892608][ T126] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 160.927898][ T31] hfsplus: b-tree write err: -5, ino 17 [ 160.946024][ T126] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 161.002274][ T126] microsoft 0003:045E:07DA.0005: no inputs found [ 161.050702][ T126] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 161.077602][ T6521] loop3: detected capacity change from 0 to 128 [ 161.104008][ T126] usb 3-1: USB disconnect, device number 9 [ 161.117893][ T6521] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 161.192630][ T6521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.363020][ T6524] fido_id[6524]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 161.382333][ T6517] loop0: detected capacity change from 0 to 32768 [ 161.412929][ T6517] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.818 (6517) [ 161.484031][ T6517] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 161.511627][ T6517] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 161.540974][ T6517] BTRFS info (device loop0): setting nodatasum [ 161.561225][ T6517] BTRFS info (device loop0): disabling tree log [ 161.567551][ T6517] BTRFS info (device loop0): max_inline at 0 [ 161.587642][ T6517] BTRFS info (device loop0): turning on sync discard [ 161.607697][ T6517] BTRFS info (device loop0): using free space tree [ 161.740446][ T6542] program syz.4.826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.752727][ T6541] netlink: 120 bytes leftover after parsing attributes in process `syz.3.825'. [ 161.765008][ T6543] loop2: detected capacity change from 0 to 256 [ 161.819115][ T6543] FAT-fs (loop2): Directory bread(block 64) failed [ 161.851200][ T6543] FAT-fs (loop2): Directory bread(block 65) failed [ 161.901433][ T6543] FAT-fs (loop2): Directory bread(block 66) failed [ 161.908031][ T6543] FAT-fs (loop2): Directory bread(block 67) failed [ 161.915351][ T6543] FAT-fs (loop2): Directory bread(block 68) failed [ 161.922069][ T6543] FAT-fs (loop2): Directory bread(block 69) failed [ 161.930482][ T6543] FAT-fs (loop2): Directory bread(block 70) failed [ 161.944094][ T6543] FAT-fs (loop2): Directory bread(block 71) failed [ 161.951472][ T6517] BTRFS info (device loop0): enabling ssd optimizations [ 161.977183][ T6543] FAT-fs (loop2): Directory bread(block 72) failed [ 162.020375][ T6543] FAT-fs (loop2): Directory bread(block 73) failed [ 162.257861][ T4272] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 162.286328][ T6528] loop1: detected capacity change from 0 to 32768 [ 162.474484][ T6528] ERROR: (device loop1): dbAdjCtl: the maximum free buddy is not the old root [ 162.474484][ T6528] [ 162.591893][ T6528] ERROR: (device loop1): remounting filesystem as read-only [ 162.797300][ T107] BUG: Bad page state in process jfsCommit pfn:7f5a6 [ 162.805883][ T107] page:ffffea0001fd6980 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x7f5a6 [ 162.834229][ T107] flags: 0xfff08000002047(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 162.850027][ T6574] loop0: detected capacity change from 0 to 2048 [ 162.856977][ T107] raw: 00fff08000002047 dead000000000100 dead000000000122 0000000000000000 [ 162.871164][ T4320] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 162.887781][ T107] raw: 000000000000001c ffff88801be476c8 00000000ffffffff 0000000000000000 [ 162.908089][ T107] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 162.916669][ T107] page_owner tracks the page as allocated [ 162.922706][ T107] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 6528, tgid 6527 (syz.1.822), ts 162335413173, free_ts 157792456358 [ 162.942467][ T6576] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.954037][ T107] post_alloc_hook+0x173/0x1a0 [ 162.958840][ T107] get_page_from_freelist+0x1a1e/0x1ab0 [ 162.964488][ T107] __alloc_pages+0x1ec/0x4f0 [ 162.969094][ T107] folio_alloc+0x1c/0x60 [ 162.980229][ T107] filemap_alloc_folio+0xdb/0x480 [ 162.990673][ T107] do_read_cache_folio+0x1bb/0x760 [ 162.992036][ T6574] NILFS (loop0): unrecognized mount option "18446744073709551615@LqE: 艞t}0$" [ 162.996464][ T107] do_read_cache_page+0x32/0x220 [ 163.016865][ T107] __get_metapage+0x316/0xfa0 [ 163.021640][ T107] diRead+0x6f7/0xbb0 [ 163.025652][ T107] jfs_iget+0x89/0x3f0 [ 163.029741][ T107] jfs_fill_super+0x70e/0xad0 [ 163.037256][ T107] mount_bdev+0x287/0x3c0 [ 163.045323][ T107] legacy_get_tree+0xe6/0x180 [ 163.050043][ T107] vfs_get_tree+0x88/0x270 [ 163.057586][ T107] do_new_mount+0x24a/0xa40 [ 163.062282][ T107] __se_sys_mount+0x2e3/0x3d0 [ 163.066992][ T107] page last free stack trace: [ 163.072522][ T107] free_unref_page_prepare+0x8b4/0x9a0 [ 163.077999][ T107] free_unref_page+0x2e/0x3f0 [ 163.081192][ T4320] usb 3-1: Using ep0 maxpacket: 32 [ 163.082736][ T107] __vunmap+0x856/0xa00 [ 163.093235][ T107] snd_pcm_lib_free_pages+0x1e4/0x2a0 [ 163.098957][ T107] snd_pcm_release_substream+0x29e/0x460 [ 163.104850][ T107] snd_pcm_oss_release+0x180/0x240 [ 163.105306][ T4320] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 163.110067][ T107] __fput+0x22c/0x920 [ 163.118216][ T4320] usb 3-1: config 0 has no interface number 0 [ 163.127302][ T107] task_work_run+0x1d0/0x260 [ 163.130423][ T4320] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 163.133083][ T107] exit_to_user_mode_loop+0xe6/0x110 [ 163.141907][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.141929][ T4320] usb 3-1: Product: syz [ 163.141944][ T4320] usb 3-1: Manufacturer: syz [ 163.141959][ T4320] usb 3-1: SerialNumber: syz [ 163.168693][ T4320] usb 3-1: config 0 descriptor?? [ 163.170365][ T107] exit_to_user_mode_prepare+0xee/0x180 [ 163.180308][ T107] syscall_exit_to_user_mode+0x16/0x40 [ 163.185708][ T4320] smsc95xx v2.0.0 [ 163.185837][ T107] do_syscall_64+0x58/0xa0 [ 163.194161][ T107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.200615][ T107] Modules linked in: [ 163.204674][ T107] CPU: 0 PID: 107 Comm: jfsCommit Not tainted syzkaller #0 [ 163.211888][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.221941][ T107] Call Trace: [ 163.225216][ T107] [ 163.228140][ T107] dump_stack_lvl+0x188/0x24e [ 163.232816][ T107] ? show_regs_print_info+0x12/0x12 [ 163.238011][ T107] ? swiotlb_print_info+0x60/0x60 [ 163.243043][ T107] bad_page+0x14b/0x170 [ 163.247195][ T107] free_unref_page_prepare+0x42a/0x9a0 [ 163.252650][ T107] free_unref_page+0x2e/0x3f0 [ 163.257331][ T107] ? __folio_put+0xf1/0x210 [ 163.261837][ T107] txUnlock+0x27e/0xcb0 [ 163.265994][ T107] ? lockdep_hardirqs_on+0x94/0x140 [ 163.271188][ T107] jfs_lazycommit+0x56a/0xa70 [ 163.275861][ T107] ? txFreelock+0x5a0/0x5a0 [ 163.280359][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 163.286244][ T107] ? do_task_dead+0xd0/0xd0 [ 163.290745][ T107] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 163.296630][ T107] ? __kthread_parkme+0x162/0x1c0 [ 163.301656][ T107] kthread+0x29d/0x330 [ 163.305719][ T107] ? txFreelock+0x5a0/0x5a0 [ 163.310211][ T107] ? kthread_blkcg+0xd0/0xd0 [ 163.314789][ T107] ret_from_fork+0x1f/0x30 [ 163.319208][ T107] [ 163.324460][ T107] Disabling lock debugging due to kernel taint [ 163.330838][ T107] page:ffffea0001fd6980 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x7f5a6 [ 163.342638][ T107] flags: 0xfff08000002047(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 163.354903][ T107] raw: 00fff08000002047 dead000000000100 dead000000000122 0000000000000000 [ 163.364289][ T107] raw: 000000000000001c ffff88801be476c8 00000000ffffffff 0000000000000000 [ 163.372994][ T107] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 163.383387][ T107] page_owner tracks the page as allocated [ 163.389136][ T107] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 6528, tgid 6527 (syz.1.822), ts 162335413173, free_ts 157792456358 [ 163.407325][ T107] post_alloc_hook+0x173/0x1a0 [ 163.412230][ T107] get_page_from_freelist+0x1a1e/0x1ab0 [ 163.417815][ T107] __alloc_pages+0x1ec/0x4f0 [ 163.422470][ T107] folio_alloc+0x1c/0x60 [ 163.426726][ T107] filemap_alloc_folio+0xdb/0x480 [ 163.431976][ T107] do_read_cache_folio+0x1bb/0x760 [ 163.437091][ T107] do_read_cache_page+0x32/0x220 [ 163.442112][ T107] __get_metapage+0x316/0xfa0 [ 163.446795][ T107] diRead+0x6f7/0xbb0 [ 163.450783][ T107] jfs_iget+0x89/0x3f0 [ 163.454881][ T107] jfs_fill_super+0x70e/0xad0 [ 163.459568][ T107] mount_bdev+0x287/0x3c0 [ 163.463959][ T107] legacy_get_tree+0xe6/0x180 [ 163.469347][ T107] vfs_get_tree+0x88/0x270 [ 163.473820][ T107] do_new_mount+0x24a/0xa40 [ 163.478331][ T107] __se_sys_mount+0x2e3/0x3d0 [ 163.483057][ T107] page last free stack trace: [ 163.487736][ T107] free_unref_page_prepare+0x8b4/0x9a0 [ 163.493235][ T107] free_unref_page+0x2e/0x3f0 [ 163.497925][ T107] __vunmap+0x856/0xa00 [ 163.502150][ T107] snd_pcm_lib_free_pages+0x1e4/0x2a0 [ 163.507542][ T107] snd_pcm_release_substream+0x29e/0x460 [ 163.513215][ T107] snd_pcm_oss_release+0x180/0x240 [ 163.518343][ T107] __fput+0x22c/0x920 [ 163.522429][ T107] task_work_run+0x1d0/0x260 [ 163.527035][ T107] exit_to_user_mode_loop+0xe6/0x110 [ 163.532368][ T107] exit_to_user_mode_prepare+0xee/0x180 [ 163.537933][ T107] syscall_exit_to_user_mode+0x16/0x40 [ 163.543589][ T107] do_syscall_64+0x58/0xa0 [ 163.548011][ T107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.554195][ T107] ------------[ cut here ]------------ [ 163.559655][ T107] kernel BUG at include/linux/mm.h:1146! [ 163.565373][ T107] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 163.571451][ T107] CPU: 0 PID: 107 Comm: jfsCommit Tainted: G B syzkaller #0 [ 163.580118][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.590158][ T107] RIP: 0010:put_metapage+0x24f/0x340 [ 163.595443][ T107] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 1b b7 e0 fe e9 25 ff ff ff e8 e1 aa 8f fe 48 8b 3c 24 48 c7 c6 c0 3a c6 8a e8 41 ca ca fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 9a ae 8f [ 163.615045][ T107] RSP: 0018:ffffc90002d27ce0 EFLAGS: 00010246 [ 163.621107][ T107] RAX: c284cb5246bd1400 RBX: ffff88801be476c8 RCX: c284cb5246bd1400 [ 163.629077][ T107] RDX: 0000000000000000 RSI: ffffffff8adf1b80 RDI: ffffffff8adf1b40 [ 163.637039][ T107] RBP: 000000000000007f R08: ffffffff8e1ffbef R09: 1ffffffff1c3ff7d [ 163.645004][ T107] R10: dffffc0000000000 R11: fffffbfff1c3ff7e R12: ffff88801be476f0 [ 163.652962][ T107] R13: ffffea0001fd69b4 R14: 1ffff110037c8ede R15: 1ffff110037c8eeb [ 163.660923][ T107] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 163.669838][ T107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.676410][ T107] CR2: 0000555584c5ba38 CR3: 000000002dbde000 CR4: 00000000003506f0 [ 163.684460][ T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 163.692421][ T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 163.700376][ T107] Call Trace: [ 163.703647][ T107] [ 163.706567][ T107] txUnlock+0x427/0xcb0 [ 163.710716][ T107] jfs_lazycommit+0x56a/0xa70 [ 163.715381][ T107] ? txFreelock+0x5a0/0x5a0 [ 163.719875][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 163.725757][ T107] ? do_task_dead+0xd0/0xd0 [ 163.730252][ T107] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 163.736130][ T107] ? __kthread_parkme+0x162/0x1c0 [ 163.741146][ T107] kthread+0x29d/0x330 [ 163.745198][ T107] ? txFreelock+0x5a0/0x5a0 [ 163.749687][ T107] ? kthread_blkcg+0xd0/0xd0 [ 163.754259][ T107] ret_from_fork+0x1f/0x30 [ 163.758670][ T107] [ 163.761673][ T107] Modules linked in: [ 163.769071][ T107] ---[ end trace 0000000000000000 ]--- [ 163.775184][ T107] RIP: 0010:put_metapage+0x24f/0x340 [ 163.780544][ T107] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 1b b7 e0 fe e9 25 ff ff ff e8 e1 aa 8f fe 48 8b 3c 24 48 c7 c6 c0 3a c6 8a e8 41 ca ca fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 9a ae 8f [ 163.800374][ T107] RSP: 0018:ffffc90002d27ce0 EFLAGS: 00010246 [ 163.806482][ T107] RAX: c284cb5246bd1400 RBX: ffff88801be476c8 RCX: c284cb5246bd1400 [ 163.814475][ T107] RDX: 0000000000000000 RSI: ffffffff8adf1b80 RDI: ffffffff8adf1b40 [ 163.822475][ T107] RBP: 000000000000007f R08: ffffffff8e1ffbef R09: 1ffffffff1c3ff7d [ 163.830469][ T107] R10: dffffc0000000000 R11: fffffbfff1c3ff7e R12: ffff88801be476f0 [ 163.838589][ T107] R13: ffffea0001fd69b4 R14: 1ffff110037c8ede R15: 1ffff110037c8eeb [ 163.846586][ T107] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 163.855535][ T107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.862153][ T107] CR2: 00007fe4735ea2f8 CR3: 000000005ba20000 CR4: 00000000003506e0 [ 163.870135][ T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 163.878453][ T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 163.886478][ T107] Kernel panic - not syncing: Fatal exception [ 163.892832][ T107] Kernel Offset: disabled [ 163.897141][ T107] Rebooting in 86400 seconds..