last executing test programs: 4.7799264s ago: executing program 4 (id=781): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x5586, &(0x7f00000079c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x8004587d, &(0x7f0000000540)={@desc={0x1, 0x0, @desc2}}) 3.907920003s ago: executing program 1 (id=790): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=ANY=[@ANYBLOB="5002000010000108fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="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"], 0x250}}, 0x0) 3.595914839s ago: executing program 1 (id=793): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 3.406377035s ago: executing program 1 (id=794): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)='S', 0x1}], 0x1}}], 0x1, 0x20000001) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, &(0x7f00000001c0)=""/51, 0x33, &(0x7f0000000340)={&(0x7f0000000280)={'crc32\x00'}, &(0x7f0000000780)="6b10b7101b", 0x5}) 3.281887705s ago: executing program 1 (id=796): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000680)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file1\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 3.21809585s ago: executing program 0 (id=798): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3}) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x4004, @fd_index, 0x0, 0x0}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 3.087977082s ago: executing program 0 (id=799): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f00000005c0), 0x4, 0x4f3, &(0x7f00000012c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000e80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000001c0)='./file0\x00') 2.978985511s ago: executing program 4 (id=801): r0 = timerfd_create(0x0, 0x80800) clock_gettime(0x0, &(0x7f0000000040)) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000020c0)=""/4106, 0x8}], 0x8) 2.521385749s ago: executing program 2 (id=803): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) creat(&(0x7f0000000500)='./file0\x00', 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000700), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.366649392s ago: executing program 0 (id=805): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000040)={[{@nodatacow}, {@flushoncommit}]}, 0x11, 0x5109, &(0x7f000000f400)="$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") capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x165800, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x8, 0x4}) 2.287253799s ago: executing program 3 (id=806): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.879090553s ago: executing program 4 (id=807): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)='S', 0x1}], 0x1}}], 0x1, 0x20000001) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, &(0x7f00000001c0)=""/51, 0x33, &(0x7f0000000340)={&(0x7f0000000280)={'crc32\x00'}, &(0x7f0000000780)="6b10b7101b", 0x5}) 1.878338293s ago: executing program 3 (id=817): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x3, @local, 'macvtap0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r0, 0x0, 0x0) 1.55451404s ago: executing program 2 (id=808): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='b 0:', @ANYRESDEC], 0x10) 1.55411995s ago: executing program 4 (id=809): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0xb}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000003000000040000000000000a000000000f00000001000006040000000c000000090000000d00000002000005"], 0x0, 0x6b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 1.513748783s ago: executing program 1 (id=810): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x89745301ffea7a81}, 0x14}}, 0x0) 1.31453075s ago: executing program 2 (id=811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000001040101000009000000000000efff070500010003"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 888.926136ms ago: executing program 4 (id=812): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f00000001c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00') 885.139946ms ago: executing program 2 (id=823): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f00000004c0)={'full', 0x5f}, 0x2f) 884.537356ms ago: executing program 3 (id=813): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7aa, 0x0) 763.271506ms ago: executing program 3 (id=814): r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x4, 0x0, 0x0, 0x0, 0x61, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x80, 0x7800}}) 720.25662ms ago: executing program 0 (id=815): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0xa, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c00068008"], 0x34}}, 0x0) 719.65995ms ago: executing program 2 (id=816): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x180, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 531.965565ms ago: executing program 4 (id=818): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x80, 0x8]}}]}}]}, 0x8c}}, 0x8004) 520.232796ms ago: executing program 1 (id=829): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x5586, &(0x7f00000079c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x8004587d, &(0x7f0000000540)={@desc={0x1, 0x0, @desc2}}) 417.330945ms ago: executing program 2 (id=819): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000000180)={[{@prjquota}, {}, {@bsdgroups}, {@nouuid}, {@gqnoenforce}, {@nogrpid}, {@prjquota}, {@qnoenforce}, {@quota}, {@usrquota}]}, 0xff, 0x975f, &(0x7f0000009780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="100000000200000004"], 0x521142) 233.94021ms ago: executing program 3 (id=820): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r0, 0x1000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r0}, 0x4) 200.454843ms ago: executing program 0 (id=821): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 28.349458ms ago: executing program 3 (id=822): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x27}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 0 (id=824): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, 0x0, 0x0) kernel console output (not intermixed with test programs): network, BSSID 50:50:50:50:50:50 [ 69.585185][ T3648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.586041][ T3721] loop2: detected capacity change from 0 to 24 [ 69.596654][ T3648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.604877][ T3721] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 69.622875][ T3648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.634198][ T3648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.639144][ T3721] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 69.652474][ T3648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.666367][ T3648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.720855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.728895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.746591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.757002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.807725][ T3648] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.817142][ T3648] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.826786][ T3648] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.836555][ T3648] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.910804][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.932989][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.984553][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.097935][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.145724][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.186100][ T3698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.214304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.216865][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.238293][ T3698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.239253][ T3655] Bluetooth: hci1: command tx timeout [ 70.246663][ T3649] Bluetooth: hci3: command tx timeout [ 70.275345][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.293342][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.300957][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.312599][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.315355][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.327853][ T3649] Bluetooth: hci4: command tx timeout [ 70.333329][ T3649] Bluetooth: hci2: command tx timeout [ 70.338788][ T3649] Bluetooth: hci0: command tx timeout [ 70.411249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.642731][ T3727] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.813509][ T3746] loop3: detected capacity change from 0 to 1024 [ 70.899065][ T3727] usb 3-1: Using ep0 maxpacket: 16 [ 70.970735][ T26] audit: type=1800 audit(1729517783.865:2): pid=3746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11" name="bus" dev="loop3" ino=26 res=0 errno=0 [ 71.021647][ T3727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 71.073139][ T3727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 71.101543][ T3727] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 71.116218][ T3727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.140745][ T3727] usb 3-1: config 0 descriptor?? [ 71.188765][ T11] hfsplus: b-tree write err: -5, ino 4 [ 71.386323][ T3761] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17'. [ 71.394794][ T3733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.426827][ T3733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.443077][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.449789][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.672463][ T3744] loop1: detected capacity change from 0 to 40427 [ 71.688035][ T3727] hid (null): bogus close delimiter [ 71.697426][ T3727] hid (null): invalid report_size 59136 [ 71.714986][ T3727] hid (null): report_id 48035 is invalid [ 71.736968][ T3744] F2FS-fs (loop1): invalid crc value [ 71.776171][ T3727] hid-generic 0003:0158:0100.0001: unknown main item tag 0x0 [ 71.790419][ T3744] F2FS-fs (loop1): Found nat_bits in checkpoint [ 71.806750][ T3727] hid-generic 0003:0158:0100.0001: unknown main item tag 0x0 [ 71.845388][ T3727] hid-generic 0003:0158:0100.0001: bogus close delimiter [ 71.870375][ T3727] hid-generic 0003:0158:0100.0001: item 0 0 2 10 parsing failed [ 71.910524][ T3727] hid-generic: probe of 0003:0158:0100.0001 failed with error -22 [ 71.954300][ T26] audit: type=1326 audit(1729517784.845:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3775 comm="syz.0.24" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94fdf7dff9 code=0x0 [ 71.957893][ T3727] usb 3-1: USB disconnect, device number 2 [ 72.007600][ T3744] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 72.217310][ T3784] sctp: [Deprecated]: syz.3.28 (pid 3784) Use of int in maxseg socket option. [ 72.217310][ T3784] Use struct sctp_assoc_value instead [ 72.281557][ T3648] syz-executor: attempt to access beyond end of device [ 72.281557][ T3648] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 73.130759][ T3808] loop3: detected capacity change from 0 to 128 [ 73.144152][ T3809] loop4: detected capacity change from 0 to 1024 [ 73.200314][ T3808] ======================================================= [ 73.200314][ T3808] WARNING: The mand mount option has been deprecated and [ 73.200314][ T3808] and is ignored by this kernel. Remove the mand [ 73.200314][ T3808] option from the mount to silence this warning. [ 73.200314][ T3808] ======================================================= [ 73.326444][ T3698] hfsplus: b-tree write err: -5, ino 4 [ 73.381346][ T3808] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 73.428087][ T3808] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.521160][ T3816] loop4: detected capacity change from 0 to 512 [ 73.585348][ T3820] loop2: detected capacity change from 0 to 512 [ 73.589169][ T3816] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.648077][ T3820] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.708209][ T3816] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 73.784682][ T3820] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.43: inode #1: comm syz.2.43: iget: illegal inode # [ 73.806021][ T3816] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.836016][ T3820] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.43: error while reading EA inode 1 err=-117 [ 73.910241][ T3820] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 73.917168][ T3826] Illegal XDP return value 4294967274 on prog (id 8) dev N/A, expect packet loss! [ 73.955540][ T3816] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 73.981698][ T3820] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.43: inode #1: comm syz.2.43: iget: illegal inode # [ 74.026263][ T3820] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.43: error while reading EA inode 1 err=-117 [ 74.103105][ T3820] EXT4-fs (loop2): 1 orphan inode deleted [ 74.108905][ T3820] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 74.204791][ T3641] EXT4-fs (loop4): unmounting filesystem. [ 74.309772][ T3832] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.43: deleted inode referenced: 15 [ 74.414242][ T3836] netlink: 'syz.4.47': attribute type 1 has an invalid length. [ 74.476111][ T3818] loop1: detected capacity change from 0 to 32768 [ 74.550679][ T3845] netlink: 'syz.3.51': attribute type 2 has an invalid length. [ 74.600143][ T3818] XFS (loop1): Mounting V5 Filesystem [ 74.742062][ T3818] XFS (loop1): Ending clean mount [ 74.849231][ T3642] EXT4-fs (loop2): unmounting filesystem. [ 74.950578][ T3648] XFS (loop1): Unmounting Filesystem [ 75.006059][ T3860] loop3: detected capacity change from 0 to 256 [ 75.047711][ T3860] exfat: Bad value for 'time_offset' [ 75.853720][ T3901] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.019286][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.164027][ T3913] loop2: detected capacity change from 0 to 64 [ 76.229292][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.269142][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 76.334370][ T3917] loop0: detected capacity change from 0 to 256 [ 76.354078][ T3917] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 76.479163][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 76.599205][ T7] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 76.599375][ T22] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=3a.75 [ 76.607588][ T7] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 76.607616][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 76.607673][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 76.659047][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.674436][ T22] usb 4-1: Product: syz [ 76.689064][ T22] usb 4-1: Manufacturer: syz [ 76.693713][ T22] usb 4-1: SerialNumber: syz [ 76.722566][ T22] usb 4-1: config 0 descriptor?? [ 76.763044][ T22] usb_ehset_test: probe of 4-1:0.0 failed with error -32 [ 76.788900][ T7] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 76.819051][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 76.859010][ T7] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 76.868097][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.901654][ T7] usb 2-1: config 0 descriptor?? [ 76.944892][ T3909] loop4: detected capacity change from 0 to 32768 [ 76.988623][ T22] usb 4-1: USB disconnect, device number 2 [ 76.995946][ T3909] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 77.018438][ T3909] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 77.063221][ T3909] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 77.090276][ T3685] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 77.108079][ T3685] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 77.165803][ T7] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 77.253005][ T3685] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 144ms [ 77.271930][ T3685] gfs2: fsid=syz:syz.0: jid=0: Done [ 77.278445][ T3909] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 77.296459][ T3925] loop0: detected capacity change from 0 to 32768 [ 77.368149][ T3923] loop2: detected capacity change from 0 to 32768 [ 77.393677][ T3925] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.84 (3925) [ 77.442924][ T7] usb 2-1: USB disconnect, device number 2 [ 77.455056][ T7] usblp0: removed [ 77.483541][ T3925] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 77.504107][ T3923] XFS (loop2): Mounting V5 Filesystem [ 77.538108][ T3925] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 77.548233][ T3925] BTRFS info (device loop0): using free space tree [ 77.652293][ T3923] XFS (loop2): Ending clean mount [ 77.801767][ T3642] XFS (loop2): Unmounting Filesystem [ 77.981074][ T3960] loop4: detected capacity change from 0 to 512 [ 78.049376][ T3925] BTRFS info (device loop0): enabling ssd optimizations [ 78.059970][ T3960] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 78.079189][ T3960] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.132052][ T3960] EXT4-fs (loop4): shut down requested (1) [ 78.268013][ T3969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 78.287556][ T3641] EXT4-fs (loop4): unmounting filesystem. [ 78.605244][ T3979] netlink: 16 bytes leftover after parsing attributes in process `syz.3.95'. [ 78.706012][ T3979] netlink: 92 bytes leftover after parsing attributes in process `syz.3.95'. [ 78.714118][ T3640] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 79.349386][ T4004] Bluetooth: MGMT ver 1.22 [ 79.393154][ T4008] process 'syz.3.103' launched './file1' with NULL argv: empty string added [ 79.802661][ T3972] loop4: detected capacity change from 0 to 40427 [ 79.831241][ T3972] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 79.846785][ T3972] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 79.925907][ T3972] F2FS-fs (loop4): Found nat_bits in checkpoint [ 79.961223][ T4020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.108'. [ 79.980763][ T4020] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 80.013547][ T3972] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 80.026617][ T3972] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 80.149827][ T3972] syz.4.93: attempt to access beyond end of device [ 80.149827][ T3972] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 80.291461][ T3641] syz-executor: attempt to access beyond end of device [ 80.291461][ T3641] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 80.542058][ T4010] loop2: detected capacity change from 0 to 32768 [ 80.669082][ T3685] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.205887][ T3685] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 81.218186][ T3685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.246983][ T3685] usb 2-1: Product: syz [ 81.254836][ T3685] usb 2-1: Manufacturer: syz [ 81.272405][ T3685] usb 2-1: SerialNumber: syz [ 81.283709][ T3685] usb 2-1: config 0 descriptor?? [ 81.343975][ T3685] ch341 2-1:0.0: ch341-uart converter detected [ 81.397891][ T4057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.124'. [ 81.574913][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.658473][ T4066] netlink: 'syz.4.128': attribute type 21 has an invalid length. [ 81.666498][ T4066] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.128'. [ 81.690006][ T27] cfg80211: failed to load regulatory.db [ 81.830255][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 81.960072][ T14] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 81.968294][ T14] usb 1-1: config 0 has no interface number 0 [ 81.992363][ T14] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 82.051423][ T14] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 82.077021][ T14] usb 1-1: config 0 interface 126 has no altsetting 0 [ 82.179532][ T3685] usb 2-1: failed to send control message: -71 [ 82.185769][ T3685] ch341-uart: probe of ttyUSB0 failed with error -71 [ 82.262628][ T3685] usb 2-1: USB disconnect, device number 3 [ 82.279267][ T14] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 82.288401][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.308729][ T3685] ch341 2-1:0.0: device disconnected [ 82.322073][ T14] usb 1-1: Product: syz [ 82.331965][ T14] usb 1-1: Manufacturer: syz [ 82.338028][ T14] usb 1-1: SerialNumber: syz [ 82.359623][ T14] usb 1-1: config 0 descriptor?? [ 82.378199][ T4078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.133'. [ 82.397626][ T4055] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 82.408175][ T4055] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 82.868295][ T4088] loop3: detected capacity change from 0 to 1024 [ 82.877121][ T14] ir_usb 1-1:0.126: IR Dongle converter detected [ 83.079167][ T14] usb 1-1: IRDA class descriptor not found, device not bound [ 83.364753][ T27] usb 1-1: USB disconnect, device number 2 [ 83.856005][ T4084] loop4: detected capacity change from 0 to 40427 [ 83.922332][ T4084] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 83.984555][ T4084] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 84.063157][ T4084] F2FS-fs (loop4): invalid crc value [ 84.106865][ T4084] F2FS-fs (loop4): Found nat_bits in checkpoint [ 84.161738][ T26] audit: type=1326 audit(1729517797.055:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4109 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fdf7dff9 code=0x7ffc0000 [ 84.208984][ C0] sched: RT throttling activated [ 84.214441][ T26] audit: type=1326 audit(1729517797.095:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4109 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f94fdf7dff9 code=0x7ffc0000 [ 84.288121][ T4110] loop0: detected capacity change from 0 to 1024 [ 84.307942][ T26] audit: type=1326 audit(1729517797.095:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4109 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fdf7dff9 code=0x7ffc0000 [ 84.355831][ T4097] loop1: detected capacity change from 0 to 131072 [ 84.367998][ T26] audit: type=1326 audit(1729517797.095:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4109 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fdf7dff9 code=0x7ffc0000 [ 84.398258][ T26] audit: type=1326 audit(1729517797.095:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4109 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f94fdf7dff9 code=0x7ffc0000 [ 84.426029][ T26] audit: type=1326 audit(1729517797.095:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4109 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fdf7dff9 code=0x7ffc0000 [ 84.426253][ T4084] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 84.482106][ T4084] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 84.499378][ T26] audit: type=1326 audit(1729517797.095:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4109 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fdf7dff9 code=0x7ffc0000 [ 84.510180][ T4110] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 84.527988][ T26] audit: type=1326 audit(1729517797.095:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4109 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f94fdf7dff9 code=0x7ffc0000 [ 84.552489][ T26] audit: type=1326 audit(1729517797.095:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4109 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f94fdf7e033 code=0x7ffc0000 [ 84.566437][ T4097] F2FS-fs (loop1): Found nat_bits in checkpoint [ 84.576954][ T26] audit: type=1326 audit(1729517797.115:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4109 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f94fdf7cadf code=0x7ffc0000 [ 84.629345][ T4097] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 84.659668][ T4110] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.836353][ T3641] syz-executor: attempt to access beyond end of device [ 84.836353][ T3641] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 84.869382][ T3640] EXT4-fs (loop0): unmounting filesystem. [ 85.187582][ T4128] ptrace attach of "./syz-executor exec"[3639] was attempted by "./syz-executor exec"[4128] [ 85.765646][ T4135] loop3: detected capacity change from 0 to 8192 [ 85.783787][ T4122] loop2: detected capacity change from 0 to 32768 [ 85.804973][ T4135] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 85.821490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 85.830346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 85.843983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 85.853961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 85.862827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #12!!! [ 85.872833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 85.901661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 85.926069][ T4135] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 85.929534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.945680][ T4135] REISERFS (device loop3): using ordered data mode [ 85.952328][ T4135] reiserfs: using flush barriers [ 85.988294][ T4135] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.014016][ T4122] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 86.075768][ T4133] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 86.100584][ T4133] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 86.129563][ T4133] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 86.150919][ T4135] REISERFS (device loop3): checking transaction log (loop3) [ 86.164041][ T4133] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 86.182159][ T4133] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 86.205350][ T4133] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 86.230915][ T4133] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.266960][ T4133] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 86.282014][ T3642] ocfs2: Unmounting device (7,2) on (node local) [ 86.308761][ T4133] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 86.357740][ T4133] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 86.385007][ T4133] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 86.442574][ T4133] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 86.464318][ T4135] REISERFS (device loop3): Using tea hash to sort names [ 86.473191][ T4133] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 86.482607][ T4135] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 86.514724][ T4133] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 86.544815][ T4133] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 86.552640][ T4135] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 86.587016][ T4144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.680716][ T4135] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 86.760494][ T4135] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 86.798672][ T4135] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 86.847769][ T4151] loop1: detected capacity change from 0 to 64 [ 86.856586][ T4137] loop4: detected capacity change from 0 to 32768 [ 87.439295][ T3655] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.450073][ T4163] loop1: detected capacity change from 0 to 512 [ 87.471277][ T4163] ext4: Unknown parameter 'nouser_xattr' [ 87.502547][ T4159] loop3: detected capacity change from 0 to 4096 [ 87.513934][ T3871] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 87.550314][ T4159] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 87.797006][ T4173] tap0: tun_chr_ioctl cmd 2147767520 [ 88.019843][ T4181] loop0: detected capacity change from 0 to 128 [ 88.131953][ T4181] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 88.192583][ T4181] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.239399][ T3655] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.239408][ T3649] Bluetooth: hci3: command 0x0c1a tx timeout [ 88.346364][ T4165] loop4: detected capacity change from 0 to 40427 [ 88.375740][ T4165] F2FS-fs (loop4): Found nat_bits in checkpoint [ 88.407227][ T3649] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.477569][ T3640] EXT4-fs (loop0): unmounting filesystem. [ 88.483429][ T3649] Bluetooth: hci4: command 0x0c1a tx timeout [ 88.491249][ T4165] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 89.275883][ T4212] loop0: detected capacity change from 0 to 512 [ 89.344682][ T4212] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.360643][ T4216] loop4: detected capacity change from 0 to 64 [ 89.503741][ T4212] EXT4-fs (loop0): 1 orphan inode deleted [ 89.520781][ T4187] loop3: detected capacity change from 0 to 32768 [ 89.524818][ T3653] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.535805][ T4187] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.172 (4187) [ 89.539321][ T4212] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 89.571349][ T4187] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 89.615617][ T4187] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 89.621369][ T3698] __quota_error: 14 callbacks suppressed [ 89.621391][ T3698] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 89.626812][ T4212] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.651940][ T3698] EXT4-fs error (device loop0): ext4_release_dquot:6824: comm kworker/u4:6: Failed to release dquot type 1 [ 89.664144][ T4187] BTRFS info (device loop3): enabling disk space caching [ 89.685189][ T4187] BTRFS info (device loop3): force clearing of disk cache [ 89.710864][ T4187] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 89.789135][ T4187] BTRFS info (device loop3): use zstd compression, level 3 [ 89.796498][ T4187] BTRFS info (device loop3): disk space caching is enabled [ 89.815930][ T4212] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.182: corrupted xattr block 19 [ 89.862977][ T4212] EXT4-fs error (device loop0): ext4_get_inode_usage:852: inode #15: comm syz.0.182: corrupted xattr block 19 [ 89.983894][ T3640] EXT4-fs (loop0): unmounting filesystem. [ 90.008700][ T9] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 90.051460][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6824: comm kworker/u4:0: Failed to release dquot type 1 [ 90.115899][ T4220] loop1: detected capacity change from 0 to 32768 [ 90.232349][ T4187] BTRFS info (device loop3): enabling ssd optimizations [ 90.272211][ T4187] BTRFS info (device loop3): rebuilding free space tree [ 90.302328][ T4220] XFS (loop1): Mounting V5 Filesystem [ 90.319011][ T3653] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.329243][ T3653] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.355698][ T4249] loop0: detected capacity change from 0 to 2048 [ 90.356823][ T4187] BTRFS info (device loop3): disabling free space tree [ 90.423172][ T4220] XFS (loop1): Ending clean mount [ 90.430989][ T4187] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 90.442197][ T4187] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 90.463194][ T4249] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.483073][ T3653] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.559050][ T3653] Bluetooth: hci4: command 0x0c1a tx timeout [ 90.800493][ T3639] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 91.134438][ T3648] XFS (loop1): Unmounting Filesystem [ 91.379181][ T4265] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.597413][ T4255] loop2: detected capacity change from 0 to 32768 [ 91.637443][ T4255] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.189 (4255) [ 91.687200][ T4271] loop0: detected capacity change from 0 to 4096 [ 91.729275][ T4255] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.735246][ T4271] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 91.774287][ T4255] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 91.789340][ T4265] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 91.808704][ T4265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.817125][ T4255] BTRFS info (device loop2): using free space tree [ 91.874949][ T4276] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 91.895340][ T4265] usb 4-1: config 0 descriptor?? [ 91.951014][ T4265] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 91.984228][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.993601][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.135106][ T4255] BTRFS info (device loop2): enabling ssd optimizations [ 92.389250][ T4265] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 92.401110][ T3642] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.408255][ T4299] loop4: detected capacity change from 0 to 4096 [ 92.418028][ T3645] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.446612][ T4265] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 92.480618][ T4299] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 92.500292][ T4265] usb 4-1: media controller created [ 92.617185][ T4265] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.693860][ T4265] gp8psk_fe: Frontend attached [ 92.705386][ T4265] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 92.716143][ T4265] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 92.805777][ T4299] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 92.839396][ T4265] gp8psk: usb in 138 operation failed. [ 92.849294][ T4265] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 92.876996][ T4299] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 92.899359][ T4265] gp8psk: found Genpix USB device pID = 203 (hex) [ 92.948886][ T4265] usb 4-1: USB disconnect, device number 3 [ 93.039500][ T3645] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 93.059092][ T3645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.067150][ T3645] usb 2-1: Product: syz [ 93.112641][ T3645] usb 2-1: Manufacturer: syz [ 93.117310][ T3645] usb 2-1: SerialNumber: syz [ 93.134481][ T4265] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 93.190979][ T3645] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 93.288187][ T4320] capability: warning: `syz.2.202' uses 32-bit capabilities (legacy support in use) [ 93.392123][ T4322] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.401483][ T4322] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.410324][ T4322] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.419155][ T4322] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.500006][ T4322] device vxlan0 entered promiscuous mode [ 93.532436][ T4322] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.541629][ T4322] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.550767][ T4322] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.559886][ T4322] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.870186][ T3686] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 94.052294][ T4330] loop4: detected capacity change from 0 to 128 [ 94.215133][ T3641] sysv_free_block: flc_count > flc_size [ 94.221852][ T3641] sysv_free_block: flc_count > flc_size [ 94.227431][ T3641] sysv_free_block: flc_count > flc_size [ 94.238418][ T3641] sysv_free_block: flc_count > flc_size [ 94.247529][ T4334] loop2: detected capacity change from 0 to 128 [ 94.256330][ T3641] sysv_free_block: flc_count > flc_size [ 94.274878][ T3641] sysv_free_block: flc_count > flc_size [ 94.281395][ T3641] sysv_free_block: flc_count > flc_size [ 94.286985][ T3641] sysv_free_block: flc_count > flc_size [ 94.293438][ T3641] sysv_free_block: flc_count > flc_size [ 94.316964][ T3641] sysv_free_block: flc_count > flc_size [ 94.324325][ T4297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.337439][ T3641] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 94.346068][ T4297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.376310][ T4297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.408056][ T4297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.442606][ T3645] usb 2-1: USB disconnect, device number 4 [ 94.674751][ T4340] loop4: detected capacity change from 0 to 4096 [ 94.701823][ T4340] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 94.959222][ T3686] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 95.003431][ T3686] ath9k_htc: Failed to initialize the device [ 95.005443][ T4332] loop3: detected capacity change from 0 to 32768 [ 95.031595][ T3645] usb 2-1: ath9k_htc: USB layer deinitialized [ 95.040562][ T4332] XFS: attr2 mount option is deprecated. [ 95.144092][ T4355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.217'. [ 95.166107][ T4332] XFS (loop3): Mounting V5 Filesystem [ 95.354404][ T4332] XFS (loop3): Ending clean mount [ 95.409338][ T4332] XFS (loop3): Quotacheck needed: Please wait. [ 95.493826][ T4332] XFS (loop3): Quotacheck: Done. [ 95.745711][ T3639] XFS (loop3): Unmounting Filesystem [ 95.899750][ T4374] loop4: detected capacity change from 0 to 1024 [ 96.311526][ T4352] loop1: detected capacity change from 0 to 32768 [ 96.791204][ T4386] loop4: detected capacity change from 0 to 4096 [ 96.899269][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.944613][ T4376] loop2: detected capacity change from 0 to 32768 [ 97.075653][ T4376] XFS (loop2): Mounting V5 Filesystem [ 97.131929][ T4376] XFS (loop2): Starting recovery (logdev: internal) [ 97.172548][ T4376] XFS (loop2): Ending recovery (logdev: internal) [ 97.249158][ T3686] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 97.271520][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.369141][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.378348][ T4308] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.397826][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 97.416441][ T7] usb 4-1: SerialNumber: syz [ 97.461004][ T3642] XFS (loop2): Unmounting Filesystem [ 97.499165][ T3686] usb 2-1: Using ep0 maxpacket: 8 [ 97.629060][ T4308] usb 5-1: Using ep0 maxpacket: 8 [ 97.649366][ T3686] usb 2-1: config 0 has no interfaces? [ 97.736362][ T4414] loop2: detected capacity change from 0 to 1024 [ 97.749364][ T4308] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 97.772269][ T4308] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 97.787706][ T9] hfsplus: b-tree write err: -5, ino 4 [ 97.815732][ T4308] usb 5-1: config 135 has no interface number 0 [ 97.830446][ T3686] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.834266][ T4308] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.850136][ T3686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.871456][ T3686] usb 2-1: Product: syz [ 97.879140][ T3686] usb 2-1: Manufacturer: syz [ 97.889349][ T3686] usb 2-1: SerialNumber: syz [ 97.897084][ T4418] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.906476][ T4418] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.915325][ T4418] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.924186][ T4418] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.933275][ T4418] device vxlan0 entered promiscuous mode [ 97.944375][ T4418] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.953563][ T4418] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.962535][ T3686] usb 2-1: config 0 descriptor?? [ 97.967557][ T4418] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.976883][ T4418] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.030519][ T4308] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 98.039960][ T4308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.047986][ T4308] usb 5-1: Product: syz [ 98.052797][ T4308] usb 5-1: Manufacturer: syz [ 98.057451][ T4308] usb 5-1: SerialNumber: syz [ 98.102036][ T4308] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 98.108459][ T4308] usb 5-1: No valid video chain found. [ 98.209994][ T7] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 98.267126][ T4391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.283416][ T4391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.314445][ T4265] usb 2-1: USB disconnect, device number 5 [ 98.341591][ T7] usb 5-1: USB disconnect, device number 2 [ 98.415933][ T4430] loop0: detected capacity change from 0 to 128 [ 98.431355][ T4308] usb 4-1: USB disconnect, device number 4 [ 98.548759][ T4432] mmap: syz.2.248 (4432) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.864658][ T4434] loop0: detected capacity change from 0 to 32768 [ 98.938711][ T4434] XFS (loop0): Mounting V5 Filesystem [ 98.989093][ T4308] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.995545][ T4434] XFS (loop0): Starting recovery (logdev: internal) [ 99.048502][ T4434] XFS (loop0): Ending recovery (logdev: internal) [ 99.110748][ T4454] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.120613][ T4454] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.129826][ T4454] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.138556][ T4454] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.149805][ T4454] device vxlan0 entered promiscuous mode [ 99.161183][ T4454] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.170307][ T4454] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.179332][ T4454] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.188223][ T4454] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.298056][ T3640] XFS (loop0): Unmounting Filesystem [ 99.359397][ T4308] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 99.378785][ T4308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.414292][ T4308] usb 3-1: config 0 descriptor?? [ 99.437122][ T4459] loop3: detected capacity change from 0 to 512 [ 99.466576][ T4308] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 99.512562][ T4459] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.259: casefold flag without casefold feature [ 99.546239][ T4459] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.259: couldn't read orphan inode 15 (err -117) [ 99.596853][ T4459] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 99.658382][ T4459] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.711869][ T4459] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz.3.259: Directory hole found for htree leaf block 0 [ 99.826338][ T3639] EXT4-fs (loop3): unmounting filesystem. [ 99.899345][ T4308] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 99.934818][ T4308] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 99.943161][ T4462] loop4: detected capacity change from 0 to 32768 [ 99.969678][ T4308] usb 3-1: media controller created [ 100.036050][ T4472] capability: warning: `syz.3.262' uses deprecated v2 capabilities in a way that may be insecure [ 100.048317][ T4308] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.065795][ T4308] gp8psk_fe: Frontend attached [ 100.070880][ T4308] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 100.079203][ T4308] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 100.103753][ T4462] XFS (loop4): Mounting V5 Filesystem [ 100.169094][ T4308] gp8psk: usb in 138 operation failed. [ 100.174797][ T4308] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 100.195585][ T4308] gp8psk: found Genpix USB device pID = 203 (hex) [ 100.210373][ T4462] XFS (loop4): Ending clean mount [ 100.219785][ T4308] usb 3-1: USB disconnect, device number 3 [ 100.307345][ T4308] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 100.317698][ T4462] XFS (loop4): User initiated shutdown received. [ 100.336470][ T4462] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:496). Shutting down filesystem. [ 100.424112][ T4462] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 100.468719][ T4483] loop3: detected capacity change from 0 to 8192 [ 100.509229][ T4483] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 100.525218][ T4483] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 100.528111][ T3641] XFS (loop4): Unmounting Filesystem [ 100.535333][ T4483] REISERFS (device loop3): using ordered data mode [ 100.546859][ T4483] reiserfs: using flush barriers [ 100.573605][ T4483] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 100.593240][ T4483] REISERFS (device loop3): checking transaction log (loop3) [ 100.622375][ T4483] REISERFS (device loop3): Using r5 hash to sort names [ 100.657031][ T4483] reiserfs: enabling write barrier flush mode [ 100.696075][ T4483] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 100.718055][ T26] audit: type=1800 audit(1729517813.605:28): pid=4483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.264" name="bus" dev="loop3" ino=2 res=0 errno=0 [ 100.731365][ T4463] loop1: detected capacity change from 0 to 32768 [ 100.739109][ T4308] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.009028][ T4308] usb 1-1: Using ep0 maxpacket: 8 [ 101.100773][ T4493] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.270'. [ 101.129665][ T4308] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 101.143465][ T4308] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 101.183157][ T4308] usb 1-1: config 135 has no interface number 0 [ 101.209134][ T4308] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.300073][ T4499] netlink: 88 bytes leftover after parsing attributes in process `syz.2.271'. [ 101.349879][ T4499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 101.359998][ T4502] netlink: 36 bytes leftover after parsing attributes in process `syz.1.269'. [ 101.399249][ T4308] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 101.408344][ T4308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.417066][ T4308] usb 1-1: Product: syz [ 101.437221][ T4308] usb 1-1: Manufacturer: syz [ 101.441992][ T4308] usb 1-1: SerialNumber: syz [ 101.511356][ T4308] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 101.518179][ T4308] usb 1-1: No valid video chain found. [ 101.735154][ T4308] usb 1-1: USB disconnect, device number 3 [ 101.924076][ T4522] loop3: detected capacity change from 0 to 2048 [ 102.007067][ T4522] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 102.022863][ T4522] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.049004][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.091729][ T4508] loop2: detected capacity change from 0 to 32768 [ 102.195807][ T3639] EXT4-fs (loop3): unmounting filesystem. [ 102.205071][ T4508] XFS (loop2): Mounting V5 Filesystem [ 102.315064][ T4508] XFS (loop2): Ending clean mount [ 102.434425][ T7] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 102.459034][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.490648][ T7] usb 5-1: config 0 descriptor?? [ 102.530892][ T7] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 102.574372][ T4547] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.583396][ T4547] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.592245][ T4547] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.601323][ T4547] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.646374][ T4547] device vxlan0 entered promiscuous mode [ 102.656345][ T4547] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.665466][ T4547] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.674608][ T4547] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.683606][ T4547] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.766115][ T3642] XFS (loop2): Unmounting Filesystem [ 102.972538][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 103.019352][ T7] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 103.033881][ T7] usb 5-1: media controller created [ 103.093072][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.179200][ T7] gp8psk_fe: Frontend attached [ 103.194509][ T7] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 103.239405][ T7] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 103.382445][ T7] gp8psk: usb in 138 operation failed. [ 103.388018][ T7] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 103.433151][ T7] gp8psk: found Genpix USB device pID = 203 (hex) [ 103.476646][ T7] usb 5-1: USB disconnect, device number 3 [ 103.511727][ T4541] loop3: detected capacity change from 0 to 40427 [ 103.559036][ T4541] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 103.575038][ T4541] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 103.599796][ T4541] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x3ffff [ 103.618340][ T7] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 103.649833][ T4541] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 103.661629][ T4541] F2FS-fs (loop3): invalid crc value [ 103.705603][ T4561] netlink: 'syz.1.294': attribute type 25 has an invalid length. [ 103.715169][ T4541] F2FS-fs (loop3): Found nat_bits in checkpoint [ 103.727294][ T4561] netlink: 'syz.1.294': attribute type 8 has an invalid length. [ 103.899542][ T4541] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 103.912328][ T4541] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 103.954257][ T4541] syz.3.284: attempt to access beyond end of device [ 103.954257][ T4541] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 103.979026][ T3686] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.004730][ T4573] syz.3.284: attempt to access beyond end of device [ 104.004730][ T4573] loop3: rw=2049, sector=53256, nr_sectors = 8 limit=40427 [ 104.058849][ T4576] loop1: detected capacity change from 0 to 128 [ 104.097596][ T3639] syz-executor: attempt to access beyond end of device [ 104.097596][ T3639] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.131618][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.206457][ T4579] loop4: detected capacity change from 0 to 128 [ 104.232725][ T4579] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 104.252793][ T3686] usb 1-1: Using ep0 maxpacket: 8 [ 104.275122][ T4579] sysv_free_block: trying to free block not in datazone [ 104.314301][ T4579] sysv_count_free_blocks: free block count was -2041545929, correcting to 9 [ 104.369387][ T3686] usb 1-1: config 0 has no interfaces? [ 104.383199][ T4579] sysv_count_free_inodes: unable to read inode table [ 104.468181][ T3641] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 104.509255][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.534678][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.555130][ T7] usb 3-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 104.555825][ T3686] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.583669][ T3686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.613661][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.633888][ T3686] usb 1-1: Product: syz [ 104.638103][ T3686] usb 1-1: Manufacturer: syz [ 104.646754][ T7] usb 3-1: config 0 descriptor?? [ 104.666224][ T3686] usb 1-1: SerialNumber: syz [ 104.672174][ T4588] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 104.690520][ T3686] usb 1-1: config 0 descriptor?? [ 104.945587][ T4594] loop3: detected capacity change from 0 to 1024 [ 105.019258][ T4564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.064718][ T4564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.114226][ T56] hfsplus: b-tree write err: -5, ino 4 [ 105.143613][ T7] hid-generic 0003:05AC:4262.0002: unbalanced delimiter at end of report description [ 105.199698][ T7] hid-generic: probe of 0003:05AC:4262.0002 failed with error -22 [ 105.230620][ T4307] usb 1-1: USB disconnect, device number 4 [ 105.249531][ T4600] loop3: detected capacity change from 0 to 256 [ 105.394978][ T3687] usb 3-1: USB disconnect, device number 4 [ 105.525860][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 105.695180][ T4612] netlink: 830 bytes leftover after parsing attributes in process `syz.4.316'. [ 105.719221][ T3686] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.894658][ T7] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 105.907516][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.930858][ T7] usb 2-1: config 0 descriptor?? [ 105.979260][ T3686] usb 4-1: Using ep0 maxpacket: 16 [ 105.981924][ T7] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 106.112666][ T3686] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 106.128999][ T3686] usb 4-1: config 0 has no interface number 0 [ 106.155576][ T3686] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 106.180295][ T3686] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 106.329222][ T3686] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 106.353022][ T3686] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 106.371503][ T3686] usb 4-1: Product: syz [ 106.389790][ T3686] usb 4-1: SerialNumber: syz [ 106.419092][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.423266][ T3686] usb 4-1: config 0 descriptor?? [ 106.459587][ T7] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 106.490358][ T7] usb 2-1: media controller created [ 106.511294][ T3686] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 106.543430][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.560544][ T3686] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input6 [ 106.614808][ T7] gp8psk_fe: Frontend attached [ 106.635058][ T7] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 106.649767][ T7] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 106.653551][ T4616] loop4: detected capacity change from 0 to 32768 [ 106.788608][ T3686] usb 4-1: USB disconnect, device number 5 [ 106.799344][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 106.807041][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 106.819146][ T7] gp8psk: usb in 138 operation failed. [ 106.824661][ T7] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 106.849172][ T7] gp8psk: found Genpix USB device pID = 203 (hex) [ 106.890015][ T3686] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 106.891164][ T7] usb 2-1: USB disconnect, device number 6 [ 107.058349][ T7] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 107.193875][ T4637] 9p: Unknown access argument 18446744073709551615: -34 [ 107.475362][ T4647] netlink: 32 bytes leftover after parsing attributes in process `syz.3.332'. [ 107.509324][ T3686] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 107.779288][ T3686] usb 3-1: Using ep0 maxpacket: 8 [ 107.909125][ T3686] usb 3-1: config 0 has no interfaces? [ 107.949969][ T4656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.986573][ T4656] bridge0: port 3(bond1) entered blocking state [ 108.024791][ T4656] bridge0: port 3(bond1) entered disabled state [ 108.057899][ T4641] loop4: detected capacity change from 0 to 32768 [ 108.066597][ T4656] device bond1 entered promiscuous mode [ 108.109287][ T3686] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.119270][ T3686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.127302][ T3686] usb 3-1: Product: syz [ 108.142798][ T4641] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.327 (4641) [ 108.173979][ T3686] usb 3-1: Manufacturer: syz [ 108.178787][ T3686] usb 3-1: SerialNumber: syz [ 108.215541][ T3686] usb 3-1: config 0 descriptor?? [ 108.244024][ T4641] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.279068][ T4641] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 108.318413][ T4641] BTRFS info (device loop4): setting nodatacow, compression disabled [ 108.349136][ T4641] BTRFS info (device loop4): max_inline at 0 [ 108.355204][ T4641] BTRFS info (device loop4): enabling disk space caching [ 108.382696][ T4641] BTRFS info (device loop4): turning off barriers [ 108.402909][ T4641] BTRFS info (device loop4): turning on flush-on-commit [ 108.423220][ T4641] BTRFS info (device loop4): doing ref verification [ 108.453595][ T4641] BTRFS info (device loop4): force clearing of disk cache [ 108.473894][ T4641] BTRFS info (device loop4): enabling ssd optimizations [ 108.494194][ T4641] BTRFS info (device loop4): max_inline at 4096 [ 108.500835][ T4645] loop0: detected capacity change from 0 to 40427 [ 108.517541][ T4641] BTRFS info (device loop4): disk space caching is enabled [ 108.526031][ T4639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.542686][ T4645] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 108.560302][ T4645] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 108.575826][ T4639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.581448][ T4645] F2FS-fs (loop0): invalid crc value [ 108.606100][ T7] usb 3-1: USB disconnect, device number 5 [ 108.631836][ T4658] loop3: detected capacity change from 0 to 32768 [ 108.704114][ T4645] F2FS-fs (loop0): Found nat_bits in checkpoint [ 108.735991][ T4658] XFS (loop3): Mounting V5 Filesystem [ 108.795334][ T4641] BTRFS info (device loop4): rebuilding free space tree [ 108.811812][ T4645] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 108.830110][ T4645] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 108.830638][ T4641] BTRFS info (device loop4): disabling free space tree [ 108.848548][ T4641] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 108.858890][ T4641] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 108.934445][ T4658] XFS (loop3): Ending clean mount [ 109.054934][ T4700] loop1: detected capacity change from 0 to 256 [ 109.085312][ T4700] exfat: Deprecated parameter 'utf8' [ 109.138270][ T4700] exfat: Deprecated parameter 'namecase' [ 109.154315][ T3640] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 109.154389][ T3640] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 109.178996][ T4700] exfat: Deprecated parameter 'utf8' [ 109.200598][ T4641] syz.4.327 (4641) used greatest stack depth: 18352 bytes left [ 109.212840][ T3640] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 109.212864][ T3640] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 109.257039][ T3640] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 109.266356][ T3640] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 109.284293][ T4700] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 109.307912][ T3640] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 109.321409][ T3641] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.383770][ T4700] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 109.502249][ T4700] syz.1.338: attempt to access beyond end of device [ 109.502249][ T4700] loop1: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 109.709669][ T4704] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000) [ 109.742540][ T4704] exFAT-fs (loop1): error, failed to bmap (inode : ffff888056db87e0 iblock : 25, err : -5) [ 109.772510][ T3639] XFS (loop3): Unmounting Filesystem [ 109.790795][ T4704] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 109.798400][ T4704] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 110.363351][ T4726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 110.663966][ T4740] loop4: detected capacity change from 0 to 512 [ 110.705103][ T4740] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 110.758453][ T4740] EXT4-fs (loop4): 1 truncate cleaned up [ 110.799569][ T4740] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 110.956479][ T3641] EXT4-fs (loop4): unmounting filesystem. [ 111.541573][ T4766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 111.931667][ T4756] loop0: detected capacity change from 0 to 32768 [ 111.953102][ T4756] XFS (loop0): Mounting V5 Filesystem [ 111.990241][ T4756] XFS (loop0): Ending clean mount [ 112.000655][ T4756] XFS (loop0): Quotacheck needed: Please wait. [ 112.035270][ T4756] XFS (loop0): Quotacheck: Done. [ 112.096252][ T3640] XFS (loop0): Unmounting Filesystem [ 112.152759][ T4785] vivid-008: disconnect [ 112.157837][ T4787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.376'. [ 112.185371][ T4784] vivid-008: reconnect [ 112.193037][ T4787] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 112.733377][ T4804] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.849012][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.911332][ T4796] loop4: detected capacity change from 0 to 40427 [ 112.933446][ T4796] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 112.942856][ T4804] vhci_hcd: default hub control req: 4012 v0007 i0006 l0 [ 112.981164][ T4796] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 112.990713][ T26] audit: type=1326 audit(1729517825.885:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4806 comm="syz.1.386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f977ef7dff9 code=0x0 [ 113.015834][ T4796] F2FS-fs (loop4): invalid crc value [ 113.048473][ T4796] F2FS-fs (loop4): Found nat_bits in checkpoint [ 113.156198][ T4796] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 113.164041][ T4796] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 113.180027][ T4812] loop2: detected capacity change from 0 to 1764 [ 113.229850][ T7] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 113.246228][ T3871] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 113.258255][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.282784][ T7] usb 1-1: config 0 descriptor?? [ 113.303719][ T3641] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 113.303746][ T3641] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 113.318132][ T3641] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 113.340014][ T7] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 113.375537][ T4819] loop3: detected capacity change from 0 to 1764 [ 113.466069][ T4819] nbd: socks must be embedded in a SOCK_ITEM attr [ 113.765628][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.789845][ T7] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 113.798665][ T7] usb 1-1: media controller created [ 113.829866][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.876379][ T7] gp8psk_fe: Frontend attached [ 113.897802][ T7] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 113.906627][ T7] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 113.999273][ T7] gp8psk: usb in 138 operation failed. [ 114.004825][ T7] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 114.014928][ T7] gp8psk: found Genpix USB device pID = 203 (hex) [ 114.031396][ T7] usb 1-1: USB disconnect, device number 5 [ 114.092155][ T7] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 114.396632][ T4839] loop2: detected capacity change from 0 to 512 [ 114.403819][ T4837] loop3: detected capacity change from 0 to 1024 [ 114.405130][ T4839] EXT4-fs: Ignoring removed i_version option [ 114.459317][ T4839] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 114.474557][ T4840] sctp: [Deprecated]: syz.1.405 (pid 4840) Use of int in maxseg socket option. [ 114.474557][ T4840] Use struct sctp_assoc_value instead [ 114.521506][ T9] hfsplus: b-tree write err: -5, ino 4 [ 114.527405][ T4839] EXT4-fs (loop2): 1 truncate cleaned up [ 114.539618][ T4839] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 114.725745][ T3642] EXT4-fs (loop2): unmounting filesystem. [ 115.099232][ T4833] loop4: detected capacity change from 0 to 32768 [ 115.177116][ T4833] XFS (loop4): Mounting V5 Filesystem [ 115.356757][ T4833] XFS (loop4): Ending clean mount [ 115.737921][ T4873] program syz.1.408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.045683][ T3641] XFS (loop4): Unmounting Filesystem [ 116.195802][ T4886] loop0: detected capacity change from 0 to 512 [ 116.295804][ T4886] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 116.314672][ T4886] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.390693][ T4886] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 31: comm syz.0.415: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=1, rec_len=6, size=1024 fake=1 [ 116.448199][ T4876] loop3: detected capacity change from 0 to 32768 [ 116.465134][ T4886] EXT4-fs (loop0): Remounting filesystem read-only [ 116.479200][ T4876] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.410 (4876) [ 116.484346][ T4886] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.415: directory missing '..' [ 116.556956][ T4876] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.592712][ T4876] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 116.617085][ T3640] EXT4-fs (loop0): unmounting filesystem. [ 116.622496][ T4876] BTRFS info (device loop3): setting nodatacow, compression disabled [ 116.653338][ T4876] BTRFS info (device loop3): setting datacow [ 116.674144][ T4876] BTRFS info (device loop3): doing ref verification [ 116.704972][ T4876] BTRFS info (device loop3): force clearing of disk cache [ 116.758990][ T4876] BTRFS info (device loop3): turning off barriers [ 116.765535][ T4876] BTRFS info (device loop3): enabling ssd optimizations [ 116.800254][ T4876] BTRFS info (device loop3): using spread ssd allocation scheme [ 116.807959][ T4876] BTRFS info (device loop3): not using ssd optimizations [ 116.854652][ T4876] BTRFS info (device loop3): not using spread ssd allocation scheme [ 116.892418][ T4876] BTRFS info (device loop3): using free space tree [ 117.317442][ T4876] BTRFS info (device loop3): rebuilding free space tree [ 117.411372][ T4937] loop2: detected capacity change from 0 to 2048 [ 117.443861][ T4937] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.468409][ T4937] ext4: Unknown parameter 'seclabel' [ 117.504527][ T4311] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 117.743761][ T3639] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 117.767743][ T4953] hsr0: VLAN not yet supported [ 117.900442][ T4311] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 117.948234][ T4311] usb 5-1: config 0 has no interface number 0 [ 118.140246][ T4311] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 118.168560][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.202443][ T4311] usb 5-1: Product: syz [ 118.206685][ T4311] usb 5-1: Manufacturer: syz [ 118.234682][ T4311] usb 5-1: SerialNumber: syz [ 118.256560][ T4311] usb 5-1: config 0 descriptor?? [ 118.536146][ T4311] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 118.550176][ T4311] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 118.568165][ T4311] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 118.587077][ T4311] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 118.611695][ T4311] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 119.135912][ T4311] usb 5-1: USB disconnect, device number 4 [ 119.166146][ T4311] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 119.208305][ T4984] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.215978][ T4984] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.239521][ T4311] keyspan 5-1:0.133: device disconnected [ 119.342589][ T26] audit: type=1326 audit(1729517832.235:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fdf7dff9 code=0x7ffc0000 [ 119.426001][ T26] audit: type=1326 audit(1729517832.235:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94fdf7dff9 code=0x7ffc0000 [ 119.535965][ T26] audit: type=1326 audit(1729517832.235:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fdf7dff9 code=0x7ffc0000 [ 119.568524][ T26] audit: type=1326 audit(1729517832.235:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fdf7dff9 code=0x7ffc0000 [ 119.607449][ T4999] loop0: detected capacity change from 0 to 512 [ 119.672077][ T26] audit: type=1326 audit(1729517832.235:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94fdf7dff9 code=0x7ffc0000 [ 119.724377][ T26] audit: type=1326 audit(1729517832.255:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fdf7dff9 code=0x7ffc0000 [ 119.747680][ T26] audit: type=1326 audit(1729517832.255:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fdf7dff9 code=0x7ffc0000 [ 119.771732][ T26] audit: type=1326 audit(1729517832.265:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f94fdf7dff9 code=0x7ffc0000 [ 119.798623][ T26] audit: type=1326 audit(1729517832.265:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fdf7dff9 code=0x7ffc0000 [ 119.808853][ T4999] EXT4-fs (loop0): 1 truncate cleaned up [ 119.838950][ T4999] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 119.884240][ T26] audit: type=1326 audit(1729517832.265:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4989 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fdf7dff9 code=0x7ffc0000 [ 119.986559][ T4999] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #14: comm syz.0.451: attempt to clear invalid blocks 1886221359 len 1 [ 120.059098][ T4999] EXT4-fs (loop0): Remounting filesystem read-only [ 120.074601][ T5012] loop1: detected capacity change from 0 to 190 [ 120.215192][ T3640] EXT4-fs (loop0): unmounting filesystem. [ 120.499025][ T3645] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 120.686879][ T5008] loop4: detected capacity change from 0 to 32768 [ 120.755864][ T5008] XFS (loop4): Mounting V5 Filesystem [ 120.856920][ T5008] XFS (loop4): Ending clean mount [ 120.880368][ T5012] loop1: detected capacity change from 0 to 32768 [ 120.887587][ T5012] XFS: ikeep mount option is deprecated. [ 120.893774][ T5012] XFS: noikeep mount option is deprecated. [ 120.935586][ T5012] XFS (loop1): Mounting V5 Filesystem [ 120.982243][ T3641] XFS (loop4): Unmounting Filesystem [ 120.993069][ T5018] loop0: detected capacity change from 0 to 32768 [ 121.024501][ T5018] XFS: ikeep mount option is deprecated. [ 121.069244][ T3645] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=3b.74 [ 121.081109][ T3645] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.084945][ T5018] XFS (loop0): Mounting V5 Filesystem [ 121.105304][ T3645] usb 4-1: Product: syz [ 121.109884][ T3645] usb 4-1: Manufacturer: syz [ 121.114810][ T3645] usb 4-1: SerialNumber: syz [ 121.122674][ T3645] usb 4-1: config 0 descriptor?? [ 121.138779][ T5012] XFS (loop1): Ending clean mount [ 121.154637][ T5012] XFS (loop1): Quotacheck needed: Please wait. [ 121.175836][ T3645] as10x_usb: device has been detected [ 121.182236][ T3645] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 121.211366][ T3645] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 121.242577][ T3645] as10x_usb: error during firmware upload part1 [ 121.249654][ T3645] Registered device PCTV Systems picoStick (74e) [ 121.251110][ T5012] XFS (loop1): Quotacheck: Done. [ 121.265139][ T5018] XFS (loop0): Ending clean mount [ 121.273998][ T5018] XFS (loop0): Quotacheck needed: Please wait. [ 121.363581][ T5018] XFS (loop0): Quotacheck: Done. [ 121.397937][ T3645] usb 4-1: USB disconnect, device number 6 [ 121.453034][ T3645] Unregistered device PCTV Systems picoStick (74e) [ 121.457948][ T3648] XFS (loop1): Unmounting Filesystem [ 121.473950][ T3645] as10x_usb: device has been disconnected [ 121.523511][ T3640] XFS (loop0): Unmounting Filesystem [ 121.893155][ T5055] loop4: detected capacity change from 0 to 4096 [ 121.982358][ T5055] EXT4-fs (loop4): Test dummy encryption mode enabled [ 122.087579][ T5055] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 122.104330][ T5061] loop2: detected capacity change from 0 to 764 [ 122.129182][ T5067] loop0: detected capacity change from 0 to 512 [ 122.156956][ T5061] rock: directory entry would overflow storage [ 122.187882][ T5061] rock: sig=0x4654, size=5, remaining=4 [ 122.196911][ T5067] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.471: attempt to clear invalid blocks 2 len 1 [ 122.201666][ T5055] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.221886][ T5067] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 122.249181][ T5067] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.471: invalid indirect mapped block 1819239214 (level 0) [ 122.257572][ T5055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.267079][ T5067] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.471: invalid indirect mapped block 1819239214 (level 1) [ 122.289750][ T5055] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 122.302697][ T5067] EXT4-fs (loop0): 1 truncate cleaned up [ 122.308419][ T5067] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 122.317080][ T5055] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 122.372454][ T5067] EXT4-fs (loop0): shut down requested (2) [ 122.449025][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 122.480414][ T3641] EXT4-fs (loop4): unmounting filesystem. [ 122.499592][ T3640] EXT4-fs (loop0): unmounting filesystem. [ 122.602527][ T5080] loop1: detected capacity change from 0 to 512 [ 122.727921][ T5080] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.477: inode #1: comm syz.1.477: iget: illegal inode # [ 122.809254][ T7] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 122.818360][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.824837][ T5080] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.477: error while reading EA inode 1 err=-117 [ 122.829020][ T7] usb 4-1: config 0 descriptor?? [ 122.855866][ T5080] EXT4-fs (loop1): 1 orphan inode deleted [ 122.864692][ T5080] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 122.881119][ T7] gspca_main: spca508-2.14.0 probing 8086:0110 [ 122.934633][ T5085] loop0: detected capacity change from 0 to 1024 [ 122.973300][ T5085] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 122.999756][ T5085] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 123.014105][ T3648] EXT4-fs (loop1): unmounting filesystem. [ 123.022428][ T5085] EXT4-fs (loop0): invalid journal inode [ 123.028167][ T5085] EXT4-fs (loop0): can't get journal size [ 123.051710][ T5085] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 123.096783][ T5082] loop4: detected capacity change from 0 to 32768 [ 123.097138][ T7] gspca_spca508: reg_read err -32 [ 123.113670][ T5082] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.475 (5082) [ 123.122175][ T5085] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 37: comm syz.0.478: path /93/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 123.159143][ T7] gspca_spca508: reg_read err -32 [ 123.166392][ T5085] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz.0.478: path /93/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=511, rec_len=65535, size=1024 fake=0 [ 123.179416][ T5082] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.212413][ T5082] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 123.224921][ T5082] BTRFS info (device loop4): setting nodatacow, compression disabled [ 123.233277][ T5082] BTRFS info (device loop4): enabling auto defrag [ 123.245430][ T5082] BTRFS info (device loop4): max_inline at 0 [ 123.253409][ T5082] BTRFS info (device loop4): using free space tree [ 123.276076][ T5096] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 123.276076][ T5096] The task syz.1.479 (5096) triggered the difference, watch for misbehavior. [ 123.278212][ T3640] EXT4-fs (loop0): unmounting filesystem. [ 123.404988][ T5106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'. [ 123.429190][ T7] gspca_spca508: reg_read err -71 [ 123.452683][ T7] gspca_spca508: reg_read err -71 [ 123.489567][ T7] gspca_spca508: reg write: error -71 [ 123.521112][ T7] spca508: probe of 4-1:0.0 failed with error -71 [ 123.589253][ T5115] netlink: 24 bytes leftover after parsing attributes in process `syz.2.482'. [ 123.599806][ T7] usb 4-1: USB disconnect, device number 7 [ 123.664274][ T3641] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.985924][ T5125] loop2: detected capacity change from 0 to 512 [ 124.080806][ T5125] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 124.125521][ T5125] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.282309][ T3642] EXT4-fs (loop2): unmounting filesystem. [ 124.549638][ T3992] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 124.829236][ T3992] usb 1-1: Using ep0 maxpacket: 8 [ 124.949311][ T3992] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 124.963474][ T5166] loop3: detected capacity change from 0 to 512 [ 124.970618][ T3992] usb 1-1: config 179 has no interface number 0 [ 124.977061][ T3992] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 124.979287][ T5167] loop2: detected capacity change from 0 to 512 [ 124.988478][ T3725] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 125.014984][ T5167] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.507: attempt to clear invalid blocks 2 len 1 [ 125.033379][ T5167] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 125.048706][ T5167] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.507: invalid indirect mapped block 1819239214 (level 0) [ 125.058636][ T3992] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 125.074697][ T5167] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.507: invalid indirect mapped block 1819239214 (level 1) [ 125.087025][ T3992] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 125.093238][ T5167] EXT4-fs (loop2): 1 truncate cleaned up [ 125.105567][ T5167] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 125.143616][ T5167] EXT4-fs (loop2): shut down requested (2) [ 125.154006][ T3992] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 125.166262][ T5166] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 125.181531][ T3992] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 125.185179][ T5166] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.195652][ T3992] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 125.256856][ T3992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.279579][ T3725] usb 5-1: Using ep0 maxpacket: 8 [ 125.287238][ T3642] EXT4-fs (loop2): unmounting filesystem. [ 125.314497][ T5137] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 125.345204][ T5172] loop1: detected capacity change from 0 to 4096 [ 125.365549][ T3639] EXT4-fs (loop3): unmounting filesystem. [ 125.386718][ T5172] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 125.409520][ T3725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.471829][ T5172] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 125.511535][ T3725] usb 5-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 125.544706][ T3725] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 125.549296][ T5172] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 125.595636][ T3725] usb 5-1: Manufacturer: syz [ 125.617817][ T5172] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 125.618642][ T3725] usb 5-1: config 0 descriptor?? [ 125.633600][ T5178] loop2: detected capacity change from 0 to 512 [ 125.675991][ T3992] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input7 [ 125.732285][ T5178] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.511: inode #1: comm syz.2.511: iget: illegal inode # [ 125.762551][ T3648] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 125.786472][ T5178] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.511: error while reading EA inode 1 err=-117 [ 125.788536][ T3648] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 125.880201][ T3687] usb 1-1: USB disconnect, device number 6 [ 125.893349][ T5178] EXT4-fs (loop2): 1 orphan inode deleted [ 125.899360][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 125.899466][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 125.922806][ T3725] appledisplay 5-1:0.0: Error while getting initial brightness: -71 [ 125.945421][ T3687] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 125.962098][ T3725] appledisplay: probe of 5-1:0.0 failed with error -71 [ 125.988720][ T3725] usb 5-1: USB disconnect, device number 5 [ 126.004780][ T5178] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 126.136822][ T3642] EXT4-fs (loop2): unmounting filesystem. [ 126.784662][ T5217] loop0: detected capacity change from 0 to 512 [ 126.833257][ T5217] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.528: inode #1: comm syz.0.528: iget: illegal inode # [ 126.855719][ T5217] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.528: error while reading EA inode 1 err=-117 [ 126.877377][ T5217] EXT4-fs (loop0): 1 orphan inode deleted [ 126.885071][ T5217] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 126.945162][ T3640] EXT4-fs (loop0): unmounting filesystem. [ 127.059058][ T4307] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 127.160850][ T5235] loop2: detected capacity change from 0 to 128 [ 127.214923][ T5235] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 127.237808][ T5235] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.324491][ T5241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.538'. [ 127.339358][ T4307] usb 4-1: Using ep0 maxpacket: 16 [ 127.461532][ T4307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.494690][ T4307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.519024][ T4307] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 127.549030][ T4307] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 127.566889][ T4307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.577274][ T4307] usb 4-1: config 0 descriptor?? [ 127.597817][ T3642] EXT4-fs (loop2): unmounting filesystem. [ 127.682604][ T5251] loop2: detected capacity change from 0 to 256 [ 127.718116][ T5251] 9pnet_virtio: no channels available for device [ 127.975677][ T5259] loop4: detected capacity change from 0 to 512 [ 128.017344][ T5259] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.544: inode #1: comm syz.4.544: iget: illegal inode # [ 128.061180][ T4307] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 128.066658][ T5259] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.544: error while reading EA inode 1 err=-117 [ 128.111561][ T4307] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0003/input/input9 [ 128.161282][ T5259] EXT4-fs (loop4): 1 orphan inode deleted [ 128.168987][ T4311] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 128.178299][ T4307] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 128.184985][ T5259] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 128.307245][ T3641] EXT4-fs (loop4): unmounting filesystem. [ 128.315857][ T4307] usb 4-1: USB disconnect, device number 8 [ 128.559406][ T4311] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 128.576778][ T5273] loop1: detected capacity change from 0 to 8192 [ 128.578977][ T4311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.608479][ T5273] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 128.611693][ T4311] usb 3-1: config 0 descriptor?? [ 128.635362][ T5273] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 128.645276][ T5273] REISERFS (device loop1): using ordered data mode [ 128.652058][ T5273] reiserfs: using flush barriers [ 128.661537][ T4311] gspca_main: spca508-2.14.0 probing 8086:0110 [ 128.677139][ T5273] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 128.693916][ T5273] REISERFS (device loop1): checking transaction log (loop1) [ 128.699020][ T7] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 128.718476][ T5273] REISERFS (device loop1): Using r5 hash to sort names [ 128.727300][ T5273] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 128.746468][ T5273] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 128.787819][ T5273] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 128.825983][ T5273] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 128.876055][ T5273] overlayfs: upper fs needs to support d_type. [ 128.883114][ T4311] gspca_spca508: reg_read err -32 [ 128.910231][ T5273] overlayfs: upper fs does not support tmpfile. [ 128.916854][ T5273] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 128.919164][ T4311] gspca_spca508: reg_read err -32 [ 128.961677][ T5273] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 128.986029][ T5273] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 129.034740][ T5273] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 129.070031][ T5273] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 129.083865][ T7] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 129.110789][ T5273] overlayfs: failed to set xattr on upper [ 129.119744][ T7] usb 1-1: config 0 has no interface number 0 [ 129.127819][ T5273] overlayfs: ...falling back to index=off,metacopy=off. [ 129.152052][ T5273] overlayfs: failed to resolve './file0': -2 [ 129.209090][ T4311] gspca_spca508: reg_read err -71 [ 129.235921][ T4311] gspca_spca508: reg_read err -71 [ 129.259490][ T4311] gspca_spca508: reg write: error -71 [ 129.268053][ T4311] spca508: probe of 3-1:0.0 failed with error -71 [ 129.281247][ T7] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 129.301475][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.317965][ T4311] usb 3-1: USB disconnect, device number 6 [ 129.326444][ T7] usb 1-1: Product: syz [ 129.342097][ T7] usb 1-1: Manufacturer: syz [ 129.342873][ T5290] loop4: detected capacity change from 0 to 1024 [ 129.346893][ T7] usb 1-1: SerialNumber: syz [ 129.368447][ T7] usb 1-1: config 0 descriptor?? [ 129.403590][ T5290] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 129.512497][ T5290] EXT4-fs warning (device loop4): empty_inline_dir:1866: bad inline directory (dir #12) - no `..' [ 129.630260][ T7] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 129.655064][ T7] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 129.687459][ T7] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 129.711567][ T7] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 129.715705][ T5302] loop1: detected capacity change from 0 to 256 [ 129.732638][ T5302] exfat: Deprecated parameter 'utf8' [ 129.744411][ T3641] EXT4-fs (loop4): unmounting filesystem. [ 129.761994][ T7] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 129.784254][ T5302] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 129.894472][ T5305] loop4: detected capacity change from 0 to 1024 [ 129.939621][ T5305] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 130.005064][ T5305] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 130.020971][ T5305] EXT4-fs (loop4): invalid journal inode [ 130.080191][ T5305] EXT4-fs (loop4): can't get journal size [ 130.119015][ T5305] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 130.214659][ T5305] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 37: comm syz.4.567: path /103/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 130.252416][ T4311] usb 1-1: USB disconnect, device number 7 [ 130.269168][ T4311] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 130.290828][ T4311] keyspan 1-1:0.133: device disconnected [ 130.309931][ T5305] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz.4.567: path /103/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=511, rec_len=65535, size=1024 fake=0 [ 130.427508][ T5308] loop2: detected capacity change from 0 to 32768 [ 130.492048][ T5308] JBD2: Ignoring recovery information on journal [ 130.507086][ T3641] EXT4-fs (loop4): unmounting filesystem. [ 130.609669][ T5308] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 130.738817][ T5308] (syz.2.569,5308,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #17: directory entry overrun - offset=312, inode=13845347915746889, rec_len=54648, name_len=18 [ 130.796616][ T5325] loop4: detected capacity change from 0 to 256 [ 130.832263][ T5307] loop3: detected capacity change from 0 to 32768 [ 130.856288][ T5307] XFS: ikeep mount option is deprecated. [ 130.886326][ T5329] program syz.0.575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.944796][ T5325] 9pnet_virtio: no channels available for device [ 131.001928][ T3642] ocfs2: Unmounting device (7,2) on (node local) [ 131.004320][ T5336] use of bytesused == 0 is deprecated and will be removed in the future, [ 131.019435][ T5336] use the actual size instead. [ 131.024639][ T5307] XFS (loop3): Mounting V5 Filesystem [ 131.169658][ T5307] XFS (loop3): Ending clean mount [ 131.243778][ T5307] XFS (loop3): Quotacheck needed: Please wait. [ 131.305167][ T5307] XFS (loop3): Quotacheck: Done. [ 131.317112][ T5343] loop4: detected capacity change from 0 to 2048 [ 131.364607][ T5343] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 131.442096][ T5350] loop0: detected capacity change from 0 to 512 [ 131.485604][ T5350] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 131.507412][ T3639] XFS (loop3): Unmounting Filesystem [ 131.545483][ T5350] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 131.546726][ T3641] EXT4-fs (loop4): unmounting filesystem. [ 131.559907][ T5350] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 131.610884][ T5350] System zones: 0-1, 15-15, 18-18, 34-34 [ 131.617727][ T5350] EXT4-fs (loop0): orphan cleanup on readonly fs [ 131.656642][ T5350] __quota_error: 5 callbacks suppressed [ 131.656657][ T5350] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 131.691945][ T5350] EXT4-fs warning (device loop0): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 131.772317][ T5350] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 131.797992][ T5350] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.580: bg 0: block 40: padding at end of block bitmap is not set [ 131.848256][ T5350] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 131.874072][ T5350] EXT4-fs (loop0): 1 truncate cleaned up [ 131.892361][ T5350] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 131.965796][ T5350] EXT4-fs (loop0): shut down requested (2) [ 132.047844][ T3640] EXT4-fs (loop0): unmounting filesystem. [ 132.229167][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 132.272190][ T5375] loop0: detected capacity change from 0 to 256 [ 132.333097][ T5375] 9pnet_virtio: no channels available for device [ 132.457240][ T5380] loop3: detected capacity change from 0 to 2048 [ 132.549664][ T5380] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 132.589236][ T7] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 132.648320][ T7] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 132.693335][ T5388] loop4: detected capacity change from 0 to 8192 [ 132.699926][ T7] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 132.717144][ T5388] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 132.749465][ T5388] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 132.764185][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.765588][ T5388] REISERFS (device loop4): using ordered data mode [ 132.780053][ T5388] reiserfs: using flush barriers [ 132.799520][ T5366] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 132.808650][ T3639] EXT4-fs (loop3): unmounting filesystem. [ 132.823183][ T5388] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 132.863792][ T5388] REISERFS (device loop4): checking transaction log (loop4) [ 132.883958][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.890392][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.904893][ T5388] REISERFS (device loop4): Using tea hash to sort names [ 132.953717][ T5388] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 133.089131][ T7] usb 2-1: USB disconnect, device number 7 [ 133.795132][ T5411] loop4: detected capacity change from 0 to 164 [ 133.819982][ T5395] loop2: detected capacity change from 0 to 32768 [ 134.515192][ T5428] loop3: detected capacity change from 0 to 8192 [ 134.553343][ T5428] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 134.586174][ T5439] loop4: detected capacity change from 0 to 190 [ 134.598983][ T5428] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 134.639749][ T5428] REISERFS (device loop3): using ordered data mode [ 134.646306][ T5428] reiserfs: using flush barriers [ 134.748960][ T5439] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 134.775044][ T5428] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 134.797157][ T5439] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 134.839242][ T5439] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 134.862396][ T5439] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. [ 134.893161][ T5428] REISERFS (device loop3): checking transaction log (loop3) [ 134.906093][ T5428] REISERFS (device loop3): Using r5 hash to sort names [ 134.969963][ T5428] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 135.048443][ T5428] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 135.111293][ T5428] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 135.161242][ T5428] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 135.214662][ T5428] overlayfs: upper fs needs to support d_type. [ 135.239040][ T5428] overlayfs: upper fs does not support tmpfile. [ 135.279299][ T5428] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 135.339614][ T5428] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 135.346728][ T5428] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 135.413491][ T5428] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 135.488013][ T5428] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 135.533304][ T5428] overlayfs: failed to set xattr on upper [ 135.558979][ T5428] overlayfs: ...falling back to index=off,metacopy=off. [ 135.592319][ T5428] overlayfs: failed to resolve './file0': -2 [ 136.023951][ T5449] loop1: detected capacity change from 0 to 32768 [ 136.130171][ T5449] JBD2: Ignoring recovery information on journal [ 136.154372][ T5439] loop4: detected capacity change from 0 to 32768 [ 136.161925][ T5439] XFS: ikeep mount option is deprecated. [ 136.167702][ T5439] XFS: noikeep mount option is deprecated. [ 136.248736][ T5449] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 136.286056][ T5439] XFS (loop4): Mounting V5 Filesystem [ 136.406760][ T5449] (syz.1.616,5449,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #17: directory entry overrun - offset=312, inode=13845347915746889, rec_len=54648, name_len=18 [ 136.438006][ T5439] XFS (loop4): Ending clean mount [ 136.445281][ T5439] XFS (loop4): Quotacheck needed: Please wait. [ 136.573184][ T3648] ocfs2: Unmounting device (7,1) on (node local) [ 136.580107][ T5439] XFS (loop4): Quotacheck: Done. [ 136.767535][ T3641] XFS (loop4): Unmounting Filesystem [ 137.838381][ T5488] loop3: detected capacity change from 0 to 32768 [ 137.857779][ T5488] XFS: ikeep mount option is deprecated. [ 137.939482][ T5488] XFS (loop3): Mounting V5 Filesystem [ 137.969582][ T5490] loop2: detected capacity change from 0 to 32768 [ 137.985157][ T5490] XFS: attr2 mount option is deprecated. [ 138.011163][ T5492] loop1: detected capacity change from 0 to 32768 [ 138.084487][ T5496] loop4: detected capacity change from 0 to 32768 [ 138.101402][ T5492] XFS (loop1): Mounting V5 Filesystem [ 138.109822][ T5490] XFS (loop2): Mounting V5 Filesystem [ 138.128802][ T5488] XFS (loop3): Ending clean mount [ 138.145787][ T5488] XFS (loop3): Quotacheck needed: Please wait. [ 138.212074][ T5488] XFS (loop3): Quotacheck: Done. [ 138.282332][ T5492] XFS (loop1): Ending clean mount [ 138.308229][ T5490] XFS (loop2): Ending clean mount [ 138.336357][ T5490] XFS (loop2): Quotacheck needed: Please wait. [ 138.346053][ T3639] XFS (loop3): Unmounting Filesystem [ 138.413990][ T3648] XFS (loop1): Unmounting Filesystem [ 138.516008][ T5490] XFS (loop2): Quotacheck: Done. [ 138.757371][ T3642] XFS (loop2): Unmounting Filesystem [ 139.201416][ T5542] sg_write: process 267 (syz.4.639) changed security contexts after opening file descriptor, this is not allowed. [ 139.619405][ T3686] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 139.869202][ T3686] usb 4-1: Using ep0 maxpacket: 32 [ 139.989382][ T3686] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 140.020796][ T3686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.063709][ T3686] usb 4-1: config 0 descriptor?? [ 140.121553][ T3686] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 140.270301][ T5574] loop2: detected capacity change from 0 to 8192 [ 140.297668][ T5574] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 140.319885][ T5585] netlink: 104 bytes leftover after parsing attributes in process `syz.0.653'. [ 140.329018][ T5574] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 140.376582][ T5574] REISERFS (device loop2): using ordered data mode [ 140.422952][ T5574] reiserfs: using flush barriers [ 140.430924][ T5574] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 140.585718][ T5574] REISERFS (device loop2): checking transaction log (loop2) [ 140.621497][ T5574] REISERFS (device loop2): Using r5 hash to sort names [ 140.639372][ T5574] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 140.814694][ T5558] loop4: detected capacity change from 0 to 32768 [ 140.856220][ T5558] XFS: attr2 mount option is deprecated. [ 140.999462][ T3686] gspca_vc032x: reg_w err -71 [ 141.004769][ T3686] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.038241][ T5610] netlink: 'syz.2.658': attribute type 25 has an invalid length. [ 141.046423][ T5610] netlink: 'syz.2.658': attribute type 8 has an invalid length. [ 141.047318][ T3686] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.097114][ T3686] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.115197][ T3686] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.131542][ T5613] loop0: detected capacity change from 0 to 256 [ 141.151873][ T3686] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.158407][ T3686] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.191316][ T3686] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.211034][ T3686] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.227945][ T3686] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.239243][ T3686] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.257020][ T3686] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.264928][ T3686] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.276595][ T3686] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.283676][ T3686] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.295063][ T3686] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.300916][ T3686] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.306360][ T3686] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.319784][ T3686] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.325338][ T3686] gspca_vc032x: Unknown sensor... [ 141.339078][ T3686] vc032x: probe of 4-1:0.0 failed with error -22 [ 141.362176][ T3686] usb 4-1: USB disconnect, device number 9 [ 141.405012][ T5558] XFS (loop4): Mounting V5 Filesystem [ 141.553483][ T5558] XFS (loop4): Ending clean mount [ 141.571537][ T5558] XFS (loop4): Quotacheck needed: Please wait. [ 141.662180][ T5558] XFS (loop4): Quotacheck: Done. [ 141.868540][ T3641] XFS (loop4): Unmounting Filesystem [ 141.940246][ T4303] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 142.154490][ T5645] netlink: 'syz.3.671': attribute type 25 has an invalid length. [ 142.162619][ T5645] netlink: 'syz.3.671': attribute type 8 has an invalid length. [ 142.189160][ T4303] usb 1-1: Using ep0 maxpacket: 8 [ 142.309383][ T4303] usb 1-1: config 0 interface 0 has no altsetting 0 [ 142.325974][ T4303] usb 1-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 142.356911][ T4303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.384004][ T4303] usb 1-1: config 0 descriptor?? [ 142.432539][ T4303] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 142.453451][ T4303] usb 1-1: selecting invalid altsetting 0 [ 142.470181][ T4303] cxusb: set interface failed [ 142.487104][ T4303] dvb-usb: bulk message failed: -22 (1/0) [ 142.528168][ T4303] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 142.554652][ T26] audit: type=1107 audit(1729517855.445:41): pid=5656 uid=0 auid=0 ses=1 subj=unconfined msg='' [ 142.571386][ T4303] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 142.587990][ T4303] usb 1-1: media controller created [ 142.617052][ T4303] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.669196][ T3687] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 142.776042][ T4303] DVB: Unable to find symbol lgdt330x_attach() [ 142.794153][ T4303] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 142.809931][ T5662] loop1: detected capacity change from 0 to 128 [ 142.839688][ T5662] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 142.849060][ T4303] dvb-usb: bulk message failed: -22 (1/0) [ 142.855299][ T4303] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 142.876437][ T5662] sysv_free_block: trying to free block not in datazone [ 142.895770][ T5647] loop2: detected capacity change from 0 to 32768 [ 142.900417][ T4303] usb 1-1: USB disconnect, device number 8 [ 142.904889][ T5662] sysv_count_free_blocks: free block count was -2041545929, correcting to 9 [ 142.930361][ T3687] usb 4-1: Using ep0 maxpacket: 16 [ 142.956405][ T5662] sysv_count_free_inodes: unable to read inode table [ 142.980125][ T4303] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 143.056348][ T3648] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 143.149088][ T3687] usb 4-1: config 0 has no interfaces? [ 143.299104][ T4311] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 143.324762][ T3687] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 143.344538][ T3687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.369185][ T3687] usb 4-1: Product: syz [ 143.373435][ T3687] usb 4-1: Manufacturer: syz [ 143.396201][ T3687] usb 4-1: SerialNumber: syz [ 143.414250][ T3687] usb 4-1: config 0 descriptor?? [ 143.676443][ T3687] usb 4-1: USB disconnect, device number 10 [ 143.679456][ T4311] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 143.739783][ T4311] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 143.775333][ T5682] bond0: option mode: unable to set because the bond device has slaves [ 143.789011][ T4311] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 143.808338][ T4311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.873415][ T5664] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 144.166049][ T3992] usb 5-1: USB disconnect, device number 6 [ 144.965963][ T5708] loop3: detected capacity change from 0 to 2048 [ 145.051822][ T5708] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 145.066255][ T5708] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.100321][ T5708] fs-verity: sha256 using implementation "sha256-avx2" [ 145.138460][ T5708] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.698: bg 0: block 288: padding at end of block bitmap is not set [ 145.214598][ T5721] bond0: option mode: unable to set because the bond device has slaves [ 145.217388][ T5708] fs-verity (loop3, inode 13): ext4_end_enable_verity() failed with err -117 [ 145.240261][ T5718] loop2: detected capacity change from 0 to 1024 [ 145.330095][ T5718] hfsplus: invalid extended attribute record [ 145.383626][ T3639] EXT4-fs (loop3): unmounting filesystem. [ 145.408011][ T5727] netlink: 32 bytes leftover after parsing attributes in process `syz.0.705'. [ 145.439335][ T4311] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 145.505734][ T33] hfsplus: b-tree write err: -5, ino 8 [ 145.811439][ T4311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.835252][ T4311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.856771][ T4311] usb 2-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 145.876953][ T4311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.897050][ T4311] usb 2-1: config 0 descriptor?? [ 146.412124][ T4311] hid-generic 0003:05AC:4262.0004: unbalanced delimiter at end of report description [ 146.449630][ T4311] hid-generic: probe of 0003:05AC:4262.0004 failed with error -22 [ 146.628207][ T4311] usb 2-1: USB disconnect, device number 8 [ 146.672914][ T26] audit: type=1107 audit(1729517859.565:42): pid=5756 uid=0 auid=0 ses=2 subj=unconfined msg='' [ 147.087698][ T5773] netlink: 32 bytes leftover after parsing attributes in process `syz.4.725'. [ 147.519399][ T3687] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 147.527066][ T3992] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 147.666653][ T26] audit: type=1107 audit(1729517860.555:43): pid=5797 uid=0 auid=0 ses=3 subj=unconfined msg='' [ 147.689861][ T5801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 147.779209][ T3992] usb 1-1: Using ep0 maxpacket: 16 [ 147.784495][ T3687] usb 3-1: Using ep0 maxpacket: 32 [ 147.939594][ T3687] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 147.959269][ T3687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.983827][ T3687] usb 3-1: config 0 descriptor?? [ 148.030293][ T3992] usb 1-1: config 0 has no interfaces? [ 148.038008][ T3687] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 148.197163][ T5822] loop3: detected capacity change from 0 to 512 [ 148.205457][ T5822] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 148.232494][ T5822] EXT4-fs (loop3): 1 truncate cleaned up [ 148.243672][ T3992] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 148.249284][ T4311] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 148.252886][ T3992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.261260][ T5822] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 148.268393][ T3992] usb 1-1: Product: syz [ 148.282375][ T3992] usb 1-1: Manufacturer: syz [ 148.287009][ T3992] usb 1-1: SerialNumber: syz [ 148.293556][ T3992] usb 1-1: config 0 descriptor?? [ 148.387228][ T3639] EXT4-fs (loop3): unmounting filesystem. [ 148.561859][ T3992] usb 1-1: USB disconnect, device number 9 [ 148.659385][ T4311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.683096][ T4311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.705527][ T4311] usb 5-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 148.716530][ T4311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.724955][ T5842] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 148.752145][ T4311] usb 5-1: config 0 descriptor?? [ 148.929179][ T3687] gspca_vc032x: reg_w err -71 [ 148.933950][ T3687] gspca_vc032x: I2c Bus Busy Wait 00 [ 148.946166][ T3687] gspca_vc032x: I2c Bus Busy Wait 00 [ 148.951967][ T5842] vhci_hcd: default hub control req: 4012 v0007 i0006 l0 [ 148.959828][ T3687] gspca_vc032x: I2c Bus Busy Wait 00 [ 148.965143][ T3687] gspca_vc032x: I2c Bus Busy Wait 00 [ 148.971216][ T3687] gspca_vc032x: I2c Bus Busy Wait 00 [ 148.976643][ T3687] gspca_vc032x: I2c Bus Busy Wait 00 [ 148.982951][ T3687] gspca_vc032x: I2c Bus Busy Wait 00 [ 148.991984][ T3687] gspca_vc032x: I2c Bus Busy Wait 00 [ 148.997468][ T3687] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.003201][ T3687] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.008520][ T3687] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.014332][ T3687] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.019952][ T3687] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.025272][ T3687] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.038995][ T3687] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.044372][ T3687] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.050068][ T3687] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.055369][ T3687] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.061124][ T3687] gspca_vc032x: Unknown sensor... [ 149.066260][ T3687] vc032x: probe of 3-1:0.0 failed with error -22 [ 149.076251][ T3687] usb 3-1: USB disconnect, device number 7 [ 149.234967][ T4311] hid-generic 0003:05AC:4262.0005: unbalanced delimiter at end of report description [ 149.258392][ T4311] hid-generic: probe of 0003:05AC:4262.0005 failed with error -22 [ 149.448172][ T4311] usb 5-1: USB disconnect, device number 7 [ 149.546202][ T5860] loop2: detected capacity change from 0 to 64 [ 149.572067][ T5860] hfs: request for non-existent node 237 in B*Tree [ 149.586328][ T5860] hfs: request for non-existent node 237 in B*Tree [ 149.614064][ T5860] hfs: request for non-existent node 237 in B*Tree [ 149.634917][ T5860] hfs: request for non-existent node 237 in B*Tree [ 149.668360][ T4939] hfs: request for non-existent node 237 in B*Tree [ 149.688969][ T4939] hfs: request for non-existent node 237 in B*Tree [ 149.724897][ T5862] loop0: detected capacity change from 0 to 256 [ 149.746469][ T5862] exfat: Deprecated parameter 'utf8' [ 149.755575][ T5862] exfat: Deprecated parameter 'namecase' [ 149.784484][ T5862] exfat: Deprecated parameter 'utf8' [ 149.803081][ T5862] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 149.886007][ T5862] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 149.895170][ T5864] vivid-004: disconnect [ 149.909476][ T5863] vivid-004: reconnect [ 149.914812][ T5862] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 149.924880][ T5862] exFAT-fs (loop0): error, failed to bmap (inode : ffff888056db94e0 iblock : 25, err : -5) [ 149.948256][ T5862] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 149.957609][ T5862] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 149.977522][ T5867] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 150.043756][ T5867] exFAT-fs (loop0): error, failed to bmap (inode : ffff888056db94e0 iblock : 0, err : -5) [ 150.149577][ T5871] vivid-006: disconnect [ 150.160828][ T5869] vivid-006: reconnect [ 150.235441][ T5873] loop4: detected capacity change from 0 to 1024 [ 150.255782][ T5856] loop1: detected capacity change from 0 to 40427 [ 150.294864][ T5856] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 150.324574][ T5856] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 150.354250][ T5878] loop3: detected capacity change from 0 to 512 [ 150.364224][ T5856] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x3ffff [ 150.392351][ T5856] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 150.417430][ T5856] F2FS-fs (loop1): invalid crc value [ 150.426404][ T4938] hfsplus: b-tree write err: -5, ino 4 [ 150.441741][ T5878] EXT4-fs: Ignoring removed i_version option [ 150.497535][ T5856] F2FS-fs (loop1): Found nat_bits in checkpoint [ 150.510420][ T5878] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 150.573563][ T5878] EXT4-fs (loop3): 1 truncate cleaned up [ 150.581968][ T5887] loop4: detected capacity change from 0 to 1024 [ 150.598263][ T5878] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 150.637932][ T5887] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.677263][ T5856] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 150.694498][ T5856] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 150.711127][ T5893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.775'. [ 150.720829][ T5893] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 150.808521][ T5856] syz.1.763: attempt to access beyond end of device [ 150.808521][ T5856] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 150.828636][ T3639] EXT4-fs (loop3): unmounting filesystem. [ 150.866488][ T5856] syz.1.763: attempt to access beyond end of device [ 150.866488][ T5856] loop1: rw=2049, sector=53256, nr_sectors = 8 limit=40427 [ 151.018811][ T3648] syz-executor: attempt to access beyond end of device [ 151.018811][ T3648] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.273398][ T5905] loop2: detected capacity change from 0 to 512 [ 151.400933][ T5905] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 151.429125][ T5905] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.485374][ T5905] EXT4-fs error (device loop2): ext4_empty_dir:3154: inode #12: block 31: comm syz.2.785: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=1, rec_len=6, size=1024 fake=1 [ 151.550704][ T5905] EXT4-fs (loop2): Remounting filesystem read-only [ 151.577709][ T5905] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz.2.785: directory missing '..' [ 151.707868][ T3642] EXT4-fs (loop2): unmounting filesystem. [ 151.960302][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.790'. [ 151.989375][ T5923] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 152.208324][ T5899] loop4: detected capacity change from 0 to 40427 [ 152.242983][ T5899] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 152.262496][ T5899] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 152.288464][ T5899] F2FS-fs (loop4): invalid crc value [ 152.334386][ T5899] F2FS-fs (loop4): Found nat_bits in checkpoint [ 152.544792][ T5899] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 152.555520][ T5936] sctp: [Deprecated]: syz.3.797 (pid 5936) Use of int in maxseg socket option. [ 152.555520][ T5936] Use struct sctp_assoc_value instead [ 152.579353][ T5899] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 152.747178][ T5943] loop0: detected capacity change from 0 to 512 [ 152.783748][ T5945] loop3: detected capacity change from 0 to 512 [ 152.943958][ T5943] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 152.979383][ T5943] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.057931][ T5945] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 153.069756][ T5945] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.198184][ T5943] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz.0.799: invalid size [ 153.251207][ T3639] EXT4-fs (loop3): unmounting filesystem. [ 153.384287][ T3640] EXT4-fs (loop0): unmounting filesystem. [ 153.426428][ T5939] loop1: detected capacity change from 0 to 32768 [ 153.460990][ T5939] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.796 (5939) [ 153.544354][ T5939] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.575019][ T5939] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 153.593861][ T5939] BTRFS info (device loop1): setting nodatacow, compression disabled [ 153.612723][ T5939] BTRFS info (device loop1): setting datacow [ 153.635885][ T5939] BTRFS info (device loop1): doing ref verification [ 153.653778][ T5939] BTRFS info (device loop1): force clearing of disk cache [ 153.661963][ T5939] BTRFS info (device loop1): turning off barriers [ 153.668674][ T5939] BTRFS info (device loop1): enabling ssd optimizations [ 153.676170][ T5939] BTRFS info (device loop1): using spread ssd allocation scheme [ 153.684428][ T5939] BTRFS info (device loop1): not using ssd optimizations [ 153.692931][ T5939] BTRFS info (device loop1): not using spread ssd allocation scheme [ 153.711880][ T5939] BTRFS info (device loop1): using free space tree [ 153.945134][ T5939] BTRFS info (device loop1): rebuilding free space tree [ 154.162974][ T5958] loop0: detected capacity change from 0 to 32768 [ 154.194896][ T5958] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.805 (5958) [ 154.250985][ T3648] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 154.271609][ T5958] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 154.292655][ T5958] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 154.345334][ T5958] BTRFS info (device loop0): setting nodatacow, compression disabled [ 154.388672][ T5958] BTRFS info (device loop0): turning on flush-on-commit [ 154.436859][ T5958] BTRFS info (device loop0): using free space tree [ 154.818256][ T5958] BTRFS info (device loop0): enabling ssd optimizations [ 154.879818][ T26] audit: type=1800 audit(1729517867.775:44): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.805" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 154.908080][ T6017] loop4: detected capacity change from 0 to 512 [ 154.915864][ T6017] EXT4-fs: Ignoring removed i_version option [ 154.944805][ T6017] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 155.004614][ T6017] EXT4-fs (loop4): 1 truncate cleaned up [ 155.015806][ T3640] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 155.026267][ T6017] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 155.417757][ T3641] EXT4-fs (loop4): unmounting filesystem. [ 155.920300][ T56] wlan0: Trigger new scan to find an IBSS to join [ 156.000093][ T56] ------------[ cut here ]------------ [ 156.006198][ T56] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x20 [ 156.017621][ T56] WARNING: CPU: 0 PID: 56 at net/mac80211/rate.c:385 __rate_control_send_low+0x653/0x890 [ 156.027553][ T56] Modules linked in: [ 156.031527][ T56] CPU: 0 PID: 56 Comm: kworker/u4:4 Not tainted 6.1.113-syzkaller #0 [ 156.039705][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 156.049831][ T56] Workqueue: events_unbound cfg80211_wiphy_work [ 156.056185][ T56] RIP: 0010:__rate_control_send_low+0x653/0x890 [ 156.062526][ T56] Code: 48 8b 14 24 0f 85 db 01 00 00 8b 0a 48 c7 c7 40 fe 21 8c 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 cd 50 2c f7 <0f> 0b e9 79 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 ff [ 156.082220][ T56] RSP: 0018:ffffc900015773a0 EFLAGS: 00010246 [ 156.088366][ T56] RAX: 7731cac996b25500 RBX: 000000000000000c RCX: ffff88801f2dd940 [ 156.096434][ T56] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.104495][ T56] RBP: ffff88807cb0a8e8 R08: ffffffff8152afae R09: fffff520002aedd5 [ 156.112552][ T56] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000800 [ 156.120629][ T56] R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000 [ 156.128658][ T56] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 156.137683][ T56] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.144353][ T56] CR2: 00007f2b96bf6000 CR3: 000000007e3d3000 CR4: 00000000003506f0 [ 156.152422][ T56] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 156.160525][ T56] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 156.168610][ T56] Call Trace: [ 156.171982][ T56] [ 156.174949][ T56] ? __warn+0x15a/0x520 [ 156.179191][ T56] ? __rate_control_send_low+0x653/0x890 [ 156.184877][ T56] ? report_bug+0x2af/0x500 [ 156.189458][ T56] ? __rate_control_send_low+0x653/0x890 [ 156.195131][ T56] ? handle_bug+0x3d/0x70 [ 156.199527][ T56] ? exc_invalid_op+0x16/0x40 [ 156.204229][ T56] ? asm_exc_invalid_op+0x16/0x20 [ 156.209338][ T56] ? __warn_printk+0x28e/0x350 [ 156.214131][ T56] ? __rate_control_send_low+0x653/0x890 [ 156.219839][ T56] ? ieee80211_scan_state_send_probe+0x38b/0x920 [ 156.226216][ T56] rate_control_send_low+0x1a8/0x770 [ 156.231596][ T56] rate_control_get_rate+0x20a/0x5d0 [ 156.236942][ T56] ieee80211_tx_h_rate_ctrl+0xc62/0x19e0 [ 156.242676][ T56] ? ieee80211_tx_h_select_key+0x16a0/0x16a0 [ 156.248778][ T56] ? ieee80211_queue_skb+0xd0/0x2300 [ 156.254147][ T56] invoke_tx_handlers_late+0xb2/0x1910 [ 156.259702][ T56] ? ieee80211_tx_h_select_key+0x1177/0x16a0 [ 156.265725][ T56] ? invoke_tx_handlers_early+0xa0d/0x1d30 [ 156.271649][ T56] ieee80211_tx+0x2df/0x460 [ 156.276193][ T56] ? ieee80211_skb_resize+0x640/0x640 [ 156.281681][ T56] ? ieee80211_xmit+0x307/0x3e0 [ 156.286583][ T56] ? __ieee80211_tx_skb_tid_band+0x49a/0x610 [ 156.292676][ T56] __ieee80211_tx_skb_tid_band+0x4de/0x610 [ 156.298530][ T56] ? ieee80211_scan_state_send_probe+0x4b6/0x920 [ 156.304958][ T56] ieee80211_scan_state_send_probe+0x575/0x920 [ 156.311233][ T56] ieee80211_scan_work+0x612/0x1d70 [ 156.316502][ T56] ? ieee80211_can_scan+0x200/0x200 [ 156.321827][ T56] ? do_raw_spin_unlock+0x137/0x8a0 [ 156.327051][ T56] ? _raw_spin_unlock_irq+0x1f/0x40 [ 156.332346][ T56] ? lockdep_hardirqs_on+0x94/0x130 [ 156.337581][ T56] cfg80211_wiphy_work+0x21a/0x250 [ 156.342767][ T56] ? process_one_work+0x7a9/0x11d0 [ 156.347912][ T56] process_one_work+0x8a9/0x11d0 [ 156.352954][ T56] ? worker_detach_from_pool+0x260/0x260 [ 156.358627][ T56] ? _raw_spin_lock_irqsave+0x120/0x120 [ 156.364272][ T56] ? kthread_data+0x4e/0xc0 [ 156.368818][ T56] ? wq_worker_running+0x97/0x190 [ 156.373928][ T56] worker_thread+0xa47/0x1200 [ 156.378646][ T56] ? _raw_spin_unlock+0x40/0x40 [ 156.383622][ T56] kthread+0x28d/0x320 [ 156.387727][ T56] ? worker_clr_flags+0x190/0x190 [ 156.392840][ T56] ? kthread_blkcg+0xd0/0xd0 [ 156.397547][ T56] ret_from_fork+0x1f/0x30 [ 156.402068][ T56] [ 156.405100][ T56] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 156.412410][ T56] CPU: 0 PID: 56 Comm: kworker/u4:4 Not tainted 6.1.113-syzkaller #0 [ 156.420493][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 156.430571][ T56] Workqueue: events_unbound cfg80211_wiphy_work [ 156.436869][ T56] Call Trace: [ 156.440160][ T56] [ 156.443108][ T56] dump_stack_lvl+0x1e3/0x2cb [ 156.447813][ T56] ? nf_tcp_handle_invalid+0x642/0x642 [ 156.453318][ T56] ? panic+0x764/0x764 [ 156.457421][ T56] ? 0xffffffffa0003b40 [ 156.461614][ T56] ? vscnprintf+0x59/0x80 [ 156.465980][ T56] panic+0x318/0x764 [ 156.469899][ T56] ? __warn+0x169/0x520 [ 156.474073][ T56] ? memcpy_page_flushcache+0xfc/0xfc [ 156.479479][ T56] ? ret_from_fork+0x1f/0x30 [ 156.484101][ T56] __warn+0x348/0x520 [ 156.488106][ T56] ? __rate_control_send_low+0x653/0x890 [ 156.493767][ T56] report_bug+0x2af/0x500 [ 156.498131][ T56] ? __rate_control_send_low+0x653/0x890 [ 156.503799][ T56] handle_bug+0x3d/0x70 [ 156.507980][ T56] exc_invalid_op+0x16/0x40 [ 156.512502][ T56] asm_exc_invalid_op+0x16/0x20 [ 156.517370][ T56] RIP: 0010:__rate_control_send_low+0x653/0x890 [ 156.523626][ T56] Code: 48 8b 14 24 0f 85 db 01 00 00 8b 0a 48 c7 c7 40 fe 21 8c 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 cd 50 2c f7 <0f> 0b e9 79 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 ff [ 156.543250][ T56] RSP: 0018:ffffc900015773a0 EFLAGS: 00010246 [ 156.549320][ T56] RAX: 7731cac996b25500 RBX: 000000000000000c RCX: ffff88801f2dd940 [ 156.557290][ T56] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.565258][ T56] RBP: ffff88807cb0a8e8 R08: ffffffff8152afae R09: fffff520002aedd5 [ 156.573225][ T56] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000800 [ 156.581192][ T56] R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000 [ 156.589179][ T56] ? __warn_printk+0x28e/0x350 [ 156.593951][ T56] ? ieee80211_scan_state_send_probe+0x38b/0x920 [ 156.600298][ T56] rate_control_send_low+0x1a8/0x770 [ 156.605590][ T56] rate_control_get_rate+0x20a/0x5d0 [ 156.610909][ T56] ieee80211_tx_h_rate_ctrl+0xc62/0x19e0 [ 156.616563][ T56] ? ieee80211_tx_h_select_key+0x16a0/0x16a0 [ 156.622558][ T56] ? ieee80211_queue_skb+0xd0/0x2300 [ 156.627850][ T56] invoke_tx_handlers_late+0xb2/0x1910 [ 156.633316][ T56] ? ieee80211_tx_h_select_key+0x1177/0x16a0 [ 156.639310][ T56] ? invoke_tx_handlers_early+0xa0d/0x1d30 [ 156.645131][ T56] ieee80211_tx+0x2df/0x460 [ 156.649641][ T56] ? ieee80211_skb_resize+0x640/0x640 [ 156.655031][ T56] ? ieee80211_xmit+0x307/0x3e0 [ 156.659889][ T56] ? __ieee80211_tx_skb_tid_band+0x49a/0x610 [ 156.665871][ T56] __ieee80211_tx_skb_tid_band+0x4de/0x610 [ 156.671689][ T56] ? ieee80211_scan_state_send_probe+0x4b6/0x920 [ 156.678042][ T56] ieee80211_scan_state_send_probe+0x575/0x920 [ 156.684210][ T56] ieee80211_scan_work+0x612/0x1d70 [ 156.689437][ T56] ? ieee80211_can_scan+0x200/0x200 [ 156.694644][ T56] ? do_raw_spin_unlock+0x137/0x8a0 [ 156.699842][ T56] ? _raw_spin_unlock_irq+0x1f/0x40 [ 156.705057][ T56] ? lockdep_hardirqs_on+0x94/0x130 [ 156.710260][ T56] cfg80211_wiphy_work+0x21a/0x250 [ 156.715377][ T56] ? process_one_work+0x7a9/0x11d0 [ 156.720498][ T56] process_one_work+0x8a9/0x11d0 [ 156.725460][ T56] ? worker_detach_from_pool+0x260/0x260 [ 156.731100][ T56] ? _raw_spin_lock_irqsave+0x120/0x120 [ 156.736651][ T56] ? kthread_data+0x4e/0xc0 [ 156.741165][ T56] ? wq_worker_running+0x97/0x190 [ 156.746190][ T56] worker_thread+0xa47/0x1200 [ 156.750876][ T56] ? _raw_spin_unlock+0x40/0x40 [ 156.755742][ T56] kthread+0x28d/0x320 [ 156.759811][ T56] ? worker_clr_flags+0x190/0x190 [ 156.764837][ T56] ? kthread_blkcg+0xd0/0xd0 [ 156.769427][ T56] ret_from_fork+0x1f/0x30 [ 156.773859][ T56] [ 156.777219][ T56] Kernel Offset: disabled [ 156.781642][ T56] Rebooting in 86400 seconds..