last executing test programs: 31.651795081s ago: executing program 4 (id=512): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) memfd_secret(0x0) 31.523730641s ago: executing program 4 (id=515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 31.357609155s ago: executing program 4 (id=517): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)=0x8000) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x6, [0xff, 0x8, 0x8, 0x7fff, 0x5, 0x800, 0x7, 0xfffa, 0xfc01, 0x1, 0x2, 0x10, 0x400, 0xa, 0x8, 0x2, 0x7, 0x8, 0x7f, 0x0, 0x4, 0x3, 0x97, 0x457f, 0x2, 0x5, 0x81, 0x1, 0x4, 0x8544, 0xb, 0x5, 0x6, 0x7685, 0x98bd, 0x0, 0x8000, 0x8, 0x5, 0x2, 0x0, 0x5, 0xe9da, 0xf, 0x8, 0x6, 0x0, 0x8], 0x6}) 31.185808999s ago: executing program 4 (id=520): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1d4) getdents64(r0, 0xfffffffffffffffe, 0xffffffffffffff15) 30.702557707s ago: executing program 4 (id=526): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b0efc268cbd67279c5e0f19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a1c6261571866a21a54d762495480"], 0xf, 0x2a4, &(0x7f0000000480)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x44042, 0xd5) ftruncate(r0, 0x2007ffc) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000280)={0x9f, 0x3, 0x101, "d985bf43e21d4c2b3fd4ae004e237e04bac5953fdac624a23e111d10fdfaae216261142735fd00e45460e99929d0ca257c7a0b026947b22494c5a187b5f22b53e508103d51d02e575ac26e2526202140ffffff2d07000000cd9458bd010166ced797ea32fc300eaee5dbf7606c6fc1dc2f12d4e99e18c3f377500dd7a2c16a2c3f29e4b3aa6496ce6f86bb6e1fea5cc861580a56508fe9be44239567030000"}) 30.060091878s ago: executing program 4 (id=537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x50bd2a, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x240400a1}, 0x0) 29.870807903s ago: executing program 32 (id=537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x50bd2a, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x240400a1}, 0x0) 2.6305413s ago: executing program 1 (id=846): r0 = semget$private(0x0, 0x6, 0x3b1) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{}, {}], 0x2) semctl$GETVAL(r0, 0x0, 0xc, 0x0) 1.845588703s ago: executing program 5 (id=858): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005000027"], 0x4c}}, 0x4040810) 1.75424002s ago: executing program 5 (id=860): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 1.704640024s ago: executing program 1 (id=862): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x105042, 0x62) write$FUSE_DIRENTPLUS(r0, 0x0, 0x4000) 1.614635251s ago: executing program 2 (id=863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x505}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x80}]}, 0x44}}, 0x0) 1.612819761s ago: executing program 1 (id=864): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 1.519978839s ago: executing program 5 (id=865): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x8, 0x0, 0x0, 0x0, 0x0) 1.453018704s ago: executing program 2 (id=867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x40885}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008881}, 0x4040040) 1.432668895s ago: executing program 1 (id=868): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x14, r1, 0x60b}, 0x14}}, 0x0) 1.332343704s ago: executing program 1 (id=869): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000f00)={0x54, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x74e, 0x19}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x716}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x4) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x0, 0xc8, &(0x7f0000000700)="72c310ee3e73920d0dc3052d4ce181d032ecb02f301f57edab0edfadfeaea2dd697482893bd57292506e26d6633bb1b8806cce7544bbf1a5ead965eb492c8a669161dc927bce5be99deb47fd94fcf3112245ebbb4748baabf645ad4c18dbdace305ef2eedda0c9dc19e19da3ab7e7fc1d855f378e47f6618b7fd699daa0b552e1196c028d1431886d6ca137ecf2a6f26e1e5cfe12ab679c541c51252d8ea5edc670b5f37f59441175991adbe6bf68634d165df24576d7eaefc6de1cd5055e8fca8f57f1d815c9eee"}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 1.330368824s ago: executing program 5 (id=870): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xfffffffc}) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.223011622s ago: executing program 1 (id=871): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xf0, 0x9f, 0xa3, 0x10, 0xb95, 0x1720, 0x23b4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe1, 0x6, 0x0, 0x7c, 0xbe, 0x9d}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) 1.197168265s ago: executing program 2 (id=872): mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x1, 0x80000000001}) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x1}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r0, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 1.141016779s ago: executing program 3 (id=873): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e20, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), 0x4) getsockname$unix(r0, 0x0, &(0x7f0000000180)) 1.13479791s ago: executing program 2 (id=874): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file2\x00', 0x1c802, &(0x7f0000000100)=ANY=[], 0x1, 0x5ea7, &(0x7f00000085c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000240)=""/85, 0x55) getdents(r0, 0xfffffffffffffffd, 0x58) 1.081943994s ago: executing program 5 (id=875): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) 1.042529567s ago: executing program 3 (id=876): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") mknod$loop(&(0x7f0000000780)='./bus\x00', 0x2000, 0x1) creat(&(0x7f000000eec0)='./bus\x00', 0x154) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x0) 955.737974ms ago: executing program 5 (id=877): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x0, 0x16, 0xea, "1950f08cb0c0e92477c85143d0faf962a39aadc7917b240dd3abb1df295a55d5fb6e879bf1f7a3b6f3afb4590c21290c772f888306e160dd48109402e1cd432e9642200d63b53a01d1a0bc9fe5140ccdf5662c2f4e05b94d69a27478d9033cc5c28540486c188ed6611fd0b6396b5b6753fbcf66be0504f0eb96c708f1969f510a953a596bd1881c67b1ca60ac1318299cb929e4788662825877cb7dd3c1f8c5ad4653b991ab86eacb46517d1ebfc17e5d01c8fa70217a90745efc6655b08cb369a8e711439b86f07cd8aaae8973608023c74860cf5e6ee1e03dde6d34d977f882e59999689cda5cfc78"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9c}, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x400, 0x81, 0x9, 0xfe00, 0x100, 0x6, 0x8001, 0x0, 0x7, 0x6, 0xaf, 0x7ff}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x142a}, &(0x7f0000000440)={0x20, 0x89, 0x2, 0x1}}) 712.556063ms ago: executing program 3 (id=879): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000224e0000", 0x58}], 0x1) setuid(0xee01) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000002440)=""/4102, 0x1006}], 0x1) 674.126656ms ago: executing program 0 (id=880): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2b, &(0x7f0000000040)) 627.4465ms ago: executing program 0 (id=881): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='sessionid\x00') r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) fcntl$notify(r1, 0x402, 0x20) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/152, 0x98}], 0x1, 0x8, 0x1) 545.334277ms ago: executing program 0 (id=882): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x7, 0x8e}, 0x0) pipe(&(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 497.67669ms ago: executing program 3 (id=883): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x9801) fchdir(r0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 433.671836ms ago: executing program 0 (id=884): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x8, 0x1, 0x8, 0x0, 0x1000, 0xa, 0x7, 0xf3, 0x9, 0x9, 0x8, 0x0, 0x0, 0x6, 0x10, 0x28, 0x9, 0x7f, 0x9f, '\x00', 0x6b}) 363.696861ms ago: executing program 3 (id=885): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4b, 0x2, {{0x0, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x8, 0x80000001, 0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 327.455984ms ago: executing program 0 (id=886): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c0002000000000000000000100007800c"], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 250.05697ms ago: executing program 2 (id=887): r0 = syz_io_uring_setup(0x5914, &(0x7f0000000440)={0x0, 0x0, 0x800, 0x0, 0x2f6}, &(0x7f0000000280)=0x0, &(0x7f0000000500)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x9, &(0x7f0000000000)=[r0], 0x1, 0x0, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x18ec, 0xfd9d, 0x1, 0x0, 0x0) 211.882353ms ago: executing program 3 (id=888): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x100000001, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239f2000000000000000000000000000000000000000000001500", "0100"}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c09, r0) 71.115805ms ago: executing program 0 (id=889): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000000e00)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d", @ANYRES32=0x0], 0xff, 0xc2d, &(0x7f00000001c0)="$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") accept4$alg(r0, 0x0, 0x0, 0x80000) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r0], 0x0) 0s ago: executing program 2 (id=890): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) kernel console output (not intermixed with test programs): im1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.211215][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.221983][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.230743][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.259764][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.285611][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.296862][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.307639][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.317723][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.328561][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.340094][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.352475][ T4228] Bluetooth: hci0: command 0x040f tx timeout [ 59.363226][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.371264][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.396567][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 59.411042][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.426024][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.435474][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 59.447273][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 59.455225][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.488462][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.499914][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.523298][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 59.534641][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.545590][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.558272][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.568748][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.578711][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.589809][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.602426][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.624950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.635306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.654010][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.665247][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.679414][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.701503][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.712149][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.722885][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.733596][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.744972][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.756273][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.766923][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.779505][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.789849][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.800660][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.810596][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.821275][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.831418][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.844117][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.855867][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.869624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.878363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.887943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.896963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.908485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.926157][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.942405][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.951330][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.961288][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.983552][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.004930][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.019899][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.028933][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.171020][ T525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.224647][ T525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.248018][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.265003][ T525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.271475][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.304788][ T525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.329597][ T525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.346373][ T525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.366439][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.374374][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.374415][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.375598][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.413080][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.419866][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.437759][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.507344][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.540534][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.573846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.739359][ T4322] capability: warning: `syz.3.4' uses 32-bit capabilities (legacy support in use) [ 60.960159][ T4339] loop3: detected capacity change from 0 to 1024 [ 61.063085][ T4340] Falling back ldisc for ttyS3. [ 61.406373][ T4363] loop3: detected capacity change from 0 to 512 [ 61.440111][ T4363] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 61.444270][ T4242] Bluetooth: hci1: command 0x0419 tx timeout [ 61.459544][ T4363] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.512312][ T4363] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 61.532330][ T4363] EXT4-fs (loop3): 1 truncate cleaned up [ 61.538205][ T4242] Bluetooth: hci0: command 0x0419 tx timeout [ 61.549349][ T4363] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 61.599665][ T4242] Bluetooth: hci2: command 0x0419 tx timeout [ 61.631947][ T4242] Bluetooth: hci3: command 0x0419 tx timeout [ 61.659587][ T4192] Bluetooth: hci4: command 0x0419 tx timeout [ 61.945782][ T4386] nbd0: detected capacity change from 0 to 549764202496 [ 61.967409][ T4189] block nbd0: Receive control failed (result -104) [ 62.107149][ T4395] loop2: detected capacity change from 0 to 256 [ 62.166607][ T4395] ======================================================= [ 62.166607][ T4395] WARNING: The mand mount option has been deprecated and [ 62.166607][ T4395] and is ignored by this kernel. Remove the mand [ 62.166607][ T4395] option from the mount to silence this warning. [ 62.166607][ T4395] ======================================================= [ 62.210683][ T4395] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.230700][ T4395] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 62.273354][ T4233] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 62.308563][ T4395] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 62.537913][ T4408] loop0: detected capacity change from 0 to 4096 [ 62.651456][ T4408] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 62.692030][ T4233] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.713757][ T4233] usb 2-1: config 0 has no interfaces? [ 62.726734][ T4385] loop4: detected capacity change from 0 to 32768 [ 62.730788][ T4233] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 62.791799][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.804004][ T4385] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.32 (4385) [ 62.844385][ T4233] usb 2-1: config 0 descriptor?? [ 62.890397][ T4428] loop2: detected capacity change from 0 to 256 [ 62.972305][ T4385] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 62.991480][ T4428] FAT-fs (loop2): Directory bread(block 64) failed [ 62.994772][ T4385] BTRFS info (device loop4): using free space tree [ 63.027018][ T4428] FAT-fs (loop2): Directory bread(block 65) failed [ 63.029703][ T4385] BTRFS info (device loop4): has skinny extents [ 63.068515][ T4428] FAT-fs (loop2): Directory bread(block 66) failed [ 63.107048][ T4428] FAT-fs (loop2): Directory bread(block 67) failed [ 63.135973][ T4428] FAT-fs (loop2): Directory bread(block 68) failed [ 63.149321][ T4173] usb 2-1: USB disconnect, device number 2 [ 63.171342][ T4428] FAT-fs (loop2): Directory bread(block 69) failed [ 63.222738][ T4428] FAT-fs (loop2): Directory bread(block 70) failed [ 63.229417][ T4428] FAT-fs (loop2): Directory bread(block 71) failed [ 63.264965][ T4428] FAT-fs (loop2): Directory bread(block 72) failed [ 63.281860][ T4428] FAT-fs (loop2): Directory bread(block 73) failed [ 63.461053][ T4431] loop3: detected capacity change from 0 to 40427 [ 63.486923][ T4385] BTRFS info (device loop4): enabling ssd optimizations [ 63.584173][ T4431] F2FS-fs (loop3): Found nat_bits in checkpoint [ 63.668470][ T4385] BTRFS warning (device loop4): this kernel does not support the compat_ro:59 feature bit [ 63.709258][ T4431] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 63.804100][ T4431] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 64.072881][ T4465] loop2: detected capacity change from 0 to 8192 [ 64.080191][ T4431] attempt to access beyond end of device [ 64.080191][ T4431] loop3: rw=10241, want=45104, limit=40427 [ 64.114488][ T4465] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 64.154174][ T4465] REISERFS (device loop2): using ordered data mode [ 64.160823][ T4465] reiserfs: using flush barriers [ 64.199318][ T4465] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 64.223381][ T4465] REISERFS (device loop2): checking transaction log (loop2) [ 64.264732][ T4193] attempt to access beyond end of device [ 64.264732][ T4193] loop3: rw=2049, want=45112, limit=40427 [ 64.318084][ T4483] loop0: detected capacity change from 0 to 2048 [ 64.445276][ T4465] REISERFS (device loop2): Using tea hash to sort names [ 64.492405][ T4465] REISERFS warning (device loop2): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 64.555955][ T4465] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 64.620735][ T4487] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.780064][ T4492] netlink: 1 bytes leftover after parsing attributes in process `syz.4.59'. [ 64.869152][ T4477] loop1: detected capacity change from 0 to 32768 [ 65.089012][ T4477] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 65.212062][ T4481] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.290650][ T4511] loop3: detected capacity change from 0 to 65 [ 65.314978][ T4477] syz.1.55 (4477) used greatest stack depth: 21152 bytes left [ 65.357545][ T4511] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 65.376581][ T4182] ocfs2: Unmounting device (7,1) on (node local) [ 65.564326][ T4521] loop4: detected capacity change from 0 to 128 [ 65.651928][ T4481] usb 1-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 65.665979][ T4481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.677120][ T4529] program syz.2.75 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.679775][ T4528] loop3: detected capacity change from 0 to 1024 [ 65.704685][ T4481] usb 1-1: config 0 descriptor?? [ 65.786996][ T4528] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.909447][ T4538] loop2: detected capacity change from 0 to 256 [ 65.919503][ T4528] EXT4-fs warning (device loop3): empty_inline_dir:1844: bad inline directory (dir #12) - no `..' [ 65.978616][ T4539] loop4: detected capacity change from 0 to 2048 [ 66.005743][ T4538] FAT-fs (loop2): Directory bread(block 64) failed [ 66.019027][ T4538] FAT-fs (loop2): Directory bread(block 65) failed [ 66.026415][ T4538] FAT-fs (loop2): Directory bread(block 66) failed [ 66.044042][ T4538] FAT-fs (loop2): Directory bread(block 67) failed [ 66.050751][ T4538] FAT-fs (loop2): Directory bread(block 68) failed [ 66.069220][ T4538] FAT-fs (loop2): Directory bread(block 69) failed [ 66.089132][ T4538] FAT-fs (loop2): Directory bread(block 70) failed [ 66.102789][ T4539] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 66.107782][ T4538] FAT-fs (loop2): Directory bread(block 71) failed [ 66.141193][ T4538] FAT-fs (loop2): Directory bread(block 72) failed [ 66.147992][ T4538] FAT-fs (loop2): Directory bread(block 73) failed [ 66.171181][ T4543] sp0: Synchronizing with TNC [ 66.188689][ T4481] wacom 0003:056A:00B2.0001: unknown main item tag 0x0 [ 66.218169][ T4481] wacom 0003:056A:00B2.0001: unknown main item tag 0x0 [ 66.278599][ T4481] wacom 0003:056A:00B2.0001: unknown main item tag 0x0 [ 66.297828][ T4481] wacom 0003:056A:00B2.0001: unknown main item tag 0x0 [ 66.311385][ T4481] wacom 0003:056A:00B2.0001: Unknown device_type for 'HID 056a:00b2'. Assuming pen. [ 66.330004][ T4481] wacom 0003:056A:00B2.0001: hidraw0: USB HID v1.01 Device [HID 056a:00b2] on usb-dummy_hcd.0-1/input0 [ 66.344769][ T4481] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B2.0001/input/input5 [ 66.372174][ T1216] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 66.395561][ T1216] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 66.408064][ T4543] Falling back ldisc for ptm0. [ 66.413305][ T1216] EXT4-fs (loop4): This should not happen!! Data will be lost [ 66.413305][ T1216] [ 66.431883][ T1216] EXT4-fs (loop4): Total free blocks count 0 [ 66.443088][ T1216] EXT4-fs (loop4): Free/Dirty block details [ 66.449278][ T1216] EXT4-fs (loop4): free_blocks=66060288 [ 66.464487][ T4481] usb 1-1: USB disconnect, device number 2 [ 66.482513][ T1216] EXT4-fs (loop4): dirty_blocks=64 [ 66.515372][ T1216] EXT4-fs (loop4): Block reservation details [ 66.546839][ T1216] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 66.556502][ T1216] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 66.613033][ T1216] EXT4-fs (loop4): This should not happen!! Data will be lost [ 66.613033][ T1216] [ 66.671975][ T4242] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 66.686891][ T4550] fido_id[4550]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 66.795152][ T4560] cgroup: fork rejected by pids controller in /syz4 [ 66.909052][ T4563] loop2: detected capacity change from 0 to 8192 [ 66.927750][ T4563] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 66.938357][ T4563] REISERFS (device loop2): using ordered data mode [ 66.945136][ T4563] reiserfs: using flush barriers [ 66.956208][ T4563] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 66.975968][ T4563] REISERFS (device loop2): checking transaction log (loop2) [ 67.000791][ T4563] REISERFS (device loop2): Using r5 hash to sort names [ 67.018648][ T4563] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 67.034405][ T4563] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 67.044948][ T4242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 67.081259][ T4242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.108654][ T4242] usb 2-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 67.121841][ T4173] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.141567][ T4242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.158621][ T4242] usb 2-1: config 0 descriptor?? [ 67.361554][ T525] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.428604][ T4577] kvm [4576]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x40000006 [ 67.476222][ T525] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.482151][ T4173] usb 4-1: config 0 has no interfaces? [ 67.517414][ T4173] usb 4-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 67.536851][ T4173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.550228][ T4173] usb 4-1: config 0 descriptor?? [ 67.569760][ T525] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.634390][ T4584] capability: warning: `syz.0.96' uses deprecated v2 capabilities in a way that may be insecure [ 67.644590][ T4242] acrux 0003:1A34:F705.0002: item fetching failed at offset 5/7 [ 67.659511][ T4242] acrux 0003:1A34:F705.0002: parse failed [ 67.665816][ T4242] acrux: probe of 0003:1A34:F705.0002 failed with error -22 [ 67.687527][ T525] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.750265][ T4584] loop0: detected capacity change from 0 to 512 [ 67.864166][ T4480] usb 2-1: USB disconnect, device number 3 [ 67.872870][ T4242] usb 4-1: USB disconnect, device number 2 [ 67.930706][ T4584] EXT4-fs (loop0): Test dummy encryption mode enabled [ 67.940327][ T4584] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #12: comm syz.0.96: corrupted in-inode xattr [ 67.943777][ T4591] loop2: detected capacity change from 0 to 64 [ 67.959150][ T4584] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.96: couldn't read orphan inode 12 (err -117) [ 67.982355][ T4584] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x000000000000a0c0,noload,test_dummy_encryption,barrier=0x0000000000000001,,errors=continue. Quota mode: none. [ 68.197952][ T4579] chnl_net:caif_netlink_parms(): no params data found [ 68.374122][ T4606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 68.639823][ T4579] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.679487][ T4579] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.722954][ T4579] device bridge_slave_0 entered promiscuous mode [ 68.836760][ T4634] loop3: detected capacity change from 0 to 64 [ 68.859696][ T4579] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.878861][ T4579] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.901217][ T4579] device bridge_slave_1 entered promiscuous mode [ 68.973253][ T4631] tap0: tun_chr_ioctl cmd 1074025677 [ 68.979655][ T4631] tap0: linktype set to 270 [ 69.052993][ T4579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.130336][ T4579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.285958][ T4579] team0: Port device team_slave_0 added [ 69.374236][ T4579] team0: Port device team_slave_1 added [ 69.538830][ T4579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.573346][ T4579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.586293][ T4656] input: syz1 as /devices/virtual/input/input8 [ 69.672096][ T4173] Bluetooth: hci1: command 0x0409 tx timeout [ 69.689228][ T4579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.868949][ T4579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.876340][ T4669] loop0: detected capacity change from 0 to 128 [ 69.919303][ T4643] loop1: detected capacity change from 0 to 32768 [ 69.942064][ T4579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.028995][ T4579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.157299][ T4643] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 70.157299][ T4643] [ 70.222033][ T4643] ERROR: (device loop1): remounting filesystem as read-only [ 70.266196][ T4579] device hsr_slave_0 entered promiscuous mode [ 70.289994][ T4579] device hsr_slave_1 entered promiscuous mode [ 70.354671][ T4579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.393721][ T4579] Cannot create hsr debugfs directory [ 70.447703][ T4683] loop1: detected capacity change from 0 to 512 [ 70.556667][ T525] device hsr_slave_0 left promiscuous mode [ 70.569670][ T525] device hsr_slave_1 left promiscuous mode [ 70.577022][ T4683] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 70.588335][ T525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.608355][ T525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.634618][ T525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.657638][ T525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.691080][ T525] device bridge_slave_1 left promiscuous mode [ 70.710007][ T4683] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,inode_readahead_blks=0x0000000000000800,discard,,errors=continue. Quota mode: writeback. [ 70.717114][ T525] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.739399][ T4683] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.839406][ T4674] loop2: detected capacity change from 0 to 32768 [ 70.862204][ T525] device bridge_slave_0 left promiscuous mode [ 70.869766][ T525] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.906708][ T525] device veth1_macvtap left promiscuous mode [ 70.919319][ T525] device veth0_macvtap left promiscuous mode [ 70.926565][ T525] device veth1_vlan left promiscuous mode [ 70.934558][ T525] device veth0_vlan left promiscuous mode [ 71.031246][ T4674] XFS (loop2): Mounting V5 Filesystem [ 71.141526][ T4674] XFS (loop2): Ending clean mount [ 71.230725][ T4674] syz.2.119 (4674) used greatest stack depth: 21056 bytes left [ 71.332078][ T4190] XFS (loop2): Unmounting Filesystem [ 71.356472][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.357116][ T4480] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 71.363272][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.558607][ T4715] loop1: detected capacity change from 0 to 256 [ 71.652489][ T4480] usb 4-1: Using ep0 maxpacket: 32 [ 71.675620][ T4715] FAT-fs (loop1): Directory bread(block 64) failed [ 71.692310][ T4715] FAT-fs (loop1): Directory bread(block 65) failed [ 71.709534][ T4715] FAT-fs (loop1): Directory bread(block 66) failed [ 71.735424][ T4715] FAT-fs (loop1): Directory bread(block 67) failed [ 71.752175][ T4173] Bluetooth: hci1: command 0x041b tx timeout [ 71.759181][ T4715] FAT-fs (loop1): Directory bread(block 68) failed [ 71.768760][ T4715] FAT-fs (loop1): Directory bread(block 69) failed [ 71.789111][ T4715] FAT-fs (loop1): Directory bread(block 70) failed [ 71.796008][ T4480] usb 4-1: config 0 has no interfaces? [ 71.807067][ T4715] FAT-fs (loop1): Directory bread(block 71) failed [ 71.828155][ T4715] FAT-fs (loop1): Directory bread(block 72) failed [ 71.841940][ T4715] FAT-fs (loop1): Directory bread(block 73) failed [ 71.880719][ T525] team0 (unregistering): Port device team_slave_1 removed [ 71.929786][ T525] team0 (unregistering): Port device team_slave_0 removed [ 71.972081][ T525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.995743][ T4480] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 72.006631][ T525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.012047][ T4480] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.023959][ T4480] usb 4-1: Product: syz [ 72.028134][ T4480] usb 4-1: Manufacturer: syz [ 72.041791][ T4480] usb 4-1: SerialNumber: syz [ 72.081443][ T4480] usb 4-1: config 0 descriptor?? [ 72.117696][ T4713] loop0: detected capacity change from 0 to 32768 [ 72.189895][ T26] audit: type=1800 audit(1754668381.710:2): pid=4713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.130" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 72.237367][ T4713] ERROR: (device loop0): dbAllocBits: leaf page corrupt [ 72.237367][ T4713] [ 72.251355][ T4713] ERROR: (device loop0): remounting filesystem as read-only [ 72.267746][ T4713] attempt to access beyond end of device [ 72.267746][ T4713] loop0: rw=34817, want=4681496, limit=32768 [ 72.285780][ T4713] blkno = 8ed80, nblocks = 63 [ 72.290821][ T4713] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 72.290821][ T4713] [ 72.357284][ T525] bond0 (unregistering): Released all slaves [ 72.384046][ T4481] usb 4-1: USB disconnect, device number 3 [ 72.431568][ T4729] loop1: detected capacity change from 0 to 256 [ 72.490904][ T4729] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 72.520061][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.132'. [ 72.553012][ T4720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'. [ 72.857333][ T4736] loop0: detected capacity change from 0 to 1024 [ 72.891030][ T4741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 73.328334][ T4748] loop1: detected capacity change from 0 to 8192 [ 73.563344][ T4579] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.631323][ T4579] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.754619][ T4579] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.819693][ T4579] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.837218][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 73.904402][ T4791] loop3: detected capacity change from 0 to 128 [ 74.013957][ T4791] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 74.033407][ T4801] loop1: detected capacity change from 0 to 2048 [ 74.082130][ T4791] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.117439][ T4801] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 74.224821][ T4801] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,mblk_io_submit,nolazytime,bsddf,,errors=continue. Quota mode: none. [ 74.241947][ T4173] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 74.254780][ T4579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.291041][ T4801] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.341629][ T4811] netlink: 165 bytes leftover after parsing attributes in process `syz.2.161'. [ 74.363801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.373747][ T26] audit: type=1800 audit(1754668383.900:3): pid=4801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.159" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 74.400868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.423318][ T4579] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.462388][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.481478][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.501909][ T4173] usb 1-1: Using ep0 maxpacket: 32 [ 74.527728][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.534975][ T4266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.622067][ T4173] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 74.631156][ T4173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.631483][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.691361][ T4173] usb 1-1: config 0 descriptor?? [ 74.706576][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.750127][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.773735][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.780976][ T4266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.818821][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.855545][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.936597][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.957512][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.972154][ T4173] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 74.995345][ T4173] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 75.002575][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.032565][ T4173] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 75.043226][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.043719][ T4173] usb 1-1: media controller created [ 75.061131][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.090243][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.110707][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.128224][ T4173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 75.139830][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.167711][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.206916][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.235324][ T4173] az6027: usb out operation failed. (-71) [ 75.282083][ T4173] az6027: usb out operation failed. (-71) [ 75.288291][ T4173] stb0899_attach: Driver disabled by Kconfig [ 75.318323][ T4173] az6027: no front-end attached [ 75.318323][ T4173] [ 75.353481][ T4173] az6027: usb out operation failed. (-71) [ 75.364927][ T4173] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 75.412768][ T4173] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 75.473440][ T4173] dvb-usb: schedule remote query interval to 400 msecs. [ 75.503329][ T4173] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 75.504363][ T4861] device dummy0 entered promiscuous mode [ 75.553006][ T4173] usb 1-1: USB disconnect, device number 3 [ 75.761180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.769947][ T4173] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 75.797800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.840347][ T4579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.912499][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 75.971999][ T4192] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 76.030376][ T4885] loop0: detected capacity change from 0 to 65 [ 76.085843][ T4885] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 76.221830][ T4192] usb 2-1: Using ep0 maxpacket: 8 [ 76.342941][ T4192] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.361401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.377415][ T4192] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 76.418943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.444205][ T4192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.473006][ T4899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'. [ 76.486824][ T23] cfg80211: failed to load regulatory.db [ 76.517206][ T4192] usb 2-1: config 0 descriptor?? [ 76.583761][ T4192] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 76.583917][ T4897] loop3: detected capacity change from 0 to 4096 [ 76.610084][ T4579] device veth0_vlan entered promiscuous mode [ 76.645937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.667320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.707783][ T4579] device veth1_vlan entered promiscuous mode [ 76.728526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.752457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.790182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.829059][ T4897] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 76.838726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.875911][ T4579] device veth0_macvtap entered promiscuous mode [ 76.908215][ T4579] device veth1_macvtap entered promiscuous mode [ 76.951913][ T4242] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 76.980462][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.021776][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.056929][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.075642][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.107157][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.140472][ T4919] loop2: detected capacity change from 0 to 1024 [ 77.156829][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.207177][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.217943][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.246852][ T4579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.277575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.308228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.320569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.337147][ T4242] usb 1-1: config index 0 descriptor too short (expected 539, got 27) [ 77.354018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.361947][ T4242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 77.409123][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.454167][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.462105][ T4192] gspca_vc032x: reg_w err -71 [ 77.469007][ T4192] vc032x: probe of 2-1:0.0 failed with error -71 [ 77.479645][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.491010][ T4192] usb 2-1: USB disconnect, device number 4 [ 77.523420][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.533576][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.552080][ T4242] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 77.557360][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.561361][ T4242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.586201][ T4579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.590696][ T4242] usb 1-1: Product: syz [ 77.601018][ T4242] usb 1-1: Manufacturer: syz [ 77.605939][ T4242] usb 1-1: SerialNumber: syz [ 77.606918][ T4579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.621038][ T4242] usb 1-1: config 0 descriptor?? [ 77.649249][ T4579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.662549][ T4242] hub 1-1:0.0: bad descriptor, ignoring hub [ 77.671721][ T4579] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.673860][ T4242] hub: probe of 1-1:0.0 failed with error -5 [ 77.688379][ T4242] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 77.691078][ T4579] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.703751][ T4242] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 77.717056][ T4579] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.732414][ T4579] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.747793][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.774153][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.785280][ T4242] usbtouchscreen: probe of 1-1:0.0 failed with error -8 [ 78.095515][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.122706][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.135741][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.154932][ T4944] loop2: detected capacity change from 0 to 1024 [ 78.226181][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.242898][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.294796][ T4944] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.307284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.322476][ T21] usb 1-1: USB disconnect, device number 4 [ 78.650585][ T4969] binder: 4968:4969 ioctl 400c620e 0 returned -14 [ 78.767267][ T4973] loop3: detected capacity change from 0 to 1024 [ 78.951016][ T4973] hfsplus: xattr searching failed [ 78.992320][ T4987] hfsplus: xattr searching failed [ 79.108268][ T4996] loop1: detected capacity change from 0 to 256 [ 79.116082][ T4716] hfsplus: b-tree write err: -5, ino 3 [ 79.245014][ T4996] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 79.304253][ T5010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.220'. [ 79.332742][ T5009] netlink: 'syz.3.219': attribute type 11 has an invalid length. [ 79.657376][ T5027] loop1: detected capacity change from 0 to 512 [ 79.713265][ T5031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.229'. [ 79.757330][ T5027] EXT4-fs (loop1): Test dummy encryption mode enabled [ 79.796583][ T5027] EXT4-fs error (device loop1): __ext4_iget:4894: inode #11: block 1: comm syz.1.227: invalid block [ 79.828790][ T5031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.229'. [ 79.856784][ T5031] bridge0: port 3(vlan2) entered blocking state [ 79.863621][ T5031] bridge0: port 3(vlan2) entered disabled state [ 79.916645][ T5027] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.227: couldn't read orphan inode 11 (err -117) [ 79.989004][ T5027] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,dioread_lock,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,jqfmt=vfsold,debug_want_extra_isize=0x0000000000000004,test_dummy_encryption,,errors=continue. Quota mode: none. [ 80.303171][ T5027] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.227: Directory hole found for htree leaf block 0 [ 80.761750][ C0] sched: RT throttling activated [ 81.268487][ T5062] Zero length message leads to an empty skb [ 81.319222][ T5036] loop4: detected capacity change from 0 to 262144 [ 81.358458][ T5066] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.416844][ T5070] loop1: detected capacity change from 0 to 1024 [ 81.428606][ T5074] loop3: detected capacity change from 0 to 64 [ 81.448546][ T5036] F2FS-fs (loop4): invalid crc value [ 81.461473][ T5036] F2FS-fs (loop4): Found nat_bits in checkpoint [ 81.504508][ T5036] F2FS-fs (loop4): Start checkpoint disabled! [ 81.525854][ T5036] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 81.532431][ T5070] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.561932][ T5070] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.604222][ T5081] process 'syz.2.249' launched './file0' with NULL argv: empty string added [ 81.701946][ T5084] loop2: detected capacity change from 0 to 256 [ 81.809121][ T5084] FAT-fs (loop2): Directory bread(block 64) failed [ 81.837000][ T5084] FAT-fs (loop2): Directory bread(block 65) failed [ 81.857467][ T5084] FAT-fs (loop2): Directory bread(block 66) failed [ 81.873117][ T5084] FAT-fs (loop2): Directory bread(block 67) failed [ 81.931945][ T5084] FAT-fs (loop2): Directory bread(block 68) failed [ 81.941516][ T5084] FAT-fs (loop2): Directory bread(block 69) failed [ 81.957897][ T5084] FAT-fs (loop2): Directory bread(block 70) failed [ 82.013943][ T5084] FAT-fs (loop2): Directory bread(block 71) failed [ 82.076651][ T5084] FAT-fs (loop2): Directory bread(block 72) failed [ 82.131975][ T5084] FAT-fs (loop2): Directory bread(block 73) failed [ 82.243834][ T5092] loop1: detected capacity change from 0 to 512 [ 82.455228][ T5097] loop0: detected capacity change from 0 to 512 [ 82.464543][ T5092] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.495132][ T5092] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.553770][ T5097] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.671872][ T5097] EXT4-fs (loop0): 1 orphan inode deleted [ 82.682561][ T26] audit: type=1800 audit(1754668392.210:4): pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.254" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 82.702890][ T5097] EXT4-fs (loop0): 1 truncate cleaned up [ 82.702917][ T5097] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,jqfmt=vfsold,noload,data_err=ignore,init_itable,debug_want_extra_isize=0x0000000000000006. Quota mode: none. [ 82.739934][ T26] audit: type=1800 audit(1754668392.210:5): pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.254" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 82.794887][ T5097] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.257: iget: bad extra_isize 46 (inode size 256) [ 82.858104][ T5107] loop2: detected capacity change from 0 to 256 [ 82.884410][ T5097] EXT4-fs (loop0): Remounting filesystem read-only [ 82.939056][ T5107] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.971831][ T5107] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 83.040407][ T5107] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 83.448644][ T5126] loop0: detected capacity change from 0 to 2048 [ 83.511442][ T5128] loop2: detected capacity change from 0 to 1024 [ 83.533523][ T5126] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.600851][ T5128] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 83.650026][ T5130] Â: renamed from pim6reg1 [ 83.651949][ T5128] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 83.716887][ T5111] loop1: detected capacity change from 0 to 32768 [ 83.725277][ T5128] JBD2: no valid journal superblock found [ 83.731467][ T5128] EXT4-fs (loop2): error loading journal [ 83.760461][ T5132] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.082202][ T5142] loop1: detected capacity change from 0 to 512 [ 84.138232][ T5142] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 84.179340][ T5142] EXT4-fs (loop1): invalid journal inode [ 84.212015][ T5142] EXT4-fs (loop1): can't get journal size [ 84.291466][ T5142] EXT4-fs (loop1): 1 truncate cleaned up [ 84.317689][ T5142] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 84.369023][ T5134] loop3: detected capacity change from 0 to 32768 [ 84.479827][ T5134] jfs_rename did not expect dtDelete to return rc = -2 [ 84.508419][ T5134] ERROR: (device loop3): jfs_rename: [ 84.508419][ T5134] [ 84.561999][ T4480] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 84.940148][ T5177] loop4: detected capacity change from 0 to 764 [ 84.992036][ T5182] loop2: detected capacity change from 0 to 256 [ 85.022111][ T4480] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 85.047638][ T4480] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 85.050856][ T5182] FAT-fs (loop2): bogus logical sector size 0 [ 85.062286][ T4480] usb 1-1: config 0 interface 0 has no altsetting 0 [ 85.071488][ T4480] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 85.081042][ T4480] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.114389][ T4480] usb 1-1: config 0 descriptor?? [ 85.138964][ T5182] FAT-fs (loop2): Can't find a valid FAT filesystem [ 85.158047][ T5152] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 85.251183][ T5189] loop1: detected capacity change from 0 to 64 [ 85.463166][ T4182] hfs: node 4:3 still has 2 user(s)! [ 85.603696][ T5183] loop3: detected capacity change from 0 to 32768 [ 85.647889][ T4480] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 85.681908][ T4480] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 85.706818][ T4480] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 85.727440][ T4480] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 85.742017][ T4480] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 85.749407][ T4480] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 85.777248][ T4480] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 85.796991][ T4480] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 85.826589][ T5216] loop1: detected capacity change from 0 to 256 [ 85.852194][ T4480] logitech 0003:046D:CA04.0003: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.0-1/input0 [ 85.931853][ T4480] logitech 0003:046D:CA04.0003: no inputs found [ 85.963213][ T4480] usb 1-1: USB disconnect, device number 5 [ 85.969809][ T5220] loop3: detected capacity change from 0 to 1024 [ 86.031232][ T5224] bridge_slave_0: default FDB implementation only supports local addresses [ 86.181874][ T4318] hfsplus: b-tree write err: -5, ino 4 [ 86.217397][ T5231] vxcan0: tx address claim with dest, not broadcast [ 86.260896][ T5229] fido_id[5229]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 86.322264][ T5235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.318'. [ 86.388619][ T5235] netlink: 1 bytes leftover after parsing attributes in process `syz.1.318'. [ 86.409826][ T5240] netlink: 28 bytes leftover after parsing attributes in process `syz.4.319'. [ 86.499441][ T5246] input: syz1 as /devices/virtual/input/input11 [ 86.536267][ T5251] loop2: detected capacity change from 0 to 512 [ 86.656413][ T5251] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 86.677950][ T5260] loop4: detected capacity change from 0 to 16 [ 86.770439][ T5260] erofs: (device loop4): mounted with root inode @ nid 36. [ 86.820658][ T5260] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 86.875266][ T5260] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 86.917666][ T5260] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 86.917731][ T5260] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 87.004679][ T5277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.337'. [ 87.360988][ T5298] TCP: tcp_parse_options: Illegal window scaling value 255 > 14 received [ 87.415973][ T5299] loop0: detected capacity change from 0 to 1024 [ 87.532038][ T4228] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 87.702978][ T5307] loop0: detected capacity change from 0 to 4096 [ 87.766769][ T5307] ntfs: volume version 3.1. [ 87.770362][ T5311] loop2: detected capacity change from 0 to 2048 [ 87.822874][ T5307] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-13. You might want to try to use the mount option nls=utf8. [ 87.829036][ T5311] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.876204][ T5307] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 87.902010][ T4228] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 87.921486][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.950760][ T4228] usb 2-1: config 0 descriptor?? [ 88.079784][ T5304] loop4: detected capacity change from 0 to 32768 [ 88.240094][ T5321] loop0: detected capacity change from 0 to 512 [ 88.276835][ T4228] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 88.303506][ T5321] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.355: casefold flag without casefold feature [ 88.324850][ T4228] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 88.351615][ T5321] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.355: couldn't read orphan inode 15 (err -117) [ 88.364266][ T5321] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.501971][ T4228] [drm:udl_init] *ERROR* Selecting channel failed [ 88.532422][ T5332] delete_channel: no stack [ 88.536798][ T4228] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 88.565870][ T4228] [drm] Initialized udl on minor 2 [ 88.602844][ T4228] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 88.663865][ T4228] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 88.673647][ T26] audit: type=1326 audit(1754668398.200:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5336 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ce57dbe9 code=0x7ffc0000 [ 88.707867][ T5340] loop4: detected capacity change from 0 to 128 [ 88.732078][ T5340] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 88.738401][ T4228] usb 2-1: USB disconnect, device number 5 [ 88.741891][ T26] audit: type=1326 audit(1754668398.230:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5336 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa2ce57dbe9 code=0x7ffc0000 [ 88.810208][ T4173] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 88.843412][ T4173] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 88.848350][ T5340] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.878714][ T26] audit: type=1326 audit(1754668398.230:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5336 comm="syz.0.365" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2ce57dbe9 code=0x0 [ 88.887872][ T4173] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 88.949607][ T5346] loop2: detected capacity change from 0 to 764 [ 89.058291][ T5346] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 89.282736][ T5354] loop4: detected capacity change from 0 to 4096 [ 89.447156][ T5362] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.587988][ T5354] NILFS (loop4): nilfs_palloc_commit_free_entry (ino=6): entry number 13 already freed [ 89.938794][ T5359] loop3: detected capacity change from 0 to 32768 [ 89.987748][ T5361] loop2: detected capacity change from 0 to 32768 [ 90.032498][ T5361] XFS: attr2 mount option is deprecated. [ 90.154528][ T5359] XFS (loop3): Mounting V5 Filesystem [ 90.229362][ T5361] XFS (loop2): Mounting V5 Filesystem [ 90.263346][ T5408] loop0: detected capacity change from 0 to 1024 [ 90.287791][ T5359] XFS (loop3): Ending clean mount [ 90.315038][ T5359] XFS (loop3): Quotacheck needed: Please wait. [ 90.381218][ T5408] hfsplus: bad catalog entry type [ 90.455678][ T5359] XFS (loop3): Quotacheck: Done. [ 90.584419][ T4318] hfsplus: b-tree write err: -5, ino 4 [ 90.599598][ T5419] loop4: detected capacity change from 0 to 512 [ 90.601954][ T5361] XFS (loop2): Ending clean mount [ 90.623771][ T5420] netlink: 32 bytes leftover after parsing attributes in process `syz.1.393'. [ 90.676726][ T5420] netem: unknown loss type 13 [ 90.697149][ T5361] XFS (loop2): Quotacheck needed: Please wait. [ 90.706058][ T5419] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 90.725493][ T5420] netem: change failed [ 90.748068][ T4193] XFS (loop3): Unmounting Filesystem [ 90.791412][ T5361] XFS (loop2): Quotacheck: Done. [ 90.899962][ T5417] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 91.031149][ T5430] loop0: detected capacity change from 0 to 2048 [ 91.039611][ T5432] netlink: 'syz.1.399': attribute type 25 has an invalid length. [ 91.059219][ T4190] XFS (loop2): Unmounting Filesystem [ 91.063319][ T5432] netlink: 184 bytes leftover after parsing attributes in process `syz.1.399'. [ 91.112783][ T5430] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.107149][ T4480] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.122095][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 92.387002][ T4480] usb 4-1: Using ep0 maxpacket: 8 [ 92.472350][ T151] block nbd0: Possible stuck request ffff888020800000: control (read@0,4096B). Runtime 30 seconds [ 92.502095][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.519249][ T7] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 92.529300][ T4480] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 92.542093][ T4479] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 92.555145][ T4480] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 92.568559][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.580495][ T4480] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.594613][ T4480] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.611430][ T4480] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.623439][ T4480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.653101][ T7] usb 2-1: config 0 descriptor?? [ 92.706717][ T5484] loop2: detected capacity change from 0 to 131072 [ 92.735497][ T5494] loop4: detected capacity change from 0 to 256 [ 92.792538][ T4479] usb 1-1: Using ep0 maxpacket: 8 [ 92.801324][ T5494] FAT-fs (loop4): Directory bread(block 64) failed [ 92.808254][ T5484] F2FS-fs (loop2): invalid crc value [ 92.814261][ T5494] FAT-fs (loop4): Directory bread(block 65) failed [ 92.821178][ T5494] FAT-fs (loop4): Directory bread(block 66) failed [ 92.830734][ T5494] FAT-fs (loop4): Directory bread(block 67) failed [ 92.838143][ T5494] FAT-fs (loop4): Directory bread(block 68) failed [ 92.845918][ T5494] FAT-fs (loop4): Directory bread(block 69) failed [ 92.855247][ T5494] FAT-fs (loop4): Directory bread(block 70) failed [ 92.861981][ T5484] F2FS-fs (loop2): Found nat_bits in checkpoint [ 92.897727][ T5484] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 92.905589][ T5494] FAT-fs (loop4): Directory bread(block 71) failed [ 92.912608][ T5494] FAT-fs (loop4): Directory bread(block 72) failed [ 92.919439][ T5494] FAT-fs (loop4): Directory bread(block 73) failed [ 92.922096][ T4480] usb 4-1: GET_CAPABILITIES returned 0 [ 92.936008][ T5484] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 92.952791][ T4480] usbtmc 4-1:16.0: can't read capabilities [ 92.969509][ T4479] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.013438][ T7] usbhid 2-1:0.0: can't add hid device: -71 [ 93.019887][ T7] usbhid: probe of 2-1:0.0 failed with error -71 [ 93.074246][ T7] usb 2-1: USB disconnect, device number 6 [ 93.182193][ T4479] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 93.191296][ T4479] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.213531][ T23] usb 4-1: USB disconnect, device number 4 [ 93.220273][ T4479] usb 1-1: Product: syz [ 93.243012][ T4479] usb 1-1: Manufacturer: syz [ 93.247649][ T4479] usb 1-1: SerialNumber: syz [ 93.273683][ T4479] usb 1-1: config 0 descriptor?? [ 93.321686][ T5504] loop4: detected capacity change from 0 to 8 [ 93.557405][ T5509] hugetlbfs: syz.1.431 (5509): Using mlock ulimits for SHM_HUGETLB is deprecated [ 93.572550][ T4479] usb 1-1: USB disconnect, device number 6 [ 93.826475][ T5522] Non-string source [ 93.926999][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 93.971696][ T5527] loop2: detected capacity change from 0 to 4096 [ 94.030630][ T5533] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.161817][ T5535] loop0: detected capacity change from 0 to 4096 [ 94.181906][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 94.194495][ T5535] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 94.226258][ T5535] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 94.302031][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.325076][ T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 94.348324][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.383279][ T23] usb 2-1: config 0 descriptor?? [ 94.492882][ T5530] loop4: detected capacity change from 0 to 32768 [ 94.604331][ T5530] ERROR: (device loop4): duplicateIXtree: [ 94.604331][ T5530] [ 94.651062][ T5530] ERROR: (device loop4): remounting filesystem as read-only [ 94.665574][ T23] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 94.815491][ T5544] loop3: detected capacity change from 0 to 256 [ 94.909588][ T4479] usb 2-1: USB disconnect, device number 7 [ 94.940956][ T5544] FAT-fs (loop3): Directory bread(block 64) failed [ 94.980154][ T5544] FAT-fs (loop3): Directory bread(block 65) failed [ 95.008319][ T5544] FAT-fs (loop3): Directory bread(block 66) failed [ 95.019096][ T5554] loop2: detected capacity change from 0 to 64 [ 95.025676][ T5544] FAT-fs (loop3): Directory bread(block 67) failed [ 95.069523][ T5554] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 95.079146][ T5544] FAT-fs (loop3): Directory bread(block 68) failed [ 95.098707][ T5554] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2 [ 95.113060][ T5544] FAT-fs (loop3): Directory bread(block 69) failed [ 95.119193][ T5556] ptrace attach of "./syz-executor exec"[4579] was attempted by ""[5556] [ 95.138319][ T5544] FAT-fs (loop3): Directory bread(block 70) failed [ 95.143951][ T5558] loop0: detected capacity change from 0 to 16 [ 95.151661][ T5544] FAT-fs (loop3): Directory bread(block 71) failed [ 95.165332][ T5544] FAT-fs (loop3): Directory bread(block 72) failed [ 95.174943][ T5544] FAT-fs (loop3): Directory bread(block 73) failed [ 95.184858][ T5558] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 95.265790][ T4174] udevd[4174]: incorrect cramfs checksum on /dev/loop0 [ 95.338588][ T4174] udevd[4174]: incorrect cramfs checksum on /dev/loop0 [ 95.408471][ T5562] netlink: 277 bytes leftover after parsing attributes in process `syz.4.451'. [ 95.537019][ T144] attempt to access beyond end of device [ 95.537019][ T144] loop3: rw=1, want=1832, limit=256 [ 95.555513][ T5567] loop0: detected capacity change from 0 to 512 [ 95.573410][ T144] attempt to access beyond end of device [ 95.573410][ T144] loop3: rw=1, want=2272, limit=256 [ 95.628004][ T5573] program syz.1.458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.659221][ T5567] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.723829][ T5577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.457'. [ 95.766960][ T5554] loop2: detected capacity change from 0 to 32768 [ 95.769292][ T5579] block nbd1: not configured, cannot reconfigure [ 95.910721][ T5554] XFS (loop2): Mounting V5 Filesystem [ 95.960255][ T5589] loop4: detected capacity change from 0 to 64 [ 96.177957][ T5604] Trying to free block not in datazone [ 96.242905][ T5589] Trying to free block not in datazone [ 96.249110][ T5589] Trying to free block not in datazone [ 96.276956][ T5589] Trying to free block not in datazone [ 96.299749][ T5554] XFS (loop2): Ending clean mount [ 96.328450][ T5554] XFS (loop2): Quotacheck needed: Please wait. [ 96.427488][ T5554] XFS (loop2): Quotacheck: Done. [ 96.551513][ T26] audit: type=1800 audit(1754668406.080:9): pid=5554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.446" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 96.596388][ T5626] loop4: detected capacity change from 0 to 512 [ 96.627842][ T5625] loop1: detected capacity change from 0 to 512 [ 96.657130][ T4190] XFS (loop2): Unmounting Filesystem [ 96.704583][ T5626] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.764108][ T5626] EXT4-fs (loop4): 1 truncate cleaned up [ 96.772452][ T5626] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: none. [ 96.914936][ T5625] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.476: bg 0: block 248: padding at end of block bitmap is not set [ 96.934839][ T5625] Quota error (device loop1): write_blk: dquota write failed [ 96.945692][ T5625] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 96.956539][ T5625] EXT4-fs error (device loop1): ext4_acquire_dquot:6207: comm syz.1.476: Failed to acquire dquot type 1 [ 97.099871][ T5625] EXT4-fs (loop1): 1 truncate cleaned up [ 97.111974][ T5625] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.184777][ T5625] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.308658][ T5654] loop4: detected capacity change from 0 to 256 [ 97.340716][ T5625] EXT4-fs (loop1): shut down requested (2) [ 97.342056][ T5657] netlink: 28 bytes leftover after parsing attributes in process `syz.3.490'. [ 97.376762][ T5654] FAT-fs (loop4): Directory bread(block 64) failed [ 97.405175][ T5654] FAT-fs (loop4): Directory bread(block 65) failed [ 97.414409][ T5654] FAT-fs (loop4): Directory bread(block 66) failed [ 97.424275][ T5625] syz.1.476 (5625) used greatest stack depth: 20808 bytes left [ 97.460527][ T5657] netem: change failed [ 97.460546][ T5654] FAT-fs (loop4): Directory bread(block 67) failed [ 97.511943][ T5654] FAT-fs (loop4): Directory bread(block 68) failed [ 97.550477][ T5654] FAT-fs (loop4): Directory bread(block 69) failed [ 97.600486][ T5654] FAT-fs (loop4): Directory bread(block 70) failed [ 97.627251][ T5661] loop2: detected capacity change from 0 to 4096 [ 97.627723][ T5654] FAT-fs (loop4): Directory bread(block 71) failed [ 97.668614][ T5668] loop0: detected capacity change from 0 to 2048 [ 97.677448][ T5654] FAT-fs (loop4): Directory bread(block 72) failed [ 97.695347][ T5654] FAT-fs (loop4): Directory bread(block 73) failed [ 97.709231][ T5669] loop3: detected capacity change from 0 to 4096 [ 97.726317][ T5661] ntfs3: loop2: ino=3, Correct links count -> 2. [ 97.756704][ T5668] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.777847][ T5669] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 97.999005][ T5669] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 98.191513][ T5686] loop1: detected capacity change from 0 to 1024 [ 98.250001][ T5686] hfsplus: request for non-existent node 3 in B*Tree [ 98.301559][ T5686] hfsplus: request for non-existent node 3 in B*Tree [ 98.337182][ T145] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22. [ 98.380800][ T4193] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 98.403944][ T5686] hfsplus: request for non-existent node 4 in B*Tree [ 98.411592][ T5686] hfsplus: request for non-existent node 4 in B*Tree [ 98.743029][ T5697] loop3: detected capacity change from 0 to 8192 [ 98.787510][ T5697] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 98.799229][ T5697] REISERFS (device loop3): using ordered data mode [ 98.806355][ T5697] reiserfs: using flush barriers [ 98.816723][ T5697] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 98.862811][ T5697] REISERFS (device loop3): checking transaction log (loop3) [ 98.945352][ T5717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.507'. [ 98.989816][ T5697] REISERFS (device loop3): Using r5 hash to sort names [ 99.001500][ T5697] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 99.076575][ T26] audit: type=1800 audit(1754668408.600:10): pid=5697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.502" name="file1" dev="loop3" ino=2 res=0 errno=0 [ 99.282221][ T5729] block nbd1: server does not support multiple connections per device. [ 99.317729][ T5729] block nbd1: shutting down sockets [ 99.452588][ T5735] loop0: detected capacity change from 0 to 4096 [ 99.457706][ T5744] loop3: detected capacity change from 0 to 64 [ 99.580789][ T5744] Trying to free block not in datazone [ 99.598819][ T5753] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.611243][ T5744] Trying to free block not in datazone [ 99.650135][ T5744] Trying to free block not in datazone [ 99.696341][ T5763] loop4: detected capacity change from 0 to 512 [ 99.823001][ T5767] loop0: detected capacity change from 0 to 2048 [ 99.869355][ T5763] EXT4-fs (loop4): Test dummy encryption mode enabled [ 99.888044][ T5763] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 99.896007][ T5767] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 99.940166][ T5763] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.520: bad orphan inode 131083 [ 99.940552][ T5763] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 99.978881][ T5775] loop2: detected capacity change from 0 to 4096 [ 99.982122][ T5767] UDF-fs: Scanning with blocksize 512 failed [ 100.021640][ T5775] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 100.033215][ T5767] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.033938][ T5775] ntfs3: loop2: Failed to load $Extend. [ 100.051322][ T5775] ntfs3: loop2: ino=21, "hugetlb.1GB.usage_in_bytes" mmap(write) compressed not supported [ 100.510212][ T5785] loop0: detected capacity change from 0 to 4096 [ 100.592344][ T5785] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 100.727066][ T525] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.859354][ T525] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.912534][ T26] audit: type=1800 audit(1754668410.430:11): pid=5802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.529" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=30 res=0 errno=0 [ 100.982125][ T5808] loop2: detected capacity change from 0 to 128 [ 101.046253][ T525] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.073492][ T5808] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 101.159564][ T525] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.161636][ T5812] loop1: detected capacity change from 0 to 1024 [ 101.180473][ T5808] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.890649][ T5827] loop1: detected capacity change from 0 to 256 [ 102.017666][ T26] audit: type=1800 audit(1754668411.540:12): pid=5827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.547" name="file1" dev="loop1" ino=1048652 res=0 errno=0 [ 102.038387][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.051361][ T5829] loop2: detected capacity change from 0 to 256 [ 102.284039][ T5840] loop3: detected capacity change from 0 to 4096 [ 102.319549][ T5843] loop1: detected capacity change from 0 to 1024 [ 102.387963][ T5840] NILFS (loop3): invalid segment: Checksum error in segment payload [ 102.432579][ T5840] NILFS (loop3): trying rollback from an earlier position [ 102.479294][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 102.543268][ T5840] NILFS (loop3): recovery complete [ 102.566568][ T5856] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.617548][ T5855] loop0: detected capacity change from 0 to 512 [ 102.751520][ T4716] hfsplus: b-tree write err: -5, ino 4 [ 102.858119][ T5855] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 102.966369][ T5866] loop3: detected capacity change from 0 to 128 [ 103.004107][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.047067][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.067900][ T5821] device bridge_slave_0 entered promiscuous mode [ 103.087514][ T5866] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 103.129742][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.163554][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.198897][ T5821] device bridge_slave_1 entered promiscuous mode [ 103.229563][ T5866] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.331946][ T5878] loop0: detected capacity change from 0 to 64 [ 103.418963][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.462227][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.567764][ T5821] team0: Port device team_slave_0 added [ 103.598435][ T5821] team0: Port device team_slave_1 added [ 103.606103][ T4191] hfs: node 4:3 still has 2 user(s)! [ 103.634668][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.641651][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.668687][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.684689][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.692483][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.719782][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.738224][ T5884] loop1: detected capacity change from 0 to 32768 [ 103.752110][ T4173] Bluetooth: hci1: command 0x0409 tx timeout [ 103.796019][ T5821] device hsr_slave_0 entered promiscuous mode [ 103.813891][ T5884] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 103.822681][ T5884] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 103.833767][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.844733][ T5821] device hsr_slave_1 entered promiscuous mode [ 103.864759][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.903138][ T5884] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 103.920678][ T4173] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 103.931980][ T5821] Cannot create hsr debugfs directory [ 103.942090][ T4173] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 104.034352][ T4173] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 92ms [ 104.043918][ T4173] gfs2: fsid=syz:syz.0: jid=0: Done [ 104.052062][ T5884] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 104.062848][ T5884] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 104.062848][ T5884] bh = 18 (type: exp=2, found=5) [ 104.062848][ T5884] function = gfs2_rgrp_bh_get, file = fs/gfs2/rgrp.c, line = 1224 [ 104.084956][ T5884] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 104.099754][ T5884] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 104.108675][ T5884] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 104.108935][ T525] device hsr_slave_0 left promiscuous mode [ 104.117345][ T5884] gfs2: fsid=syz:syz.0: File system withdrawn [ 104.127154][ T5884] CPU: 1 PID: 5884 Comm: syz.1.559 Not tainted 5.15.189-syzkaller #0 [ 104.135312][ T5884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.145396][ T5884] Call Trace: [ 104.148688][ T5884] [ 104.151627][ T5884] dump_stack_lvl+0x168/0x230 [ 104.156496][ T5884] ? kobject_uevent_env+0x371/0x890 [ 104.161810][ T5884] ? show_regs_print_info+0x20/0x20 [ 104.167030][ T5884] ? load_image+0x3b0/0x3b0 [ 104.171546][ T5884] ? kobject_uevent_env+0x371/0x890 [ 104.176753][ T5884] ? lockref_put_or_lock+0x6e/0xb0 [ 104.181882][ T5884] gfs2_withdraw+0x111b/0x1460 [ 104.186684][ T5884] ? gfs2_lm+0x220/0x220 [ 104.190938][ T5884] ? gfs2_meta_read+0x7d4/0xa50 [ 104.195839][ T5884] gfs2_metatype_check_ii+0x74/0x90 [ 104.201148][ T5884] gfs2_rgrp_bh_get+0x3a6/0x1350 [ 104.206208][ T5884] ? do_raw_spin_unlock+0x11d/0x230 [ 104.211431][ T5884] do_promote+0x741/0xab0 [ 104.215792][ T5884] finish_xmote+0x514/0xb70 [ 104.220334][ T5884] do_xmote+0x7b6/0x1120 [ 104.224600][ T5884] gfs2_glock_nq+0xc7a/0x1550 [ 104.229308][ T5884] gfs2_check_blk_type+0x2da/0x640 [ 104.234437][ T5884] ? __might_sleep+0xf0/0xf0 [ 104.239055][ T5884] ? gfs2_free_di+0x480/0x480 [ 104.243830][ T5884] ? gfs2_glock_nq+0xcb0/0x1550 [ 104.248946][ T5884] ? gfs2_check_blk_type+0x2d2/0x640 [ 104.254257][ T5884] gfs2_evict_inode+0x77b/0x11f0 [ 104.259307][ T5884] ? gfs2_drop_inode+0x290/0x290 [ 104.264351][ T5884] ? _raw_spin_unlock+0x24/0x40 [ 104.269220][ T5884] ? inode_wait_for_writeback+0x1b0/0x200 [ 104.275084][ T5884] ? gfs2_evict_inode+0x342/0x11f0 [ 104.280222][ T5884] ? bit_waitqueue+0x30/0x30 [ 104.284847][ T5884] ? do_raw_spin_unlock+0x11d/0x230 [ 104.290060][ T5884] ? gfs2_drop_inode+0x290/0x290 [ 104.295023][ T5884] evict+0x485/0x870 [ 104.298944][ T5884] ? __lock_acquire+0x7c60/0x7c60 [ 104.304077][ T5884] ? proc_nr_inodes+0x320/0x320 [ 104.309295][ T5884] ? do_raw_spin_unlock+0x11d/0x230 [ 104.314516][ T5884] ? _raw_spin_unlock+0x24/0x40 [ 104.319382][ T5884] ? iput+0x706/0x8a0 [ 104.323390][ T5884] init_per_node+0x244/0x3d0 [ 104.327995][ T5884] ? init_inodes+0x320/0x320 [ 104.332607][ T5884] ? init_inodes+0x26a/0x320 [ 104.337213][ T5884] gfs2_fill_super+0x1726/0x1f50 [ 104.342177][ T5884] ? gfs2_reconfigure+0xcd0/0xcd0 [ 104.347215][ T5884] ? gfs2_glock_nq_num+0x82/0x1b0 [ 104.352248][ T5884] ? preempt_count_add+0x8d/0x190 [ 104.357295][ T5884] ? sb_set_blocksize+0xa5/0xe0 [ 104.362158][ T5884] get_tree_bdev+0x3f1/0x610 [ 104.366767][ T5884] ? gfs2_reconfigure+0xcd0/0xcd0 [ 104.372086][ T5884] gfs2_get_tree+0x4d/0x1e0 [ 104.376670][ T5884] vfs_get_tree+0x88/0x270 [ 104.381093][ T5884] do_new_mount+0x24a/0xa40 [ 104.385600][ T5884] __se_sys_mount+0x2d6/0x3c0 [ 104.390321][ T5884] ? __x64_sys_mount+0xc0/0xc0 [ 104.395286][ T5884] ? lockdep_hardirqs_on+0x94/0x140 [ 104.400508][ T5884] ? __x64_sys_mount+0x1c/0xc0 [ 104.405405][ T5884] do_syscall_64+0x4c/0xa0 [ 104.409830][ T5884] ? clear_bhb_loop+0x30/0x80 [ 104.414505][ T5884] ? clear_bhb_loop+0x30/0x80 [ 104.419207][ T5884] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.425110][ T5884] RIP: 0033:0x7fc1fe40238a [ 104.429519][ T5884] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.449496][ T5884] RSP: 002b:00007fc1fc667e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 104.458065][ T5884] RAX: ffffffffffffffda RBX: 00007fc1fc667ef0 RCX: 00007fc1fe40238a [ 104.466033][ T5884] RDX: 0000200000000000 RSI: 00002000000002c0 RDI: 00007fc1fc667eb0 [ 104.474410][ T5884] RBP: 0000200000000000 R08: 00007fc1fc667ef0 R09: 0000000000000000 [ 104.482408][ T5884] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000002c0 [ 104.490400][ T5884] R13: 00007fc1fc667eb0 R14: 00000000000126a0 R15: 00002000000003c0 [ 104.498535][ T5884] [ 104.501699][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.508214][ T525] device hsr_slave_1 left promiscuous mode [ 104.508246][ T5884] gfs2: fsid=syz:syz.0: can't lock local "qc" file: -5 [ 104.521303][ T525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.532573][ T525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.541022][ T525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.554770][ T525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.567364][ T525] device bridge_slave_1 left promiscuous mode [ 104.580759][ T525] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.595762][ T525] device bridge_slave_0 left promiscuous mode [ 104.605571][ T525] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.618917][ T525] device veth1_macvtap left promiscuous mode [ 104.625624][ T525] device veth0_macvtap left promiscuous mode [ 104.631766][ T525] device veth1_vlan left promiscuous mode [ 104.721476][ T23] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 104.731254][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.746695][ T23] usb 3-1: config 0 descriptor?? [ 104.938447][ T525] team0 (unregistering): Port device team_slave_1 removed [ 104.953203][ T525] team0 (unregistering): Port device team_slave_0 removed [ 104.968696][ T525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.983204][ T525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.042034][ T23] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 105.045523][ T525] bond0 (unregistering): Released all slaves [ 105.054058][ T23] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 105.159380][ T5906] sp0: Synchronizing with TNC [ 105.238962][ T5910] loop0: detected capacity change from 0 to 128 [ 105.265782][ T23] [drm:udl_init] *ERROR* Selecting channel failed [ 105.288478][ T23] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 105.338679][ T5910] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 105.349586][ T23] [drm] Initialized udl on minor 2 [ 105.401891][ T23] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 105.421034][ T5910] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.432613][ T5913] loop3: detected capacity change from 0 to 512 [ 105.440421][ T23] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 105.457498][ T23] usb 3-1: USB disconnect, device number 2 [ 105.464497][ T4173] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 105.493293][ T4173] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 105.508478][ T4173] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 105.544969][ T5913] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 105.659888][ T5913] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 105.702147][ T4480] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 105.719585][ T5821] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.746160][ T5821] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.832178][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 105.860183][ T5821] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.869524][ T26] audit: type=1326 audit(1754668415.390:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.3.574" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f565c183be9 code=0x0 [ 105.912017][ T5821] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.072178][ T4480] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 106.101139][ T4480] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 106.117721][ T4480] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 106.127140][ T4480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.182234][ T5915] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 106.587602][ T4480] usb 2-1: USB disconnect, device number 8 [ 107.081824][ T4481] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.281311][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.305548][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.317763][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.327600][ T4481] usb 4-1: Using ep0 maxpacket: 16 [ 107.346470][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.413501][ T5957] loop2: detected capacity change from 0 to 65 [ 107.418022][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.451505][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.468415][ T5934] loop0: detected capacity change from 0 to 262144 [ 107.468785][ T4481] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.493820][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.501053][ T1216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.509144][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.519172][ T5957] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 107.545543][ T5934] F2FS-fs (loop0): invalid crc value [ 107.575917][ T4481] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 107.594896][ T5934] F2FS-fs (loop0): Found nat_bits in checkpoint [ 107.605506][ T4481] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.627222][ T4481] usb 4-1: config 0 descriptor?? [ 107.654491][ T5934] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.720154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.752463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.812319][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.819546][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.898608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.921855][ T4192] Bluetooth: hci1: command 0x040f tx timeout [ 107.940949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.970004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.991475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.999705][ T4228] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 108.066281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.093494][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.104289][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.122555][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.141382][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.154774][ T4481] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 108.158188][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.191870][ T4481] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 108.195256][ T5821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.209254][ T4481] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 108.234826][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.239572][ T4481] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 108.253948][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.290534][ T4481] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 108.311295][ T4481] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 108.361799][ C0] usb 4-1: input irq status -75 received [ 108.406546][ T4228] usb 2-1: config 0 has no interfaces? [ 108.572387][ T4228] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.607457][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.632403][ T4228] usb 2-1: Product: syz [ 108.646988][ T4228] usb 2-1: Manufacturer: syz [ 108.651652][ T4228] usb 2-1: SerialNumber: syz [ 108.665453][ T4480] usb 4-1: USB disconnect, device number 5 [ 108.690972][ T5969] loop2: detected capacity change from 0 to 32768 [ 108.702169][ T4228] usb 2-1: config 0 descriptor?? [ 108.736912][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.771586][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.816135][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.975484][ T4228] usb 2-1: USB disconnect, device number 9 [ 109.326370][ T6006] loop2: detected capacity change from 0 to 256 [ 109.367181][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.402480][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.434999][ T6008] loop3: detected capacity change from 0 to 128 [ 109.447521][ T5821] device veth0_vlan entered promiscuous mode [ 109.463369][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.497705][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.522013][ T6006] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.530802][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.592238][ T6006] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 109.604072][ T6008] attempt to access beyond end of device [ 109.604072][ T6008] loop3: rw=1, want=210, limit=128 [ 109.617250][ T6006] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 109.629970][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.701041][ T5821] device veth1_vlan entered promiscuous mode [ 109.798024][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.809729][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.832470][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.849366][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.959583][ T5821] device veth0_macvtap entered promiscuous mode [ 109.995532][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 110.022321][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 110.041123][ T5821] device veth1_macvtap entered promiscuous mode [ 110.127651][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.180128][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.200466][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.247240][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.260355][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.271205][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.321770][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.338430][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.355847][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.386435][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.402675][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.487897][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.518131][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.539190][ T6047] loop3: detected capacity change from 0 to 2048 [ 110.597300][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.612263][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.627873][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.641556][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.661777][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.693632][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.715481][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.737797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.769585][ T6047] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.793835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.814264][ T5821] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.867224][ T5821] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.911874][ T5821] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.954289][ T5821] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.219448][ T6018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.244827][ T6018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.285436][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.307774][ T6040] loop0: detected capacity change from 0 to 32768 [ 111.377391][ T6018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.438148][ T6018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.464295][ T6040] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 111.622109][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.649016][ T4191] ocfs2: Unmounting device (7,0) on (node local) [ 111.730796][ T6055] loop2: detected capacity change from 0 to 40427 [ 111.789163][ T6085] loop3: detected capacity change from 0 to 64 [ 111.848772][ T6055] F2FS-fs (loop2): invalid crc value [ 111.937592][ T6055] F2FS-fs (loop2): Found nat_bits in checkpoint [ 111.979878][ T6100] loop0: detected capacity change from 0 to 64 [ 112.059986][ T6101] loop1: detected capacity change from 0 to 64 [ 112.070018][ T6087] loop5: detected capacity change from 0 to 4096 [ 112.095137][ T6055] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 112.133227][ T6055] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 112.147229][ T6100] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 112.466003][ T4190] attempt to access beyond end of device [ 112.466003][ T4190] loop2: rw=2049, want=45104, limit=40427 [ 113.195067][ T6126] loop5: detected capacity change from 0 to 4096 [ 113.303794][ T6126] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 113.392897][ T6126] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 113.421128][ T6104] loop3: detected capacity change from 0 to 32768 [ 113.533005][ T6104] XFS: attr2 mount option is deprecated. [ 113.674978][ T6104] XFS (loop3): Mounting V5 Filesystem [ 113.817109][ T6116] loop1: detected capacity change from 0 to 32768 [ 113.903456][ T6116] (syz.1.616,6116,1):ocfs2_verify_volume:2364 ERROR: found superblock with bad version: found 5076.90, should be 0.90 [ 113.920757][ T6104] XFS (loop3): Ending clean mount [ 113.955433][ T6104] XFS (loop3): Quotacheck needed: Please wait. [ 114.001943][ T6116] (syz.1.616,6116,0):ocfs2_verify_volume:2392 ERROR: status = -22 [ 114.010081][ T6116] (syz.1.616,6116,0):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 114.087215][ T6116] (syz.1.616,6116,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 114.154959][ T6104] XFS (loop3): Quotacheck: Done. [ 114.238505][ T6129] loop0: detected capacity change from 0 to 32768 [ 114.290314][ T6173] loop5: detected capacity change from 0 to 764 [ 114.418569][ T6129] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 114.486703][ T6129] OCFS2: ERROR (device loop0): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 114.518444][ T4193] XFS (loop3): Unmounting Filesystem [ 114.531520][ T6129] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 114.542219][ T6129] OCFS2: File system is now read-only. [ 114.548060][ T6129] (syz.0.621,6129,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 114.722079][ T4173] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 114.810462][ T4191] ocfs2: Unmounting device (7,0) on (node local) [ 115.128031][ T4173] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 115.172081][ T4173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.213261][ T4173] usb 3-1: config 0 descriptor?? [ 115.231169][ T21] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 115.367326][ T6209] loop5: detected capacity change from 0 to 512 [ 115.388733][ T6211] loop0: detected capacity change from 0 to 512 [ 115.422270][ T6209] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.434899][ T6211] EXT4-fs (loop0): Ignoring removed oldalloc option [ 115.451248][ T6211] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 115.467697][ T4173] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 115.498524][ T6209] EXT4-fs (loop5): orphan cleanup on readonly fs [ 115.517643][ T6211] EXT4-fs (loop0): 1 truncate cleaned up [ 115.547985][ T6209] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #3: comm syz.5.642: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 115.574762][ T6211] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 115.592161][ T6209] EXT4-fs error (device loop5): ext4_quota_enable:6418: comm syz.5.642: Bad quota inode: 3, type: 0 [ 115.614115][ T6221] loop3: detected capacity change from 0 to 128 [ 115.631304][ T6209] EXT4-fs warning (device loop5): ext4_enable_quotas:6459: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 115.650664][ T6209] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 115.662444][ T6209] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.698107][ T6209] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.642: bg 0: block 64: padding at end of block bitmap is not set [ 115.712792][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 115.736924][ T4173] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 115.787864][ T4173] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 115.820480][ T4173] asix: probe of 3-1:0.0 failed with error -71 [ 115.837361][ T4173] usb 3-1: USB disconnect, device number 3 [ 115.844069][ T21] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 115.851651][ T21] usb 2-1: can't read configurations, error -71 [ 116.096513][ T6238] loop3: detected capacity change from 0 to 256 [ 116.146649][ T6238] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 116.221688][ T6242] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.369085][ T6254] loop5: detected capacity change from 0 to 256 [ 116.479520][ T6257] loop1: detected capacity change from 0 to 2048 [ 116.559215][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.666'. [ 116.669831][ T6257] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.849166][ T6280] netlink: 32 bytes leftover after parsing attributes in process `syz.5.671'. [ 116.885446][ T6280] netlink: 16 bytes leftover after parsing attributes in process `syz.5.671'. [ 117.052003][ T4228] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 117.341914][ T4481] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 117.342029][ T4228] usb 4-1: Using ep0 maxpacket: 32 [ 117.392919][ T6293] [U] ^C„ [ 117.396472][ T21] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 117.397438][ T6292] [U] ^C [ 117.522360][ T4228] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 117.533970][ T4228] usb 4-1: config 0 has no interface number 0 [ 117.586650][ T4481] usb 6-1: Using ep0 maxpacket: 8 [ 117.657336][ T6307] loop2: detected capacity change from 0 to 128 [ 117.681927][ T6307] FAT-fs (loop2): bogus number of reserved sectors [ 117.695220][ T6307] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 117.705311][ T4228] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 117.714829][ T6307] FAT-fs (loop2): Can't find a valid FAT filesystem [ 117.715480][ T4481] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 117.731508][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.739674][ T4228] usb 4-1: Product: syz [ 117.744326][ T4228] usb 4-1: Manufacturer: syz [ 117.748955][ T4228] usb 4-1: SerialNumber: syz [ 117.762863][ T4481] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.774276][ T4228] usb 4-1: config 0 descriptor?? [ 117.802067][ T21] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 117.810859][ T21] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 117.822281][ T4481] pvrusb2: Hardware description: Terratec Grabster AV400 [ 117.822557][ T21] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 117.836085][ T4481] pvrusb2: ********** [ 117.843353][ T4228] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 117.857442][ T4481] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 117.872034][ T21] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 117.881024][ T4481] pvrusb2: Important functionality might not be entirely working. [ 117.891622][ T4481] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 117.898504][ T21] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 117.908410][ T4481] pvrusb2: ********** [ 117.986852][ T6312] syz.0.686 (6312) used greatest stack depth: 20608 bytes left [ 118.024778][ T2421] pvrusb2: Invalid write control endpoint [ 118.055306][ T21] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 118.055342][ T6316] loop0: detected capacity change from 0 to 256 [ 118.077312][ T4228] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 118.083543][ T6316] exfat: Deprecated parameter 'namecase' [ 118.094671][ T21] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 118.101379][ T6316] exfat: Deprecated parameter 'utf8' [ 118.107268][ T21] usb 2-1: Product: syz [ 118.115351][ T21] usb 2-1: Manufacturer: syz [ 118.120158][ T4228] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 118.168817][ T2421] pvrusb2: Invalid write control endpoint [ 118.179886][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 118.192809][ T21] cdc_wdm 2-1:1.0: skipping garbage [ 118.198065][ T21] cdc_wdm 2-1:1.0: skipping garbage [ 118.199615][ T6316] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 118.208177][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 118.228950][ T21] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 118.245584][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 118.245833][ T21] cdc_wdm 2-1:1.0: Unknown control protocol [ 118.302213][ T2421] pvrusb2: Device being rendered inoperable [ 118.330099][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 118.331667][ T6289] pvrusb2: Attempted to execute control transfer when device not ok [ 118.351830][ T4228] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 118.364593][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 118.373270][ T21] usb 6-1: USB disconnect, device number 2 [ 118.386889][ T2421] pvrusb2: Attached sub-driver cx25840 [ 118.397206][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 118.411079][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 118.527707][ T4242] usb 2-1: USB disconnect, device number 12 [ 118.561836][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 118.589454][ T1111] usb 4-1: USB disconnect, device number 6 [ 118.608637][ T1111] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 118.636842][ T1111] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 118.659101][ T1111] quatech2 4-1:0.51: device disconnected [ 118.776816][ T4228] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 118.788771][ T4228] usb 3-1: config 0 has an invalid descriptor of length 73, skipping remainder of the config [ 118.800040][ T4228] usb 3-1: config 0 has no interface number 0 [ 118.972196][ T6341] loop5: detected capacity change from 0 to 2048 [ 118.982213][ T4228] usb 3-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 118.993603][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.002927][ T4228] usb 3-1: Product: syz [ 119.007219][ T4228] usb 3-1: Manufacturer: syz [ 119.007293][ T6343] program syz.0.701 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.012256][ T4228] usb 3-1: SerialNumber: syz [ 119.028414][ T4228] usb 3-1: config 0 descriptor?? [ 119.059747][ T6341] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 119.121814][ T6346] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.281916][ T6219] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 119.385845][ T4228] usb 3-1: USB disconnect, device number 4 [ 119.448968][ T6366] loop0: detected capacity change from 0 to 256 [ 119.550814][ T6366] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 119.640920][ T6378] loop3: detected capacity change from 0 to 512 [ 119.737904][ T6378] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 119.751944][ T7] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 119.768483][ T6378] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.852282][ T6389] loop0: detected capacity change from 0 to 256 [ 119.863091][ T6378] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #2: comm syz.3.715: corrupted inode contents [ 119.885473][ T6378] EXT4-fs error (device loop3): ext4_dirty_inode:6040: inode #2: comm syz.3.715: mark_inode_dirty error [ 119.922775][ T6378] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #2: comm syz.3.715: corrupted inode contents [ 119.953239][ T6390] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #2: comm syz.3.715: corrupted inode contents [ 119.993000][ T6390] EXT4-fs error (device loop3): ext4_dirty_inode:6040: inode #2: comm syz.3.715: mark_inode_dirty error [ 120.004359][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 120.026442][ T6390] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #2: comm syz.3.715: corrupted inode contents [ 120.125983][ T7] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 120.143517][ T7] usb 6-1: config 0 has no interface number 0 [ 120.151008][ T7] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.169708][ T7] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.180078][ T7] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 120.210196][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.266198][ T7] usb 6-1: config 0 descriptor?? [ 120.351978][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.443053][ T6412] loop0: detected capacity change from 0 to 8 [ 120.631790][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 120.721651][ T6418] loop3: detected capacity change from 0 to 8192 [ 120.777547][ T6418] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 120.806153][ T6418] REISERFS (device loop3): using ordered data mode [ 120.812955][ T6418] reiserfs: using flush barriers [ 120.826982][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 120.870899][ T6418] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 120.942102][ T21] usb 3-1: config 8 has an invalid interface number: 187 but max is 0 [ 120.944277][ T6418] REISERFS (device loop3): checking transaction log (loop3) [ 120.950872][ T21] usb 3-1: config 8 has no interface number 0 [ 120.981954][ T7] uclogic 0003:28BD:0094.0005: failed retrieving string descriptor #100: -71 [ 121.011197][ T7] uclogic 0003:28BD:0094.0005: failed retrieving pen parameters: -71 [ 121.028621][ T21] usb 3-1: config 8 interface 187 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 121.039185][ T7] uclogic 0003:28BD:0094.0005: pen probing failed: -71 [ 121.039206][ T7] uclogic 0003:28BD:0094.0005: failed probing parameters: -71 [ 121.057267][ T7] uclogic: probe of 0003:28BD:0094.0005 failed with error -71 [ 121.094330][ T7] usb 6-1: USB disconnect, device number 3 [ 121.124894][ T21] usb 3-1: config 8 interface 187 altsetting 7 bulk endpoint 0xC has invalid maxpacket 16 [ 121.139440][ T6418] REISERFS (device loop3): Using tea hash to sort names [ 121.148026][ T6418] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 121.156473][ T21] usb 3-1: config 8 interface 187 has no altsetting 0 [ 121.462309][ T21] usb 3-1: string descriptor 0 read error: -22 [ 121.487616][ T21] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=f2.91 [ 121.551913][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.624209][ T6395] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.632617][ T6395] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.659231][ T6459] loop3: detected capacity change from 0 to 1024 [ 121.687628][ T21] kvaser_usb 3-1:8.187: Cannot get usb endpoint(s) [ 121.769994][ T6459] hfsplus: bad catalog entry type [ 121.808899][ T144] hfsplus: b-tree write err: -5, ino 4 [ 121.989527][ T21] usb 3-1: USB disconnect, device number 5 [ 121.992015][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 122.049364][ T6480] loop5: detected capacity change from 0 to 128 [ 122.076446][ T6482] device macsec0 entered promiscuous mode [ 122.084714][ T6482] device macsec0 left promiscuous mode [ 122.172063][ T6480] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 122.200974][ T6480] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.271101][ T26] audit: type=1800 audit(1754668431.790:14): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.755" name="file1" dev="loop5" ino=104 res=0 errno=0 [ 122.351543][ T6476] loop3: detected capacity change from 0 to 32768 [ 122.392455][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.418179][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.460831][ T7] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 122.483306][ T6476] XFS (loop3): Mounting V5 Filesystem [ 122.489524][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.545232][ T7] usb 1-1: config 0 descriptor?? [ 122.552785][ T151] block nbd0: Possible stuck request ffff888020800000: control (read@0,4096B). Runtime 60 seconds [ 122.721114][ T6476] XFS (loop3): Ending clean mount [ 122.764317][ T6476] XFS (loop3): Quotacheck needed: Please wait. [ 122.867352][ T6476] XFS (loop3): Quotacheck: Done. [ 122.971480][ T4193] XFS (loop3): Unmounting Filesystem [ 123.054273][ T7] ortek 0003:1223:3F07.0006: unknown main item tag 0x7 [ 123.082582][ T7] ortek 0003:1223:3F07.0006: ignoring exceeding usage max [ 123.107514][ T7] ortek 0003:1223:3F07.0006: unexpected long global item [ 123.150837][ T7] ortek: probe of 0003:1223:3F07.0006 failed with error -22 [ 123.329077][ T7] usb 1-1: USB disconnect, device number 7 [ 123.616709][ T6530] binder: Binderfs stats mode cannot be changed during a remount [ 123.631072][ T6533] kvm [6531]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x9 [ 123.874912][ T6545] loop3: detected capacity change from 0 to 512 [ 123.919637][ T6545] EXT4-fs (loop3): Test dummy encryption mode enabled [ 123.926808][ T6545] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.944277][ T6553] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 123.944277][ T6553] The task syz.5.779 (6553) triggered the difference, watch for misbehavior. [ 123.965793][ T6545] EXT4-fs (loop3): 1 truncate cleaned up [ 123.971470][ T6545] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 124.171840][ T4472] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 124.219573][ T6545] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 124.432133][ T4472] usb 1-1: Using ep0 maxpacket: 8 [ 124.712150][ T4472] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 124.720728][ T6598] loop5: detected capacity change from 0 to 512 [ 124.722533][ T4472] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.732157][ T6601] netlink: 'syz.3.803': attribute type 2 has an invalid length. [ 124.761052][ T4472] usb 1-1: Product: syz [ 124.785236][ T4472] usb 1-1: Manufacturer: syz [ 124.806817][ T4472] usb 1-1: SerialNumber: syz [ 124.827639][ T4472] usb 1-1: config 0 descriptor?? [ 124.830897][ T6598] EXT4-fs (loop5): 1 truncate cleaned up [ 124.853775][ T6598] EXT4-fs (loop5): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,sysvgroups,lazytime,errors=continue,grpjquota=,,errors=continue. Quota mode: writeback. [ 124.973287][ T6607] loop5: detected capacity change from 0 to 8 [ 125.044444][ T6607] SQUASHFS error: lzo decompression failed, data probably corrupt [ 125.066514][ T6607] SQUASHFS error: Failed to read block 0x91: -5 [ 125.082296][ T6607] SQUASHFS error: Unable to read metadata cache entry [8f] [ 125.091978][ T4242] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 125.092109][ T4472] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 125.106481][ T6607] SQUASHFS error: Unable to read inode 0x11f [ 125.336787][ T6622] netlink: 'syz.5.808': attribute type 21 has an invalid length. [ 125.345046][ T4242] usb 4-1: Using ep0 maxpacket: 8 [ 125.459282][ T6599] loop2: detected capacity change from 0 to 40427 [ 125.484308][ T4242] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 125.503157][ T4242] usb 4-1: config 0 has no interface number 0 [ 125.511365][ T6599] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 125.542926][ T6599] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 125.564578][ T6599] F2FS-fs (loop2): invalid crc value [ 125.602952][ T6599] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 125.739905][ T4242] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 125.763616][ T4242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.781796][ T4242] usb 4-1: Product: syz [ 125.788807][ T4242] usb 4-1: Manufacturer: syz [ 125.796024][ T4242] usb 4-1: SerialNumber: syz [ 125.804869][ T4472] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 125.809681][ T4242] usb 4-1: config 0 descriptor?? [ 125.825219][ T6599] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 125.833354][ T6599] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 125.852040][ T4472] usb 1-1: USB disconnect, device number 8 [ 126.037539][ T4190] attempt to access beyond end of device [ 126.037539][ T4190] loop2: rw=2049, want=45104, limit=40427 [ 126.065510][ T6652] loop5: detected capacity change from 0 to 1024 [ 126.092190][ T4242] peak_usb 4-1:0.56: PEAK-System PCAN-USB X6 v216 fw v145.0.0 (2 channels) [ 126.206803][ T525] hfsplus: b-tree write err: -5, ino 4 [ 126.312101][ T4242] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 126.319102][ T4242] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 126.341846][ T4242] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 126.544100][ T4242] peak_usb: probe of 4-1:0.56 failed with error -22 [ 126.572141][ T4242] usb 4-1: USB disconnect, device number 7 [ 127.388010][ T6677] loop0: detected capacity change from 0 to 32768 [ 127.397899][ T6715] netlink: 192 bytes leftover after parsing attributes in process `syz.1.833'. [ 127.477294][ T6721] loop3: detected capacity change from 0 to 1024 [ 127.524527][ T6677] JBD2: Ignoring recovery information on journal [ 127.531159][ T6677] JBD2: corrupted journal superblock [ 127.575661][ T6677] JBD2: error -117 scanning journal [ 127.580914][ T6677] (syz.0.821,6677,1):ocfs2_journal_wipe:1154 ERROR: status = -117 [ 127.591993][ T6677] (syz.0.821,6677,0):ocfs2_check_volume:2424 ERROR: status = -117 [ 127.617674][ T6677] (syz.0.821,6677,0):ocfs2_check_volume:2493 ERROR: status = -117 [ 127.691878][ T6677] (syz.0.821,6677,1):ocfs2_mount_volume:1824 ERROR: status = -117 [ 127.735806][ T6677] (syz.0.821,6677,1):ocfs2_fill_super:1177 ERROR: status = -117 [ 127.754678][ T145] hfsplus: b-tree write err: -5, ino 4 [ 127.882886][ T6736] netlink: 'syz.3.838': attribute type 1 has an invalid length. [ 127.932001][ T6736] netlink: 'syz.3.838': attribute type 2 has an invalid length. [ 128.000882][ T6741] netlink: 'syz.3.838': attribute type 1 has an invalid length. [ 128.061849][ T6741] netlink: 'syz.3.838': attribute type 2 has an invalid length. [ 128.137375][ T6751] netlink: 72 bytes leftover after parsing attributes in process `syz.2.845'. [ 128.314818][ T6763] loop5: detected capacity change from 0 to 512 [ 128.383304][ T6763] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.446214][ T6763] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 128.455989][ T6763] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.848: invalid indirect mapped block 2683928664 (level 1) [ 128.496863][ T6763] EXT4-fs (loop5): Remounting filesystem read-only [ 128.520891][ T6763] EXT4-fs (loop5): 1 truncate cleaned up [ 128.527106][ T6763] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 128.557733][ T6763] EXT4-fs (loop5): shut down requested (2) [ 128.842453][ T6791] netlink: 176 bytes leftover after parsing attributes in process `syz.0.856'. [ 128.867671][ T6791] device ip6gretap0 entered promiscuous mode [ 128.882832][ T6791] netlink: 176 bytes leftover after parsing attributes in process `syz.0.856'. [ 128.975337][ T6797] loop3: detected capacity change from 0 to 512 [ 129.106062][ T6797] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 129.148478][ T6797] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.483331][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.867'. [ 129.829703][ T6854] loop3: detected capacity change from 0 to 2048 [ 129.886249][ T4228] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 129.932268][ T6854] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 130.172072][ T4228] usb 2-1: Using ep0 maxpacket: 16 [ 130.207891][ T4242] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 130.312100][ T4228] usb 2-1: config 0 has an invalid interface number: 225 but max is 0 [ 130.320351][ T4228] usb 2-1: config 0 has no interface number 0 [ 130.344731][ T4228] usb 2-1: config 0 interface 225 has no altsetting 0 [ 130.417800][ T6846] loop2: detected capacity change from 0 to 32768 [ 130.514775][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.886'. [ 130.552573][ T4228] usb 2-1: New USB device found, idVendor=0b95, idProduct=1720, bcdDevice=23.b4 [ 130.553394][ T4472] Bluetooth: hci0: command 0x0c20 tx timeout [ 130.561696][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.576172][ T4228] usb 2-1: Product: syz [ 130.582867][ T6887] nbd: socks must be embedded in a SOCK_ITEM attr [ 130.603278][ T4228] usb 2-1: Manufacturer: syz [ 130.607927][ T4228] usb 2-1: SerialNumber: syz [ 130.619640][ T6894] loop6: detected capacity change from 0 to 8388608 [ 130.642007][ T4242] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.651507][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.653283][ T4228] usb 2-1: config 0 descriptor?? [ 130.663513][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.676558][ T4242] usb 6-1: config 0 interface 0 has no altsetting 0 [ 130.683370][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.694285][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.740528][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.751610][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.756520][ T6900] loop0: detected capacity change from 0 to 2048 [ 130.793294][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.804239][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.811548][ T6900] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.832045][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.842964][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.853369][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.864465][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.884458][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.895656][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.912070][ T145] wlan0: Trigger new scan to find an IBSS to join [ 130.922397][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.933417][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.941429][ T4174] ldm_validate_partition_table(): Disk read failed. [ 130.954810][ T144] ------------[ cut here ]------------ [ 130.960786][ T144] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 130.963643][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.971348][ T144] WARNING: CPU: 1 PID: 144 at net/mac80211/rate.c:376 __rate_control_send_low+0x630/0x880 [ 130.981844][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.991874][ T144] Modules linked in: [ 131.003616][ T144] CPU: 1 PID: 144 Comm: kworker/u4:1 Not tainted 5.15.189-syzkaller #0 [ 131.011909][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.022004][ T144] Workqueue: phy3 ieee80211_scan_work [ 131.027439][ T144] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 131.033744][ T144] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 60 b9 18 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 e0 2e 68 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 131.043033][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.053498][ T144] RSP: 0018:ffffc9000172f488 EFLAGS: 00010246 [ 131.053525][ T144] RAX: 927e6d76bbb20a00 RBX: 000000000000000c RCX: ffff888017dc9dc0 [ 131.053538][ T144] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 131.053554][ T144] RBP: 0000000000000084 R08: dffffc0000000000 R09: fffffbfff1ff6e39 [ 131.053566][ T144] R10: fffffbfff1ff6e39 R11: 1ffffffff1ff6e38 R12: ffff8880252f07a8 [ 131.064534][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.079323][ T4174] Dev loop6: unable to read RDB block 0 [ 131.086973][ T144] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 131.086994][ T144] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 131.087010][ T144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.087022][ T144] CR2: 00007f3ee83eb6b0 CR3: 000000007e2b7000 CR4: 00000000003506e0 [ 131.098595][ T4174] loop6: unable to read partition table [ 131.103102][ T144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 131.103120][ T144] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 131.103132][ T144] Call Trace: [ 131.103139][ T144] [ 131.103158][ T144] rate_control_send_low+0x194/0x790 [ 131.120456][ T6894] ldm_validate_partition_table(): Disk read failed. [ 131.124579][ T144] ? ieee80211_scan_work+0x4ea/0x1b40 [ 131.124613][ T144] rate_control_get_rate+0x207/0x5c0 [ 131.124639][ T144] ieee80211_tx_h_rate_ctrl+0xac5/0x1700 [ 131.124670][ T144] ? ieee80211_tx_h_select_key+0x1680/0x1680 [ 131.124693][ T144] ? sta_info_hash_lookup+0x53e/0x580 [ 131.124710][ T144] ? ieee80211_queue_skb+0xd0/0x2120 [ 131.124729][ T144] invoke_tx_handlers_late+0xaa/0x16a0 [ 131.124748][ T144] ? ieee80211_tx_h_select_key+0x1172/0x1680 [ 131.167588][ T6894] Dev loop6: unable to read RDB block 0 [ 131.170092][ T144] ? sta_info_get+0x220/0x230 [ 131.170124][ T144] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 131.170152][ T144] ieee80211_tx+0x2a9/0x410 [ 131.170173][ T144] ? ieee80211_skb_resize+0x630/0x630 [ 131.176160][ T6894] loop6: unable to read partition table [ 131.176561][ T144] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 131.189638][ T6894] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 131.193995][ T144] ieee80211_scan_state_send_probe+0x526/0x8a0 [ 131.194044][ T144] ieee80211_scan_work+0x4ea/0x1b40 [ 131.194087][ T144] process_one_work+0x863/0x1000 [ 131.227966][ T3560] ldm_validate_partition_table(): Disk read failed. [ 131.233780][ T144] ? worker_detach_from_pool+0x240/0x240 [ 131.233808][ T144] ? lockdep_hardirqs_off+0x70/0x100 [ 131.233830][ T144] ? _raw_spin_lock_irq+0xab/0xe0 [ 131.233850][ T144] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 131.240237][ T3560] Dev loop6: unable to read RDB block 0 [ 131.244196][ T144] ? wq_worker_running+0x97/0x170 [ 131.244222][ T144] worker_thread+0xaa8/0x12a0 [ 131.244263][ T144] kthread+0x436/0x520 [ 131.244278][ T144] ? rcu_lock_release+0x20/0x20 [ 131.244292][ T144] ? kthread_blkcg+0xd0/0xd0 [ 131.244308][ T144] ret_from_fork+0x1f/0x30 [ 131.244340][ T144] [ 131.244364][ T144] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 131.244374][ T144] CPU: 1 PID: 144 Comm: kworker/u4:1 Not tainted 5.15.189-syzkaller #0 [ 131.244391][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.244402][ T144] Workqueue: phy3 ieee80211_scan_work [ 131.244424][ T144] Call Trace: [ 131.244429][ T144] [ 131.244436][ T144] dump_stack_lvl+0x168/0x230 [ 131.257169][ T3560] loop6: unable to read partition table [ 131.260290][ T144] ? show_regs_print_info+0x20/0x20 [ 131.371300][ T6915] loop2: detected capacity change from 0 to 24 [ 131.377103][ T144] ? load_image+0x3b0/0x3b0 [ 131.377142][ T144] panic+0x2c9/0x7f0 [ 131.377162][ T144] ? bpf_jit_dump+0xd0/0xd0 [ 131.377186][ T144] ? ret_from_fork+0x1f/0x30 [ 131.377204][ T144] ? __rate_control_send_low+0x630/0x880 [ 131.377222][ T144] __warn+0x248/0x2b0 [ 131.377238][ T144] ? __rate_control_send_low+0x630/0x880 [ 131.377255][ T144] report_bug+0x1b7/0x2e0 [ 131.377277][ T144] handle_bug+0x3a/0x70 [ 131.462584][ T144] exc_invalid_op+0x16/0x40 [ 131.467114][ T144] asm_exc_invalid_op+0x16/0x20 [ 131.472071][ T144] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 131.478427][ T144] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 60 b9 18 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 e0 2e 68 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 131.498137][ T144] RSP: 0018:ffffc9000172f488 EFLAGS: 00010246 [ 131.504222][ T144] RAX: 927e6d76bbb20a00 RBX: 000000000000000c RCX: ffff888017dc9dc0 [ 131.512219][ T144] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 131.520203][ T144] RBP: 0000000000000084 R08: dffffc0000000000 R09: fffffbfff1ff6e39 [ 131.528188][ T144] R10: fffffbfff1ff6e39 R11: 1ffffffff1ff6e38 R12: ffff8880252f07a8 [ 131.536451][ T144] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 131.544568][ T144] ? __rate_control_send_low+0x630/0x880 [ 131.550240][ T144] rate_control_send_low+0x194/0x790 [ 131.555805][ T144] ? ieee80211_scan_work+0x4ea/0x1b40 [ 131.561196][ T144] rate_control_get_rate+0x207/0x5c0 [ 131.566508][ T144] ieee80211_tx_h_rate_ctrl+0xac5/0x1700 [ 131.572171][ T144] ? ieee80211_tx_h_select_key+0x1680/0x1680 [ 131.578287][ T144] ? sta_info_hash_lookup+0x53e/0x580 [ 131.583913][ T144] ? ieee80211_queue_skb+0xd0/0x2120 [ 131.589218][ T144] invoke_tx_handlers_late+0xaa/0x16a0 [ 131.594710][ T144] ? ieee80211_tx_h_select_key+0x1172/0x1680 [ 131.600710][ T144] ? sta_info_get+0x220/0x230 [ 131.605415][ T144] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 131.611249][ T144] ieee80211_tx+0x2a9/0x410 [ 131.615861][ T144] ? ieee80211_skb_resize+0x630/0x630 [ 131.621277][ T144] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 131.627147][ T144] ieee80211_scan_state_send_probe+0x526/0x8a0 [ 131.633427][ T144] ieee80211_scan_work+0x4ea/0x1b40 [ 131.638671][ T144] process_one_work+0x863/0x1000 [ 131.643644][ T144] ? worker_detach_from_pool+0x240/0x240 [ 131.649294][ T144] ? lockdep_hardirqs_off+0x70/0x100 [ 131.654599][ T144] ? _raw_spin_lock_irq+0xab/0xe0 [ 131.659701][ T144] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 131.665099][ T144] ? wq_worker_running+0x97/0x170 [ 131.670143][ T144] worker_thread+0xaa8/0x12a0 [ 131.674948][ T144] kthread+0x436/0x520 [ 131.679032][ T144] ? rcu_lock_release+0x20/0x20 [ 131.683912][ T144] ? kthread_blkcg+0xd0/0xd0 [ 131.688604][ T144] ret_from_fork+0x1f/0x30 [ 131.693149][ T144] [ 131.696451][ T144] Kernel Offset: disabled [ 131.701134][ T144] Rebooting in 86400 seconds..