last executing test programs: 35.965016895s ago: executing program 3 (id=879): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000480)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) 35.771271789s ago: executing program 3 (id=882): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000007c0)='1', 0x1}], 0x1, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x40054}}], 0x1, 0x4) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 35.651610332s ago: executing program 3 (id=885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 35.384967768s ago: executing program 3 (id=889): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x60b9, &(0x7f0000013cc0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0/file1\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000001a80)='./file0\x00', 0x0, 0x3101015, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, 0x0) 34.239688365s ago: executing program 3 (id=909): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0xfffffffe, 0x2, 0xb, 0xa, "ff00f70000e5020060c4f27cfb82d902002000"}) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x20000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000040)) 32.586124285s ago: executing program 3 (id=924): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x208, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x92012, r0, 0x6d365000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) 32.411099329s ago: executing program 32 (id=924): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x208, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x92012, r0, 0x6d365000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) 6.437069507s ago: executing program 1 (id=1196): r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f0000bfd000/0x400000)=nil) shmat(r0, &(0x7f0000f02000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 6.290458021s ago: executing program 1 (id=1199): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newqdisc={0x154, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x40d6}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x58, 0xb, 0x20, 0x13, 0x8}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x0) 6.174482104s ago: executing program 1 (id=1202): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/tdp_mmu\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='N\x00', 0x2) 6.009284337s ago: executing program 1 (id=1204): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, &(0x7f0000001dc0)={0x11, 0xfe, 0x80000}, 0x20) 5.8957301s ago: executing program 1 (id=1207): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) 5.47039829s ago: executing program 1 (id=1214): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000440)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/199, 0xc7}], 0x1) 5.154585468s ago: executing program 4 (id=1220): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x3, 0xbbdd}, {0x2, 0x100, 0x3000}], 0x2) semctl$GETZCNT(r0, 0x1, 0xf, 0x0) 4.496620183s ago: executing program 5 (id=1229): syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x2210480, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0], 0xfa, 0x160, &(0x7f0000000380)="$eJzs0M+LEnEYx/H3d+brKKRYZCBBKXTIksAf1C3CiSQhGyi6dBJs+gGKkVDeUqJbB6Grh9q9Lgv7F+jqYdlFL7v/xF68LezRZWbcXZb1P9jndZvP830+D8yLp7OM4tzzVvPrN7fddj+k3zjV8tvD4bDk5RZ0ti7Mg/ejEnxGM9Iw74EXT2Lw8UvDNeqthvc9L0EYsK8tc5rx03t2QtPTkCfYz9yD8S3/ncHlzC0S8vdua7DjQZYDFv/hvgX2jSDz+o4AE5SylsfumPyuZFM3FXQG2c2NvdfT3cqjh8/cP4Vy/0E0aWZ/whq2iuxMPh2Yy63ZtPrKqTqzYqHwpJjLGzze9wu7ffTL6Hd4r0B7fQZ+n0Xyrn4HvxT89W/Nt1UMGP87dprhs3/d/WGmQaUG9VoytF5LXDcwM9qbLFjBnxBZNRJCCCGEEEIIIYQQQgghhBBCCHHVnQQAAP//A2lTBA==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x101c) 4.082386283s ago: executing program 4 (id=1232): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x4433, &(0x7f0000008a00)="$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") syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYBLOB="0a242195a98fe03eacaaae1a07a7040002aeb714f311d505d4d7e64384c52a229342d1d59e60c5609aa126493eab85f1396f9196b57acfd024ea40c967054ffec298e67e9fea908bdc02d7baefd7203acfe06243d10ba46a5005ed8a268fc9815f871b30cd4b92b75160ec3a36c0185374ac85584df63b7e49507de787414121467492252ec4735c76f93fa1d9ca4b545582bc352c123ef1f26c2a81d1e9d099f56f575260fa63acd370fef6724ee244bb77"], 0x1, 0x6a5, &(0x7f0000000f00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x0) 4.051518244s ago: executing program 5 (id=1233): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)="31b809", 0x3) 4.018827395s ago: executing program 2 (id=1234): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x1, 0x7}, {0x0, 0x3, 0xfffffffd, 0x1}, {0x5, 0x21, 0x10, 0x8}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020c0c000400053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.858404218s ago: executing program 5 (id=1235): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[], 0xfffffd7a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 3.77601145s ago: executing program 2 (id=1236): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f00000003c0)={{0x84, @multicast2, 0x4e22, 0x800002, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x8, 0x200004e}}, 0x44) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000140)=0xfffffffffffffd64) 3.637470484s ago: executing program 2 (id=1238): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f0000002480)=[{&(0x7f0000002380)="1fc1", 0x2}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) 3.436809669s ago: executing program 2 (id=1240): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x3) write(r0, &(0x7f0000000680)="769fbf82a57f985f3a8d01a17790137c619519a5e48bc1e675930d91a44ec0d3a4319e9c9df3704577f589907a05647a3a", 0x31) 3.250392573s ago: executing program 2 (id=1241): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000140)={[{@init_itable}, {@grpid}, {@quota}]}, 0x2, 0x553, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x6000, 0x0) fcntl$setlease(r0, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2.875216692s ago: executing program 5 (id=1245): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/failslab/times\x00', 0x1, 0x0) write(r0, &(0x7f0000000750)='1', 0x1) 2.679454736s ago: executing program 5 (id=1246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x38, r1, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x297b, 0xff13, 0x7, 0x401, 0x10, 0x4, 0x400, 0xd]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000855}, 0x1000) 2.583805769s ago: executing program 5 (id=1247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x10}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.750329578s ago: executing program 2 (id=1252): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 1.27749965s ago: executing program 0 (id=1255): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x6) 1.140279673s ago: executing program 0 (id=1256): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140)=0x4, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000540)=0x2350, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e23, 0x4, @loopback, 0x4}, 0x1c) 1.061015275s ago: executing program 0 (id=1257): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x80007) 899.034579ms ago: executing program 0 (id=1258): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x8000, &(0x7f0000000000)={[{@fat=@tz_utc}, {@fat=@errors_continue}, {@fat=@time_offset={'time_offset', 0x3d, 0xd}}, {@dots}, {@nodots}, {@fat=@sys_immutable}, {@fat=@usefree}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@fat=@discard}, {@fat=@quiet}]}, 0x21, 0x25c, &(0x7f0000000640)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 685.121064ms ago: executing program 0 (id=1259): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) 614.299795ms ago: executing program 4 (id=1260): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 530.983438ms ago: executing program 0 (id=1261): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f00000002c0)={0x20, 0x1a, 0x6, "471a2024df60"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f00000000c0)={0x20, 0x30, 0x4, "e0115555"}, 0x0, 0x0}) 246.447244ms ago: executing program 4 (id=1262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000040)={0x44, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "ff55987e7b5bdee2dcd837ddfef6aea6"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xf43}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000004}, 0x8000) 168.304576ms ago: executing program 4 (id=1263): sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x8840) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 0s ago: executing program 4 (id=1264): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x48, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x55, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3}}, @TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x7}}, @TCA_FW_MASK={0x8, 0x5, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) kernel console output (not intermixed with test programs): .009098][ T4951] BTRFS info (device loop4): creating free space tree [ 76.020764][ T4951] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 76.031820][ T4951] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 76.101247][ T25] audit: type=1800 audit(1785417204.630:6): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.255" name="file1" dev="loop4" ino=257 res=0 errno=0 [ 76.221867][ T1325] usb 2-1: Using ep0 maxpacket: 16 [ 76.305041][ T21] cfg80211: failed to load regulatory.db [ 76.365212][ T1325] usb 2-1: config 0 interface 0 has no altsetting 0 [ 76.371980][ T1325] usb 2-1: New USB device found, idVendor=056a, idProduct=0304, bcdDevice= 0.00 [ 76.381608][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.397893][ T1325] usb 2-1: config 0 descriptor?? [ 76.713042][ T5000] loop4: detected capacity change from 0 to 128 [ 76.757454][ T5000] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.782677][ T5000] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.875274][ T4242] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.883103][ T1325] wacom 0003:056A:0304.0001: unknown main item tag 0x2 [ 76.897425][ T1325] wacom 0003:056A:0304.0001: unknown main item tag 0x6 [ 76.904861][ T1325] wacom 0003:056A:0304.0001: ignoring exceeding usage max [ 76.926862][ T1325] wacom 0003:056A:0304.0001: hidraw0: USB HID v0.81 Device [HID 056a:0304] on usb-dummy_hcd.1-1/input0 [ 77.062896][ T5009] loop4: detected capacity change from 0 to 128 [ 77.160311][ T21] usb 2-1: USB disconnect, device number 2 [ 77.166547][ T25] audit: type=1800 audit(1785417205.690:7): pid=5009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.272" name="file1" dev="loop4" ino=1048604 res=0 errno=0 [ 77.209175][ T5009] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 77.263585][ T5009] FAT-fs (loop4): Filesystem has been set read-only [ 77.332370][ T5009] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 77.431147][ T5016] loop3: detected capacity change from 0 to 4096 [ 77.688898][ T5026] loop4: detected capacity change from 0 to 1024 [ 77.694096][ T5016] ntfs3: loop3: failed to convert "0000" to iso8859-1 [ 77.715193][ T5016] ntfs3: loop3: failed to convert name for inode 1e. [ 77.818330][ T5030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 77.918541][ T5032] loop2: detected capacity change from 0 to 512 [ 77.935964][ T4242] hfsplus: b-tree write err: -5, ino 25 [ 77.962659][ T4242] hfsplus: b-tree write err: -5, ino 4 [ 77.970489][ T4242] hfsplus: b-tree write err: -5, ino 2 [ 77.976402][ T4242] hfsplus: b-tree write err: -5, ino 26 [ 78.005161][ T5032] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80fc018, mo2=0002] [ 78.013384][ T5032] System zones: 0-2, 18-18, 34-35 [ 78.023677][ T5032] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,debug,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 78.051212][ T5034] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.116077][ T5032] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.139946][ T5034] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 78.154876][ T5034] System zones: 1-12 [ 78.175147][ T5034] EXT4-fs (loop3): 1 truncate cleaned up [ 78.196387][ T5034] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,nodiscard,,errors=continue. Quota mode: none. [ 78.522743][ T5058] set_capacity_and_notify: 1 callbacks suppressed [ 78.522759][ T5058] loop1: detected capacity change from 0 to 256 [ 78.884139][ T5079] program syz.0.302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.916791][ T5081] loop4: detected capacity change from 0 to 128 [ 79.778738][ T5095] loop0: detected capacity change from 0 to 32768 [ 79.955571][ T5125] block device autoloading is deprecated and will be removed. [ 79.976213][ T5129] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 79.979781][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.325107][ T5148] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.389865][ T21] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 80.399516][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.438594][ T21] usb 5-1: config 0 descriptor?? [ 80.448247][ T5154] netlink: 64 bytes leftover after parsing attributes in process `syz.0.337'. [ 80.486205][ T21] cp210x 5-1:0.0: cp210x converter detected [ 80.490540][ T1325] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 80.577015][ T5162] netlink: 48 bytes leftover after parsing attributes in process `syz.0.340'. [ 80.594533][ T5160] loop1: detected capacity change from 0 to 8192 [ 80.790940][ T1325] usb 3-1: Using ep0 maxpacket: 16 [ 80.804526][ T5174] loop0: detected capacity change from 0 to 1024 [ 80.854147][ T5174] EXT4-fs (loop0): Ignoring removed bh option [ 80.870305][ T5174] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.919840][ T21] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 80.942473][ T5178] loop1: detected capacity change from 0 to 4096 [ 80.945708][ T5174] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,norecovery,bsddf,dioread_nolock,. Quota mode: none. [ 80.968476][ T21] usb 5-1: cp210x converter now attached to ttyUSB0 [ 81.024617][ T5178] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 81.151488][ T1325] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 81.170834][ T1325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.202467][ T1325] usb 3-1: Product: syz [ 81.208756][ T4228] usb 5-1: USB disconnect, device number 3 [ 81.213325][ T1325] usb 3-1: Manufacturer: syz [ 81.235502][ T1325] usb 3-1: SerialNumber: syz [ 81.245210][ T4228] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 81.275756][ T1325] usb 3-1: config 0 descriptor?? [ 81.276027][ T4228] cp210x 5-1:0.0: device disconnected [ 81.360803][ T1325] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 81.575488][ T1325] usb 3-1: USB disconnect, device number 4 [ 81.913585][ T5206] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.932281][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.177675][ T5218] comedi comedi0: No channels found! [ 82.479196][ T5238] loop0: detected capacity change from 0 to 512 [ 82.566960][ T5245] loop3: detected capacity change from 0 to 256 [ 82.600907][ T5238] EXT4-fs (loop0): Ignoring removed orlov option [ 82.607323][ T5238] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.683269][ T5238] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #16: comm syz.0.372: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 82.744632][ T5238] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.372: couldn't read orphan inode 16 (err -117) [ 82.760258][ T5238] EXT4-fs (loop0): 1 orphan inode deleted [ 82.766031][ T5238] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,lazytime,,errors=continue. Quota mode: none. [ 82.876448][ T5238] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 82.917563][ T5255] tipc: Enabling of bearer rejected, media not registered [ 83.012933][ T5259] loop1: detected capacity change from 0 to 256 [ 83.082362][ T5259] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1f3a413c, utbl_chksum : 0xe619d30d) [ 83.128897][ T5266] loop2: detected capacity change from 0 to 256 [ 83.201293][ T5266] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 83.357366][ T5280] capability: warning: `syz.4.390' uses deprecated v2 capabilities in a way that may be insecure [ 83.380758][ T5275] syz.3.389 (5275) used greatest stack depth: 20832 bytes left [ 83.393509][ T5281] binder: 5279:5281 ioctl c0306201 200000000440 returned -14 [ 83.677789][ T5295] netlink: 884 bytes leftover after parsing attributes in process `syz.4.397'. [ 83.697000][ T5291] syz.2.395 (5291) used greatest stack depth: 20304 bytes left [ 83.734723][ T5298] loop2: detected capacity change from 0 to 256 [ 83.762744][ T5298] exfat: Deprecated parameter 'namecase' [ 83.810035][ T5298] exfat: Deprecated parameter 'namecase' [ 83.816313][ T5298] exfat: Deprecated parameter 'utf8' [ 83.888254][ T5298] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 84.204434][ T5289] loop0: detected capacity change from 0 to 40427 [ 84.225403][ T5289] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 84.255897][ T5289] F2FS-fs (loop0): invalid crc value [ 84.272869][ T5289] F2FS-fs (loop0): Found nat_bits in checkpoint [ 84.356491][ T5289] F2FS-fs (loop0): recover fsync data on readonly fs [ 84.377730][ T5289] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 84.378895][ T5318] loop1: detected capacity change from 0 to 1024 [ 84.384654][ T5289] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 84.388840][ T5289] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 84.391741][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 84.565375][ T5318] hfsplus: walked past end of dir [ 84.679682][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 84.723174][ T5322] netem: change failed [ 84.761922][ T5324] comedi comedi0: Minor 3 specified more than once! [ 84.799848][ T21] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 84.829783][ T21] usb 3-1: config 0 has no interface number 0 [ 84.843773][ T5329] loop1: detected capacity change from 0 to 256 [ 84.851158][ T21] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.863090][ T21] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.873396][ T21] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 84.882918][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.892751][ T21] usb 3-1: config 0 descriptor?? [ 84.898991][ T5332] loop0: detected capacity change from 0 to 64 [ 84.913761][ T5329] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.927558][ T5329] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 84.938631][ T4228] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 84.954524][ T5329] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 84.991558][ T5329] exFAT-fs (loop1): failed to exfat_utf8_to_utf16 (estr:ENAMETOOLONG) nls len : 260, unilen : 257 > 255 [ 85.003251][ T25] audit: type=1800 audit(1785417213.520:8): pid=5332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.414" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 85.146666][ T5339] loop1: detected capacity change from 0 to 64 [ 85.181176][ T4228] usb 5-1: Using ep0 maxpacket: 16 [ 85.263666][ T5339] hfs: request for non-existent node 131072 in B*Tree [ 85.275737][ T5339] hfs: request for non-existent node 131072 in B*Tree [ 85.300007][ T4228] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.326070][ T4228] usb 5-1: config 0 interface 0 has no altsetting 0 [ 85.332783][ T4228] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 85.342100][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.360947][ T4228] usb 5-1: config 0 descriptor?? [ 85.380729][ T21] hid (null): global environment stack underflow [ 85.599903][ T21] uclogic 0003:28BD:0071.0002: pen parameters not found [ 85.609767][ T21] uclogic 0003:28BD:0071.0002: interface is invalid, ignoring [ 85.817033][ T26] usb 3-1: USB disconnect, device number 5 [ 85.842566][ T4228] mcp2221 0003:04D8:00DD.0003: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 86.139907][ T4232] Bluetooth: hci5: command 0x1003 tx timeout [ 86.146686][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 86.260209][ T4228] usb 5-1: USB disconnect, device number 4 [ 86.735525][ T5375] netem: change failed [ 86.850504][ T5377] netlink: 16 bytes leftover after parsing attributes in process `syz.2.435'. [ 86.887057][ T5379] netlink: 277 bytes leftover after parsing attributes in process `syz.4.436'. [ 86.914344][ T5364] loop0: detected capacity change from 0 to 32768 [ 87.114648][ T5371] loop1: detected capacity change from 0 to 32768 [ 87.142198][ T5364] XFS (loop0): Mounting V5 Filesystem [ 87.205744][ T5398] loop2: detected capacity change from 0 to 128 [ 87.206423][ T5371] JBD2: Ignoring recovery information on journal [ 87.238724][ T5391] loop4: detected capacity change from 0 to 8192 [ 87.246670][ T5371] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 87.261785][ T5371] JBD2: bad block at offset 32 [ 87.287363][ T5371] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 87.355889][ T5364] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 87.368938][ T5398] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.398682][ T5391] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.425893][ T5398] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.460332][ T5364] XFS (loop0): Starting recovery (logdev: internal) [ 87.486211][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 87.548308][ T5364] XFS (loop0): Ending recovery (logdev: internal) [ 87.569519][ T5364] XFS (loop0): Quotacheck needed: Please wait. [ 87.643146][ T5364] XFS (loop0): Quotacheck: Done. [ 87.955664][ T4188] XFS (loop0): Unmounting Filesystem [ 88.219922][ T4232] Bluetooth: hci5: command 0x1001 tx timeout [ 88.236226][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 88.315260][ T5436] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 88.374664][ T5436] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 88.404008][ T5436] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #3: comm syz.1.456: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 88.487552][ T5436] EXT4-fs (loop1): no journal found [ 88.519659][ T5436] EXT4-fs (loop1): can't get journal size [ 88.537328][ T5436] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000008,noinit_itable,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback. [ 89.004334][ T5479] set_capacity_and_notify: 1 callbacks suppressed [ 89.004350][ T5479] loop1: detected capacity change from 0 to 512 [ 89.136193][ T5479] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.327438][ T5495] loop2: detected capacity change from 0 to 1024 [ 89.384052][ T5495] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 89.428988][ T5495] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 89.672965][ T5504] loop1: detected capacity change from 0 to 1024 [ 89.792016][ T5506] netlink: 'syz.2.485': attribute type 12 has an invalid length. [ 89.805577][ T5506] netlink: 'syz.2.485': attribute type 29 has an invalid length. [ 89.814263][ T5506] netlink: 148 bytes leftover after parsing attributes in process `syz.2.485'. [ 89.825019][ T5506] netlink: 'syz.2.485': attribute type 1 has an invalid length. [ 89.832983][ T5506] netlink: 47 bytes leftover after parsing attributes in process `syz.2.485'. [ 90.175736][ T5523] loop4: detected capacity change from 0 to 256 [ 90.256689][ T5523] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 90.281059][ T5503] loop0: detected capacity change from 0 to 32768 [ 90.299744][ T1336] Bluetooth: hci5: command 0x1009 tx timeout [ 90.339525][ T25] audit: type=1800 audit(1785417218.860:9): pid=5523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.493" name="file2" dev="loop4" ino=1048611 res=0 errno=0 [ 90.369296][ T5530] loop2: detected capacity change from 0 to 1024 [ 90.390838][ T25] audit: type=1800 audit(1785417218.910:10): pid=5523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.493" name="file2" dev="loop4" ino=1048611 res=0 errno=0 [ 90.413607][ T5523] exFAT-fs (loop4): hint_cluster is invalid (17) [ 90.448413][ T5523] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff) [ 90.456403][ T25] audit: type=1800 audit(1785417218.970:11): pid=5503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.483" name="file1" dev="loop0" ino=3 res=0 errno=0 [ 90.458566][ T5523] exFAT-fs (loop4): Filesystem has been set read-only [ 90.496586][ T5523] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff) [ 90.532384][ T5530] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 2: comm syz.2.497: lblock 2 mapped to illegal pblock 2 (length 1) [ 90.556806][ T5530] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 90.567099][ T5530] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 48: comm syz.2.497: lblock 0 mapped to illegal pblock 48 (length 1) [ 90.586856][ T5530] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 90.589769][ T1336] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.598053][ T5530] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.497: Failed to acquire dquot type 0 [ 90.636096][ T5530] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 90.685926][ T5530] EXT4-fs error (device loop2): ext4_evict_inode:284: inode #11: comm syz.2.497: mark_inode_dirty error [ 90.704403][ T5530] EXT4-fs warning (device loop2): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 90.715545][ T5530] EXT4-fs (loop2): 1 orphan inode deleted [ 90.721723][ T5530] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 90.744204][ T4242] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.800678][ T4242] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 90.830000][ T4242] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 90.839797][ T1336] usb 2-1: Using ep0 maxpacket: 16 [ 90.915971][ T5530] EXT4-fs (loop2): Ignoring removed bh option [ 90.941094][ T5530] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 48: comm syz.2.497: lblock 0 mapped to illegal pblock 48 (length 1) [ 90.964953][ T5530] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 90.982084][ T5530] EXT4-fs (loop2): Ignoring removed bh option [ 90.985610][ T5542] loop4: detected capacity change from 0 to 4096 [ 91.004169][ T1336] usb 2-1: unable to get BOS descriptor or descriptor too short [ 91.061818][ T5542] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 91.100301][ T1336] usb 2-1: config 0 has an invalid interface number: 228 but max is 2 [ 91.110479][ T1336] usb 2-1: config 0 has an invalid interface number: 172 but max is 2 [ 91.118694][ T1336] usb 2-1: config 0 has an invalid interface number: 181 but max is 2 [ 91.159990][ T1336] usb 2-1: config 0 has no interface number 0 [ 91.168292][ T1336] usb 2-1: config 0 has no interface number 1 [ 91.174528][ T25] audit: type=1800 audit(1785417219.690:12): pid=5542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.501" name="file2" dev="loop4" ino=31 res=0 errno=0 [ 91.209736][ T1336] usb 2-1: config 0 has no interface number 2 [ 91.218847][ T1336] usb 2-1: config 0 interface 228 has no altsetting 0 [ 91.226724][ T1336] usb 2-1: config 0 interface 172 has no altsetting 0 [ 91.234209][ T1336] usb 2-1: config 0 interface 181 has no altsetting 0 [ 91.312628][ T5551] netlink: 116 bytes leftover after parsing attributes in process `syz.4.505'. [ 91.396129][ T5554] loop2: detected capacity change from 0 to 2048 [ 92.009796][ T5561] loop2: detected capacity change from 0 to 32768 [ 92.037417][ T5561] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.510 (5561) [ 92.146022][ T5556] loop4: detected capacity change from 0 to 131072 [ 92.153989][ T1336] usb 2-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=f1.7f [ 92.164691][ T1336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.173048][ T1336] usb 2-1: Product: syz [ 92.177212][ T1336] usb 2-1: Manufacturer: syz [ 92.181879][ T1336] usb 2-1: SerialNumber: syz [ 92.188162][ T1336] usb 2-1: config 0 descriptor?? [ 92.217510][ T5556] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 92.225730][ T5556] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 92.239087][ T5556] F2FS-fs (loop4): invalid crc value [ 92.260698][ T5561] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 92.283588][ T5556] F2FS-fs (loop4): Found nat_bits in checkpoint [ 92.311414][ T5561] BTRFS info (device loop2): using free space tree [ 92.341463][ T5556] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 92.346672][ T5561] BTRFS info (device loop2): has skinny extents [ 92.348555][ T5556] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 92.506013][ T5561] BTRFS info (device loop2): enabling ssd optimizations [ 92.511894][ T1336] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 92.522194][ T1336] usb 2-1: selecting invalid altsetting 0 [ 92.530174][ T2422] pvrusb2: Invalid write control endpoint [ 92.591574][ T1336] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 92.600095][ T1336] usb 2-1: selecting invalid altsetting 0 [ 92.656707][ T1336] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 92.672518][ T25] audit: type=1800 audit(1785417221.200:13): pid=5561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.510" name="file0" dev="loop2" ino=258 res=0 errno=0 [ 92.674732][ T5561] fs-verity (loop2, inode 258): Unknown hash algorithm number: 3 [ 92.698190][ T1336] usb 2-1: selecting invalid altsetting 0 [ 92.719094][ T2422] pvrusb2: Invalid write control endpoint [ 92.736133][ T2422] pvrusb2: Invalid write control endpoint [ 92.753410][ T5591] tap0: tun_chr_ioctl cmd 1074025677 [ 92.769330][ T1336] usb 2-1: USB disconnect, device number 3 [ 92.770346][ T2422] pvrusb2: Invalid write control endpoint [ 92.804082][ T5591] tap0: linktype set to 769 [ 92.815447][ T2422] pvrusb2: Invalid write control endpoint [ 92.832252][ T2422] pvrusb2: Invalid write control endpoint [ 92.852225][ T2422] pvrusb2: Invalid write control endpoint [ 92.872443][ T2422] pvrusb2: Invalid write control endpoint [ 92.878206][ T2422] pvrusb2: Invalid write control endpoint [ 92.895498][ T2422] pvrusb2: Invalid write control endpoint [ 92.925007][ T2422] pvrusb2: Invalid write control endpoint [ 92.957616][ T2422] pvrusb2: Invalid write control endpoint [ 92.970004][ T2422] pvrusb2: Invalid write control endpoint [ 92.999806][ T2422] pvrusb2: Invalid write control endpoint [ 93.031065][ T2422] pvrusb2: Invalid write control endpoint [ 93.036830][ T2422] pvrusb2: Invalid write control endpoint [ 93.095711][ T2422] pvrusb2: Invalid write control endpoint [ 93.130518][ T2422] pvrusb2: Invalid write control endpoint [ 93.136303][ T2422] pvrusb2: Invalid write control endpoint [ 93.189561][ T2422] pvrusb2: Invalid write control endpoint [ 93.205779][ T2422] pvrusb2: Invalid write control endpoint [ 93.212232][ T2422] pvrusb2: Invalid write control endpoint [ 93.219336][ T2422] pvrusb2: Invalid write control endpoint [ 93.239889][ T2422] pvrusb2: Invalid write control endpoint [ 93.245646][ T2422] pvrusb2: Invalid write control endpoint [ 93.264767][ T2422] pvrusb2: Invalid write control endpoint [ 93.289710][ T2422] pvrusb2: Invalid write control endpoint [ 93.295531][ T2422] pvrusb2: Invalid write control endpoint [ 93.309824][ T2422] pvrusb2: Invalid write control endpoint [ 93.315628][ T2422] pvrusb2: Invalid write control endpoint [ 93.329662][ T2422] pvrusb2: Invalid write control endpoint [ 93.341122][ T2422] pvrusb2: Invalid write control endpoint [ 93.349884][ T2422] pvrusb2: Invalid write control endpoint [ 93.395152][ T2422] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 93.563023][ T2422] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 93.603643][ T2422] pvrusb2: Invalid write control endpoint [ 93.631306][ T2422] pvrusb2: Invalid write control endpoint [ 93.651100][ T2422] pvrusb2: Invalid write control endpoint [ 93.665584][ T2422] pvrusb2: Invalid write control endpoint [ 93.681925][ T2422] pvrusb2: Invalid write control endpoint [ 93.705133][ T2422] pvrusb2: Invalid write control endpoint [ 93.724418][ T2422] pvrusb2: Invalid write control endpoint [ 93.743688][ T2422] pvrusb2: Invalid write control endpoint [ 93.773451][ T2422] pvrusb2: Invalid write control endpoint [ 93.779226][ T2422] pvrusb2: Invalid write control endpoint [ 93.817037][ T2422] pvrusb2: Invalid write control endpoint [ 93.838177][ T2422] pvrusb2: Invalid write control endpoint [ 93.848804][ T5625] program syz.4.524 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.875521][ T2422] pvrusb2: Invalid write control endpoint [ 93.896466][ T2422] pvrusb2: Invalid write control endpoint [ 93.912643][ T2422] pvrusb2: Invalid write control endpoint [ 93.937753][ T2422] pvrusb2: Invalid write control endpoint [ 93.976853][ T2422] pvrusb2: Invalid write control endpoint [ 94.021600][ T2422] pvrusb2: Invalid write control endpoint [ 94.047671][ T2422] pvrusb2: Invalid write control endpoint [ 94.064045][ T2422] pvrusb2: Invalid write control endpoint [ 94.085429][ T2422] pvrusb2: Invalid write control endpoint [ 94.107162][ T2422] pvrusb2: Attached sub-driver cs53l32a [ 94.208308][ T2422] pvrusb2: Invalid write control endpoint [ 94.255881][ T2422] pvrusb2: Invalid write control endpoint [ 94.300252][ T2422] pvrusb2: Invalid write control endpoint [ 94.306022][ T2422] pvrusb2: Invalid write control endpoint [ 94.359529][ T2422] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 94.470047][ T2422] pvrusb2: Device being rendered inoperable [ 94.478163][ T2422] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 94.510951][ T5663] loop2: detected capacity change from 0 to 512 [ 94.545946][ T2422] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 94.554520][ T5658] loop0: detected capacity change from 0 to 4096 [ 94.620658][ T2422] pvrusb2: Invalid write control endpoint [ 94.639785][ T5668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.678031][ T5668] device batadv_slave_0 entered promiscuous mode [ 94.701710][ T5658] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 94.801539][ T5668] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 94.916190][ T2422] pvrusb2: Invalid write control endpoint [ 94.929728][ T2422] pvrusb2: Invalid write control endpoint [ 94.959924][ T2422] pvrusb2: Invalid write control endpoint [ 94.965696][ T2422] pvrusb2: Invalid write control endpoint [ 95.045556][ T2422] pvrusb2: Invalid write control endpoint [ 95.072243][ T5668] syz.3.538 (5668) used greatest stack depth: 20080 bytes left [ 95.087803][ T2422] pvrusb2: Invalid write control endpoint [ 95.115749][ T2422] pvrusb2: Invalid write control endpoint [ 95.156875][ T2422] pvrusb2: Invalid write control endpoint [ 95.183441][ T2422] pvrusb2: Invalid write control endpoint [ 95.204690][ T2422] pvrusb2: Invalid write control endpoint [ 95.223139][ T5690] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.229696][ T2422] pvrusb2: Invalid write control endpoint [ 95.236193][ T2422] pvrusb2: Invalid write control endpoint [ 95.272486][ T2422] pvrusb2: Invalid write control endpoint [ 95.292631][ T2422] pvrusb2: Invalid write control endpoint [ 95.310580][ T2422] pvrusb2: Invalid write control endpoint [ 95.373890][ T2422] pvrusb2: Invalid write control endpoint [ 95.404367][ T2422] pvrusb2: Invalid write control endpoint [ 95.470822][ T2422] pvrusb2: Invalid write control endpoint [ 95.476665][ T2422] pvrusb2: Invalid write control endpoint [ 95.510151][ T2422] pvrusb2: Invalid write control endpoint [ 95.540051][ T2422] pvrusb2: Invalid write control endpoint [ 95.545832][ T2422] pvrusb2: Invalid write control endpoint [ 95.584320][ T2422] pvrusb2: Invalid write control endpoint [ 95.609838][ T2422] pvrusb2: Invalid write control endpoint [ 95.639737][ T2422] pvrusb2: Invalid write control endpoint [ 95.679162][ T2422] pvrusb2: Invalid write control endpoint [ 95.699424][ T2422] pvrusb2: Invalid write control endpoint [ 95.730500][ T2422] pvrusb2: Invalid write control endpoint [ 95.759570][ T2422] pvrusb2: Invalid write control endpoint [ 95.774121][ T5718] loop3: detected capacity change from 0 to 4096 [ 95.780833][ T2422] pvrusb2: Invalid write control endpoint [ 95.808230][ T2422] pvrusb2: Invalid write control endpoint [ 95.862362][ T2422] pvrusb2: Invalid write control endpoint [ 95.889081][ T5718] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 95.910184][ T2422] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 96.014342][ T144] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 96.038761][ T4201] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 96.078573][ T4201] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 96.089135][ T5740] atomic_op ffff88807819e198 conn xmit_atomic 0000000000000000 [ 96.106743][ T2422] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_b) [ 96.109834][ T4201] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 96.117502][ T2422] pvrusb2: Invalid write control endpoint [ 96.122182][ T4242] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 96.139429][ T4201] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 96.168361][ T2422] pvrusb2: Invalid write control endpoint [ 96.189278][ T2422] pvrusb2: Invalid write control endpoint [ 96.209162][ T2422] pvrusb2: Invalid write control endpoint [ 96.260602][ T2422] pvrusb2: Invalid write control endpoint [ 96.266408][ T2422] pvrusb2: Invalid write control endpoint [ 96.313723][ T2422] pvrusb2: Invalid write control endpoint [ 96.350786][ T2422] pvrusb2: Invalid write control endpoint [ 96.369694][ T2422] pvrusb2: Invalid write control endpoint [ 96.399946][ T2422] pvrusb2: Invalid write control endpoint [ 96.405720][ T2422] pvrusb2: Invalid write control endpoint [ 96.430340][ T2422] pvrusb2: Invalid write control endpoint [ 96.466599][ T2422] pvrusb2: Invalid write control endpoint [ 96.476710][ T2422] pvrusb2: Invalid write control endpoint [ 96.510889][ T2422] pvrusb2: Invalid write control endpoint [ 96.516980][ T2422] pvrusb2: Invalid write control endpoint [ 96.528816][ T5754] loop2: detected capacity change from 0 to 4096 [ 96.563978][ T2422] pvrusb2: Invalid write control endpoint [ 96.579733][ T2422] pvrusb2: Invalid write control endpoint [ 96.604618][ T2422] pvrusb2: Invalid write control endpoint [ 96.625314][ T2422] pvrusb2: Invalid write control endpoint [ 96.631521][ T5754] EXT4-fs (loop2): cluster size (1024) smaller than block size (4096) [ 96.638048][ T2422] pvrusb2: Invalid write control endpoint [ 96.659294][ T2422] pvrusb2: Attached sub-driver cs53l32a [ 96.797075][ T5774] loop1: detected capacity change from 0 to 256 [ 96.818060][ T2422] pvrusb2: Invalid write control endpoint [ 96.825637][ T2422] pvrusb2: Invalid write control endpoint [ 96.848063][ T2422] pvrusb2: Invalid write control endpoint [ 96.857011][ T2422] pvrusb2: Invalid write control endpoint [ 96.868788][ T2422] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 96.937815][ T5774] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1fe4a43c, utbl_chksum : 0xe619d30d) [ 97.000215][ T2422] pvrusb2: Device being rendered inoperable [ 97.006154][ T2422] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 97.081880][ T2422] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 97.091159][ T7] kernel read not supported for file /dsp (pid: 7 comm: kworker/0:0) [ 97.123306][ T5783] loop3: detected capacity change from 0 to 256 [ 97.164998][ T2422] pvrusb2: Invalid write control endpoint [ 97.205637][ T5783] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 97.236755][ T5760] loop4: detected capacity change from 0 to 32768 [ 97.352746][ T2422] pvrusb2: Invalid write control endpoint [ 97.358513][ T2422] pvrusb2: Invalid write control endpoint [ 97.383894][ T2422] pvrusb2: Invalid write control endpoint [ 97.389732][ T2422] pvrusb2: Invalid write control endpoint [ 97.408846][ T2422] pvrusb2: Invalid write control endpoint [ 97.417720][ T2422] pvrusb2: Invalid write control endpoint [ 97.424695][ T2422] pvrusb2: Invalid write control endpoint [ 97.431145][ T2422] pvrusb2: Invalid write control endpoint [ 97.436980][ T2422] pvrusb2: Invalid write control endpoint [ 97.443287][ T2422] pvrusb2: Invalid write control endpoint [ 97.449166][ T2422] pvrusb2: Invalid write control endpoint [ 97.455421][ T2422] pvrusb2: Invalid write control endpoint [ 97.461518][ T2422] pvrusb2: Invalid write control endpoint [ 97.470897][ T2422] pvrusb2: Invalid write control endpoint [ 97.474617][ T5760] XFS (loop4): Mounting V5 Filesystem [ 97.476722][ T2422] pvrusb2: Invalid write control endpoint [ 97.488450][ T2422] pvrusb2: Invalid write control endpoint [ 97.527673][ T5802] loop2: detected capacity change from 0 to 2048 [ 97.532557][ T2422] pvrusb2: Invalid write control endpoint [ 97.566996][ T5802] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.591069][ T2422] pvrusb2: Invalid write control endpoint [ 97.596881][ T2422] pvrusb2: Invalid write control endpoint [ 97.609856][ T5760] XFS (loop4): Ending clean mount [ 97.679847][ T2422] pvrusb2: Invalid write control endpoint [ 97.685625][ T2422] pvrusb2: Invalid write control endpoint [ 97.752255][ T2422] pvrusb2: Invalid write control endpoint [ 97.781094][ T4189] XFS (loop4): Unmounting Filesystem [ 97.787235][ T2422] pvrusb2: Invalid write control endpoint [ 97.802288][ T2422] pvrusb2: Invalid write control endpoint [ 97.826726][ T5819] loop0: detected capacity change from 0 to 4096 [ 97.870727][ T2422] pvrusb2: Invalid write control endpoint [ 97.925466][ T2422] pvrusb2: Invalid write control endpoint [ 97.944140][ T2422] pvrusb2: Invalid write control endpoint [ 97.983213][ T2422] pvrusb2: Invalid write control endpoint [ 98.024893][ T2422] pvrusb2: Invalid write control endpoint [ 98.069729][ T2422] pvrusb2: Invalid write control endpoint [ 98.075501][ T2422] pvrusb2: Invalid write control endpoint [ 98.095224][ T2422] pvrusb2: Invalid write control endpoint [ 98.103053][ T2422] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 98.224397][ T5829] netlink: 64 bytes leftover after parsing attributes in process `syz.1.599'. [ 98.287825][ T2422] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_c) [ 98.300460][ T2422] pvrusb2: Invalid write control endpoint [ 98.329798][ T2422] pvrusb2: Invalid write control endpoint [ 98.335583][ T2422] pvrusb2: Invalid write control endpoint [ 98.396327][ T2422] pvrusb2: Invalid write control endpoint [ 98.410554][ T2422] pvrusb2: Invalid write control endpoint [ 98.439221][ T2422] pvrusb2: Invalid write control endpoint [ 98.467421][ T2422] pvrusb2: Invalid write control endpoint [ 98.511937][ T2422] pvrusb2: Invalid write control endpoint [ 98.543453][ T2422] pvrusb2: Invalid write control endpoint [ 98.563411][ T2422] pvrusb2: Invalid write control endpoint [ 98.569184][ T2422] pvrusb2: Invalid write control endpoint [ 98.604401][ T2422] pvrusb2: Invalid write control endpoint [ 98.624080][ T2422] pvrusb2: Invalid write control endpoint [ 98.687256][ T2422] pvrusb2: Invalid write control endpoint [ 98.716606][ T2422] pvrusb2: Invalid write control endpoint [ 98.745161][ T2422] pvrusb2: Invalid write control endpoint [ 98.776577][ T2422] pvrusb2: Invalid write control endpoint [ 98.793505][ T2422] pvrusb2: Invalid write control endpoint [ 98.799312][ T5846] loop3: detected capacity change from 0 to 512 [ 98.802212][ T2422] pvrusb2: Invalid write control endpoint [ 98.815704][ T2422] pvrusb2: Invalid write control endpoint [ 98.824265][ T2422] pvrusb2: Invalid write control endpoint [ 98.835768][ T2422] pvrusb2: Attached sub-driver cs53l32a [ 98.859938][ T5844] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 98.877423][ T5848] netlink: 20 bytes leftover after parsing attributes in process `syz.0.607'. [ 98.888815][ T5844] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 98.916705][ T2422] pvrusb2: Invalid write control endpoint [ 98.921787][ T5846] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.930454][ T2422] pvrusb2: Invalid write control endpoint [ 98.944155][ T2422] pvrusb2: Invalid write control endpoint [ 98.972266][ T2422] pvrusb2: Invalid write control endpoint [ 98.988302][ T2422] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 99.013993][ T5844] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.605: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 99.065785][ T5846] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.606: invalid indirect mapped block 32768 (level 2) [ 99.119791][ T2422] pvrusb2: Device being rendered inoperable [ 99.130111][ T2422] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 99.143555][ T5844] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.605: couldn't read orphan inode 11 (err -117) [ 99.169660][ T2422] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 99.186723][ T5844] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 99.255074][ T5846] EXT4-fs (loop3): Remounting filesystem read-only [ 99.315943][ T5846] EXT4-fs (loop3): 1 orphan inode deleted [ 99.337038][ T5844] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.605: Invalid block bitmap block 0 in block_group 0 [ 99.353416][ T5846] EXT4-fs (loop3): 1 truncate cleaned up [ 99.359083][ T5846] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 99.379887][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.393496][ T5844] Quota error (device loop1): write_blk: dquota write failed [ 99.423805][ T5844] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 99.454353][ T5844] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.605: Failed to acquire dquot type 0 [ 99.921776][ T5882] device veth1_macvtap left promiscuous mode [ 99.967808][ T5882] device veth1_macvtap entered promiscuous mode [ 99.988677][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.348083][ T5896] set_capacity_and_notify: 2 callbacks suppressed [ 100.348098][ T5896] loop4: detected capacity change from 0 to 512 [ 100.454972][ T5886] loop2: detected capacity change from 0 to 32768 [ 100.537688][ T5888] loop3: detected capacity change from 0 to 32768 [ 100.606471][ T5896] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 100.684995][ T5896] ext4 filesystem being mounted at /127/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.709304][ T5886] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 101.136454][ T4192] ocfs2: Unmounting device (7,2) on (node local) [ 101.203065][ T5938] loop4: detected capacity change from 0 to 256 [ 101.323612][ T5938] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.419782][ T1336] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.496379][ T5953] loop0: detected capacity change from 0 to 256 [ 101.669979][ T1336] usb 2-1: Using ep0 maxpacket: 16 [ 101.711981][ T1336] usb 2-1: too many configurations: 112, using maximum allowed: 8 [ 101.982174][ T5970] netlink: 7 bytes leftover after parsing attributes in process `syz.0.659'. [ 102.208680][ T5981] loop4: detected capacity change from 0 to 1024 [ 102.270563][ T5983] loop3: detected capacity change from 0 to 1024 [ 102.371061][ T5981] hfsplus: catalog searching failed [ 102.378650][ T5983] UBIFS error (pid: 5983): cannot open "c:::", error -22 [ 102.417441][ T1174] hfsplus: b-tree write err: -5, ino 3 [ 102.455061][ T5987] loop2: detected capacity change from 0 to 16 [ 102.471366][ T5987] erofs: (device loop2): mounted with root inode @ nid 36. [ 102.515601][ T1336] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 102.532592][ T1336] usb 2-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 102.561389][ T5991] loop4: detected capacity change from 0 to 64 [ 102.567977][ T1336] usb 2-1: Product: syz [ 102.569131][ T5987] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 102.574300][ T1336] usb 2-1: Manufacturer: syz [ 102.587352][ T1336] r8152-cfgselector 2-1: config 0 descriptor?? [ 102.774009][ T5997] loop3: detected capacity change from 0 to 64 [ 102.794076][ T5997] hfs: session requires an argument [ 102.810401][ T5997] hfs: unable to parse mount options [ 102.895263][ T1336] r8152-cfgselector 2-1: bad CDC descriptors [ 102.939833][ T1336] r8152-cfgselector 2-1: Unknown version 0x0000 [ 102.977252][ T1336] r8152-cfgselector 2-1: bad CDC descriptors [ 103.009777][ T1336] r8152-cfgselector 2-1: Unknown version 0x0000 [ 103.038740][ T1336] r8152-cfgselector 2-1: USB disconnect, device number 4 [ 103.117864][ T6011] netlink: 'syz.3.678': attribute type 3 has an invalid length. [ 103.244185][ T6015] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.256276][ T6015] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.298814][ T6015] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 3: comm syz.4.680: lblock 3 mapped to illegal pblock 3 (length 3) [ 103.354296][ T6023] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.383918][ T6015] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 103.479483][ T6015] EXT4-fs (loop4): This should not happen!! Data will be lost [ 103.479483][ T6015] [ 103.529688][ T6024] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 8: comm syz.4.680: lblock 8 mapped to illegal pblock 8 (length 8) [ 103.605601][ T6024] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 103.667596][ T6024] EXT4-fs (loop4): This should not happen!! Data will be lost [ 103.667596][ T6024] [ 103.718491][ T6033] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 103.794007][ T6033] exFAT-fs (loop1): hint_cluster is invalid (17) [ 103.862144][ T6019] JBD2: Ignoring recovery information on journal [ 103.954885][ T6019] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 104.058901][ T4192] ocfs2: Unmounting device (7,2) on (node local) [ 104.225607][ T6049] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 104.275567][ T6049] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.928408][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.712'. [ 105.093569][ T6072] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.704 (6072) [ 105.170259][ T6072] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 105.209695][ T6072] BTRFS info (device loop3): using free space tree [ 105.235462][ T6072] BTRFS info (device loop3): has skinny extents [ 105.613698][ T6072] BTRFS info (device loop3): enabling ssd optimizations [ 105.641927][ T6097] set_capacity_and_notify: 7 callbacks suppressed [ 105.641941][ T6097] loop1: detected capacity change from 0 to 32768 [ 105.688919][ T6134] loop0: detected capacity change from 0 to 256 [ 105.732468][ T25] audit: type=1326 audit(1785417234.260:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb007bc4f99 code=0x7ffc0000 [ 105.750571][ T6097] JBD2: Ignoring recovery information on journal [ 105.797120][ T25] audit: type=1326 audit(1785417234.260:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb007bc4f99 code=0x7ffc0000 [ 105.876473][ T25] audit: type=1326 audit(1785417234.260:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb007bc4f99 code=0x7ffc0000 [ 105.900388][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.932021][ T6097] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 105.946851][ T6134] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 106.004955][ T6143] loop4: detected capacity change from 0 to 256 [ 106.006942][ T6142] sch_tbf: burst 7 is lower than device bond_slave_1 mtu (1514) ! [ 106.023674][ T25] audit: type=1326 audit(1785417234.290:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb007bc4f99 code=0x7ffc0000 [ 106.047485][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.059589][ T6143] exfat: Deprecated parameter 'utf8' [ 106.070926][ T6143] exfat: Deprecated parameter 'namecase' [ 106.080036][ T6143] exfat: Deprecated parameter 'namecase' [ 106.094204][ T6143] exfat: Deprecated parameter 'namecase' [ 106.108965][ T25] audit: type=1326 audit(1785417234.290:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb007bc4f99 code=0x7ffc0000 [ 106.132903][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.159333][ T6143] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 106.183910][ T25] audit: type=1326 audit(1785417234.300:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb007bc4f99 code=0x7ffc0000 [ 106.211959][ T25] audit: type=1326 audit(1785417234.300:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb007bc4f99 code=0x7ffc0000 [ 106.235857][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.267075][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 106.362694][ T25] audit: type=1326 audit(1785417234.310:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.4.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb007b857ce code=0x7ffc0000 [ 106.465293][ T25] audit: type=1326 audit(1785417234.320:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb007bc4f99 code=0x7ffc0000 [ 106.561022][ T25] audit: type=1326 audit(1785417234.350:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb007b857ce code=0x7ffc0000 [ 106.584928][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.659700][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 106.803014][ T4546] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.030025][ T7] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 107.047274][ T4200] block nbd0: Receive control failed (result -32) [ 107.055809][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.077854][ T7] usb 3-1: config 0 descriptor?? [ 107.087770][ T6163] loop4: detected capacity change from 0 to 32768 [ 107.100051][ T4546] usb 4-1: Using ep0 maxpacket: 32 [ 107.111611][ T6171] netlink: 36 bytes leftover after parsing attributes in process `syz.1.742'. [ 107.122922][ T7] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 107.173897][ T6163] XFS (loop4): Mounting V5 Filesystem [ 107.192663][ T6177] netlink: 16 bytes leftover after parsing attributes in process `syz.1.743'. [ 107.223356][ T4546] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 107.241425][ T4546] usb 4-1: config 0 has no interface number 0 [ 107.257948][ T4546] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 107.290438][ T6163] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 107.365298][ T6163] XFS (loop4): Starting recovery (logdev: internal) [ 107.386445][ T6163] XFS (loop4): Ending recovery (logdev: internal) [ 107.394387][ T6187] loop1: detected capacity change from 0 to 4096 [ 107.437659][ T6163] XFS (loop4): Metadata corruption detected at xfs_btree_lookup_get_block+0x48f/0x6c0, xfs_bnobt block 0x8 [ 107.455834][ T6163] XFS (loop4): Unmount and run xfs_repair [ 107.459907][ T4546] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 107.485975][ T4189] XFS (loop4): Unmounting Filesystem [ 107.486580][ T4546] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.505521][ T6188] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.557272][ T4546] usb 4-1: Product: syz [ 107.562163][ T4546] usb 4-1: Manufacturer: syz [ 107.566718][ T7] gspca_cpia1: usb_control_msg 03, error -32 [ 107.566770][ T4546] usb 4-1: SerialNumber: syz [ 107.609843][ T4546] usb 4-1: config 0 descriptor?? [ 107.614915][ T7] gspca_cpia1: usb_control_msg 03, error -71 [ 107.640212][ T6159] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 107.649828][ T7] gspca_cpia1: usb_control_msg 01, error -71 [ 107.655818][ T7] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 107.673987][ T7] usb 3-1: USB disconnect, device number 6 [ 107.881568][ T6159] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 107.897486][ T6199] loop4: detected capacity change from 0 to 256 [ 107.910110][ T6199] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.929914][ T6199] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 107.943106][ T6199] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 108.339777][ T4546] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 108.362275][ T4546] asix: probe of 4-1:0.188 failed with error -71 [ 108.373256][ T4546] usb 4-1: USB disconnect, device number 3 [ 108.757788][ T6232] loop4: detected capacity change from 0 to 128 [ 108.817148][ T6232] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 108.829117][ T6232] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.916536][ T6234] loop3: detected capacity change from 0 to 256 [ 108.985269][ T6238] netlink: 27 bytes leftover after parsing attributes in process `syz.4.769'. [ 109.308703][ T6252] loop3: detected capacity change from 0 to 4096 [ 109.363735][ T6252] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 109.363735][ T6252] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 109.363735][ T6252] [ 109.397556][ T6252] EXT4-fs (loop3): Ignoring removed orlov option [ 109.460755][ T6252] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,auto_da_alloc=0x000000000000d25d,lazytime,noacl,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 109.482930][ T4543] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 109.709674][ T6273] loop0: detected capacity change from 0 to 256 [ 109.729318][ T6273] exfat: Deprecated parameter 'utf8' [ 109.730298][ T6276] program syz.3.783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.734774][ T6273] exfat: Deprecated parameter 'namecase' [ 109.789222][ T6273] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 109.964648][ T6281] netlink: 16 bytes leftover after parsing attributes in process `syz.4.787'. [ 110.103117][ T4543] usb 3-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 110.150613][ T4543] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.180861][ T4543] usb 3-1: Product: syz [ 110.188713][ T4543] usb 3-1: Manufacturer: syz [ 110.193340][ T4543] usb 3-1: SerialNumber: syz [ 110.394925][ T6302] NILFS (loop0): invalid segment: Checksum error in segment payload [ 110.409580][ T6302] NILFS (loop0): trying rollback from an earlier position [ 110.439229][ T6302] NILFS (loop0): recovery complete [ 110.449764][ T6307] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.509565][ T6306] erofs: (device loop1): mounted with root inode @ nid 36. [ 110.566188][ T4543] usb 3-1: Found UVC 0.00 device syz (093a:2476) [ 110.581649][ T4543] usb 3-1: No valid video chain found. [ 110.591056][ T4543] gspca_main: pac207-2.14.0 probing 093a:2476 [ 110.639049][ T4543] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 110.655454][ T4543] usb 3-1: USB disconnect, device number 7 [ 110.767828][ T4261] hid-generic 0000:FFFFFFFE:0800.0004: unknown main item tag 0x0 [ 110.775949][ T4261] hid-generic 0000:FFFFFFFE:0800.0004: unknown main item tag 0x0 [ 110.841719][ T4261] hid-generic 0000:FFFFFFFE:0800.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 110.899870][ T6322] set_capacity_and_notify: 4 callbacks suppressed [ 110.899886][ T6322] loop4: detected capacity change from 0 to 64 [ 110.961524][ T6322] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 111.100683][ T6326] fido_id[6326]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 111.249443][ T6343] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 111.508417][ T6358] netlink: 'syz.2.819': attribute type 1 has an invalid length. [ 111.560374][ T6363] loop0: detected capacity change from 0 to 256 [ 111.621253][ T6366] loop3: detected capacity change from 0 to 512 [ 111.665344][ T7] Bluetooth: hci4: command 0x0405 tx timeout [ 111.747621][ T6373] input: syz1 as /devices/virtual/input/input10 [ 111.903961][ T6366] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 111.947326][ T6366] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.072646][ T6383] loop0: detected capacity change from 0 to 512 [ 112.117648][ T6383] EXT4-fs (loop0): Invalid journal IO priority (must be 0-7) [ 112.343440][ T6394] loop0: detected capacity change from 0 to 512 [ 112.420599][ T6394] EXT4-fs (loop0): Ignoring removed nobh option [ 112.454940][ T6394] EXT4-fs (loop0): Ignoring removed orlov option [ 112.461951][ T6394] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 112.554124][ T6394] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #16: comm syz.0.837: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 112.615608][ T6394] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.837: couldn't read orphan inode 16 (err -117) [ 112.660891][ T6410] loop1: detected capacity change from 0 to 256 [ 112.676838][ T6394] EXT4-fs (loop0): 1 orphan inode deleted [ 112.683596][ T6394] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,lazytime,,errors=continue. Quota mode: none. [ 112.698675][ T6410] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 112.752237][ T6394] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 112.806162][ T6410] gfs2: path_lookup on c::: returned error -2 [ 112.824605][ T6394] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 112.843624][ T6394] overlayfs: failed to verify index dir 'upper' xattr [ 112.871986][ T6394] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 113.028550][ T6422] netlink: 40 bytes leftover after parsing attributes in process `syz.2.851'. [ 113.096751][ T6422] netlink: 22 bytes leftover after parsing attributes in process `syz.2.851'. [ 113.195667][ T6430] loop4: detected capacity change from 0 to 4096 [ 113.254259][ T6438] loop1: detected capacity change from 0 to 128 [ 113.269792][ T6430] EXT4-fs (loop4): Mount option "dioread_lock" incompatible with ext2 [ 113.367427][ T6438] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 113.415613][ T6438] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.714125][ T6451] loop4: detected capacity change from 0 to 8 [ 113.861043][ T6451] SQUASHFS error: zlib decompression failed, data probably corrupt [ 113.951991][ T6451] SQUASHFS error: Failed to read block 0x4de: -5 [ 113.970186][ T6451] SQUASHFS error: Failed to read block 0x4e2: -5 [ 114.062607][ T6436] loop0: detected capacity change from 0 to 32768 [ 114.135870][ T6451] SQUASHFS error: Failed to read block 0x9ca: -5 [ 114.232281][ T6451] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 114.374121][ T6451] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 114.443601][ T6436] XFS (loop0): Mounting V5 Filesystem [ 114.524913][ T6451] SQUASHFS error: Failed to read block 0x535f2: -5 [ 114.559947][ T6478] program syz.3.872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.588083][ T6436] XFS (loop0): Ending clean mount [ 114.745178][ T25] kauditd_printk_skb: 12 callbacks suppressed [ 114.745192][ T25] audit: type=1800 audit(1785417242.917:36): pid=6451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.863" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 114.890151][ T4188] XFS (loop0): Unmounting Filesystem [ 114.899047][ T6462] F2FS-fs (loop2): Found nat_bits in checkpoint [ 114.962269][ T6462] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 115.032677][ T6462] F2FS-fs (loop2): inode (7) has corrupted xattr [ 115.395961][ T6493] Format for deleting device is "id" (uint). [ 115.425116][ T6495] netlink: 1 bytes leftover after parsing attributes in process `syz.4.877'. [ 115.690130][ T6503] EXT4-fs (loop4): Test dummy encryption mode enabled [ 115.705540][ T6503] EXT4-fs (loop4): Test dummy encryption mode enabled [ 115.712398][ T6503] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.739493][ T6508] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 115.753695][ T6507] IPVS: stopping backup sync thread 6508 ... [ 115.829732][ T6503] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,dioread_nolock,nombcache,nojournal_checksum,minixdf,barrier=0x0000000000000a18,auto_da_alloc,lazytime,test_dummy_encryption,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: none. [ 116.021180][ T6518] netlink: 'syz.1.887': attribute type 29 has an invalid length. [ 116.094482][ T6518] netlink: 'syz.1.887': attribute type 29 has an invalid length. [ 116.127804][ T6521] netlink: 'syz.1.887': attribute type 29 has an invalid length. [ 116.145388][ T6518] netlink: 'syz.1.887': attribute type 29 has an invalid length. [ 116.397618][ T6538] set_capacity_and_notify: 2 callbacks suppressed [ 116.397634][ T6538] loop2: detected capacity change from 0 to 512 [ 116.483270][ T6538] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.895: inode has both inline data and extents flags [ 116.573804][ T6538] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.895: couldn't read orphan inode 15 (err -117) [ 116.597494][ T6538] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.792883][ T6522] loop3: detected capacity change from 0 to 32768 [ 116.910342][ T6522] read_mapping_page failed! [ 116.923126][ T6560] loop2: detected capacity change from 0 to 136 [ 116.944765][ T6522] ERROR: (device loop3): txCommit: [ 116.944765][ T6522] [ 117.035242][ T6564] loop1: detected capacity change from 0 to 256 [ 117.184561][ T4201] read_mapping_page failed! [ 117.223095][ T4201] ERROR: (device loop3): txCommit: [ 117.223095][ T4201] [ 117.231136][ T4201] read_mapping_page failed! [ 117.245325][ T6564] FAT-fs (loop1): Directory bread(block 64) failed [ 117.251088][ T6568] loop0: detected capacity change from 0 to 4096 [ 117.251872][ T6564] FAT-fs (loop1): Directory bread(block 65) failed [ 117.285654][ T4201] ERROR: (device loop3): txCommit: [ 117.285654][ T4201] [ 117.293108][ T6568] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 117.307614][ T6564] FAT-fs (loop1): Directory bread(block 66) failed [ 117.348243][ T6564] FAT-fs (loop1): Directory bread(block 67) failed [ 117.387531][ T6564] FAT-fs (loop1): Directory bread(block 68) failed [ 117.421446][ T6564] FAT-fs (loop1): Directory bread(block 69) failed [ 117.453509][ T6564] FAT-fs (loop1): Directory bread(block 70) failed [ 117.483365][ T6564] FAT-fs (loop1): Directory bread(block 71) failed [ 117.484364][ T6574] loop4: detected capacity change from 0 to 512 [ 117.500433][ T6564] FAT-fs (loop1): Directory bread(block 72) failed [ 117.534357][ T6564] FAT-fs (loop1): Directory bread(block 73) failed [ 117.614286][ T6574] EXT4-fs (loop4): Ignoring removed nobh option [ 117.662559][ T6574] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 117.670977][ T6574] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 117.713337][ T6574] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #13: comm syz.4.912: inode has both inline data and extents flags [ 117.763657][ T6574] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.912: couldn't read orphan inode 13 (err -117) [ 117.850991][ T6574] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 117.859538][ T4201] ERROR: (device loop3): diFree: numfree > numinos [ 117.859538][ T4201] [ 117.942648][ T4201] ERROR: (device loop3): diFree: numfree > numinos [ 117.942648][ T4201] [ 117.970024][ T276] ERROR: (device loop3): diFree: numfree > numinos [ 117.970024][ T276] [ 117.998566][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.097013][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.109136][ T4261] kernel read not supported for file /video9 (pid: 4261 comm: kworker/1:8) [ 118.164135][ T4544] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 118.201555][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.265667][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.317732][ T6601] kvm [6600]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010001 data 0x400003 [ 118.435553][ T6594] loop0: detected capacity change from 0 to 32768 [ 118.562799][ T6594] JBD2: Ignoring recovery information on journal [ 118.613057][ T4544] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 118.624751][ T4544] usb 3-1: config 0 has no interface number 0 [ 118.634338][ T4544] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 118.704710][ T6594] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 118.773510][ T4544] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 118.782595][ T4544] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 118.825087][ T25] audit: type=1800 audit(1785417246.724:37): pid=6594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.921" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 118.856817][ T4544] usb 3-1: Manufacturer: syz [ 118.867522][ T4544] usb 3-1: SerialNumber: syz [ 118.913446][ T4544] usb 3-1: config 0 descriptor?? [ 118.921184][ T6613] loop4: detected capacity change from 0 to 2048 [ 118.938448][ T4188] ocfs2: Unmounting device (7,0) on (node local) [ 118.946548][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.926'. [ 118.989555][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.926'. [ 119.038231][ T6613] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 119.067286][ T6613] System zones: 0-7 [ 119.075668][ T6615] netlink: 'syz.1.926': attribute type 19 has an invalid length. [ 119.084273][ T6613] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nodioread_nolock,barrier=0x0000000000000007,debug,nojournal_checksum,min_batch_time=0x000000000000c619,errors=remount-ro,. Quota mode: none. [ 119.186011][ T6613] EXT4-fs error (device loop4): ext4_find_extent:929: inode #2: comm syz.4.925: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 119.214226][ T6613] EXT4-fs (loop4): Remounting filesystem read-only [ 119.237661][ T6613] EXT4-fs error (device loop4): ext4_find_extent:929: inode #2: comm syz.4.925: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 119.310243][ T6613] EXT4-fs (loop4): Remounting filesystem read-only [ 119.488836][ T6634] loop1: detected capacity change from 0 to 4096 [ 119.661985][ T4544] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.214/input/input11 [ 119.710361][ T6639] loop4: detected capacity change from 0 to 128 [ 119.751810][ T4187] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 119.762002][ T4187] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 119.865123][ T6639] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 119.951319][ T6649] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.976787][ T1336] usb 3-1: USB disconnect, device number 8 [ 120.007176][ T6639] sysv_free_block: trying to free block not in datazone [ 120.020808][ T6641] attempt to access beyond end of device [ 120.020808][ T6641] loop0: rw=0, want=67108866, limit=4096 [ 120.054500][ T6641] attempt to access beyond end of device [ 120.054500][ T6641] loop0: rw=0, want=131072, limit=4096 [ 120.118234][ T6629] chnl_net:caif_netlink_parms(): no params data found [ 120.125701][ T4544] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 120.127679][ T6641] attempt to access beyond end of device [ 120.127679][ T6641] loop0: rw=0, want=65538, limit=4096 [ 120.169857][ T4189] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 120.218703][ T6641] NILFS (loop0): nilfs_ioctl_move_inode_block: invalid virtual block address (node): ino=0, cno=0, offset=2, blocknr=0, vblocknr=0 [ 120.244398][ T6641] NILFS (loop0): error -2 preparing GC: cannot read source blocks [ 120.419652][ T4544] usb 2-1: Using ep0 maxpacket: 16 [ 120.549841][ T6668] netlink: 20 bytes leftover after parsing attributes in process `syz.2.939'. [ 120.602261][ T4544] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 120.652567][ T6668] nbd: socks must be embedded in a SOCK_ITEM attr [ 120.664682][ T6674] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 120.696430][ T6629] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.726150][ T6629] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.774799][ T6629] device bridge_slave_0 entered promiscuous mode [ 120.815411][ T4544] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 120.836597][ T4544] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.846721][ T6629] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.868475][ T4544] usb 2-1: Product: syz [ 120.872774][ T6629] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.902431][ T4544] usb 2-1: Manufacturer: syz [ 120.907065][ T4544] usb 2-1: SerialNumber: syz [ 120.913173][ T6629] device bridge_slave_1 entered promiscuous mode [ 120.918921][ T6685] openvswitch: netlink: Actions may not be safe on all matching packets [ 120.933517][ T4544] usb 2-1: config 0 descriptor?? [ 120.984564][ T4544] pegasus_notetaker 2-1:0.0: Invalid number of endpoints [ 121.018775][ T4544] pegasus_notetaker: probe of 2-1:0.0 failed with error -22 [ 121.052575][ T9] device hsr_slave_0 left promiscuous mode [ 121.122185][ T9] device hsr_slave_1 left promiscuous mode [ 121.138336][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.168360][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.175830][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.200863][ T9] device bridge_slave_1 left promiscuous mode [ 121.209290][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.224787][ T6684] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.248328][ T7] usb 2-1: USB disconnect, device number 5 [ 121.267348][ T25] audit: type=1800 audit(1785417249.006:38): pid=6684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.943" name="file1" dev="loop2" ino=1048644 res=0 errno=0 [ 121.314233][ T9] device bridge_slave_0 left promiscuous mode [ 121.321411][ T6698] exfat: Deprecated parameter 'utf8' [ 121.331613][ T6698] exfat: Deprecated parameter 'utf8' [ 121.342142][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.391622][ T6698] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 121.435304][ T9] device veth1_macvtap left promiscuous mode [ 121.459242][ T9] device veth0_macvtap left promiscuous mode [ 121.478994][ T9] device veth1_vlan left promiscuous mode [ 121.487291][ T9] device veth0_vlan left promiscuous mode [ 121.564216][ T6702] exfat: Deprecated parameter 'namecase' [ 121.583041][ T6702] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 121.596036][ T1336] Bluetooth: hci4: command 0x0409 tx timeout [ 121.865912][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.129978][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 122.133185][ T9] team0 (unregistering): Port device team_slave_1 removed [ 122.140408][ T6713] set_capacity_and_notify: 4 callbacks suppressed [ 122.140421][ T6713] loop0: detected capacity change from 0 to 32768 [ 122.170080][ T9] team0 (unregistering): Port device team_slave_0 removed [ 122.204279][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.255344][ T6713] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 122.264937][ T7] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 122.275313][ T6711] loop2: detected capacity change from 0 to 40427 [ 122.313323][ T6711] F2FS-fs (loop2): invalid crc value [ 122.319204][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.348253][ T7] usb 2-1: language id specifier not provided by device, defaulting to English [ 122.373028][ T6711] F2FS-fs (loop2): Found nat_bits in checkpoint [ 122.412052][ T4188] ocfs2: Unmounting device (7,0) on (node local) [ 122.495338][ T9] bond0 (unregistering): Released all slaves [ 122.501573][ T6711] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 122.647059][ T6629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.662713][ T6716] attempt to access beyond end of device [ 122.662713][ T6716] loop2: rw=2049, want=45104, limit=40427 [ 122.694558][ T6629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.718209][ T7] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 122.751467][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.783707][ T7] usb 2-1: Product: syz [ 122.793358][ T7] usb 2-1: SerialNumber: syz [ 122.798071][ T6725] netlink: 20 bytes leftover after parsing attributes in process `syz.4.959'. [ 122.803553][ T6629] team0: Port device team_slave_0 added [ 122.815052][ T7] usb 2-1: config 0 descriptor?? [ 122.823021][ T6629] team0: Port device team_slave_1 added [ 122.837535][ T6725] nbd: socks must be embedded in a SOCK_ITEM attr [ 122.874220][ T7] pegasus_notetaker 2-1:0.0: Invalid number of endpoints [ 122.898593][ T7] pegasus_notetaker: probe of 2-1:0.0 failed with error -22 [ 122.944275][ T6629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.951247][ T6629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.989639][ T6629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.002170][ T6629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.009455][ T6629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.047357][ T6629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.064819][ T7] usb 2-1: USB disconnect, device number 6 [ 123.214652][ T6629] device hsr_slave_0 entered promiscuous mode [ 123.239375][ T6629] device hsr_slave_1 entered promiscuous mode [ 123.252702][ T6629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.261689][ T6629] Cannot create hsr debugfs directory [ 123.575647][ T6747] loop1: detected capacity change from 0 to 512 [ 123.658658][ T6745] loop4: detected capacity change from 0 to 32768 [ 123.765150][ T6747] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.965: inode has both inline data and extents flags [ 123.808091][ T6745] JBD2: Ignoring recovery information on journal [ 123.808925][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 123.815702][ T6745] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 123.828828][ T6745] JBD2: bad block at offset 32 [ 123.833840][ T6747] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.965: couldn't read orphan inode 15 (err -117) [ 123.863553][ T6745] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 123.887411][ T6629] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.926505][ T6745] OCFS2: ERROR (device loop4): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 123.939441][ T6747] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.946937][ T6745] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 123.966690][ T6745] OCFS2: File system is now read-only. [ 123.972191][ T6745] (syz.4.964,6745,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 123.981208][ T6745] (syz.4.964,6745,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 123.989577][ T6745] (syz.4.964,6745,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 123.997281][ T6745] (syz.4.964,6745,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 124.005752][ T6745] (syz.4.964,6745,1):ocfs2_read_virt_blocks:989 ERROR: status = -30 [ 124.014366][ T6745] (syz.4.964,6745,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 124.022290][ T6745] (syz.4.964,6745,1):ocfs2_find_dir_space_el:3504 ERROR: status = -5 [ 124.023256][ T6629] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 124.030362][ T6745] (syz.4.964,6745,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -5 [ 124.030420][ T6745] (syz.4.964,6745,1):ocfs2_mknod:298 ERROR: status = -5 [ 124.052584][ T6745] (syz.4.964,6745,1):ocfs2_mknod:502 ERROR: status = -5 [ 124.059679][ T6745] (syz.4.964,6745,1):ocfs2_create:676 ERROR: status = -5 [ 124.099761][ T6761] loop2: detected capacity change from 0 to 64 [ 124.149302][ T6761] MINIX-fs: mounting file system with errors, running fsck is recommended [ 124.177198][ T6629] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 124.246803][ T6629] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 124.336233][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 124.592461][ T6780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.972'. [ 124.626576][ T6629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.629061][ T6780] nbd: socks must be embedded in a SOCK_ITEM attr [ 124.719473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.727355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.794837][ T6629] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.865887][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.885434][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.940581][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.947750][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.059982][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.090051][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.129594][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.159899][ T6796] loop1: detected capacity change from 0 to 128 [ 125.161803][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.173343][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.218675][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.228638][ T6796] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 125.263482][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.277325][ T6796] hpfs: filesystem error: improperly stopped [ 125.292271][ T6796] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 125.300427][ T6796] hpfs: You really don't want any checks? You are crazy... [ 125.303508][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.321386][ T6796] hpfs: hpfs_map_sector(): read error [ 125.331782][ T6796] hpfs: code page support is disabled [ 125.346051][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.346130][ T6796] hpfs: hpfs_map_4sectors(): unaligned read [ 125.361363][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.380869][ T6796] hpfs: hpfs_map_4sectors(): unaligned read [ 125.385642][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.394694][ T6796] hpfs: filesystem error: unable to find root dir [ 125.444875][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.465811][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.471980][ T6796] hpfs: hpfs_map_4sectors(): unaligned read [ 125.486409][ T6629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.506069][ T6796] hpfs: hpfs_map_sector(): read error [ 125.540804][ T6629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.586039][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.600042][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.619442][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.634417][ T6801] loop4: detected capacity change from 0 to 512 [ 125.802812][ T6801] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.978: inode has both inline data and extents flags [ 125.901150][ T6801] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.978: couldn't read orphan inode 15 (err -117) [ 125.933973][ T6805] loop1: detected capacity change from 0 to 4096 [ 125.966260][ T6801] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.032464][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 126.070915][ T6805] ntfs3: loop1: failed to convert "0000" to iso8859-6 [ 126.170563][ T6805] ntfs3: loop1: failed to convert "0030" to iso8859-6 [ 126.230879][ T6805] ntfs3: loop1: failed to convert name for inode 1e. [ 126.246038][ T6819] loop0: detected capacity change from 0 to 2048 [ 126.269575][ T6805] ntfs3: loop1: failed to convert "0032" to iso8859-6 [ 126.283241][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.299480][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.307626][ T6805] ntfs3: loop1: failed to convert "0033" to iso8859-6 [ 126.328494][ T6824] mmap: syz.2.981 (6824) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 126.338351][ T6629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.436859][ T6819] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 126.503806][ T6819] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.512916][ T6830] netlink: 500 bytes leftover after parsing attributes in process `syz.1.985'. [ 127.064132][ T6853] loop2: detected capacity change from 0 to 512 [ 127.143656][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.165469][ T6853] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 127.169983][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.205430][ T6853] EXT4-fs (loop2): Remounting filesystem read-only [ 127.213513][ T6853] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.992: invalid indirect mapped block 4278190080 (level 0) [ 127.228050][ T6853] EXT4-fs (loop2): Remounting filesystem read-only [ 127.278197][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.299455][ T6853] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.992: invalid indirect mapped block 1 (level 1) [ 127.326772][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.384048][ T6629] device veth0_vlan entered promiscuous mode [ 127.391855][ T6828] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 127.409256][ T6853] EXT4-fs (loop2): Remounting filesystem read-only [ 127.438932][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.473496][ T1245] hfsplus: b-tree write err: -5, ino 25 [ 127.484747][ T6853] EXT4-fs (loop2): 1 truncate cleaned up [ 127.493856][ T6853] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000. Quota mode: none. [ 127.535704][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.546794][ T1245] hfsplus: b-tree write err: -5, ino 4 [ 127.579842][ T1245] hfsplus: b-tree write err: -5, ino 2 [ 127.615314][ T6629] device veth1_vlan entered promiscuous mode [ 127.756336][ T6629] device veth0_macvtap entered promiscuous mode [ 127.763411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.815156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.858853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.906577][ T6828] syz.4.984 (6828) used greatest stack depth: 18304 bytes left [ 127.926486][ T6629] device veth1_macvtap entered promiscuous mode [ 127.962208][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.998781][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 128.062871][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.089435][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.106267][ T6883] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 128.130916][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.154955][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.179865][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.211117][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.248706][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.258939][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 128.287222][ T6629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.304480][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 128.317698][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.359749][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.390753][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.415243][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.452005][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.490847][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.521830][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.559749][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.591280][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.626288][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.657002][ T6629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.693727][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.713250][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.744036][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1010'. [ 128.771814][ T6629] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.810839][ T6629] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.813883][ T6912] set_capacity_and_notify: 2 callbacks suppressed [ 128.813897][ T6912] loop1: detected capacity change from 0 to 256 [ 128.832146][ T6629] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.841725][ T6629] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.085760][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.099401][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.140500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 129.197798][ T6926] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1016'. [ 129.245852][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.260705][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.268211][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.450706][ T6938] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.457981][ T6938] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.817059][ T6958] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1025'. [ 129.922645][ T6963] loop1: detected capacity change from 0 to 256 [ 129.996428][ T6971] loop0: detected capacity change from 0 to 256 [ 130.103117][ T6971] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 130.164855][ T6974] loop4: detected capacity change from 0 to 512 [ 130.170997][ T6976] ubi31: attaching mtd0 [ 130.175685][ T6976] ubi31 error: ubi_attach_mtd_dev: bad VID header (49152) or data offsets (49216) [ 130.210185][ T6971] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 130.231818][ T6978] loop1: detected capacity change from 0 to 1024 [ 130.253491][ T6974] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 130.269073][ T6971] exFAT-fs (loop0): Filesystem has been set read-only [ 130.275970][ T6974] EXT4-fs (loop4): inline encryption not supported [ 130.315251][ T6971] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805d3255e0 iblock : 8, err : -5) [ 130.343882][ T6974] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 130.392753][ T6971] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 130.409578][ T6939] loop5: detected capacity change from 0 to 40427 [ 130.456700][ T6965] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 130.478983][ T6974] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 130.550679][ T6974] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1031: bg 0: block 248: padding at end of block bitmap is not set [ 130.610425][ T6939] F2FS-fs (loop5): invalid crc value [ 130.662822][ T6939] F2FS-fs (loop5): Found nat_bits in checkpoint [ 130.705224][ T6974] Quota error (device loop4): write_blk: dquota write failed [ 130.752079][ T6974] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 130.822417][ T6974] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.1031: Failed to acquire dquot type 1 [ 130.866793][ T6974] EXT4-fs (loop4): 1 truncate cleaned up [ 130.916409][ T6974] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 130.939296][ T6939] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 130.955831][ T6991] loop0: detected capacity change from 0 to 8192 [ 131.233309][ T6629] attempt to access beyond end of device [ 131.233309][ T6629] loop5: rw=2049, want=45104, limit=40427 [ 131.583993][ T6981] loop2: detected capacity change from 0 to 40427 [ 131.653522][ T7023] netlink: 'syz.0.1047': attribute type 10 has an invalid length. [ 131.663699][ T6981] F2FS-fs (loop2): Wrong SSA boundary, start(3584) end(4096) blocks(3072) [ 131.677693][ T7023] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.707055][ T6981] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 131.727332][ T7023] device bridge_slave_1 left promiscuous mode [ 131.728771][ T6981] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 131.760959][ T7023] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.792608][ T6981] F2FS-fs (loop2): invalid crc value [ 131.825876][ T6981] F2FS-fs (loop2): Found nat_bits in checkpoint [ 131.840927][ T7023] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 131.985153][ T6981] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 131.997316][ T6981] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 132.143346][ T4192] attempt to access beyond end of device [ 132.143346][ T4192] loop2: rw=2049, want=45104, limit=40427 [ 132.174894][ T7031] loop0: detected capacity change from 0 to 4096 [ 132.300434][ T7037] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.323044][ T7011] loop4: detected capacity change from 0 to 40427 [ 132.343944][ T25] audit: type=1800 audit(1785417259.371:39): pid=7031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1048" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 132.517539][ T7011] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 132.549633][ T7011] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 132.567095][ T7021] JBD2: Ignoring recovery information on journal [ 132.579715][ T7011] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x1ffff [ 132.601113][ T7011] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8 [ 132.689545][ T7011] F2FS-fs (loop4): invalid crc value [ 132.791990][ T7011] F2FS-fs (loop4): Found nat_bits in checkpoint [ 132.795692][ T7021] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 132.944074][ T7021] (syz.1.1046,7021,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 133.009237][ T7021] (syz.1.1046,7021,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422755854968174 failed -12 [ 133.050772][ T7011] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 133.066390][ T7021] (syz.1.1046,7021,1):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 133.078216][ T7011] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 133.140900][ T7021] (syz.1.1046,7021,1):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 133.208493][ T7021] (syz.1.1046,7021,0):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 133.229321][ T7021] (syz.1.1046,7021,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 133.324916][ T4189] attempt to access beyond end of device [ 133.324916][ T4189] loop4: rw=2049, want=45104, limit=40427 [ 133.341644][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 133.709761][ T25] audit: type=1326 audit(1785417260.652:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.2.1057" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea549df99 code=0x7ffc0000 [ 133.733767][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.748575][ T7049] JBD2: Ignoring recovery information on journal [ 133.769282][ T7053] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1050 (7053) [ 133.897364][ T7053] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 133.951342][ T7049] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 133.955084][ T25] audit: type=1326 audit(1785417260.652:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.2.1057" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea549df99 code=0x7ffc0000 [ 133.971299][ T7053] BTRFS info (device loop0): setting nodatasum [ 134.074997][ T7049] (syz.5.1051,7049,0):ocfs2_remove_inode_range:1797 ERROR: status = -22 [ 134.082582][ T25] audit: type=1326 audit(1785417260.652:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.2.1057" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea549df99 code=0x7ffc0000 [ 134.091955][ T7053] BTRFS info (device loop0): force zlib compression, level 3 [ 134.139694][ T7049] (syz.5.1051,7049,0):__ocfs2_change_file_space:2048 ERROR: status = -22 [ 134.194979][ T25] audit: type=1326 audit(1785417260.652:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.2.1057" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1ea549df99 code=0x7ffc0000 [ 134.243374][ T7053] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 134.255097][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.261425][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.273934][ T6629] ocfs2: Unmounting device (7,5) on (node local) [ 134.280560][ T7053] BTRFS info (device loop0): use lzo compression, level 0 [ 134.296620][ T7053] BTRFS info (device loop0): turning on flush-on-commit [ 134.303594][ T7053] BTRFS info (device loop0): enabling auto defrag [ 134.328116][ T7053] BTRFS info (device loop0): max_inline at 4096 [ 134.335360][ T7053] BTRFS info (device loop0): using free space tree [ 134.354071][ T25] audit: type=1326 audit(1785417260.652:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.2.1057" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea549df99 code=0x7ffc0000 [ 134.369902][ T7053] BTRFS info (device loop0): has skinny extents [ 134.391119][ T7088] set_capacity_and_notify: 3 callbacks suppressed [ 134.391134][ T7088] loop4: detected capacity change from 0 to 512 [ 134.445479][ T25] audit: type=1326 audit(1785417260.652:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.2.1057" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea549df99 code=0x7ffc0000 [ 134.548092][ T25] audit: type=1326 audit(1785417260.652:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.2.1057" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea549df99 code=0x7ffc0000 [ 134.613229][ T7088] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1061: bg 0: block 104: invalid block bitmap [ 134.699495][ T7077] loop2: detected capacity change from 0 to 32768 [ 134.721344][ T7088] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 134.763167][ T7088] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1061: invalid indirect mapped block 1 (level 1) [ 134.863819][ T7078] loop1: detected capacity change from 0 to 32768 [ 134.871652][ T7088] EXT4-fs (loop4): 1 truncate cleaned up [ 134.885347][ T7088] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.961665][ T7077] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 134.984299][ T7053] BTRFS info (device loop0): enabling ssd optimizations [ 135.061533][ T7078] XFS (loop1): Mounting V5 Filesystem [ 135.119041][ T1336] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 135.203903][ T4192] ocfs2: Unmounting device (7,2) on (node local) [ 135.216441][ T7128] loop4: detected capacity change from 0 to 2048 [ 135.319938][ T7078] XFS (loop1): Ending clean mount [ 135.341772][ T7128] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.388797][ T7078] XFS (loop1): Quotacheck needed: Please wait. [ 135.447548][ T7078] XFS (loop1): Quotacheck: Done. [ 135.504205][ T1336] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.512409][ T1336] usb 6-1: config 0 has no interface number 0 [ 135.538531][ T7136] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1067'. [ 135.556813][ T1336] usb 6-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 135.572417][ T7078] XFS (loop1): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 135.597665][ T1336] usb 6-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.651948][ T1336] usb 6-1: config 0 interface 1 has no altsetting 0 [ 135.662994][ T1336] usb 6-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 135.681994][ T1336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.725321][ T1336] usb 6-1: config 0 descriptor?? [ 135.899050][ T4187] XFS (loop1): Unmounting Filesystem [ 136.002801][ T7147] loop2: detected capacity change from 0 to 512 [ 136.089033][ T7147] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 136.131583][ T7149] loop0: detected capacity change from 0 to 512 [ 136.164235][ T7147] EXT4-fs (loop2): 1 truncate cleaned up [ 136.176151][ T7147] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 136.360926][ T7149] EXT4-fs (loop0): 1 orphan inode deleted [ 136.366695][ T7149] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 136.423915][ T7149] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.427232][ T7151] loop4: detected capacity change from 0 to 32768 [ 136.465433][ T7149] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 136.468981][ T1336] input: HID 2179:0053 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:2179:0053.0005/input/input13 [ 136.572663][ T7151] JBD2: Ignoring recovery information on journal [ 136.580053][ T1336] uclogic 0003:2179:0053.0005: input,hidraw0: USB HID v0.00 Device [HID 2179:0053] on usb-dummy_hcd.5-1/input1 [ 136.780758][ T7] usb 6-1: USB disconnect, device number 2 [ 136.787032][ T7151] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 136.996773][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 137.738361][ T4536] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 137.829220][ T7186] loop0: detected capacity change from 0 to 32768 [ 137.899573][ T7186] xfs: Unknown parameter 'smackfstransmute' [ 137.974294][ T7233] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 138.003560][ T7235] loop2: detected capacity change from 0 to 4096 [ 138.082874][ T7235] __ntfs_warning: 8 callbacks suppressed [ 138.082890][ T7235] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 138.200382][ T7235] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 138.208795][ T4536] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.216489][ T7245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1105'. [ 138.271432][ T7235] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 138.280707][ T7] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 138.281821][ T4536] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 138.299578][ T7235] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 138.320080][ T7235] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 138.329138][ T7235] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 138.349230][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.356895][ T7235] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 138.366017][ T7235] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 138.386408][ T7235] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 138.400373][ T7235] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 138.420482][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.439556][ T7235] ntfs: volume version 3.1. [ 138.542172][ T4536] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.552810][ T1325] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 138.553921][ T4536] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.590095][ T4536] usb 6-1: Product: syz [ 138.594603][ T4536] usb 6-1: Manufacturer: syz [ 138.605519][ T4536] usb 6-1: SerialNumber: syz [ 138.680095][ T4536] cdc_mbim 6-1:1.0: skipping garbage [ 138.695031][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.828899][ T1325] usb 5-1: Using ep0 maxpacket: 16 [ 138.858060][ T7251] loop0: detected capacity change from 0 to 40427 [ 138.882297][ T7] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 138.899711][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.907863][ T7] usb 2-1: Product: syz [ 138.912177][ T7] usb 2-1: Manufacturer: syz [ 138.932790][ T7] usb 2-1: SerialNumber: syz [ 138.940995][ T7251] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x1ffff [ 138.957120][ T1325] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.965520][ T7251] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0xe4 [ 138.969608][ T7] usb 2-1: config 0 descriptor?? [ 138.977032][ T7251] F2FS-fs (loop0): invalid crc value [ 139.000618][ T7251] F2FS-fs (loop0): Found nat_bits in checkpoint [ 139.033383][ T7] ums_eneub6250 2-1:0.0: USB Mass Storage device detected [ 139.033921][ T7251] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 139.160647][ T1325] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 139.177036][ T7251] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 139.180784][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.224369][ T1325] usb 5-1: Product: syz [ 139.235159][ T1325] usb 5-1: Manufacturer: syz [ 139.240179][ T1325] usb 5-1: SerialNumber: syz [ 139.276439][ T1325] usb 5-1: config 0 descriptor?? [ 139.285317][ T7251] F2FS-fs (loop0) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 139.306211][ T7237] udc-core: couldn't find an available UDC or it's busy [ 139.314244][ T7237] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 139.317040][ T7251] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x136/0x8e0 [ 139.332951][ T4228] usb 2-1: USB disconnect, device number 7 [ 139.342926][ T1325] sr9700: probe of 5-1:0.0 failed with error -22 [ 139.370432][ T7269] netlink: 'syz.2.1111': attribute type 3 has an invalid length. [ 139.499960][ T7273] netlink: 'syz.2.1114': attribute type 16 has an invalid length. [ 139.508605][ T7273] netlink: 'syz.2.1114': attribute type 17 has an invalid length. [ 139.532230][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.539790][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.547348][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.559434][ T7273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.564460][ T4232] usb 5-1: USB disconnect, device number 5 [ 139.630780][ T4536] cdc_mbim 6-1:1.0: SET_CRC_MODE failed [ 139.652643][ T4536] cdc_mbim 6-1:1.0: SET_NTB_FORMAT failed [ 139.716782][ T4536] cdc_mbim 6-1:1.0: bind() failure [ 139.737589][ T4536] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 139.744427][ T4536] cdc_ncm 6-1:1.1: bind() failure [ 139.761946][ T4536] usb 6-1: USB disconnect, device number 3 [ 140.200645][ T7295] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 140.401081][ T7307] set_capacity_and_notify: 1 callbacks suppressed [ 140.401097][ T7307] loop0: detected capacity change from 0 to 256 [ 140.439879][ T7307] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.708185][ T7314] loop0: detected capacity change from 0 to 1024 [ 140.734759][ T7314] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 140.782743][ T7314] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 140.798826][ T7314] JBD2: no valid journal superblock found [ 140.804808][ T7314] EXT4-fs (loop0): error loading journal [ 140.838044][ T7316] loop4: detected capacity change from 0 to 4096 [ 140.876220][ T7316] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 140.895812][ T7316] NILFS (loop4): mounting unchecked fs [ 140.906673][ T7316] NILFS (loop4): recovery required for readonly filesystem [ 140.927178][ T7316] NILFS (loop4): write access will be enabled during recovery [ 140.948644][ T7304] loop5: detected capacity change from 0 to 32768 [ 140.973479][ T4298] udevd[4298]: incorrect nilfs2 checksum on /dev/loop4 [ 140.982116][ T7316] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 140.997924][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1131'. [ 141.048758][ T7304] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.1127 (7304) [ 141.153179][ T7304] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 141.157780][ T4298] udevd[4298]: incorrect nilfs2 checksum on /dev/loop4 [ 141.191386][ T7304] BTRFS info (device loop5): using free space tree [ 141.212784][ T7304] BTRFS info (device loop5): has skinny extents [ 141.238130][ T7318] loop1: detected capacity change from 0 to 2048 [ 141.299540][ T7318] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 141.306846][ T7333] netlink: 774 bytes leftover after parsing attributes in process `syz.0.1138'. [ 141.436119][ T7304] BTRFS info (device loop5): enabling ssd optimizations [ 141.494169][ T7318] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 141.528745][ T7318] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 141.618930][ T7318] UDF-fs: Scanning with blocksize 512 failed [ 141.744012][ T7318] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.812852][ T7361] input: syz1 as /devices/virtual/input/input14 [ 141.857857][ T5822] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 9 /dev/loop5 scanned by udevd (5822) [ 142.250895][ T7386] loop5: detected capacity change from 0 to 512 [ 142.313523][ T7391] loop0: detected capacity change from 0 to 8 [ 142.361587][ T7386] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.404960][ T7391] SQUASHFS error: Unable to read directory block [249:c] [ 142.497540][ T7386] fs-verity: sha256 using implementation "sha256-avx2" [ 142.569845][ T7400] loop1: detected capacity change from 0 to 256 [ 142.581277][ T7386] EXT4-fs warning (device loop5): ext4_begin_enable_verity:136: inode #13: comm syz.5.1151: verity is only allowed on extent-based files [ 142.664311][ T7400] exfat: Deprecated parameter 'utf8' [ 142.734365][ T7400] exfat: Deprecated parameter 'namecase' [ 142.784078][ T7400] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 142.934708][ T7412] tipc: Started in network mode [ 142.961473][ T7412] tipc: Node identity 7f000001, cluster identity 4711 [ 142.985312][ T7412] tipc: New replicast peer: 127.0.0.1 [ 143.054958][ T7412] tipc: Enabled bearer , priority 10 [ 143.315946][ T7433] loop1: detected capacity change from 0 to 1024 [ 144.037501][ T7433] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 144.091866][ T7462] device ipvlan0 entered promiscuous mode [ 144.132290][ T7462] device ipvlan0 left promiscuous mode [ 144.174896][ T4536] tipc: Node number set to 2130706433 [ 144.188102][ T7468] udc usbip-vudc.0: soft-connect without a gadget driver [ 144.195171][ T7433] mkiss: ax0: crc mode is auto. [ 144.543295][ T7470] loop0: detected capacity change from 0 to 8192 [ 144.875765][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1194'. [ 144.907149][ T7515] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1194'. [ 145.085994][ T7526] program syz.5.1197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.583411][ T7554] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 146.436149][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1222'. [ 146.532178][ T7607] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 146.532178][ T7607] The task syz.4.1220 (7607) triggered the difference, watch for misbehavior. [ 146.639331][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1224'. [ 147.031751][ T7631] set_capacity_and_notify: 1 callbacks suppressed [ 147.031766][ T7631] loop5: detected capacity change from 0 to 16 [ 147.056313][ T7612] chnl_net:caif_netlink_parms(): no params data found [ 147.178582][ T7631] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 147.455592][ T7648] netlink: 'syz.2.1234': attribute type 1 has an invalid length. [ 147.400013][ T7612] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.477707][ T7648] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1234'. [ 147.495701][ T7612] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.525669][ T7612] device bridge_slave_0 entered promiscuous mode [ 147.596800][ T7612] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.632700][ T7612] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.647431][ T7612] device bridge_slave_1 entered promiscuous mode [ 147.689604][ T7612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.754268][ T7612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.847473][ T7659] binder: binder_mmap: 7658 200000000000-200000b36000 bad vm_flags failed -1 [ 147.857526][ T7612] team0: Port device team_slave_0 added [ 147.885740][ T7612] team0: Port device team_slave_1 added [ 147.965056][ T7612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.975363][ T7612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.051375][ T7669] scsi_strcpy_devinfo: model string 'w|auNӤ1pEwzdz' is too long [ 148.087013][ T7612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.140941][ T7612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.148596][ T7612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.217132][ T7675] loop2: detected capacity change from 0 to 512 [ 148.266825][ T7612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.343042][ T7675] __quota_error: 12 callbacks suppressed [ 148.343059][ T7675] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 148.507436][ T7675] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 148.557235][ T7675] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.1241: Failed to acquire dquot type 1 [ 148.557788][ T7612] device hsr_slave_0 entered promiscuous mode [ 148.618343][ T7675] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 148.643389][ T7675] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 148.670445][ T7612] device hsr_slave_1 entered promiscuous mode [ 148.680309][ T7675] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.1241: Failed to acquire dquot type 1 [ 148.724730][ T7675] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1241: bg 0: block 248: padding at end of block bitmap is not set [ 148.760873][ T7612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.769520][ T7612] Cannot create hsr debugfs directory [ 148.775643][ T7675] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 148.822579][ T7675] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 148.889522][ T7675] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 148.920698][ T7675] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.1241: Failed to acquire dquot type 1 [ 148.963700][ T4545] Bluetooth: hci0: command 0x0409 tx timeout [ 148.999181][ T7675] EXT4-fs (loop2): 1 orphan inode deleted [ 149.011216][ T7675] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,grpid,quota,,errors=continue. Quota mode: writeback. [ 149.082825][ T7702] i2c i2c-0: new_device: Missing parameters [ 149.097550][ T7643] loop4: detected capacity change from 0 to 32768 [ 149.121865][ T7675] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.237108][ T25] audit: type=1800 audit(1785417275.170:56): pid=7675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1241" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 149.238675][ T7675] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 149.305253][ T7643] (syz.4.1232,7643,1):ocfs2_init_global_system_inodes:462 ERROR: status = -22 [ 149.326667][ T7612] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.334532][ T7675] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 149.400766][ T7643] (syz.4.1232,7643,1):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 3, possibly corrupt fs? [ 149.400802][ T7643] (syz.4.1232,7643,1):ocfs2_init_global_system_inodes:473 ERROR: status = -22 [ 149.443384][ T7675] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.1241: Failed to acquire dquot type 1 [ 149.467187][ T7643] (syz.4.1232,7643,1):ocfs2_initialize_super:2279 ERROR: status = -22 [ 149.498523][ T7643] (syz.4.1232,7643,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 149.567488][ T7612] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.834834][ T7612] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.030140][ T7612] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.098103][ T4267] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 150.310070][ T7643] loop4: detected capacity change from 0 to 1024 [ 150.364008][ T4267] usb 3-1: Using ep0 maxpacket: 8 [ 150.410055][ T7612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 150.442729][ T7612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 150.495019][ T7612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 150.539932][ T7743] loop0: detected capacity change from 0 to 512 [ 150.555420][ T4267] usb 3-1: unable to get BOS descriptor or descriptor too short [ 150.574189][ T7612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 150.611493][ T7743] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 150.652698][ T4267] usb 3-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 150.707637][ T4267] usb 3-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 150.815402][ T7612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.897063][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.898599][ T4267] usb 3-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 150.931225][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.952618][ T7612] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.968885][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.989116][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.995779][ T4267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.005116][ T4267] usb 3-1: Product: syz [ 151.009965][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.017111][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.037385][ T4267] usb 3-1: Manufacturer: syz [ 151.042019][ T4267] usb 3-1: SerialNumber: syz [ 151.077138][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.121981][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.132011][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.150040][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.157195][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.172460][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.190514][ T1336] Bluetooth: hci0: command 0x041b tx timeout [ 151.190970][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.238314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.270807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.294781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.333681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.359630][ T4267] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 151.378612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.410122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.421082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.432964][ T1174] wlan1: Trigger new scan to find an IBSS to join [ 151.450328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.484125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.492438][ T1174] ------------[ cut here ]------------ [ 151.498376][ T1174] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x20 [ 151.508999][ T1174] WARNING: CPU: 0 PID: 1174 at net/mac80211/rate.c:376 __rate_control_send_low+0x62c/0x880 [ 151.519072][ T1174] Modules linked in: [ 151.522972][ T1174] CPU: 0 PID: 1174 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 151.530578][ T1174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 151.540700][ T1174] Workqueue: phy7 ieee80211_scan_work [ 151.546108][ T1174] RIP: 0010:__rate_control_send_low+0x62c/0x880 [ 151.552447][ T1174] Code: 42 0f b6 04 28 84 c0 0f 85 ea 01 00 00 48 8b 04 24 8b 08 48 c7 c7 c0 95 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 b4 cc 69 00 <0f> 0b e9 74 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fa ff [ 151.572108][ T1174] RSP: 0018:ffffc90005207508 EFLAGS: 00010246 [ 151.572257][ T7766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1264'. [ 151.578185][ T1174] RAX: 48dd0a8c69821800 RBX: 000000000000000c RCX: ffff888022468000 [ 151.595199][ T1174] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 151.603186][ T1174] RBP: 0000000000000084 R08: ffffc90005207027 R09: 1ffff92000a40e04 [ 151.611218][ T1174] R10: dffffc0000000000 R11: fffff52000a40e05 R12: ffff8880743d63e8 [ 151.619258][ T1174] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020 [ 151.627290][ T1174] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 151.636263][ T1174] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.642885][ T1174] CR2: 00007fb007e4edac CR3: 0000000063bc1000 CR4: 00000000003506f0 [ 151.650922][ T1174] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 151.658962][ T1174] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 151.666939][ T1174] Call Trace: [ 151.670270][ T1174] [ 151.673216][ T1174] rate_control_send_low+0x194/0x790 [ 151.678564][ T1174] ? ieee80211_scan_work+0x41f/0x1aa0 [ 151.683985][ T1174] rate_control_get_rate+0x207/0x5c0 [ 151.689301][ T1174] ieee80211_tx_h_rate_ctrl+0xaeb/0x16e0 [ 151.695032][ T1174] ? ieee80211_tx_h_select_key+0x1710/0x1710 [ 151.701055][ T1174] ? sta_info_hash_lookup+0x53e/0x580 [ 151.706438][ T1174] ? ieee80211_queue_skb+0xbd/0x20e0 [ 151.711828][ T1174] invoke_tx_handlers_late+0xae/0x1720 [ 151.717298][ T1174] ? ieee80211_tx_h_select_key+0x11fb/0x1710 [ 151.723337][ T1174] ? sta_info_get+0x220/0x230 [ 151.728025][ T1174] ? invoke_tx_handlers_early+0xa26/0x1ca0 [ 151.733912][ T1174] ieee80211_tx+0x2d4/0x460 [ 151.738428][ T1174] ? ieee80211_skb_resize+0x610/0x610 [ 151.743872][ T1174] ? ieee80211_xmit+0x309/0x420 [ 151.748786][ T1174] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 151.754652][ T1174] ieee80211_scan_state_send_probe+0x556/0x8e0 [ 151.760837][ T1174] ieee80211_scan_work+0x41f/0x1aa0 [ 151.766103][ T1174] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 151.772010][ T1174] ? _raw_spin_unlock_irq+0x1f/0x40 [ 151.777252][ T1174] process_one_work+0x867/0xff0 [ 151.782159][ T1174] ? worker_detach_from_pool+0x240/0x240 [ 151.787850][ T1174] ? lockdep_hardirqs_off+0x70/0x100 [ 151.793207][ T1174] ? _raw_spin_lock_irq+0xb7/0xf0 [ 151.798293][ T1174] ? _raw_spin_lock_irqsave+0x100/0x100 [ 151.803879][ T1174] ? wq_worker_running+0x97/0x170 [ 151.808957][ T1174] worker_thread+0xad7/0x12a0 [ 151.813676][ T1174] kthread+0x42e/0x520 [ 151.817817][ T1174] ? rcu_lock_release+0x20/0x20 [ 151.822708][ T1174] ? kthread_blkcg+0xd0/0xd0 [ 151.827312][ T1174] ret_from_fork+0x1f/0x30 [ 151.831803][ T1174] [ 151.834837][ T1174] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 151.842120][ T1174] CPU: 0 PID: 1174 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 151.849663][ T1174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 151.859718][ T1174] Workqueue: phy7 ieee80211_scan_work [ 151.865106][ T1174] Call Trace: [ 151.868387][ T1174] [ 151.871718][ T1174] dump_stack_lvl+0x188/0x250 [ 151.876408][ T1174] ? show_regs_print_info+0x20/0x20 [ 151.881613][ T1174] ? load_image+0x410/0x410 [ 151.886137][ T1174] panic+0x2f8/0x850 [ 151.890053][ T1174] ? bpf_jit_dump+0xd0/0xd0 [ 151.894572][ T1174] ? ret_from_fork+0x1f/0x30 [ 151.899177][ T1174] ? __rate_control_send_low+0x62c/0x880 [ 151.904823][ T1174] __warn+0x248/0x2b0 [ 151.908814][ T1174] ? __rate_control_send_low+0x62c/0x880 [ 151.914457][ T1174] report_bug+0x1b9/0x2e0 [ 151.918795][ T1174] handle_bug+0x3a/0x70 [ 151.922987][ T1174] exc_invalid_op+0x16/0x40 [ 151.927491][ T1174] asm_exc_invalid_op+0x16/0x20 [ 151.932340][ T1174] RIP: 0010:__rate_control_send_low+0x62c/0x880 [ 151.938585][ T1174] Code: 42 0f b6 04 28 84 c0 0f 85 ea 01 00 00 48 8b 04 24 8b 08 48 c7 c7 c0 95 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 b4 cc 69 00 <0f> 0b e9 74 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fa ff [ 151.958202][ T1174] RSP: 0018:ffffc90005207508 EFLAGS: 00010246 [ 151.964283][ T1174] RAX: 48dd0a8c69821800 RBX: 000000000000000c RCX: ffff888022468000 [ 151.965208][ T7612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.972716][ T1174] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 151.972731][ T1174] RBP: 0000000000000084 R08: ffffc90005207027 R09: 1ffff92000a40e04 [ 151.972743][ T1174] R10: dffffc0000000000 R11: fffff52000a40e05 R12: ffff8880743d63e8 [ 151.972756][ T1174] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020 [ 151.972782][ T1174] ? __rate_control_send_low+0x62c/0x880 [ 151.972817][ T1174] rate_control_send_low+0x194/0x790 [ 151.972835][ T1174] ? ieee80211_scan_work+0x41f/0x1aa0 [ 152.027991][ T1174] rate_control_get_rate+0x207/0x5c0 [ 152.033300][ T1174] ieee80211_tx_h_rate_ctrl+0xaeb/0x16e0 [ 152.038956][ T1174] ? ieee80211_tx_h_select_key+0x1710/0x1710 [ 152.044955][ T1174] ? sta_info_hash_lookup+0x53e/0x580 [ 152.050331][ T1174] ? ieee80211_queue_skb+0xbd/0x20e0 [ 152.055625][ T1174] invoke_tx_handlers_late+0xae/0x1720 [ 152.061088][ T1174] ? ieee80211_tx_h_select_key+0x11fb/0x1710 [ 152.067079][ T1174] ? sta_info_get+0x220/0x230 [ 152.071769][ T1174] ? invoke_tx_handlers_early+0xa26/0x1ca0 [ 152.077594][ T1174] ieee80211_tx+0x2d4/0x460 [ 152.082105][ T1174] ? ieee80211_skb_resize+0x610/0x610 [ 152.087501][ T1174] ? ieee80211_xmit+0x309/0x420 [ 152.092364][ T1174] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 152.098190][ T1174] ieee80211_scan_state_send_probe+0x556/0x8e0 [ 152.104372][ T1174] ieee80211_scan_work+0x41f/0x1aa0 [ 152.109577][ T1174] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 152.115484][ T1174] ? _raw_spin_unlock_irq+0x1f/0x40 [ 152.120692][ T1174] process_one_work+0x867/0xff0 [ 152.125565][ T1174] ? worker_detach_from_pool+0x240/0x240 [ 152.131202][ T1174] ? lockdep_hardirqs_off+0x70/0x100 [ 152.136496][ T1174] ? _raw_spin_lock_irq+0xb7/0xf0 [ 152.141521][ T1174] ? _raw_spin_lock_irqsave+0x100/0x100 [ 152.147072][ T1174] ? wq_worker_running+0x97/0x170 [ 152.152099][ T1174] worker_thread+0xad7/0x12a0 [ 152.156804][ T1174] kthread+0x42e/0x520 [ 152.160876][ T1174] ? rcu_lock_release+0x20/0x20 [ 152.165728][ T1174] ? kthread_blkcg+0xd0/0xd0 [ 152.170322][ T1174] ret_from_fork+0x1f/0x30 [ 152.174757][ T1174] [ 152.177985][ T1174] Kernel Offset: disabled [ 152.182544][ T1174] Rebooting in 86400 seconds..