last executing test programs: 4.550566376s ago: executing program 3 (id=5633): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file2\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$eJzs3W9v09YewPGfS6vm5koI3XuFUG+Bs8KkInXFSSAo4pHnnKQeiR3ZDmqfDFW0RRUBJNgk6BPUB2P/tdewp3sR017F3gXaO1gnHzuQtvnT9V8q9v1EYMc+Pud3HMu/uo2PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiOVWbbtgScPz28tqMLcaBs0h67v13dg1GdKuiJX8k1xOLqWLLv3v/eqLyX9zMpu+m5VcMsnJ1r8vXrj738mJ7vZDAjoVL15tPV7tdNafjzuQManrexIFXtOpa+VFgaqUy/bNpVqkal5DRytRrJvKDbUTB6Gad2+oQqVSUnpxJWj79arT0N2Fdz4p2nZZfZVPP2//5meLkbvkNRqeXzdlktVJmTvJgXjPi1WsnaZSG5ud9dKg4LazwyMpVBjVk6RQcVShol0sFgrFYqF8u3L7jm1P7ltg7yH7Soz/oMV4HefpGziSiSz/S0M88aUty6L6vlypSiiBNAesz3Tz/8c39dB2e/N/N8tfer96Rkz+v5K+uzIo/w+I5W+/ppPqs/k/d3Z2DrDN+f+nsb2SLXksq9KRjqzL8+OK6BhfXSdRd120+OJJJIF40hTHLFHZEiUVKUtZbHkgS1KTSJTUxJOGaIlkRSKJRZsjypVQtDjyvQQSipJ5ceWGKClIRSpSEiVaFmVFAmmLL3WpimNq2ZBNs99Lw/rfLVQ4SKHikELkfxzdcZ26gSPb6eZ/AAAAAADwwbLMb9+T6/8puWzmctLQ9rjDAgAAAAAAx8j85X82mUwlc5fFqnlc/wMAAAAA8GGxzD12lojk5Wo6170Til8CAAAAAADwgTB//7+STMzYa1fFOtD1/9SpBQgAAAAAAI7sm0Fj7P9mllqWRK1p69c/JAynrO3W8nXriZOscJ6cS7c7t7fGuDZjnc8qMZPyZPbO1bNWNvrlu0Ew32aTjZ44rH5j/Vp7Avi8W0OfAH6S/gHID/JR2q1u2bXumrSVf2WLG3cL4jjnJ2K9HH/5dPOlmO5/6zcnswIPn3XWTCzbybvtJ1mF+8ZRHLwz5Asz3oK556Lv6MZT5kaMrN28JRubnXW79wOYSDefGNqmXEgXpm2+kbn07Vw20n5+d/9zSZuFxUG9r5sopkXE9Nw6ZM/fyLW0zLX5a+mkTxTFvlFMJTGn+6LYWr6+k+7/CTnQvjhEFKWB+yKLotR7FBwiCgAYl43BWei7nXTN3sR/iLPcxqgn+ezN7of58ULeyHxaZn7GnFgnZ/qc0e1RZ3T7iHn9l33PQBqUY5N2f3zXbsG0+3MStwxsN2oULclJ7uXv75etPlp/tP60WCyV7Vu2fbsoU6Yb2YTcAwDoY/QzdkaWsG6Zq+pk5Vpacs9V9X/efaVgUR7KM+nImiyYuw3MNw761prv+RrCwoir1nzPE14WRlzV5Xse9HLwsqXT+TAAADglcyPy8EHy/8KI6+7duXz41XFvLgcAACdDh2+tfPy1FYZe60GhUik48ZJWYeDeU6FXrWvl+bEO3SXHr2vVCoM4cINGMnPfq+pIRe1WKwhjVQtC1Qoib9k8+V1lj36PdNPxY8+NWg3tRFq5gR87bqyqXuSqVvvThhct6dBsHLW069U814m9wFdR0A5dvahUpHVPQa+q/direcmsr1qh13TCFXU/aLSbWlV15IZeKw7SCrtteX4tCJum2sVx72wAAM6IF6+2Hq92OuvPT3Bm3H0EAAC7kaUBAAAAAAAAAAAAAAAAAAAAADj7hty359SO90bAaTmFew2PKdSzEcY/dea1iGRLdl5L72HTHXT6xFo/N+6+n5mZMZ+YAJy4vwIAAP//NVpGnw==") linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x400) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/../file0\x00', 0x0, 0x800) 4.299306758s ago: executing program 3 (id=5643): r0 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x5, 0x3ff, 0x24, @ipv4={'\x00', '\xff\xff', @broadcast}, @private2, 0x7800, 0x8000, 0x1, 0x4}}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fffffff, 0xee1, 0xfaee, 0x1869, 0x4, "886961bc805353498f2774b23ebd6dfc87ecc6125aec6b841eef5a7ffad2addb625cd50216f9ff0d358f868616188698c071127fe6cdb0b63ab94f3aa5529bfd667e8942b5b34c2ba4497377140e7e3341b55c8e4d1976a7e204c0822b06fcf497a1c5a68135818df7915ceafbc578a7c3fc087737cd1fefb3dd81e3c1139986"}) 2.993710323s ago: executing program 3 (id=5658): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, 0x0, 0x0) 2.956107464s ago: executing program 3 (id=5659): syz_mount_image$hfsplus(&(0x7f0000000400), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000080)={[{}, {@nodecompose}, {@umask}, {@nls={'nls', 0x3d, 'koi8-ru'}}, {@force}, {@nobarrier}, {@nobarrier}]}, 0x0, 0x718, &(0x7f00000011c0)="$eJzs3U9sW3cdAPDvsx0n7kTqbe02EFKjVVSwQpvEjBYJiTIhlMOEKu3AOJo2WaM4WZVkKK0QzYDBEU6ohx2GUDjshHZAGuKAGGckpN17r8S92gGj9/zs2E7i2M2/rnw+0sv7vfd+f77vm/d+sZ9bOYD/W3NvxthmJDF38fWNdPvBVq3xYKu23C5HxHhEFCJKrVUkKxHJJxHXorXEF9OdeXfJXuO8+vDj9y/c/7DW2irlS1a/MKjdtuaAETbzJaYiopivR1Taq78b8dqO/u6N1HXSiTtN2Pl24uCkNZvNpLVq2xyl+RD3LfCkuxdRHNtlfzXiVERM5K8DIp8dCscc3qEbaZYDAACAJ1NxvwqnH8Wj2IjJ4wkHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAng5J6zsDk3wptMtTkbS//7+c70uVyycc72Bf3+f4ewvHFAgAAAAAAAAAHJZmsWvjo/yD+3OP4lFsxGSnUpJ95v9ytnEm+/lMvBNrMR+rcSk2oh7rsR6rMRMxNtnVYXmjvr6+OrOz5e8jbdlsNu/lLWcjorqj5ewRnjkAAAAAAAAAPP1+EXMxedJBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAtySi2Fply5l2uRqFUkRMREQ5rbcZ8bd2+fPs7ycdAAAAABy9Sr6eTP7bKjST7D3/C9n7/ol4J1ZiPRZjPRoxHzezZwGtd/2Ff2/WGg+2asvpsrPj7/1npDiyHiOiGO/uMfJ0VuNsp8Vc/CDeiIsxFddjNRbjp1GP9ZiPqaikJxH1SKJaaT29qLbj3D3eaz1b1/tjO9e3/VIWSSUWYjGL7VLcKEfrsUl2DumYL3WN9pdyRN+I76bZSb6bGzJHN7t+X7/Ln8vkmqeH7ONoVLMzH+tkZDrNfZ6NZwfnfsTrpH+kmSh0nkGd2R4l3cxH+qyZH27n/Cej5PxUvk5z/evenB+2ER+l9WdiNgr51RfxQm/Ob3/l/nO9jb/26T+u3yqsLN1aWLt4hKd0EFP7VRhrF/ozUevKxIuDr748E400E5vDZ2Ksf8fEsC2PVjnPRjYVDTlbfj8r1ePlrkvw7bgZ83ElpmMmrsZ0fDtmo9a5wtLlbE9eS7Xl3pxk91ph5/xWGRD8+a92VfrNPpWP0o927Enz8mxXXrtnump2LN9z7bcx3XX1PTf46hv5r0A6/pfycjrGLzt/cZ4EPZnI5+Z2dM8PzsQfskl6rbGytHqrfnvI8S7k6/S2fa93bv7j8FH3/3U/DOn1ks64pWwry0mlfb2kx57vRNubr3L+iUurXWHHsbOdY9WYjMX44Z53ajl/Dbezp9axF7uOfSGPOp05y/nrm/axnlc58XY0slchffadqgE4ZqdeOVWuPKz8q/JB5VeVW5XXJ14bvzr+5XKM/bP01+KfC38qfCd5JT6In8fkSUcKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPg7U7d5fqjcb8aqcQE/17Dloo7znW4EIU9q2z9cxwHUY1YvBYSV4oH+65H15hPM9ivueN7UOfHvJYlejb0/6GpYP2/FFEDKhTPnDwydDX2OnHHaLrV3CwbLS/OC3b0yyO0LzUbrV7nVKsTcRSPSntcseNb98FUV2qNz5r9jSvRNctAzzlLq8v3768dufuNxaX62/NvzW/Mnv1ytUrtW/NfPPywmJjfrr186SjBI7C2p27xSGrLvz4iGMBAAAAAAAAAAAAhpP/6//1x/7PDKV96pRX13Yf+dxxnyoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwOTX3ZoxtRhIz05em0+0HW7VGurTL2zVLEVGIiORnEcknEdeitUS1q7tkr3Feffjx+xfuf1jb7qvUrl8Y1G44m/kSUxFRzNf7G9+lm5393ejqb/Oxwks6Z5gm7Hw7cXDS/hcAAP//OonviA==") lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x1) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 2.083180828s ago: executing program 4 (id=5664): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x41}, 0x4}, 0x1c) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @mcast1}, 0x1b) 1.914637776s ago: executing program 4 (id=5666): r0 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) setrlimit(0x7, &(0x7f00000000c0)={0x4, 0x6}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 1.800242901s ago: executing program 4 (id=5672): syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 1.63953475s ago: executing program 4 (id=5676): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x2808082, &(0x7f0000000200)={[{@uid}, {}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@nodecompose}, {}, {@force}, {@type={'type', 0x3d, "eea74fc7"}}]}, 0x1, 0x6e8, &(0x7f0000001f80)="$eJzs3U1sHGcZAOB31uu1N5XcbZq0BSHFakQEDSS2l5IgIREQQj5UKBKXXk3iNFbWbmRvkRMhsgUKRzihHHooQubQE+oBqYgDopyRkLii3CNxjziwaGZn1rtr79qb+CcJzyPNzjcz3887r2dmZ2cTbQD/txbfjslWJLF4/q3NdPnBVr3xYKu+WpQjYioiShHlziyStYjks4gr0Znic+nKvLtk2DhvPvz0w3P3P653lsr5lNUvjWq3rT1ihFY+xWxETOTzMZWH9Xdtl/7ujdV10o07TdjZInFw3No7tMZpvo/zFnja3YuYmNxlfS3iRERM5/cBkV8dSkcc3oEb6yoHAAAAT6eJvSq8+CgexWbMHE04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HxIOr8ZmORTqSjPRlL8/n8lX5eqVI453tG+ssf2D24cUSAAAAAAAAAAcCg+yb+4P/MoHsVmzBTr20n2nf/r2cKp7PWFeC82YjnW40JsxlI0oxnrMR8xOdPTYWVzqdlcn9/Z8jeRtmy32/fylgsRUdvRcuEIdhoAAAAAAAAAnl8/jcWYOe4gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgVxIx0Zll06miXItSOSKmI6KS1mtF/LkoP8v+ctwBAAAAwOGr5vOZ5L+dQjvJPvO/kn3un473Yi2asRLNaMRyXM+eBXQ+9Zf+0ao3HmzVV9NpZ8ff/vdYcWQ9RsREvD9k5Lmsxului8X4XvwgzsdsXI31WIkfxVI0Yzlmo5ruRCxFErVq5+lFrYhz93iv9C1dHYztzMDya1kk1bgRK1lsF+JaJTqPTbJ9SMd8rWe0P1YiBkZ8P81O8q3cPnN0vefv9ev8uUyu/eI++xiu/ARta9meT3YzMpfmPs/GS6NzP+ZxMjjSfJS6z6BObY+SLg6OVOT8h+Pk/EQ+T3P9i/6cH7QxH6UNZmIhSvnRF/FKf85vf/H+yf7GX/7nX6/eLK3dunlj4/wh7tKhmiwKg5mo92Ti1dFHX56JRpqJ1v4zMTm4YvoJ9uMAVfJsZJeifV4tv5uVluL1nkPw3bgey3Ep5mI+LsdcfCMWot53hJ3uy2u5vtqfk+xcK+28vlVHBH/2Sz2VfrlH5aOV5uWlnrz2Xulq2bZ8zZVfxVxPlk6OPvrGfhdIx/98Xk7H+Fn3Hedp0JeJ/NpcRPfy6Ez8tp2+bjTWbq3fXLo9pP/Bd6hz+Tw9bT/ovzb/7qD26fGkx8vJbsRZTqrF8ZJue7kbbX++Kvk3Lp12pR3bTne31WImVuL7Q8/USn4Pt7OnzrZXe7f9a/vKWcnvb4ptfXc58W40sruQAbNHk1UA9u3EGycq1YfVv1c/qv68erP61vR3pi5PfaESk38r/2niD6Xfl76ZvBEfxU9i5rgjBQAAAAAAAAAAAAAAAAAAAAAAAAAAAACA58HGnbu3lhqN5fVuIaYH1zxpoTJ0rNGFKO1ZZ+uF/XUYtYjRYyV5oXKw+/4sFqpxSD1/EhEj6lSeeIhk7GNs7EJ6IB9Ih8UPp2Vr2hNjNC8XrXavU46N6WF/wantsyBqt5Ya/2n31alGzykDPOcuNldvX9y4c/erK6tL7yy/s7y2cPnS5Uv1r89/7eKNlcbyXOf1uKMEDsPGnbsTxx0DAAAAAAAAAAAAMJ78X/83H/s/M5T3qFNZ39h95DNHvasAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAM2rx7ZhsRRLzcxfm0uUHW/VGOhXl7ZrliChFRPLjiOSziCvRmaLW010ybJw3H3764bn7H9e3+yoX9Uuj2u1PK59iNiIm8vnepnbpZmd/13r6az1WeEl3D9OEnS0SB8ftfwEAAP//p+75lw==") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\x8f\x98\xb9\x89Q\xa4Pxy0\x01\x8cC\x1f|\xad\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1a29143, 0x0) mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\x8f\x98\xb9\x89Q\xa4Pxy0\x01\x8cC\x1f|\xad\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1a29143, 0x0) 1.450454419s ago: executing program 0 (id=5681): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4421, &(0x7f0000004500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40186f03, 0x0) 1.383619542s ago: executing program 3 (id=5683): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) 1.281275297s ago: executing program 2 (id=5684): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}, @IFLA_BRPORT_ISOLATED={0x5}]}}}]}, 0x4c}}, 0x0) 1.213950051s ago: executing program 3 (id=5685): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/49, 0x31) 1.180454772s ago: executing program 2 (id=5686): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) lseek(r0, 0x0, 0x4) 1.145729834s ago: executing program 4 (id=5688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x3c, r1, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 1.01812307s ago: executing program 2 (id=5689): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x183, &(0x7f0000000500)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001f80)=""/4097, 0x1001) 979.006772ms ago: executing program 4 (id=5690): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)={0xc8, r1, 0x1, 0x70bd25, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x9c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x84, 0x2, '\x00\x91P{5\x057\x97:\xf1\xa0\x9fj\n\"\xf8\xcf\\\xc6/\xed\xe9\xe3Z\x9c\x8bK(\v|\xc0!\xfe\x04\xa3)\xc2\xb4\xe0j\x9ej)\a\x83~\x0e\x13\xaaF\x00\x00\x00\x00\x00\x00\x00o\xfao\xfe\x18\xe2\xbf\x15Q\xe8W*\x85N\x80\t\xd2n\x87\xf1|%.\x94\xea^[\xf37\xab\x9a\xf0 \xd3\x94H\x05\x1a\n8\xe95w\a0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 98.521456ms ago: executing program 0 (id=5702): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf250a00004000000007060000000c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="190016005e"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 85.325037ms ago: executing program 1 (id=5703): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040881ff0000000000050002000008000f40fe00000e", 0x24) 0s ago: executing program 1 (id=5704): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000300)={0x21, 0x2}) kernel console output (not intermixed with test programs): -generic 0000:0000:0004.0016: unknown main item tag 0x0 [ 264.253411][ T8868] hid-generic 0000:0000:0004.0016: unknown main item tag 0x0 [ 264.270797][ T8868] hid-generic 0000:0000:0004.0016: unknown main item tag 0x0 [ 264.270832][ T8868] hid-generic 0000:0000:0004.0016: unknown main item tag 0x0 [ 264.270853][ T8868] hid-generic 0000:0000:0004.0016: unknown main item tag 0x0 [ 264.270873][ T8868] hid-generic 0000:0000:0004.0016: unknown main item tag 0x0 [ 264.270894][ T8868] hid-generic 0000:0000:0004.0016: unknown main item tag 0x0 [ 264.270915][ T8868] hid-generic 0000:0000:0004.0016: unknown main item tag 0x0 [ 264.270958][ T8868] hid-generic 0000:0000:0004.0016: unknown main item tag 0x0 [ 264.270980][ T8868] hid-generic 0000:0000:0004.0016: unknown main item tag 0x0 [ 264.271001][ T8868] hid-generic 0000:0000:0004.0016: unknown main item tag 0x0 [ 264.271021][ T8868] hid-generic 0000:0000:0004.0016: unknown main item tag 0x0 [ 264.281942][ T8868] hid-generic 0000:0000:0004.0016: hidraw0: HID v0.03 Device [syz0] on syz1 [ 264.454452][T13194] fido_id[13194]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 264.541195][T13204] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3856'. [ 264.580569][T13164] loop1: detected capacity change from 0 to 40427 [ 265.575437][T13254] loop4: detected capacity change from 0 to 2048 [ 265.650079][ T26] audit: type=1400 audit(1774429443.001:9): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13259 comm="syz.0.3884" [ 265.709816][T13164] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 265.728412][T13164] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 265.767858][T13254] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 265.801353][T13164] F2FS-fs (loop1): invalid crc value [ 265.864535][T13164] F2FS-fs (loop1): Found nat_bits in checkpoint [ 266.031253][T13164] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 266.049711][T13164] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 266.248455][T13296] loop3: detected capacity change from 0 to 256 [ 266.294249][T13296] exfat: Deprecated parameter 'utf8' [ 266.362342][T13296] exfat: Deprecated parameter 'utf8' [ 266.382632][T13296] exfat: Deprecated parameter 'utf8' [ 266.477439][T13296] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 266.566445][ T4266] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 266.956791][ T4266] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 266.973377][ T4266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.058426][T13317] xt_HMARK: spi-set and port-set can't be combined [ 267.071252][ T7801] udevd[7801]: symlink '../../loop1' '/dev/disk/by-diskseq/568.tmp-b7:1' failed: Read-only file system [ 267.085035][ T4266] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 267.108124][ T4266] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 267.127550][ T4266] usb 3-1: Manufacturer: syz [ 267.132698][ T4558] udevd[4558]: symlink '../../loop3' '/dev/disk/by-diskseq/569.tmp-b7:3' failed: Read-only file system [ 267.156201][ T4266] usb 3-1: config 0 descriptor?? [ 267.233594][ T4558] udevd[4558]: symlink '../../loop1' '/dev/disk/by-diskseq/568.tmp-b7:1' failed: Read-only file system [ 267.267165][ T7802] udevd[7802]: symlink '../../loop3' '/dev/disk/by-diskseq/569.tmp-b7:3' failed: Read-only file system [ 267.330433][T13323] loop1: detected capacity change from 0 to 2048 [ 267.378249][ T4266] rc_core: IR keymap rc-hauppauge not found [ 267.390897][ T4266] Registered IR keymap rc-empty [ 267.405288][ T4266] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 267.438606][ T4266] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input38 [ 267.498117][T13323] EXT4-fs (loop1): Unrecognized mount option "obj_role=seclabel" or missing value [ 267.509922][T13306] loop4: detected capacity change from 0 to 32768 [ 267.526427][ T4558] udevd[4558]: symlink '../../loop1' '/dev/disk/by-diskseq/570.tmp-b7:1' failed: Read-only file system [ 267.578655][ T4558] udevd[4558]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 267.711370][ T4558] udevd[4558]: symlink '../../loop1' '/dev/disk/by-diskseq/570.tmp-b7:1' failed: Read-only file system [ 267.717397][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-diskseq/571.tmp-b7:4' failed: Read-only file system [ 267.725679][T13329] rc rc0: two consecutive events of type space [ 267.754192][T13306] XFS (loop4): Mounting V5 Filesystem [ 267.779399][ T7801] udevd[7801]: symlink '../../loop1' '/dev/disk/by-diskseq/570.tmp-b7:1' failed: Read-only file system [ 267.780707][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:4' failed: Read-only file system [ 267.872232][T13306] XFS (loop4): Ending clean mount [ 267.950104][T13325] loop3: detected capacity change from 0 to 40427 [ 267.966441][ T4996] usb 3-1: USB disconnect, device number 19 [ 268.001758][T13325] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 268.008427][ T4196] XFS (loop4): Unmounting Filesystem [ 268.021532][T13325] F2FS-fs (loop3): invalid crc value [ 268.060360][T13325] F2FS-fs (loop3): Found nat_bits in checkpoint [ 268.143585][T13325] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 268.933395][T13377] loop3: detected capacity change from 0 to 2048 [ 269.077715][T13377] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 269.107755][T13377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.161034][T13377] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 269.272982][T13391] loop1: detected capacity change from 0 to 4096 [ 269.514916][T13395] loop3: detected capacity change from 0 to 4096 [ 269.618339][ T4183] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 269.626819][T13395] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 269.653135][ T4183] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 269.741990][T13395] ntfs: volume version 3.1. [ 269.761414][T13395] ntfs: (device loop3): ntfs_mark_quotas_out_of_date(): Quota defaults entry version 0x5 is not supported. [ 269.787595][T13411] loop4: detected capacity change from 0 to 8 [ 269.802340][T13395] ntfs: (device loop3): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 270.218492][T13435] loop4: detected capacity change from 0 to 64 [ 270.361682][T13435] hfs: request for non-existent node 1280 in B*Tree [ 270.381205][T13435] hfs: request for non-existent node 1280 in B*Tree [ 270.452412][ T144] hfs: request for non-existent node 1280 in B*Tree [ 270.474356][ T144] hfs: request for non-existent node 1280 in B*Tree [ 270.703610][T13453] sctp: [Deprecated]: syz.0.3965 (pid 13453) Use of int in maxseg socket option. [ 270.703610][T13453] Use struct sctp_assoc_value instead [ 271.019388][T13472] loop1: detected capacity change from 0 to 1024 [ 271.197067][ T151] hfsplus: b-tree write err: -5, ino 25 [ 271.208852][ T151] hfsplus: b-tree write err: -5, ino 4 [ 271.230508][ T151] hfsplus: b-tree write err: -5, ino 2 [ 271.426564][T13493] loop4: detected capacity change from 0 to 1024 [ 271.601412][T13493] attempt to access beyond end of device [ 271.601412][T13493] loop4: rw=0, want=5780, limit=1024 [ 271.635562][T13503] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3984'. [ 271.649427][T13503] tipc: Started in network mode [ 271.684484][T13503] tipc: Node identity 7f000001, cluster identity 4711 [ 271.693335][T13503] tipc: Enabling of bearer rejected, failed to enable media [ 271.785847][T13505] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 271.889725][T13477] loop3: detected capacity change from 0 to 32768 [ 272.038859][T13530] loop1: detected capacity change from 0 to 512 [ 272.054214][T13477] XFS (loop3): Mounting V5 Filesystem [ 272.132085][T13530] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 272.178840][T13477] XFS (loop3): Ending clean mount [ 272.190760][ T4558] udevd[4558]: symlink '../../loop1' '/dev/disk/by-diskseq/591.tmp-b7:1' failed: Read-only file system [ 272.249824][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-diskseq/589.tmp-b7:4' failed: Read-only file system [ 272.251965][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/590.tmp-b7:3' failed: Read-only file system [ 272.263515][ T4558] udevd[4558]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 272.293652][T13530] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 272.306344][T13530] System zones: 1-12 [ 272.314526][T13530] EXT4-fs (loop1): 1 truncate cleaned up [ 272.332362][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-uuid/986211a9-7d00-4ebf-a576-e3de63fa2cbd.tmp-b7:3' failed: Read-only file system [ 272.334677][ T4184] XFS (loop3): Unmounting Filesystem [ 272.365917][T13530] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,init_itable=0x000000007fffffff,debug,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 272.377411][ T7801] udevd[7801]: symlink '../../loop1' '/dev/disk/by-diskseq/591.tmp-b7:1' failed: Read-only file system [ 272.386116][ T26] audit: type=1326 audit(1774429449.751:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13520 comm="syz.0.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27996d799 code=0x7fc00000 [ 272.395598][ T7801] udevd[7801]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 272.537046][ T7801] udevd[7801]: symlink '../../loop4' '/dev/disk/by-diskseq/589.tmp-b7:4' failed: Read-only file system [ 272.683722][ T7801] udevd[7801]: symlink '../../loop4' '/dev/disk/by-diskseq/589.tmp-b7:4' failed: Read-only file system [ 272.700235][T13553] loop4: detected capacity change from 0 to 256 [ 272.737786][ T4558] udevd[4558]: symlink '../../loop3' '/dev/disk/by-diskseq/590.tmp-b7:3' failed: Read-only file system [ 272.790709][T13553] FAT-fs (loop4): Directory bread(block 64) failed [ 272.815089][T13553] FAT-fs (loop4): Directory bread(block 65) failed [ 272.821748][T13553] FAT-fs (loop4): Directory bread(block 66) failed [ 272.849005][T13556] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 272.856307][T13556] IPv6: NLM_F_CREATE should be set when creating new route [ 272.863558][T13556] IPv6: NLM_F_CREATE should be set when creating new route [ 272.879320][T13553] FAT-fs (loop4): Directory bread(block 67) failed [ 272.887931][T13553] FAT-fs (loop4): Directory bread(block 68) failed [ 272.915859][T13553] FAT-fs (loop4): Directory bread(block 69) failed [ 272.936907][T13553] FAT-fs (loop4): Directory bread(block 70) failed [ 272.956427][T13553] FAT-fs (loop4): Directory bread(block 71) failed [ 272.991092][T13553] FAT-fs (loop4): Directory bread(block 72) failed [ 273.019201][T13553] FAT-fs (loop4): Directory bread(block 73) failed [ 273.033517][T13568] netlink: 'syz.0.4011': attribute type 2 has an invalid length. [ 273.060159][T13564] loop3: detected capacity change from 0 to 4096 [ 273.061719][T13568] netlink: 'syz.0.4011': attribute type 2 has an invalid length. [ 273.061738][T13568] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4011'. [ 273.114329][T13564] EXT4-fs (loop3): Ignoring removed bh option [ 273.114569][T13564] EXT4-fs (loop3): Test dummy encryption mode enabled [ 273.137519][T13564] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 273.137607][T13564] System zones: 0-5 [ 273.139278][T13564] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,bh,test_dummy_encryption,nodiscard,nojournal_checksum,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 273.163323][T13573] netlink: 'syz.0.4013': attribute type 3 has an invalid length. [ 273.770733][T13593] loop3: detected capacity change from 0 to 8 [ 274.227907][T13604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4028'. [ 274.267200][T13585] loop4: detected capacity change from 0 to 32768 [ 274.343778][T13585] XFS (loop4): Mounting V5 Filesystem [ 274.519461][T13585] XFS (loop4): Ending clean mount [ 274.540327][T13585] XFS (loop4): Quotacheck needed: Please wait. [ 274.542827][T13618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4031'. [ 274.641465][T13585] XFS (loop4): Quotacheck: Done. [ 274.739546][ T4196] XFS (loop4): Unmounting Filesystem [ 274.878584][T13606] loop3: detected capacity change from 0 to 32768 [ 275.079070][T13606] XFS (loop3): Mounting V5 Filesystem [ 275.192573][T13606] XFS (loop3): Ending clean mount [ 275.302507][ T4184] XFS (loop3): Unmounting Filesystem [ 275.594028][ T4266] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 275.780725][T13670] loop3: detected capacity change from 0 to 1024 [ 275.880290][ T1503] hfsplus: b-tree write err: -5, ino 25 [ 275.886557][ T1503] hfsplus: b-tree write err: -5, ino 4 [ 275.889077][T13674] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4054'. [ 275.892254][ T1503] hfsplus: b-tree write err: -5, ino 2 [ 275.916140][ T1503] hfsplus: b-tree write err: -5, ino 17 [ 275.934607][ T8868] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 275.952146][T13676] loop4: detected capacity change from 0 to 512 [ 276.004237][ T4266] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 276.041828][T13680] loop3: detected capacity change from 0 to 256 [ 276.046524][ T4266] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 276.065499][ T4266] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 276.085447][ T4266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.144524][T13655] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 276.151630][T13655] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 276.184351][ T8868] usb 2-1: Using ep0 maxpacket: 32 [ 276.314379][ T8868] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 276.322778][ T8868] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 276.370708][ T8868] usb 2-1: config 0 has an invalid descriptor of length 254, skipping remainder of the config [ 276.397693][ T8868] usb 2-1: config 0 has no interface number 0 [ 276.527015][T13698] loop3: detected capacity change from 0 to 512 [ 276.570136][ T8868] usb 2-1: New USB device found, idVendor=045e, idProduct=0703, bcdDevice=6e.c0 [ 276.591085][ T8868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.611004][ T8868] usb 2-1: Product: syz [ 276.618588][ T8868] usb 2-1: Manufacturer: syz [ 276.623307][ T8868] usb 2-1: SerialNumber: syz [ 276.637528][ T8868] usb 2-1: config 0 descriptor?? [ 276.671545][T13698] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 276.676250][ T8868] usb 2-1: Found UVC 0.40 device syz (045e:0703) [ 276.698018][T13698] ext4 filesystem being mounted at /794/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.756160][ T8868] usb 2-1: No valid video chain found. [ 276.881557][ T8868] usb 2-1: USB disconnect, device number 19 [ 276.920664][T13715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4072'. [ 277.166481][T13723] loop3: detected capacity change from 0 to 256 [ 277.184772][T13723] exfat: Deprecated parameter 'namecase' [ 277.211136][T13723] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 277.255550][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/612.tmp-b7:3' failed: Read-only file system [ 277.279961][ T8868] usb 3-1: USB disconnect, device number 20 [ 277.307797][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-uuid/1234-1234.tmp-b7:3' failed: Read-only file system [ 277.339985][T13721] loop4: detected capacity change from 0 to 8192 [ 277.404174][T13721] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 277.413505][T13721] REISERFS (device loop4): using ordered data mode [ 277.421062][T13721] reiserfs: using flush barriers [ 277.427811][T13721] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 277.445129][T13721] REISERFS (device loop4): checking transaction log (loop4) [ 277.474659][T13721] REISERFS (device loop4): Using tea hash to sort names [ 277.481766][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/612.tmp-b7:3' failed: Read-only file system [ 277.481923][T13721] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 277.527211][ T4558] udevd[4558]: symlink '../../loop1' '/dev/disk/by-diskseq/594.tmp-b7:1' failed: Read-only file system [ 277.553597][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/612.tmp-b7:3' failed: Read-only file system [ 277.592532][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/612.tmp-b7:3' failed: Read-only file system [ 277.620013][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-diskseq/613.tmp-b7:4' failed: Read-only file system [ 277.646119][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 277.659944][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-uuid/00000000-0033-1233-1231-1234134124cd.tmp-b7:4' failed: Read-only file system [ 277.732979][ T7801] udevd[7801]: symlink '../../loop4' '/dev/disk/by-diskseq/613.tmp-b7:4' failed: Read-only file system [ 277.947104][T13735] loop4: detected capacity change from 0 to 4096 [ 278.029876][T13735] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 278.054279][T13735] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 278.063566][T13735] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 278.078364][T13735] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 278.108976][T13735] ntfs: volume version 3.1. [ 278.122550][T13735] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maccyrillic. You might want to try to use the mount option nls=utf8. [ 278.141400][T13735] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 278.201125][T13745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4088'. [ 278.526339][T13764] loop1: detected capacity change from 0 to 1024 [ 278.705126][T13764] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 278.844079][T13764] ext4 filesystem being mounted at /709/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.267873][T13801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4108'. [ 279.332637][T13806] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 279.339118][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4108'. [ 279.351969][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.392691][T13808] loop3: detected capacity change from 0 to 128 [ 279.491681][T13801] netlink: 'syz.1.4108': attribute type 12 has an invalid length. [ 279.521333][T13801] netlink: 'syz.1.4108': attribute type 13 has an invalid length. [ 279.810030][T13814] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 279.895478][T13814] attempt to access beyond end of device [ 279.895478][T13814] loop4: rw=524288, want=33554432, limit=2048 [ 279.913004][T13829] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 279.996505][T13833] set_capacity_and_notify: 1 callbacks suppressed [ 279.996519][T13833] loop3: detected capacity change from 0 to 256 [ 280.100641][T13833] FAT-fs (loop3): Directory bread(block 64) failed [ 280.123960][T13814] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 280.130256][T13833] FAT-fs (loop3): Directory bread(block 65) failed [ 280.152816][T13836] attempt to access beyond end of device [ 280.152816][T13836] loop4: rw=0, want=33554432, limit=2048 [ 280.195553][T13833] FAT-fs (loop3): Directory bread(block 66) failed [ 280.217008][T13814] Remounting filesystem read-only [ 280.226433][T13833] FAT-fs (loop3): Directory bread(block 67) failed [ 280.252831][T13836] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=3) [ 280.260352][T13838] loop1: detected capacity change from 0 to 64 [ 280.272096][T13833] FAT-fs (loop3): Directory bread(block 68) failed [ 280.289274][T13833] FAT-fs (loop3): Directory bread(block 69) failed [ 280.293319][T13814] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 280.297489][T13836] NILFS (loop4): error -5 reading inode: ino=12 [ 280.319857][T13833] FAT-fs (loop3): Directory bread(block 70) failed [ 280.338461][T13833] FAT-fs (loop3): Directory bread(block 71) failed [ 280.359483][T13833] FAT-fs (loop3): Directory bread(block 72) failed [ 280.377744][T13833] FAT-fs (loop3): Directory bread(block 73) failed [ 280.396906][T13814] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 280.507021][T13814] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 280.533934][T13814] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 280.567462][T13814] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 280.590934][T13814] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 280.614319][T13814] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 280.676356][T13814] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 280.718881][T13814] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 280.789700][T13814] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 280.813470][T13848] loop1: detected capacity change from 0 to 128 [ 280.847844][T13814] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 280.891204][T13814] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 280.937451][T13814] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 280.983127][T13814] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 281.011230][T13814] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 281.047623][ T26] audit: type=1800 audit(1774429458.411:11): pid=13814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4119" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 282.015475][T13886] tipc: Enabling of bearer rejected, failed to enable media [ 282.320512][T13858] loop4: detected capacity change from 0 to 32768 [ 282.380120][ T7801] udevd[7801]: symlink '../../loop1' '/dev/disk/by-diskseq/629.tmp-b7:1' failed: Read-only file system [ 282.412008][ T4558] udevd[4558]: symlink '../../loop3' '/dev/disk/by-diskseq/626.tmp-b7:3' failed: Read-only file system [ 282.538734][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/626.tmp-b7:3' failed: Read-only file system [ 282.629514][ T4558] udevd[4558]: symlink '../../loop1' '/dev/disk/by-diskseq/629.tmp-b7:1' failed: Read-only file system [ 282.728981][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/626.tmp-b7:3' failed: Read-only file system [ 282.738720][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-diskseq/630.tmp-b7:4' failed: Read-only file system [ 282.822560][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/626.tmp-b7:3' failed: Read-only file system [ 282.839577][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:4' failed: Read-only file system [ 282.926415][ T7801] udevd[7801]: symlink '../../loop1' '/dev/disk/by-diskseq/629.tmp-b7:1' failed: Read-only file system [ 282.963682][ T4558] udevd[4558]: symlink '../../loop3' '/dev/disk/by-diskseq/626.tmp-b7:3' failed: Read-only file system [ 283.259760][T13935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4174'. [ 283.279536][T13935] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4174'. [ 284.136626][T13958] loop3: detected capacity change from 0 to 8192 [ 284.271369][T13932] loop4: detected capacity change from 0 to 40427 [ 284.358177][T13932] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 284.415768][T13932] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 284.426473][T13958] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 284.435962][T13958] REISERFS (device loop3): using ordered data mode [ 284.442475][T13958] reiserfs: using flush barriers [ 284.467271][T13958] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 284.569402][T13958] REISERFS (device loop3): checking transaction log (loop3) [ 284.654678][T13932] F2FS-fs (loop4): Found nat_bits in checkpoint [ 284.837448][T13994] loop1: detected capacity change from 0 to 64 [ 284.861874][T13958] REISERFS (device loop3): Using tea hash to sort names [ 284.872240][T13958] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 284.919235][T13932] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 284.919264][T13932] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 285.990195][T14041] atomic_op ffff88807cf78998 conn xmit_atomic 0000000000000000 [ 287.150582][T14053] loop4: detected capacity change from 0 to 32768 [ 287.276045][T14099] loop3: detected capacity change from 0 to 512 [ 287.307937][ T4266] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 287.337758][ T4266] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 287.398575][T14053] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop4 scanned by syz.4.4228 (14053) [ 287.448272][T14053] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 287.464212][T14053] BTRFS info (device loop4): using free space tree [ 287.471045][T14053] BTRFS info (device loop4): has skinny extents [ 287.534417][T10427] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 287.555259][T14099] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 287.562108][T14113] fido_id[14113]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 287.576651][ T7801] udevd[7801]: symlink '../../loop4' '/dev/disk/by-diskseq/638.tmp-b7:4' failed: Read-only file system [ 287.599591][T14099] EXT4-fs (loop3): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 287.621094][ T7801] udevd[7801]: symlink '../../loop4' '/dev/disk/by-uuid/3a492a15-ac49-4ce6-945e-cef7a687c6c9.tmp-b7:4' failed: Read-only file system [ 287.688851][ T7802] udevd[7802]: symlink '../../loop3' '/dev/disk/by-diskseq/639.tmp-b7:3' failed: Read-only file system [ 287.727999][ T7802] udevd[7802]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 287.842050][T10427] usb 2-1: Using ep0 maxpacket: 16 [ 287.853622][ T4558] udevd[4558]: symlink '../../loop3' '/dev/disk/by-diskseq/639.tmp-b7:3' failed: Read-only file system [ 287.882955][T14053] BTRFS info (device loop4): enabling ssd optimizations [ 287.934271][ T4558] udevd[4558]: symlink '../../loop3' '/dev/disk/by-diskseq/639.tmp-b7:3' failed: Read-only file system [ 287.971005][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 288.003063][ T4558] udevd[4558]: symlink '../../loop3' '/dev/disk/by-diskseq/639.tmp-b7:3' failed: Read-only file system [ 288.018112][T10427] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 288.038055][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 288.113848][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 288.172799][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 288.224615][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 288.255178][T10427] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 288.274277][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 288.274790][T10427] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.326152][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 288.333275][T10427] usb 2-1: Product: syz [ 288.350279][T10427] usb 2-1: Manufacturer: syz [ 288.370346][T10427] usb 2-1: SerialNumber: syz [ 288.391010][T10427] r8152-cfgselector 2-1: config 0 descriptor?? [ 288.401587][ T7801] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 10 /dev/loop4 scanned by udevd (7801) [ 288.468748][ T7801] udevd[7801]: symlink '../../loop4' '/dev/disk/by-diskseq/638.tmp-b7:4' failed: Read-only file system [ 288.518650][ T7801] udevd[7801]: symlink '../../loop4' '/dev/disk/by-uuid/3a492a15-ac49-4ce6-945e-cef7a687c6c9.tmp-b7:4' failed: Read-only file system [ 288.800496][T14128] loop3: detected capacity change from 0 to 40427 [ 288.853792][T14128] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 288.861609][T14128] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 288.969976][T14128] F2FS-fs (loop3): invalid crc value [ 289.038534][T14160] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4267'. [ 289.040196][ T7802] udevd[7802]: symlink '../../loop3' '/dev/disk/by-diskseq/641.tmp-b7:3' failed: Read-only file system [ 289.067546][T14160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4267'. [ 289.085002][T14128] F2FS-fs (loop3): Found nat_bits in checkpoint [ 289.134458][T10427] r8152-cfgselector 2-1: Unknown version 0x0000 [ 289.148858][T10427] r8152-cfgselector 2-1: bad CDC descriptors [ 289.174888][T14166] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4269'. [ 289.234311][T10427] r8152-cfgselector 2-1: Unknown version 0x0000 [ 289.261133][T10427] r8152-cfgselector 2-1: USB disconnect, device number 20 [ 289.288421][T14128] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 289.302909][T14128] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 289.808629][ T4996] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 290.054975][T14185] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4279'. [ 290.094254][T14185] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 290.128731][ T4996] usb 3-1: Using ep0 maxpacket: 32 [ 290.162088][T14185] openvswitch: netlink: Message has 1 unknown bytes. [ 290.333896][T14197] netlink: 'syz.3.4285': attribute type 6 has an invalid length. [ 290.342416][T14199] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 290.371019][ T4996] usb 3-1: unable to get BOS descriptor or descriptor too short [ 290.482434][ T4996] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 290.519561][ T4996] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 290.753965][ T4996] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 290.763054][ T4996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.798086][ T4996] usb 3-1: Product: syz [ 290.802304][ T4996] usb 3-1: Manufacturer: syz [ 290.807232][ T4996] usb 3-1: SerialNumber: syz [ 290.850860][T14173] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 290.920952][T14227] loop4: detected capacity change from 0 to 1024 [ 291.003482][T14232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4300'. [ 291.053592][T14232] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4300'. [ 291.072321][T14232] netlink: 'syz.0.4300': attribute type 10 has an invalid length. [ 291.138263][T13727] hfsplus: b-tree write err: -5, ino 25 [ 291.147884][T13727] hfsplus: b-tree write err: -5, ino 4 [ 291.153468][T13727] hfsplus: b-tree write err: -5, ino 2 [ 291.315392][T14244] program syz.3.4307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.339272][T14247] delete_channel: no stack [ 291.401564][T14245] loop4: detected capacity change from 0 to 1024 [ 291.424517][ T4996] usb 3-1: MIDIStreaming interface descriptor not found [ 291.460528][T14245] hfsplus: Filesystem is marked locked, mounting read-only. [ 291.539265][ T4996] usb 3-1: USB disconnect, device number 21 [ 291.573186][T14245] hfsplus: filesystem is marked locked, leaving read-only. [ 292.227241][T14274] loop1: detected capacity change from 0 to 8192 [ 292.234240][T10427] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 292.355775][T14274] loop1: AHDI p1 p3 p4 [ 292.364592][T14274] loop1: p3 start 3996538112 is beyond EOD, truncated [ 292.401920][T14274] loop1: p4 start 4278231049 is beyond EOD, truncated [ 292.524217][T10427] usb 4-1: Using ep0 maxpacket: 32 [ 292.657724][T10427] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 292.676102][T10427] usb 4-1: config 0 has no interface number 0 [ 292.678614][ T7801] udevd[7801]: symlink '../../loop1' '/dev/disk/by-diskseq/648.tmp-b7:1' failed: Read-only file system [ 292.784736][T14270] loop4: detected capacity change from 0 to 32768 [ 292.805316][ T7801] udevd[7801]: symlink '../../loop1' '/dev/disk/by-diskseq/648.tmp-b7:1' failed: Read-only file system [ 292.858725][ T7801] udevd[7801]: symlink '../../loop1' '/dev/disk/by-diskseq/648.tmp-b7:1' failed: Read-only file system [ 292.892940][T14270] XFS (loop4): Mounting V5 Filesystem [ 292.902796][T10427] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 292.933164][T10427] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.986207][T10427] usb 4-1: Product: syz [ 292.990639][T10427] usb 4-1: Manufacturer: syz [ 292.999807][ T7801] udevd[7801]: symlink '../../loop1' '/dev/disk/by-diskseq/648.tmp-b7:1' failed: Read-only file system [ 293.010794][T10427] usb 4-1: SerialNumber: syz [ 293.016525][ T4558] udevd[4558]: symlink '../../loop4' '/dev/disk/by-diskseq/650.tmp-b7:4' failed: Read-only file system [ 293.022891][T10427] usb 4-1: config 0 descriptor?? [ 293.044079][T14270] XFS (loop4): Ending clean mount [ 293.047166][ T4558] udevd[4558]: symlink '../../loop4' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:4' failed: Read-only file system [ 293.096149][T10427] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 293.125911][ T4196] XFS (loop4): Unmounting Filesystem [ 293.153794][T14298] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4339'. [ 293.251891][ T7801] udevd[7801]: symlink '../../loop1' '/dev/disk/by-diskseq/649.tmp-b7:1' failed: Read-only file system [ 293.323048][T10427] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 293.336436][ T7801] udevd[7801]: symlink '../../loop1' '/dev/disk/by-diskseq/649.tmp-b7:1' failed: Read-only file system [ 293.372719][T10427] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 293.430212][T14307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4334'. [ 293.554216][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 293.616031][ T7882] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 293.827316][ T7801] udevd[7801]: symlink '../../loop1' '/dev/disk/by-diskseq/649.tmp-b7:1' failed: Read-only file system [ 293.854193][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 293.910288][ T8868] usb 4-1: USB disconnect, device number 19 [ 293.919009][ T8868] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 293.930360][T14315] loop1: detected capacity change from 0 to 8192 [ 293.942083][ T7801] udevd[7801]: symlink '../../loop4' '/dev/disk/by-diskseq/650.tmp-b7:4' failed: Read-only file system [ 293.979401][ T8868] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 294.051449][ T8868] quatech2 4-1:0.51: device disconnected [ 294.134325][ T7882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 294.159097][ T7882] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 294.197733][ T7882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.229901][ T7882] usb 3-1: config 0 descriptor?? [ 294.269092][T14301] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 294.516623][ T7882] ath6kl: Failed to submit usb control message: -71 [ 294.529093][ T7882] ath6kl: unable to send the bmi data to the device: -71 [ 294.552750][ T7882] ath6kl: Unable to send get target info: -71 [ 294.622806][ T7882] ath6kl: Failed to init ath6kl core: -71 [ 294.759937][ T7882] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 294.790926][ T7882] usb 3-1: USB disconnect, device number 22 [ 294.988885][T14323] loop4: detected capacity change from 0 to 40427 [ 295.144670][T14323] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 295.152449][T14323] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 295.233593][T14323] F2FS-fs (loop4): invalid crc value [ 295.324362][T14323] F2FS-fs (loop4): Found nat_bits in checkpoint [ 295.558509][T14323] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 295.574275][T14323] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 295.834877][T14393] loop3: detected capacity change from 0 to 128 [ 296.780888][T14430] loop4: detected capacity change from 0 to 4096 [ 296.807233][T14430] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 297.177933][T14433] netlink: 'syz.4.4391': attribute type 2 has an invalid length. [ 297.295004][T14421] loop3: detected capacity change from 0 to 40427 [ 297.337544][T14421] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 297.388027][T14421] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 297.479347][T14421] F2FS-fs (loop3): invalid crc value [ 297.521983][ T4996] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 297.608187][T14421] F2FS-fs (loop3): Found nat_bits in checkpoint [ 297.653769][ T4558] udevd[4558]: symlink '../../loop4' '/dev/disk/by-diskseq/659.tmp-b7:4' failed: Read-only file system [ 297.764984][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/660.tmp-b7:3' failed: Read-only file system [ 297.781645][T14421] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 297.792396][ T4558] udevd[4558]: symlink '../../loop4' '/dev/disk/by-diskseq/659.tmp-b7:4' failed: Read-only file system [ 297.801375][T14421] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 297.816928][ T4996] usb 3-1: Using ep0 maxpacket: 8 [ 297.863305][ T7801] udevd[7801]: symlink '../../loop4' '/dev/disk/by-diskseq/659.tmp-b7:4' failed: Read-only file system [ 297.898746][ T7882] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 297.979592][ T4558] udevd[4558]: symlink '../../loop3' '/dev/disk/by-diskseq/660.tmp-b7:3' failed: Read-only file system [ 297.997292][ T4996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 298.008783][ T4558] udevd[4558]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 298.052578][ T4996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.071867][ T4996] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.094924][ T7801] udevd[7801]: symlink '../../loop4' '/dev/disk/by-diskseq/659.tmp-b7:4' failed: Read-only file system [ 298.112691][ T4996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 298.129190][ T4996] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 298.169013][ T4996] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 298.178150][ T4996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.201684][ T7801] udevd[7801]: symlink '../../loop4' '/dev/disk/by-diskseq/659.tmp-b7:4' failed: Read-only file system [ 298.246228][ T4996] usb 3-1: config 0 descriptor?? [ 298.302693][T14434] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 298.409631][ T4558] udevd[4558]: symlink '../../loop3' '/dev/disk/by-diskseq/660.tmp-b7:3' failed: Read-only file system [ 298.448494][ T7882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.468675][ T7882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.494544][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/660.tmp-b7:3' failed: Read-only file system [ 298.502068][ T7882] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 298.538839][ T7882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.553134][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.558908][ T7882] usb 2-1: config 0 descriptor?? [ 298.561458][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.585488][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.593743][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.603021][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.610651][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.619881][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.627430][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.634562][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.642441][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.650077][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.657626][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.667292][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.667321][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.667345][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.667368][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.667389][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.667407][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.667430][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.667450][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.667473][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.667496][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.667519][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.667540][ T4195] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 298.747044][T10427] usb 3-1: USB disconnect, device number 23 [ 298.815362][T14470] netlink: 'syz.0.4406': attribute type 4 has an invalid length. [ 298.815386][T14470] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4406'. [ 299.122921][T14473] loop3: detected capacity change from 0 to 32768 [ 299.139579][ T7882] logitech-djreceiver 0003:046D:C71F.0018: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.1-1/input0 [ 299.271779][T14473] attempt to access beyond end of device [ 299.271779][T14473] loop3: rw=0, want=34359738368, limit=32768 [ 299.278467][ T8868] Bluetooth: hci0: command 0x0c1a tx timeout [ 299.284125][T14473] metapage_read_end_io: I/O error [ 299.295175][T14473] read_mapping_page failed! [ 299.300122][T14473] jfs_mount: diMount(ipaimap) failed w/rc = -5 [ 299.306526][T14473] Mount JFS Failure: -5 [ 299.311101][T14473] jfs_mount failed w/return code = -5 [ 299.412900][ T21] usb 2-1: USB disconnect, device number 21 [ 299.585321][T14487] fido_id[14487]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 299.867958][T14508] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4424'. [ 300.162315][T14478] loop4: detected capacity change from 0 to 40427 [ 300.204337][T14478] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 300.232572][T14478] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 300.434586][T14478] F2FS-fs (loop4): Found nat_bits in checkpoint [ 300.528707][T14478] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 300.543347][T14478] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 300.645935][ T4196] attempt to access beyond end of device [ 300.645935][ T4196] loop4: rw=2049, want=45104, limit=40427 [ 300.850590][T14540] loop1: detected capacity change from 0 to 4096 [ 300.889402][T14540] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 301.103477][T14540] ntfs: volume version 3.1. [ 301.214190][T14540] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maccenteuro. You might want to try to use the mount option nls=utf8. [ 301.264653][T14540] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 301.625715][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 302.220541][ T4996] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 302.440831][T14562] loop4: detected capacity change from 0 to 32768 [ 302.541319][ T4996] usb 2-1: Using ep0 maxpacket: 16 [ 302.599296][T14562] XFS (loop4): Mounting V5 Filesystem [ 302.694444][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.718887][ T7801] udevd[7801]: symlink '../../loop4' '/dev/disk/by-diskseq/668.tmp-b7:4' failed: Read-only file system [ 302.726262][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.758079][ T4996] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 302.773657][ T7801] udevd[7801]: symlink '../../loop4' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:4' failed: Read-only file system [ 302.790859][ T4996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.831442][ T4996] usb 2-1: config 0 descriptor?? [ 302.916115][T14592] loop3: detected capacity change from 0 to 32768 [ 303.043963][T14562] XFS (loop4): Ending clean mount [ 303.055734][T14592] XFS (loop3): Mounting V5 Filesystem [ 303.127804][ T4196] XFS (loop4): Unmounting Filesystem [ 303.180822][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/669.tmp-b7:3' failed: Read-only file system [ 303.186775][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-diskseq/668.tmp-b7:4' failed: Read-only file system [ 303.220112][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:4' failed: Read-only file system [ 303.257224][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:3' failed: Read-only file system [ 303.367062][ T4996] konepure 0003:1E7D:2DB4.0019: unknown global tag 0xc [ 303.379848][ T4996] konepure 0003:1E7D:2DB4.0019: item 0 0 1 12 parsing failed [ 303.395519][ T4996] konepure 0003:1E7D:2DB4.0019: parse failed [ 303.426096][ T4996] konepure: probe of 0003:1E7D:2DB4.0019 failed with error -22 [ 303.535266][T14592] XFS (loop3): Ending clean mount [ 303.562711][T14592] XFS (loop3): Quotacheck needed: Please wait. [ 303.615278][ T7882] usb 2-1: USB disconnect, device number 22 [ 303.718063][T14592] XFS (loop3): Quotacheck: Done. [ 303.847571][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/669.tmp-b7:3' failed: Read-only file system [ 303.864861][ T4184] XFS (loop3): Unmounting Filesystem [ 303.879774][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:3' failed: Read-only file system [ 304.176315][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/669.tmp-b7:3' failed: Read-only file system [ 304.232191][ T4558] udevd[4558]: symlink '../../loop1' '/dev/disk/by-diskseq/667.tmp-b7:1' failed: Read-only file system [ 304.381125][T14646] loop3: detected capacity change from 0 to 1024 [ 304.573913][T14646] hfsplus: bad catalog entry type [ 305.090431][T14648] loop1: detected capacity change from 0 to 32768 [ 305.099819][T14670] loop4: detected capacity change from 0 to 64 [ 305.236487][T14648] UFO tlock:0xffffc900028c2168 [ 305.876712][T14676] loop4: detected capacity change from 0 to 32768 [ 305.908819][ T6503] kernel write not supported for file /adsp1 (pid: 6503 comm: kworker/1:15) [ 306.928925][T14706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4511'. [ 307.003471][ T21] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 307.147172][T14714] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4515'. [ 307.292259][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 307.542431][T14712] loop3: detected capacity change from 0 to 32768 [ 307.588379][ T21] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 307.601452][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.618096][ T21] usb 2-1: Product: syz [ 307.626059][ T21] usb 2-1: Manufacturer: syz [ 307.635955][ T21] usb 2-1: SerialNumber: syz [ 307.665171][ T21] usb 2-1: config 0 descriptor?? [ 307.700286][T14712] XFS (loop3): Mounting V5 Filesystem [ 307.844562][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-diskseq/678.tmp-b7:4' failed: Read-only file system [ 307.933031][ T21] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 307.947683][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-diskseq/678.tmp-b7:4' failed: Read-only file system [ 308.016320][T14712] XFS (loop3): Ending clean mount [ 308.044575][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/680.tmp-b7:3' failed: Read-only file system [ 308.109363][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-diskseq/678.tmp-b7:4' failed: Read-only file system [ 308.111883][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-uuid/986211a9-7d00-4ebf-a576-e3de63fa2cbd.tmp-b7:3' failed: Read-only file system [ 308.184638][T14746] netlink: 'syz.4.4527': attribute type 2 has an invalid length. [ 308.196422][ T4184] XFS (loop3): Unmounting Filesystem [ 308.241478][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-diskseq/678.tmp-b7:4' failed: Read-only file system [ 308.287808][ T26] audit: type=1326 audit(1774429485.924:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.4.4530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd03cd53799 code=0x0 [ 308.408517][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/680.tmp-b7:3' failed: Read-only file system [ 308.427139][ T21] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 308.453457][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-uuid/986211a9-7d00-4ebf-a576-e3de63fa2cbd.tmp-b7:3' failed: Read-only file system [ 308.462704][ T21] usb 2-1: USB disconnect, device number 23 [ 308.698236][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/680.tmp-b7:3' failed: Read-only file system [ 308.780433][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/680.tmp-b7:3' failed: Read-only file system [ 309.040394][T14776] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 309.445787][T14790] loop3: detected capacity change from 0 to 512 [ 309.488599][T14790] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 309.639119][T14795] program syz.0.4549 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.704888][T14790] EXT4-fs (loop3): 1 truncate cleaned up [ 309.728226][T14790] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 309.834815][T14810] loop4: detected capacity change from 0 to 512 [ 310.451226][T14849] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 311.053170][T14851] loop1: detected capacity change from 0 to 40427 [ 311.182901][T14810] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4556: invalid indirect mapped block 10 (level 1) [ 311.314858][T14851] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 311.321359][T14851] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 311.351984][T14810] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4556: invalid indirect mapped block 8 (level 1) [ 311.455647][T14851] F2FS-fs (loop1): invalid crc value [ 311.458077][T14810] EXT4-fs (loop4): 1 truncate cleaned up [ 311.510005][T14810] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 311.548641][T14882] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.4590'. [ 311.599079][T14851] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 311.613704][T14882] openvswitch: netlink: Tunnel attr 159 out of range max 16 [ 311.919237][T14851] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 311.931961][T14851] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 312.002123][T14891] loop3: detected capacity change from 0 to 128 [ 312.033027][ T26] audit: type=1800 audit(1774429489.720:13): pid=14851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4578" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 312.098435][T14893] loop4: detected capacity change from 0 to 128 [ 312.142621][ T4183] attempt to access beyond end of device [ 312.142621][ T4183] loop1: rw=2049, want=45104, limit=40427 [ 312.237795][T14893] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 312.275767][T14893] hpfs: filesystem error: improperly stopped [ 312.293826][T14893] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 312.328272][T14893] hpfs: You really don't want any checks? You are crazy... [ 312.363409][T14893] hpfs: hpfs_map_sector(): read error [ 312.390173][T14893] hpfs: code page support is disabled [ 312.395640][T14893] hpfs: hpfs_map_4sectors(): unaligned read [ 312.418842][T14893] hpfs: hpfs_map_4sectors(): unaligned read [ 312.424779][T14893] hpfs: filesystem error: unable to find root dir [ 312.549485][ T6497] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 312.870891][ T7801] udevd[7801]: symlink '../../loop1' '/dev/disk/by-diskseq/689.tmp-b7:1' failed: Read-only file system [ 312.932741][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-diskseq/690.tmp-b7:4' failed: Read-only file system [ 312.944874][ T6497] usb 3-1: Using ep0 maxpacket: 8 [ 312.954529][T14904] loop4: detected capacity change from 0 to 1024 [ 313.104710][ T6497] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 313.113182][ T6497] usb 3-1: config 179 has no interface number 0 [ 313.125833][ T6497] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 313.148289][ T6497] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 313.182751][ T6497] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 313.211069][ T6497] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 313.256128][ T6497] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 313.288200][ T6497] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 313.315170][ T6497] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.342070][T14908] loop1: detected capacity change from 0 to 1024 [ 313.376508][T14895] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 313.487971][T14891] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 313.572343][ T1503] hfsplus: b-tree write err: -5, ino 25 [ 313.578268][ T1503] hfsplus: b-tree write err: -5, ino 4 [ 313.579896][ T4558] udevd[4558]: symlink '../../loop3' '/dev/disk/by-diskseq/686.tmp-b7:3' failed: Read-only file system [ 313.584072][ T1503] hfsplus: b-tree write err: -5, ino 2 [ 313.624996][T14895] udc-core: couldn't find an available UDC or it's busy [ 313.638743][T14895] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 313.732685][T14891] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.827329][T14891] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 313.855593][T14891] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 313.882097][T10427] usb 3-1: USB disconnect, device number 24 [ 314.096854][T14912] loop1: detected capacity change from 0 to 32768 [ 314.108610][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 314.302538][T14912] XFS (loop1): Mounting V5 Filesystem [ 314.369984][T14912] XFS (loop1): totally zeroed log [ 314.388089][T14912] XFS (loop1): Corruption warning: Metadata has LSN (1:384) ahead of current LSN (1:0). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 314.403552][T14912] XFS (loop1): log mount/recovery failed: error -22 [ 314.463279][T14912] XFS (loop1): log mount failed [ 314.721058][T14904] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 314.843702][ T144] hfsplus: b-tree write err: -5, ino 25 [ 314.856082][ T144] hfsplus: b-tree write err: -5, ino 4 [ 314.860680][ T4558] udevd[4558]: symlink '../../loop4' '/dev/disk/by-diskseq/691.tmp-b7:4' failed: Read-only file system [ 314.876381][ T144] hfsplus: b-tree write err: -5, ino 2 [ 314.909169][T14930] loop1: detected capacity change from 0 to 8 [ 314.933416][ T4558] udevd[4558]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system [ 314.951404][T14931] hub 9-0:1.0: USB hub found [ 314.970936][T14931] hub 9-0:1.0: 1 port detected [ 314.977177][ T4558] udevd[4558]: symlink '../../loop4' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:4' failed: Read-only file system [ 315.450773][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/686.tmp-b7:3' failed: Read-only file system [ 315.671858][T14933] loop4: detected capacity change from 0 to 32768 [ 315.783606][T14933] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.4609 (14933) [ 315.794983][T14947] loop3: detected capacity change from 0 to 4096 [ 315.897658][T14933] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 315.907846][T14933] BTRFS info (device loop4): using free space tree [ 315.920899][T14933] BTRFS info (device loop4): has skinny extents [ 316.397741][ T7801] udevd[7801]: symlink '../../loop1' '/dev/disk/by-diskseq/692.tmp-b7:1' failed: Read-only file system [ 316.469540][T14933] BTRFS info (device loop4): enabling ssd optimizations [ 316.804137][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.810477][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.039062][T15014] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4640'. [ 318.059379][T15014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4640'. [ 318.314259][T15026] loop4: detected capacity change from 0 to 128 [ 318.892886][T14947] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 318.950764][T15048] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 319.009467][T15048] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 319.048942][T15048] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 319.097891][T15048] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 319.111619][T15010] loop1: detected capacity change from 0 to 40427 [ 319.136073][T15048] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 319.195918][T15048] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 319.231900][T15048] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 319.277896][T15048] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 319.324820][T15048] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 319.379238][T15048] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 320.128212][T15010] F2FS-fs (loop1): invalid crc value [ 320.194731][T15062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4664'. [ 320.214364][ T26] audit: type=1326 audit(1774429497.970:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15063 comm="syz.0.4666" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd27996d799 code=0x0 [ 320.236420][T15010] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 320.316786][ T4558] udevd[4558]: symlink '../../loop4' '/dev/disk/by-diskseq/691.tmp-b7:4' failed: Read-only file system [ 320.426262][ T4558] udevd[4558]: symlink '../../loop4' '/dev/disk/by-diskseq/691.tmp-b7:4' failed: Read-only file system [ 320.453349][T15010] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 320.473955][ T4558] udevd[4558]: symlink '../../loop4' '/dev/disk/by-diskseq/691.tmp-b7:4' failed: Read-only file system [ 320.567033][ T4558] udevd[4558]: symlink '../../loop4' '/dev/disk/by-diskseq/699.tmp-b7:4' failed: Read-only file system [ 320.577396][T15010] F2FS-fs (loop1): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 320.624882][ T4558] udevd[4558]: symlink '../../loop4' '/dev/disk/by-diskseq/699.tmp-b7:4' failed: Read-only file system [ 320.693716][ T4558] udevd[4558]: symlink '../../loop4' '/dev/disk/by-diskseq/699.tmp-b7:4' failed: Read-only file system [ 320.769322][ T4558] udevd[4558]: symlink '../../loop4' '/dev/disk/by-diskseq/703.tmp-b7:4' failed: Read-only file system [ 320.852121][ T4558] udevd[4558]: symlink '../../loop4' '/dev/disk/by-diskseq/703.tmp-b7:4' failed: Read-only file system [ 320.918086][ T4558] udevd[4558]: symlink '../../loop4' '/dev/disk/by-diskseq/703.tmp-b7:4' failed: Read-only file system [ 320.997499][ T4558] udevd[4558]: symlink '../../loop4' '/dev/disk/by-diskseq/703.tmp-b7:4' failed: Read-only file system [ 321.434957][T15089] program syz.4.4678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.433871][T15095] loop4: detected capacity change from 0 to 32768 [ 322.726153][T15095] XFS (loop4): Mounting V5 Filesystem [ 323.380404][T15109] loop1: detected capacity change from 0 to 512 [ 323.497521][T15095] XFS (loop4): Ending clean mount [ 323.670513][ T4196] XFS (loop4): Unmounting Filesystem [ 325.008468][T15137] net_ratelimit: 1800 callbacks suppressed [ 325.008484][T15137] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 325.166186][T15137] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 325.243635][T15137] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 325.328624][T15137] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 325.403179][ T4558] udevd[4558]: symlink '../../loop4' '/dev/disk/by-diskseq/710.tmp-b7:4' failed: Read-only file system [ 325.425228][T15137] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 325.482580][T15137] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 325.519149][T15137] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 325.562348][T15137] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 325.608754][T15137] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 325.656780][T15137] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 325.980887][ T4558] udevd[4558]: symlink '../../loop3' '/dev/disk/by-diskseq/709.tmp-b7:3' failed: Read-only file system [ 326.171220][ T4558] udevd[4558]: symlink '../../loop3' '/dev/disk/by-diskseq/709.tmp-b7:3' failed: Read-only file system [ 326.278772][ T7801] udevd[7801]: symlink '../../loop1' '/dev/disk/by-diskseq/696.tmp-b7:1' failed: Read-only file system [ 326.364887][ T7801] udevd[7801]: symlink '../../loop1' '/dev/disk/by-diskseq/696.tmp-b7:1' failed: Read-only file system [ 326.443981][ T7801] udevd[7801]: symlink '../../loop1' '/dev/disk/by-diskseq/696.tmp-b7:1' failed: Read-only file system [ 326.461263][ T4558] udevd[4558]: symlink '../../loop3' '/dev/disk/by-diskseq/709.tmp-b7:3' failed: Read-only file system [ 326.516198][T15149] loop4: detected capacity change from 0 to 32768 [ 326.532422][ T7801] udevd[7801]: symlink '../../loop1' '/dev/disk/by-diskseq/696.tmp-b7:1' failed: Read-only file system [ 326.603484][ T7801] udevd[7801]: symlink '../../loop1' '/dev/disk/by-diskseq/704.tmp-b7:1' failed: Read-only file system [ 326.656602][ T7802] udevd[7802]: symlink '../../loop3' '/dev/disk/by-diskseq/709.tmp-b7:3' failed: Read-only file system [ 326.734469][T15149] XFS (loop4): Mounting V5 Filesystem [ 326.997852][ T26] audit: type=1326 audit(1774429504.795:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15203 comm="syz.1.4724" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4d4314799 code=0x0 [ 327.053485][T15149] XFS (loop4): Ending clean mount [ 327.085534][T15149] XFS (loop4): Quotacheck needed: Please wait. [ 327.247438][T15149] XFS (loop4): Quotacheck: Done. [ 327.383593][ T4196] XFS (loop4): Unmounting Filesystem [ 327.699962][T15208] loop3: detected capacity change from 0 to 32768 [ 328.192871][T15230] loop3: detected capacity change from 0 to 4096 [ 328.378790][T15244] loop4: detected capacity change from 0 to 1024 [ 328.403128][T15245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4743'. [ 328.541162][T15253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4747'. [ 329.184624][T15285] loop1: detected capacity change from 0 to 1024 [ 329.941808][T15285] EXT4-fs (loop1): Ignoring removed oldalloc option [ 329.951408][T15230] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 329.971246][T15285] EXT4-fs (loop1): Ignoring removed bh option [ 330.003840][T15230] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 330.025573][T15285] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 330.054748][T15230] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 330.123241][T15230] ntfs: volume version 3.1. [ 330.218588][T15285] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,bsddf,usrquota,data_err=ignore,init_itable,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 330.380539][T15230] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 330.484626][T15230] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x44, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 330.507945][T15304] loop1: detected capacity change from 0 to 64 [ 330.524500][ T4558] udevd[4558]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 330.550856][T15307] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 330.566455][ T4558] udevd[4558]: symlink '../../loop1' '/dev/disk/by-diskseq/719.tmp-b7:1' failed: Read-only file system [ 330.618361][T15307] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 330.626029][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/713.tmp-b7:3' failed: Read-only file system [ 330.652482][ T8868] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 330.669871][ T4558] udevd[4558]: symlink '../../loop1' '/dev/disk/by-diskseq/719.tmp-b7:1' failed: Read-only file system [ 330.691262][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 330.732037][ T4558] udevd[4558]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system [ 330.736298][T15313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4772'. [ 330.746217][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-uuid/43CF732B47819AF7.tmp-b7:3' failed: Read-only file system [ 330.817367][ T1503] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 330.841028][ T4558] udevd[4558]: symlink '../../loop1' '/dev/disk/by-diskseq/719.tmp-b7:1' failed: Read-only file system [ 330.845823][T15313] device vlan5 entered promiscuous mode [ 330.873676][ T4184] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 330.911549][T15313] device bridge0 entered promiscuous mode [ 330.921199][ T4558] udevd[4558]: symlink '../../loop1' '/dev/disk/by-diskseq/719.tmp-b7:1' failed: Read-only file system [ 330.969382][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/713.tmp-b7:3' failed: Read-only file system [ 330.993425][ T8868] usb 5-1: Using ep0 maxpacket: 8 [ 331.174069][ T8868] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.327833][T15327] loop3: detected capacity change from 0 to 4096 [ 331.425422][ T8868] usb 5-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 331.440970][ T8868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.455412][ T8868] usb 5-1: Product: syz [ 331.466287][ T8868] usb 5-1: Manufacturer: syz [ 331.478066][ T8868] usb 5-1: SerialNumber: syz [ 331.499472][ T8868] usb 5-1: config 0 descriptor?? [ 331.566175][T15341] loop1: detected capacity change from 0 to 1024 [ 331.580446][ T8868] cdc_phonet: probe of 5-1:0.0 failed with error -22 [ 331.627290][T15341] hfsplus: invalid length 32517 has been corrected to 255 [ 331.715255][ T4239] hfsplus: b-tree write err: -5, ino 20 [ 331.811385][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 331.842072][ T8868] usb 5-1: USB disconnect, device number 15 [ 331.958728][ T6497] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 332.178778][T15349] loop1: detected capacity change from 0 to 32768 [ 332.227047][T15349] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.4791 (15349) [ 332.240122][ T6497] usb 3-1: Using ep0 maxpacket: 16 [ 332.386436][T15352] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 332.401491][ T6497] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 332.410766][ T6497] usb 3-1: config 0 has no interface number 0 [ 332.435520][ T6497] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 332.496798][ T6497] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 332.541159][ T6497] usb 3-1: config 0 interface 41 has no altsetting 0 [ 332.768934][T15364] program syz.4.4799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 332.790483][ T6497] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 332.806438][ T6497] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.841746][ T6497] usb 3-1: Product: syz [ 332.872672][ T6497] usb 3-1: Manufacturer: syz [ 332.878011][ T6497] usb 3-1: SerialNumber: syz [ 332.890079][T15366] loop3: detected capacity change from 0 to 4096 [ 332.904175][ T6497] usb 3-1: config 0 descriptor?? [ 332.931100][T15345] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 332.945616][T15345] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 333.033098][T15374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4803'. [ 333.161297][T15377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4804'. [ 333.215365][T15377] netem: invalid attributes len -17 [ 333.228310][ T6497] sr9700: probe of 3-1:0.41 failed with error -71 [ 333.228665][T15377] netem: change failed [ 333.250203][ T6497] usb 3-1: USB disconnect, device number 25 [ 333.355084][T15349] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 333.401941][T15349] BTRFS info (device loop1): force zlib compression, level 3 [ 333.426204][T15349] BTRFS info (device loop1): force clearing of disk cache [ 333.433364][T15349] BTRFS info (device loop1): setting nodatasum [ 333.450431][T15349] BTRFS info (device loop1): use zlib compression, level 3 [ 333.489819][T15349] BTRFS info (device loop1): allowing degraded mounts [ 333.517804][T15349] BTRFS info (device loop1): enabling disk space caching [ 333.549780][T15349] BTRFS info (device loop1): disk space caching is enabled [ 333.596236][T15349] BTRFS info (device loop1): has skinny extents [ 333.615093][T15395] loop4: detected capacity change from 0 to 512 [ 333.741373][T15408] sp0: Synchronizing with TNC [ 333.823104][T15349] BTRFS info (device loop1): enabling ssd optimizations [ 333.841597][T15349] BTRFS info (device loop1): clearing free space tree [ 333.871062][T15349] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 333.898807][T15349] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 334.089135][T15349] BTRFS info (device loop1): balance: start -sprofiles=data|system|metadata|single|raid10|raid1|dup|raid0|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=5..0,drange=9223372036854776315..7,limit=7..0,stripes=1..73 [ 334.125523][T15349] BTRFS info (device loop1): balance: ended with status: 0 [ 334.961210][T15395] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.4813: invalid block [ 335.102848][T15395] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4813: invalid indirect mapped block 4294967295 (level 1) [ 335.163803][T15395] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4813: invalid indirect mapped block 4294967295 (level 1) [ 335.228870][T15395] EXT4-fs (loop4): 2 truncates cleaned up [ 335.235371][T15395] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,abort,mb_optimize_scan=0x0000000000000001,auto_da_alloc=0x000000007fffffff,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 335.256862][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.331944][T15395] EXT4-fs error (device loop4): ext4_get_parent:1906: inode #11: comm syz.4.4813: bad parent inode number: 3 [ 335.528044][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/730.tmp-b7:3' failed: Read-only file system [ 335.551115][ T4558] udevd[4558]: symlink '../../loop4' '/dev/disk/by-diskseq/718.tmp-b7:4' failed: Read-only file system [ 335.578382][ T6314] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 335.614443][ T4558] udevd[4558]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 335.669463][ T7801] udevd[7801]: symlink '../../loop4' '/dev/disk/by-diskseq/731.tmp-b7:4' failed: Read-only file system [ 335.699720][ T7801] udevd[7801]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 335.837464][ T7801] udevd[7801]: symlink '../../loop4' '/dev/disk/by-diskseq/731.tmp-b7:4' failed: Read-only file system [ 335.866882][ T7801] udevd[7801]: symlink '../../loop4' '/dev/disk/by-diskseq/731.tmp-b7:4' failed: Read-only file system [ 335.897117][ T7801] udevd[7801]: symlink '../../loop4' '/dev/disk/by-diskseq/731.tmp-b7:4' failed: Read-only file system [ 335.950551][ T7801] udevd[7801]: symlink '../../loop4' '/dev/disk/by-diskseq/731.tmp-b7:4' failed: Read-only file system [ 336.053168][ T6314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.079048][ T6314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.096301][ T6314] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 336.128754][ T6314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.164209][ T6314] usb 4-1: config 0 descriptor?? [ 336.657313][ T6314] arvo 0003:1E7D:30D4.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 336.738737][ T4558] udevd[4558]: symlink '../../loop1' '/dev/disk/by-diskseq/732.tmp-b7:1' failed: Read-only file system [ 336.876924][ T6314] arvo 0003:1E7D:30D4.001A: couldn't init struct arvo_device [ 336.884517][ T6314] arvo 0003:1E7D:30D4.001A: couldn't install keyboard [ 336.914439][ T6314] arvo: probe of 0003:1E7D:30D4.001A failed with error -71 [ 336.931559][T15498] loop4: detected capacity change from 0 to 512 [ 336.950386][ T6314] usb 4-1: USB disconnect, device number 20 [ 337.017752][T15498] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 337.094146][T15498] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 337.178103][T15499] fido_id[15499]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 337.330505][T15510] netlink: 'syz.0.4858': attribute type 3 has an invalid length. [ 337.358016][T15512] ALSA: mixer_oss: invalid OSS volume '' [ 337.841173][T15528] loop4: detected capacity change from 0 to 4096 [ 337.946294][T15528] ntfs3: loop4: ino=3, Correct links count -> 2. [ 338.032312][T15528] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 338.248669][T15526] loop3: detected capacity change from 0 to 32768 [ 338.338059][T15526] JBD2: Ignoring recovery information on journal [ 338.543581][T15526] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 339.078438][T15551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4876'. [ 339.080555][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4877'. [ 339.428569][ T4184] ocfs2: Unmounting device (7,3) on (node local) [ 339.441784][T15569] loop4: detected capacity change from 0 to 64 [ 340.132512][T15589] loop3: detected capacity change from 0 to 64 [ 340.153678][T15547] loop1: detected capacity change from 0 to 32768 [ 340.271587][T15589] hfs: request for non-existent node 131072 in B*Tree [ 340.307942][T15589] hfs: request for non-existent node 131072 in B*Tree [ 340.406931][T15547] XFS (loop1): Mounting V5 Filesystem [ 340.541513][ T4558] udevd[4558]: symlink '../../loop3' '/dev/disk/by-diskseq/741.tmp-b7:3' failed: Read-only file system [ 340.569330][T15612] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 340.601720][T15613] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 340.604242][ T7801] udevd[7801]: symlink '../../loop1' '/dev/disk/by-diskseq/742.tmp-b7:1' failed: Read-only file system [ 340.651437][ T4558] udevd[4558]: symlink '../../loop3' '/dev/disk/by-diskseq/743.tmp-b7:3' failed: Read-only file system [ 340.661178][ T7801] udevd[7801]: symlink '../../loop1' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:1' failed: Read-only file system [ 340.764564][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/743.tmp-b7:3' failed: Read-only file system [ 340.855114][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/743.tmp-b7:3' failed: Read-only file system [ 340.946584][T15547] XFS (loop1): Ending clean mount [ 340.973675][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/743.tmp-b7:3' failed: Read-only file system [ 341.037983][T15547] XFS (loop1): Quotacheck needed: Please wait. [ 341.072510][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/743.tmp-b7:3' failed: Read-only file system [ 341.153907][T15640] loop3: detected capacity change from 0 to 2048 [ 341.233525][T15547] XFS (loop1): Quotacheck: Done. [ 341.342743][T15640] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 341.361770][ T4558] udevd[4558]: symlink '../../loop1' '/dev/disk/by-diskseq/742.tmp-b7:1' failed: Read-only file system [ 341.371739][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-diskseq/739.tmp-b7:4' failed: Read-only file system [ 341.421562][ T4183] XFS (loop1): Unmounting Filesystem [ 341.455791][T15646] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 342.406291][T15668] loop1: detected capacity change from 0 to 8192 [ 342.462724][T15668] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 342.515155][T15668] REISERFS (device loop1): using ordered data mode [ 342.551229][T15668] reiserfs: using flush barriers [ 342.581946][T15668] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 342.665523][T15668] REISERFS (device loop1): checking transaction log (loop1) [ 342.752421][T15683] netlink: 763 bytes leftover after parsing attributes in process `syz.2.4932'. [ 342.912818][T15689] ieee802154 phy0 wpan0: encryption failed: -22 [ 343.008049][T15695] program syz.0.4937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.038766][T15668] REISERFS (device loop1): Using tea hash to sort names [ 343.056361][T15668] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 343.115363][T15699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4939'. [ 343.188399][T15703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4941'. [ 343.251689][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.303056][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.316562][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.328796][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.349525][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.371293][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.396241][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.424380][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.443959][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.463923][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.565776][ T3518] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 343.637745][T15711] loop3: detected capacity change from 0 to 1024 [ 344.194411][ T3518] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 344.210836][ T3518] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.229807][ T3518] usb 5-1: Product: syz [ 344.239985][ T3518] usb 5-1: Manufacturer: syz [ 344.246228][ T3518] usb 5-1: SerialNumber: syz [ 344.265435][ T3518] r8152-cfgselector 5-1: config 0 descriptor?? [ 344.667024][T15732] loop1: detected capacity change from 0 to 32768 [ 344.713725][T15732] XFS (loop1): sunit and swidth must be specified together [ 344.772773][ T3518] r8152-cfgselector 5-1: Unknown version 0x0000 [ 344.811782][ T3518] r8152-cfgselector 5-1: bad CDC descriptors [ 344.852571][ T3518] r8152-cfgselector 5-1: Unknown version 0x0000 [ 344.875257][ T3518] r8152-cfgselector 5-1: USB disconnect, device number 16 [ 344.888099][T15740] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4959'. [ 345.103792][T15749] loop1: detected capacity change from 0 to 1764 [ 345.148068][T15717] loop3: detected capacity change from 0 to 2048 [ 345.213352][T15749] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 345.274966][T15717] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 345.316456][T15717] ext4 filesystem being mounted at /944/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.577401][T15758] hugetlbfs: Bad value ':' for mount option 'size' [ 345.577401][T15758] [ 345.613749][ T7802] udevd[7802]: symlink '../../loop4' '/dev/disk/by-diskseq/745.tmp-b7:4' failed: Read-only file system [ 346.514787][ T4558] udevd[4558]: symlink '../../loop1' '/dev/disk/by-diskseq/751.tmp-b7:1' failed: Read-only file system [ 346.594396][ T4558] udevd[4558]: symlink '../../loop1' '/dev/disk/by-diskseq/751.tmp-b7:1' failed: Read-only file system [ 346.652358][ T4558] udevd[4558]: symlink '../../loop1' '/dev/disk/by-diskseq/751.tmp-b7:1' failed: Read-only file system [ 346.702512][ T4558] udevd[4558]: symlink '../../loop1' '/dev/disk/by-diskseq/753.tmp-b7:1' failed: Read-only file system [ 346.773776][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/755.tmp-b7:3' failed: Read-only file system [ 346.786284][T15804] netlink: 'syz.3.4969': attribute type 3 has an invalid length. [ 346.818220][ T4558] udevd[4558]: symlink '../../loop1' '/dev/disk/by-diskseq/753.tmp-b7:1' failed: Read-only file system [ 346.825020][T15804] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4969'. [ 346.857023][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/755.tmp-b7:3' failed: Read-only file system [ 346.887151][ T4558] udevd[4558]: symlink '../../loop1' '/dev/disk/by-diskseq/753.tmp-b7:1' failed: Read-only file system [ 346.913103][T15811] loop1: detected capacity change from 0 to 64 [ 346.952236][ T7801] udevd[7801]: symlink '../../loop3' '/dev/disk/by-diskseq/757.tmp-b7:3' failed: Read-only file system [ 347.335795][T15820] loop1: detected capacity change from 0 to 256 [ 347.682599][T15827] comedi comedi3: pcl711: I/O port conflict (0x4f27,16) [ 348.020299][T15835] netlink: 'syz.0.5003': attribute type 29 has an invalid length. [ 348.060055][T15835] netlink: 'syz.0.5003': attribute type 29 has an invalid length. [ 348.090453][T15838] netlink: 'syz.0.5003': attribute type 29 has an invalid length. [ 348.668575][T15864] loop4: detected capacity change from 0 to 512 [ 348.758390][T15869] netlink: 'syz.0.5018': attribute type 1 has an invalid length. [ 348.791296][T15869] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5018'. [ 348.817782][T15869] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5018'. [ 348.903859][T15873] netlink: 316 bytes leftover after parsing attributes in process `syz.0.5021'. [ 349.012928][T15878] loop3: detected capacity change from 0 to 1024 [ 349.647799][T15905] mmap: syz.4.5034 (15905) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 349.947493][T15918] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 350.072646][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5042'. [ 350.100262][T15922] device vxcan2 entered promiscuous mode [ 350.652297][T15936] loop1: detected capacity change from 0 to 4096 [ 350.822004][T15920] loop3: detected capacity change from 0 to 32768 [ 351.461823][T15977] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 351.470821][T15977] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 99999999 out of range (1000000..45000000) [ 351.804755][T15920] XFS (loop3): Mounting V5 Filesystem [ 351.898074][ T4183] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 351.905307][ T4183] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 351.994983][T16000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5075'. [ 352.004278][T16000] bridge_slave_0: default FDB implementation only supports local addresses [ 352.424349][T15920] XFS (loop3): Ending clean mount [ 352.465089][T15920] XFS (loop3): Quotacheck needed: Please wait. [ 352.557548][T16034] loop1: detected capacity change from 0 to 256 [ 352.636655][T16034] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 352.680882][T15920] XFS (loop3): Quotacheck: Done. [ 352.819613][ T4184] XFS (loop3): Unmounting Filesystem [ 352.855423][ T4226] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 353.302285][ T4226] usb 5-1: unable to get BOS descriptor or descriptor too short [ 353.414020][ T4226] usb 5-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 353.424345][T16068] loop1: detected capacity change from 0 to 64 [ 353.440329][ T4226] usb 5-1: config 172 has 1 interface, different from the descriptor's value: 2 [ 353.699970][ T4226] usb 5-1: string descriptor 0 read error: -22 [ 353.709686][ T4226] usb 5-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be [ 353.743151][ T4226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.772469][T16083] netlink: 'syz.2.5118': attribute type 1 has an invalid length. [ 353.809205][ T4226] gspca_main: finepix-2.14.0 probing 04cb:0127 [ 354.043632][ T4989] usb 5-1: USB disconnect, device number 17 [ 354.631390][T16101] loop3: detected capacity change from 0 to 128 [ 354.741924][T16109] loop4: detected capacity change from 0 to 128 [ 354.795045][T16109] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 354.977213][T16115] loop4: detected capacity change from 0 to 64 [ 355.600477][T16101] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 355.707981][ T4184] sysv_free_block: trying to free block not in datazone [ 355.731195][ T4184] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 355.802195][T16124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5137'. [ 355.811391][T16124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5137'. [ 355.830482][T16124] netlink: 'syz.2.5137': attribute type 12 has an invalid length. [ 355.888080][T16115] virtiofs: Unexpected value for 'dax' [ 355.912246][ T6506] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 356.312034][ T6506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 356.333601][ T6506] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 356.370173][ T6506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.395275][ T6506] usb 2-1: config 0 descriptor?? [ 356.433788][ T6506] smsusb:smsusb_probe: board id=8, interface number 0 [ 356.452578][ T6506] smsusb:smsusb_probe: Device initialized with return code -19 [ 356.646752][ T6506] usb 2-1: USB disconnect, device number 24 [ 357.194894][ T4989] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 357.737178][ T4989] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 357.757341][ T4989] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 357.796095][ T4989] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 357.842884][ T4989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.897149][T16150] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 358.319715][T16172] loop4: detected capacity change from 0 to 40427 [ 358.374095][T16172] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 358.404464][T16198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5172'. [ 358.430653][T16198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5172'. [ 358.432072][T16172] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 358.503453][T16172] F2FS-fs (loop4): invalid crc value [ 358.539009][T16172] F2FS-fs (loop4): Found nat_bits in checkpoint [ 358.668802][T16172] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 358.850200][ T4196] attempt to access beyond end of device [ 358.850200][ T4196] loop4: rw=2049, want=45104, limit=40427 [ 359.765985][ T4989] usb 4-1: USB disconnect, device number 21 [ 359.910467][T16213] loop1: detected capacity change from 0 to 40427 [ 359.995921][T16213] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 360.041080][T16213] F2FS-fs (loop1): invalid crc value [ 360.068961][T16224] loop4: detected capacity change from 0 to 8192 [ 360.100217][T16224] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 360.119340][T16213] F2FS-fs (loop1): Found nat_bits in checkpoint [ 360.119711][T16224] REISERFS (device loop4): using ordered data mode [ 360.140789][T16224] reiserfs: using flush barriers [ 360.205548][T16224] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 360.222069][T16213] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 360.289966][T16224] REISERFS (device loop4): checking transaction log (loop4) [ 360.321269][T16235] comedi comedi3: pcl816: I/O port conflict (0xd,16) [ 360.390531][T16224] REISERFS (device loop4): Using r5 hash to sort names [ 360.401287][T16224] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 360.452353][ T4183] attempt to access beyond end of device [ 360.452353][ T4183] loop1: rw=2049, want=45104, limit=40427 [ 360.466665][T16224] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 360.618352][T16224] REISERFS warning (device loop4): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=2, len=0 - odd [ 361.234656][T16268] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5202'. [ 361.296487][T16268] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5202'. [ 361.320177][T16268] netlink: 'syz.0.5202': attribute type 6 has an invalid length. [ 361.375506][T16275] loop4: detected capacity change from 0 to 8 [ 361.384648][T16268] netlink: 'syz.0.5202': attribute type 5 has an invalid length. [ 361.444044][T16268] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5202'. [ 361.551101][T16275] SQUASHFS error: Unable to read inode 0x11f [ 361.981904][T16297] loop4: detected capacity change from 0 to 512 [ 362.198522][T16306] loop3: detected capacity change from 0 to 2048 [ 362.259745][T16306] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 362.299739][T16306] NILFS (loop3): mounting unchecked fs [ 362.349940][T16306] NILFS (loop3): recovery complete [ 362.357507][T16308] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 362.524977][ T4226] kernel write not supported for file /input/event0 (pid: 4226 comm: kworker/1:4) [ 362.759139][T16316] loop3: detected capacity change from 0 to 256 [ 363.071302][T16330] loop1: detected capacity change from 0 to 256 [ 363.115992][T16330] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 363.131870][T16330] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 363.146917][T16330] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 363.228103][T16330] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 363.261704][ T26] audit: type=1800 audit(1774429541.113:16): pid=16330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5230" name="file1" dev="loop1" ino=1048753 res=0 errno=0 [ 363.284007][T16297] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 363.311667][T16297] ext4 filesystem being mounted at /910/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.388402][ T4226] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 363.603286][T16342] loop4: detected capacity change from 0 to 1764 [ 363.638115][ T4226] usb 4-1: Using ep0 maxpacket: 8 [ 363.758263][ T4226] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 363.786236][ T4226] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 363.817374][ T4226] usb 4-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 363.846909][ T4226] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.983762][ T4226] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 363.996911][ T4226] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 364.008191][ T4226] usb 4-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 364.019478][ T4226] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.107690][ T4226] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 364.123642][ T4226] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 364.136019][ T4226] usb 4-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 364.153113][ T4226] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.349778][ T4989] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 364.377956][T16354] team0: Device vlan6 is already an upper device of the team interface [ 364.434506][ T4226] usb 4-1: string descriptor 0 read error: -22 [ 364.443696][ T4226] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 364.453890][ T4226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.512066][ T4226] adutux 4-1:168.0: interrupt endpoints not found [ 364.578492][T16358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5242'. [ 364.783441][ T6506] usb 4-1: USB disconnect, device number 22 [ 364.909192][T16368] nfs4: Unexpected value for 'tcp' [ 364.944878][ T4989] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 364.971761][ T4989] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 364.981919][ T4989] usb 5-1: Product: syz [ 364.986098][ T4989] usb 5-1: Manufacturer: syz [ 365.001982][ T4989] usb 5-1: SerialNumber: syz [ 365.026595][ T4989] usb 5-1: config 0 descriptor?? [ 365.076640][ T4989] ch341 5-1:0.0: ch341-uart converter detected [ 365.237826][T16379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5252'. [ 365.306992][T16381] tipc: Started in network mode [ 365.324418][T16381] tipc: Node identity 00000000000000000000007ade000001, cluster identity 4711 [ 365.350127][T16381] tipc: Enabling of bearer rejected, failed to enable media [ 365.413434][T16383] netlink: 'syz.3.5254': attribute type 6 has an invalid length. [ 365.589716][T16393] loop1: detected capacity change from 0 to 512 [ 365.709630][T16393] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 365.713978][ T4989] usb 5-1: failed to send control message: -71 [ 365.743420][ T4989] ch341-uart: probe of ttyUSB0 failed with error -71 [ 365.783891][ T4989] usb 5-1: USB disconnect, device number 18 [ 365.790685][ T4989] ch341 5-1:0.0: device disconnected [ 365.829465][T16393] ext4 filesystem being mounted at /919/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 365.972620][T16406] netlink: 'syz.3.5264': attribute type 4 has an invalid length. [ 366.069771][T16410] loop1: detected capacity change from 0 to 1024 [ 366.284960][ T151] hfsplus: b-tree write err: -5, ino 8 [ 366.477235][T16425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5274'. [ 366.563038][T16427] bridge0: port 3(hsr0) entered blocking state [ 366.582454][T16427] bridge0: port 3(hsr0) entered disabled state [ 366.614921][T16429] loop3: detected capacity change from 0 to 4096 [ 366.723212][T16429] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 367.510016][T16461] loop1: detected capacity change from 0 to 1024 [ 367.902113][T16475] loop1: detected capacity change from 0 to 64 [ 368.660628][T16503] loop4: detected capacity change from 0 to 512 [ 368.707879][T16506] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.5304'. [ 368.784426][T16503] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 369.520288][T16538] loop3: detected capacity change from 0 to 512 [ 369.542868][T16539] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5321'. [ 369.594359][T16539] unsupported nlmsg_type 40 [ 369.918231][T16556] devtmpfs: Bad value for 'gid' [ 370.483514][T16576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5338'. [ 370.597382][ T26] audit: type=1326 audit(1774429548.456:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.1.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d4314799 code=0x7ffc0000 [ 370.667421][T16583] loop1: detected capacity change from 0 to 1024 [ 370.684461][ T26] audit: type=1326 audit(1774429548.486:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.1.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d4314799 code=0x7ffc0000 [ 370.746615][ T26] audit: type=1326 audit(1774429548.486:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.1.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d4314799 code=0x7ffc0000 [ 370.803893][T16583] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 370.826159][T16583] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 370.852141][ T26] audit: type=1326 audit(1774429548.496:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.1.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd4d4314799 code=0x7ffc0000 [ 370.884955][ T26] audit: type=1326 audit(1774429548.496:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm=06 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d4314799 code=0x7ffc0000 [ 370.911544][ T26] audit: type=1326 audit(1774429548.496:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm=06 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d4314799 code=0x7ffc0000 [ 370.933895][T16583] JBD2: no valid journal superblock found [ 370.942546][T16583] EXT4-fs (loop1): error loading journal [ 370.952419][ T26] audit: type=1326 audit(1774429548.496:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.1.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d4314799 code=0x7ffc0000 [ 370.995745][ T26] audit: type=1326 audit(1774429548.496:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm="syz.1.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d4314799 code=0x7ffc0000 [ 371.024185][ T26] audit: type=1326 audit(1774429548.496:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm=06 exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd4d4314799 code=0x7ffc0000 [ 371.079488][T16538] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 371.118993][T16538] ext4 filesystem being mounted at /1001/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.185890][ T26] audit: type=1326 audit(1774429548.496:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16581 comm=06 exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd4d4314502 code=0x7ffc0000 [ 371.283167][T16538] EXT4-fs warning (device loop3): verify_group_input:147: Cannot add at group 2175 (only 1 groups) [ 371.632421][T16611] loop1: detected capacity change from 0 to 512 [ 371.680685][T16615] loop4: detected capacity change from 0 to 256 [ 371.831632][T16614] loop3: detected capacity change from 0 to 8192 [ 371.893830][T16614] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 371.924142][T16614] REISERFS (device loop3): using ordered data mode [ 371.955721][T16614] reiserfs: using flush barriers [ 371.993810][T16614] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 372.087547][T16614] REISERFS (device loop3): checking transaction log (loop3) [ 372.152367][T16622] loop4: detected capacity change from 0 to 64 [ 372.318385][T16614] REISERFS (device loop3): Using tea hash to sort names [ 372.337304][T16614] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 372.382454][T16614] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 372.443659][T16614] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 372.834353][T16611] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 373.584561][T16634] loop3: detected capacity change from 0 to 40427 [ 373.594747][T16622] attempt to access beyond end of device [ 373.594747][T16622] loop4: rw=0, want=414, limit=64 [ 373.680439][T16622] Trying to free block not in datazone [ 373.684311][T16634] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 373.694521][T16652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5372'. [ 373.742225][T16650] attempt to access beyond end of device [ 373.742225][T16650] loop4: rw=0, want=414, limit=64 [ 373.771463][T16634] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 373.840282][T16650] Buffer I/O error on dev loop4, logical block 206, async page read [ 373.951163][T16634] F2FS-fs (loop3): Found nat_bits in checkpoint [ 374.129086][T16634] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 374.144771][T16634] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 374.249225][ T4184] attempt to access beyond end of device [ 374.249225][ T4184] loop3: rw=2049, want=45104, limit=40427 [ 375.064274][T16683] loop3: detected capacity change from 0 to 256 [ 375.118184][T16685] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5388'. [ 375.158392][T16685] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5388'. [ 375.204293][T16665] loop1: detected capacity change from 0 to 32768 [ 375.717668][T16699] smc: net device wlan0 applied user defined pnetid SYZ0 [ 376.031984][T16711] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5401'. [ 376.221666][T16713] loop4: detected capacity change from 0 to 4096 [ 376.414090][T16725] loop3: detected capacity change from 0 to 2048 [ 376.535813][T16725] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 376.558681][ T4558] udevd[4558]: incorrect nilfs2 checksum on /dev/loop3 [ 376.565365][T16725] NILFS (loop3): mounting unchecked fs [ 376.678917][T16725] NILFS (loop3): recovery complete [ 376.709654][T16740] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 376.767257][T16744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5418'. [ 376.838722][T16744] device vxcan4 entered promiscuous mode [ 376.932940][T16748] bridge0: port 3(hsr0) entered blocking state [ 376.942248][T16748] bridge0: port 3(hsr0) entered disabled state [ 377.049757][T16750] loop3: detected capacity change from 0 to 64 [ 377.194251][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 377.194265][ T26] audit: type=1800 audit(1774429555.047:42): pid=16750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5421" name="bus" dev="loop3" ino=21 res=0 errno=0 [ 377.352914][T16758] xt_l2tp: unknown flags: 1f [ 378.096240][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.102612][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.343468][T16805] loop4: detected capacity change from 0 to 2048 [ 378.593391][T16822] loop1: detected capacity change from 0 to 164 [ 378.636729][T16823] loop3: detected capacity change from 0 to 1764 [ 378.913054][T16833] bridge0: port 3(hsr0) entered blocking state [ 378.931303][T16833] bridge0: port 3(hsr0) entered disabled state [ 379.265405][T16847] loop1: detected capacity change from 0 to 164 [ 379.621819][T16837] loop4: detected capacity change from 0 to 40427 [ 379.668508][T16837] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 379.681039][T16837] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 379.703091][T16837] F2FS-fs (loop4): invalid crc value [ 379.717403][T16837] F2FS-fs (loop4): Found nat_bits in checkpoint [ 379.787702][T16837] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 379.801420][T16837] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 379.916367][T16823] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 380.124895][T16859] overlayfs: failed to resolve '/7<ˆ_1êhC3–áZQñ`H0ÇÂ@B5ý·6è%£ ÝÿpÜå2ð [ 380.124895][T16859] Iš0ò¸¡©Á¨ÿNíÙtaÑ[ ªöÌ…÷¼E{7¿èqê°éøËvݲŠ6®¹': -2 [ 380.480246][T16847] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 380.513590][T16847] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 380.564409][T16847] Symlink component flag not implemented [ 380.570271][T16847] Symlink component flag not implemented [ 380.601997][T16877] device batadv0 entered promiscuous mode [ 380.615407][T16878] Symlink component flag not implemented (7) [ 380.641870][T16878] Symlink component flag not implemented (116) [ 380.657020][T16877] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 380.696251][T16877] device batadv0 left promiscuous mode [ 381.060903][ T6501] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 381.170345][T16868] loop4: detected capacity change from 0 to 40427 [ 381.336688][T16894] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5470'. [ 381.356367][T16892] loop1: detected capacity change from 0 to 32768 [ 381.412558][T16892] [ 381.412558][T16892] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 381.412558][T16892] [ 381.465095][ T6501] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 381.487894][ T26] audit: type=1800 audit(1774429559.338:43): pid=16892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5488" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 381.497185][ T6501] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 381.508361][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.554245][ T151] [ 381.554245][ T151] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 381.554245][ T151] [ 381.570284][ T151] [ 381.570284][ T151] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 381.570284][ T151] [ 381.588201][ T6501] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 381.591030][ T276] [ 381.591030][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 381.591030][ T276] [ 381.610565][ T6501] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.649968][ T4183] [ 381.649968][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 381.649968][ T4183] [ 381.667427][ T4183] [ 381.667427][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 381.667427][ T4183] [ 381.669698][T16884] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 382.077487][T16917] loop1: detected capacity change from 0 to 128 [ 382.171393][T16917] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 382.237912][ T4183] sysv_free_block: trying to free block not in datazone [ 382.268999][ T4183] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 382.409666][T16868] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 382.420259][T16931] loop3: detected capacity change from 0 to 256 [ 382.460373][T16868] F2FS-fs (loop4): invalid crc value [ 382.522734][T16931] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 382.608422][T16868] F2FS-fs (loop4): Found nat_bits in checkpoint [ 382.854922][ T6501] usb 3-1: USB disconnect, device number 26 [ 382.892054][T16868] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 383.119729][ T4196] attempt to access beyond end of device [ 383.119729][ T4196] loop4: rw=2049, want=45104, limit=40427 [ 383.165922][T16949] udevd[16949]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.654766][T16962] netlink: 'syz.2.5519': attribute type 3 has an invalid length. [ 383.731788][T16953] loop1: detected capacity change from 0 to 32768 [ 383.781696][T16953] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.5514 (16953) [ 383.866211][T16953] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 383.906384][T16953] BTRFS info (device loop1): allowing degraded mounts [ 383.913252][T16953] BTRFS info (device loop1): enabling ssd optimizations [ 383.965827][T16953] BTRFS info (device loop1): allowing degraded mounts [ 383.972651][T16953] BTRFS info (device loop1): using free space tree [ 384.020857][T16953] BTRFS info (device loop1): has skinny extents [ 385.074498][T16963] loop4: detected capacity change from 0 to 164 [ 385.296045][T17000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5527'. [ 385.710920][T17012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5533'. [ 385.800671][T17014] loop3: detected capacity change from 0 to 512 [ 385.883359][T17014] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 385.909585][ T1107] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 386.231058][T17024] loop1: detected capacity change from 0 to 128 [ 386.399614][ T1107] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 386.436536][ T1107] usb 5-1: config 0 interface 0 has no altsetting 0 [ 386.529675][T17038] loop3: detected capacity change from 0 to 512 [ 386.632578][T17038] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.5546: inode #1: comm syz.3.5546: iget: illegal inode # [ 386.642323][ T1107] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 386.655472][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 386.675646][ T1107] usb 5-1: Product: syz [ 386.679845][ T1107] usb 5-1: Manufacturer: syz [ 386.687285][T17038] EXT4-fs (loop3): Remounting filesystem read-only [ 386.695788][ T1107] usb 5-1: SerialNumber: syz [ 386.707653][T17038] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.5546: error while reading EA inode 1 err=-117 [ 386.721242][ T1107] usb 5-1: config 0 descriptor?? [ 386.771339][T17038] EXT4-fs (loop3): Remounting filesystem read-only [ 386.790732][ T1107] usb 5-1: selecting invalid altsetting 0 [ 386.802000][T17038] EXT4-fs (loop3): 1 orphan inode deleted [ 386.827778][T17038] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,jqfmt=vfsold,usrjquota=,errors=remount-ro,noblock_validity,noquota,. Quota mode: none. [ 387.013541][T17010] usb 5-1: selecting invalid altsetting 0 [ 387.043100][T17010] usb 5-1: 0:0: usb_set_interface failed (-22) [ 387.050093][T17010] usb 5-1: selecting invalid altsetting 0 [ 387.117066][T17010] usb 5-1: 0:0: usb_set_interface failed (-22) [ 387.151366][T17009] usb 5-1: selecting invalid altsetting 0 [ 387.171878][T17009] usb 5-1: 0:0: usb_set_interface failed (-22) [ 387.202093][T17009] usb 5-1: selecting invalid altsetting 0 [ 387.224217][T17009] usb 5-1: 0:0: usb_set_interface failed (-22) [ 387.230520][T17009] usb 5-1: selecting invalid altsetting 0 [ 387.248300][T17009] usb 5-1: 0:0: usb_set_interface failed (-22) [ 387.313453][ T1107] usb 5-1: USB disconnect, device number 19 [ 387.319068][T17072] loop3: detected capacity change from 0 to 256 [ 387.361795][T17074] tipc: Cannot configure node identity twice [ 387.622187][T17024] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 387.663821][T17024] hpfs: filesystem error: improperly stopped [ 387.670188][T17024] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 387.714887][T16949] udevd[16949]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 387.753969][T17024] hpfs: You really don't want any checks? You are crazy... [ 387.772853][T17024] hpfs: hpfs_map_sector(): read error [ 387.806150][T17024] hpfs: code page support is disabled [ 387.817919][T17024] hpfs: hpfs_map_4sectors(): unaligned read [ 387.850364][T17024] hpfs: hpfs_map_4sectors(): unaligned read [ 387.883588][T17024] hpfs: filesystem error: unable to find root dir [ 388.051622][T17099] batman_adv: batadv0: Adding interface: gretap1 [ 388.086323][T17099] batman_adv: batadv0: Interface activated: gretap1 [ 388.117622][T17102] loop4: detected capacity change from 0 to 1756 [ 388.234917][T17102] Invalid ELF header len 10 [ 388.510204][T17088] loop3: detected capacity change from 0 to 40427 [ 388.544303][T17088] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 388.573039][T17088] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 388.609180][T17088] F2FS-fs (loop3): invalid crc value [ 388.621396][T17088] F2FS-fs (loop3): Found nat_bits in checkpoint [ 388.930557][T17088] F2FS-fs (loop3): Start checkpoint disabled! [ 389.029908][T17088] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 390.012232][T17110] loop4: detected capacity change from 0 to 8 [ 390.263349][T17110] SQUASHFS error: xz decompression failed, data probably corrupt [ 390.271221][T17110] SQUASHFS error: Failed to read block 0x108: -5 [ 390.301439][T17110] SQUASHFS error: Unable to read metadata cache entry [106] [ 390.381482][T17110] SQUASHFS error: Unable to read inode 0x11f [ 390.573847][ C1] sched: RT throttling activated [ 390.792509][ T4989] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 391.103068][ T4989] usb 2-1: Using ep0 maxpacket: 32 [ 391.239179][ T4989] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.256871][ T4989] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.307934][ T4989] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.329509][ T4989] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 391.370464][ T4989] usb 2-1: config 0 interface 0 has no altsetting 0 [ 391.394669][ T4989] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 391.419102][ T4989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.463720][ T4989] usb 2-1: config 0 descriptor?? [ 391.654436][T17144] netlink: 'syz.2.5598': attribute type 8 has an invalid length. [ 391.672385][T17144] netlink: 197344 bytes leftover after parsing attributes in process `syz.2.5598'. [ 391.936148][ T4989] corsair-psu 0003:1B1C:1C09.001B: item fetching failed at offset 3/5 [ 391.947490][ T4989] corsair-psu: probe of 0003:1B1C:1C09.001B failed with error -22 [ 392.133465][ T6497] usb 2-1: USB disconnect, device number 25 [ 393.146928][T17190] loop4: detected capacity change from 0 to 512 [ 393.227404][T17190] EXT4-fs (loop4): Ignoring removed orlov option [ 393.254628][T17190] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 393.279185][T17190] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.5621: corrupted in-inode xattr [ 393.308906][T17190] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.5621: couldn't read orphan inode 15 (err -117) [ 393.327598][T17190] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 393.353230][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.382801][T17201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5625'. [ 393.799339][T17219] loop3: detected capacity change from 0 to 164 [ 394.209435][T17242] loop1: detected capacity change from 0 to 256 [ 394.497786][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5651'. [ 394.508531][T17252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5651'. [ 394.527105][T17252] netlink: 'syz.4.5651': attribute type 6 has an invalid length. [ 394.558310][T17252] netlink: 'syz.4.5651': attribute type 5 has an invalid length. [ 394.679519][T17256] loop1: detected capacity change from 0 to 512 [ 395.050278][T17260] loop4: detected capacity change from 0 to 32768 [ 395.116869][T17260] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.5655 (17260) [ 395.205871][T17260] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 395.231065][T17260] BTRFS info (device loop4): enabling disk space caching [ 395.248214][T17260] BTRFS info (device loop4): enabling ssd optimizations [ 395.260708][T17260] BTRFS info (device loop4): force clearing of disk cache [ 395.273108][T17260] BTRFS info (device loop4): turning off barriers [ 395.279599][T17260] BTRFS info (device loop4): setting nodatacow, compression disabled [ 395.296635][T17260] BTRFS info (device loop4): using spread ssd allocation scheme [ 395.310806][T17260] BTRFS info (device loop4): disk space caching is enabled [ 395.322565][T17260] BTRFS info (device loop4): has skinny extents [ 395.404552][T17277] loop3: detected capacity change from 0 to 1024 [ 395.440884][T17260] BTRFS info (device loop4): clearing free space tree [ 395.449836][T17260] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 395.466198][T17260] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 395.511197][ T26] audit: type=1800 audit(1774429573.369:44): pid=17260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5655" name="file3" dev="loop4" ino=261 res=0 errno=0 [ 395.739719][T17256] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 395.758017][T17256] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 395.868894][T17256] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.5653: invalid indirect mapped block 4294967295 (level 1) [ 395.896649][T16950] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop4 scanned by udevd (16950) [ 395.986142][T17256] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.5653: invalid indirect mapped block 4294967295 (level 1) [ 396.040356][T17256] EXT4-fs (loop1): 2 truncates cleaned up [ 396.083055][T17256] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 396.588230][T17317] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5671'. [ 396.785640][T17325] loop4: detected capacity change from 0 to 1024 [ 396.950926][ T4239] hfsplus: b-tree write err: -5, ino 25 [ 396.961454][ T4239] hfsplus: b-tree write err: -5, ino 4 [ 397.007775][ T4239] hfsplus: b-tree write err: -5, ino 2 [ 397.199404][T13727] hfsplus: b-tree write err: -5, ino 25 [ 397.205235][T13727] hfsplus: b-tree write err: -5, ino 4 [ 397.210804][T13727] hfsplus: b-tree write err: -5, ino 2 [ 397.272161][T17347] loop3: detected capacity change from 0 to 1024 [ 398.088779][ C1] sd 0:0:1:0: tag#2997 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 398.098777][ C1] sd 0:0:1:0: tag#2997 CDB: Read(6) 08 18 4b 56 00 40 [ 398.254904][T17377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5702'. [ 398.265771][T17377] netlink: 'syz.0.5702': attribute type 22 has an invalid length. [ 398.280781][T17377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5702'. [ 398.326916][ T1503] [ 398.329283][ T1503] ============================================ [ 398.335430][ T1503] WARNING: possible recursive locking detected [ 398.341646][ T1503] syzkaller #0 Not tainted [ 398.346089][ T1503] -------------------------------------------- [ 398.352244][ T1503] kworker/u4:3/1503 is trying to acquire lock: [ 398.358397][ T1503] ffff88802a295218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: __dev_queue_xmit+0x1fd1/0x2f80 [ 398.370424][ T1503] [ 398.370424][ T1503] but task is already holding lock: [ 398.377798][ T1503] ffff8880795e4258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: __dev_queue_xmit+0x1120/0x2f80 [ 398.389825][ T1503] [ 398.389825][ T1503] other info that might help us debug this: [ 398.397985][ T1503] Possible unsafe locking scenario: [ 398.397985][ T1503] [ 398.405438][ T1503] CPU0 [ 398.408714][ T1503] ---- [ 398.412086][ T1503] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock); [ 398.419200][ T1503] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock); [ 398.426153][ T1503] [ 398.426153][ T1503] *** DEADLOCK *** [ 398.426153][ T1503] [ 398.434389][ T1503] May be due to missing lock nesting notation [ 398.434389][ T1503] [ 398.442704][ T1503] 7 locks held by kworker/u4:3/1503: [ 398.447991][ T1503] #0: ffff88814caad138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 398.458709][ T1503] #1: ffffc90005d57d00 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 398.472385][ T1503] #2: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 398.481981][ T1503] #3: ffff8880795e4258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: __dev_queue_xmit+0x1120/0x2f80 [ 398.494437][ T1503] #4: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 398.503768][ T1503] #5: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 398.513454][ T1503] #6: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 398.523048][ T1503] [ 398.523048][ T1503] stack backtrace: [ 398.528942][ T1503] CPU: 1 PID: 1503 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 398.536486][ T1503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 398.546558][ T1503] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 398.554382][ T1503] Call Trace: [ 398.557752][ T1503] [ 398.560724][ T1503] dump_stack_lvl+0x188/0x250 [ 398.565416][ T1503] ? show_regs_print_info+0x20/0x20 [ 398.570719][ T1503] ? load_image+0x400/0x400 [ 398.575240][ T1503] __lock_acquire+0x1236/0x7d10 [ 398.580113][ T1503] ? mark_lock+0x94/0x320 [ 398.584447][ T1503] ? verify_lock_unused+0x140/0x140 [ 398.589648][ T1503] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 398.595645][ T1503] ? mark_lock+0x94/0x320 [ 398.600001][ T1503] ? __lock_acquire+0x13bc/0x7d10 [ 398.605041][ T1503] lock_acquire+0x19e/0x400 [ 398.609559][ T1503] ? __dev_queue_xmit+0x1fd1/0x2f80 [ 398.614888][ T1503] ? read_lock_is_recursive+0x10/0x10 [ 398.620283][ T1503] ? rcu_read_lock_bh_held+0x76/0xf0 [ 398.625587][ T1503] ? rcu_read_lock_held+0x40/0x40 [ 398.630794][ T1503] ? verify_lock_unused+0x140/0x140 [ 398.636016][ T1503] _raw_spin_lock+0x2a/0x40 [ 398.640535][ T1503] ? __dev_queue_xmit+0x1fd1/0x2f80 [ 398.645751][ T1503] __dev_queue_xmit+0x1fd1/0x2f80 [ 398.650898][ T1503] ? rcu_lockdep_current_cpu_online+0x35/0x130 [ 398.657246][ T1503] ? dev_queue_xmit+0x20/0x20 [ 398.662031][ T1503] ? mark_lock+0x94/0x320 [ 398.666373][ T1503] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 398.672386][ T1503] ? lock_chain_count+0x20/0x20 [ 398.677252][ T1503] ? rcu_lock_acquire+0x30/0x30 [ 398.682203][ T1503] ? ip_finish_output2+0x8f7/0x10a0 [ 398.687494][ T1503] ? ip_finish_output2+0xaba/0x10a0 [ 398.692932][ T1503] ip_finish_output2+0xc87/0x10a0 [ 398.698066][ T1503] ? __ip_local_out+0x5e0/0x5e0 [ 398.703213][ T1503] ? ip_fragment+0x210/0x210 [ 398.707815][ T1503] ? ip_mc_finish_output+0x250/0x250 [ 398.713113][ T1503] ? ip_finish_output+0x3e8/0x4b0 [ 398.718168][ T1503] ip_output+0x2c0/0x3e0 [ 398.722431][ T1503] iptunnel_xmit+0x4d6/0x8e0 [ 398.727032][ T1503] ip_tunnel_xmit+0x1905/0x2280 [ 398.731897][ T1503] ? deref_stack_reg+0xd0/0x120 [ 398.736769][ T1503] ? ip4_dst_hoplimit+0x2a0/0x2a0 [ 398.741801][ T1503] ? rcu_lock_acquire+0x2f/0x30 [ 398.746667][ T1503] ? gre_build_header+0x25b/0x8c0 [ 398.751728][ T1503] gre_tap_xmit+0x4f9/0x6e0 [ 398.756245][ T1503] dev_hard_start_xmit+0x2a5/0x7e0 [ 398.761377][ T1503] sch_direct_xmit+0x25a/0x4b0 [ 398.766164][ T1503] ? mrp_pdu_append_vecattr_event+0x1590/0x1590 [ 398.772593][ T1503] __dev_queue_xmit+0x179f/0x2f80 [ 398.777719][ T1503] ? dev_queue_xmit+0x20/0x20 [ 398.782500][ T1503] ? pskb_expand_head+0xb23/0x10f0 [ 398.787629][ T1503] ? batadv_nc_skb_store_for_decoding+0x3e6/0x640 [ 398.794183][ T1503] batadv_send_skb_packet+0x384/0x5f0 [ 398.799569][ T1503] batadv_iv_send_outstanding_bat_ogm_packet+0x698/0x840 [ 398.806640][ T1503] process_one_work+0x85f/0x1010 [ 398.811696][ T1503] ? worker_detach_from_pool+0x240/0x240 [ 398.817342][ T1503] ? lockdep_hardirqs_off+0x70/0x100 [ 398.822735][ T1503] ? _raw_spin_lock_irq+0xb7/0xf0 [ 398.827850][ T1503] ? _raw_spin_lock_irqsave+0x100/0x100 [ 398.833492][ T1503] ? wq_worker_running+0x97/0x170 [ 398.838526][ T1503] worker_thread+0xaa6/0x1290 [ 398.843311][ T1503] kthread+0x436/0x520 [ 398.847385][ T1503] ? rcu_lock_release+0x20/0x20 [ 398.852249][ T1503] ? kthread_blkcg+0xd0/0xd0 [ 398.856845][ T1503] ret_from_fork+0x1f/0x30 [ 398.861277][ T1503] [ 398.864349][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.928689][T17347] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback.