last executing test programs: 4m59.116553249s ago: executing program 1 (id=411): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xf8) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x14, 0xfffffffb, 0xe3, 0xb0ff, 0x9, "d74192f386e87fcb366000080800ffee00", 0x1, 0x5}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) 4m58.755420108s ago: executing program 1 (id=413): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x100}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0x2}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x12, 0x9, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x40010) 4m58.61025398s ago: executing program 1 (id=416): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000c, 0x4008031, 0xffffffffffffffff, 0x20000000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) 4m57.210328713s ago: executing program 1 (id=425): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x558, &(0x7f0000000c00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f0000000140)='\x00', 0x1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 4m56.725823532s ago: executing program 1 (id=428): sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x350, 0x40000001, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0x2020) 4m55.202125935s ago: executing program 1 (id=446): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x4008032, 0xffffffffffffffff, 0xffffd000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) 4m54.745223762s ago: executing program 32 (id=446): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x4008032, 0xffffffffffffffff, 0xffffd000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) 2m38.345859106s ago: executing program 0 (id=1578): r0 = io_uring_setup(0x93d, &(0x7f0000000080)={0x0, 0x70e6, 0x2, 0x2, 0x119}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000240)=[0x40, 0x8], 0x2) 2m38.139938732s ago: executing program 0 (id=1581): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 2m37.916462811s ago: executing program 0 (id=1583): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socketpair$unix(0x1, 0x1, 0x0, 0x0) pselect6(0x40, &(0x7f0000003400)={0x3, 0x0, 0x7, 0x4, 0x8, 0xda53, 0xffffffffffffff01, 0x8}, &(0x7f0000003440)={0x8, 0x64, 0x297c7d26, 0x8, 0x9, 0x8, 0x1, 0xffffffff}, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)) 2m36.890763034s ago: executing program 0 (id=1592): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x8c48, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRES32], 0x1, 0x5b9, &(0x7f0000000340)="$eJzs3E1v3MYZAOChLEULBTUKBI0dx0AYJwf3YGV3VcsQ0oO3FCUx2V0uSCqQT0VQy6lQKS3qFmh88yVt0BY99Vzk2l/QP5XfoIL7IevL2vhz2+B5AHuGy5cz71AEB0vsMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIUrWm81WFLpZf3snfrpkvch7F+yftPefE8UJCyGE+aN+Q4jqf6HRCFdHH11960nsT+r/boQro60roVEXjfDozbd//PFb83P1gQtRFC5I6LV4+NWj33y+v7/7+1kn8hIcRs9+zGbaz8o863U20zgr83htdbX50dZGGW9k3bS8V1ZpL06KtFPlRXwzuRtCWFuJ0+V7+XZ/c73TTeObyU/j1tranVvtZnM1/mR5kHaKMu9/9MlymWxl3W7W3xzG1Ltvtd8Ld+oL8dOsiqu004vjB3v7uyvTkqyDWt8nqD0tqN1st1utdru1envt9p1mszG+Wo8+mG+eEk4fMj/7i5bX7o3Q+Gt9oQw3Jve4N17qjRyew2Hyj1mnAAAAALxi0fAZezR8On91WNvIumnzRMxhNLP0AAAAgJdg+NX+yvgBQAhXQ3T2+z8AAADw/+0vF66xC1EUysFiNFmqMtj5MDro1LXOwaXRR5dOt1htXIsujxsZFqvz460kvR69Mwp6ZxL93bh4MC2PqCgWoscvlkD4W7g2irl2f1Ten+wZ9bK0kXXT5STvftwKnc7luSrdqf745d6fQiiKw0vf9HuXo/Bgb393+Ve/3b8/zOVx3crjg/EvJM78UOJkLovhWC5/OFr3OB7x3ZMjXhg+iKlH/U2/tzTqtznozh+Nf2549OGZP+kF4/86vDuKeXdpVC6dHH+j7rO1fM7oj2fRGux8uDjubDzyhWfL4voo5vrND+rig5vjPQvHsmhPy6J9/PyPzkWYexlZHD8XKxdkcRj29ndXXjALgFl5cHoWGs274cn8f2beHd/e4tNNXXCXmzK711P41Nn911N7+Tq8P4p5/9r8k7n41B29OW1eaX7PeT2E87P4d7jxr3+GsB1uTIKfNsfW/f79xKwaHXxbH/DtmX4nK83LbjuqNy4tHvwuvP3wq0e39g4+/2L3i90v2+2V1ebPms3b7bAwHMa4MPcAcI60+C5aqv4cFUU2+GVrba3VqbbSuMiTT+MiW99M46xfpUWy1elvpvGgyKs8ybt15bNsPS3jcnswyIsq3siLeJCX2c7wzS/x+NUvZdrr9KssKQfdtFOmcZL3q05SxetZmcSD7V90s3IrLYYHl4M0yTaypFNleT8u8+0iSZfjuEzTY4HZetqvso2srvbjQZH1OsW9+LO8u91L4/W0TIpsUOWjBid9Zf2NvOgNm12e9ckGgP8RD8P4DXZHr7J75kpoTIk5r98zz0gBgNfm9Cy9OOuEAAAAAAAAAAAAAACAM44v1/v5eFHeC68IvLDSCEeVEF5FF3ffPG/Xe69oOM9ZCSHMv9IuJi9OmvlIfxiVRl2ZC7NOY/KexedtJwohTA/+UR0zqzsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADzdfwMAAP//NkeOkA==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') stat(&(0x7f0000001d00)='./file1\x00', &(0x7f0000001d40)) 2m36.462243868s ago: executing program 0 (id=1596): r0 = syz_open_dev$dri(&(0x7f0000000480), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2, r2, 0x0, 0x0, 0x3}) 2m35.82533565s ago: executing program 0 (id=1602): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1a8}}, 0x8840) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[]) 2m35.33171821s ago: executing program 33 (id=1602): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1a8}}, 0x8840) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[]) 12.116252773s ago: executing program 4 (id=2778): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000022c0)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) 11.77980415s ago: executing program 4 (id=2781): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002000)={0xffffffffffffffff}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8942, &(0x7f0000000040)={'veth0_vlan\x00', @random="18faff000020"}) 10.946427807s ago: executing program 4 (id=2790): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xffffffd9, 0x101, 0x0, 0x6, 0x6, "03f07f090000000000000000000800", 0x564, 0x3ff}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x9) 10.655858091s ago: executing program 4 (id=2804): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000006980)=ANY=[@ANYBLOB="646973636172642c696f636861727365743d63703837342c6572726f72733d72656d6f756e742d726f2c75737271756f74612c696f636861727365743d63703836312c696f636861727365743d6370313235302c696e7465677269747900696f636861727365743d69736f383835392d342c646973636172643d30783030303030303030303030303030396943b95b49aca56faf1cc22189cc312c696f636861727365743d6d6163677265656b2c71756f74612c726573697a653d3078303030303030303030303030376666662c646973636172643d3078303030303030303066666666666666662c756d61736b3d3078303030303030303030303032303034352c6673636f6e746578743d836e636f6e66696e65645f752c66736d616769633d3078303030303030303030303230303030392c324216873b95edfe8ceab2bb0b11835a5cf531ac6273c29a4d4f9d056f1bcb8cd0a969ed12cf99802b3e3201518ecfc59a4fd94dd5349dc55633bd2bde1128ad071807ef13a9f10c0fbf3ad861c2009067c5c6c84cdba2806fa74eddff8373799d0b8c1e6f7e2b205235161b610ae5c66d1d9cfc2bc0cb617ae49331ade71595c2a5438139933aada47236dafdffffff088a552445f95768ccecb0c35797e832beced2077fa197623cd3de51d69d7a4f77a80eb5f783f091e5ec6047a0f67676819f4bf66744c1cb0975b96baf730000000000000001004e257bbabf33e3fa8d0cca2fbb4dabe1c5634bdf889b764ce26ae4e539fdffa2ea82c34b16308e26ce945d101d5f2e2577d8e2a21d9401194a97a6c281b603da7c66934f0c341df8ff02d91cd4f2d80ea7dde697"], 0x1, 0x6208, &(0x7f000000ce00)="$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") setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {}, [], {0x4, 0x3}, [], {}, {0x20, 0x3}}, 0x24, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000480)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 8.650620842s ago: executing program 4 (id=2807): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7.372645055s ago: executing program 4 (id=2818): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x3}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_PLIMIT={0x8, 0x1, 0xff}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xf}]}}]}, 0x50}}, 0x0) 6.783844993s ago: executing program 34 (id=2818): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x3}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_PLIMIT={0x8, 0x1, 0xff}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xf}]}}]}, 0x50}}, 0x0) 4.367533468s ago: executing program 5 (id=2841): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 4.09391874s ago: executing program 5 (id=2844): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x34, r2, 0x101, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="b3"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x34}, 0x1, 0x0, 0x0, 0x48081}, 0x4850) 3.752022007s ago: executing program 5 (id=2847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000203c7c33d00000500000000000000ff0f00010001"], 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) 3.183900873s ago: executing program 5 (id=2852): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0xfffffffe}, &(0x7f00000000c0)=0x8) 2.830234662s ago: executing program 5 (id=2855): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008413, &(0x7f0000000000)={[{@noblock_validity}, {@barrier}]}, 0x0, 0x517, &(0x7f00000000c0)="$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") r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.830017261s ago: executing program 3 (id=2856): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x358, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x344, 0x1, [@m_csum={0xbc, 0x14, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x2, 0x1000, 0x8}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x8, 0x1, 0xa}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x80, 0xffffffffffffffff, 0x48fe, 0x2}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xfffffffa, 0xffffffffffffffff, 0xd49, 0x100}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3e5, 0x4, 0x3, 0x1}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x30, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x254, 0x1b, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x4, 0x0, 0x87}, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, 0xffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0xffffffffffffffff, 0x6, 0x7}, @loopback, @broadcast, 0x80, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x5, 0xa7, 0xffff0001}, @broadcast, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x40, 0x4, 0x0, 0x3, 0x9711}, @multicast1, @multicast1, 0x95c5050eeb275cf0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0xfffffffb, 0x736fe187decc650e, 0x101, 0x30000}, @remote, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd, 0xb111, 0x8, 0x838, 0x2a}, @private=0xa010101, @rand_addr=0x64010102, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x18, 0x5af3, 0x8, 0x9, 0xcd}, @private=0xa010100, @multicast1, 0xff}}]}, {0x111, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.72532s ago: executing program 2 (id=2857): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1922b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_PRIMARY={0x8, 0xb, r2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 2.533487365s ago: executing program 6 (id=2858): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181002, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x4}) poll(&(0x7f0000000140)=[{r1, 0x488}, {r0, 0x93a0}], 0x2, 0x400) 2.335613702s ago: executing program 6 (id=2859): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x44}}, 0x0) 2.247961058s ago: executing program 3 (id=2860): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000300)="86", 0x1}], 0x1) 2.10974128s ago: executing program 2 (id=2861): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x2, 0x0) 2.076582713s ago: executing program 3 (id=2862): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000640), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)={0x14, r1, 0x1510292b59cadaab, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0xc804) 1.923389325s ago: executing program 2 (id=2863): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0xffffd, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 1.73390904s ago: executing program 2 (id=2864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_clone(0x44000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.73373996s ago: executing program 3 (id=2865): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0xfffffffe}, &(0x7f00000000c0)=0x8) 1.522557337s ago: executing program 3 (id=2866): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.453743542s ago: executing program 6 (id=2867): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000001000000030000000100000006000000030000004000000001800aeb0000000000000000000000000100000003000000040000400000000008000000ff"]) 1.297078195s ago: executing program 3 (id=2868): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.176847685s ago: executing program 2 (id=2869): socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000000)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") 982.09645ms ago: executing program 6 (id=2870): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 887.519448ms ago: executing program 6 (id=2871): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x4008031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) utime(0x0, 0x0) 713.390893ms ago: executing program 2 (id=2872): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x6}, @TCA_FQ_ORPHAN_MASK={0x8}]}}]}, 0x40}}, 0x0) 346.526032ms ago: executing program 5 (id=2873): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 0s ago: executing program 6 (id=2874): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): T26] usb 4-1: USB disconnect, device number 16 [ 290.928584][ T7329] udevd[7329]: symlink '../../loop2' '/dev/disk/by-diskseq/557.tmp-b7:2' failed: Read-only file system [ 290.945464][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:6' failed: Read-only file system [ 290.976172][ T5886] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 291.044786][ T11] hfsplus: b-tree write err: -5, ino 3 [ 291.076080][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-diskseq/566.tmp-b7:6' failed: Read-only file system [ 291.115565][ T4372] udevd[4372]: symlink '../../loop4' '/dev/disk/by-diskseq/563.tmp-b7:4' failed: Read-only file system [ 291.190817][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-diskseq/566.tmp-b7:6' failed: Read-only file system [ 291.249218][ T5886] usb 6-1: USB disconnect, device number 14 [ 291.276703][ T5886] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 291.298482][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/557.tmp-b7:2' failed: Read-only file system [ 291.392091][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-diskseq/567.tmp-b7:6' failed: Read-only file system [ 291.743294][ T4397] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 291.838517][ T9775] loop2: detected capacity change from 0 to 2048 [ 291.912455][ T9775] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 291.953484][ T4397] usb 7-1: Using ep0 maxpacket: 16 [ 291.961230][ T4397] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 291.981398][ T9775] NILFS (loop2): mounting unchecked fs [ 292.001998][ T4397] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 292.012954][ T9775] NILFS (loop2): recovery required for readonly filesystem [ 292.038128][ T4397] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.062129][ T9775] NILFS (loop2): write access will be enabled during recovery [ 292.077033][ T4397] usb 7-1: Product: syz [ 292.081255][ T4397] usb 7-1: Manufacturer: syz [ 292.116928][ T4397] usb 7-1: SerialNumber: syz [ 292.117868][ T9775] NILFS (loop2): norecovery option specified, skipping roll-forward recovery [ 292.174692][ T4397] usb 7-1: config 0 descriptor?? [ 292.214847][ T4397] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 292.223072][ T4397] usb 7-1: Detected FT232R [ 292.388103][ T4397] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 292.619598][ T4397] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 292.630131][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.666119][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.733543][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.741649][ T9796] sctp: [Deprecated]: syz.3.1907 (pid 9796) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.741649][ T9796] Use struct sctp_sack_info instead [ 292.765089][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.785721][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.810154][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.846343][ T4397] usb 7-1: USB disconnect, device number 3 [ 292.869212][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.914002][ T4397] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 292.936639][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.947437][ T4397] ftdi_sio 7-1:0.0: device disconnected [ 293.006729][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.058732][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.097041][ T9794] device batadv_slave_0 entered promiscuous mode [ 293.171899][ T9794] device batadv_slave_0 left promiscuous mode [ 293.583030][ T9812] loop4: detected capacity change from 0 to 64 [ 293.623727][ T9811] netlink: 'syz.2.1911': attribute type 2 has an invalid length. [ 293.716737][ T9818] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1914'. [ 293.750417][ T9790] loop5: detected capacity change from 0 to 32768 [ 293.784698][ T9815] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1914'. [ 293.808604][ T9790] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1905 (9790) [ 293.892449][ T9790] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 293.978820][ T9790] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 294.003437][ T9820] netlink: 'syz.3.1915': attribute type 1 has an invalid length. [ 294.011222][ T9820] netlink: 'syz.3.1915': attribute type 2 has an invalid length. [ 294.040729][ T9790] BTRFS info (device loop5): enabling auto defrag [ 294.074388][ T9790] BTRFS info (device loop5): doing ref verification [ 294.081214][ T9790] BTRFS info (device loop5): max_inline at 0 [ 294.143993][ T9790] BTRFS info (device loop5): force clearing of disk cache [ 294.151175][ T9790] BTRFS info (device loop5): turning on sync discard [ 294.225478][ T9790] BTRFS info (device loop5): using free space tree [ 294.510235][ T9790] BTRFS info (device loop5): enabling ssd optimizations [ 294.541840][ T9790] BTRFS info (device loop5): rebuilding free space tree [ 294.594994][ T9858] netlink: 'syz.2.1921': attribute type 5 has an invalid length. [ 294.880169][ T9823] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 294.905027][ T9827] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 294.911895][ T9827] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 294.930047][ T9827] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 294.958402][ T5578] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 294.983589][ T9827] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 294.989920][ T9827] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 295.023359][ T9827] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 295.052041][ T9827] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 295.092634][ T9827] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 295.152659][ T9827] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 295.175115][ T9827] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 295.237432][ T4372] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop5 scanned by udevd (4372) [ 295.539207][ T8685] udevd[8685]: symlink '../../loop4' '/dev/disk/by-diskseq/572.tmp-b7:4' failed: Read-only file system [ 295.661545][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/569.tmp-b7:2' failed: Read-only file system [ 295.921066][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/569.tmp-b7:2' failed: Read-only file system [ 295.975872][ T7329] udevd[7329]: symlink '../../loop4' '/dev/disk/by-diskseq/572.tmp-b7:4' failed: Read-only file system [ 295.993191][ T5885] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 296.146875][ T8685] udevd[8685]: symlink '../../loop4' '/dev/disk/by-diskseq/572.tmp-b7:4' failed: Read-only file system [ 296.185993][ T5885] usb 7-1: Using ep0 maxpacket: 16 [ 296.197643][ T5885] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.251170][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.257561][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/569.tmp-b7:2' failed: Read-only file system [ 296.303909][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 296.346487][ T5885] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 296.365273][ T4272] Bluetooth: hci2: command 0x0c1a tx timeout [ 296.391144][ T5885] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.425703][ T8685] udevd[8685]: symlink '../../loop5' '/dev/disk/by-diskseq/571.tmp-b7:5' failed: Read-only file system [ 296.462854][ T9909] Falling back ldisc for ptm0. [ 296.479952][ T5885] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 296.515070][ T8684] udevd[8684]: symlink '../../loop2' '/dev/disk/by-diskseq/569.tmp-b7:2' failed: Read-only file system [ 296.531998][ T8685] udevd[8685]: symlink '../../loop5' '/dev/disk/by-diskseq/571.tmp-b7:5' failed: Read-only file system [ 296.551500][ T5885] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 296.576844][ T5885] usb 7-1: Manufacturer: syz [ 296.609373][ T5885] usb 7-1: config 0 descriptor?? [ 296.618423][ T8685] udevd[8685]: symlink '../../loop5' '/dev/disk/by-diskseq/571.tmp-b7:5' failed: Read-only file system [ 296.666718][ T4346] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 297.003905][ T4272] Bluetooth: hci4: command 0x0c1a tx timeout [ 297.083330][ T4272] Bluetooth: hci3: command 0x0c1a tx timeout [ 297.173345][ T5885] rc_core: IR keymap rc-hauppauge not found [ 297.184941][ T5885] Registered IR keymap rc-empty [ 297.210513][ T5885] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 297.273478][ T5885] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 297.324217][ T5885] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 297.358819][ T5885] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input33 [ 297.392520][ T9932] loop4: detected capacity change from 0 to 512 [ 297.404646][ T9930] comedi comedi0: Minor 14 could not be opened [ 297.456573][ T5885] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 297.466093][ T9932] EXT4-fs (loop4): Test dummy encryption mode enabled [ 297.506117][ T9932] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 297.516700][ T5885] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 297.563518][ T5885] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 297.575986][ T9932] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 297.626450][ T5885] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 297.646547][ T9932] System zones: 1-12 [ 297.688930][ T9932] EXT4-fs (loop4): 1 truncate cleaned up [ 297.707426][ T9932] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 297.719504][ T5885] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 297.774190][ T5885] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 297.813324][ T5885] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 297.829028][ T9932] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #12: comm syz.4.1947: Siphash requires key [ 297.863913][ T5885] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 297.924294][ T5885] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 297.956806][ T5885] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 298.004707][ T5885] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 298.056209][ T5885] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 298.088964][ T5885] usb 7-1: USB disconnect, device number 4 [ 298.124313][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 298.443442][ T4272] Bluetooth: hci2: command 0x0406 tx timeout [ 298.917478][ T9964] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 298.954623][ T9964] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 299.083336][ T4272] Bluetooth: hci4: command 0x0406 tx timeout [ 299.163812][ T4272] Bluetooth: hci3: command 0x0406 tx timeout [ 299.385215][ T52] block nbd6: Attempted send on invalid socket [ 299.392096][ T52] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.412793][ T1043] block nbd6: Attempted send on invalid socket [ 299.419125][ T1043] I/O error, dev nbd6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.442092][ T9978] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 299.487236][ T52] block nbd6: Attempted send on invalid socket [ 299.493468][ T52] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.502808][ T9978] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 299.556725][ T52] block nbd6: Attempted send on invalid socket [ 299.562934][ T52] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.573044][ T52] block nbd6: Attempted send on invalid socket [ 299.579599][ T52] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.591810][ T9978] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 299.623241][ T5885] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 299.646461][ T1043] block nbd6: Attempted send on invalid socket [ 299.652809][ T1043] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.673281][ T9978] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 299.694356][ T1043] block nbd6: Attempted send on invalid socket [ 299.700610][ T1043] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.718025][ T52] block nbd6: Attempted send on invalid socket [ 299.725066][ T52] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.750931][ T9978] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 299.803934][ T1043] block nbd6: Attempted send on invalid socket [ 299.810218][ T1043] I/O error, dev nbd6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.831958][ T9978] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 299.842858][ T1043] block nbd6: Attempted send on invalid socket [ 299.849235][ T1043] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.855132][ T5885] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 299.859062][ T9978] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 299.882245][ T9978] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 299.892003][ T9978] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 299.961138][ T5885] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.019027][ T5885] usb 3-1: config 0 interface 0 has no altsetting 0 [ 300.057431][ T5885] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 300.103445][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.174670][ T5885] usb 3-1: config 0 descriptor?? [ 300.525767][T10006] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1971'. [ 300.595072][ T5885] hid-steam 0003:28DE:1102.0014: item fetching failed at offset 4/5 [ 300.625226][ T5885] hid-steam 0003:28DE:1102.0014: steam_probe:parse of hid interface failed [ 300.643230][ T5885] hid-steam: probe of 0003:28DE:1102.0014 failed with error -22 [ 300.705013][ T8684] udevd[8684]: symlink '../../loop6' '/dev/disk/by-diskseq/567.tmp-b7:6' failed: Read-only file system [ 300.733002][T10010] loop4: detected capacity change from 0 to 2048 [ 300.767004][ T4372] udevd[4372]: symlink '../../loop5' '/dev/disk/by-diskseq/573.tmp-b7:5' failed: Read-only file system [ 300.804897][ T4397] usb 3-1: USB disconnect, device number 16 [ 300.846320][T10010] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.988315][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-diskseq/567.tmp-b7:6' failed: Read-only file system [ 301.037931][ T4372] udevd[4372]: symlink '../../loop5' '/dev/disk/by-diskseq/573.tmp-b7:5' failed: Read-only file system [ 301.052841][ T8684] udevd[8684]: symlink '../../loop4' '/dev/disk/by-diskseq/576.tmp-b7:4' failed: Read-only file system [ 301.101105][ T8684] udevd[8684]: symlink '../../loop4' '/dev/disk/by-label/LinuxUDF.tmp-b7:4' failed: Read-only file system [ 301.138993][T10023] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_batadv, syncid = 4, id = 0 [ 301.144912][ T8684] udevd[8684]: symlink '../../loop4' '/dev/disk/by-uuid/1234567812345678.tmp-b7:4' failed: Read-only file system [ 301.291108][ T8685] udevd[8685]: symlink '../../loop4' '/dev/disk/by-diskseq/576.tmp-b7:4' failed: Read-only file system [ 301.327318][ T8684] udevd[8684]: symlink '../../loop6' '/dev/disk/by-diskseq/567.tmp-b7:6' failed: Read-only file system [ 301.344637][ T4372] udevd[4372]: symlink '../../loop5' '/dev/disk/by-diskseq/573.tmp-b7:5' failed: Read-only file system [ 301.561162][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1983'. [ 301.598426][T10036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1983'. [ 302.462446][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1991'. [ 302.497618][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1991'. [ 302.579642][T10060] bridge0: port 3(vlan2) entered blocking state [ 302.610035][T10060] bridge0: port 3(vlan2) entered disabled state [ 302.820341][T10064] loop2: detected capacity change from 0 to 4096 [ 302.898263][T10072] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 303.158988][ T4889] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 303.200345][ T4889] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 303.533369][ T4371] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 303.723238][ T4371] usb 4-1: Using ep0 maxpacket: 32 [ 303.736012][ T4371] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 303.756333][T10102] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2005'. [ 303.768902][ T4371] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 303.798636][ T4371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.837326][ T4371] usb 4-1: Product: syz [ 303.847445][ T4371] usb 4-1: Manufacturer: syz [ 303.857559][ T4371] usb 4-1: SerialNumber: syz [ 303.888983][ T4371] usb 4-1: config 0 descriptor?? [ 303.917141][T10080] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 303.955913][ T4371] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input34 [ 304.263354][ T5812] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 304.300209][ T14] usb 4-1: USB disconnect, device number 17 [ 304.300263][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 304.463290][ T5812] usb 6-1: Using ep0 maxpacket: 8 [ 304.470354][ T5812] usb 6-1: config 0 has no interfaces? [ 304.485903][ T5812] usb 6-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 304.537905][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.556328][ T5812] usb 6-1: Product: syz [ 304.560566][ T5812] usb 6-1: Manufacturer: syz [ 304.586779][ T5812] usb 6-1: SerialNumber: syz [ 304.594565][ T5812] usb 6-1: config 0 descriptor?? [ 304.642123][T10121] loop2: detected capacity change from 0 to 2048 [ 304.662740][T10099] loop6: detected capacity change from 0 to 32768 [ 304.667950][T10121] EXT4-fs: Ignoring removed bh option [ 304.699969][T10099] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2003 (10099) [ 304.740656][T10121] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 304.743009][T10099] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 304.760553][T10099] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 304.769834][T10099] BTRFS info (device loop6): setting nodatacow, compression disabled [ 304.778489][T10099] BTRFS info (device loop6): max_inline at 0 [ 304.785083][T10099] BTRFS info (device loop6): enabling disk space caching [ 304.792435][T10099] BTRFS info (device loop6): turning off barriers [ 304.799090][T10099] BTRFS info (device loop6): turning on flush-on-commit [ 304.806361][T10099] BTRFS info (device loop6): doing ref verification [ 304.813016][T10099] BTRFS info (device loop6): force clearing of disk cache [ 304.820475][T10099] BTRFS info (device loop6): enabling ssd optimizations [ 304.827597][T10099] BTRFS info (device loop6): max_inline at 4096 [ 304.834120][T10099] BTRFS info (device loop6): disk space caching is enabled [ 304.876272][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 304.876288][ T27] audit: type=1800 audit(1754395038.216:113): pid=10121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2010" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 304.950499][T10121] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 304.995109][T10121] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 242 with error 28 [ 305.027180][T10104] loop4: detected capacity change from 0 to 32768 [ 305.061843][T10135] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 305.089053][T10121] EXT4-fs (loop2): This should not happen!! Data will be lost [ 305.089053][T10121] [ 305.143691][T10104] XFS (loop4): Mounting V5 Filesystem [ 305.152030][T10135] EXT4-fs (loop2): This should not happen!! Data will be lost [ 305.152030][T10135] [ 305.153354][T10121] EXT4-fs (loop2): Total free blocks count 0 [ 305.216019][T10135] EXT4-fs (loop2): Total free blocks count 0 [ 305.240616][T10104] XFS (loop4): Ending clean mount [ 305.251053][T10104] XFS (loop4): Quotacheck needed: Please wait. [ 305.263861][T10099] BTRFS info (device loop6): rebuilding free space tree [ 305.301253][T10135] EXT4-fs (loop2): Free/Dirty block details [ 305.307534][T10121] EXT4-fs (loop2): Free/Dirty block details [ 305.313716][T10135] EXT4-fs (loop2): free_blocks=2415919104 [ 305.338450][T10099] BTRFS info (device loop6): disabling free space tree [ 305.341791][T10104] XFS (loop4): Quotacheck: Done. [ 305.353005][ T26] usb 6-1: USB disconnect, device number 15 [ 305.425604][T10099] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 305.472990][T10099] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 305.485190][T10104] XFS (loop4): User initiated shutdown received. [ 305.491609][T10104] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 305.587656][T10104] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 305.828730][ T4372] udevd[4372]: symlink '../../loop5' '/dev/disk/by-diskseq/573.tmp-b7:5' failed: Read-only file system [ 305.857060][ T7329] udevd[7329]: symlink '../../loop2' '/dev/disk/by-diskseq/580.tmp-b7:2' failed: Read-only file system [ 305.894007][ T4262] XFS (loop4): Unmounting Filesystem [ 305.948109][ T7329] udevd[7329]: symlink '../../loop2' '/dev/disk/by-diskseq/580.tmp-b7:2' failed: Read-only file system [ 306.021477][ T4372] udevd[4372]: symlink '../../loop2' '/dev/disk/by-diskseq/583.tmp-b7:2' failed: Read-only file system [ 306.068950][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-diskseq/581.tmp-b7:6' failed: Read-only file system [ 306.147046][ T4372] udevd[4372]: symlink '../../loop5' '/dev/disk/by-diskseq/573.tmp-b7:5' failed: Read-only file system [ 306.164696][ T8870] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 306.205633][ T8684] udevd[8684]: symlink '../../loop4' '/dev/disk/by-diskseq/582.tmp-b7:4' failed: Read-only file system [ 306.206145][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:6' failed: Read-only file system [ 306.296079][ T8684] udevd[8684]: symlink '../../loop4' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:4' failed: Read-only file system [ 306.329740][ T4372] udevd[4372]: symlink '../../loop2' '/dev/disk/by-diskseq/583.tmp-b7:2' failed: Read-only file system [ 306.437496][T10169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2018'. [ 306.681742][T10179] loop2: detected capacity change from 0 to 22 [ 306.729170][T10179] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 306.782589][T10179] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 307.848997][T10206] xt_connbytes: Forcing CT accounting to be enabled [ 308.447840][T10204] loop5: detected capacity change from 0 to 8192 [ 308.498953][T10204] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 308.541261][T10204] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 308.585429][T10204] REISERFS (device loop5): using ordered data mode [ 308.592033][T10204] reiserfs: using flush barriers [ 308.706935][T10204] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 308.819710][T10204] REISERFS (device loop5): checking transaction log (loop5) [ 308.914661][T10204] REISERFS (device loop5): Using r5 hash to sort names [ 308.922350][T10204] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 309.370502][T10231] loop6: detected capacity change from 0 to 512 [ 309.720340][T10237] loop4: detected capacity change from 0 to 512 [ 309.877403][T10237] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 309.897808][T10237] ext4 filesystem being mounted at /420/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.006364][T10237] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.2039: corrupted inode contents [ 310.095585][T10237] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #2: comm syz.4.2039: mark_inode_dirty error [ 310.127316][T10237] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.2039: corrupted inode contents [ 310.179505][T10237] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.2039: mark_inode_dirty error [ 310.336170][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 310.881003][T10268] loop2: detected capacity change from 0 to 256 [ 311.080768][ T4372] udevd[4372]: symlink '../../loop5' '/dev/disk/by-diskseq/590.tmp-b7:5' failed: Read-only file system [ 311.143279][ T4397] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 311.212352][ T4372] udevd[4372]: symlink '../../loop5' '/dev/disk/by-diskseq/590.tmp-b7:5' failed: Read-only file system [ 311.229255][ T8684] udevd[8684]: symlink '../../loop2' '/dev/disk/by-diskseq/594.tmp-b7:2' failed: Read-only file system [ 311.292740][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/594.tmp-b7:2' failed: Read-only file system [ 311.340115][T10274] loop2: detected capacity change from 0 to 2048 [ 311.346895][ T4397] usb 7-1: Using ep0 maxpacket: 16 [ 311.354608][ T4397] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.393729][ T4397] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 311.408741][T10274] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 311.433308][T10274] NILFS (loop2): mounting unchecked fs [ 311.453521][ T4397] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 311.461950][T10274] NILFS (loop2): recovery complete [ 311.492730][ T4372] udevd[4372]: symlink '../../loop5' '/dev/disk/by-diskseq/590.tmp-b7:5' failed: Read-only file system [ 311.526547][T10279] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 311.533820][ T4397] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 311.609608][ T4397] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 311.621629][T10281] loop5: detected capacity change from 0 to 256 [ 311.653473][ T4397] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 311.663047][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/594.tmp-b7:2' failed: Read-only file system [ 311.704543][ T4397] usb 7-1: SerialNumber: syz [ 311.719968][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:2' failed: Read-only file system [ 311.752083][T10267] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 311.773619][T10267] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 311.777069][ T8684] udevd[8684]: symlink '../../loop4' '/dev/disk/by-diskseq/593.tmp-b7:4' failed: Read-only file system [ 311.781685][ T4397] hub 7-1:1.0: bad descriptor, ignoring hub [ 311.833732][ T4397] hub: probe of 7-1:1.0 failed with error -5 [ 311.875832][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/594.tmp-b7:2' failed: Read-only file system [ 311.902177][ T4372] udevd[4372]: symlink '../../loop5' '/dev/disk/by-diskseq/597.tmp-b7:5' failed: Read-only file system [ 311.957301][T10288] program syz.5.2060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.044254][T10267] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 312.092168][T10267] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 312.526736][ T4397] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 312.553829][T10302] block nbd1: server does not support multiple connections per device. [ 312.575087][T10302] block nbd1: shutting down sockets [ 312.662031][T10308] loop2: detected capacity change from 0 to 512 [ 312.717666][T10308] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 312.969806][ T4889] EXT4-fs (loop2): unmounting filesystem. [ 313.060344][ T4371] usb 7-1: USB disconnect, device number 5 [ 313.109957][ T4327] kernel write not supported for file /amidi2 (pid: 4327 comm: kworker/0:4) [ 313.666181][T10338] loop2: detected capacity change from 0 to 1024 [ 313.881756][T10319] loop5: detected capacity change from 0 to 32768 [ 313.940706][T10319] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2073 (10319) [ 314.023225][ T4371] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 314.041821][T10319] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 314.062412][T10319] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 314.083317][T10319] BTRFS info (device loop5): setting nodatacow, compression disabled [ 314.091644][T10319] BTRFS info (device loop5): max_inline at 0 [ 314.135234][T10319] BTRFS info (device loop5): enabling disk space caching [ 314.152625][T10319] BTRFS info (device loop5): turning off barriers [ 314.169179][T10319] BTRFS info (device loop5): turning on flush-on-commit [ 314.206879][T10319] BTRFS info (device loop5): doing ref verification [ 314.236782][T10319] BTRFS info (device loop5): force clearing of disk cache [ 314.249543][ T4371] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.272245][T10319] BTRFS info (device loop5): enabling ssd optimizations [ 314.282869][ T4371] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.303449][T10319] BTRFS info (device loop5): max_inline at 4096 [ 314.320296][ T4371] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 314.334877][T10319] BTRFS info (device loop5): disk space caching is enabled [ 314.352335][ T4371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 314.383414][ T4371] usb 4-1: SerialNumber: syz [ 314.567512][T10319] BTRFS info (device loop5): rebuilding free space tree [ 314.581624][T10336] loop4: detected capacity change from 0 to 32768 [ 314.609240][T10319] BTRFS info (device loop5): disabling free space tree [ 314.615476][ T4371] usb 4-1: 0:2 : does not exist [ 314.640674][T10319] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 314.659471][ T4371] usb 4-1: USB disconnect, device number 18 [ 314.665970][T10319] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 314.721349][T10375] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2091'. [ 315.089268][ T5578] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 315.196517][T10381] loop6: detected capacity change from 0 to 512 [ 315.364669][T10381] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 315.384542][T10381] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.501066][ T27] audit: type=1800 audit(1754395048.836:114): pid=10381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2094" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 315.594117][ T27] audit: type=1800 audit(1754395048.936:115): pid=10392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2094" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 315.882703][ T8870] EXT4-fs (loop6): unmounting filesystem. [ 315.966938][T10400] netlink: 192 bytes leftover after parsing attributes in process `syz.5.2095'. [ 316.386133][ T8684] udevd[8684]: symlink '../../loop5' '/dev/disk/by-diskseq/603.tmp-b7:5' failed: Read-only file system [ 316.629595][ T8685] udevd[8685]: symlink '../../loop5' '/dev/disk/by-diskseq/603.tmp-b7:5' failed: Read-only file system [ 316.754022][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2112'. [ 316.762961][T10426] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2112'. [ 316.773521][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-diskseq/607.tmp-b7:6' failed: Read-only file system [ 316.791423][ T8684] udevd[8684]: symlink '../../loop5' '/dev/disk/by-diskseq/608.tmp-b7:5' failed: Read-only file system [ 316.848108][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.854524][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.874627][ T5885] kernel read not supported for file /input/event1 (pid: 5885 comm: kworker/1:17) [ 316.901697][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-diskseq/607.tmp-b7:6' failed: Read-only file system [ 316.958990][ T8684] udevd[8684]: symlink '../../loop5' '/dev/disk/by-diskseq/608.tmp-b7:5' failed: Read-only file system [ 316.984762][ T7329] udevd[7329]: symlink '../../loop2' '/dev/disk/by-diskseq/604.tmp-b7:2' failed: Read-only file system [ 317.008021][ T4698] udevd[4698]: symlink '../../loop4' '/dev/disk/by-diskseq/606.tmp-b7:4' failed: Read-only file system [ 317.016242][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-diskseq/609.tmp-b7:6' failed: Read-only file system [ 317.053704][ T7329] udevd[7329]: symlink '../../loop2' '/dev/disk/by-diskseq/604.tmp-b7:2' failed: Read-only file system [ 317.293688][T10437] capability: warning: `syz.5.2117' uses 32-bit capabilities (legacy support in use) [ 318.807593][T10472] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 318.873822][T10472] xt_CT: You must specify a L4 protocol and not use inversions on it [ 319.599460][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2139'. [ 319.868705][T10497] loop5: detected capacity change from 0 to 128 [ 319.913075][T10497] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 319.954674][T10500] loop2: detected capacity change from 0 to 128 [ 319.988899][T10500] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 320.036585][T10500] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 320.249589][T10485] loop6: detected capacity change from 0 to 32768 [ 320.262867][ T4353] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 320.372195][T10485] XFS (loop6): Mounting V5 Filesystem [ 320.534639][T10485] XFS (loop6): Ending clean mount [ 320.593354][T10517] device team_slave_0 entered promiscuous mode [ 320.599651][T10517] device team_slave_1 entered promiscuous mode [ 320.607377][T10485] XFS (loop6): Quotacheck needed: Please wait. [ 320.625281][T10517] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 320.729636][T10485] XFS (loop6): Quotacheck: Done. [ 320.933257][ T8870] XFS (loop6): Unmounting Filesystem [ 321.245128][T10530] loop4: detected capacity change from 0 to 1024 [ 321.299869][T10530] EXT4-fs: Ignoring removed orlov option [ 321.418231][ T8685] udevd[8685]: symlink '../../loop4' '/dev/disk/by-diskseq/615.tmp-b7:4' failed: Read-only file system [ 321.434759][T10530] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 321.452348][ T8684] udevd[8684]: symlink '../../loop6' '/dev/disk/by-diskseq/613.tmp-b7:6' failed: Read-only file system [ 321.512638][ T8685] udevd[8685]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 321.554844][ T4372] udevd[4372]: symlink '../../loop5' '/dev/disk/by-diskseq/612.tmp-b7:5' failed: Read-only file system [ 321.574655][T10530] EXT4-fs error (device loop4): __ext4_remount:6623: comm syz.4.2153: Abort forced by user [ 321.598549][T10530] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 321.649075][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-diskseq/613.tmp-b7:6' failed: Read-only file system [ 321.734437][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/614.tmp-b7:2' failed: Read-only file system [ 321.745962][T10544] loop5: detected capacity change from 0 to 512 [ 321.786084][T10544] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 321.800781][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 321.837608][ T4372] udevd[4372]: symlink '../../loop4' '/dev/disk/by-diskseq/615.tmp-b7:4' failed: Read-only file system [ 321.890314][T10544] EXT4-fs (loop5): 1 truncate cleaned up [ 321.902359][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-diskseq/616.tmp-b7:6' failed: Read-only file system [ 321.931458][T10544] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 321.937721][ T4372] udevd[4372]: symlink '../../loop4' '/dev/disk/by-diskseq/615.tmp-b7:4' failed: Read-only file system [ 321.952637][ T8684] udevd[8684]: symlink '../../loop5' '/dev/disk/by-diskseq/617.tmp-b7:5' failed: Read-only file system [ 322.202115][ T5578] EXT4-fs (loop5): unmounting filesystem. [ 322.429334][T10559] loop5: detected capacity change from 0 to 2048 [ 322.489459][T10559] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.410680][T10551] loop4: detected capacity change from 0 to 32768 [ 323.536678][T10556] loop6: detected capacity change from 0 to 32768 [ 323.554103][T10556] XFS: ikeep mount option is deprecated. [ 323.560004][T10556] XFS: noikeep mount option is deprecated. [ 323.574775][T10551] XFS (loop4): Mounting V5 Filesystem [ 323.672164][T10590] sch_tbf: burst 0 is lower than device wg0 mtu (1420) ! [ 323.731827][T10556] XFS (loop6): Mounting V5 Filesystem [ 323.745255][T10551] XFS (loop4): Ending clean mount [ 323.762117][T10551] XFS (loop4): Quotacheck needed: Please wait. [ 323.922244][T10601] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2175'. [ 323.976433][T10556] XFS (loop6): Ending clean mount [ 323.987044][T10556] XFS (loop6): Quotacheck needed: Please wait. [ 324.054057][T10551] XFS (loop4): Quotacheck: Done. [ 324.178139][T10556] XFS (loop6): Quotacheck: Done. [ 324.403762][ T8870] XFS (loop6): Unmounting Filesystem [ 324.409675][ T4262] XFS (loop4): Unmounting Filesystem [ 324.525118][T10613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2182'. [ 324.948010][T10620] netlink: 'syz.2.2186': attribute type 2 has an invalid length. [ 324.971493][T10620] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2186'. [ 325.187663][T10626] loop2: detected capacity change from 0 to 512 [ 325.261126][T10626] EXT4-fs (loop2): orphan cleanup on readonly fs [ 325.322401][T10626] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 325.414810][T10626] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 325.601515][T10626] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.2187: attempt to clear invalid blocks 2 len 1 [ 325.685767][T10626] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2187: invalid indirect mapped block 1819239214 (level 0) [ 325.761184][T10626] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2187: invalid indirect mapped block 1819239214 (level 1) [ 325.814045][T10626] EXT4-fs (loop2): 1 truncate cleaned up [ 325.819776][T10626] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 325.883171][T10626] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 326.011086][T10626] EXT4-fs error (device loop2): __ext4_remount:6623: comm syz.2.2187: Abort forced by user [ 326.069115][T10626] EXT4-fs (loop2): Remounting filesystem read-only [ 326.133244][T10626] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 326.248957][T10657] loop4: detected capacity change from 0 to 128 [ 326.388013][ T4889] EXT4-fs (loop2): unmounting filesystem. [ 326.466832][ T4372] udevd[4372]: symlink '../../loop2' '/dev/disk/by-diskseq/625.tmp-b7:2' failed: Read-only file system [ 326.567650][ T8684] udevd[8684]: symlink '../../loop2' '/dev/disk/by-diskseq/625.tmp-b7:2' failed: Read-only file system [ 326.638569][ T8685] udevd[8685]: symlink '../../loop4' '/dev/disk/by-diskseq/627.tmp-b7:4' failed: Read-only file system [ 326.678616][ T8684] udevd[8684]: symlink '../../loop6' '/dev/disk/by-diskseq/626.tmp-b7:6' failed: Read-only file system [ 326.733513][ T8685] udevd[8685]: symlink '../../loop4' '/dev/disk/by-diskseq/627.tmp-b7:4' failed: Read-only file system [ 326.825780][ T8685] udevd[8685]: symlink '../../loop4' '/dev/disk/by-diskseq/627.tmp-b7:4' failed: Read-only file system [ 326.924545][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2208'. [ 326.987970][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-diskseq/626.tmp-b7:6' failed: Read-only file system [ 327.134140][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/628.tmp-b7:2' failed: Read-only file system [ 327.153352][ T4371] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 327.226753][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-diskseq/626.tmp-b7:6' failed: Read-only file system [ 327.367476][ T4371] usb 5-1: config 0 has an invalid interface number: 242 but max is 0 [ 327.368323][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/628.tmp-b7:2' failed: Read-only file system [ 327.387924][ T4371] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.409082][T10685] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2213'. [ 327.451975][ T4371] usb 5-1: config 0 has no interface number 0 [ 327.462647][ T4371] usb 5-1: config 0 interface 242 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 327.503222][ T4371] usb 5-1: config 0 interface 242 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 327.540311][ T4371] usb 5-1: config 0 interface 242 has no altsetting 0 [ 327.586890][ T4371] usb 5-1: New USB device found, idVendor=8b63, idProduct=6fac, bcdDevice=80.95 [ 327.599018][ T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 327.602300][T10687] device wlan0 entered promiscuous mode [ 327.614820][ T4371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.614848][ T4371] usb 5-1: Product: syz [ 327.627487][ T4371] usb 5-1: Manufacturer: syz [ 327.632156][ T4371] usb 5-1: SerialNumber: syz [ 327.639501][ T4371] usb 5-1: config 0 descriptor?? [ 327.655235][T10687] device macsec1 entered promiscuous mode [ 327.910213][ T26] usb 5-1: USB disconnect, device number 11 [ 328.232894][T10699] loop2: detected capacity change from 0 to 8192 [ 328.493290][ T26] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 328.515984][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 328.692230][ T26] usb 7-1: Using ep0 maxpacket: 8 [ 328.701291][ T26] usb 7-1: config 0 has an invalid interface number: 56 but max is 0 [ 328.720345][ T26] usb 7-1: config 0 has no interface number 0 [ 328.745803][ T26] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 328.763439][ T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.781908][ T26] usb 7-1: Product: syz [ 328.792090][ T26] usb 7-1: Manufacturer: syz [ 328.796929][ T26] usb 7-1: SerialNumber: syz [ 328.823578][ T26] usb 7-1: config 0 descriptor?? [ 329.038825][ T26] peak_usb 7-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 329.162160][T10727] Bluetooth: MGMT ver 1.22 [ 329.255775][ T26] peak_usb 7-1:0.56 can0: sending command failure: -22 [ 329.271269][ T26] peak_usb 7-1:0.56 can0: sending command failure: -22 [ 329.278945][ T26] peak_usb 7-1:0.56 can0: sending command failure: -22 [ 329.349110][ T26] peak_usb: probe of 7-1:0.56 failed with error -22 [ 329.502010][ T26] usb 7-1: USB disconnect, device number 6 [ 329.980128][T10717] loop2: detected capacity change from 0 to 40427 [ 330.053336][T10717] F2FS-fs (loop2): invalid crc value [ 330.110396][T10717] F2FS-fs (loop2): Found nat_bits in checkpoint [ 330.341558][T10717] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 330.376090][T10749] loop6: detected capacity change from 0 to 4096 [ 330.424218][T10749] ext4: Unknown parameter 'obj_user' [ 330.473234][ T4372] blk_print_req_error: 2 callbacks suppressed [ 330.473257][ T4372] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 330.531252][T10741] f2fs_ckpt-7:2: attempt to access beyond end of device [ 330.531252][T10741] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 331.001412][T10760] loop4: detected capacity change from 0 to 512 [ 331.070784][T10760] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 331.121806][T10762] netlink: 'syz.3.2247': attribute type 1 has an invalid length. [ 331.192675][T10760] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 331.253639][T10760] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.425246][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 331.479710][ T8685] udevd[8685]: symlink '../../loop4' '/dev/disk/by-diskseq/635.tmp-b7:4' failed: Read-only file system [ 331.573436][ T8685] udevd[8685]: symlink '../../loop4' '/dev/disk/by-diskseq/635.tmp-b7:4' failed: Read-only file system [ 331.612633][T10773] input: syz1 as /devices/virtual/input/input38 [ 331.710212][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/636.tmp-b7:2' failed: Read-only file system [ 331.911196][ T8685] udevd[8685]: symlink '../../loop4' '/dev/disk/by-diskseq/637.tmp-b7:4' failed: Read-only file system [ 332.064401][ T8684] udevd[8684]: symlink '../../loop6' '/dev/disk/by-diskseq/634.tmp-b7:6' failed: Read-only file system [ 332.142005][ T8684] udevd[8684]: symlink '../../loop4' '/dev/disk/by-diskseq/637.tmp-b7:4' failed: Read-only file system [ 332.220344][T10787] loop6: detected capacity change from 0 to 512 [ 332.244050][T10787] EXT4-fs: Ignoring removed orlov option [ 332.315036][T10787] EXT4-fs (loop6): orphan cleanup on readonly fs [ 332.363610][T10787] EXT4-fs error (device loop6): ext4_find_extent:900: inode #4: comm syz.6.2254: inode has invalid extent depth: 7 [ 332.406790][ T4372] udevd[4372]: symlink '../../loop4' '/dev/disk/by-diskseq/637.tmp-b7:4' failed: Read-only file system [ 332.420190][T10787] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=-117 [ 332.432848][ T8684] udevd[8684]: symlink '../../loop6' '/dev/disk/by-diskseq/638.tmp-b7:6' failed: Read-only file system [ 332.482528][T10787] EXT4-fs warning (device loop6): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 332.503569][T10787] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 332.510272][T10787] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 332.544469][T10787] EXT4-fs (loop6): unmounting filesystem. [ 332.640177][ T8684] udevd[8684]: symlink '../../loop6' '/dev/disk/by-diskseq/638.tmp-b7:6' failed: Read-only file system [ 332.761009][ T8684] udevd[8684]: symlink '../../loop6' '/dev/disk/by-diskseq/638.tmp-b7:6' failed: Read-only file system [ 332.984680][T10799] comedi comedi0: Minor 14 could not be opened [ 333.606730][T10793] loop4: detected capacity change from 0 to 32768 [ 333.696647][T10793] XFS (loop4): Mounting V5 Filesystem [ 333.725693][ T4397] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 333.872293][T10793] XFS (loop4): Ending clean mount [ 333.916021][ T4397] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 333.959603][ T4397] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.003451][ T4397] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 334.012580][ T4397] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.048911][ T4397] usb 7-1: config 0 descriptor?? [ 334.106069][ T4262] XFS (loop4): Unmounting Filesystem [ 334.519481][ T4397] isku 0003:1E7D:319C.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.6-1/input0 [ 334.784444][T10829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2268'. [ 334.959274][ T5886] usb 7-1: USB disconnect, device number 7 [ 335.003794][T10832] fido_id[10832]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 335.646542][T10843] loop4: detected capacity change from 0 to 512 [ 335.761202][T10843] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 335.773556][T10843] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.949412][T10843] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 336.028374][T10853] sctp: [Deprecated]: syz.6.2276 (pid 10853) Use of int in max_burst socket option deprecated. [ 336.028374][T10853] Use struct sctp_assoc_value instead [ 336.074986][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 336.580119][ T8684] udevd[8684]: symlink '../../loop6' '/dev/disk/by-diskseq/639.tmp-b7:6' failed: Read-only file system [ 336.680643][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/636.tmp-b7:2' failed: Read-only file system [ 336.739398][T10871] netlink: 'syz.6.2284': attribute type 3 has an invalid length. [ 336.755988][ T8685] udevd[8685]: symlink '../../loop4' '/dev/disk/by-diskseq/643.tmp-b7:4' failed: Read-only file system [ 336.949726][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/636.tmp-b7:2' failed: Read-only file system [ 336.986345][ T4372] udevd[4372]: symlink '../../loop6' '/dev/disk/by-diskseq/639.tmp-b7:6' failed: Read-only file system [ 337.069007][ T8685] udevd[8685]: symlink '../../loop4' '/dev/disk/by-diskseq/643.tmp-b7:4' failed: Read-only file system [ 337.141004][ T8685] udevd[8685]: symlink '../../loop5' '/dev/disk/by-diskseq/621.tmp-b7:5' failed: Read-only file system [ 337.271583][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-diskseq/639.tmp-b7:6' failed: Read-only file system [ 337.386642][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/636.tmp-b7:2' failed: Read-only file system [ 337.404625][T10896] loop6: detected capacity change from 0 to 64 [ 337.594496][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-diskseq/644.tmp-b7:6' failed: Read-only file system [ 338.063394][ T5886] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 338.295350][ T5886] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 338.330058][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.373352][ T5886] usb 3-1: Product: syz [ 338.377634][ T5886] usb 3-1: Manufacturer: syz [ 338.382270][ T5886] usb 3-1: SerialNumber: syz [ 338.419794][ T5886] usb 3-1: config 0 descriptor?? [ 338.687372][T10931] loop5: detected capacity change from 0 to 1024 [ 338.766061][T10931] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 338.859594][ T5886] airspy 3-1:0.0: Board ID: 00 [ 338.864707][ T5886] airspy 3-1:0.0: Firmware version: [ 339.073317][ T5578] EXT4-fs (loop5): unmounting filesystem. [ 339.264663][ T5886] airspy 3-1:0.0: usb_control_msg() failed -71 request 0e [ 339.313623][ T5886] airspy 3-1:0.0: Registered as swradio24 [ 339.319462][ T5886] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 339.384559][ T5886] usb 3-1: USB disconnect, device number 17 [ 339.403340][ T4264] Bluetooth: hci3: command 0x0406 tx timeout [ 339.632985][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2312'. [ 339.706985][T10953] netlink: 'syz.5.2312': attribute type 1 has an invalid length. [ 339.743232][T10953] netlink: 'syz.5.2312': attribute type 2 has an invalid length. [ 340.671341][T10938] loop6: detected capacity change from 0 to 40427 [ 340.740295][T10938] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x3ffff [ 340.798788][T10938] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x4 [ 340.858605][T10938] F2FS-fs (loop6): invalid crc value [ 340.904739][T10938] F2FS-fs (loop6): Found nat_bits in checkpoint [ 341.066672][T10938] F2FS-fs (loop6): Start checkpoint disabled! [ 341.146714][T10938] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 341.645923][ T4372] udevd[4372]: symlink '../../loop4' '/dev/disk/by-diskseq/643.tmp-b7:4' failed: Read-only file system [ 341.669160][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-diskseq/648.tmp-b7:6' failed: Read-only file system [ 341.738060][ T8684] udevd[8684]: symlink '../../loop5' '/dev/disk/by-diskseq/647.tmp-b7:5' failed: Read-only file system [ 341.752833][ T41] kworker/u4:2: attempt to access beyond end of device [ 341.752833][ T41] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 341.754983][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:6' failed: Read-only file system [ 341.828247][ T8684] udevd[8684]: symlink '../../loop2' '/dev/disk/by-diskseq/636.tmp-b7:2' failed: Read-only file system [ 341.994506][T11008] input: syz1 as /devices/virtual/input/input39 [ 342.022453][ T8684] udevd[8684]: symlink '../../loop5' '/dev/disk/by-diskseq/647.tmp-b7:5' failed: Read-only file system [ 342.084046][ T7329] udevd[7329]: symlink '../../loop2' '/dev/disk/by-diskseq/636.tmp-b7:2' failed: Read-only file system [ 342.128573][ T8684] udevd[8684]: symlink '../../loop6' '/dev/disk/by-diskseq/648.tmp-b7:6' failed: Read-only file system [ 342.177863][ T4372] udevd[4372]: symlink '../../loop4' '/dev/disk/by-diskseq/643.tmp-b7:4' failed: Read-only file system [ 342.227118][ T8684] udevd[8684]: symlink '../../loop6' '/dev/disk/by-diskseq/648.tmp-b7:6' failed: Read-only file system [ 342.594980][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2341'. [ 342.679639][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2341'. [ 342.788045][T11032] loop2: detected capacity change from 0 to 512 [ 342.795620][T11032] ext2: Unknown parameter 'euid<00000000000000000000' [ 342.835428][ T8685] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 342.993353][ T5812] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 343.193188][ T5812] usb 7-1: Using ep0 maxpacket: 32 [ 343.200376][ T5812] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 343.244183][ T5812] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 343.262878][T11038] xt_CT: No such helper "snmp" [ 343.313219][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.351790][ T5812] usb 7-1: Product: syz [ 343.361904][ T5812] usb 7-1: Manufacturer: syz [ 343.386347][ T5812] usb 7-1: SerialNumber: syz [ 343.398272][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2349'. [ 343.416606][ T5812] usb 7-1: config 0 descriptor?? [ 343.422826][T11031] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 343.443571][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2349'. [ 343.456140][ T5812] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input40 [ 343.515651][T11051] bridge0: port 3(vlan3) entered blocking state [ 343.573329][T11051] bridge0: port 3(vlan3) entered disabled state [ 343.779269][ T5885] usb 7-1: USB disconnect, device number 8 [ 343.779327][ C0] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 344.170898][T11064] loop5: detected capacity change from 0 to 8192 [ 344.200405][T11064] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 344.215199][T11064] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 344.225710][T11064] REISERFS (device loop5): using ordered data mode [ 344.232324][T11064] reiserfs: using flush barriers [ 344.240085][T11070] loop2: detected capacity change from 0 to 2048 [ 344.250187][T11064] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 344.267427][T11064] REISERFS (device loop5): checking transaction log (loop5) [ 344.297254][T11064] REISERFS (device loop5): Using r5 hash to sort names [ 344.343839][T11064] reiserfs: enabling write barrier flush mode [ 344.358827][T11064] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 344.397556][T11070] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 344.437967][T11064] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 344.449244][T11064] REISERFS (device loop5): Remounting filesystem read-only [ 344.457639][T11064] REISERFS error (device loop5): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 344.471240][T11064] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 344.487343][T11064] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 344.498329][T11064] REISERFS error (device loop5): zam-7001 reiserfs_find_entry: io error [ 344.513460][T11064] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 344.532129][T11070] EXT4-fs (loop2): shut down requested (0) [ 344.554590][T11064] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 344.619277][T11064] REISERFS error (device loop5): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 344.703304][T11064] REISERFS warning (device loop5): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 344.718920][T11084] loop6: detected capacity change from 0 to 512 [ 344.775493][T11084] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 344.814540][T11064] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 344.913370][T11064] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 344.953302][T11064] REISERFS (device loop5): Remounting filesystem read-only [ 344.968264][ T4889] EXT4-fs (loop2): unmounting filesystem. [ 344.986777][T11064] REISERFS error (device loop5): zam-7001 reiserfs_find_entry: io error [ 345.498980][T11100] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2366'. [ 346.247527][T11115] loop5: detected capacity change from 0 to 32768 [ 346.268604][T11115] [ 346.268604][T11115] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 346.268604][T11115] [ 346.291719][T11115] [ 346.291719][T11115] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 346.291719][T11115] [ 346.302942][T11115] [ 346.302942][T11115] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 346.302942][T11115] [ 346.313635][T11115] [ 346.313635][T11115] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 346.313635][T11115] [ 346.324213][T11115] [ 346.324213][T11115] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 346.324213][T11115] [ 346.341775][ T106] [ 346.341775][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 346.341775][ T106] [ 346.381963][ T5578] [ 346.381963][ T5578] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 346.381963][ T5578] [ 346.430957][ T5578] [ 346.430957][ T5578] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 346.430957][ T5578] [ 346.614266][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2379'. [ 346.639364][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2380'. [ 346.653423][ T8685] udevd[8685]: symlink '../../loop5' '/dev/disk/by-diskseq/658.tmp-b7:5' failed: Read-only file system [ 346.673530][T11128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2380'. [ 346.706466][T11128] bridge0: port 3(vlan4) entered blocking state [ 346.712211][ T8685] udevd[8685]: symlink '../../loop5' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:5' failed: Read-only file system [ 346.720944][T11128] bridge0: port 3(vlan4) entered disabled state [ 346.794155][ T4372] udevd[4372]: symlink '../../loop4' '/dev/disk/by-diskseq/643.tmp-b7:4' failed: Read-only file system [ 346.902003][ T4372] udevd[4372]: symlink '../../loop6' '/dev/disk/by-diskseq/656.tmp-b7:6' failed: Read-only file system [ 346.933378][ T5812] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 346.976966][ T4372] udevd[4372]: symlink '../../loop4' '/dev/disk/by-diskseq/643.tmp-b7:4' failed: Read-only file system [ 347.080254][ T4372] udevd[4372]: symlink '../../loop2' '/dev/disk/by-diskseq/655.tmp-b7:2' failed: Read-only file system [ 347.123432][ T5812] usb 6-1: Using ep0 maxpacket: 16 [ 347.130537][ T5812] usb 6-1: config 1 has an invalid interface number: 92 but max is 2 [ 347.154270][ T5812] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.166277][ T8685] udevd[8685]: symlink '../../loop5' '/dev/disk/by-diskseq/658.tmp-b7:5' failed: Read-only file system [ 347.187680][ T5812] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.209123][ T8685] udevd[8685]: symlink '../../loop5' '/dev/disk/by-diskseq/658.tmp-b7:5' failed: Read-only file system [ 347.220659][ T5812] usb 6-1: config 1 has no interface number 0 [ 347.230576][ T8684] udevd[8684]: symlink '../../loop6' '/dev/disk/by-diskseq/656.tmp-b7:6' failed: Read-only file system [ 347.242290][ T5812] usb 6-1: too many endpoints for config 1 interface 92 altsetting 1: 85, using maximum allowed: 30 [ 347.278882][ T8685] udevd[8685]: symlink '../../loop5' '/dev/disk/by-diskseq/658.tmp-b7:5' failed: Read-only file system [ 347.306764][ T5812] usb 6-1: config 1 interface 92 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 85 [ 347.340033][ T5812] usb 6-1: config 1 interface 92 has no altsetting 0 [ 347.368878][ T5812] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 347.395113][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.431170][ T5812] usb 6-1: Product: syz [ 347.439600][ T5812] usb 6-1: Manufacturer: syz [ 347.476744][ T5812] usb 6-1: SerialNumber: syz [ 347.734156][ T5812] usb 6-1: USB disconnect, device number 16 [ 348.166693][T11159] loop4: detected capacity change from 0 to 128 [ 348.236500][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2395'. [ 348.251454][T11161] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2395'. [ 348.273307][ T4371] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 348.412135][T11143] loop2: detected capacity change from 0 to 40427 [ 348.441666][T11143] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 348.468125][ T4371] usb 4-1: unable to get BOS descriptor or descriptor too short [ 348.470531][T11143] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 348.492333][T11163] loop6: detected capacity change from 0 to 2048 [ 348.498066][ T4371] usb 4-1: no configurations [ 348.517577][ T4371] usb 4-1: can't read configurations, error -22 [ 348.523285][T11143] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x3ffff [ 348.551799][T11143] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8 [ 348.590781][T11143] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6 [ 348.654000][T11163] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 348.668271][T11143] F2FS-fs (loop2): invalid crc value [ 348.725189][T11163] EXT4-fs (loop6): shut down requested (0) [ 348.732925][T11143] F2FS-fs (loop2): Found nat_bits in checkpoint [ 348.897697][ T8870] EXT4-fs (loop6): unmounting filesystem. [ 348.923474][ T26] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 348.932187][T11143] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 348.945316][T11143] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 349.082381][T11143] syz.2.2386: attempt to access beyond end of device [ 349.082381][T11143] loop2: rw=2049, sector=53248, nr_sectors = 24 limit=40427 [ 349.123302][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 349.131266][ T26] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 349.178550][ T26] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 349.218291][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.253225][ T26] usb 5-1: Product: syz [ 349.273291][ T26] usb 5-1: Manufacturer: syz [ 349.293215][ T26] usb 5-1: SerialNumber: syz [ 349.318360][ T26] usb 5-1: config 0 descriptor?? [ 349.337429][T11172] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 349.347759][ T4889] syz-executor: attempt to access beyond end of device [ 349.347759][ T4889] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 349.380591][ T26] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input41 [ 349.743416][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 349.752615][ T4371] usb 5-1: USB disconnect, device number 12 [ 350.281507][T11200] xt_CT: No such helper "snmp" [ 350.723254][T11196] loop6: detected capacity change from 0 to 32768 [ 350.841905][T11196] XFS (loop6): Mounting V5 Filesystem [ 350.961353][T11196] XFS (loop6): Ending clean mount [ 350.989215][T11196] XFS (loop6): Quotacheck needed: Please wait. [ 351.088039][T11196] XFS (loop6): Quotacheck: Done. [ 351.295959][ T8870] XFS (loop6): Unmounting Filesystem [ 351.679146][T11215] loop2: detected capacity change from 0 to 32768 [ 351.710375][T11215] XFS: ikeep mount option is deprecated. [ 351.745998][ T8684] udevd[8684]: symlink '../../loop4' '/dev/disk/by-diskseq/661.tmp-b7:4' failed: Read-only file system [ 351.779576][ T4372] udevd[4372]: symlink '../../loop6' '/dev/disk/by-diskseq/666.tmp-b7:6' failed: Read-only file system [ 351.840219][T11214] loop5: detected capacity change from 0 to 40427 [ 351.849223][T11215] XFS (loop2): Mounting V5 Filesystem [ 351.875201][ T4372] udevd[4372]: symlink '../../loop6' '/dev/disk/by-diskseq/666.tmp-b7:6' failed: Read-only file system [ 351.892772][T11214] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 351.921299][T11214] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 351.937252][T11214] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x3ffff [ 351.993810][T11214] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x1f8 [ 351.994527][ T4372] udevd[4372]: symlink '../../loop6' '/dev/disk/by-diskseq/668.tmp-b7:6' failed: Read-only file system [ 352.002069][T11214] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x6 [ 352.070839][T11214] F2FS-fs (loop5): invalid crc value [ 352.117348][T11215] XFS (loop2): Ending clean mount [ 352.136103][ T4698] udevd[4698]: symlink '../../loop4' '/dev/disk/by-diskseq/661.tmp-b7:4' failed: Read-only file system [ 352.148906][T11214] F2FS-fs (loop5): Found nat_bits in checkpoint [ 352.158984][T11215] XFS (loop2): Quotacheck needed: Please wait. [ 352.259452][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/667.tmp-b7:2' failed: Read-only file system [ 352.309401][T11215] XFS (loop2): Quotacheck: Done. [ 352.360336][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:2' failed: Read-only file system [ 352.408706][ T4372] udevd[4372]: symlink '../../loop6' '/dev/disk/by-diskseq/668.tmp-b7:6' failed: Read-only file system [ 352.440429][T11214] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 352.455724][T11214] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 352.501128][ T8684] udevd[8684]: symlink '../../loop5' '/dev/disk/by-diskseq/669.tmp-b7:5' failed: Read-only file system [ 352.551045][ T4372] udevd[4372]: symlink '../../loop4' '/dev/disk/by-diskseq/661.tmp-b7:4' failed: Read-only file system [ 352.769618][T11214] syz.5.2417: attempt to access beyond end of device [ 352.769618][T11214] loop5: rw=2049, sector=53248, nr_sectors = 24 limit=40427 [ 352.789221][ T4889] XFS (loop2): Unmounting Filesystem [ 352.870809][T11254] vivid-000: disconnect [ 352.921956][T11253] vivid-000: reconnect [ 352.999961][ T5578] syz-executor: attempt to access beyond end of device [ 352.999961][ T5578] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 354.339455][T11287] netlink: 'syz.3.2441': attribute type 1 has an invalid length. [ 354.404261][T11290] loop2: detected capacity change from 0 to 512 [ 354.535378][T11290] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 354.613961][T11299] block nbd1: server does not support multiple connections per device. [ 354.632737][T11299] block nbd1: shutting down sockets [ 354.910383][ T4889] EXT4-fs (loop2): unmounting filesystem. [ 355.336208][T11317] loop6: detected capacity change from 0 to 1024 [ 355.380407][T11315] dummy0 speed is unknown, defaulting to 1000 [ 355.612272][T11321] ax25_connect(): syz.4.2455 uses autobind, please contact jreuter@yaina.de [ 355.735712][T11298] loop5: detected capacity change from 0 to 32768 [ 355.782471][T11331] loop4: detected capacity change from 0 to 512 [ 355.800614][T11331] EXT4-fs: Ignoring removed oldalloc option [ 355.828467][T11331] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 355.862749][T11298] XFS (loop5): Mounting V5 Filesystem [ 355.928299][T11331] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 356.028717][T11331] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c02c, mo2=0102] [ 356.037146][T11331] System zones: 0-2, 18-18, 34-34 [ 356.044323][T11331] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.2457: iget: bad i_size value: 360287970189639680 [ 356.065142][ T4327] kernel read not supported for file /input/event1 (pid: 4327 comm: kworker/0:4) [ 356.150412][T11298] XFS (loop5): Ending clean mount [ 356.174642][T11298] XFS (loop5): Quotacheck needed: Please wait. [ 356.193675][T11331] EXT4-fs (loop4): Remounting filesystem read-only [ 356.200365][T11331] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2457: couldn't read orphan inode 15 (err -117) [ 356.251371][T11331] EXT4-fs (loop4): Remounting filesystem read-only [ 356.323155][T11331] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 356.343491][T11298] XFS (loop5): Quotacheck: Done. [ 356.393244][T11331] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2457: bg 0: block 80: padding at end of block bitmap is not set [ 356.433249][T11293] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 80: padding at end of block bitmap is not set [ 356.501572][T11293] EXT4-fs (loop4): Remounting filesystem read-only [ 356.513302][T11331] EXT4-fs (loop4): Remounting filesystem read-only [ 356.586442][ T5578] XFS (loop5): Unmounting Filesystem [ 356.633994][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 356.862345][ T8685] udevd[8685]: symlink '../../loop4' '/dev/disk/by-diskseq/678.tmp-b7:4' failed: Read-only file system [ 357.001040][ T8685] udevd[8685]: symlink '../../loop4' '/dev/disk/by-diskseq/678.tmp-b7:4' failed: Read-only file system [ 357.135912][T11344] loop6: detected capacity change from 0 to 40427 [ 357.173487][T11344] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x3ffff [ 357.203065][T11344] F2FS-fs (loop6): invalid crc value [ 357.229318][T11348] loop2: detected capacity change from 0 to 40427 [ 357.237829][T11344] F2FS-fs (loop6): Found nat_bits in checkpoint [ 357.247669][T11348] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 357.269240][T11348] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 357.319184][T11348] F2FS-fs (loop2): invalid crc value [ 357.353227][T11348] F2FS-fs (loop2): Found nat_bits in checkpoint [ 357.426449][T11344] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 357.502825][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-diskseq/679.tmp-b7:6' failed: Read-only file system [ 357.524045][T11348] F2FS-fs (loop2): Start checkpoint disabled! [ 357.541671][ T8684] udevd[8684]: symlink '../../loop2' '/dev/disk/by-diskseq/680.tmp-b7:2' failed: Read-only file system [ 357.573493][T11348] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 357.596721][ T7329] udevd[7329]: symlink '../../loop4' '/dev/disk/by-diskseq/678.tmp-b7:4' failed: Read-only file system [ 357.596934][ T8684] udevd[8684]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 357.630457][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:6' failed: Read-only file system [ 357.760060][ T8870] syz-executor: attempt to access beyond end of device [ 357.760060][ T8870] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 357.953528][ T4372] udevd[4372]: symlink '../../loop4' '/dev/disk/by-diskseq/678.tmp-b7:4' failed: Read-only file system [ 358.063839][ T11] kworker/u4:1: attempt to access beyond end of device [ 358.063839][ T11] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 358.090772][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-diskseq/679.tmp-b7:6' failed: Read-only file system [ 358.116434][ T4372] udevd[4372]: symlink '../../loop5' '/dev/disk/by-diskseq/676.tmp-b7:5' failed: Read-only file system [ 359.390463][T11389] loop2: detected capacity change from 0 to 512 [ 359.534486][T11389] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 359.545606][ T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 359.584479][T11389] ext4 filesystem being mounted at /442/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.738366][ T27] audit: type=1800 audit(1754395093.076:116): pid=11389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2478" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 359.818520][ T27] audit: type=1800 audit(1754395093.126:117): pid=11389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2478" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 359.895931][ T4889] EXT4-fs (loop2): unmounting filesystem. [ 359.915063][T11396] dummy0 speed is unknown, defaulting to 1000 [ 360.236878][T11385] loop6: detected capacity change from 0 to 40427 [ 360.268373][T11385] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x3ffff [ 360.295092][T11385] F2FS-fs (loop6): invalid crc value [ 360.331833][T11385] F2FS-fs (loop6): Found nat_bits in checkpoint [ 360.462963][T11385] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 360.646871][T11405] netlink: 'syz.2.2482': attribute type 1 has an invalid length. [ 360.679564][T11385] syz.6.2475: attempt to access beyond end of device [ 360.679564][T11385] loop6: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 360.776202][T11385] F2FS-fs (loop6) : inject slab alloc in f2fs_alloc_inode of new_inode_pseudo+0x5f/0x1c0 [ 361.015431][ T8870] syz-executor: attempt to access beyond end of device [ 361.015431][ T8870] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 361.302716][T11416] loop2: detected capacity change from 0 to 512 [ 361.396655][T11416] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 361.484808][T11416] EXT4-fs (loop2): 1 truncate cleaned up [ 361.510776][T11416] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 361.680674][ T4889] EXT4-fs (loop2): unmounting filesystem. [ 361.866790][ T4372] udevd[4372]: symlink '../../loop6' '/dev/disk/by-diskseq/688.tmp-b7:6' failed: Read-only file system [ 361.877409][ T8684] udevd[8684]: symlink '../../loop2' '/dev/disk/by-diskseq/689.tmp-b7:2' failed: Read-only file system [ 361.929769][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2492'. [ 361.959586][T11430] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2492'. [ 362.115911][ T8684] udevd[8684]: symlink '../../loop6' '/dev/disk/by-diskseq/688.tmp-b7:6' failed: Read-only file system [ 362.186956][ T8684] udevd[8684]: symlink '../../loop2' '/dev/disk/by-diskseq/689.tmp-b7:2' failed: Read-only file system [ 362.308976][ T8684] udevd[8684]: symlink '../../loop5' '/dev/disk/by-diskseq/681.tmp-b7:5' failed: Read-only file system [ 362.348259][T11440] loop2: detected capacity change from 0 to 512 [ 362.390911][T11440] EXT4-fs: Ignoring removed oldalloc option [ 362.423879][T11440] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 362.494371][T11440] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 362.499475][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/690.tmp-b7:2' failed: Read-only file system [ 362.515958][T11440] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c02c, mo2=0102] [ 362.527872][T11440] System zones: 0-2, 18-18, 34-34 [ 362.535218][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 362.561226][ T8684] udevd[8684]: symlink '../../loop5' '/dev/disk/by-diskseq/681.tmp-b7:5' failed: Read-only file system [ 362.582321][T11440] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.2496: iget: bad i_size value: 360287970189639680 [ 362.590615][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/690.tmp-b7:2' failed: Read-only file system [ 362.608488][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 362.628349][T11440] EXT4-fs (loop2): Remounting filesystem read-only [ 362.642946][T11440] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.2496: couldn't read orphan inode 15 (err -117) [ 362.664593][T11440] EXT4-fs (loop2): Remounting filesystem read-only [ 362.680684][T11440] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 362.761377][T11440] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2496: bg 0: block 80: padding at end of block bitmap is not set [ 362.798674][T11440] EXT4-fs (loop2): Remounting filesystem read-only [ 362.954728][ T4889] EXT4-fs (loop2): unmounting filesystem. [ 363.037693][T11452] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2501'. [ 364.092609][T11472] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2509'. [ 364.190918][T11473] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.2509'. [ 364.282854][T11476] loop5: detected capacity change from 0 to 1024 [ 364.304015][T11476] EXT4-fs: Ignoring removed orlov option [ 364.474187][T11476] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 364.514709][T11476] EXT4-fs error (device loop5): __ext4_remount:6623: comm syz.5.2510: Abort forced by user [ 364.575378][T11476] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 364.674109][ T5578] EXT4-fs (loop5): unmounting filesystem. [ 365.793267][ T4371] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 365.983287][ T4371] usb 4-1: Using ep0 maxpacket: 8 [ 365.991537][ T4371] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.023192][ T4371] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 366.032987][ T4371] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 366.083864][ T4371] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.118528][ T4371] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 366.138157][ T4371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.377431][ T4371] usb 4-1: GET_CAPABILITIES returned 0 [ 366.383264][ T4371] usbtmc 4-1:16.0: can't read capabilities [ 366.427826][T11510] loop5: detected capacity change from 0 to 32768 [ 366.570586][T11510] XFS (loop5): Mounting V5 Filesystem [ 366.593491][ T4371] usb 4-1: USB disconnect, device number 21 [ 366.712006][T11511] loop6: detected capacity change from 0 to 32768 [ 366.756144][T11529] netlink: 'syz.4.2526': attribute type 2 has an invalid length. [ 366.772427][T11510] XFS (loop5): Ending clean mount [ 366.790279][T11510] XFS (loop5): Quotacheck needed: Please wait. [ 366.832727][T11529] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2526'. [ 366.915244][T11511] XFS (loop6): Mounting V5 Filesystem [ 366.916628][T11510] XFS (loop5): Quotacheck: Done. [ 366.950872][ T4372] udevd[4372]: symlink '../../loop2' '/dev/disk/by-diskseq/691.tmp-b7:2' failed: Read-only file system [ 367.034143][T11545] loop4: detected capacity change from 0 to 256 [ 367.041428][T11545] exfat: Deprecated parameter 'namecase' [ 367.056644][ T8685] udevd[8685]: symlink '../../loop5' '/dev/disk/by-diskseq/694.tmp-b7:5' failed: Read-only file system [ 367.069704][ T8685] udevd[8685]: symlink '../../loop5' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:5' failed: Read-only file system [ 367.090920][T11545] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 367.180384][T11511] XFS (loop6): Ending clean mount [ 367.201833][ T27] audit: type=1804 audit(1754395100.536:118): pid=11545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2530" name="/newroot/515/file0/bus" dev="loop4" ino=1048667 res=1 errno=0 [ 367.228938][T11511] XFS (loop6): Quotacheck needed: Please wait. [ 367.249089][ T7329] udevd[7329]: symlink '../../loop2' '/dev/disk/by-diskseq/691.tmp-b7:2' failed: Read-only file system [ 367.312865][ T4372] udevd[4372]: symlink '../../loop4' '/dev/disk/by-diskseq/678.tmp-b7:4' failed: Read-only file system [ 367.387102][ T8684] udevd[8684]: symlink '../../loop6' '/dev/disk/by-diskseq/695.tmp-b7:6' failed: Read-only file system [ 367.422901][T11511] XFS (loop6): Quotacheck: Done. [ 367.439175][ T4372] udevd[4372]: symlink '../../loop4' '/dev/disk/by-uuid/1234-1234.tmp-b7:4' failed: Read-only file system [ 367.472847][ T5578] XFS (loop5): Unmounting Filesystem [ 367.487232][ T7329] udevd[7329]: symlink '../../loop2' '/dev/disk/by-diskseq/691.tmp-b7:2' failed: Read-only file system [ 367.495532][ T8684] udevd[8684]: symlink '../../loop6' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:6' failed: Read-only file system [ 367.590578][ T8685] udevd[8685]: symlink '../../loop5' '/dev/disk/by-diskseq/694.tmp-b7:5' failed: Read-only file system [ 367.616265][T11556] loop2: detected capacity change from 0 to 128 [ 367.705910][T11556] EXT4-fs: Ignoring removed nobh option [ 367.822462][T11556] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 367.823316][ T8870] XFS (loop6): Unmounting Filesystem [ 367.843669][T11556] ext4 filesystem being mounted at /459/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 368.162761][ T4889] EXT4-fs (loop2): unmounting filesystem. [ 369.623197][ T26] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 369.833311][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 369.847063][ T26] usb 5-1: unable to get BOS descriptor or descriptor too short [ 369.875028][ T26] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 369.913503][ T26] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 369.962045][ T26] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 369.987320][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.016000][ T26] usb 5-1: Product: syz [ 370.020264][ T26] usb 5-1: Manufacturer: syz [ 370.045517][ T26] usb 5-1: SerialNumber: syz [ 370.276374][ T26] cdc_ncm 5-1:1.0: bind() failure [ 370.295428][ T26] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 370.302395][ T26] cdc_ncm 5-1:1.1: bind() failure [ 370.328427][ T26] usb 5-1: USB disconnect, device number 13 [ 370.969771][T11611] tmpfs: Unknown parameter 'nolazytime?2JjU5)!@ >o' [ 371.480599][T11627] loop4: detected capacity change from 0 to 512 [ 371.554778][T11627] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 371.664503][T11627] EXT4-fs (loop4): 1 truncate cleaned up [ 371.690588][T11627] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 371.792498][T11627] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.2566: corrupted in-inode xattr [ 371.888701][T11627] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1732: inode #15: comm syz.4.2566: unable to update i_inline_off [ 371.956392][T11635] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.2566: corrupted in-inode xattr [ 372.030715][ T8684] udevd[8684]: symlink '../../loop5' '/dev/disk/by-diskseq/699.tmp-b7:5' failed: Read-only file system [ 372.219646][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 372.267810][ T8684] udevd[8684]: symlink '../../loop4' '/dev/disk/by-diskseq/702.tmp-b7:4' failed: Read-only file system [ 372.366330][ T8684] udevd[8684]: symlink '../../loop4' '/dev/disk/by-diskseq/702.tmp-b7:4' failed: Read-only file system [ 372.368545][ T4372] udevd[4372]: symlink '../../loop5' '/dev/disk/by-diskseq/699.tmp-b7:5' failed: Read-only file system [ 372.446163][ T8684] udevd[8684]: symlink '../../loop4' '/dev/disk/by-diskseq/703.tmp-b7:4' failed: Read-only file system [ 372.687976][T11628] loop2: detected capacity change from 0 to 32768 [ 372.705970][ T8684] udevd[8684]: symlink '../../loop4' '/dev/disk/by-diskseq/703.tmp-b7:4' failed: Read-only file system [ 372.850487][T11628] XFS (loop2): Mounting V5 Filesystem [ 372.857025][ T4372] udevd[4372]: symlink '../../loop5' '/dev/disk/by-diskseq/699.tmp-b7:5' failed: Read-only file system [ 372.956678][ T4372] udevd[4372]: symlink '../../loop4' '/dev/disk/by-diskseq/703.tmp-b7:4' failed: Read-only file system [ 373.094329][T11628] XFS (loop2): Ending clean mount [ 373.105940][T11628] XFS (loop2): Quotacheck needed: Please wait. [ 373.195278][ T4372] udevd[4372]: symlink '../../loop5' '/dev/disk/by-diskseq/699.tmp-b7:5' failed: Read-only file system [ 373.229862][T11628] XFS (loop2): Quotacheck: Done. [ 373.359307][ T8685] udevd[8685]: symlink '../../loop4' '/dev/disk/by-diskseq/703.tmp-b7:4' failed: Read-only file system [ 373.398949][ T4889] XFS (loop2): Unmounting Filesystem [ 373.455771][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.507687][T11673] device wlan0 entered promiscuous mode [ 373.581354][T11673] device macsec1 entered promiscuous mode [ 374.280207][T11691] netlink: 'syz.4.2591': attribute type 2 has an invalid length. [ 374.373301][ T4327] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 374.516513][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2594'. [ 374.546187][T11697] netlink: 'syz.4.2594': attribute type 6 has an invalid length. [ 374.573525][ T4327] usb 6-1: Using ep0 maxpacket: 8 [ 374.585718][ T4327] usb 6-1: config 0 has an invalid interface number: 56 but max is 0 [ 374.633410][ T4327] usb 6-1: config 0 has no interface number 0 [ 374.675009][ T4327] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 374.703938][ T4327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.711993][ T4327] usb 6-1: Product: syz [ 374.732018][ T4327] usb 6-1: Manufacturer: syz [ 374.742760][ T4327] usb 6-1: SerialNumber: syz [ 374.780449][ T4327] usb 6-1: config 0 descriptor?? [ 374.795692][T11704] loop4: detected capacity change from 0 to 512 [ 374.841196][T11704] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 374.983760][ T5886] kernel read not supported for file /video7 (pid: 5886 comm: kworker/1:18) [ 375.022239][ T4327] peak_usb 6-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 375.239664][ T4327] peak_usb 6-1:0.56 can0: sending command failure: -22 [ 375.253228][ T4327] peak_usb 6-1:0.56 can0: sending command failure: -22 [ 375.260230][ T4327] peak_usb 6-1:0.56 can0: sending command failure: -22 [ 375.353656][ T4327] peak_usb: probe of 6-1:0.56 failed with error -22 [ 375.504393][ T4327] usb 6-1: USB disconnect, device number 17 [ 375.582394][T11728] loop6: detected capacity change from 0 to 512 [ 375.642102][T11728] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 375.814660][T11728] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 375.867499][T11728] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.966503][ T8870] EXT4-fs (loop6): unmounting filesystem. [ 376.310157][T11744] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2612'. [ 376.763373][ T4371] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 376.967708][ T4371] usb 4-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7 [ 376.994144][ T4371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.002223][ T4371] usb 4-1: Product: syz [ 377.023206][ T4371] usb 4-1: Manufacturer: syz [ 377.027880][ T4371] usb 4-1: SerialNumber: syz [ 377.044687][ T4371] usb 4-1: config 0 descriptor?? [ 377.065472][ T4371] ldusb 4-1:0.0: Interrupt in endpoint not found [ 377.100106][ T8684] udevd[8684]: symlink '../../loop2' '/dev/disk/by-diskseq/705.tmp-b7:2' failed: Read-only file system [ 377.215908][ T8685] udevd[8685]: symlink '../../loop4' '/dev/disk/by-diskseq/707.tmp-b7:4' failed: Read-only file system [ 377.290750][ T4371] usb 4-1: USB disconnect, device number 22 [ 377.448373][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-diskseq/709.tmp-b7:6' failed: Read-only file system [ 377.566062][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/705.tmp-b7:2' failed: Read-only file system [ 377.623631][T11759] loop5: detected capacity change from 0 to 32768 [ 377.682277][ T8684] udevd[8684]: symlink '../../loop6' '/dev/disk/by-diskseq/709.tmp-b7:6' failed: Read-only file system [ 377.769556][ T8684] udevd[8684]: symlink '../../loop2' '/dev/disk/by-diskseq/705.tmp-b7:2' failed: Read-only file system [ 377.782729][T11759] XFS (loop5): Mounting V5 Filesystem [ 377.931397][T11759] XFS (loop5): Ending clean mount [ 377.976422][ T4372] udevd[4372]: symlink '../../loop2' '/dev/disk/by-diskseq/705.tmp-b7:2' failed: Read-only file system [ 378.044898][ T8685] udevd[8685]: symlink '../../loop5' '/dev/disk/by-diskseq/710.tmp-b7:5' failed: Read-only file system [ 378.094771][ T8685] udevd[8685]: symlink '../../loop5' '/dev/disk/by-uuid/986211a9-7d00-4ebf-a576-e3de63fa2cbd.tmp-b7:5' failed: Read-only file system [ 378.122029][ T4372] udevd[4372]: symlink '../../loop2' '/dev/disk/by-diskseq/705.tmp-b7:2' failed: Read-only file system [ 378.220745][ T5578] XFS (loop5): Unmounting Filesystem [ 378.295264][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.301714][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.834049][T11806] PKCS8: Unsupported PKCS#8 version [ 379.285232][T11821] loop4: detected capacity change from 0 to 64 [ 379.433417][ T5886] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 379.631624][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 379.663353][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.692142][ T5886] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 379.721717][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.751263][ T5886] usb 3-1: config 0 descriptor?? [ 380.089826][T11835] loop6: detected capacity change from 0 to 1024 [ 380.196312][ T5886] isku 0003:1E7D:319C.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 380.229837][T11835] gfs2: path_lookup on c::;NL;o$: returned error -2 [ 380.609593][ T5886] usb 3-1: USB disconnect, device number 18 [ 380.707047][T11840] fido_id[11840]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 381.425069][T11858] loop2: detected capacity change from 0 to 64 [ 381.606456][T11845] loop5: detected capacity change from 0 to 32768 [ 381.725158][T11845] XFS (loop5): Mounting V5 Filesystem [ 381.959705][T11845] XFS (loop5): Ending clean mount [ 381.985006][T11845] XFS (loop5): Quotacheck needed: Please wait. [ 382.100600][T11845] XFS (loop5): Quotacheck: Done. [ 382.110188][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-diskseq/715.tmp-b7:6' failed: Read-only file system [ 382.167694][ T8684] udevd[8684]: symlink '../../loop4' '/dev/disk/by-diskseq/713.tmp-b7:4' failed: Read-only file system [ 382.260199][ T5578] XFS (loop5): Unmounting Filesystem [ 382.397567][ T8684] udevd[8684]: symlink '../../loop6' '/dev/disk/by-diskseq/715.tmp-b7:6' failed: Read-only file system [ 382.415866][ T4372] udevd[4372]: symlink '../../loop4' '/dev/disk/by-diskseq/713.tmp-b7:4' failed: Read-only file system [ 382.654752][ T8684] udevd[8684]: symlink '../../loop4' '/dev/disk/by-diskseq/713.tmp-b7:4' failed: Read-only file system [ 382.760699][ T8684] udevd[8684]: symlink '../../loop2' '/dev/disk/by-diskseq/718.tmp-b7:2' failed: Read-only file system [ 382.866433][ T8684] udevd[8684]: symlink '../../loop4' '/dev/disk/by-diskseq/713.tmp-b7:4' failed: Read-only file system [ 382.949031][ T8684] udevd[8684]: symlink '../../loop2' '/dev/disk/by-diskseq/718.tmp-b7:2' failed: Read-only file system [ 383.090340][ T8684] udevd[8684]: symlink '../../loop4' '/dev/disk/by-diskseq/713.tmp-b7:4' failed: Read-only file system [ 383.266292][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/718.tmp-b7:2' failed: Read-only file system [ 384.013307][ T4397] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 384.216123][ T4397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.238869][ T4397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.259984][ T4397] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 384.287722][ T4397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.318175][ T4397] usb 3-1: config 0 descriptor?? [ 384.390127][T11909] loop6: detected capacity change from 0 to 32768 [ 384.481672][T11929] netlink: 165 bytes leftover after parsing attributes in process `syz.5.2690'. [ 384.562299][T11909] XFS (loop6): Mounting V5 Filesystem [ 384.755068][ T4397] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 384.761941][ T4397] pyra 0003:1E7D:2CF6.0017: item fetching failed at offset 6/7 [ 384.793823][ T4397] pyra 0003:1E7D:2CF6.0017: parse failed [ 384.799634][ T4397] pyra: probe of 0003:1E7D:2CF6.0017 failed with error -22 [ 384.905893][T11909] XFS (loop6): Ending clean mount [ 384.958660][ T5886] usb 3-1: USB disconnect, device number 19 [ 384.993255][T11909] XFS (loop6): Quotacheck needed: Please wait. [ 385.229139][T11909] XFS (loop6): Quotacheck: Done. [ 385.475238][ T8870] XFS (loop6): Unmounting Filesystem [ 385.612663][T11944] device vlan2 entered promiscuous mode [ 385.676036][T11944] device virt_wifi0 entered promiscuous mode [ 385.723720][T11944] team0: Port device vlan2 added [ 385.904517][T11952] loop5: detected capacity change from 0 to 1024 [ 385.936466][T11952] EXT4-fs: Ignoring removed nobh option [ 385.988589][T11955] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2701'. [ 386.031671][T11952] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #11: comm syz.5.2699: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 386.160853][T11961] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2703'. [ 386.193421][T11952] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2699: couldn't read orphan inode 11 (err -117) [ 386.245638][T11952] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 386.403662][T11952] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.2699: Invalid block bitmap block 0 in block_group 0 [ 386.533355][T11952] Quota error (device loop5): write_blk: dquota write failed [ 386.543275][T11952] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 386.591483][ T27] audit: type=1326 audit(1754395119.926:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11972 comm="syz.6.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab98eb69 code=0x7ffc0000 [ 386.598251][T11952] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.2699: Failed to acquire dquot type 0 [ 386.690512][ T27] audit: type=1326 audit(1754395119.956:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11972 comm="syz.6.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39ab98eb69 code=0x7ffc0000 [ 386.774312][ T27] audit: type=1326 audit(1754395119.956:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11972 comm="syz.6.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab98eb69 code=0x7ffc0000 [ 386.793472][T11969] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.2699: Invalid inode bitmap blk 137438953472 in block_group 0 [ 386.912436][ T27] audit: type=1326 audit(1754395119.956:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11972 comm="syz.6.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab98eb69 code=0x7ffc0000 [ 386.934862][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.023747][ T27] audit: type=1326 audit(1754395119.956:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11972 comm="syz.6.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39ab98eb69 code=0x7ffc0000 [ 387.115169][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-diskseq/722.tmp-b7:6' failed: Read-only file system [ 387.173365][ T27] audit: type=1326 audit(1754395120.006:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11972 comm="syz.6.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab98eb69 code=0x7ffc0000 [ 387.208192][ T75] EXT4-fs error (device loop5): __ext4_get_inode_loc:4507: comm kworker/u4:4: Invalid inode table block 8589934593 in block_group 0 [ 387.242434][ T5578] EXT4-fs (loop5): unmounting filesystem. [ 387.273206][ T27] audit: type=1326 audit(1754395120.026:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11972 comm="syz.6.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f39ab98eb69 code=0x7ffc0000 [ 387.321404][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/718.tmp-b7:2' failed: Read-only file system [ 387.368886][ T4372] udevd[4372]: symlink '../../loop5' '/dev/disk/by-diskseq/721.tmp-b7:5' failed: Read-only file system [ 387.384315][ T7329] udevd[7329]: symlink '../../loop6' '/dev/disk/by-diskseq/722.tmp-b7:6' failed: Read-only file system [ 387.433228][ T27] audit: type=1326 audit(1754395120.026:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11972 comm="syz.6.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab98eb69 code=0x7ffc0000 [ 387.466804][ T8685] udevd[8685]: symlink '../../loop5' '/dev/disk/by-diskseq/721.tmp-b7:5' failed: Read-only file system [ 387.525037][T11989] overlayfs: unrecognized mount option "\']*=MpS[{WhL9#$\1؄?~byB@F'" or missing value [ 387.601444][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/718.tmp-b7:2' failed: Read-only file system [ 387.755179][ T8684] udevd[8684]: symlink '../../loop5' '/dev/disk/by-diskseq/723.tmp-b7:5' failed: Read-only file system [ 387.793204][ T4371] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 387.826756][ T4372] udevd[4372]: symlink '../../loop2' '/dev/disk/by-diskseq/718.tmp-b7:2' failed: Read-only file system [ 387.878045][T11968] loop4: detected capacity change from 0 to 40427 [ 387.964800][T11968] F2FS-fs (loop4): Found nat_bits in checkpoint [ 387.973371][ T4371] usb 7-1: Using ep0 maxpacket: 32 [ 387.980498][ T4371] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.033252][ T4371] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.053400][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/718.tmp-b7:2' failed: Read-only file system [ 388.072434][ T4371] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 388.097583][ T4372] udevd[4372]: symlink '../../loop5' '/dev/disk/by-diskseq/723.tmp-b7:5' failed: Read-only file system [ 388.105708][ T4371] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.121468][T11968] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 388.170382][ T4371] usb 7-1: config 0 descriptor?? [ 388.201571][ T4371] hub 7-1:0.0: USB hub found [ 388.238178][T12004] loop2: detected capacity change from 0 to 2048 [ 388.258029][T11968] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 388.302872][T12004] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 388.408244][ T4371] hub 7-1:0.0: config failed, can't read hub descriptor (err -90) [ 388.557933][T11968] syz.4.2705: attempt to access beyond end of device [ 388.557933][T11968] loop4: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 388.864014][ T4371] hid-generic 0003:046D:C31C.0018: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 388.936261][ T4262] syz-executor: attempt to access beyond end of device [ 388.936261][ T4262] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 389.223578][ T26] usb 7-1: USB disconnect, device number 9 [ 389.232078][T12015] fido_id[12015]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 389.374158][T12023] loop5: detected capacity change from 0 to 1024 [ 389.478115][T12023] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 389.660994][T12021] loop2: detected capacity change from 0 to 32768 [ 389.714865][T12021] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2736 (12021) [ 389.750818][ T5578] EXT4-fs (loop5): unmounting filesystem. [ 389.773301][T12021] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 389.809658][T12021] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 389.835885][T12021] BTRFS info (device loop2): using free space tree [ 389.868974][T12032] overlayfs: unrecognized mount option "\']*=MpS[{WhL9#$\1؄?~byB@F'" or missing value [ 389.981403][T12037] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2730'. [ 390.313627][T12021] BTRFS info (device loop2): enabling ssd optimizations [ 390.669607][ T4353] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 391.139935][ T4397] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 391.166746][ T4889] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 391.335990][ T4397] usb 6-1: Using ep0 maxpacket: 32 [ 391.357222][ T4397] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.377587][ T4397] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.388561][ T4397] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 391.440667][ T4397] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.491874][ T4397] usb 6-1: config 0 descriptor?? [ 391.522191][ T4397] hub 6-1:0.0: USB hub found [ 391.557646][T12084] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2748'. [ 391.699113][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 391.734742][ T4397] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 392.153891][ T4397] hid-generic 0003:046D:C31C.0019: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 392.168304][ T4372] udevd[4372]: symlink '../../loop2' '/dev/disk/by-diskseq/731.tmp-b7:2' failed: Read-only file system [ 392.237407][ T7329] udevd[7329]: symlink '../../loop4' '/dev/disk/by-diskseq/727.tmp-b7:4' failed: Read-only file system [ 392.486583][ T8684] udevd[8684]: symlink '../../loop4' '/dev/disk/by-diskseq/727.tmp-b7:4' failed: Read-only file system [ 392.503879][ T4397] usb 6-1: USB disconnect, device number 18 [ 392.667073][ T8684] udevd[8684]: symlink '../../loop2' '/dev/disk/by-diskseq/731.tmp-b7:2' failed: Read-only file system [ 392.730693][ T4372] udevd[4372]: symlink '../../loop4' '/dev/disk/by-diskseq/727.tmp-b7:4' failed: Read-only file system [ 392.764247][T12106] loop2: detected capacity change from 0 to 6 [ 392.818107][T12106] Dev loop2: unable to read RDB block 6 [ 392.846543][T12106] loop2: unable to read partition table [ 392.849592][ T4372] udevd[4372]: symlink '../../loop6' '/dev/disk/by-diskseq/722.tmp-b7:6' failed: Read-only file system [ 392.852874][T12106] loop2: partition table beyond EOD, truncated [ 392.909849][T12106] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 392.945946][ T8684] udevd[8684]: symlink '../../loop2' '/dev/disk/by-diskseq/732.tmp-b7:2' failed: Read-only file system [ 392.972994][ T8685] udevd[8685]: symlink '../../loop5' '/dev/disk/by-diskseq/730.tmp-b7:5' failed: Read-only file system [ 393.062016][ T8684] udevd[8684]: symlink '../../loop2' '/dev/disk/by-diskseq/732.tmp-b7:2' failed: Read-only file system [ 393.141111][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/732.tmp-b7:2' failed: Read-only file system [ 393.566525][ T5886] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 393.776934][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.833142][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.879873][ T5886] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 393.920566][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.951856][ T5886] usb 6-1: config 0 descriptor?? [ 394.050596][T12110] loop4: detected capacity change from 0 to 32768 [ 394.113415][T12110] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 394.142862][T12110] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 394.205780][T12110] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 394.403908][ T5886] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 394.410801][ T5886] pyra 0003:1E7D:2CF6.001A: item fetching failed at offset 6/7 [ 394.436041][T12110] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 394.447731][ T5886] pyra 0003:1E7D:2CF6.001A: parse failed [ 394.474145][ T5886] pyra: probe of 0003:1E7D:2CF6.001A failed with error -22 [ 394.509967][T12135] loop6: detected capacity change from 0 to 512 [ 394.554573][T12135] EXT4-fs: Ignoring removed orlov option [ 394.614999][T12135] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 394.647478][ T5886] usb 6-1: USB disconnect, device number 19 [ 394.719948][T12135] EXT4-fs (loop6): 1 orphan inode deleted [ 394.744518][T12135] EXT4-fs (loop6): 1 truncate cleaned up [ 394.768261][T12135] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 394.932127][T12135] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.6.2770: path /199/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 394.954176][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.112877][T12135] EXT4-fs (loop6): Remounting filesystem read-only [ 395.318265][T12145] loop2: detected capacity change from 0 to 4096 [ 395.322152][ T8870] EXT4-fs (loop6): unmounting filesystem. [ 395.461163][T12145] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 395.472858][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2775'. [ 395.633207][T12145] EXT4-fs error (device loop2): ext4_get_first_dir_block:3603: inode #12: block 80: comm syz.2.2774: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 395.687549][T12145] EXT4-fs error (device loop2): ext4_get_first_dir_block:3605: inode #12: comm syz.2.2774: directory missing '..' [ 395.817520][T12160] loop6: detected capacity change from 0 to 4096 [ 395.909626][ T4889] EXT4-fs (loop2): unmounting filesystem. [ 395.956591][T12164] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 396.988040][T12192] loop2: detected capacity change from 0 to 1024 [ 396.992510][ T7796] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 397.042969][ T7] kernel write not supported for file /919/attr/sockcreate (pid: 7 comm: kworker/0:0) [ 397.053973][T12192] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 397.122862][T12192] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 397.215418][ T7796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.247128][ T7796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.286065][T12192] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 397.303350][ T7796] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 397.333011][ T7796] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.357351][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/742.tmp-b7:2' failed: Read-only file system [ 397.382098][ T7796] usb 7-1: config 0 descriptor?? [ 397.391064][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 397.452067][ T4889] EXT4-fs (loop2): unmounting filesystem. [ 397.517220][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/742.tmp-b7:2' failed: Read-only file system [ 397.586329][ T8685] udevd[8685]: symlink '../../loop2' '/dev/disk/by-diskseq/742.tmp-b7:2' failed: Read-only file system [ 397.768216][T12205] device veth0 entered promiscuous mode [ 397.798112][T12204] device veth0 left promiscuous mode [ 397.815739][ T7796] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 397.825961][ T8684] udevd[8684]: symlink '../../loop2' '/dev/disk/by-diskseq/743.tmp-b7:2' failed: Read-only file system [ 397.837822][ T7796] pyra 0003:1E7D:2CF6.001B: item fetching failed at offset 6/7 [ 397.868610][ T7796] pyra 0003:1E7D:2CF6.001B: parse failed [ 397.886783][ T7796] pyra: probe of 0003:1E7D:2CF6.001B failed with error -22 [ 398.028970][T12196] loop4: detected capacity change from 0 to 32768 [ 398.051936][ T7796] usb 7-1: USB disconnect, device number 10 [ 398.244026][ T8684] udevd[8684]: symlink '../../loop2' '/dev/disk/by-diskseq/743.tmp-b7:2' failed: Read-only file system [ 398.358150][T12212] loop2: detected capacity change from 0 to 4096 [ 398.368577][ T8685] udevd[8685]: symlink '../../loop4' '/dev/disk/by-diskseq/744.tmp-b7:4' failed: Read-only file system [ 398.422343][ T8685] udevd[8685]: symlink '../../loop4' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:4' failed: Read-only file system [ 398.449361][T12210] overlayfs: upper fs needs to support d_type. [ 398.466302][T12213] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 398.512224][T12210] overlayfs: upper fs does not support tmpfile. [ 398.539485][T12199] loop5: detected capacity change from 0 to 40427 [ 398.584022][T12210] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 398.674095][T12199] F2FS-fs (loop5): Found nat_bits in checkpoint [ 398.721475][ T7329] udevd[7329]: symlink '../../loop6' '/dev/disk/by-diskseq/741.tmp-b7:6' failed: Read-only file system [ 398.807738][ T8684] udevd[8684]: symlink '../../loop2' '/dev/disk/by-diskseq/745.tmp-b7:2' failed: Read-only file system [ 398.854644][T12199] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 398.953672][T12199] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 399.218885][T12199] syz.5.2795: attempt to access beyond end of device [ 399.218885][T12199] loop5: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 399.519818][ T5578] syz-executor: attempt to access beyond end of device [ 399.519818][ T5578] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 399.648541][T12239] device veth0 entered promiscuous mode [ 399.664734][T12238] device veth0 left promiscuous mode [ 400.162809][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.184590][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 400.184606][ T27] audit: type=1326 audit(1754395133.526:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.6.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab98eb69 code=0x7ffc0000 [ 400.294259][ T27] audit: type=1326 audit(1754395133.526:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.6.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f39ab98eb69 code=0x7ffc0000 [ 400.407682][ T27] audit: type=1326 audit(1754395133.526:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.6.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab98eb69 code=0x7ffc0000 [ 400.445663][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.479916][ T27] audit: type=1326 audit(1754395133.526:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.6.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab98eb69 code=0x7ffc0000 [ 400.510947][ T27] audit: type=1326 audit(1754395133.526:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.6.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f39ab98eb69 code=0x7ffc0000 [ 400.596994][ T27] audit: type=1326 audit(1754395133.576:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.6.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab98eb69 code=0x7ffc0000 [ 400.689245][ T27] audit: type=1326 audit(1754395133.576:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.6.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab98eb69 code=0x7ffc0000 [ 400.831781][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.003642][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.653231][ T4397] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 401.848063][ T4272] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 401.861955][ T4272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 401.881396][ T4272] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 401.883537][ T4397] usb 3-1: Using ep0 maxpacket: 32 [ 401.898211][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 401.906099][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 401.915710][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 401.962236][ T4397] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 401.972664][ T4397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.980774][ T4397] usb 3-1: Product: syz [ 401.985166][ T4397] usb 3-1: Manufacturer: syz [ 401.989796][ T4397] usb 3-1: SerialNumber: syz [ 402.003937][ T4397] usb 3-1: config 0 descriptor?? [ 402.032652][ T4397] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 402.346508][T12279] dummy0 speed is unknown, defaulting to 1000 [ 402.641373][ T8684] udevd[8684]: symlink '../../loop5' '/dev/disk/by-diskseq/749.tmp-b7:5' failed: Read-only file system [ 402.844901][ T4397] gspca_stk1135: reg_w 0x5 err -71 [ 402.855111][ T4397] gspca_stk1135: serial bus timeout: status=0x00 [ 402.885579][ T8684] udevd[8684]: symlink '../../loop5' '/dev/disk/by-diskseq/749.tmp-b7:5' failed: Read-only file system [ 402.899092][ T4397] gspca_stk1135: Sensor write failed [ 402.923964][ T4397] gspca_stk1135: serial bus timeout: status=0x00 [ 402.946655][ T8685] udevd[8685]: symlink '../../loop6' '/dev/disk/by-diskseq/741.tmp-b7:6' failed: Read-only file system [ 403.009912][ T4397] gspca_stk1135: Sensor write failed [ 403.044271][ T4397] gspca_stk1135: serial bus timeout: status=0x00 [ 403.097271][ T4397] gspca_stk1135: Sensor read failed [ 403.133051][ T4397] gspca_stk1135: serial bus timeout: status=0x00 [ 403.139764][ T4397] gspca_stk1135: Sensor read failed [ 403.173278][ T4397] gspca_stk1135: Detected sensor type unknown (0x0) [ 403.193505][ T4397] gspca_stk1135: serial bus timeout: status=0x00 [ 403.199899][ T4397] gspca_stk1135: Sensor read failed [ 403.217544][ T8684] udevd[8684]: symlink '../../loop5' '/dev/disk/by-diskseq/749.tmp-b7:5' failed: Read-only file system [ 403.249295][ T4397] gspca_stk1135: serial bus timeout: status=0x00 [ 403.273210][ T4397] gspca_stk1135: Sensor read failed [ 403.302290][ T4397] gspca_stk1135: serial bus timeout: status=0x00 [ 403.323296][ T4397] gspca_stk1135: Sensor write failed [ 403.328715][ T4397] gspca_stk1135: serial bus timeout: status=0x00 [ 403.343428][ T4397] gspca_stk1135: Sensor write failed [ 403.373445][ T4397] stk1135: probe of 3-1:0.0 failed with error -71 [ 403.424457][ T4397] usb 3-1: USB disconnect, device number 20 [ 403.527305][ T8684] udevd[8684]: symlink '../../loop2' '/dev/disk/by-diskseq/747.tmp-b7:2' failed: Read-only file system [ 403.568506][ T4372] udevd[4372]: symlink '../../loop5' '/dev/disk/by-diskseq/749.tmp-b7:5' failed: Read-only file system [ 403.794261][ T8684] udevd[8684]: symlink '../../loop5' '/dev/disk/by-diskseq/749.tmp-b7:5' failed: Read-only file system [ 403.810487][T12327] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.820864][T12327] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.829664][T12327] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.832508][ T4372] udevd[4372]: symlink '../../loop2' '/dev/disk/by-diskseq/747.tmp-b7:2' failed: Read-only file system [ 403.838505][T12327] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.928313][T12309] loop6: detected capacity change from 0 to 32768 [ 403.973552][ T4264] Bluetooth: hci2: command 0x0409 tx timeout [ 404.069410][T12309] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 404.071315][T12279] chnl_net:caif_netlink_parms(): no params data found [ 404.120934][T12309] (syz.6.2840,12309,0):ocfs2_remove_inode_range:1794 ERROR: status = -22 [ 404.173703][T12309] (syz.6.2840,12309,0):__ocfs2_change_file_space:2045 ERROR: status = -22 [ 404.180829][ T4372] udevd[4372]: symlink '../../loop2' '/dev/disk/by-diskseq/747.tmp-b7:2' failed: Read-only file system [ 404.328159][ T4372] udevd[4372]: symlink '../../loop5' '/dev/disk/by-diskseq/749.tmp-b7:5' failed: Read-only file system [ 404.399578][ T8870] ocfs2: Unmounting device (7,6) on (node local) [ 404.745777][T12355] loop5: detected capacity change from 0 to 512 [ 404.766705][T12355] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 404.850140][T12355] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 404.931566][T12355] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 404.985995][T12355] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 405.013177][T12355] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 405.024957][T12355] EXT4-fs (loop5): orphan cleanup on readonly fs [ 405.071816][T12355] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2855: bg 0: block 34: padding at end of block bitmap is not set [ 405.116983][T12355] Quota error (device loop5): write_blk: dquota write failed [ 405.125767][T12355] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 405.183999][T12355] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.2855: Failed to acquire dquot type 1 [ 405.263660][T12355] EXT4-fs (loop5): 1 truncate cleaned up [ 405.292888][T12355] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 405.321828][T12279] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.366349][T12279] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.395406][T12279] device bridge_slave_0 entered promiscuous mode [ 405.803338][ T26] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 405.932093][T12279] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.945086][T12279] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.979009][T12279] device bridge_slave_1 entered promiscuous mode [ 406.003183][ T26] usb 6-1: Using ep0 maxpacket: 32 [ 406.011478][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.048682][ T4264] Bluetooth: hci2: command 0x041b tx timeout [ 406.061735][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.084546][ T26] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 406.102493][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.112808][ T26] usb 6-1: config 0 descriptor?? [ 406.125793][ T26] hub 6-1:0.0: USB hub found [ 406.131265][ T11] device hsr_slave_0 left promiscuous mode [ 406.203009][ T11] device hsr_slave_1 left promiscuous mode [ 406.215743][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.264622][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.303829][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.327000][ T26] hub 6-1:0.0: 1 port detected [ 406.335662][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.389578][ T11] device bridge_slave_1 left promiscuous mode [ 406.432238][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.471991][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.479510][T12401] loop2: detected capacity change from 0 to 512 [ 406.538630][ T26] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 406.552076][T12401] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.2869: iget: bad extended attribute block 1 [ 406.586505][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 406.594689][ T26] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 406.606267][T12401] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.2869: couldn't read orphan inode 15 (err -117) [ 406.628658][T12401] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 406.664597][ T11] device team_slave_0 left promiscuous mode [ 406.667176][ T26] usbhid 6-1:0.0: can't add hid device: -71 [ 406.671319][ T11] device team_slave_1 left promiscuous mode [ 406.685018][ T11] device bridge0 left promiscuous mode [ 406.705511][ T11] device veth1_macvtap left promiscuous mode [ 406.711616][ T11] device veth0_macvtap left promiscuous mode [ 406.715593][ T26] usbhid: probe of 6-1:0.0 failed with error -71 [ 406.730306][ T11] device veth1_vlan left promiscuous mode [ 406.742616][ T11] device veth0_vlan left promiscuous mode [ 406.781038][ T4889] EXT4-fs (loop2): unmounting filesystem. [ 406.784172][ T26] usb 6-1: USB disconnect, device number 20 [ 407.148939][ T11] team0 (unregistering): Port device vlan2 removed [ 407.191289][ T5578] EXT4-fs (loop5): unmounting filesystem. [ 407.482583][T12412] loop5: detected capacity change from 0 to 2048 [ 407.563808][ T4353] wlan1: Trigger new scan to find an IBSS to join [ 407.597981][T12412] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 407.603204][ T4353] ------------[ cut here ]------------ [ 407.612780][ T4353] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x20 [ 407.624022][ T4353] WARNING: CPU: 1 PID: 4353 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 407.634310][ T4353] Modules linked in: [ 407.638246][ T4353] CPU: 1 PID: 4353 Comm: kworker/u4:7 Not tainted 6.1.147-syzkaller #0 [ 407.646674][ T4353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 407.656856][ T4353] Workqueue: events_unbound cfg80211_wiphy_work [ 407.658244][ T8685] udevd[8685]: symlink '../../loop5' '/dev/disk/by-diskseq/756.tmp-b7:5' failed: Read-only file system [ 407.663176][ T4353] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 407.663210][ T4353] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 40 5f a6 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 cb 54 b9 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 407.663228][ T4353] RSP: 0018:ffffc90004bbf400 EFLAGS: 00010246 [ 407.663249][ T4353] RAX: 287d8fcf1bfffe00 RBX: 000000000000000c RCX: ffff88802ab58000 [ 407.663264][ T4353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 407.663277][ T4353] RBP: 0000000000000084 R08: dffffc0000000000 R09: fffff52000977e21 [ 407.663291][ T4353] R10: fffff52000977e21 R11: 1ffff92000977e20 R12: 0000000000000020 [ 407.663305][ T4353] R13: dffffc0000000000 R14: ffff888057deb378 R15: ffff88805b319028 [ 407.663321][ T4353] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 407.663338][ T4353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.663353][ T4353] CR2: 00007f0e39798000 CR3: 000000007e609000 CR4: 00000000003506e0 [ 407.663373][ T4353] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 407.663386][ T4353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 407.663399][ T4353] Call Trace: [ 407.663407][ T4353] [ 407.663432][ T4353] rate_control_send_low+0x194/0x790 [ 407.663464][ T4353] rate_control_get_rate+0x207/0x5c0 [ 407.663497][ T4353] ieee80211_tx_h_rate_ctrl+0xb08/0x1730 [ 407.663550][ T4353] ? ieee80211_tx_h_select_key+0x15d0/0x15d0 [ 407.663587][ T4353] ? ieee80211_queue_skb+0xc6/0x20e0 [ 407.663615][ T4353] invoke_tx_handlers_late+0xb6/0x1810 [ 407.678085][ T8685] udevd[8685]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 407.680943][ T4353] ? ieee80211_tx_h_select_key+0x10ea/0x15d0 [ 407.680982][ T4353] ? invoke_tx_handlers_early+0xa11/0x1d40 [ 407.700580][ C1] vkms_vblank_simulate: vblank timer overrun [ 407.736933][ T8685] udevd[8685]: symlink '../../loop5' '/dev/disk/by-diskseq/756.tmp-b7:5' failed: Read-only file system [ 407.738883][ T4353] ieee80211_tx+0x2a9/0x410 [ 407.749245][ T8685] udevd[8685]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 407.755914][ T4353] ? ieee80211_skb_resize+0x630/0x630 [ 407.777828][ T8684] udevd[8684]: symlink '../../loop6' '/dev/disk/by-diskseq/751.tmp-b7:6' failed: Read-only file system [ 407.778613][ T4353] ? ieee80211_set_qos_hdr+0x1c6/0x510 [ 407.904237][ T4353] ? __bpf_trace_softirq+0x10/0x10 [ 407.909360][ T4353] ? ieee80211_xmit+0x30c/0x3f0 [ 407.914281][ T4353] ? __ieee80211_tx_skb_tid_band+0x48c/0x610 [ 407.920327][ T4353] __ieee80211_tx_skb_tid_band+0x4d1/0x610 [ 407.926167][ T4353] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 407.932541][ T4353] ieee80211_scan_state_send_probe+0x560/0x930 [ 407.938755][ T4353] ieee80211_scan_work+0x4d2/0x1bc0 [ 407.944035][ T4353] ? _raw_spin_lock_irq+0xab/0xe0 [ 407.949120][ T4353] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 407.954562][ T4353] cfg80211_wiphy_work+0x221/0x260 [ 407.959707][ T4353] ? process_one_work+0x7a1/0x1160 [ 407.965032][ T4353] process_one_work+0x898/0x1160 [ 407.969975][ T4353] ? worker_detach_from_pool+0x240/0x240 [ 407.975643][ T4353] ? _raw_spin_lock_irq+0xab/0xe0 [ 407.980758][ T4353] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 407.986165][ T4353] ? kthread_data+0x4b/0xc0 [ 407.990678][ T4353] worker_thread+0xaa2/0x1250 [ 407.995410][ T4353] kthread+0x29d/0x330 [ 407.999500][ T4353] ? worker_clr_flags+0x1a0/0x1a0 [ 408.004550][ T4353] ? kthread_blkcg+0xd0/0xd0 [ 408.009146][ T4353] ret_from_fork+0x1f/0x30 [ 408.013667][ T4353] [ 408.016726][ T4353] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 408.024019][ T4353] CPU: 1 PID: 4353 Comm: kworker/u4:7 Not tainted 6.1.147-syzkaller #0 [ 408.032235][ T4353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 408.042268][ T4353] Workqueue: events_unbound cfg80211_wiphy_work [ 408.048491][ T4353] Call Trace: [ 408.051758][ T4353] [ 408.054677][ T4353] dump_stack_lvl+0x168/0x22e [ 408.059337][ T4353] ? memcpy+0x3c/0x60 [ 408.063327][ T4353] ? show_regs_print_info+0x12/0x12 [ 408.068506][ T4353] ? load_image+0x3b0/0x3b0 [ 408.073004][ T4353] panic+0x2c9/0x710 [ 408.077055][ T4353] ? bpf_jit_dump+0xd0/0xd0 [ 408.081559][ T4353] ? ret_from_fork+0x1f/0x30 [ 408.086222][ T4353] __warn+0x2f8/0x4f0 [ 408.090186][ T4353] ? __rate_control_send_low+0x635/0x880 [ 408.095818][ T4353] ? __rate_control_send_low+0x635/0x880 [ 408.101429][ T4353] report_bug+0x2ba/0x4f0 [ 408.105735][ T4353] ? __rate_control_send_low+0x635/0x880 [ 408.111348][ T4353] handle_bug+0x3a/0x70 [ 408.115487][ T4353] exc_invalid_op+0x16/0x40 [ 408.119968][ T4353] asm_exc_invalid_op+0x16/0x20 [ 408.124816][ T4353] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 408.131046][ T4353] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 40 5f a6 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 cb 54 b9 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 408.150723][ T4353] RSP: 0018:ffffc90004bbf400 EFLAGS: 00010246 [ 408.156859][ T4353] RAX: 287d8fcf1bfffe00 RBX: 000000000000000c RCX: ffff88802ab58000 [ 408.164808][ T4353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 408.172848][ T4353] RBP: 0000000000000084 R08: dffffc0000000000 R09: fffff52000977e21 [ 408.181065][ T4353] R10: fffff52000977e21 R11: 1ffff92000977e20 R12: 0000000000000020 [ 408.189019][ T4353] R13: dffffc0000000000 R14: ffff888057deb378 R15: ffff88805b319028 [ 408.196987][ T4353] rate_control_send_low+0x194/0x790 [ 408.202259][ T4353] rate_control_get_rate+0x207/0x5c0 [ 408.207789][ T4353] ieee80211_tx_h_rate_ctrl+0xb08/0x1730 [ 408.213412][ T4353] ? ieee80211_tx_h_select_key+0x15d0/0x15d0 [ 408.219389][ T4353] ? ieee80211_queue_skb+0xc6/0x20e0 [ 408.224675][ T4353] invoke_tx_handlers_late+0xb6/0x1810 [ 408.230125][ T4353] ? ieee80211_tx_h_select_key+0x10ea/0x15d0 [ 408.236100][ T4353] ? invoke_tx_handlers_early+0xa11/0x1d40 [ 408.241893][ T4353] ieee80211_tx+0x2a9/0x410 [ 408.246380][ T4353] ? ieee80211_skb_resize+0x630/0x630 [ 408.251735][ T4353] ? ieee80211_set_qos_hdr+0x1c6/0x510 [ 408.257172][ T4353] ? __bpf_trace_softirq+0x10/0x10 [ 408.262367][ T4353] ? ieee80211_xmit+0x30c/0x3f0 [ 408.267198][ T4353] ? __ieee80211_tx_skb_tid_band+0x48c/0x610 [ 408.273184][ T4353] __ieee80211_tx_skb_tid_band+0x4d1/0x610 [ 408.279087][ T4353] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 408.285411][ T4353] ieee80211_scan_state_send_probe+0x560/0x930 [ 408.291573][ T4353] ieee80211_scan_work+0x4d2/0x1bc0 [ 408.296772][ T4353] ? _raw_spin_lock_irq+0xab/0xe0 [ 408.301779][ T4353] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 408.307144][ T4353] cfg80211_wiphy_work+0x221/0x260 [ 408.312248][ T4353] ? process_one_work+0x7a1/0x1160 [ 408.317352][ T4353] process_one_work+0x898/0x1160 [ 408.322303][ T4353] ? worker_detach_from_pool+0x240/0x240 [ 408.327920][ T4353] ? _raw_spin_lock_irq+0xab/0xe0 [ 408.332927][ T4353] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 408.338294][ T4353] ? kthread_data+0x4b/0xc0 [ 408.342785][ T4353] worker_thread+0xaa2/0x1250 [ 408.347476][ T4353] kthread+0x29d/0x330 [ 408.351526][ T4353] ? worker_clr_flags+0x1a0/0x1a0 [ 408.356535][ T4353] ? kthread_blkcg+0xd0/0xd0 [ 408.361107][ T4353] ret_from_fork+0x1f/0x30 [ 408.365518][ T4353] [ 408.368735][ T4353] Kernel Offset: disabled [ 408.373161][ T4353] Rebooting in 86400 seconds..