last executing test programs: 14.887953762s ago: executing program 0 (id=2701): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080083850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.620718264s ago: executing program 0 (id=2705): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) r0 = syz_open_dev$loop(&(0x7f0000000340), 0x8001, 0x101a00) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 14.620547044s ago: executing program 0 (id=2706): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r0, 0x10e, 0x4, 0x0, &(0x7f0000001f00)) 14.522737779s ago: executing program 0 (id=2708): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0xd}}, {@minixdf}, {@stripe={'stripe', 0x3d, 0xb74}}, {@resuid}, {@jqfmt_vfsv1}, {@grpjquota}, {@i_version}]}, 0x1, 0x4c7, &(0x7f0000000f00)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 13.692530448s ago: executing program 0 (id=2718): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000080)=0x12) 13.029144669s ago: executing program 0 (id=2723): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000006000a000200"], 0x28}}, 0x0) 12.8085307s ago: executing program 32 (id=2723): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000006000a000200"], 0x28}}, 0x0) 6.730518344s ago: executing program 2 (id=2774): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfffd, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1"], 0x0}, 0x0) 4.109064967s ago: executing program 2 (id=2795): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r0, &(0x7f0000000000), 0x10) 3.941932695s ago: executing program 2 (id=2798): unshare(0x22020400) r0 = memfd_create(&(0x7f0000000000)='\xf3\xd9\b\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84\x9d\x14Q\xa4=\xfa\x81\f\x1et\x10\x0e\xcf', 0x0) pwrite64(r0, &(0x7f0000000540)='/', 0x1, 0x7fffffffffffffff) 3.485286617s ago: executing program 2 (id=2801): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0xa3, 0x50000}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) 2.409888147s ago: executing program 4 (id=2810): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000280), 0x10) 2.296631712s ago: executing program 4 (id=2812): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000000), 0xfdef) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300, 0x0, 0x4a}, 0x0) 2.168579858s ago: executing program 2 (id=2814): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000006540)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYBLOB="665134ecfac9621bdd9f0d3c85f7f044fb9b61056494501f1b9bd08326df69b6a59a873a932b5d62e563eea7457b7248182065bc8be2d7f948c4d9e8f1987f25db9566bffd50774befc6477fe948ca12322ebcdce621fdae6f9756938d7902eabe21deaddc305bbb7dc3f32fd8447fe99f8481e34816ff645bc5771882f2471af71e3d105a5c2996145e072ea884d2e6d412b6d934a94f5aa6c585b6364339229b75eae2f6515fd05c57d692ec19558a83b1276fd9f666cf8bd8cf5b2239989248e3d6dfbab467b7c0fc8421dbf4", @ANYRES32, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES16], 0x1, 0x620d, &(0x7f0000000200)="$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") listxattr(&(0x7f00000001c0)='./file1\x00', 0x0, 0x13) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) 2.116192371s ago: executing program 4 (id=2815): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xffff}}, 0x9) 1.952168849s ago: executing program 4 (id=2817): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0x0, &(0x7f0000000600)=[0x7], 0x1, 0x0}) 1.830880884s ago: executing program 4 (id=2819): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 1.725089479s ago: executing program 1 (id=2820): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0xffffffff, 0x27dfdffd, {0xa, 0x0, 0x0, 0xff}}, 0x18}, 0x1, 0x0, 0x0, 0x620080d4}, 0x24080) 1.70646628s ago: executing program 4 (id=2821): syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1c802, &(0x7f00000022c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x1, 0x5f97, &(0x7f0000003040)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_mount_image$exfat(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1094c3, 0x0, 0x0, 0x0, &(0x7f0000000000)) 1.633326314s ago: executing program 1 (id=2822): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 1.529090448s ago: executing program 5 (id=2823): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/144, 0x90}, {&(0x7f0000002c80)=""/4150, 0x1036}, {&(0x7f0000000900)=""/225, 0xe1}, {&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000a80)=""/136, 0x88}], 0x8}, 0x10102) 1.487489631s ago: executing program 1 (id=2824): unshare(0x22020400) r0 = memfd_create(&(0x7f0000000000)='\xf3\xd9\b\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84\x9d\x14Q\xa4=\xfa\x81\f\x1et\x10\x0e\xcf', 0x0) pwrite64(r0, &(0x7f0000000540)='/', 0x1, 0x7fffffffffffffff) 1.361525296s ago: executing program 1 (id=2825): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000040)={0xb6, 0x0, 0x100000001}) 1.300537649s ago: executing program 5 (id=2826): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="00fb1d0aaef4b769fc3fb5aa3decb84c4cd8249e036321a59d9937a73dda6d93546aefa51e4a8115f9e83b20b0ccd486a700e2fbd9ab1af29aa30f2907"], 0x1, 0x5d3, &(0x7f00000006c0)="$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") setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) 1.193115704s ago: executing program 3 (id=2827): r0 = fsopen(&(0x7f0000000500)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) 1.134181437s ago: executing program 1 (id=2828): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file1\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {&(0x7f0000000340)=[0x6], 0x1, 0x8, 0x1, 0x2}, {&(0x7f00000004c0)=[{0x400, 0x6, 0x1, 0x7f, 0xd}], 0x1, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x9, 0xffff}}) 939.589516ms ago: executing program 5 (id=2829): syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb88a8410081000e0008"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 939.509596ms ago: executing program 3 (id=2830): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000003c0)=0x200000000) 808.725372ms ago: executing program 3 (id=2831): r0 = socket$inet(0x2, 0x1, 0x0) listen(r0, 0x7) listen(r0, 0x2) 593.051262ms ago: executing program 3 (id=2832): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 550.743064ms ago: executing program 5 (id=2833): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000005c0), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104eef606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000340)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f525c24533658551c3091cb88d3b", 0x4f}, {&(0x7f0000000600)="088d85d1f409000a3164ae439862807a158983661a6d2341f7", 0x19}, {&(0x7f0000000040)="df3b46a13300"/16, 0x10}, {&(0x7f0000001480)="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", 0xeb6}], 0x5}, 0x40000) 381.975472ms ago: executing program 1 (id=2834): setreuid(0xee01, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001180)="5500000018007f5f00fe01b2a4a2809302060000ff00f005020500120a0007003500281014000000190005407f0a4c6d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x8880) 303.176286ms ago: executing program 5 (id=2835): unshare(0x22020400) r0 = memfd_create(&(0x7f0000000000)='\xf3\xd9\b\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84\x9d\x14Q\xa4=\xfa\x81\f\x1et\x10\x0e\xcf', 0x0) pwrite64(r0, &(0x7f0000000540)='/', 0x1, 0x7fffffffffffffff) 210.81977ms ago: executing program 3 (id=2836): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x3}, [], {}, [], {0x10, 0x5}}, 0x24, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) 186.249601ms ago: executing program 5 (id=2837): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='./bus\x00', 0xa00004, &(0x7f00000000c0)={[{@rootdir={'rootdir', 0x3d, 0x2}}, {@lastblock={'lastblock', 0x3d, 0x7}}, {@unhide}, {}, {@undelete}, {@dmode={'dmode', 0x3d, 0x8f9a}}, {@uid_ignore}, {@nostrict}, {@uid_ignore}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@undelete}, {@uid_ignore}, {@dmode={'dmode', 0x3d, 0x4}}, {@uid}]}, 0x5, 0xc8f, &(0x7f0000001440)="$eJzs3U9sHNd9OPDvG5LiSv79YiZOFSeNg01bpDJjufoXU7YKd1XTbAPIshCKuQXgSqTUhSmSIKlGNtyW6aWHHgIURQ85EW2FAikaGE0R9Mi0LpBcfChy6oloYSMoemCLAAFapFvM7FtxRZHWH1IU5Xw+NvXdnXlv5v1ZzVAEv/MCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIj4zVfPHjuettjR9wgaAwDsifPjXzl2Yqv7PwDwkXVxu3//AwAAAAAAAAAAAAAA+0WKIp6KFPPn19Nk9b6jdq41cP3GxOjY1tUOpqpmX1W+/KodP3Hy1JdeGDndjedasx9Sf7d9Jl4fv3i2/srctfmF6cXF6an6xGzr8tzU9D0fYaf1NxuuBqB+7Y3rU1euLNZPPH/ytt03hj4YfOLw0JmRZ48+0y07MTo2Nr5RpNZbvv+BG9KxXYbHgSjiaKR47js/Ts2IKGLnY1Hb27nf7GDVieGqExOjY1VHZlrN2aVy54XuQBQR9Z5Kje4YbT0X0T+wp33YXiNiuWx+2eDhsnvj882F5qWZ6fqF5sJSa6k1N3shdVpb9qceRZxOESsRsTZ45+EGooj+SPGtJ9fTpfzUj2ocvlglBm/fjuIh9vEelO2sD0SsFI/BnO1jg1HEa5HiJ+8eicv5OlNda74Q8VoZvxdxs4wvR6Tyg3Eq4v0tPkc8nvqjiD8u5//Mepqqrgfd68q5r9a/PHtlrqds97pyn/eHO64Ue3B/+PMtth3cFPfGPr821aKIZnXFX08P/s0OAAAAAAAAAAAAAAAAALvtYBTx6Ujx6j//bpVXHFVe+pNnRn5r6P/35ow/fZfjlGWfj4jl4t5ycg/kxMAL6UJKPRmCO81z5/7Uoojfy/l/33jUjQEAAAAAAAAAAAAAAAAAAPi5VsSPIsVL7x1JK9G7pnhr9mr9YvPSTGdV2O7av90109vtdrueOrGR42SOyzmu5Lia41qOUeT6OTZynMxxOceVTvxY93xreXv05fo5NnKczHE5x5UcV3NcyzH6c/0cGzlO5ric40qOqzmu5Rj7ZO1eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICPkiKK+Fmk+ObX11OkiGhETEYnrg4+6tYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKXBVMR3I0X9txu3tvVHRKr+7zhS/nEqGgfK+IlojJTx5WiczbFZxf7GNx5B+9mZgVTEDyPFYO2dWxOe53+g8+7WxyBuvr3x7jP9ndjX3Tn0weATh588MzL2uae3e522asBwitnrN+oTo2Nj4z2b+/PZP9GzbSift9idrhMRi2++9UZzZmZ64cFflB+BB6zenckdnH0vX6T+R9zU/90Hg3B/L2K5M8P7pT339yL6H93ZH/Xfi9uvE7W9vjCxJ8r7//uR4tfe+5fuDb9z/6/F/+u8u3WHj5/+/sb9/6XNB7rH+3//5nrD51rl/b+8E2x1/3+qZ9tL+buRgf6I2tK1+YHDEbXFN9862rrWvDp9dXr21LFjL46MvHjy2MCBiNqV1sx0z6tdGS4AAAAAAAAAAAAAAACAvZOK+I1I0fzheqpHxI0qX2vozMizR5/pi74q3+q2vO3Xxy+erb8yd21+YXpxcXqqPjHbujw3NX2vp6tV6V4To2MPpTN3dfAht/9g7ZW5+TcXWld/Z2nL/YdqZy8tLi00L2+9Ow5GEdHo3TJcNXhidKxq9EyrOVtVvbBlMv39G0hF/GukuHyqnj6ft+X8/80Z/nHz7RdvfRaWNx/ogfP/O/l/vfn/nzu0kf/38Z6i5TlTKuKnkeJX/+Tp+HzVzkNxx5jlcn8ZKYZPfzaXiwNluW4bOs8V6GQGlmX/M1L87c9uL9vNh3xqo+zx+xrcx0A5/09Giu/+0bfjl/K225//0Dv/G+N3aPOBdnH+oyf/85M92w7d9ryCHXedPP9HI8XLT70Tv1xt+e8Pff5H94kNRzqFN57P8ZDm/xd6tg3l8/7KbnUeAAAAAAAAAADgMTaQivirSPH9sf70Qt52L7//N7X5QA/p978+1bNtanfWK7rrix0PKgAAAADsEwOpiB9FiqtL79zKob49/7sn//PXN/I/R9OmvdXP+T5WPTdgN3/+12son3dy590GAAAAAAAAAAAAAAAAAACAfSWlIl7I66lPVvn8U9uup74aKV799+dyuXS4LNddB36o+rN2fm726NmZmblaLDUvzUzXx+ebl6fLup+MFOt/8dlct6jWV++uN99Z431jLfaFSDH2192ynbXYu2uTd9YDr7XbEcfLsh+PFP/2N7eXzUtT57Wjq+OeKMv+WaT42t9vXfbwRtmTZdlvR4offK3eLXuoLNt9PuqnNso+f3mueAizAgAAAAAAAAAAAAAAAAAAwM+bgVTEH0aK/7i2ciuXP6//P9DztnLz7Z71/je5Ua3zP1St/7/d6wdZ/796rsByp2bfLvQXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBymKeCtSzJ9fT6uD5fuO2rnW7PUbE6NjW1c7mKqafVX58qt2/MTJU196YeR0N354/d326Xh9/OLZ+itz1+YXphcXp6fqE7Oty3NT0/d8hJ3W32y4GoD6tTeuT125slg/8fzJ23bfGPpg8InDQ2dGnj36TLfsxOjY2HhPmf6BBz77HdI22w9EEX8aKZ77zo/T9wcjitj5WNzls/OwHaw6MVx1YmJ0rOrITKs5u1TuvNAdiCKi3lOp0R2ju87F/7Tb7b3qyhYaEctl88sGD5fdG59vLjQvzUzXLzQXllpLrbnZC6nT2rI/9SjidIpYiYi1wTsPNxBFvBEpvvXkevqHwYi+7jh88fz4V46d2L4dxUPs4z0o21kfiFgp7mXO2M5gFPF3keIn7x6JfxyM6I/OV3wh4rUyfi/iZnTmO5UfjFMR72/xOeLx1B9F/Fc5/2fW07uD5fWge10599X6l2evzPWU7V5Xdnh/aLfbf1DGR3d/2Ev7/NpUiyJ+UF3x19M/+XsNAAAAAAAAAAAAAAAAsI8U8YuR4qX3jqQqP/hWTnFr9mr9YvPSTCetr5v7182Zbrfb7XrqxEaOkzku57iS42qOazlGkevn2Chjrd2ezO+Xc1zJcTXHtRyjL9fvq9IV2438fjLH5RxXclzNcS3H6M/1c2zkOJnjco4rOa7muJZj7JPcPQAAAAAAAAAAAAAAAAAA4KOlqP5L8c2vr6f2YGd96cnoxFXrgX7k/V8AAAD//77y8pI=") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 40.202658ms ago: executing program 3 (id=2838): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@fragment={0x5e, 0x0, 0x7e, 0x0, 0x0, 0x5, 0x64}, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0) 0s ago: executing program 2 (id=2839): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x300, 0x7, 0x1, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6]}) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x4, 0x2710, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): city change from 0 to 64 [ 235.123953][ T9387] rock: sig=0x66, size=4, remaining=3 [ 235.145049][ T9387] rock: directory entry would overflow storage [ 235.153826][ T9387] rock: sig=0x66, size=4, remaining=3 [ 235.166898][ T9387] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 235.208414][ T8774] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 59, changing to 4 [ 235.408706][ T8774] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 235.436440][ T8774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.458258][ T8774] usb 4-1: Product: syz [ 235.462475][ T8774] usb 4-1: Manufacturer: syz [ 235.487484][ T8774] usb 4-1: SerialNumber: syz [ 235.636909][ T9408] netlink: 'syz.0.1980': attribute type 29 has an invalid length. [ 235.654346][ T9408] netlink: 'syz.0.1980': attribute type 29 has an invalid length. [ 235.674998][ T9402] netlink: 'syz.0.1980': attribute type 29 has an invalid length. [ 235.745633][ T9412] loop1: detected capacity change from 0 to 64 [ 235.906544][ T9422] loop0: detected capacity change from 0 to 1024 [ 235.945793][ T9418] loop4: detected capacity change from 0 to 2048 [ 236.025389][ T9422] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 236.109388][ T9418] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.111462][ T9432] loop2: detected capacity change from 0 to 256 [ 236.128291][ T9418] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.248528][ T9430] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 236.284807][ T9430] REISERFS (device loop1): using ordered data mode [ 236.293213][ T9430] reiserfs: using flush barriers [ 236.300644][ T9430] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 236.336529][ T9430] REISERFS (device loop1): checking transaction log (loop1) [ 236.338793][ T8774] usb 4-1: USB disconnect, device number 17 [ 236.498665][ T9432] FAT-fs (loop2): Directory bread(block 64) failed [ 236.505840][ T9432] FAT-fs (loop2): Directory bread(block 65) failed [ 236.569230][ T9432] FAT-fs (loop2): Directory bread(block 66) failed [ 236.575833][ T9432] FAT-fs (loop2): Directory bread(block 67) failed [ 236.594790][ T9432] FAT-fs (loop2): Directory bread(block 68) failed [ 236.607573][ T9432] FAT-fs (loop2): Directory bread(block 69) failed [ 236.623185][ T9432] FAT-fs (loop2): Directory bread(block 70) failed [ 236.654427][ T9432] FAT-fs (loop2): Directory bread(block 71) failed [ 236.685899][ T9432] FAT-fs (loop2): Directory bread(block 72) failed [ 236.701070][ T9432] FAT-fs (loop2): Directory bread(block 73) failed [ 236.735428][ T9430] REISERFS (device loop1): Using tea hash to sort names [ 236.770513][ T9449] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.782932][ T9430] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 236.865363][ T9445] attempt to access beyond end of device [ 236.865363][ T9445] loop0: rw=0, want=5780, limit=1024 [ 236.894340][ T4453] udevd[4453]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:0' failed: Read-only file system [ 236.913011][ T4455] udevd[4455]: symlink '../../loop4' '/dev/disk/by-diskseq/840.tmp-b7:4' failed: Read-only file system [ 236.929593][ T4175] udevd[4175]: symlink '../../loop3' '/dev/disk/by-diskseq/820.tmp-b7:3' failed: Read-only file system [ 236.942312][ T4453] udevd[4453]: symlink '../../loop0' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:0' failed: Read-only file system [ 237.016789][ T4179] udevd[4179]: symlink '../../loop2' '/dev/disk/by-diskseq/836.tmp-b7:2' failed: Read-only file system [ 237.036497][ T9455] sp0: Synchronizing with TNC [ 237.046767][ T4455] udevd[4455]: symlink '../../loop4' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:4' failed: Read-only file system [ 237.063765][ T4178] udevd[4178]: symlink '../../loop0' '/dev/disk/by-diskseq/841.tmp-b7:0' failed: Read-only file system [ 237.137624][ T4178] udevd[4178]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:0' failed: Read-only file system [ 237.154230][ T4452] udevd[4452]: symlink '../../loop1' '/dev/disk/by-diskseq/837.tmp-b7:1' failed: Read-only file system [ 237.188846][ T4178] udevd[4178]: symlink '../../loop0' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:0' failed: Read-only file system [ 237.479813][ T9470] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 237.479851][ T9470] hpfs: filesystem error: improperly stopped [ 237.479868][ T9470] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 237.479885][ T9470] hpfs: You really don't want any checks? You are crazy... [ 237.479898][ T9470] hpfs: Code page index out of array [ 237.479907][ T9470] hpfs: code page support is disabled [ 237.479963][ T9470] hpfs: hpfs_map_4sectors(): unaligned read [ 237.479999][ T9470] hpfs: hpfs_map_4sectors(): unaligned read [ 237.480009][ T9470] hpfs: filesystem error: unable to find root dir [ 237.488795][ T4174] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 237.596857][ T9472] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 237.617832][ T9472] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 237.617859][ T9472] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 237.617876][ T9472] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 237.623984][ T9472] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 237.625070][ T9472] EXT4-fs (loop1): orphan cleanup on readonly fs [ 237.635975][ T9472] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2007: bg 0: block 34: padding at end of block bitmap is not set [ 237.728187][ T4174] usb 5-1: Using ep0 maxpacket: 32 [ 237.773168][ T9472] Quota error (device loop1): write_blk: dquota write failed [ 237.781444][ T9472] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 237.791751][ T9472] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.2007: Failed to acquire dquot type 1 [ 237.824037][ T9472] EXT4-fs (loop1): 1 truncate cleaned up [ 237.834693][ T9472] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,bsddf,nodiscard,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,errors=continue,nouid32,nodiscard,abort,usrjquota=,lazytime,,errors=continue. Quota mode: writeback. [ 237.878595][ T4174] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 237.886731][ T4174] usb 5-1: config 0 has no interface number 0 [ 238.088369][ T4174] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 238.097504][ T4174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.141054][ T4174] usb 5-1: Product: syz [ 238.168299][ T4174] usb 5-1: Manufacturer: syz [ 238.179827][ T4174] usb 5-1: SerialNumber: syz [ 238.210081][ T4174] usb 5-1: config 0 descriptor?? [ 238.249899][ T4174] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 238.263126][ T9485] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.503986][ T4174] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 238.550724][ T4174] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 238.712472][ T9507] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 238.768161][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 238.775237][ T9507] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.968129][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 238.988604][ T5061] usb 5-1: USB disconnect, device number 22 [ 239.003923][ T5061] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 239.019758][ T5061] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 239.035327][ T5061] quatech2 5-1:0.51: device disconnected [ 239.041148][ T9516] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 239.113918][ T9496] set_capacity_and_notify: 9 callbacks suppressed [ 239.113934][ T9496] loop2: detected capacity change from 0 to 32768 [ 239.196921][ T9496] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2021 (9496) [ 239.202462][ T9516] ntfs3: loop1: ino=5, "/" directory corrupted [ 239.244767][ T9516] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 239.256963][ T9496] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 239.274928][ T9496] BTRFS warning (device loop2): excessive commit interval 3581 [ 239.303993][ T9496] BTRFS info (device loop2): force zlib compression, level 3 [ 239.338090][ T9496] BTRFS info (device loop2): metadata ratio 107050 [ 239.377049][ T9496] BTRFS info (device loop2): turning on flush-on-commit [ 239.409444][ T9496] BTRFS info (device loop2): max_inline at 4096 [ 239.437475][ T9496] BTRFS info (device loop2): using free space tree [ 239.453522][ T9496] BTRFS info (device loop2): has skinny extents [ 239.667013][ T9496] BTRFS info (device loop2): enabling ssd optimizations [ 239.884529][ T9559] loop0: detected capacity change from 0 to 164 [ 239.904765][ T5061] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 240.308544][ T5061] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 240.328807][ T5061] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 240.375614][ T5061] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 240.402358][ T5061] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 240.419519][ T5061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.454044][ T5061] usb 5-1: config 0 descriptor?? [ 240.508573][ T9551] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 240.567174][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2053'. [ 240.600423][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2053'. [ 240.617718][ T9584] netlink: 'syz.3.2053': attribute type 1 has an invalid length. [ 240.634547][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2053'. [ 240.724744][ T9590] iwpm_parse_nlmsg: Invalid attribute (msg type Register Pid response ret = -22) [ 240.970716][ T5061] hid-thrustmaster 0003:044F:B65D.002E: ignoring exceeding usage max [ 240.980878][ T5061] hid-thrustmaster 0003:044F:B65D.002E: unknown main item tag 0x4 [ 241.015030][ T5061] hid-thrustmaster 0003:044F:B65D.002E: hidraw0: USB HID v0.01 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 241.146768][ T9614] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 241.179745][ T5061] hid-thrustmaster 0003:044F:B65D.002E: setup data couldn't be sent [ 241.198119][ C0] hid-thrustmaster 0003:044F:B65D.002E: URB to get model id failed with error -71 [ 241.214161][ T5061] usb 5-1: USB disconnect, device number 23 [ 241.365828][ T9619] fido_id[9619]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 241.540122][ T9570] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 241.608918][ T9636] loop0: detected capacity change from 0 to 256 [ 241.787893][ T9644] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2082'. [ 241.937341][ T4178] udevd[4178]: symlink '../../loop0' '/dev/disk/by-diskseq/863.tmp-b7:0' failed: Read-only file system [ 241.937361][ T4455] udevd[4455]: symlink '../../loop4' '/dev/disk/by-diskseq/842.tmp-b7:4' failed: Read-only file system [ 241.978797][ T9570] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.989393][ T4453] udevd[4453]: symlink '../../loop2' '/dev/disk/by-diskseq/861.tmp-b7:2' failed: Read-only file system [ 242.015356][ T9570] usb 2-1: config 0 interface 0 has no altsetting 0 [ 242.031267][ T9570] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 242.068259][ T9570] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.092616][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-diskseq/842.tmp-b7:4' failed: Read-only file system [ 242.110200][ T4455] udevd[4455]: symlink '../../loop2' '/dev/disk/by-diskseq/861.tmp-b7:2' failed: Read-only file system [ 242.117432][ T9570] usb 2-1: config 0 descriptor?? [ 242.125465][ T4453] udevd[4453]: symlink '../../loop0' '/dev/disk/by-diskseq/863.tmp-b7:0' failed: Read-only file system [ 242.176439][ T9664] sp0: Synchronizing with TNC [ 242.194789][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-diskseq/842.tmp-b7:4' failed: Read-only file system [ 242.237616][ T4455] udevd[4455]: symlink '../../loop2' '/dev/disk/by-diskseq/861.tmp-b7:2' failed: Read-only file system [ 242.323397][ T4178] udevd[4178]: symlink '../../loop2' '/dev/disk/by-diskseq/861.tmp-b7:2' failed: Read-only file system [ 242.361452][ T4455] udevd[4455]: symlink '../../loop0' '/dev/disk/by-diskseq/863.tmp-b7:0' failed: Read-only file system [ 242.451913][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2100'. [ 242.459338][ T4174] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 242.525728][ T9685] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2102'. [ 242.652274][ T9570] input: HID 13ec:0006 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:13EC:0006.002F/input/input38 [ 242.654280][ T9691] loop2: detected capacity change from 0 to 1024 [ 242.698439][ T9570] zydacron 0003:13EC:0006.002F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.1-1/input0 [ 242.749352][ T9697] genirq: Flags mismatch irq 31. 00000000 (pcmmio) vs. 00000000 (virtio1-input.0) [ 242.838426][ T4174] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.871026][ T4174] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 242.896999][ T4174] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 242.918174][ T4174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.979984][ T4174] usb 5-1: config 0 descriptor?? [ 243.026116][ T9702] loop3: detected capacity change from 0 to 4096 [ 243.026538][ T4412] usb 2-1: USB disconnect, device number 21 [ 243.050364][ T4174] gspca_main: spca561-2.14.0 probing abcd:cdee [ 243.101374][ T9703] fido_id[9703]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 243.115745][ T9706] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.385666][ T9719] loop0: detected capacity change from 0 to 2048 [ 243.588407][ T9731] loop3: detected capacity change from 0 to 2048 [ 243.736673][ T9731] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 243.784860][ T9737] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.828439][ T4412] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 243.860628][ T9719] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 243.908662][ T4174] spca561: probe of 5-1:0.0 failed with error -22 [ 243.924910][ T4174] usb 5-1: USB disconnect, device number 24 [ 244.012862][ T9740] device macsec0 entered promiscuous mode [ 244.047513][ T9740] device macsec0 left promiscuous mode [ 244.164758][ T9746] loop0: detected capacity change from 0 to 64 [ 244.213777][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2128'. [ 244.238395][ T4412] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 244.273616][ T4412] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 244.325535][ T9753] X.509: Got cert with pkey (16) and sig (15) algorithm OIDs [ 244.468771][ T4412] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 244.498822][ T4412] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.548384][ T4412] usb 2-1: Product: syz [ 244.557258][ T4412] usb 2-1: Manufacturer: syz [ 244.578152][ T4412] usb 2-1: SerialNumber: syz [ 244.601319][ T4412] usb 2-1: config 0 descriptor?? [ 244.633016][ T9767] netlink: 'syz.3.2137': attribute type 3 has an invalid length. [ 244.663510][ T9767] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2137'. [ 244.815898][ T9776] loop3: detected capacity change from 0 to 256 [ 244.824160][ T9777] loop2: detected capacity change from 0 to 256 [ 244.838301][ T5105] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 244.860692][ T9570] usb 2-1: USB disconnect, device number 22 [ 244.878861][ T9776] exfat: Deprecated parameter 'utf8' [ 244.884215][ T9776] exfat: Deprecated parameter 'utf8' [ 244.938940][ T9779] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 244.948760][ T9776] exfat: Deprecated parameter 'namecase' [ 244.954444][ T9776] exfat: Deprecated parameter 'namecase' [ 245.036778][ T9776] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d) [ 245.258451][ T5105] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 245.288105][ T5105] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.323321][ T5105] usb 1-1: config 0 descriptor?? [ 245.335641][ T9796] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2151'. [ 245.379322][ T5105] cp210x 1-1:0.0: cp210x converter detected [ 245.426965][ T9802] ip_tables: iptables: counters copy to user failed while replacing table [ 245.437622][ T9800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2154'. [ 245.519514][ T9798] loop3: detected capacity change from 0 to 8192 [ 245.545026][ T9806] loop2: detected capacity change from 0 to 64 [ 245.638341][ T9798] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 245.647617][ T9798] REISERFS (device loop3): using ordered data mode [ 245.675529][ T9811] loop4: detected capacity change from 0 to 128 [ 245.691946][ T9798] reiserfs: using flush barriers [ 245.698247][ T9798] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 245.715392][ T9798] REISERFS (device loop3): checking transaction log (loop3) [ 245.724850][ T9811] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 245.748688][ T9811] hpfs: filesystem error: improperly stopped [ 245.755966][ T9811] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 245.767713][ T9811] hpfs: You really don't want any checks? You are crazy... [ 245.775399][ T9811] hpfs: Code page index out of array [ 245.780941][ T9811] hpfs: code page support is disabled [ 245.786823][ T9811] hpfs: hpfs_map_4sectors(): unaligned read [ 245.804822][ T9811] hpfs: hpfs_map_4sectors(): unaligned read [ 245.811176][ T9811] hpfs: filesystem error: unable to find root dir [ 245.824106][ T9811] hpfs: hpfs_map_4sectors(): unaligned read [ 245.826268][ T5105] usb 1-1: cp210x converter now attached to ttyUSB0 [ 246.061990][ T4412] usb 1-1: USB disconnect, device number 17 [ 246.082331][ T4412] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 246.121754][ T9798] REISERFS (device loop3): Using tea hash to sort names [ 246.122535][ T4412] cp210x 1-1:0.0: device disconnected [ 246.165713][ T9798] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 246.806118][ T9850] loop0: detected capacity change from 0 to 1764 [ 246.919829][ T9856] loop2: detected capacity change from 0 to 2048 [ 246.949114][ T9860] loop1: detected capacity change from 0 to 128 [ 247.017623][ T9856] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.040561][ T9860] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 247.049688][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2176'. [ 247.059917][ T9862] loop3: detected capacity change from 0 to 2048 [ 247.083383][ T9860] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.109604][ T9862] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 247.168741][ T9865] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.196579][ T4455] udevd[4455]: symlink '../../loop0' '/dev/disk/by-diskseq/884.tmp-b7:0' failed: Read-only file system [ 247.209927][ T4178] udevd[4178]: symlink '../../loop1' '/dev/disk/by-diskseq/858.tmp-b7:1' failed: Read-only file system [ 247.315577][ T4455] udevd[4455]: symlink '../../loop0' '/dev/disk/by-diskseq/884.tmp-b7:0' failed: Read-only file system [ 247.323393][ T4453] udevd[4453]: symlink '../../loop3' '/dev/disk/by-diskseq/883.tmp-b7:3' failed: Read-only file system [ 247.349845][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-diskseq/885.tmp-b7:2' failed: Read-only file system [ 247.354795][ T4453] udevd[4453]: symlink '../../loop3' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:3' failed: Read-only file system [ 247.379049][ T4455] udevd[4455]: symlink '../../loop0' '/dev/disk/by-diskseq/884.tmp-b7:0' failed: Read-only file system [ 247.396944][ T4178] udevd[4178]: symlink '../../loop1' '/dev/disk/by-diskseq/858.tmp-b7:1' failed: Read-only file system [ 247.413163][ T4455] udevd[4455]: symlink '../../loop0' '/dev/disk/by-diskseq/884.tmp-b7:0' failed: Read-only file system [ 247.439559][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-label/LinuxUDF.tmp-b7:2' failed: Read-only file system [ 247.477207][ T9837] XFS (loop4): Mounting V5 Filesystem [ 247.607893][ T9873] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 247.632640][ T9873] REISERFS (device loop1): using ordered data mode [ 247.640394][ T9873] reiserfs: using flush barriers [ 247.682620][ T9873] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 247.703477][ T9837] XFS (loop4): Ending clean mount [ 247.706036][ T9873] REISERFS (device loop1): checking transaction log (loop1) [ 247.718016][ T9873] REISERFS (device loop1): Using r5 hash to sort names [ 247.725348][ T9873] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 247.775252][ T9890] erofs: (device loop2): mounted with root inode @ nid 36. [ 247.861427][ T9890] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 83 of nid 36 [ 247.888259][ T4412] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 247.918269][ T9890] erofs: (device loop2): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 247.962467][ T9890] attempt to access beyond end of device [ 247.962467][ T9890] loop2: rw=524288, want=32, limit=16 [ 248.019952][ T4195] XFS (loop4): Unmounting Filesystem [ 248.149397][ T4412] usb 4-1: Using ep0 maxpacket: 16 [ 248.271871][ T4412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.304344][ T4412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.336131][ T4412] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 248.340692][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2196'. [ 248.374236][ T4412] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 248.379536][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2196'. [ 248.392739][ T9903] netlink: 'syz.2.2196': attribute type 18 has an invalid length. [ 248.405005][ T4412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.436554][ T4412] usb 4-1: config 0 descriptor?? [ 248.525157][ T9892] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2190 (9892) [ 248.595732][ T9892] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 248.607105][ T9892] BTRFS info (device loop0): setting nodatasum [ 248.634130][ T9892] BTRFS info (device loop0): force zlib compression, level 3 [ 248.642282][ T9892] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 248.658707][ T9892] BTRFS info (device loop0): use lzo compression, level 0 [ 248.665878][ T9892] BTRFS info (device loop0): turning on flush-on-commit [ 248.724350][ T9892] BTRFS info (device loop0): enabling auto defrag [ 248.778230][ T9892] BTRFS info (device loop0): max_inline at 4096 [ 248.784553][ T9892] BTRFS info (device loop0): using free space tree [ 248.816536][ T9892] BTRFS info (device loop0): has skinny extents [ 248.944157][ T4412] microsoft 0003:045E:07DA.0030: No inputs registered, leaving [ 248.988504][ T4412] microsoft 0003:045E:07DA.0030: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 249.065130][ T9937] erofs: (device loop2): mounted with root inode @ nid 36. [ 249.088696][ T4412] microsoft 0003:045E:07DA.0030: no inputs found [ 249.104061][ T4412] microsoft 0003:045E:07DA.0030: could not initialize ff, continuing anyway [ 249.108251][ T9905] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.2197 (9905) [ 249.144859][ T4412] usb 4-1: USB disconnect, device number 18 [ 249.281157][ T9942] fido_id[9942]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 249.322188][ T9892] BTRFS info (device loop0): enabling ssd optimizations [ 249.395587][ T4175] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (4175) [ 249.610965][ T9951] set_capacity_and_notify: 6 callbacks suppressed [ 249.610982][ T9951] loop1: detected capacity change from 0 to 1024 [ 249.794633][ T9956] overlayfs: unrecognized mount option "\t access off=176 size=4 [ 249.794633][ T9956] verification time 224 usec [ 249.794633][ T9956] stack depth 0 [ 249.794633][ T9956] processed 2 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 249.794633][ T9956] " or missing value [ 249.953834][ T9915] loop4: detected capacity change from 0 to 40427 [ 250.007317][ T9915] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 250.068186][ T9915] F2FS-fs (loop4): invalid crc value [ 250.108711][ T9915] F2FS-fs (loop4): Found nat_bits in checkpoint [ 250.330333][ T9915] F2FS-fs (loop4): recover fsync data on readonly fs [ 250.337333][ T9915] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 250.385016][ T9915] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 250.428667][ T9915] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 250.694286][ T9976] ip_tables: iptables: counters copy to user failed while replacing table [ 250.824321][ T9978] loop3: detected capacity change from 0 to 8 [ 250.824710][ T9954] loop2: detected capacity change from 0 to 32768 [ 250.990171][ T9982] loop4: detected capacity change from 0 to 64 [ 251.002270][ T9954] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 251.079609][ T9960] loop1: detected capacity change from 0 to 32768 [ 251.119049][ T9960] XFS: attr2 mount option is deprecated. [ 251.179941][ T9969] loop0: detected capacity change from 0 to 32768 [ 251.255636][ T4193] ocfs2: Unmounting device (7,2) on (node local) [ 251.258236][ T9969] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2217 (9969) [ 251.368462][ T9960] XFS (loop1): Mounting V5 Filesystem [ 251.399911][ T9997] loop2: detected capacity change from 0 to 512 [ 251.420697][ T9969] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 251.459068][ T9969] BTRFS warning (device loop0): excessive commit interval 3581 [ 251.466904][ T9969] BTRFS info (device loop0): force zlib compression, level 3 [ 251.475343][ T9969] BTRFS info (device loop0): metadata ratio 107050 [ 251.482305][ T9969] BTRFS info (device loop0): turning on flush-on-commit [ 251.491448][ T9969] BTRFS info (device loop0): max_inline at 4096 [ 251.491774][T10002] loop4: detected capacity change from 0 to 1024 [ 251.497949][ T9969] BTRFS info (device loop0): using free space tree [ 251.508315][ T9997] EXT4-fs (loop2): 1 truncate cleaned up [ 251.511528][ T9969] BTRFS info (device loop0): has skinny extents [ 251.525143][ T9997] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,nodioread_nolock,,errors=continue. Quota mode: none. [ 251.552254][ T9960] XFS (loop1): Ending clean mount [ 251.642933][ T9997] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2226: bg 0: block 465: padding at end of block bitmap is not set [ 251.671386][ T9997] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 251.709812][ T4259] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 251.718932][ T4185] XFS (loop1): Unmounting Filesystem [ 251.775196][ T9997] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2226: invalid indirect mapped block 234881024 (level 0) [ 251.795603][T10002] attempt to access beyond end of device [ 251.795603][T10002] loop4: rw=0, want=655362, limit=1024 [ 251.838454][T10002] Buffer I/O error on dev loop4, logical block 327680, async page read [ 251.846987][T10002] hfsplus: unable to mark blocks free: error -5 [ 251.853373][T10002] hfsplus: can't free extent [ 251.929330][ T9969] BTRFS info (device loop0): enabling ssd optimizations [ 252.136177][ T4259] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 252.175824][ T4259] usb 4-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.202488][ T4455] udevd[4455]: symlink '../../loop2' '/dev/disk/by-diskseq/919.tmp-b7:2' failed: Read-only file system [ 252.218130][ T4259] usb 4-1: config 0 interface 0 has no altsetting 0 [ 252.224793][ T4259] usb 4-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 252.241266][ T4259] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.282312][ T4259] usb 4-1: config 0 descriptor?? [ 252.346513][ T4178] udevd[4178]: symlink '../../loop0' '/dev/disk/by-diskseq/913.tmp-b7:0' failed: Read-only file system [ 252.400466][ T4455] udevd[4455]: symlink '../../loop1' '/dev/disk/by-diskseq/912.tmp-b7:1' failed: Read-only file system [ 252.432752][ T4178] udevd[4178]: symlink '../../loop0' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:0' failed: Read-only file system [ 252.435456][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-diskseq/919.tmp-b7:2' failed: Read-only file system [ 252.462211][T10036] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.516837][ T4455] udevd[4455]: symlink '../../loop1' '/dev/disk/by-diskseq/912.tmp-b7:1' failed: Read-only file system [ 252.563962][ T4175] udevd[4175]: symlink '../../loop4' '/dev/disk/by-diskseq/918.tmp-b7:4' failed: Read-only file system [ 252.586594][ T4452] udevd[4452]: symlink '../../loop2' '/dev/disk/by-diskseq/919.tmp-b7:2' failed: Read-only file system [ 252.697652][ T4455] udevd[4455]: symlink '../../loop1' '/dev/disk/by-diskseq/920.tmp-b7:1' failed: Read-only file system [ 252.706464][ T4175] udevd[4175]: symlink '../../loop4' '/dev/disk/by-diskseq/918.tmp-b7:4' failed: Read-only file system [ 252.800154][ T4259] wacom 0003:056A:00B5.0031: Unknown device_type for 'HID 056a:00b5'. Assuming pen. [ 252.847419][ T4259] wacom 0003:056A:00B5.0031: hidraw0: USB HID v10.01 Device [HID 056a:00b5] on usb-dummy_hcd.3-1/input0 [ 252.902164][ T4259] input: Wacom Intuos3 6x11 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B5.0031/input/input40 [ 252.945999][T10049] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2230'. [ 253.015685][ T13] usb 4-1: USB disconnect, device number 19 [ 253.128582][T10060] fido_id[10060]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 253.268400][ T5055] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 253.708506][ T5055] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 253.735313][ T5055] usb 5-1: config 0 has no interface number 0 [ 253.918465][ T5055] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 253.938721][T10101] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2263'. [ 253.949973][ T5055] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.958006][ T5055] usb 5-1: Product: syz [ 254.001118][ T5055] usb 5-1: Manufacturer: syz [ 254.005789][ T5055] usb 5-1: SerialNumber: syz [ 254.050063][ T5055] usb 5-1: config 0 descriptor?? [ 254.050438][T10078] loop1: detected capacity change from 0 to 32768 [ 254.119058][T10078] XFS: noikeep mount option is deprecated. [ 254.196635][T10078] XFS (loop1): Mounting V5 Filesystem [ 254.302037][T10078] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 254.537542][T10078] XFS (loop1): Starting recovery (logdev: internal) [ 254.578555][T10118] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 254.587791][T10118] REISERFS (device loop2): using ordered data mode [ 254.608474][T10078] XFS (loop1): Ending recovery (logdev: internal) [ 254.641988][T10078] XFS (loop1): Metadata corruption detected at xfs_btree_lookup_get_block+0x48f/0x6c0, xfs_finobt block 0x20 [ 254.648362][T10118] reiserfs: using flush barriers [ 254.683081][T10078] XFS (loop1): Unmount and run xfs_repair [ 254.705069][T10078] XFS (loop1): Failed to initialize disk quotas. [ 254.705123][T10118] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 254.735274][T10118] REISERFS (device loop2): checking transaction log (loop2) [ 254.746633][T10118] REISERFS (device loop2): Using r5 hash to sort names [ 254.761117][T10118] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 254.791992][ T5055] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 254.820445][ T5055] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 254.846288][ T5055] asix: probe of 5-1:0.251 failed with error -71 [ 254.887349][ T5055] usb 5-1: USB disconnect, device number 25 [ 254.994451][ T4185] XFS (loop1): Unmounting Filesystem [ 255.294226][ T4412] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 255.382773][T10144] set_capacity_and_notify: 1 callbacks suppressed [ 255.382790][T10144] loop2: detected capacity change from 0 to 128 [ 255.465665][T10144] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 255.493335][T10144] hpfs: filesystem error: improperly stopped [ 255.500262][T10144] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 255.508346][T10144] hpfs: You really don't want any checks? You are crazy... [ 255.515841][T10144] hpfs: hpfs_map_sector(): read error [ 255.521735][T10144] hpfs: code page support is disabled [ 255.527200][T10144] hpfs: hpfs_map_4sectors(): unaligned read [ 255.541326][T10144] hpfs: hpfs_map_4sectors(): unaligned read [ 255.547272][T10144] hpfs: filesystem error: unable to find root dir [ 255.561341][ T13] Bluetooth: hci2: command 0x0401 tx timeout [ 255.579389][T10146] loop4: detected capacity change from 0 to 2048 [ 255.684551][T10146] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,auto_da_alloc=0x0000000000000005,barrier=0x00000000476fa82c,sysvgroups,,errors=continue. Quota mode: none. [ 255.708366][ T4412] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 255.717722][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.724200][ T4412] usb 1-1: config 1 has no interface number 0 [ 255.730874][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.736461][T10138] loop3: detected capacity change from 0 to 32768 [ 255.746306][ T4412] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 255.773408][ T4412] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 4 [ 255.776678][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2284'. [ 255.838354][T10138] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2279 (10138) [ 255.901540][T10138] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 255.933202][T10138] BTRFS info (device loop3): setting nodatasum [ 255.952934][ T4412] usb 1-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 255.963841][T10138] BTRFS info (device loop3): force zlib compression, level 3 [ 255.991285][ T4412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.005668][T10138] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 256.024197][ T4412] usb 1-1: Product: syz [ 256.032521][ T4412] usb 1-1: Manufacturer: syz [ 256.037165][ T4412] usb 1-1: SerialNumber: syz [ 256.040473][T10165] loop1: detected capacity change from 0 to 128 [ 256.047319][T10138] BTRFS info (device loop3): use lzo compression, level 0 [ 256.057685][T10138] BTRFS info (device loop3): turning on flush-on-commit [ 256.071881][T10138] BTRFS info (device loop3): enabling auto defrag [ 256.080994][T10138] BTRFS info (device loop3): max_inline at 4096 [ 256.087960][T10138] BTRFS info (device loop3): using free space tree [ 256.105743][T10138] BTRFS info (device loop3): has skinny extents [ 256.155435][T10165] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 256.238210][T10165] ext4 filesystem being mounted at /439/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 256.324949][ T4174] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 256.336201][T10138] BTRFS info (device loop3): enabling ssd optimizations [ 256.448355][ T4412] usb 1-1: 1:0 : does not exist [ 256.453333][ T4412] usb 1-1: BAAD SPEAKERPHONE c_chmask mismatch [ 256.501748][T10199] loop4: detected capacity change from 0 to 64 [ 256.520678][ T4412] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 256.546096][ T4412] usb 1-1: USB disconnect, device number 18 [ 256.578529][ T4174] usb 3-1: Using ep0 maxpacket: 32 [ 256.698353][ T4174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.725919][ T4174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.746501][ T4174] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 256.760868][ T4174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.795882][ T4174] usb 3-1: config 0 descriptor?? [ 257.095604][T10207] loop4: detected capacity change from 0 to 1024 [ 257.206649][T10207] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 257.227785][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-diskseq/935.tmp-b7:4' failed: Read-only file system [ 257.286536][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 257.303661][ T4174] savu 0003:1E7D:2D5A.0032: unknown main item tag 0x0 [ 257.307331][ T4453] udevd[4453]: symlink '../../loop1' '/dev/disk/by-diskseq/932.tmp-b7:1' failed: Read-only file system [ 257.310693][ T4174] savu 0003:1E7D:2D5A.0032: unknown main item tag 0x0 [ 257.329555][ T4174] savu 0003:1E7D:2D5A.0032: unknown main item tag 0x0 [ 257.331859][ T4175] udevd[4175]: symlink '../../loop0' '/dev/disk/by-diskseq/921.tmp-b7:0' failed: Read-only file system [ 257.336361][ T4174] savu 0003:1E7D:2D5A.0032: unknown main item tag 0x0 [ 257.336388][ T4174] savu 0003:1E7D:2D5A.0032: unknown main item tag 0x0 [ 257.362279][ T4174] savu 0003:1E7D:2D5A.0032: unbalanced collection at end of report description [ 257.376932][ T4174] savu 0003:1E7D:2D5A.0032: parse failed [ 257.383155][ T4174] savu: probe of 0003:1E7D:2D5A.0032 failed with error -22 [ 257.404275][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-diskseq/936.tmp-b7:4' failed: Read-only file system [ 257.447842][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 257.453432][T10219] device ipvlan2 entered promiscuous mode [ 257.546430][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-diskseq/936.tmp-b7:4' failed: Read-only file system [ 257.558265][ T4174] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 257.561304][T10217] loop0: detected capacity change from 0 to 8192 [ 257.588983][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-diskseq/936.tmp-b7:4' failed: Read-only file system [ 257.595758][T10221] loop4: detected capacity change from 0 to 256 [ 257.643998][ T4412] usb 3-1: USB disconnect, device number 20 [ 257.659552][T10221] exfat: Deprecated parameter 'utf8' [ 257.666531][T10217] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 257.667897][T10221] exfat: Deprecated parameter 'utf8' [ 257.681555][T10221] exfat: Deprecated parameter 'utf8' [ 257.694361][T10217] REISERFS (device loop0): using ordered data mode [ 257.702496][T10217] reiserfs: using flush barriers [ 257.709606][T10217] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 257.726704][T10217] REISERFS (device loop0): checking transaction log (loop0) [ 257.731097][T10221] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 257.766529][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-diskseq/937.tmp-b7:4' failed: Read-only file system [ 257.805843][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-uuid/1234-1234.tmp-b7:4' failed: Read-only file system [ 257.817494][ T4174] usb 2-1: Using ep0 maxpacket: 16 [ 257.923172][T10217] REISERFS (device loop0): Using tea hash to sort names [ 257.937211][T10217] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 257.953494][ T4174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.963083][T10211] loop3: detected capacity change from 0 to 32768 [ 257.984133][ T4174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.998203][ T4174] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 258.016622][ T4174] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 258.026047][ T4174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.045467][ T4174] usb 2-1: config 0 descriptor?? [ 258.098447][T10211] XFS (loop3): Mounting V5 Filesystem [ 258.220877][T10235] loop4: detected capacity change from 0 to 4096 [ 258.295525][T10238] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.366242][T10211] XFS (loop3): Ending clean mount [ 258.376782][T10211] XFS (loop3): Quotacheck needed: Please wait. [ 258.517316][T10211] XFS (loop3): Quotacheck: Done. [ 258.534132][ T4174] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 258.585301][ T4174] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 258.624857][ T4174] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 258.658806][ T4174] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 258.666087][ T4174] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 258.703902][ T4174] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 258.718569][ T4189] XFS (loop3): Unmounting Filesystem [ 258.736493][ T4174] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0033/input/input43 [ 258.754621][ T4174] microsoft 0003:045E:07DA.0033: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 258.789325][ T4174] usb 2-1: USB disconnect, device number 23 [ 258.979036][T10252] fido_id[10252]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 259.087024][T10257] xt_TPROXY: Can be used only with -p tcp or -p udp [ 259.112492][T10257] tmpfs: Unexpected value for 'inode32' [ 259.770831][T10240] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 259.806214][T10278] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.868199][ T5063] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 260.168189][ T4415] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 260.279451][ T5063] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 260.308829][ T5063] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 260.326518][ T5063] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 260.337679][ T5063] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 260.415592][ T4415] usb 4-1: Using ep0 maxpacket: 16 [ 260.518648][ T5058] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 260.525881][ T4185] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 260.538302][ T4415] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 260.543549][ T4185] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 260.559097][ T4415] usb 4-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 260.560421][ T5063] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 260.568748][ T4415] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.589831][ T5063] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.608108][ T5063] usb 5-1: Product: syz [ 260.612313][ T5063] usb 5-1: Manufacturer: syz [ 260.616925][ T5063] usb 5-1: SerialNumber: syz [ 260.626781][ T4415] usb 4-1: config 0 descriptor?? [ 260.646343][ T5063] usb 5-1: config 0 descriptor?? [ 260.716818][T10312] set_capacity_and_notify: 5 callbacks suppressed [ 260.716830][T10312] loop2: detected capacity change from 0 to 32768 [ 260.828377][ T5055] Bluetooth: hci4: command 0x0405 tx timeout [ 260.898547][ T5058] usb 1-1: config 1 has an invalid interface number: 128 but max is 1 [ 260.945844][ T5063] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 260.967007][ T5058] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.991575][ T5058] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 261.001712][ T5058] usb 1-1: config 1 has no interface number 0 [ 261.009413][ T5058] usb 1-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 261.022093][ T5058] usb 1-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.131294][ T4415] wacom 0003:056A:032F.0034: unknown main item tag 0x7 [ 261.145180][ T4415] wacom 0003:056A:032F.0034: unknown main item tag 0x0 [ 261.152913][ T4415] wacom 0003:056A:032F.0034: unknown main item tag 0x1 [ 261.175356][ T4415] wacom 0003:056A:032F.0034: unknown main item tag 0xd [ 261.191313][ T5063] usb 5-1: USB disconnect, device number 26 [ 261.194045][ T4415] wacom 0003:056A:032F.0034: hidraw0: USB HID v0.09 Device [HID 056a:032f] on usb-dummy_hcd.3-1/input0 [ 261.220804][ T5058] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.258090][ T5058] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.279755][ T5058] usb 1-1: Product: syz [ 261.284077][ T5058] usb 1-1: Manufacturer: syz [ 261.289679][ T5058] usb 1-1: SerialNumber: syz [ 261.335874][T10333] loop1: detected capacity change from 0 to 4096 [ 261.386123][ T5058] cdc_wdm 1-1:1.128: skipping garbage [ 261.443277][ T5058] cdc_wdm 1-1:1.128: cdc-wdm0: USB WDM device [ 261.454726][T10334] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.459250][T10333] NILFS (loop1): bad btree node (ino=3, blocknr=0): level = 0, flags = 0x0, nchildren = 0 [ 261.475773][ T5058] cdc_wdm 1-1:1.128: Unknown control protocol [ 261.480558][ T5058] usb 4-1: USB disconnect, device number 20 [ 261.553054][T10333] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=3) [ 261.588533][T10333] Remounting filesystem read-only [ 261.652814][ T4415] usb 1-1: USB disconnect, device number 19 [ 261.915876][T10353] ip_tables: iptables: counters copy to user failed while replacing table [ 262.139326][ T4227] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 262.236463][ T4178] udevd[4178]: symlink '../../loop3' '/dev/disk/by-diskseq/951.tmp-b7:3' failed: Read-only file system [ 262.254641][T10367] loop1: detected capacity change from 0 to 4096 [ 262.264715][ T4455] udevd[4455]: symlink '../../loop4' '/dev/disk/by-diskseq/947.tmp-b7:4' failed: Read-only file system [ 262.281802][ T4175] udevd[4175]: symlink '../../loop0' '/dev/disk/by-diskseq/953.tmp-b7:0' failed: Read-only file system [ 262.358412][T10370] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.447609][ T4178] udevd[4178]: symlink '../../loop3' '/dev/disk/by-diskseq/951.tmp-b7:3' failed: Read-only file system [ 262.461766][ T4453] udevd[4453]: symlink '../../loop1' '/dev/disk/by-diskseq/959.tmp-b7:1' failed: Read-only file system [ 262.480784][ T4455] udevd[4455]: symlink '../../loop0' '/dev/disk/by-diskseq/953.tmp-b7:0' failed: Read-only file system [ 262.514585][ T4453] udevd[4453]: symlink '../../loop1' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:1' failed: Read-only file system [ 262.518629][ T4227] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.578218][ T4227] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.592065][ T4178] udevd[4178]: symlink '../../loop3' '/dev/disk/by-diskseq/951.tmp-b7:3' failed: Read-only file system [ 262.607759][ T4455] udevd[4455]: symlink '../../loop0' '/dev/disk/by-diskseq/953.tmp-b7:0' failed: Read-only file system [ 262.636187][ T4227] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.662575][ T4227] usb 3-1: config 0 interface 0 has no altsetting 0 [ 262.674305][ T4227] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 262.688750][T10386] netlink: 'syz.3.2375': attribute type 2 has an invalid length. [ 262.718201][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.735886][ T4178] udevd[4178]: symlink '../../loop1' '/dev/disk/by-diskseq/960.tmp-b7:1' failed: Read-only file system [ 262.756557][ T4227] usb 3-1: config 0 descriptor?? [ 262.897761][T10390] loop3: detected capacity change from 0 to 1024 [ 262.976406][T10365] loop4: detected capacity change from 0 to 32768 [ 263.015314][T10393] loop1: detected capacity change from 0 to 512 [ 263.050509][T10390] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 263.115887][T10393] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 263.135920][T10393] EXT4-fs (loop1): 1 truncate cleaned up [ 263.142644][T10393] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,abort,mb_optimize_scan=0x0000000000000000,minixdf,jqfmt=vfsv0,usrjquota=.",errors=continue. Quota mode: writeback. [ 263.235953][T10406] loop0: detected capacity change from 0 to 128 [ 263.240091][T10365] XFS (loop4): Mounting V5 Filesystem [ 263.254424][ T4227] samsung 0003:0419:0600.0035: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.2-1/input0 [ 263.312779][T10365] XFS (loop4): Ending clean mount [ 263.356231][T10413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2384'. [ 263.395419][T10406] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 263.442907][T10417] loop3: detected capacity change from 0 to 2048 [ 263.498974][ T4195] XFS (loop4): Unmounting Filesystem [ 263.534201][ T4227] usb 3-1: USB disconnect, device number 21 [ 263.614980][ T4251] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 263.629949][T10417] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,barrier,barrier,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 263.642167][T10423] Bluetooth: hci0: unsupported parameter 5161 [ 263.665582][T10417] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, [ 263.665624][T10423] Bluetooth: hci0: unsupported parameter 8192 [ 263.679454][T10423] Bluetooth: hci0: unsupported parameter 5161 [ 263.680644][T10417] block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 263.686604][T10423] Bluetooth: hci0: unsupported parameter 8192 [ 263.885521][T10424] fido_id[10424]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 263.913638][T10430] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2392'. [ 263.994287][T10430] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 264.261415][T10446] Bluetooth: hci0: unsupported parameter 5161 [ 264.284470][T10449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2402'. [ 264.299513][T10446] Bluetooth: hci0: unsupported parameter 8192 [ 264.305927][T10446] Bluetooth: hci0: unsupported parameter 5161 [ 264.343052][T10452] loop2: detected capacity change from 0 to 128 [ 264.348233][T10446] Bluetooth: hci0: unsupported parameter 8192 [ 264.428519][T10456] loop1: detected capacity change from 0 to 1024 [ 264.460045][T10452] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 264.494896][T10452] ext4 filesystem being mounted at /528/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 264.546032][T10459] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 264.640673][T10459] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.074779][T10479] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2416'. [ 265.595035][T10475] XFS (loop1): Mounting V5 Filesystem [ 265.739412][T10475] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 265.794682][T10487] set_capacity_and_notify: 3 callbacks suppressed [ 265.794698][T10487] loop4: detected capacity change from 0 to 32768 [ 265.892062][T10475] XFS (loop1): Starting recovery (logdev: internal) [ 265.932928][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2431'. [ 265.946228][T10475] XFS (loop1): Ending recovery (logdev: internal) [ 265.975691][T10475] XFS (loop1): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 265.988185][T10475] XFS (loop1): Failed to initialize disk quotas. [ 266.058338][T10475] XFS (loop1): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 266.121044][ T5105] XFS (loop1): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 266.138253][ T5105] XFS (loop1): xfs_inactive_ifree: xfs_ifree returned error -117 [ 266.205423][ T4185] XFS (loop1): Unmounting Filesystem [ 266.212217][ T5105] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_inactive_ifree+0x1cc/0x390 (fs/xfs/xfs_inode.c:1639). Shutting down filesystem. [ 266.248684][ T5105] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 266.563941][ T5105] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 266.965867][T10530] loop4: detected capacity change from 0 to 40427 [ 266.972891][ T5105] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 266.985063][ T5105] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.018144][ T5105] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 267.037475][ T5105] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.057819][T10541] loop3: detected capacity change from 0 to 4096 [ 267.064328][T10530] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 267.082442][T10530] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 267.094776][T10543] loop2: detected capacity change from 0 to 512 [ 267.110853][T10530] F2FS-fs (loop4): Found nat_bits in checkpoint [ 267.132033][T10541] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 267.186142][T10543] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 267.188289][T10541] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 267.218592][ T5105] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 267.238414][ T5063] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 267.246117][ T5105] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 267.248318][T10543] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.282160][ T4453] udevd[4453]: symlink '../../loop2' '/dev/disk/by-diskseq/986.tmp-b7:2' failed: Read-only file system [ 267.298670][ T5105] usb 1-1: Product: syz [ 267.302874][ T5105] usb 1-1: Manufacturer: syz [ 267.314887][ T4453] udevd[4453]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 267.322931][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-diskseq/984.tmp-b7:4' failed: Read-only file system [ 267.356433][ T5058] Bluetooth: hci4: command 0x0405 tx timeout [ 267.359667][T10543] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 1025 (only 1 groups) [ 267.367870][ T4455] udevd[4455]: symlink '../../loop3' '/dev/disk/by-diskseq/985.tmp-b7:3' failed: Read-only file system [ 267.395692][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 267.419273][ T5105] cdc_wdm 1-1:1.0: skipping garbage [ 267.424735][ T5105] cdc_wdm 1-1:1.0: skipping garbage [ 267.434913][ T5105] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 267.435669][T10530] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 267.444171][ T4455] udevd[4455]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 267.463943][ T5105] cdc_wdm 1-1:1.0: Unknown control protocol [ 267.480618][ T4453] udevd[4453]: symlink '../../loop2' '/dev/disk/by-diskseq/986.tmp-b7:2' failed: Read-only file system [ 267.497029][T10530] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 267.508493][ T5063] usb 2-1: Using ep0 maxpacket: 32 [ 267.540314][ T4453] udevd[4453]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 267.630049][ T4455] udevd[4455]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 267.642620][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-diskseq/984.tmp-b7:4' failed: Read-only file system [ 267.654740][ T5063] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.669606][ T5063] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.686320][ T5063] usb 2-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 267.695592][ T5063] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.707629][ T4415] usb 1-1: USB disconnect, device number 20 [ 267.715120][ T5063] usb 2-1: config 0 descriptor?? [ 268.057490][T10571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2453'. [ 268.112855][T10575] loop2: detected capacity change from 0 to 1024 [ 268.122663][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2446'. [ 268.131974][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2446'. [ 268.140939][T10574] netlink: 'syz.4.2446': attribute type 12 has an invalid length. [ 268.241337][ T5063] wacom 0003:056A:00FA.0036: unbalanced collection at end of report description [ 268.268463][ T5055] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 268.290758][ T7899] hfsplus: b-tree write err: -5, ino 25 [ 268.291518][ T5063] wacom 0003:056A:00FA.0036: parse failed [ 268.296619][ T7899] hfsplus: b-tree write err: -5, ino 4 [ 268.305019][ T5063] wacom: probe of 0003:056A:00FA.0036 failed with error -22 [ 268.365452][ T7899] hfsplus: b-tree write err: -5, ino 2 [ 268.474928][T10585] loop4: detected capacity change from 0 to 512 [ 268.503273][ T4415] usb 2-1: USB disconnect, device number 24 [ 268.578361][ T5055] usb 4-1: Using ep0 maxpacket: 8 [ 268.634966][T10592] netem: change failed [ 268.718346][T10594] netlink: 'syz.4.2463': attribute type 7 has an invalid length. [ 268.775608][T10598] loop4: detected capacity change from 0 to 512 [ 268.855669][T10598] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 268.857578][T10579] loop0: detected capacity change from 0 to 32768 [ 268.888225][T10598] ext4 filesystem being mounted at /448/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.899137][ T5055] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 268.916257][ T5055] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.925661][ T5055] usb 4-1: Product: syz [ 268.929920][ T5055] usb 4-1: Manufacturer: syz [ 268.934785][ T5055] usb 4-1: SerialNumber: syz [ 268.943648][ T5055] usb 4-1: config 0 descriptor?? [ 268.983167][T10598] EXT4-fs error (device loop4): __ext4_new_inode:1294: comm syz.4.2465: failed to insert inode 16: doubly allocated? [ 269.000486][ T5055] gspca_main: se401-2.14.0 probing 047d:5003 [ 269.028162][ T5063] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 269.358171][ T4415] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 269.408346][ T5063] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 269.417534][ T5063] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.427396][ T5063] usb 3-1: config 0 descriptor?? [ 269.448466][ T5055] gspca_se401: Wrong descriptor type [ 269.528214][ T5058] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 269.551672][T10617] loop0: detected capacity change from 0 to 1024 [ 269.674364][ T7899] hfsplus: bad catalog file entry [ 269.685247][ T5055] usb 4-1: USB disconnect, device number 21 [ 269.718574][ T4415] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 269.736894][ T4415] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 269.747071][ T4415] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 269.761606][ T4415] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 269.788278][ T5058] usb 5-1: Using ep0 maxpacket: 16 [ 269.918324][ T5063] usb 3-1: Cannot set MAC address [ 269.923542][ T5058] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.928287][ T4415] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 269.935014][ T5063] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 269.948941][ T4415] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.952363][ T5058] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.963849][ T4415] usb 2-1: Product: syz [ 269.972465][ T5063] usb 3-1: USB disconnect, device number 22 [ 269.980026][ T5058] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 269.991750][ T4415] usb 2-1: Manufacturer: syz [ 269.996186][ T5058] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 270.003407][ T4415] usb 2-1: SerialNumber: syz [ 270.007885][ T5058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.031360][ T4415] usb 2-1: config 0 descriptor?? [ 270.035950][ T5058] usb 5-1: config 0 descriptor?? [ 270.289398][ T4415] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 270.530317][ T5058] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 270.552201][ T5058] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 270.588364][ T5058] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 270.604003][ T4415] usb 2-1: USB disconnect, device number 25 [ 270.619472][T10629] loop2: detected capacity change from 0 to 256 [ 270.629231][ T5058] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 270.636504][ T5058] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 270.650026][ T5058] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 270.668342][ T5058] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0037/input/input47 [ 270.680703][T10633] IPVS: ip_vs_edit_dest(): server weight less than zero [ 270.682874][ T5058] microsoft 0003:045E:07DA.0037: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 270.727042][T10635] program syz.3.2480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.758592][ T5058] usb 5-1: USB disconnect, device number 27 [ 271.010461][T10643] fido_id[10643]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 271.041589][T10645] set_capacity_and_notify: 1 callbacks suppressed [ 271.041606][T10645] loop0: detected capacity change from 0 to 16 [ 271.072642][T10645] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 271.130707][T10647] team0: Device wg0 is of different type [ 271.207503][T10647] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 271.512360][T10664] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 271.515031][T10663] loop0: detected capacity change from 0 to 64 [ 271.599539][ T4415] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 271.830914][T10668] loop4: detected capacity change from 0 to 4096 [ 271.860881][T10668] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 271.930124][T10680] team0: Device wg0 is of different type [ 271.939108][T10682] loop3: detected capacity change from 0 to 64 [ 272.008984][ T4415] usb 2-1: unable to get BOS descriptor or descriptor too short [ 272.015916][T10680] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 272.088508][ T4415] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.109803][ T4415] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.276418][T10690] loop0: detected capacity change from 0 to 256 [ 272.300800][ T4415] usb 2-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 272.314514][ T4415] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.323349][ T4415] usb 2-1: Product: syz [ 272.327621][ T4415] usb 2-1: Manufacturer: syz [ 272.332382][ T4415] usb 2-1: SerialNumber: syz [ 272.362141][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-diskseq/1008.tmp-b7:4' failed: Read-only file system [ 272.393311][ T4455] udevd[4455]: symlink '../../loop0' '/dev/disk/by-diskseq/1011.tmp-b7:0' failed: Read-only file system [ 272.423214][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-diskseq/1008.tmp-b7:4' failed: Read-only file system [ 272.438765][ T4175] udevd[4175]: symlink '../../loop3' '/dev/disk/by-diskseq/1010.tmp-b7:3' failed: Read-only file system [ 272.475438][ T4175] udevd[4175]: symlink '../../loop3' '/dev/disk/by-diskseq/1010.tmp-b7:3' failed: Read-only file system [ 272.510620][ T4178] udevd[4178]: symlink '../../loop0' '/dev/disk/by-diskseq/1011.tmp-b7:0' failed: Read-only file system [ 272.528312][ T9145] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 272.534803][ T4178] udevd[4178]: symlink '../../loop0' '/dev/disk/by-diskseq/1011.tmp-b7:0' failed: Read-only file system [ 272.557938][ T4178] udevd[4178]: symlink '../../loop0' '/dev/disk/by-diskseq/1011.tmp-b7:0' failed: Read-only file system [ 272.582090][T10700] loop0: detected capacity change from 0 to 4096 [ 272.688645][T10700] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 272.699433][ T4415] usb 2-1: unit 115 not found! [ 272.704288][ T4415] usb 2-1: unit 255 not found! [ 272.727177][ T4415] usb 2-1: USB disconnect, device number 26 [ 272.774825][T10700] ntfs3: loop0: failed to convert "c46c" to cp855 [ 272.783018][ T9145] usb 5-1: Using ep0 maxpacket: 8 [ 272.784041][ T4178] udevd[4178]: symlink '../../loop0' '/dev/disk/by-diskseq/1013.tmp-b7:0' failed: Read-only file system [ 272.788410][ T4227] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 272.811682][ T4178] udevd[4178]: symlink '../../loop0' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:0' failed: Read-only file system [ 272.828329][ T4174] Bluetooth: hci2: command 0x0401 tx timeout [ 272.918346][ T9145] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 272.926728][ T9145] usb 5-1: config 0 has no interface number 0 [ 273.098278][ T9145] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 273.110410][T10702] loop0: detected capacity change from 0 to 32768 [ 273.127430][ T9145] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.136065][ T9145] usb 5-1: Product: syz [ 273.146914][ T9145] usb 5-1: Manufacturer: syz [ 273.152202][ T9145] usb 5-1: SerialNumber: syz [ 273.168229][ T4227] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 273.176275][ T4227] usb 4-1: config 0 has no interface number 0 [ 273.196140][ T9145] usb 5-1: config 0 descriptor?? [ 273.217735][ T4227] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.241068][ T4227] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.265065][ T4227] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 273.274366][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.298600][T10713] team0: Device wg0 is of different type [ 273.299224][T10702] XFS (loop0): Mounting V5 Filesystem [ 273.309409][ T4227] usb 4-1: config 0 descriptor?? [ 273.333697][T10713] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 273.400275][T10702] XFS (loop0): Ending clean mount [ 273.432468][T10702] XFS (loop0): Quotacheck needed: Please wait. [ 273.488441][ T9145] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 273.503524][ T9145] usb 5-1: No valid video chain found. [ 273.540058][ T9145] usb 5-1: USB disconnect, device number 28 [ 273.612136][T10702] XFS (loop0): Quotacheck: Done. [ 273.634450][T10720] loop1: detected capacity change from 0 to 256 [ 273.747462][ T4197] XFS (loop0): Unmounting Filesystem [ 273.757197][T10718] loop2: detected capacity change from 0 to 32768 [ 273.790884][ T4227] asus 0003:048D:CE50.0038: unknown main item tag 0xd [ 273.808849][ T4227] asus 0003:048D:CE50.0038: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.3-1/input1 [ 273.878614][T10722] loop1: detected capacity change from 0 to 512 [ 273.931228][T10718] XFS (loop2): Mounting V5 Filesystem [ 274.005224][T10722] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 274.083428][ T4174] usb 4-1: USB disconnect, device number 22 [ 274.105049][T10718] XFS (loop2): Ending clean mount [ 274.140246][T10722] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 274.213924][ T4193] XFS (loop2): Unmounting Filesystem [ 274.229952][T10722] EXT4-fs (loop1): orphan cleanup on readonly fs [ 274.318581][T10722] Quota error (device loop1): v2_read_file_info: Block with free entry too big (4294967071 >= 6). [ 274.368838][T10722] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 274.408620][T10722] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 274.485220][T10722] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.2521: bg 0: block 15: invalid block bitmap [ 274.551355][T10722] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 274.593538][T10722] EXT4-fs (loop1): 1 truncate cleaned up [ 274.648152][T10722] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 274.798747][T10740] EXT4-fs (loop3): 1 truncate cleaned up [ 274.804491][T10740] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 275.042479][T10734] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2522 (10734) [ 275.145218][T10734] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 275.155745][T10734] BTRFS info (device loop4): using free space tree [ 275.162828][T10734] BTRFS info (device loop4): has skinny extents [ 275.242136][T10738] XFS (loop0): Mounting V5 Filesystem [ 275.266973][T10767] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.283811][T10752] SQUASHFS error: xz decompression failed, data probably corrupt [ 275.328170][T10752] SQUASHFS error: Failed to read block 0x108: -5 [ 275.364262][T10752] SQUASHFS error: Unable to read metadata cache entry [106] [ 275.421001][T10752] SQUASHFS error: Unable to read inode 0x11f [ 275.476651][T10734] BTRFS info (device loop4): enabling ssd optimizations [ 275.499851][T10738] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 275.559178][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2528'. [ 275.607206][T10738] XFS (loop0): Starting recovery (logdev: internal) [ 275.693207][T10738] XFS (loop0): Ending recovery (logdev: internal) [ 275.891499][T10787] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.370523][ T4197] XFS (loop0): Unmounting Filesystem [ 276.903153][T10820] set_capacity_and_notify: 6 callbacks suppressed [ 276.903172][T10820] loop4: detected capacity change from 0 to 4096 [ 276.970174][T10820] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 277.114577][T10820] ntfs: volume version 3.1. [ 277.419724][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-diskseq/1036.tmp-b7:4' failed: Read-only file system [ 277.450699][ T4455] udevd[4455]: symlink '../../loop1' '/dev/disk/by-diskseq/1031.tmp-b7:1' failed: Read-only file system [ 277.489492][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 277.501448][ T4453] udevd[4453]: symlink '../../loop0' '/dev/disk/by-diskseq/1035.tmp-b7:0' failed: Read-only file system [ 277.520895][T10849] binder: 10846:10849 ioctl 4018620d 0 returned -22 [ 277.552112][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-uuid/43CF732B47819AF7.tmp-b7:4' failed: Read-only file system [ 277.572068][T10851] binder: 10846:10851 ioctl c0046209 0 returned -22 [ 277.659766][ T4455] udevd[4455]: symlink '../../loop1' '/dev/disk/by-diskseq/1031.tmp-b7:1' failed: Read-only file system [ 277.732447][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-diskseq/1036.tmp-b7:4' failed: Read-only file system [ 277.792300][ T4455] udevd[4455]: symlink '../../loop0' '/dev/disk/by-diskseq/1035.tmp-b7:0' failed: Read-only file system [ 277.807745][ T4178] udevd[4178]: symlink '../../loop4' '/dev/disk/by-diskseq/1036.tmp-b7:4' failed: Read-only file system [ 277.833383][T10858] netlink: 'syz.0.2564': attribute type 3 has an invalid length. [ 277.848679][ T4453] udevd[4453]: symlink '../../loop1' '/dev/disk/by-diskseq/1031.tmp-b7:1' failed: Read-only file system [ 277.994501][T10829] loop2: detected capacity change from 0 to 40427 [ 278.101252][T10829] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 278.123376][T10829] F2FS-fs (loop2): invalid crc value [ 278.145777][T10829] F2FS-fs (loop2): Found nat_bits in checkpoint [ 278.168154][ T13] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 278.235723][T10829] F2FS-fs (loop2): recover fsync data on readonly fs [ 278.252236][T10829] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 278.266883][T10829] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 278.289380][T10829] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 278.468219][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 278.524511][T10861] loop1: detected capacity change from 0 to 32768 [ 278.604918][ T13] usb 5-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 278.615891][ T26] audit: type=1800 audit(1790162325.176:15): pid=10861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2566" name=E91F7189591E9233614B dev="loop1" ino=7 res=0 errno=0 [ 278.644958][ T13] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 278.665343][ T13] usb 5-1: config 0 interface 0 has no altsetting 0 [ 278.673342][ T13] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 278.689165][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.695671][T10839] loop3: detected capacity change from 0 to 32768 [ 278.727901][ T13] usb 5-1: config 0 descriptor?? [ 278.907102][T10839] XFS (loop3): Mounting V5 Filesystem [ 278.930648][T10872] loop0: detected capacity change from 0 to 512 [ 279.097008][T10839] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 279.161097][T10839] XFS (loop3): Starting recovery (logdev: internal) [ 279.215214][T10872] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 279.227297][ T13] saitek 0003:06A3:0CCB.0039: unknown main item tag 0x0 [ 279.243528][ T13] saitek 0003:06A3:0CCB.0039: unknown main item tag 0x6 [ 279.255771][T10872] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 279.290975][ T13] saitek 0003:06A3:0CCB.0039: unknown global tag 0xd [ 279.297721][ T13] saitek 0003:06A3:0CCB.0039: item 0 1 1 13 parsing failed [ 279.321461][T10872] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #13: comm syz.0.2571: iget: bad i_size value: 12154757448730 [ 279.356476][ T13] saitek 0003:06A3:0CCB.0039: parse failed [ 279.374207][T10872] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.2571: couldn't read orphan inode 13 (err -117) [ 279.383496][ T13] saitek: probe of 0003:06A3:0CCB.0039 failed with error -22 [ 279.413733][T10872] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 279.445510][ T13] usb 5-1: USB disconnect, device number 29 [ 279.525600][T10839] XFS (loop3): Ending recovery (logdev: internal) [ 279.599483][T10839] XFS (loop3): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 279.658236][T10839] XFS (loop3): Failed to initialize disk quotas. [ 279.858803][T10839] XFS (loop3): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 279.892063][ T4227] XFS (loop3): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 279.918201][ T4227] XFS (loop3): xfs_inactive_ifree: xfs_ifree returned error -117 [ 279.949719][ T4189] XFS (loop3): Unmounting Filesystem [ 279.949764][ T4227] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_inactive_ifree+0x1cc/0x390 (fs/xfs/xfs_inode.c:1639). Shutting down filesystem. [ 280.060231][ T4227] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 280.215660][T10918] loop0: detected capacity change from 0 to 256 [ 280.319002][T10918] exfat: Deprecated parameter 'utf8' [ 280.324812][T10918] exfat: Deprecated parameter 'utf8' [ 280.338229][T10918] exfat: Deprecated parameter 'namecase' [ 280.393070][T10925] loop1: detected capacity change from 0 to 64 [ 280.405176][T10918] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 280.487511][T10893] loop2: detected capacity change from 0 to 40427 [ 280.511277][T10924] loop4: detected capacity change from 0 to 4096 [ 280.569657][T10893] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 280.570794][T10924] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 280.629486][T10893] F2FS-fs (loop2): invalid crc value [ 280.635909][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2593'. [ 280.760879][T10893] F2FS-fs (loop2): Found nat_bits in checkpoint [ 280.935374][T10924] ntfs3: loop4: failed to convert "c46c" to cp855 [ 281.072601][T10893] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 281.213140][ T4193] attempt to access beyond end of device [ 281.213140][ T4193] loop2: rw=2049, want=45104, limit=40427 [ 281.250003][T10946] netlink: 'syz.4.2600': attribute type 29 has an invalid length. [ 281.299314][T10946] netlink: 'syz.4.2600': attribute type 29 has an invalid length. [ 281.318540][T10949] netlink: 'syz.4.2600': attribute type 29 has an invalid length. [ 281.728221][ T4227] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 281.920709][T10935] loop0: detected capacity change from 0 to 32768 [ 281.999335][T10968] tmpfs: Bad value for 'gid' [ 282.013712][T10935] XFS (loop0): Mounting V5 Filesystem [ 282.098396][ T4227] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 282.129809][ T4227] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 282.182484][T10961] loop1: detected capacity change from 0 to 40427 [ 282.186126][T10935] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 282.215245][ T4227] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 282.255879][T10935] XFS (loop0): Starting recovery (logdev: internal) [ 282.290390][T10961] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 282.298748][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.313579][T10961] F2FS-fs (loop1): invalid crc value [ 282.339182][ T4227] usb 5-1: config 0 descriptor?? [ 282.364254][T10935] XFS (loop0): Ending recovery (logdev: internal) [ 282.382003][T10961] F2FS-fs (loop1): Found nat_bits in checkpoint [ 282.397885][T10935] XFS (loop0): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 282.424837][T10935] XFS (loop0): Failed to initialize disk quotas. [ 282.491632][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-diskseq/1053.tmp-b7:2' failed: Read-only file system [ 282.556246][T10961] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 282.567810][T10935] XFS (loop0): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 282.589899][ T4174] XFS (loop0): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 282.598021][ T4178] udevd[4178]: symlink '../../loop1' '/dev/disk/by-diskseq/1055.tmp-b7:1' failed: Read-only file system [ 282.638204][T10961] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 282.640943][ T4455] udevd[4455]: symlink '../../loop0' '/dev/disk/by-diskseq/1054.tmp-b7:0' failed: Read-only file system [ 282.672114][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-diskseq/1053.tmp-b7:2' failed: Read-only file system [ 282.689695][ T4174] XFS (loop0): xfs_inactive_ifree: xfs_ifree returned error -117 [ 282.697102][ T4178] udevd[4178]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 282.721664][ T4455] udevd[4455]: symlink '../../loop0' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:0' failed: Read-only file system [ 282.735936][ T4197] XFS (loop0): Unmounting Filesystem [ 282.736234][ T4174] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_inactive_ifree+0x1cc/0x390 (fs/xfs/xfs_inode.c:1639). Shutting down filesystem. [ 282.774961][ T4175] udevd[4175]: symlink '../../loop2' '/dev/disk/by-diskseq/1053.tmp-b7:2' failed: Read-only file system [ 282.794603][ T4174] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 282.857898][ T4227] lenovo 0003:17EF:6062.003A: hidraw0: USB HID v0.03 Device [HID 17ef:6062] on usb-dummy_hcd.4-1/input0 [ 282.867541][T10963] loop3: detected capacity change from 0 to 32768 [ 282.947879][T10963] XFS (loop3): Mounting V5 Filesystem [ 283.059832][ T4178] udevd[4178]: symlink '../../loop3' '/dev/disk/by-diskseq/1056.tmp-b7:3' failed: Read-only file system [ 283.075867][ T4453] udevd[4453]: symlink '../../loop0' '/dev/disk/by-diskseq/1054.tmp-b7:0' failed: Read-only file system [ 283.097512][ T4227] usb 5-1: USB disconnect, device number 30 [ 283.112850][ T4175] udevd[4175]: symlink '../../loop1' '/dev/disk/by-diskseq/1055.tmp-b7:1' failed: Read-only file system [ 283.149099][T10996] fido_id[10996]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 283.177705][T10963] XFS (loop3): Ending clean mount [ 283.315218][ T4189] XFS (loop3): Unmounting Filesystem [ 283.382911][T11003] loop1: detected capacity change from 0 to 512 [ 283.470101][T11003] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 283.512900][T11007] autofs4:pid:11007:autofs_fill_super: called with bogus options [ 283.585646][T11003] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,nodelalloc,grpquota,auto_da_alloc=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 283.617059][T11003] ext4 filesystem being mounted at /516/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.994269][T11032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2618'. [ 284.067019][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2634'. [ 284.081878][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2634'. [ 284.176841][T11045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2636'. [ 284.176871][T11045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2636'. [ 284.182807][T11046] loop3: detected capacity change from 0 to 1024 [ 284.295618][T11046] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 284.332517][T11046] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 2: comm syz.3.2637: lblock 2 mapped to illegal pblock 2 (length 1) [ 284.471595][T11046] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 284.493275][T11046] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 48: comm syz.3.2637: lblock 0 mapped to illegal pblock 48 (length 1) [ 284.574451][T11046] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 284.586899][T11046] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.2637: Failed to acquire dquot type 0 [ 284.602780][T11072] loop2: detected capacity change from 0 to 512 [ 284.643246][T11046] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 284.683278][T11046] EXT4-fs error (device loop3): ext4_evict_inode:284: inode #11: comm syz.3.2637: mark_inode_dirty error [ 284.696500][T11074] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 284.719098][T11046] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 284.758694][T11046] EXT4-fs (loop3): 1 orphan inode deleted [ 284.759827][T11072] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 284.774695][T11046] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,resuid=0x0000000000000000,norecovery,nodiscard,nodioread_nolock,nomblk_io_submit,,errors=continue. Quota mode: none. [ 284.796138][ T7899] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 284.856132][ T7899] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 284.872731][T11065] loop1: detected capacity change from 0 to 32768 [ 284.913472][ T7899] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0 [ 284.933327][T11072] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.2647: corrupted xattr block 33 [ 285.015242][ T7899] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 285.064894][T11065] XFS (loop1): Mounting V5 Filesystem [ 285.072158][T11072] fscrypt (loop2, inode 15): Error -117 getting encryption context [ 285.128638][ T7899] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 285.163431][ T7899] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0 [ 285.198953][ T4189] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 285.213461][ T13] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 285.236245][ T4189] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 285.255832][T11096] loop2: detected capacity change from 0 to 64 [ 285.292632][T11065] XFS (loop1): Ending clean mount [ 285.324607][ T26] audit: type=1800 audit(1790162331.896:16): pid=11065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2645" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 285.376798][ T4189] EXT4-fs error (device loop3): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 285.408967][ T4185] XFS (loop1): Unmounting Filesystem [ 285.655376][T11102] loop3: detected capacity change from 0 to 64 [ 285.663223][ T13] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 285.878982][ T13] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 285.900802][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.922144][ T13] usb 5-1: Product: syz [ 285.929096][ T13] usb 5-1: Manufacturer: syz [ 285.943775][ T13] usb 5-1: SerialNumber: syz [ 286.010510][ T13] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 286.022926][ T13] dvb-usb: bulk message failed: -22 (3/0) [ 286.111587][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 286.168678][ T13] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 286.188886][ T13] usb 5-1: media controller created [ 286.227884][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 286.275917][T11120] loop0: detected capacity change from 0 to 256 [ 286.379754][ T13] DVB: Unable to find symbol mt352_attach() [ 286.385911][ T13] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 286.458232][ T13] dvb-usb: bulk message failed: -22 (3/0) [ 286.498147][ T13] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 286.537971][ T13] usb 5-1: USB disconnect, device number 31 [ 286.659565][ T13] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 286.707024][ T26] audit: type=1326 audit(1790162333.276:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11142 comm="syz.1.2675" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22003fb159 code=0x0 [ 286.969547][T11159] set_capacity_and_notify: 2 callbacks suppressed [ 286.969564][T11159] loop0: detected capacity change from 0 to 256 [ 286.984844][T11160] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.076143][T11159] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 287.190992][T11164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2686'. [ 287.207099][T11166] comedi: No check for data length of config insn id 3336 is implemented [ 287.230058][T11166] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 287.262666][T11166] comedi: Assuming n=15 is correct [ 287.520681][T11178] loop0: detected capacity change from 0 to 1024 [ 287.521479][ T4455] udevd[4455]: symlink '../../loop4' '/dev/disk/by-diskseq/1052.tmp-b7:4' failed: Read-only file system [ 287.543101][ T4453] udevd[4453]: symlink '../../loop2' '/dev/disk/by-diskseq/1076.tmp-b7:2' failed: Read-only file system [ 287.573895][ T4453] udevd[4453]: symlink '../../loop2' '/dev/disk/by-diskseq/1076.tmp-b7:2' failed: Read-only file system [ 287.585208][T11181] loop2: detected capacity change from 0 to 1024 [ 287.615695][ T4175] udevd[4175]: symlink '../../loop1' '/dev/disk/by-diskseq/1074.tmp-b7:1' failed: Read-only file system [ 287.651658][ T4455] udevd[4455]: symlink '../../loop4' '/dev/disk/by-diskseq/1052.tmp-b7:4' failed: Read-only file system [ 287.652337][T11185] loop1: detected capacity change from 0 to 128 [ 287.676604][ T4178] udevd[4178]: symlink '../../loop0' '/dev/disk/by-diskseq/1075.tmp-b7:0' failed: Read-only file system [ 287.680164][T11140] loop3: detected capacity change from 0 to 32768 [ 287.711035][ T4178] udevd[4178]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:0' failed: Read-only file system [ 287.734258][ T4455] udevd[4455]: symlink '../../loop4' '/dev/disk/by-diskseq/1052.tmp-b7:4' failed: Read-only file system [ 287.807243][ T4175] udevd[4175]: symlink '../../loop1' '/dev/disk/by-diskseq/1082.tmp-b7:1' failed: Read-only file system [ 287.825858][ T4178] udevd[4178]: symlink '../../loop0' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:0' failed: Read-only file system [ 287.937214][T11198] loop4: detected capacity change from 0 to 64 [ 287.965175][T11140] XFS (loop3): Mounting V5 Filesystem [ 288.273979][T11140] XFS (loop3): Ending clean mount [ 288.307811][T11140] XFS (loop3): Quotacheck needed: Please wait. [ 288.414870][T11140] XFS (loop3): Quotacheck: Done. [ 288.439584][T11225] loop1: detected capacity change from 0 to 8 [ 288.476335][T11226] loop0: detected capacity change from 0 to 512 [ 288.523823][T11226] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 288.534584][T11225] SQUASHFS error: zlib decompression failed, data probably corrupt [ 288.538455][ T4189] XFS (loop3): Unmounting Filesystem [ 288.562668][T11225] SQUASHFS error: Failed to read block 0x9b: -5 [ 288.577626][T11222] loop2: detected capacity change from 0 to 4096 [ 288.580385][T11225] SQUASHFS error: Unable to read metadata cache entry [99] [ 288.603348][T11226] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 288.609281][T11225] SQUASHFS error: Unable to read inode 0x127 [ 288.697140][T11226] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,barrier=0x000000000000000d,minixdf,stripe=0x0000000000000b74,resuid=0x0000000000000000,jqfmt=vfsv1,grpjquota=,i_version,,errors=continue. Quota mode: writeback. [ 288.748858][T11226] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.830160][T11222] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 289.183643][ T4197] EXT4-fs error (device loop0): ext4_lookup:1857: inode #11: comm syz-executor: ' ' linked to parent dir [ 289.295141][ T4197] EXT4-fs error (device loop0): ext4_lookup:1857: inode #11: comm syz-executor: ' ' linked to parent dir [ 289.539032][T11251] loop2: detected capacity change from 0 to 4096 [ 289.575070][T11251] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 289.647896][T11251] ntfs3: loop2: Failed to load $Extend. [ 289.854311][ T4246] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.926708][ T4246] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 290.063301][ T4246] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.105401][ T4246] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 290.193639][ T4246] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.297547][T11247] JBD2: Ignoring recovery information on journal [ 290.317434][ T4246] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 290.335767][T11249] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 290.336686][T11260] tipc: Enabling of bearer rejected, failed to enable media [ 290.469379][ T4246] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.481757][ T4185] XFS (loop1): Unmounting Filesystem [ 290.546524][ T4246] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 290.606139][T11247] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 290.690252][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2729'. [ 290.723007][T11275] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2729'. [ 290.831321][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 291.296556][T11267] chnl_net:caif_netlink_parms(): no params data found [ 291.416521][T11279] ntfs: volume version 3.1. [ 291.500653][T11279] ntfs: (device loop3): ntfs_read_locked_inode(): Inode is not in use! [ 291.537690][T11279] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x20 as bad. Run chkdsk. [ 291.541308][ T4246] tipc: Disabling bearer [ 291.592730][ T4246] tipc: Left network mode [ 291.616800][ T4189] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 291.701784][T11267] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.709599][T11267] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.717760][T11267] device bridge_slave_0 entered promiscuous mode [ 291.727403][T11267] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.735507][T11267] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.744167][T11267] device bridge_slave_1 entered promiscuous mode [ 291.828926][T11267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.846718][T11305] Bluetooth: hci0: unsupported parameter 44303 [ 291.869040][T11305] Bluetooth: hci0: unsupported parameter 128 [ 291.899507][T11305] Bluetooth: hci0: unsupported parameter 44303 [ 291.917558][T11305] Bluetooth: hci0: unsupported parameter 128 [ 291.969956][T11278] XFS (loop2): Mounting V5 Filesystem [ 291.971625][T11267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.065008][T11267] team0: Port device team_slave_0 added [ 292.075712][T11267] team0: Port device team_slave_1 added [ 292.099816][T11267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.106898][T11267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.132847][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.172314][T11267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.178567][T11278] XFS (loop2): Ending clean mount [ 292.220650][T11278] XFS (loop2): Quotacheck needed: Please wait. [ 292.243050][T11267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.308730][T11267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.334684][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.385586][T11330] nvme_fabrics: missing parameter 'transport=%s' [ 292.394356][T11330] nvme_fabrics: missing parameter 'nqn=%s' [ 292.413236][T11278] XFS (loop2): Quotacheck: Done. [ 292.428375][ T1110] Bluetooth: hci4: command 0x0409 tx timeout [ 292.488936][T11267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.525400][T11340] set_capacity_and_notify: 4 callbacks suppressed [ 292.525416][T11340] loop4: detected capacity change from 0 to 1024 [ 292.562668][ T4178] udevd[4178]: symlink '../../loop1' '/dev/disk/by-diskseq/1101.tmp-b7:1' failed: Read-only file system [ 292.587861][ T4193] XFS (loop2): Unmounting Filesystem [ 292.662676][ T4455] udevd[4455]: symlink '../../loop4' '/dev/disk/by-diskseq/1105.tmp-b7:4' failed: Read-only file system [ 292.669972][T11340] hfsplus: invalid length 1280 has been corrected to 255 [ 292.681753][ T4455] udevd[4455]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system [ 292.696001][ T4455] udevd[4455]: symlink '../../loop4' '/dev/disk/by-uuid/67d633f8-938d-3ec7-b076-6b27e93c5b1e.tmp-b7:4' failed: Read-only file system [ 292.822171][ T4175] udevd[4175]: symlink '../../loop4' '/dev/disk/by-diskseq/1105.tmp-b7:4' failed: Read-only file system [ 292.876655][ T4178] udevd[4178]: symlink '../../loop1' '/dev/disk/by-diskseq/1101.tmp-b7:1' failed: Read-only file system [ 292.904340][T11347] loop4: detected capacity change from 0 to 512 [ 292.941188][T11267] device hsr_slave_0 entered promiscuous mode [ 292.959820][T11267] device hsr_slave_1 entered promiscuous mode [ 292.970191][T11267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.980257][T11267] Cannot create hsr debugfs directory [ 293.022279][ T4455] udevd[4455]: symlink '../../loop4' '/dev/disk/by-diskseq/1105.tmp-b7:4' failed: Read-only file system [ 293.040586][ T4178] udevd[4178]: symlink '../../loop2' '/dev/disk/by-diskseq/1104.tmp-b7:2' failed: Read-only file system [ 293.072608][T11347] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x00000000000000dd,nojournal_checksum,acl,errors=remount-ro,. Quota mode: writeback. [ 293.105195][ T4178] udevd[4178]: symlink '../../loop2' '/dev/disk/by-diskseq/1104.tmp-b7:2' failed: Read-only file system [ 293.117535][ T4455] udevd[4455]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 293.121486][T11347] ext4 filesystem being mounted at /495/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.242511][T11267] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 293.256452][T11347] EXT4-fs error (device loop4): ext4_get_verity_descriptor_location:338: inode #15: comm syz.4.2749: verity file corrupted; can't find descriptor [ 293.285041][T11267] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 293.304945][T11267] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 293.323577][T11347] EXT4-fs (loop4): Remounting filesystem read-only [ 293.343813][T11267] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 293.360288][T11347] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size [ 293.487939][T11338] loop3: detected capacity change from 0 to 40427 [ 293.584585][T11338] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 293.614052][T11338] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 293.682067][T11338] F2FS-fs (loop3): invalid crc value [ 293.734141][T11338] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 293.923633][T11338] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 293.958270][T11338] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 293.958960][T11267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.978357][ T1110] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 293.996443][ T26] audit: type=1800 audit(1790162340.566:18): pid=11338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2745" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 294.191784][T11267] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.226843][ T4189] attempt to access beyond end of device [ 294.226843][ T4189] loop3: rw=2049, want=45104, limit=40427 [ 294.245876][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 294.265217][T11393] netlink: 'syz.1.2762': attribute type 29 has an invalid length. [ 294.266180][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.288676][ T1110] usb 5-1: Using ep0 maxpacket: 32 [ 294.350842][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.360224][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.369471][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.376614][ T4251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.385720][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 294.401251][T11393] netlink: 'syz.1.2762': attribute type 29 has an invalid length. [ 294.423660][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.432421][ T1110] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 294.435842][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.449031][ T1110] usb 5-1: config 0 has no interface number 0 [ 294.479482][ T7899] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.486638][ T7899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.509352][ T5105] Bluetooth: hci4: command 0x041b tx timeout [ 294.526157][T11396] netlink: 'syz.1.2762': attribute type 29 has an invalid length. [ 294.539575][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.609086][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 294.637216][ T4246] device hsr_slave_0 left promiscuous mode [ 294.648673][ T1110] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 294.662304][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.679674][ T1110] usb 5-1: Product: syz [ 294.689548][ T1110] usb 5-1: Manufacturer: syz [ 294.698818][ T1110] usb 5-1: SerialNumber: syz [ 294.716424][ T1110] usb 5-1: config 0 descriptor?? [ 294.723111][ T4246] device hsr_slave_1 left promiscuous mode [ 294.740047][ T4246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.747713][ T4246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.764190][ T4246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.774969][ T1110] smsc95xx v2.0.0 [ 294.778882][ T4246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.786844][ T4246] device bridge_slave_1 left promiscuous mode [ 294.797371][ T4246] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.835092][T11410] loop3: detected capacity change from 0 to 512 [ 294.845611][ T4246] device bridge_slave_0 left promiscuous mode [ 294.857404][ T4246] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.881129][T11410] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 294.892593][T11410] ext4 filesystem being mounted at /562/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 294.939616][T11410] EXT4-fs warning (device loop3): ext4_empty_dir:3158: inode #12: comm syz.3.2765: directory missing '..' [ 294.953824][ T4246] device veth1_macvtap left promiscuous mode [ 294.969167][ T4246] device veth0_macvtap left promiscuous mode [ 294.993772][ T4246] device veth1_vlan left promiscuous mode [ 295.006791][ T4246] device veth0_vlan left promiscuous mode [ 295.335261][ T4246] team0 (unregistering): Port device team_slave_1 removed [ 295.358165][ T4246] team0 (unregistering): Port device team_slave_0 removed [ 295.379903][ T4246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.399587][ T4246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.428654][ T1110] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 295.445374][ T1110] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 295.461517][T11414] loop3: detected capacity change from 0 to 32768 [ 295.508651][ T1110] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 295.521123][ T1110] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 295.531477][ T1110] usb 5-1: USB disconnect, device number 32 [ 295.547932][ T4246] bond0 (unregistering): Released all slaves [ 295.568990][T11414] XFS (loop3): Mounting V5 Filesystem [ 295.618498][T11414] XFS (loop3): Ending clean mount [ 295.708942][ T4189] XFS (loop3): Unmounting Filesystem [ 295.733485][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 295.745524][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 295.755195][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 295.764469][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 295.816937][T11267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 295.846741][T11267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.903994][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 295.939231][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 295.969655][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.991897][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 296.014169][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.035959][T11435] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 296.040512][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 296.391356][T11454] loop4: detected capacity change from 0 to 256 [ 296.468208][ T13] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 296.503310][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 296.534069][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 296.548871][T11461] netlink: 'syz.1.2777': attribute type 3 has an invalid length. [ 296.566749][T11267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.588468][ T5063] Bluetooth: hci4: command 0x040f tx timeout [ 296.778199][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 296.928457][ T13] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.954702][ T13] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.040288][ T13] usb 3-1: config 0 interface 0 has no altsetting 0 [ 297.059184][ T13] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 297.078072][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.116326][ T13] usb 3-1: config 0 descriptor?? [ 297.128255][ T4227] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 297.179003][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 297.196045][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 297.261514][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 297.274197][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 297.303680][T11267] device veth0_vlan entered promiscuous mode [ 297.321178][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 297.343901][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 297.367833][T11267] device veth1_vlan entered promiscuous mode [ 297.443263][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 297.453693][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 297.479149][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.508502][ T4227] usb 5-1: config index 0 descriptor too short (expected 7768, got 18) [ 297.516882][ T4227] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 297.528933][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.540429][T11267] device veth0_macvtap entered promiscuous mode [ 297.560477][T11267] device veth1_macvtap entered promiscuous mode [ 297.577203][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.611515][ T4455] udevd[4455]: symlink '../../loop3' '/dev/disk/by-diskseq/1115.tmp-b7:3' failed: Read-only file system [ 297.619325][ T4227] usb 5-1: config 0 descriptor?? [ 297.625495][ T13] magicmouse 0003:05AC:0269.003B: unknown main item tag 0x0 [ 297.646173][ T13] magicmouse 0003:05AC:0269.003B: unknown main item tag 0x0 [ 297.664932][ T13] magicmouse 0003:05AC:0269.003B: unknown main item tag 0x0 [ 297.677354][ T13] magicmouse 0003:05AC:0269.003B: unknown main item tag 0x0 [ 297.685775][T11267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.695623][ T4227] ftdi_sio 5-1:0.0: Ignoring interface reserved for JTAG [ 297.697713][ T13] magicmouse 0003:05AC:0269.003B: unknown main item tag 0x0 [ 297.729415][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 297.738398][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 297.751929][ T13] magicmouse 0003:05AC:0269.003B: unknown main item tag 0x0 [ 297.767879][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.772694][ T13] magicmouse 0003:05AC:0269.003B: unknown main item tag 0x0 [ 297.798762][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.806555][ T13] magicmouse 0003:05AC:0269.003B: unknown main item tag 0x0 [ 297.820577][T11477] loop1: detected capacity change from 0 to 32768 [ 297.821168][ T13] magicmouse 0003:05AC:0269.003B: unknown main item tag 0x0 [ 297.851773][ T13] magicmouse 0003:05AC:0269.003B: unknown main item tag 0x0 [ 297.854488][T11267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.867018][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 297.874237][ T13] magicmouse 0003:05AC:0269.003B: unknown main item tag 0x0 [ 297.881757][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 297.901146][ T9145] usb 5-1: USB disconnect, device number 33 [ 297.917778][T11477] JBD2: Ignoring recovery information on journal [ 297.944514][ T13] magicmouse 0003:05AC:0269.003B: unknown main item tag 0x0 [ 297.952660][T11267] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.979407][T11267] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.004992][ T13] magicmouse 0003:05AC:0269.003B: unknown main item tag 0x0 [ 298.028346][T11267] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.034167][T11477] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 298.037342][T11267] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.048511][ T13] magicmouse 0003:05AC:0269.003B: unknown main item tag 0x0 [ 298.118734][ T13] magicmouse 0003:05AC:0269.003B: unbalanced collection at end of report description [ 298.162336][ T4455] udevd[4455]: symlink '../../loop1' '/dev/disk/by-diskseq/1118.tmp-b7:1' failed: Read-only file system [ 298.168436][ T13] magicmouse 0003:05AC:0269.003B: magicmouse hid parse failed [ 298.207258][ T4455] udevd[4455]: symlink '../../loop1' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:1' failed: Read-only file system [ 298.209754][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 298.241829][ T4453] udevd[4453]: symlink '../../loop3' '/dev/disk/by-diskseq/1115.tmp-b7:3' failed: Read-only file system [ 298.262349][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.279436][T11512] loop3: detected capacity change from 0 to 512 [ 298.286036][ T13] magicmouse: probe of 0003:05AC:0269.003B failed with error -22 [ 298.298065][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.305925][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 298.374321][ T6697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.388242][ T13] usb 3-1: USB disconnect, device number 23 [ 298.405900][T11512] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,nogrpid,usrquota,,errors=continue. Quota mode: writeback. [ 298.420957][ T4455] udevd[4455]: symlink '../../loop1' '/dev/disk/by-diskseq/1118.tmp-b7:1' failed: Read-only file system [ 298.431350][ T6697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.462820][ T4455] udevd[4455]: symlink '../../loop1' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:1' failed: Read-only file system [ 298.495401][ T4175] udevd[4175]: symlink '../../loop4' '/dev/disk/by-diskseq/1117.tmp-b7:4' failed: Read-only file system [ 298.558494][T11512] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.574692][ T4453] udevd[4453]: symlink '../../loop3' '/dev/disk/by-diskseq/1119.tmp-b7:3' failed: Read-only file system [ 298.581581][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 298.615180][T11512] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 91 vs 96 free clusters [ 298.668178][ T5105] Bluetooth: hci4: command 0x0419 tx timeout [ 298.702359][ T4453] udevd[4453]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 298.726344][ T4178] udevd[4178]: symlink '../../loop2' '/dev/disk/by-diskseq/1108.tmp-b7:2' failed: Read-only file system [ 298.901242][T11533] loop4: detected capacity change from 0 to 128 [ 298.950764][T11532] loop5: detected capacity change from 0 to 764 [ 299.106218][T11546] loop1: detected capacity change from 0 to 512 [ 299.417506][ T26] audit: type=1326 audit(1790162345.986:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.2.2801" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff524a51159 code=0x50000 [ 299.453716][T11533] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 299.475206][T11533] System zones: 1-3, 19-19, 35-36 [ 299.486257][T11533] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,debug,,errors=continue. Quota mode: none. [ 299.500851][T11533] ext4 filesystem being mounted at /505/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 299.533068][ T26] audit: type=1326 audit(1790162346.016:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.2.2801" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff524a51159 code=0x50000 [ 299.533112][ T26] audit: type=1326 audit(1790162346.016:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.2.2801" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff524a51159 code=0x50000 [ 299.533145][ T26] audit: type=1326 audit(1790162346.016:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.2.2801" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff524a51159 code=0x50000 [ 299.604879][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.623179][T11533] EXT4-fs warning (device loop4): ext4_group_extend:1852: can't read last block, resize aborted [ 299.751661][ T26] audit: type=1326 audit(1790162346.016:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.2.2801" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff524a51159 code=0x50000 [ 299.819743][T11546] EXT4-fs (loop1): orphan cleanup on readonly fs [ 299.842918][ T26] audit: type=1326 audit(1790162346.016:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.2.2801" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff524a51159 code=0x50000 [ 299.866763][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.874822][T11546] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 299.988307][T11546] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 300.009612][ T26] audit: type=1326 audit(1790162346.016:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.2.2801" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff524a51159 code=0x50000 [ 300.035062][T11546] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #13: comm syz.1.2800: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 300.158436][ T26] audit: type=1326 audit(1790162346.016:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.2.2801" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff524a51159 code=0x50000 [ 300.186983][T11546] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.2800: couldn't read orphan inode 13 (err -117) [ 300.244095][T11546] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 300.328103][ T26] audit: type=1326 audit(1790162346.016:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.2.2801" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff524a51159 code=0x50000 [ 300.488845][ T26] audit: type=1326 audit(1790162346.016:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.2.2801" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff524a51159 code=0x50000 [ 301.362840][T11624] netlink: 'syz.5.2823': attribute type 29 has an invalid length. [ 301.422208][T11624] netlink: 'syz.5.2823': attribute type 29 has an invalid length. [ 301.458669][T11628] netlink: 'syz.5.2823': attribute type 29 has an invalid length. [ 301.688520][T11637] loop5: detected capacity change from 0 to 1024 [ 301.896420][T11599] loop2: detected capacity change from 0 to 32768 [ 301.963883][T11599] [ 301.963883][T11599] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 301.963883][T11599] [ 301.979924][T11642] loop1: detected capacity change from 0 to 4096 [ 302.068482][T11599] ERROR: (device loop2): ea_get: invalid ea.flag [ 302.068482][T11599] [ 302.125342][T11653] ERROR: (device loop2): ea_get: invalid ea.flag [ 302.125342][T11653] [ 302.198156][T11599] ERROR: (device loop2): remounting filesystem as read-only [ 302.249309][T11654] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.339310][T11653] ERROR: (device loop2): ea_get: invalid ea.flag [ 302.339310][T11653] [ 302.344338][T11642] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 302.391176][T11653] [ 302.391176][T11653] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.391176][T11653] [ 302.463330][T11653] [ 302.463330][T11653] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.463330][T11653] [ 302.545080][T11653] [ 302.545080][T11653] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.545080][T11653] [ 302.567077][T11664] netlink: 'syz.1.2834': attribute type 7 has an invalid length. [ 302.596516][T11653] [ 302.596516][T11653] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.596516][T11653] [ 302.611940][T11664] netlink: 'syz.1.2834': attribute type 5 has an invalid length. [ 302.620094][T11619] loop4: detected capacity change from 0 to 32768 [ 302.634143][T11653] [ 302.634143][T11653] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.634143][T11653] [ 302.649326][T11664] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2834'. [ 302.676862][ T4453] udevd[4453]: symlink '../../loop3' '/dev/disk/by-diskseq/1122.tmp-b7:3' failed: Read-only file system [ 302.702694][ T4178] udevd[4178]: symlink '../../loop1' '/dev/disk/by-diskseq/1130.tmp-b7:1' failed: Read-only file system [ 302.733933][ T4178] udevd[4178]: symlink '../../loop1' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:1' failed: Read-only file system [ 302.739539][ T277] [ 302.739539][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.739539][ T277] [ 302.777192][ T4453] udevd[4453]: symlink '../../loop5' '/dev/disk/by-diskseq/1131.tmp-b7:5' failed: Read-only file system [ 302.810496][T11619] ialloc: diAlloc returned -5! [ 302.837515][T11619] ialloc: diAlloc returned -5! [ 302.850037][ T4175] udevd[4175]: symlink '../../loop3' '/dev/disk/by-diskseq/1122.tmp-b7:3' failed: Read-only file system [ 302.871457][T11673] loop5: detected capacity change from 0 to 2048 [ 302.888990][ T277] ================================================================== [ 302.897561][ T277] BUG: KASAN: use-after-free in txEnd+0x329/0x520 [ 302.904011][ T277] Write of size 8 at addr ffff8880240fd040 by task jfsCommit/277 [ 302.911756][ T277] [ 302.914102][ T277] CPU: 0 PID: 277 Comm: jfsCommit Not tainted syzkaller #0 [ 302.921315][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 302.931388][ T277] Call Trace: [ 302.934692][ T277] [ 302.937657][ T277] dump_stack_lvl+0x188/0x250 [ 302.942406][ T277] ? show_regs_print_info+0x20/0x20 [ 302.947618][ T277] ? _printk+0xda/0x130 [ 302.950961][ T4453] udevd[4453]: symlink '../../loop3' '/dev/disk/by-diskseq/1122.tmp-b7:3' failed: Read-only file system [ 302.951803][ T277] ? txEnd+0x329/0x520 [ 302.966985][ T277] ? load_image+0x410/0x410 [ 302.971502][ T277] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 302.976989][ T277] print_address_description+0x60/0x2d0 [ 302.982562][ T277] ? txEnd+0x329/0x520 [ 302.986658][ T277] kasan_report+0xdf/0x130 [ 302.991109][ T277] ? txEnd+0x329/0x520 [ 302.995203][ T277] kasan_check_range+0x235/0x290 [ 303.000167][ T277] txEnd+0x329/0x520 [ 303.004083][ T277] jfs_lazycommit+0x5cf/0xb60 [ 303.006558][ T4455] udevd[4455]: symlink '../../loop4' '/dev/disk/by-diskseq/1132.tmp-b7:4' failed: Read-only file system [ 303.008782][ T277] ? txFreelock+0x5a0/0x5a0 [ 303.008804][ T277] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 303.008825][ T277] ? sched_dynamic_update+0x210/0x210 [ 303.008849][ T277] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 303.008873][ T277] ? __kthread_parkme+0x14e/0x1b0 [ 303.026887][ T4455] udevd[4455]: symlink '../../loop4' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:4' failed: Read-only file system [ 303.030366][ T277] kthread+0x42e/0x520 [ 303.030390][ T277] ? txFreelock+0x5a0/0x5a0 [ 303.030407][ T277] ? kthread_blkcg+0xd0/0xd0 [ 303.030427][ T277] ret_from_fork+0x1f/0x30 [ 303.077954][ T277] [ 303.081015][ T277] [ 303.083354][ T277] Allocated by task 11599: [ 303.087781][ T277] __kasan_kmalloc+0xaf/0xe0 [ 303.092397][ T277] lmLogOpen+0x2c0/0xf90 [ 303.096660][ T277] jfs_mount_rw+0xfb/0x5a0 [ 303.101105][ T277] jfs_fill_super+0x58d/0xad0 [ 303.105805][ T277] mount_bdev+0x28a/0x3c0 [ 303.110152][ T277] legacy_get_tree+0xe6/0x180 [ 303.114849][ T277] vfs_get_tree+0x88/0x270 [ 303.119290][ T277] do_new_mount+0x247/0xa40 [ 303.123809][ T277] __se_sys_mount+0x2e3/0x3d0 [ 303.128503][ T277] do_syscall_64+0x4c/0xa0 [ 303.132938][ T277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.138854][ T277] [ 303.141200][ T277] Freed by task 4193: [ 303.145186][ T277] kasan_set_track+0x4b/0x70 [ 303.149797][ T277] kasan_set_free_info+0x1f/0x40 [ 303.154759][ T277] ____kasan_slab_free+0xd5/0x110 [ 303.159807][ T277] slab_free_freelist_hook+0xec/0x170 [ 303.165199][ T277] kfree+0xef/0x2a0 [ 303.169024][ T277] lmLogClose+0x292/0x530 [ 303.173371][ T277] jfs_umount+0x288/0x360 [ 303.177728][ T277] jfs_put_super+0x88/0x190 [ 303.182252][ T277] generic_shutdown_super+0x130/0x300 [ 303.187660][ T277] kill_block_super+0x7c/0xe0 [ 303.192367][ T277] deactivate_locked_super+0x93/0xf0 [ 303.197676][ T277] cleanup_mnt+0x426/0x4d0 [ 303.202126][ T277] task_work_run+0x125/0x1a0 [ 303.206741][ T277] exit_to_user_mode_loop+0x10f/0x130 [ 303.212135][ T277] exit_to_user_mode_prepare+0xee/0x180 [ 303.217704][ T277] syscall_exit_to_user_mode+0x16/0x40 [ 303.223197][ T277] do_syscall_64+0x58/0xa0 [ 303.227656][ T277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.233580][ T277] [ 303.235920][ T277] The buggy address belongs to the object at ffff8880240fd000 [ 303.235920][ T277] which belongs to the cache kmalloc-1k of size 1024 [ 303.249995][ T277] The buggy address is located 64 bytes inside of [ 303.249995][ T277] 1024-byte region [ffff8880240fd000, ffff8880240fd400) [ 303.263392][ T277] The buggy address belongs to the page: [ 303.269045][ T277] page:ffffea0000903e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x240f8 [ 303.279224][ T277] head:ffffea0000903e00 order:3 compound_mapcount:0 compound_pincount:0 [ 303.287570][ T277] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 303.295603][ T277] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41dc0 [ 303.304213][ T277] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 303.312810][ T277] page dumped because: kasan: bad access detected [ 303.319238][ T277] page_owner tracks the page as allocated [ 303.324965][ T277] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4193, ts 66264152959, free_ts 66211592680 [ 303.344081][ T277] get_page_from_freelist+0x24f6/0x2670 [ 303.349630][ T277] __alloc_pages+0x1ee/0x480 [ 303.354214][ T277] new_slab+0xc0/0x4b0 [ 303.358273][ T277] ___slab_alloc+0x807/0xdd0 [ 303.362880][ T277] __kmalloc_node_track_caller+0x13d/0x3a0 [ 303.368693][ T277] __alloc_skb+0x22c/0x750 [ 303.373106][ T277] rtmsg_fib+0xd7/0x440 [ 303.377245][ T277] fib_table_insert+0xd24/0x1b80 [ 303.382181][ T277] fib_magic+0x2ca/0x3b0 [ 303.386431][ T277] fib_add_ifaddr+0x3e2/0x5c0 [ 303.391096][ T277] fib_netdev_event+0x35c/0x480 [ 303.395937][ T277] raw_notifier_call_chain+0xcb/0x160 [ 303.401312][ T277] __dev_notify_flags+0x194/0x300 [ 303.406371][ T277] dev_change_flags+0xda/0x1a0 [ 303.411124][ T277] do_setlink+0xca4/0x29d0 [ 303.415527][ T277] rtnl_newlink+0x15bb/0x1920 [ 303.420197][ T277] page last free stack trace: [ 303.424871][ T277] free_unref_page_prepare+0x637/0x6c0 [ 303.430319][ T277] free_unref_page+0x8f/0x2a0 [ 303.434984][ T277] __unfreeze_partials+0x188/0x1e0 [ 303.440091][ T277] put_cpu_partial+0x12d/0x190 [ 303.444860][ T277] qlist_free_all+0x35/0x90 [ 303.449363][ T277] kasan_quarantine_reduce+0x150/0x160 [ 303.454807][ T277] __kasan_slab_alloc+0x2f/0xc0 [ 303.459650][ T277] slab_post_alloc_hook+0x4c/0x380 [ 303.464774][ T277] kmem_cache_alloc_node+0x184/0x2c0 [ 303.470047][ T277] __alloc_skb+0xf4/0x750 [ 303.474365][ T277] rtmsg_ifinfo_build_skb+0x80/0x180 [ 303.479651][ T277] rtmsg_ifinfo+0x71/0x120 [ 303.484081][ T277] netdev_state_change+0xf4/0x160 [ 303.489093][ T277] linkwatch_do_dev+0x10d/0x160 [ 303.493930][ T277] __linkwatch_run_queue+0x4b1/0x7c0 [ 303.499207][ T277] linkwatch_event+0x48/0x50 [ 303.503830][ T277] [ 303.506143][ T277] Memory state around the buggy address: [ 303.511755][ T277] ffff8880240fcf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 303.519810][ T277] ffff8880240fcf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 303.528398][ T277] >ffff8880240fd000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 303.536444][ T277] ^ [ 303.542592][ T277] ffff8880240fd080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 303.550680][ T277] ffff8880240fd100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 303.558740][ T277] ================================================================== [ 303.566824][ T277] Disabling lock debugging due to kernel taint [ 303.575653][ T277] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 303.582888][ T277] CPU: 0 PID: 277 Comm: jfsCommit Tainted: G B syzkaller #0 [ 303.591496][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 303.601579][ T277] Call Trace: [ 303.604882][ T277] [ 303.607831][ T277] dump_stack_lvl+0x188/0x250 [ 303.612537][ T277] ? show_regs_print_info+0x20/0x20 [ 303.617763][ T277] ? load_image+0x410/0x410 [ 303.622292][ T277] panic+0x2f8/0x850 [ 303.626216][ T277] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 303.632397][ T277] ? bpf_jit_dump+0xd0/0xd0 [ 303.636940][ T277] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 303.642959][ T277] ? _raw_spin_unlock+0x40/0x40 [ 303.647838][ T277] ? txEnd+0x329/0x520 [ 303.651933][ T277] check_panic_on_warn+0x80/0xa0 [ 303.656896][ T277] ? txEnd+0x329/0x520 [ 303.660990][ T277] end_report+0x6d/0xf0 [ 303.665167][ T277] kasan_report+0x102/0x130 [ 303.669697][ T277] ? txEnd+0x329/0x520 [ 303.673800][ T277] kasan_check_range+0x235/0x290 [ 303.678771][ T277] txEnd+0x329/0x520 [ 303.682696][ T277] jfs_lazycommit+0x5cf/0xb60 [ 303.687415][ T277] ? txFreelock+0x5a0/0x5a0 [ 303.691943][ T277] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 303.697869][ T277] ? sched_dynamic_update+0x210/0x210 [ 303.703267][ T277] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 303.709192][ T277] ? __kthread_parkme+0x14e/0x1b0 [ 303.714245][ T277] kthread+0x42e/0x520 [ 303.718341][ T277] ? txFreelock+0x5a0/0x5a0 [ 303.722864][ T277] ? kthread_blkcg+0xd0/0xd0 [ 303.727483][ T277] ret_from_fork+0x1f/0x30 [ 303.732337][ T277] [ 303.735452][ T277] Kernel Offset: disabled [ 303.739769][ T277] Rebooting in 86400 seconds..