last executing test programs: 6.800272491s ago: executing program 3 (id=5132): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000003900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000000340), &(0x7f0000001540)='./file3\x00', 0x20010202, &(0x7f0000000100)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r4, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r4, @ANYRESHEX=r3, @ANYRES32], 0x1, 0x14f3, &(0x7f0000006b40)="$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") truncate(&(0x7f0000000000)='./file2\x00', 0x2328) 6.079547112s ago: executing program 3 (id=5137): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xc}) 5.392967189s ago: executing program 4 (id=5142): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@quota}, {@noinit_itable}, {@abort}, {@resgid, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x82078, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40e8662e, &(0x7f0000000780)={0xba, 0xd000000}) 4.838263426s ago: executing program 3 (id=5145): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@bh}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000000500)="$eJzs3MtvVFUYAPDv3r54tyo+QNAqJhIfLS3PhRuMJi40MdEFxlVtC0EGqrQmQkhAF7g0JO6NSxP/Ale6MerKxMSV7g0JMWxEE5Mx9869nXE6Uzt0YID5/ZIL58w9wznfnHPmPs5cAuhb49kfScSWiPg1IjbUsv8tMF7768b1C7N/Xb8wm0S1+sYfSV7uz+sXZsui5fs21zLVapEfaVHv5bcjZiqV+bNFfnLp9HuTi+fOP3/y9MyJ+RPzZ6aPHDmwf/fwoemDXYlzNGvrSCzs2vHKW1demz125Z0fvsrau6XY3xhHt4zXPt2VBrpdU+9tbUgngz1sCB3JhmLWXUP5/B+Ngdi4vG80Xv64p40DbqlqtVptdXwuXKoC97Aket0CoDfKA312/Vtut+nU445w7WjE+4dr8d8ottqewUiLMkNN17fdNB4Rxy79/Xm2xS26DwEA0OiboxHxXKvzvzQeaii3rVhDGYuI+yLi/oh4ICK2R8SDEXnZhyPikQ7rb14hWXn+k169qcDWKDv/e6FY21o+//unmsdfGBsoclvz+IeS4ycr8/uKz2RvDI1k+alV6vj2pZ8/bbev8fwv27L6y3PBmvTqYNMNurmZpZl1hr3s2kcROweb4s8lUS7jJBGxIyJ2dvQv168wTj7z5a52perxb4yIVvGvogvrTNUvIp6u9f+laIq/lLRdn5w6fGj64OSGqMzvmyxHxUo//nT59Xb1/3//31pZ/29qHv/13ruYDflkQ8TiufOn8vXaxc7ruPzbJy2vaTatY/wPJ2/m6eHitQ9nlpbOTkUMJ6+ufH26/t4yX5bP4t+7p9X4T/PvuCj6/9GIyAbx7oh4LCIeL9r+REQ8GRF7Von/+xeferfdvvbxr3JXvouy+Oda9H/D+B/LUvX+7zwxcOq7rzuPv5T1/4E8tbd4ZS3ff2tt4Ho+OwAAALhbpPlv4JN0YjmdphMTtd/wb49NaWVhcenZ4wsfnJmr/VZ+LIbS8k7XaMP90Kni3nCZn27K7y/uG382sDHPT8wuVOZ6HTz0uc1t5n/m93vwORWgiee1oH+Z/9C/zH/oX/X5f6in7QBuP8d/6F+t5v/FHrQDuP0c/6F/mf/Qv8x/6F/mP/Slts/Gp+t65P+uTfyy7Y5oxl2QiLTzdw1GL9s83NPabzoxuOb/zOImEyMtd/X6mwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA7/g0AAP//hh/x1w==") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) 4.085633481s ago: executing program 4 (id=5148): getpid() syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x999, 0x5932}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 3.074233536s ago: executing program 3 (id=5153): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000740)={0x11, 0x1e, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 3.056402092s ago: executing program 4 (id=5155): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040000010300000009210000000122f80409058103"], 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x56, &(0x7f0000000400)={0x5, 0xf, 0x56, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x1, 0x7, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x89, 0xff, 0x7, 0x5, 0xd5}, @generic={0x3c, 0x10, 0x7, "914d2af4a9f829d1edefff0508a64d5207caae6dc1f883d8cb801d076f394f009a50443b1fe9b9d5cad1d2b441236f5155df2ed496921926a0"}]}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2.867238096s ago: executing program 2 (id=5157): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000100)="469dc2d34ae2b700000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.654638516s ago: executing program 3 (id=5158): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) 2.552681924s ago: executing program 2 (id=5159): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r2}) 2.44215134s ago: executing program 0 (id=5161): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x2040, 0x0) 2.294123929s ago: executing program 2 (id=5162): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x125, 0x0, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.292692301s ago: executing program 3 (id=5163): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read$dsp(r0, &(0x7f00000000c0)=""/219, 0xdb) 2.203614305s ago: executing program 5 (id=5164): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 2.044467849s ago: executing program 2 (id=5165): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4607020000ff7f00000000000002003e00edfffbff9402000000000000400000000000000034000000000000000f00000000003800010000000200000003000000970f000004000000000000000d00000000000000c801000000000000e6"], 0x178) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 2.018461029s ago: executing program 0 (id=5167): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100263270573a43a1198e8ccc0608000300", @ANYRES32=r2], 0x38}}, 0x886) 1.966821383s ago: executing program 5 (id=5168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000c0000000800000040"], 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x201c004, &(0x7f00000001c0)=ANY=[], 0x1, 0x2ca, &(0x7f0000000800)="$eJzs3c9qY1UYAPDvJjdpqosUcaMIXtCFqzJ166ZVRhC7UiKoiAbbAUnCwAwErGBmVj6BS9/DB3Dhxo3P4FZwN7OoXLn35uYmM4l/0pqBmd9vUQ7nnO/c75zTpHSRL1+8Mhmd3U7i/oNZpJFE6ziO42ESB9GK2r1IAwB4ejzM8/gj3yZyv3X92QAAu1D9/c8/e9J5AAC78+HHn7x/cnp684Ms68VL/e+mg2Tl//qTW/FVjOM8bkQ/LiPyhardKSalWeEgXp/MpoPpIGLy+S91/O8RZfxR9OPg8fh33zu9eZRVFvHPRUS5cBYntzp1Kv14cX38m4/Gx2QWg2688dpS/ofRj1+/jNsxjrMoYpv4b4+y7J38+wfffFo8pohPWjHYi7Nk+STy9k4uBAAAAAAAAAAAAAAAAAAAAACAZ8JhliVV+Z6yfk/RVdbPmQ7al+X4YVZbru8zK34WFiVyqvpAecxL9Mzy+KGur3Mjy7J8PrGJT+Pl1BcLAAAAAAAAAAAAAAAAAAAAQOHu1xej4Xh8fmebRvQe6amrAdQf69925eOlnlfjYjRsb15w798/K73XbLzI9W8nR5rGdsfynxv7RT5XW+enelvN0F5zuR9F1agv5lp38cLb1aIXo2E2H6oPeTRM/ulZvfriflwe6sZVE8vLX4nLfJFPeae9Rarj8XlaZlhGda/pNLrPrx36M8/ztVHJvITGouet36o7ms+pxpei6lfYmqd36ldlE746p/d41M+bt7PxLaN9pTccAAAAAAAAAAAAAAAAAABgo+ZDv/OO/aXB+xuCqv7W/54cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxI8/3/daMXEas9q41OE7xxTtPoxp27T3J/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBv+CgAA//9iwzfk") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) 1.699414398s ago: executing program 1 (id=5169): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x28, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x12, "200ed578c4f9ff410400fec4ed0581db"}]}}}}}}}}, 0x0) 1.628261998s ago: executing program 2 (id=5170): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,noquota,nointegrity,errors=continue,iocharset=cp863,noquota,gid=', @ANYRESHEX=0x0, @ANYBLOB=',discard=0x0000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB="0000bbaa213ca1750a73593e8b6b51ec762e74cada46036fb2cd30b777e4a35afadbbd049c95b9880c70e694709bce9011b4c0460c95d9e0cc473d9f4f1841cdaff7b2a25ff3baddc86b3ab69e93b6beea217b6ff816e2f122cb63010bce65149c059d20b376f3696de010eb1b9ca12fc97b85d273e059e8c625da1575d7ac7d39571c4447ebadc4da39b8bcdf520b21994c5b02d448852f9765d56ffcedca0ad05a7fd150d8028a6997510bf1bf9871f25c4ab5966143ab5fbf218f99d125b00c5ebf68a5ad9dd56d7a"], 0x1, 0x61b6, &(0x7f00000075c0)="$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") r0 = open(&(0x7f0000000080)='.\x00', 0x10000, 0x5b) getdents(r0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f000001f940)) 1.463213352s ago: executing program 1 (id=5171): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x40000000, &(0x7f0000002180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 1.462000125s ago: executing program 0 (id=5183): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0xffffffff, "5e5c3446aa0ecd604c893eba3198600b1891109654fe9676d14574be70b6225c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x80ffff, 0xffffffffffffffff}) 1.425445565s ago: executing program 5 (id=5172): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.215708717s ago: executing program 1 (id=5173): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) close(0x3) write$FUSE_STATX(r0, &(0x7f0000004380)={0x130, 0x0, 0x0, {0x4, 0xfffffff7, 0x0, '\x00', {0x8000, 0x7, 0x4, 0x3, 0x0, 0x0, 0x2000, '\x00', 0x26, 0x77f, 0x5d, 0x5114, {0x8000000000000000, 0x9}, {0x8, 0x2}, {0xc, 0x8}, {0x6, 0x9}, 0x8, 0x5, 0x10, 0x2}}}, 0x130) 987.27625ms ago: executing program 0 (id=5174): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@loopback, @in6=@loopback, 0x4e23, 0x2, 0x4e20, 0x6, 0xa, 0xa0, 0x20, 0x3c}, {0x0, 0x9031, 0x9, 0x0, 0xfffffffffffffff4, 0x4, 0x7, 0x7}, {0x8001, 0x5, 0x71a, 0x9}, 0x9, 0x6e6bbe, 0x1, 0x7bbbbeaf0e80c2d7, 0x2}, {{@in=@private=0xa010100, 0x4d2, 0x3c}, 0x2, @in6=@mcast1, 0x34ff, 0x0, 0x3, 0xd, 0x1, 0x81d, 0xb}}, 0xe8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYBLOB="0400"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 956.426528ms ago: executing program 1 (id=5175): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)='\x00', 0x19fff}], 0x1, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x41, 0xffffff7f}}, @sndrcv={0x30, 0x84, 0x1, {0x101, 0x2, 0x8, 0x8, 0x0, 0x1e5, 0x820, 0x2}}], 0x50, 0x4048800}, 0x0) 956.317624ms ago: executing program 4 (id=5176): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x372, @time={0x7665642f, 0x6}, 0x0, {}, 0x1, 0x1, 0x70}) 675.746139ms ago: executing program 0 (id=5177): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14) 628.317189ms ago: executing program 1 (id=5178): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={r1, 0x9, 0xffff1e0d, 0xa01, 0x200, 0xb5, 0xc91b, 0x3ff, {r1, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}}, 0x9, 0x7a9, 0x8, 0x400, 0x4}}, &(0x7f0000000180)=0xb0) 523.650658ms ago: executing program 4 (id=5179): r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) read$usbmon(r0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0xec2) 498.151234ms ago: executing program 5 (id=5180): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0xff, 0x0}}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r1, 0x3, 0x67e, 0x2, 0x1, 0xe0}, &(0x7f00000000c0)=0x14) 396.334762ms ago: executing program 0 (id=5181): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x800744, &(0x7f0000000300)={[{@data_err_ignore}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nobh}, {@errors_remount}, {@nodiscard}, {@grpid}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") inotify_add_watch(0xffffffffffffffff, 0x0, 0x100) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 331.164438ms ago: executing program 1 (id=5182): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x24}}, 0x0) 197.586109ms ago: executing program 2 (id=5184): pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r1, r1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50) tee(r0, r1, 0x7f, 0x0) 104.458397ms ago: executing program 4 (id=5185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pimreg1\x00', 0x42a5e4b325a47b01}) io_setup(0x2, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x2, r0, 0x0, 0x0, 0x3}]) 84.921633ms ago: executing program 5 (id=5186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x10) 0s ago: executing program 5 (id=5187): r0 = inotify_init1(0x80000) close(r0) fanotify_init(0x8, 0x1000) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x541b, 0xfffffffffffffffa) kernel console output (not intermixed with test programs): ce=d7.34 [ 636.976180][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.006157][ T10] usb 4-1: Product: syz [ 637.021954][ T10] usb 4-1: Manufacturer: syz [ 637.033265][ T10] usb 4-1: SerialNumber: syz [ 637.080726][ T5746] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 637.125737][T17134] bad cache= option: none8 [ 637.125737][T17134] nr_mlock 0 [ 637.125737][T17134] nr_zspages 0 [ 637.125737][T17134] nr_free_cma 0 [ 637.125737][T17134] numa_hit 2405620 [ 637.125737][T17134] numa_miss 1 [ 637.125737][T17134] numa_foreign 1 [ 637.125737][T17134] numa_interleave 6580 [ 637.125737][T17134] numa_local 2401975 [ 637.125737][T17134] numa_other 3646 [ 637.125737][T17134] nr_inactive_anon 0 [ 637.125737][T17134] nr_active_anon 7203 [ 637.125737][T17134] nr_inactive_file 40593 [ 637.125737][T17134] nr_active_file 17374 [ 637.125737][T17134] nr_unevictable 768 [ 637.125737][T17134] nr_slab_reclaimable 11165 [ 637.125737][T17134] nr_slab_unreclaimable 100634 [ 637.125737][T17134] nr_isolated_anon 0 [ 637.125737][T17134] nr_isolated_file 0 [ 637.125737][T17134] workingset_nodes 0 [ 637.125737][T17134] workingset_refault_anon 2312 [ 637.125737][T17134] workingset_refault_file 0 [ 637.125737][T17134] workingset_activate_anon 230 [ 637.125737][T17134] workingset_activate_file 0 [ 637.125737][T17134] workingset_restore_anon 0 [ 637.125737][T17134] workingset_restore_file 0 [ 637.125737][T17134] workingset_nodereclaim 0 [ 637.125737][T17134] nr_anon_pages 6732 [ 637.125737][T17134] nr_mapped 36000 [ 637.125737][T17134] nr_file_pages 59069 [ 637.125737][T17134] nr_dirty 468 [ 637.125737][T17134] nr_writeback 0 [ 637.125737][T17134] nr_shmem 1286 [ 637.125737][T17134] nr_shmem_hugepages 0 [ 637.125737][T17134] nr_shmem_pmdmapped 0 [ 637.125737][T17134] nr_file_hugepages 0 [ 637.125737][T17134] nr_file_pmdmapped 0 [ 637.125737][T17134] nr_anon_transparent_hugepages 0 [ 637.125737][T17134] nr_vmscan_write 6139 [ 637.125737][T17134] nr_vmscan_immediate_reclaim 0 [ 637.125737][T17134] nr_dirtied 25715 [ 637.125737][T17134] nr_written 24968 [ 637.125737][T17134] nr_throttled_written 0 [ 637.125737][T17134] nr_kernel_misc_reclaimable 0 [ 637.125737][T17134] nr_foll_pin_acquired 8234 [ 637.125737][T17134] nr_foll_pin_released 8264 [ 637.126523][T17134] CIFS: VFS: bad cache= option: none8 [ 637.126523][T17134] nr_mlock 0 [ 637.126523][T17134] nr_zspages 0 [ 637.126523][T17134] nr_free_cma 0 [ 637.126523][T17134] numa_hit 2405620 [ 637.126523][T17134] numa_miss 1 [ 637.126523][T17134] numa_foreign 1 [ 637.126523][T17134] numa_interleave 6580 [ 637.126523][T17134] numa_local 2401975 [ 637.126523][T17134] numa_other 3646 [ 637.126523][T17134] nr_inactive_anon 0 [ 637.126523][T17134] nr_active_anon 7203 [ 637.126523][T17134] nr_inactive_file 40593 [ 637.126523][T17134] nr_active_file 17374 [ 637.126523][T17134] nr_unevictable 768 [ 637.126523][T17134] nr_slab_reclaimable 11165 [ 637.126523][T17134] nr_slab_unreclaimable 100634 [ 637.126523][T17134] nr_isolated_anon 0 [ 637.126523][T17134] nr_isolated_file 0 [ 637.126523][T17134] workingset_nodes 0 [ 637.126523][T17134] workingset_refault_anon 2312 [ 637.126523][T17134] workingset_refault_file 0 [ 637.126523][T17134] workingset_activate_anon 230 [ 637.126523][T17134] workingset_activate_file 0 [ 637.126523][T17134] workingset_restore_anon 0 [ 637.126523][T17134] workingset_restore_file 0 [ 637.126523][T17134] workingset_nodereclaim 0 [ 637.126523][T17134] nr_anon_pages 6732 [ 637.126523][T17134] nr_mapped 36000 [ 637.126523][T17134] nr_file_pages 59069 [ 637.126523][T17134] nr_dirty 468 [ 637.126523][T17134] nr_writeback 0 [ 637.126523][T17134] nr_shmem 1286 [ 637.126523][T17134] nr_shmem_hugepages 0 [ 637.126523][T17134] nr_shmem_pmdmapped 0 [ 637.126523][T17134] nr_file_hugepages 0 [ 637.126523][T17134] nr_file_pmdmapped 0 [ 637.126523][T17134] nr_anon_transparent_hugepages 0 [ 637.126523][T17134] nr_vmscan_write 6139 [ 637.126523][T17134] nr_vmscan_immediate_reclaim 0 [ 637.126523][T17134] nr_dirtied 25715 [ 637.126523][T17134] nr_written 24968 [ 637.126523][T17134] nr_throttled_written 0 [ 637.126523][T17134] nr_kernel_misc_reclaimable 0 [ 637.126523][T17134] nr_foll_pin_acquired 8234 [ 637.126523][T17134] nr_foll_pin_released 8264 [ 637.402993][ T5746] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 637.419403][T17132] block device autoloading is deprecated and will be removed. [ 637.655170][ T5746] usb 1-1: config 0 has no interface number 0 [ 637.666557][ T5746] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 637.696419][ T5746] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 637.815595][ T10] qmi_wwan 4-1:251.0: probe with driver qmi_wwan failed with error -22 [ 637.951474][ T5746] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 638.033303][ T10] usb 4-1: USB disconnect, device number 26 [ 638.047460][ T5746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.102764][ T5746] usb 1-1: config 0 descriptor?? [ 638.133721][T17126] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 638.186153][ T5746] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 638.401432][ T5638] usb 1-1: USB disconnect, device number 35 [ 638.747066][T17160] loop1: detected capacity change from 0 to 256 [ 638.829401][T17160] FAT-fs (loop1): Directory bread(block 64) failed [ 638.850031][T17160] FAT-fs (loop1): Directory bread(block 65) failed [ 638.880057][T17160] FAT-fs (loop1): Directory bread(block 66) failed [ 638.898270][T17160] FAT-fs (loop1): Directory bread(block 67) failed [ 638.913784][T17160] FAT-fs (loop1): Directory bread(block 68) failed [ 638.928965][T17160] FAT-fs (loop1): Directory bread(block 69) failed [ 638.952885][T17160] FAT-fs (loop1): Directory bread(block 70) failed [ 638.966504][T17160] FAT-fs (loop1): Directory bread(block 71) failed [ 638.992534][T17160] FAT-fs (loop1): Directory bread(block 72) failed [ 638.999279][T17160] FAT-fs (loop1): Directory bread(block 73) failed [ 639.574835][T17176] loop0: detected capacity change from 0 to 2048 [ 639.637418][T17177] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 639.912352][ T6019] udevd[6019]: symlink '../../loop4' '/dev/disk/by-diskseq/1451.tmp-b7:4' failed: Read-only file system [ 639.989633][T17182] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4474'. [ 640.008037][ T6079] udevd[6079]: symlink '../../loop0' '/dev/disk/by-diskseq/1470.tmp-b7:0' failed: Read-only file system [ 640.044473][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/1466.tmp-b7:2' failed: Read-only file system [ 640.067958][ T6079] udevd[6079]: symlink '../../loop0' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:0' failed: Read-only file system [ 640.124818][ T5987] udevd[5987]: symlink '../../loop1' '/dev/disk/by-diskseq/1469.tmp-b7:1' failed: Read-only file system [ 640.185659][ T6019] udevd[6019]: symlink '../../loop5' '/dev/disk/by-diskseq/1463.tmp-b7:5' failed: Read-only file system [ 640.247767][ T6079] udevd[6079]: symlink '../../loop4' '/dev/disk/by-diskseq/1451.tmp-b7:4' failed: Read-only file system [ 640.341563][ T6079] udevd[6079]: symlink '../../loop0' '/dev/disk/by-diskseq/1470.tmp-b7:0' failed: Read-only file system [ 640.446529][ T6079] udevd[6079]: symlink '../../loop0' '/dev/disk/by-diskseq/1470.tmp-b7:0' failed: Read-only file system [ 640.452918][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/1466.tmp-b7:2' failed: Read-only file system [ 640.589722][T17197] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4481'. [ 640.674121][T17195] loop2: detected capacity change from 0 to 4096 [ 640.733554][T17195] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 640.754027][T17195] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 640.787239][T17186] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.859881][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 640.859908][ T31] audit: type=1800 audit(1777419782.098:151): pid=17195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4480" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 640.910957][T17195] ntfs3(loop2): ino=1e, "file1" attr_set_size_ex [ 641.012184][T15217] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 641.049971][T17194] ntfs3(loop2): ino=1e, "file1" attr_set_size_ex [ 641.219731][T17186] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.314724][T17193] loop0: detected capacity change from 0 to 32768 [ 641.334552][T17193] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4478 (17193) [ 641.413645][T17193] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 641.464800][T17193] BTRFS info (device loop0): using crc32c checksum algorithm [ 641.676029][T17186] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.878840][T17224] loop2: detected capacity change from 0 to 2048 [ 641.884363][T17193] BTRFS info (device loop0): turning on async discard [ 641.913368][T17193] BTRFS info (device loop0): enabling free space tree [ 641.936528][T17193] BTRFS info (device loop0): enabling auto defrag [ 641.960847][T17193] BTRFS info (device loop0): force zlib compression, level 3 [ 641.988304][T17230] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 642.014418][T17224] syz.2.4488: attempt to access beyond end of device [ 642.014418][T17224] loop2: rw=0, sector=2198922592328, nr_sectors = 2 limit=2048 [ 642.034959][T17193] BTRFS info (device loop0): max_inline set to 0 [ 642.075822][T17224] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=1) [ 642.129576][T17186] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.239970][T17230] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 642.274500][T17230] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 642.298645][T17230] Remounting filesystem read-only [ 642.326868][ T5623] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 642.442922][ T5638] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 642.628470][ T5638] usb 5-1: Using ep0 maxpacket: 8 [ 642.643454][ T5638] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 642.686186][ T5638] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 642.731903][ T5638] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 642.780499][ T5638] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 642.817714][ T5638] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 642.847828][ T5638] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.884454][ T87] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.968703][T17243] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 643.085378][T15647] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.115136][ T5638] usb 5-1: GET_CAPABILITIES returned 0 [ 643.142387][ T5638] usbtmc 5-1:16.0: can't read capabilities [ 643.268312][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.319692][ T5638] usb 5-1: USB disconnect, device number 33 [ 643.417390][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.208976][T17271] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 644.355406][ T5638] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 644.514833][ T5638] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 644.526210][ T5638] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 644.530548][T17256] loop3: detected capacity change from 0 to 32768 [ 644.541957][ T5638] usb 1-1: config 0 has no interface number 0 [ 644.560073][ T5638] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 644.574987][ T5638] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.586065][ T5638] usb 1-1: Product: syz [ 644.595139][T17256] JBD2: Ignoring recovery information on journal [ 644.632773][ T5638] usb 1-1: Manufacturer: syz [ 644.638932][ T5638] usb 1-1: SerialNumber: syz [ 644.646195][T17256] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 644.689226][ T5638] usb 1-1: config 0 descriptor?? [ 644.732213][ T5760] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 644.739097][T17256] (syz.3.4499,17256,1):ocfs2_check_dir_entry:334 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 644.858012][ T5634] ocfs2: Unmounting device (7,3) on (node local) [ 644.954130][ T5760] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.974890][ T5760] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.993174][ T6079] udevd[6079]: symlink '../../loop3' '/dev/disk/by-diskseq/1478.tmp-b7:3' failed: Read-only file system [ 644.993992][ T5760] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 645.027588][ T5760] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 645.048417][ T5760] usb 2-1: Manufacturer: syz [ 645.056272][ T6079] udevd[6079]: symlink '../../loop3' '/dev/disk/by-diskseq/1478.tmp-b7:3' failed: Read-only file system [ 645.070096][ T5760] usb 2-1: config 0 descriptor?? [ 645.114455][ T6079] udevd[6079]: symlink '../../loop3' '/dev/disk/by-diskseq/1479.tmp-b7:3' failed: Read-only file system [ 645.176317][ T5638] uvcvideo 1-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 645.198170][ T6000] udevd[6000]: symlink '../../loop5' '/dev/disk/by-diskseq/1463.tmp-b7:5' failed: Read-only file system [ 645.229118][ T5638] uvcvideo 1-1:0.64: No valid video chain found. [ 645.365576][ T6079] udevd[6079]: symlink '../../loop2' '/dev/disk/by-diskseq/1476.tmp-b7:2' failed: Read-only file system [ 645.489142][ T6079] udevd[6079]: symlink '../../loop2' '/dev/disk/by-diskseq/1476.tmp-b7:2' failed: Read-only file system [ 645.539919][T17268] loop0: detected capacity change from 0 to 4096 [ 645.549241][T17268] EXT4-fs: Ignoring removed mblk_io_submit option [ 645.559028][T17268] EXT4-fs (loop0): Test dummy encryption mode enabled [ 645.594528][T17268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.635968][ T5024] usb 1-1: USB disconnect, device number 36 [ 645.772532][ T6079] udevd[6079]: symlink '../../loop0' '/dev/disk/by-diskseq/1480.tmp-b7:0' failed: Read-only file system [ 645.808781][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/1476.tmp-b7:2' failed: Read-only file system [ 645.824866][ T6079] udevd[6079]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 645.919941][ T5760] uclogic 0003:256C:006D.004B: failed retrieving string descriptor #200: -71 [ 645.939606][ T5760] uclogic 0003:256C:006D.004B: failed retrieving pen parameters: -71 [ 645.965433][ T5760] uclogic 0003:256C:006D.004B: failed probing pen v2 parameters: -71 [ 646.004180][ T5760] uclogic 0003:256C:006D.004B: failed probing parameters: -71 [ 646.022164][T17306] trusted_key: encrypted_key: keyword 'upd' not recognized [ 646.028108][ T5760] uclogic 0003:256C:006D.004B: probe with driver uclogic failed with error -71 [ 646.036562][ T6079] udevd[6079]: symlink '../../loop0' '/dev/disk/by-diskseq/1480.tmp-b7:0' failed: Read-only file system [ 646.079677][ T5760] usb 2-1: USB disconnect, device number 33 [ 646.189519][T17308] loop4: detected capacity change from 0 to 256 [ 646.256936][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.312205][T17308] FAT-fs (loop4): Directory bread(block 64) failed [ 646.320587][T17308] FAT-fs (loop4): Directory bread(block 65) failed [ 646.343956][T17308] FAT-fs (loop4): Directory bread(block 66) failed [ 646.364741][T17308] FAT-fs (loop4): Directory bread(block 67) failed [ 646.388049][T17308] FAT-fs (loop4): Directory bread(block 68) failed [ 646.409088][T17308] FAT-fs (loop4): Directory bread(block 69) failed [ 646.433166][T17308] FAT-fs (loop4): Directory bread(block 70) failed [ 646.440322][T17310] loop3: detected capacity change from 0 to 128 [ 646.449263][T17308] FAT-fs (loop4): Directory bread(block 71) failed [ 646.469373][T17308] FAT-fs (loop4): Directory bread(block 72) failed [ 646.499778][T17308] FAT-fs (loop4): Directory bread(block 73) failed [ 647.125830][T17323] cgroup: fork rejected by pids controller in /syz0 [ 647.596345][T17335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4533'. [ 647.856131][T17338] loop3: detected capacity change from 0 to 256 [ 648.601289][ T5768] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 648.638318][T17352] loop1: detected capacity change from 0 to 512 [ 648.729814][T17352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.764126][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.788356][T17352] ext4 filesystem being mounted at /779/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 648.836928][ T5768] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 648.858533][ T5768] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 648.905690][ T5768] usb 4-1: config 0 has no interface number 0 [ 648.927599][ T5768] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 648.967121][ T5768] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 648.994773][ T5768] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 649.004731][ T5768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.029416][T17352] EXT4-fs error (device loop1): ext4_empty_dir:3085: inode #12: comm syz.1.4543: Directory block failed checksum [ 649.032955][ T5768] usb 4-1: config 0 descriptor?? [ 649.204050][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.250176][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.668673][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.805326][ T5768] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input27 [ 649.908093][ T5768] input: failed to attach handler kbd to device input27, error: -5 [ 649.926806][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 649.941381][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 649.955260][ T5768] usb 4-1: USB disconnect, device number 27 [ 649.963191][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 649.996158][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 650.009138][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 650.093526][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.196676][ T6019] udevd[6019]: symlink '../../loop1' '/dev/disk/by-diskseq/1489.tmp-b7:1' failed: Read-only file system [ 650.255719][T16149] udevd[16149]: symlink '../../loop5' '/dev/disk/by-diskseq/1463.tmp-b7:5' failed: Read-only file system [ 650.256048][ T5987] udevd[5987]: symlink '../../loop2' '/dev/disk/by-diskseq/1476.tmp-b7:2' failed: Read-only file system [ 650.278044][ T6079] udevd[6079]: symlink '../../loop4' '/dev/disk/by-diskseq/1485.tmp-b7:4' failed: Read-only file system [ 650.324180][ T6000] udevd[6000]: symlink '../../loop5' '/dev/disk/by-diskseq/1463.tmp-b7:5' failed: Read-only file system [ 650.470022][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/1476.tmp-b7:2' failed: Read-only file system [ 650.471578][ T5987] udevd[5987]: symlink '../../loop1' '/dev/disk/by-diskseq/1489.tmp-b7:1' failed: Read-only file system [ 650.638295][ T6079] udevd[6079]: symlink '../../loop5' '/dev/disk/by-diskseq/1463.tmp-b7:5' failed: Read-only file system [ 650.829142][ T6079] udevd[6079]: symlink '../../loop3' '/dev/disk/by-diskseq/1487.tmp-b7:3' failed: Read-only file system [ 650.957830][ T6019] udevd[6019]: symlink '../../loop1' '/dev/disk/by-diskseq/1489.tmp-b7:1' failed: Read-only file system [ 651.241948][ T5638] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 651.434207][ T5638] usb 2-1: Using ep0 maxpacket: 16 [ 651.449018][ T5638] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.519268][ T5638] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 651.563806][ T5638] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 651.589026][ T5638] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 651.631196][ T5638] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 651.647478][ T49] bridge_slave_1: left allmulticast mode [ 651.691977][ T49] bridge_slave_1: left promiscuous mode [ 651.699394][ T5638] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 651.726288][ T5638] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 651.731409][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.749192][ T5638] usb 2-1: Manufacturer: syz [ 651.765043][ T30] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 651.784681][ T5638] usb 2-1: config 0 descriptor?? [ 651.813779][ T49] bridge_slave_0: left allmulticast mode [ 651.829672][ T49] bridge_slave_0: left promiscuous mode [ 651.840262][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.954680][ T30] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 651.957589][T17388] loop4: detected capacity change from 0 to 32768 [ 651.970673][ T30] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 652.002083][ T30] usb 3-1: config 0 has no interface number 0 [ 652.024227][T17419] loop5: detected capacity change from 0 to 512 [ 652.045375][ T30] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 652.087737][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.127741][T17419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.145015][T15217] Bluetooth: hci0: command tx timeout [ 652.185272][ T30] usb 3-1: Product: syz [ 652.203830][ T30] usb 3-1: Manufacturer: syz [ 652.246029][ T30] usb 3-1: SerialNumber: syz [ 652.247338][T17419] ext4 filesystem being mounted at /766/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.326139][ T30] usb 3-1: config 0 descriptor?? [ 652.346358][T17419] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.4569: corrupted xattr block 33: e_value size too large [ 652.402836][ T5638] rc_core: IR keymap rc-hauppauge not found [ 652.408902][ T5638] Registered IR keymap rc-empty [ 652.429840][ T5638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 652.493949][ T5638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 652.565272][ T5638] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 652.616878][ T5638] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input28 [ 652.685796][ T5638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 652.720202][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.768795][ T5638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 652.794875][ T5638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 652.797646][ T30] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 652.844512][T17433] loop4: detected capacity change from 0 to 2048 [ 652.857930][ T5638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 652.861365][ T30] uvcvideo 3-1:0.64: No valid video chain found. [ 652.893283][T17433] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 652.926510][ T5638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 652.943470][T17433] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 652.982786][ T5638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.032374][ T5638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.046432][T17433] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 653.103453][ T5638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.152223][ T5638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.184691][ T5638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.232668][ T5638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.286876][ T5638] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 653.319897][ T5638] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 653.355924][ T5638] usb 2-1: USB disconnect, device number 34 [ 653.364371][T17410] loop2: detected capacity change from 0 to 4096 [ 653.380323][T17410] EXT4-fs: Ignoring removed mblk_io_submit option [ 653.508024][T17410] EXT4-fs (loop2): Test dummy encryption mode enabled [ 653.691499][T17410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.769985][ T5760] usb 3-1: USB disconnect, device number 46 [ 653.894061][ T4349] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 654.061506][T17448] loop4: detected capacity change from 0 to 4096 [ 654.117659][T17448] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 654.130147][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.156083][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.184634][ T49] bond0 (unregistering): Released all slaves [ 654.206164][T17448] ntfs3(loop4): failed to convert "0080" to koi8-ru [ 654.214248][T15217] Bluetooth: hci0: command tx timeout [ 654.226417][T17448] ntfs3(loop4): failed to convert name for inode 1e. [ 654.246463][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 654.300872][T17448] ntfs3(loop4): ino=1f, mi_enum_attr [ 654.366086][ T49] tipc: Left network mode [ 654.668623][ T5622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.726298][ T49] IPVS: stopping backup sync thread 10900 ... [ 655.343763][T17468] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input29 [ 655.366500][T17466] loop2: detected capacity change from 0 to 4096 [ 655.390474][T17466] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 655.419682][ T6079] udevd[6079]: symlink '../../loop1' '/dev/disk/by-diskseq/1489.tmp-b7:1' failed: Read-only file system [ 655.535359][T17466] ntfs3(loop2): ino=19, mi_enum_attr [ 655.553735][T17466] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 655.693790][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/1500.tmp-b7:2' failed: Read-only file system [ 655.708231][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:2' failed: Read-only file system [ 656.003246][ T6079] udevd[6079]: symlink '../../loop2' '/dev/disk/by-diskseq/1500.tmp-b7:2' failed: Read-only file system [ 656.077697][ T6019] udevd[6019]: symlink '../../loop5' '/dev/disk/by-diskseq/1494.tmp-b7:5' failed: Read-only file system [ 656.128581][ T6079] udevd[6079]: symlink '../../loop2' '/dev/disk/by-diskseq/1501.tmp-b7:2' failed: Read-only file system [ 656.235939][ T6019] udevd[6019]: symlink '../../loop3' '/dev/disk/by-diskseq/1487.tmp-b7:3' failed: Read-only file system [ 656.291933][T15217] Bluetooth: hci0: command tx timeout [ 656.335730][T17489] loop3: detected capacity change from 0 to 64 [ 656.356225][ T5987] udevd[5987]: symlink '../../loop4' '/dev/disk/by-diskseq/1499.tmp-b7:4' failed: Read-only file system [ 656.406052][T17489] hfs: cannot create new inode: file count exceeds limit [ 656.509208][ T6079] udevd[6079]: symlink '../../loop3' '/dev/disk/by-diskseq/1502.tmp-b7:3' failed: Read-only file system [ 656.595756][ T6079] udevd[6079]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 656.686244][ T49] hsr_slave_0: left promiscuous mode [ 656.727800][T17498] loop1: detected capacity change from 0 to 16 [ 656.746944][ T49] hsr_slave_1: left promiscuous mode [ 656.786921][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.830235][T17498] erofs (device loop1): mounted with root inode @ nid 36. [ 656.853180][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.905162][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.918790][T17498] erofs (device loop1): bogus lookback distance 1 @ lcn 0 of nid 89 [ 656.961383][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.980143][T17498] erofs (device loop1): readahead error at folio 0 @ nid 89 [ 656.999225][T17498] syz.1.4589: attempt to access beyond end of device [ 656.999225][T17498] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 657.116985][T17498] erofs (device loop1): bogus lookback distance 1 @ lcn 0 of nid 89 [ 657.211039][T17498] erofs (device loop1): read error -117 @ 0 of nid 89 [ 657.248435][ T31] audit: type=1800 audit(1777419798.498:152): pid=17498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4589" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 657.292328][ T49] virt_wifi0: left promiscuous mode [ 657.316329][ T49] veth1_macvtap: left promiscuous mode [ 657.368631][ T49] veth0_macvtap: left allmulticast mode [ 657.396343][ T49] veth0_macvtap: left promiscuous mode [ 657.425934][ T49] veth1_vlan: left promiscuous mode [ 657.446087][ T49] veth0_vlan: left promiscuous mode [ 658.377805][T15217] Bluetooth: hci0: command tx timeout [ 658.488914][ T49] team0 (unregistering): Port device team_slave_1 removed [ 658.567991][ T49] team0 (unregistering): Port device team_slave_0 removed [ 658.785541][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 658.920042][T17514] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 658.957339][T17522] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 0, id = 0 [ 659.370933][ T30] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 659.543076][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.587504][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.659321][ T30] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 659.693033][ T30] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 659.726432][ T30] usb 4-1: Manufacturer: syz [ 659.790522][ T30] usb 4-1: config 0 descriptor?? [ 659.827447][ T49] IPVS: stop unused estimator thread 0... [ 660.011925][ T5760] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 660.205373][ T5760] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 660.256285][T17554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4608'. [ 660.314975][ T5760] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 660.357825][ T5760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.405347][ T5760] usb 3-1: Product: syz [ 660.421922][T17370] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.444957][ T5760] usb 3-1: Manufacturer: syz [ 660.451362][T15217] Bluetooth: hci0: command tx timeout [ 660.460079][ T6079] udevd[6079]: symlink '../../loop5' '/dev/disk/by-diskseq/1494.tmp-b7:5' failed: Read-only file system [ 660.461537][T17370] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.490458][ T5760] usb 3-1: SerialNumber: syz [ 660.548630][T17370] bridge_slave_0: entered allmulticast mode [ 660.607483][T17370] bridge_slave_0: entered promiscuous mode [ 660.642310][ T6019] udevd[6019]: symlink '../../loop1' '/dev/disk/by-diskseq/1505.tmp-b7:1' failed: Read-only file system [ 660.662683][ T30] uclogic 0003:256C:006D.004C: failed retrieving string descriptor #200: -71 [ 660.673425][T17370] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.699187][ T30] uclogic 0003:256C:006D.004C: failed retrieving pen parameters: -71 [ 660.705654][T17370] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.734782][ T30] uclogic 0003:256C:006D.004C: failed probing pen v2 parameters: -71 [ 660.746580][ T5760] usb 3-1: selecting invalid altsetting 1 [ 660.761389][ T30] uclogic 0003:256C:006D.004C: failed probing parameters: -71 [ 660.762446][T17370] bridge_slave_1: entered allmulticast mode [ 660.799155][T17370] bridge_slave_1: entered promiscuous mode [ 660.800644][ T30] uclogic 0003:256C:006D.004C: probe with driver uclogic failed with error -71 [ 660.879352][ T30] usb 4-1: USB disconnect, device number 28 [ 660.958444][ T5760] LME2510(C): Firmware Status: 1a 03 34 00 32 00 [ 660.958565][ T5760] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 660.987957][T17370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.017234][T17370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.233665][ T5760] usb 3-1: USB disconnect, device number 47 [ 661.250182][T17370] team0: Port device team_slave_0 added [ 661.283995][T17370] team0: Port device team_slave_1 added [ 661.348392][T17370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.357426][T17370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.395708][T17370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.457865][ T6079] udevd[6079]: symlink '../../loop3' '/dev/disk/by-diskseq/1503.tmp-b7:3' failed: Read-only file system [ 661.482821][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 661.518792][ T6019] udevd[6019]: symlink '../../loop5' '/dev/disk/by-diskseq/1494.tmp-b7:5' failed: Read-only file system [ 661.547453][T17370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.578058][T17370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.590326][ T6079] udevd[6079]: symlink '../../loop4' '/dev/disk/by-diskseq/1499.tmp-b7:4' failed: Read-only file system [ 661.628723][T17370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.697622][T17574] loop5: detected capacity change from 0 to 512 [ 661.733006][ T6079] udevd[6079]: symlink '../../loop1' '/dev/disk/by-diskseq/1505.tmp-b7:1' failed: Read-only file system [ 661.798794][T17574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.804856][ T6019] udevd[6019]: symlink '../../loop5' '/dev/disk/by-diskseq/1506.tmp-b7:5' failed: Read-only file system [ 661.826729][ T6019] udevd[6019]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 661.888468][T17574] EXT4-fs (loop5): shut down requested (2) [ 661.994999][T17370] hsr_slave_0: entered promiscuous mode [ 661.997048][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.038960][T17370] hsr_slave_1: entered promiscuous mode [ 662.065116][ T6079] udevd[6079]: symlink '../../loop5' '/dev/disk/by-diskseq/1506.tmp-b7:5' failed: Read-only file system [ 662.090360][T17370] debugfs: 'hsr0' already exists in 'hsr' [ 662.122719][T17370] Cannot create hsr debugfs directory [ 662.147472][ T6079] udevd[6079]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 662.171153][ T5746] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 662.331488][ T5746] usb 4-1: Using ep0 maxpacket: 8 [ 662.358580][ T5746] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 662.400240][T17587] loop2: detected capacity change from 0 to 4096 [ 662.406795][ T5746] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 662.453452][ T5746] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 662.487474][ T5746] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 662.517150][ T5746] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 662.571706][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.854351][ T5746] usb 4-1: GET_CAPABILITIES returned 0 [ 662.886412][ T5746] usbtmc 4-1:16.0: can't read capabilities [ 663.145075][ T30] usb 4-1: USB disconnect, device number 29 [ 663.260477][ T5746] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 663.435956][ T5746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.477382][ T5746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.536358][ T5746] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 663.565868][ T5746] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 663.602358][ T5746] usb 3-1: Manufacturer: syz [ 663.647306][ T5746] usb 3-1: config 0 descriptor?? [ 664.517418][ T5746] uclogic 0003:256C:006D.004D: failed retrieving string descriptor #200: -71 [ 664.547242][T17635] loop5: detected capacity change from 0 to 512 [ 664.557439][ T5746] uclogic 0003:256C:006D.004D: failed retrieving pen parameters: -71 [ 664.583832][T17635] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 664.614855][ T5746] uclogic 0003:256C:006D.004D: failed probing pen v2 parameters: -71 [ 664.645844][ T5746] uclogic 0003:256C:006D.004D: failed probing parameters: -71 [ 664.688514][ T5746] uclogic 0003:256C:006D.004D: probe with driver uclogic failed with error -71 [ 664.708238][T17635] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:482: comm syz.5.4633: Invalid block bitmap block 0 in block_group 0 [ 664.827666][T17635] loop5: lost filesystem error report for type 5 error -117 [ 664.831232][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 664.845071][ C0] EXT4-fs (loop5): initial error at time 1777419806: ext4_read_block_bitmap_nowait:482 [ 664.854810][ C0] EXT4-fs (loop5): last error at time 1777419806: ext4_read_block_bitmap_nowait:482 [ 664.876587][ T5746] usb 3-1: USB disconnect, device number 48 [ 664.888082][T17635] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 664.938718][T17635] loop5: lost filesystem error report for type 5 error -117 [ 664.944623][T17635] EXT4-fs error (device loop5): ext4_clear_blocks:874: inode #11: comm syz.5.4633: attempt to clear invalid blocks 983261 len 1 [ 665.032238][T17635] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 665.032806][T17635] EXT4-fs error (device loop5): __ext4_get_inode_loc:4884: comm syz.5.4633: Invalid inode table block 0 in block_group 0 [ 665.107579][T17635] loop5: lost filesystem error report for type 5 error -117 [ 665.108949][T17635] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 665.153063][T17635] loop5: lost filesystem error report for type 5 error -117 [ 665.157146][T17635] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 665.238007][T17635] loop5: lost filesystem error report for type 5 error -117 [ 665.245268][T17635] EXT4-fs error (device loop5): __ext4_get_inode_loc:4884: comm syz.5.4633: Invalid inode table block 0 in block_group 0 [ 665.334263][T17635] loop5: lost filesystem error report for type 5 error -117 [ 665.334740][T17635] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 665.482561][T17635] loop5: lost filesystem error report for type 5 error -117 [ 665.485924][T17635] EXT4-fs error (device loop5): ext4_truncate:4690: inode #11: comm syz.5.4633: mark_inode_dirty error [ 665.555074][T17635] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 665.556415][T17635] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 665.628808][T17635] loop5: lost filesystem error report for type 5 error -117 [ 665.628910][ T6079] udevd[6079]: symlink '../../loop2' '/dev/disk/by-diskseq/1509.tmp-b7:2' failed: Read-only file system [ 665.629334][T17635] EXT4-fs error (device loop5): __ext4_get_inode_loc:4884: comm syz.5.4633: Invalid inode table block 0 in block_group 0 [ 665.658681][ T5987] udevd[5987]: symlink '../../loop3' '/dev/disk/by-diskseq/1503.tmp-b7:3' failed: Read-only file system [ 665.686233][ T6000] udevd[6000]: symlink '../../loop4' '/dev/disk/by-diskseq/1499.tmp-b7:4' failed: Read-only file system [ 665.736321][T17635] loop5: lost filesystem error report for type 5 error -117 [ 665.737047][T17635] EXT4-fs (loop5): 1 truncate cleaned up [ 665.830320][T17635] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.853324][ T6079] udevd[6079]: symlink '../../loop1' '/dev/disk/by-diskseq/1505.tmp-b7:1' failed: Read-only file system [ 666.048101][ T6079] udevd[6079]: symlink '../../loop4' '/dev/disk/by-diskseq/1499.tmp-b7:4' failed: Read-only file system [ 666.173845][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/1509.tmp-b7:2' failed: Read-only file system [ 666.198406][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.235073][ T6079] udevd[6079]: symlink '../../loop1' '/dev/disk/by-diskseq/1505.tmp-b7:1' failed: Read-only file system [ 666.255486][T17673] loop2: detected capacity change from 0 to 64 [ 666.286204][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/1511.tmp-b7:2' failed: Read-only file system [ 666.369087][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-label/unt.tmp-b7:2' failed: Read-only file system [ 666.463871][ T6079] udevd[6079]: symlink '../../loop5' '/dev/disk/by-diskseq/1510.tmp-b7:5' failed: Read-only file system [ 667.244919][T17370] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 667.302817][T17370] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 667.347771][T17370] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 667.419724][T17370] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 667.448757][T17370] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 667.516575][T17370] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 667.562302][T17370] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 667.606004][T17370] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 668.086237][T17370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.266214][T17729] loop3: detected capacity change from 0 to 512 [ 668.269094][T17370] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.307991][T17729] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 668.349285][T15647] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.356557][T15647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.402177][T17729] EXT4-fs (loop3): 1 truncate cleaned up [ 668.423931][T17729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.475168][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.482450][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.814869][ T5634] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.454698][T17741] loop2: detected capacity change from 0 to 40427 [ 670.496722][T17741] F2FS-fs (loop2): build fault injection rate: 771 [ 670.525020][T17741] F2FS-fs (loop2): invalid crc value [ 670.674615][ T6019] udevd[6019]: symlink '../../loop3' '/dev/disk/by-diskseq/1515.tmp-b7:3' failed: Read-only file system [ 670.758775][ T5987] udevd[5987]: symlink '../../loop1' '/dev/disk/by-diskseq/1505.tmp-b7:1' failed: Read-only file system [ 670.915743][ T6019] udevd[6019]: symlink '../../loop5' '/dev/disk/by-diskseq/1512.tmp-b7:5' failed: Read-only file system [ 670.928283][ T6079] udevd[6079]: symlink '../../loop2' '/dev/disk/by-diskseq/1516.tmp-b7:2' failed: Read-only file system [ 670.944939][ T6079] udevd[6079]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 670.979934][T17741] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 671.010642][T17370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.138956][T17741] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 671.168407][ T6019] udevd[6019]: symlink '../../loop1' '/dev/disk/by-diskseq/1505.tmp-b7:1' failed: Read-only file system [ 671.376319][ T6079] udevd[6079]: symlink '../../loop2' '/dev/disk/by-diskseq/1516.tmp-b7:2' failed: Read-only file system [ 671.429514][T17370] veth0_vlan: entered promiscuous mode [ 671.440045][ T6079] udevd[6079]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 671.442077][ T6019] udevd[6019]: symlink '../../loop4' '/dev/disk/by-diskseq/1499.tmp-b7:4' failed: Read-only file system [ 671.473421][T17370] veth1_vlan: entered promiscuous mode [ 671.502396][ T5987] udevd[5987]: symlink '../../loop5' '/dev/disk/by-diskseq/1512.tmp-b7:5' failed: Read-only file system [ 671.680358][T17370] veth0_macvtap: entered promiscuous mode [ 671.742474][T17804] Bluetooth: MGMT ver 1.23 [ 671.748749][T17370] veth1_macvtap: entered promiscuous mode [ 671.867291][T17370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.958794][T17370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.074208][ T87] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.157277][ T87] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.215950][ T87] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.310065][ T87] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.472264][T17816] loop5: detected capacity change from 0 to 256 [ 672.565613][T17816] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 672.643765][T17820] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4689'. [ 672.780242][T15648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.810075][T15648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.020074][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.066351][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.584968][T17834] nbd1: detected capacity change from 0 to 127 [ 673.637009][T15217] block nbd1: Receive control failed (result -32) [ 673.662742][ T6079] block nbd1: Dead connection, failed to find a fallback [ 673.672980][ T6079] block nbd1: shutting down sockets [ 673.681020][ T6079] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 673.694217][ T6079] Buffer I/O error on dev nbd1, logical block 0, async page read [ 673.703808][ T6079] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 673.714668][ T6079] Buffer I/O error on dev nbd1, logical block 1, async page read [ 673.724142][ T6079] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 673.773501][ T6079] Buffer I/O error on dev nbd1, logical block 2, async page read [ 673.788813][ T6079] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 673.802535][ T6079] Buffer I/O error on dev nbd1, logical block 3, async page read [ 673.832281][ T6079] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 673.914965][ T6079] Buffer I/O error on dev nbd1, logical block 0, async page read [ 673.957374][ T6079] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 673.998922][ T6079] Buffer I/O error on dev nbd1, logical block 1, async page read [ 674.028294][ T6079] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 674.057526][ T6079] Buffer I/O error on dev nbd1, logical block 2, async page read [ 674.093875][ T6079] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 674.125683][ T6079] Buffer I/O error on dev nbd1, logical block 3, async page read [ 674.168465][ T6079] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 674.204853][ T6079] Buffer I/O error on dev nbd1, logical block 0, async page read [ 674.246751][ T6079] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 674.303473][ T6079] Buffer I/O error on dev nbd1, logical block 1, async page read [ 674.388749][ T6079] ldm_validate_partition_table(): Disk read failed. [ 674.488170][ T6079] Dev nbd1: unable to read RDB block 0 [ 674.593610][ T6079] nbd1: unable to read partition table [ 674.658681][ T6079] ldm_validate_partition_table(): Disk read failed. [ 674.726218][ T6079] Dev nbd1: unable to read RDB block 0 [ 674.774921][ T6079] nbd1: unable to read partition table [ 674.943649][T17866] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 674.952298][T17866] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 674.993611][T17866] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 675.000156][T17866] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 675.068795][T17866] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 675.075450][T17866] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 675.118170][T17866] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 675.124712][T17866] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 675.185474][T17866] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 675.192016][T17866] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 675.693931][ T6079] udevd[6079]: symlink '../../loop3' '/dev/disk/by-diskseq/1515.tmp-b7:3' failed: Read-only file system [ 675.882962][ T6079] udevd[6079]: symlink '../../loop5' '/dev/disk/by-diskseq/1521.tmp-b7:5' failed: Read-only file system [ 675.985583][ T6019] udevd[6019]: symlink '../../loop0' '/dev/disk/by-diskseq/1482.tmp-b7:0' failed: Read-only file system [ 676.024851][T17892] loop5: detected capacity change from 0 to 128 [ 676.064601][T17892] EXT4-fs: Ignoring removed nobh option [ 676.083058][ T6079] udevd[6079]: symlink '../../loop1' '/dev/disk/by-diskseq/1505.tmp-b7:1' failed: Read-only file system [ 676.166594][T17892] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 676.246166][T17892] ext4 filesystem being mounted at /795/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 676.263238][ T6019] udevd[6019]: symlink '../../loop5' '/dev/disk/by-diskseq/1522.tmp-b7:5' failed: Read-only file system [ 676.289924][ T6019] udevd[6019]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system [ 676.312337][T17892] fscrypt (loop5, inode 12): Unsupported log2_data_unit_size in encryption policy: 232 [ 676.329615][ T6079] udevd[6079]: symlink '../../loop3' '/dev/disk/by-diskseq/1515.tmp-b7:3' failed: Read-only file system [ 676.406484][T17876] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.489484][ T6019] udevd[6019]: symlink '../../loop5' '/dev/disk/by-diskseq/1522.tmp-b7:5' failed: Read-only file system [ 676.525421][ T6079] udevd[6079]: symlink '../../loop0' '/dev/disk/by-diskseq/1482.tmp-b7:0' failed: Read-only file system [ 676.544706][ T6019] udevd[6019]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system [ 676.599762][ T5633] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 676.927276][T17916] binder: 17914:17916 ioctl c018620c 2000000002c0 returned -1 [ 677.187251][T17876] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.464444][T17876] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.779511][T17876] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.417384][ T149] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.684855][ T1010] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.777704][ T87] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.897443][ T87] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.022987][T17972] loop4: detected capacity change from 0 to 64 [ 679.824752][T17990] loop2: detected capacity change from 0 to 64 [ 680.278429][T17996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4753'. [ 680.747141][ T6079] udevd[6079]: symlink '../../loop3' '/dev/disk/by-diskseq/1515.tmp-b7:3' failed: Read-only file system [ 680.769760][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/1527.tmp-b7:2' failed: Read-only file system [ 680.832062][ T5638] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 680.949336][ T6079] udevd[6079]: symlink '../../loop3' '/dev/disk/by-diskseq/1515.tmp-b7:3' failed: Read-only file system [ 680.992276][ T5638] usb 1-1: Using ep0 maxpacket: 32 [ 681.000312][ T5638] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 681.034184][ T5638] usb 1-1: config 0 interface 0 has no altsetting 0 [ 681.070208][ T5638] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 681.092957][ T5638] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.117691][ T6079] udevd[6079]: symlink '../../loop1' '/dev/disk/by-diskseq/1505.tmp-b7:1' failed: Read-only file system [ 681.198353][ T5638] usb 1-1: config 0 descriptor?? [ 681.207098][ T6079] udevd[6079]: symlink '../../loop4' '/dev/disk/by-diskseq/1525.tmp-b7:4' failed: Read-only file system [ 681.295405][ T5987] udevd[5987]: symlink '../../loop3' '/dev/disk/by-diskseq/1515.tmp-b7:3' failed: Read-only file system [ 681.321699][T18019] option changes via remount are deprecated (pid=18017 comm=syz.4.4761) [ 681.337604][T18020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4762'. [ 681.561132][ T6079] udevd[6079]: symlink '../../loop2' '/dev/disk/by-diskseq/1527.tmp-b7:2' failed: Read-only file system [ 681.679595][ T6019] udevd[6019]: symlink '../../loop5' '/dev/disk/by-diskseq/1523.tmp-b7:5' failed: Read-only file system [ 681.698950][ T6079] udevd[6079]: symlink '../../loop1' '/dev/disk/by-diskseq/1505.tmp-b7:1' failed: Read-only file system [ 681.710005][ T6000] udevd[6000]: symlink '../../loop3' '/dev/disk/by-diskseq/1515.tmp-b7:3' failed: Read-only file system [ 681.824610][ T5638] usbhid 1-1:0.0: can't add hid device: -71 [ 681.854541][ T5638] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 681.902429][ T5638] usb 1-1: USB disconnect, device number 37 [ 681.964206][T18034] loop2: detected capacity change from 0 to 2048 [ 682.774207][T18052] nbd2: detected capacity change from 0 to 127 [ 682.868844][T15217] block nbd2: Receive control failed (result -104) [ 683.201910][T18064] overlayfs: upper fs does not support file handles, falling back to index=off. [ 683.239696][T18066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4781'. [ 683.252078][T18064] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 683.402597][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 683.581930][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 683.602396][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 683.636524][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 683.677378][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 683.724264][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 683.764719][T18080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4790'. [ 683.798795][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 683.836484][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.104967][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 684.138856][ T10] usbtmc 2-1:16.0: can't read capabilities [ 684.380063][ T24] usb 2-1: USB disconnect, device number 35 [ 684.489456][T18093] loop0: detected capacity change from 0 to 4096 [ 684.516379][T18093] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 684.533916][T18100] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 684.548044][T18100] syzkaller0: persist disabled [ 684.610855][T18093] ntfs3(loop0): ino=1a, mi_enum_attr [ 684.646301][T18093] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 684.786783][ T5760] Process accounting resumed [ 684.895133][ T10] Process accounting resumed [ 684.927806][ T1010] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 685.097275][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.214004][T18114] option changes via remount are deprecated (pid=18111 comm=syz.1.4802) [ 685.223865][T15647] ntfs3(loop0): ino=1e, ntfs3_write_inode failed, -22. [ 685.812991][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/1529.tmp-b7:2' failed: Read-only file system [ 685.918506][ T6019] udevd[6019]: symlink '../../loop1' '/dev/disk/by-diskseq/1505.tmp-b7:1' failed: Read-only file system [ 686.000783][ T5987] udevd[5987]: symlink '../../loop0' '/dev/disk/by-diskseq/1531.tmp-b7:0' failed: Read-only file system [ 686.105289][ T5987] udevd[5987]: symlink '../../loop4' '/dev/disk/by-diskseq/1525.tmp-b7:4' failed: Read-only file system [ 686.108970][ T6019] udevd[6019]: symlink '../../loop3' '/dev/disk/by-diskseq/1515.tmp-b7:3' failed: Read-only file system [ 686.283136][ T6019] udevd[6019]: symlink '../../loop0' '/dev/disk/by-diskseq/1531.tmp-b7:0' failed: Read-only file system [ 686.340019][ T5987] udevd[5987]: symlink '../../loop3' '/dev/disk/by-diskseq/1515.tmp-b7:3' failed: Read-only file system [ 686.360606][ T5746] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 686.450956][ T5760] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 686.493927][ T6019] udevd[6019]: symlink '../../loop0' '/dev/disk/by-diskseq/1531.tmp-b7:0' failed: Read-only file system [ 686.519343][ T5746] usb 5-1: Using ep0 maxpacket: 16 [ 686.532114][ T5746] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.570138][ T5746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 686.616580][ T6019] udevd[6019]: symlink '../../loop3' '/dev/disk/by-diskseq/1515.tmp-b7:3' failed: Read-only file system [ 686.634607][ T5746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 686.656658][ T5760] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 686.678994][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.685596][ T5746] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 686.697039][ T5760] usb 2-1: Product: syz [ 686.697073][ T5760] usb 2-1: Manufacturer: syz [ 686.697101][ T5760] usb 2-1: SerialNumber: syz [ 686.786944][ T5746] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 686.850107][ T5746] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 686.868971][ T5987] udevd[5987]: symlink '../../loop2' '/dev/disk/by-diskseq/1529.tmp-b7:2' failed: Read-only file system [ 686.890955][ T5746] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 686.904061][ T5746] usb 5-1: Manufacturer: syz [ 686.929831][ T5746] usb 5-1: config 0 descriptor?? [ 687.036429][ T5760] rtl8150 2-1:1.0: couldn't reset the device [ 687.058646][ T5760] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 687.124493][ T5760] usb 2-1: USB disconnect, device number 36 [ 687.341452][ T5746] rc_core: IR keymap rc-hauppauge not found [ 687.355212][T18159] loop5: detected capacity change from 0 to 512 [ 687.365847][ T5746] Registered IR keymap rc-empty [ 687.388658][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 687.416391][T18159] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.430726][T18159] ext4 filesystem being mounted at /810/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 687.446732][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 687.495884][T18159] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #2: comm syz.5.4824: corrupted inode contents [ 687.501461][T18164] mmap: syz.2.4825 (18164): VmData 37478400 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 687.529076][T18159] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #2: comm syz.5.4824: mark_inode_dirty error [ 687.533948][ T5746] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 687.589218][T18159] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #2: comm syz.5.4824: corrupted inode contents [ 687.623488][ T5746] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input30 [ 687.642351][T18165] EXT4-fs (loop5): shut down requested (1) [ 687.664670][T18159] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.4824: mark_inode_dirty error [ 687.696581][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 687.766466][T18151] loop3: detected capacity change from 0 to 32768 [ 687.774312][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 687.792935][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 687.840536][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 687.878440][T18170] program syz.2.4827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 687.922062][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 687.960870][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 688.010866][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 688.051953][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 688.058792][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.080532][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 688.126303][ T5746] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 688.174618][ T5746] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 688.230617][ T5746] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 688.314681][ T5746] usb 5-1: USB disconnect, device number 34 [ 689.046888][ T5760] kernel read not supported for file /rfkill (pid: 5760 comm: kworker/0:5) [ 689.338161][T18195] blktrace: Concurrent blktraces are not allowed on nullb0 [ 689.421892][ T5760] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 689.616733][ T5760] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 689.658140][ T5760] usb 5-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 689.671223][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 689.717986][ T5760] usb 5-1: config 0 interface 0 has no altsetting 0 [ 689.754704][ T5760] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 689.781953][ T5760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.813116][ T5760] usb 5-1: config 0 descriptor?? [ 689.822982][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 689.834187][T18189] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 689.849127][ T24] usb 3-1: config 0 has no interface number 0 [ 689.888911][ T24] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 689.917991][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.945176][ T24] usb 3-1: Product: syz [ 689.954166][ T24] usb 3-1: Manufacturer: syz [ 689.969947][ T24] usb 3-1: SerialNumber: syz [ 689.976257][T18206] loop1: detected capacity change from 0 to 128 [ 689.997010][ T24] usb 3-1: config 0 descriptor?? [ 690.045275][T18206] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 690.158258][T18206] ext4 filesystem being mounted at /839/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 690.240709][ T24] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 690.258750][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 690.269717][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 690.281402][ T24] usb 3-1: media controller created [ 690.283002][T18206] fscrypt (loop1, inode 12): Direct key flag not allowed with different contents and filenames modes [ 690.306739][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 690.343733][ T5760] holtek_kbd 0003:04D9:A055.004E: unknown main item tag 0x0 [ 690.358548][T18192] loop3: detected capacity change from 0 to 32768 [ 690.384083][ T5760] holtek_kbd 0003:04D9:A055.004E: unbalanced collection at end of report description [ 690.422267][ T5760] holtek_kbd 0003:04D9:A055.004E: probe with driver holtek_kbd failed with error -22 [ 690.458871][ T24] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 690.485001][ T5632] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 690.565212][T18213] loop0: detected capacity change from 0 to 16 [ 690.590043][T18213] erofs (device loop0): mounted with root inode @ nid 36. [ 690.627769][ T5760] usb 5-1: USB disconnect, device number 35 [ 690.713704][ T24] usb 3-1: USB disconnect, device number 49 [ 690.863382][T16149] udevd[16149]: symlink '../../loop1' '/dev/disk/by-diskseq/1536.tmp-b7:1' failed: Read-only file system [ 690.987856][ T6019] udevd[6019]: symlink '../../loop1' '/dev/disk/by-diskseq/1536.tmp-b7:1' failed: Read-only file system [ 691.043403][ T6000] udevd[6000]: symlink '../../loop0' '/dev/disk/by-diskseq/1538.tmp-b7:0' failed: Read-only file system [ 691.044632][T16149] udevd[16149]: symlink '../../loop5' '/dev/disk/by-diskseq/1534.tmp-b7:5' failed: Read-only file system [ 691.125450][ T5638] kernel read not supported for file /rfkill (pid: 5638 comm: kworker/0:4) [ 691.146017][ T5891] udevd[5891]: symlink '../../loop1' '/dev/disk/by-diskseq/1539.tmp-b7:1' failed: Read-only file system [ 691.177324][ T6019] udevd[6019]: symlink '../../loop0' '/dev/disk/by-diskseq/1538.tmp-b7:0' failed: Read-only file system [ 691.254428][T18227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4852'. [ 691.288810][ T6019] udevd[6019]: symlink '../../loop0' '/dev/disk/by-diskseq/1538.tmp-b7:0' failed: Read-only file system [ 691.433874][ T6000] udevd[6000]: symlink '../../loop4' '/dev/disk/by-diskseq/1525.tmp-b7:4' failed: Read-only file system [ 691.447366][ T6019] udevd[6019]: symlink '../../loop0' '/dev/disk/by-diskseq/1541.tmp-b7:0' failed: Read-only file system [ 691.588276][ T5987] udevd[5987]: symlink '../../loop2' '/dev/disk/by-diskseq/1529.tmp-b7:2' failed: Read-only file system [ 692.416690][T18255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4863'. [ 692.535566][T18243] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.755779][T18243] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.873505][T18243] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.045891][T18263] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.4866'. [ 693.132359][T18243] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.270565][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 693.287223][T18269] overlayfs: invalid origin (0000006f7665726c61790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 693.424079][ T24] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.459689][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 693.486543][ T24] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 693.523058][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.559082][ T24] usb 4-1: config 0 descriptor?? [ 693.602717][ T30] kernel read not supported for file /dsp (pid: 30 comm: kworker/1:2) [ 693.627561][T18275] loop1: detected capacity change from 0 to 256 [ 693.674289][T18275] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 693.734465][T18275] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 693.933538][ T1010] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.992290][ T24] greenasia 0003:0E8F:0012.004F: unknown main item tag 0x0 [ 694.022934][ T24] greenasia 0003:0E8F:0012.004F: unknown main item tag 0x0 [ 694.052981][ T24] greenasia 0003:0E8F:0012.004F: unknown main item tag 0x0 [ 694.060329][T15648] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.102601][ T24] greenasia 0003:0E8F:0012.004F: unknown main item tag 0x0 [ 694.118743][ T24] greenasia 0003:0E8F:0012.004F: unknown main item tag 0x0 [ 694.149389][ T24] greenasia 0003:0E8F:0012.004F: unknown main item tag 0x0 [ 694.175065][ T24] greenasia 0003:0E8F:0012.004F: unknown main item tag 0x0 [ 694.183833][T18283] sg_write: process 1806 (syz.4.4876) changed security contexts after opening file descriptor, this is not allowed. [ 694.203299][ T24] greenasia 0003:0E8F:0012.004F: unknown main item tag 0x0 [ 694.218476][ T24] greenasia 0003:0E8F:0012.004F: unknown main item tag 0x0 [ 694.233977][ T1010] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.246361][ T24] greenasia 0003:0E8F:0012.004F: hidraw0: USB HID v0.08 Device [HID 0e8f:0012] on usb-dummy_hcd.3-1/input0 [ 694.288525][ T24] greenasia 0003:0E8F:0012.004F: no inputs found [ 694.318804][ T1010] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.354399][ T24] usb 4-1: USB disconnect, device number 30 [ 694.450769][ T30] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 694.486183][T18284] fido_id[18284]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 694.537657][T18288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.608227][T18288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.626279][ T30] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 694.649895][T18288] bond0 (unregistering): Released all slaves [ 694.654091][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.678676][T18290] loop0: detected capacity change from 0 to 2048 [ 694.688560][ T30] usb 2-1: Product: syz [ 694.702751][ T30] usb 2-1: Manufacturer: syz [ 694.715271][ T30] usb 2-1: SerialNumber: syz [ 694.767553][ T30] usb 2-1: config 0 descriptor?? [ 694.789376][T18291] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 694.859359][T18291] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 694.914754][T18291] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 694.949394][T18291] Remounting filesystem read-only [ 694.991257][T18290] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 695.071682][T18293] loop2: detected capacity change from 0 to 1024 [ 695.087312][T18279] loop5: detected capacity change from 0 to 32768 [ 695.195872][T17370] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 695.236034][T18279] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 695.268918][ T30] usb 2-1: Firmware: major: 239, minor: 96, hardware type: UNKNOWN (222) [ 695.339336][T18279] (syz.5.4874,18279,1):ocfs2_rename:1287 ERROR: status = -2 [ 695.354779][T18279] (syz.5.4874,18279,1):ocfs2_rename:1700 ERROR: status = -2 [ 695.480901][ T30] usb 2-1: failed to fetch extended address, random address set [ 695.510031][ T30] usb 2-1: atusb_probe: initialization failed, error = -524 [ 695.564596][ T30] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 695.632195][ T30] usb 2-1: USB disconnect, device number 37 [ 695.728186][ T5633] ocfs2: Unmounting device (7,5) on (node local) [ 695.946904][ T6019] udevd[6019]: symlink '../../loop0' '/dev/disk/by-diskseq/1547.tmp-b7:0' failed: Read-only file system [ 695.990574][ T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 695.999048][T18308] loop5: detected capacity change from 0 to 1024 [ 696.132909][ T6019] udevd[6019]: symlink '../../loop3' '/dev/disk/by-diskseq/1540.tmp-b7:3' failed: Read-only file system [ 696.173027][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 696.206115][ T5987] udevd[5987]: symlink '../../loop2' '/dev/disk/by-diskseq/1545.tmp-b7:2' failed: Read-only file system [ 696.212267][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 696.295972][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 696.326578][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.358463][ T6019] udevd[6019]: symlink '../../loop0' '/dev/disk/by-diskseq/1547.tmp-b7:0' failed: Read-only file system [ 696.378222][ T5987] udevd[5987]: symlink '../../loop2' '/dev/disk/by-diskseq/1545.tmp-b7:2' failed: Read-only file system [ 696.405541][ T24] usb 5-1: Product: syz [ 696.417963][ T24] usb 5-1: Manufacturer: syz [ 696.449434][ T24] usb 5-1: SerialNumber: syz [ 696.473718][ T5753] udevd[5753]: symlink '../../loop1' '/dev/disk/by-diskseq/1543.tmp-b7:1' failed: Read-only file system [ 696.557067][ T5891] udevd[5891]: symlink '../../loop3' '/dev/disk/by-diskseq/1540.tmp-b7:3' failed: Read-only file system [ 696.569430][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/1550.tmp-b7:2' failed: Read-only file system [ 696.718274][ T24] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 696.797556][ T6019] udevd[6019]: symlink '../../loop5' '/dev/disk/by-diskseq/1546.tmp-b7:5' failed: Read-only file system [ 696.926471][ T5891] udevd[5891]: symlink '../../loop1' '/dev/disk/by-diskseq/1543.tmp-b7:1' failed: Read-only file system [ 696.936779][ T24] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 696.977302][ T24] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 697.325651][T18333] loop2: detected capacity change from 0 to 512 [ 697.326463][ T24] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 697.355244][T18333] EXT4-fs: Ignoring removed nobh option [ 697.394385][T18333] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 697.487708][T18333] EXT4-fs (loop2): 1 truncate cleaned up [ 697.529237][ T24] usb 5-1: USB disconnect, device number 36 [ 697.582834][T18333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.017126][ T5622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.929398][T18373] loop4: detected capacity change from 0 to 128 [ 698.969918][T18373] EXT4-fs (loop4): Test dummy encryption mode enabled [ 699.020302][T18373] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 699.045885][T18373] ext4 filesystem being mounted at /841/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 699.075917][ T5760] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 699.169537][T18343] loop3: detected capacity change from 0 to 32768 [ 699.216994][T18373] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 699.263369][T18343] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 699.272665][ T5760] usb 1-1: Using ep0 maxpacket: 8 [ 699.280483][ T5760] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 699.293232][ T5760] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 699.338239][ T5760] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 699.425231][ T5760] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 699.425324][T18343] XFS (loop3): Ending clean mount [ 699.479998][ T5624] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 699.498787][ T5760] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 699.519814][T18343] XFS (loop3): Quotacheck needed: Please wait. [ 699.524271][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.796633][T18343] XFS (loop3): Quotacheck: Done. [ 699.858981][ T5760] usb 1-1: GET_CAPABILITIES returned 0 [ 699.872796][ T5760] usbtmc 1-1:16.0: can't read capabilities [ 699.907362][T18365] loop5: detected capacity change from 0 to 32768 [ 699.933351][ T5634] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 699.947794][T18365] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4911 (18365) [ 700.098204][T18365] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 700.145565][T18365] BTRFS info (device loop5): using sha256 checksum algorithm [ 700.186638][ T5746] usb 1-1: USB disconnect, device number 38 [ 700.689276][T18365] BTRFS info (device loop5): rebuilding free space tree [ 700.963702][T18421] loop4: detected capacity change from 0 to 4096 [ 700.988445][T18421] EXT4-fs: Ignoring removed nomblk_io_submit option [ 701.024107][T18365] BTRFS info (device loop5): disabling free space tree [ 701.059723][T18365] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 701.095367][T18421] EXT4-fs (loop4): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 701.117247][T18365] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 701.158298][T18421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.192353][ T6019] udevd[6019]: symlink '../../loop5' '/dev/disk/by-diskseq/1557.tmp-b7:5' failed: Read-only file system [ 701.214609][ T6019] udevd[6019]: symlink '../../loop5' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:5' failed: Read-only file system [ 701.315125][T18365] BTRFS info (device loop5): checking UUID tree [ 701.324143][ T6000] udevd[6000]: symlink '../../loop0' '/dev/disk/by-diskseq/1547.tmp-b7:0' failed: Read-only file system [ 701.384642][T18365] BTRFS info (device loop5): setting nodatasum [ 701.420503][T18365] BTRFS info (device loop5): setting nodatacow [ 701.429430][T18365] BTRFS info (device loop5): turning off barriers [ 701.436002][ T5987] udevd[5987]: symlink '../../loop4' '/dev/disk/by-diskseq/1559.tmp-b7:4' failed: Read-only file system [ 701.439456][ T5987] udevd[5987]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 701.492179][ T5624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.523398][T18365] BTRFS info (device loop5): force clearing of disk cache [ 701.654166][T18396] loop2: detected capacity change from 0 to 32768 [ 701.756769][ T5987] udevd[5987]: symlink '../../loop4' '/dev/disk/by-diskseq/1559.tmp-b7:4' failed: Read-only file system [ 701.818796][ T5987] udevd[5987]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 701.900196][ T5633] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 701.941644][ T5753] udevd[5753]: symlink '../../loop3' '/dev/disk/by-diskseq/1558.tmp-b7:3' failed: Read-only file system [ 701.986386][ T6019] udevd[6019]: symlink '../../loop0' '/dev/disk/by-diskseq/1547.tmp-b7:0' failed: Read-only file system [ 702.014473][T18437] macvtap1: entered promiscuous mode [ 702.039480][ T5987] udevd[5987]: symlink '../../loop4' '/dev/disk/by-diskseq/1559.tmp-b7:4' failed: Read-only file system [ 702.042335][T18437] macvtap1: entered allmulticast mode [ 702.092457][T18437] veth1_vlan: entered allmulticast mode [ 702.111977][ T5760] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 702.286988][ T5760] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 702.329261][ T5760] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 702.386582][ T5760] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 702.437451][ T5760] usb 5-1: config 220 has no interface number 2 [ 702.471969][ T5760] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 702.582121][ T5760] usb 5-1: config 220 interface 0 has no altsetting 0 [ 702.597442][ T5760] usb 5-1: config 220 interface 76 has no altsetting 0 [ 702.639679][ T5760] usb 5-1: config 220 interface 1 has no altsetting 0 [ 702.682992][ T5760] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 702.685672][T18447] tmpfs: Cannot retroactively limit size [ 702.708336][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.759968][ T5760] usb 5-1: Product: syz [ 702.787968][ T5760] usb 5-1: Manufacturer: syz [ 702.810509][ T5760] usb 5-1: SerialNumber: syz [ 703.167932][ T5760] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 703.176439][ T31] audit: type=1326 audit(1777420100.428:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18457 comm="syz.2.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2699cdd9 code=0x7ffc0000 [ 703.178738][ T31] audit: type=1326 audit(1777420100.428:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18457 comm="syz.2.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2699cdd9 code=0x7ffc0000 [ 703.227333][ T5760] uvcvideo 5-1:220.0: No valid video chain found. [ 703.280469][ T5760] usb 5-1: selecting invalid altsetting 0 [ 703.383890][ T5760] usb 5-1: selecting invalid altsetting 0 [ 703.406934][ T31] audit: type=1326 audit(1777420100.478:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18457 comm="syz.2.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fbe2699cdd9 code=0x7ffc0000 [ 703.411345][ T5760] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 703.456960][T18462] loop5: detected capacity change from 0 to 512 [ 703.484857][T18462] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 703.519623][ T31] audit: type=1326 audit(1777420100.478:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18457 comm="syz.2.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2699cdd9 code=0x7ffc0000 [ 703.546421][ T5760] usb 5-1: USB disconnect, device number 37 [ 703.561183][T18468] netlink: 'syz.0.4943': attribute type 1 has an invalid length. [ 703.587167][T18468] netlink: 'syz.0.4943': attribute type 2 has an invalid length. [ 703.617320][ T31] audit: type=1326 audit(1777420100.478:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18457 comm="syz.2.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2699cdd9 code=0x7ffc0000 [ 703.640516][T18462] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.4940: iget: bad i_size value: 38620345925642 [ 703.654991][T18462] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 703.655298][T18468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4943'. [ 703.664473][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 703.664507][ C1] EXT4-fs (loop5): initial error at time 1777420100: ext4_orphan_get:1397: inode 15 [ 703.664563][ C1] EXT4-fs (loop5): last error at time 1777420100: ext4_orphan_get:1397: inode 15 [ 703.682208][T18462] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.4940: couldn't read orphan inode 15 (err -117) [ 703.752794][T18462] loop5: lost filesystem error report for type 5 error -117 [ 703.763688][T18462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.794576][T18472] loop3: detected capacity change from 0 to 128 [ 703.861038][T18472] EXT4-fs (loop3): Test dummy encryption mode enabled [ 703.927570][T18472] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 703.962674][T18472] ext4 filesystem being mounted at /859/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 703.983770][T18475] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz.5.4940: bg 0: block 5: invalid block bitmap [ 704.014367][T18475] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 108 with error 28 [ 704.027940][T18476] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4945'. [ 704.077864][T18481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4947'. [ 704.125978][T18475] EXT4-fs (loop5): This should not happen!! Data will be lost [ 704.125978][T18475] [ 704.185892][ T5634] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 704.202579][T18475] EXT4-fs (loop5): Total free blocks count 0 [ 704.297027][T18475] EXT4-fs (loop5): Free/Dirty block details [ 704.321225][T18475] EXT4-fs (loop5): free_blocks=0 [ 704.328517][T18475] EXT4-fs (loop5): dirty_blocks=108 [ 704.336147][T18475] EXT4-fs (loop5): Block reservation details [ 704.342271][T18475] EXT4-fs (loop5): i_reserved_data_blocks=108 [ 704.572953][T18493] loop3: detected capacity change from 0 to 8 [ 704.608948][ T5633] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 704.663158][T18493] SQUASHFS error: Failed to read block 0x26067d: -5 [ 704.673870][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.715058][T18493] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 704.774444][T18493] SQUASHFS error: Unable to read directory block [26067d:1fff] [ 705.661752][T18521] loop4: detected capacity change from 0 to 1024 [ 706.205285][ T6019] udevd[6019]: symlink '../../loop3' '/dev/disk/by-diskseq/1569.tmp-b7:3' failed: Read-only file system [ 706.387847][ T6019] udevd[6019]: symlink '../../loop4' '/dev/disk/by-diskseq/1570.tmp-b7:4' failed: Read-only file system [ 706.484529][ T5987] udevd[5987]: symlink '../../loop1' '/dev/disk/by-diskseq/1543.tmp-b7:1' failed: Read-only file system [ 706.497872][ T6019] udevd[6019]: symlink '../../loop4' '/dev/disk/by-diskseq/1570.tmp-b7:4' failed: Read-only file system [ 706.510783][ T6000] udevd[6000]: symlink '../../loop2' '/dev/disk/by-diskseq/1562.tmp-b7:2' failed: Read-only file system [ 706.558410][ T6019] udevd[6019]: symlink '../../loop4' '/dev/disk/by-diskseq/1571.tmp-b7:4' failed: Read-only file system [ 706.582052][T18538] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4972'. [ 706.594534][ T5987] udevd[5987]: symlink '../../loop3' '/dev/disk/by-diskseq/1569.tmp-b7:3' failed: Read-only file system [ 706.675025][ T6019] udevd[6019]: symlink '../../loop1' '/dev/disk/by-diskseq/1543.tmp-b7:1' failed: Read-only file system [ 706.792948][ T6019] udevd[6019]: symlink '../../loop4' '/dev/disk/by-diskseq/1571.tmp-b7:4' failed: Read-only file system [ 706.914752][ T5987] udevd[5987]: symlink '../../loop5' '/dev/disk/by-diskseq/1568.tmp-b7:5' failed: Read-only file system [ 707.098366][T18551] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4978'. [ 707.152967][T18553] loop1: detected capacity change from 0 to 256 [ 707.188625][T18553] exfat: Deprecated parameter 'utf8' [ 707.295573][T18553] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 707.350254][T18558] loop5: detected capacity change from 0 to 512 [ 707.423683][T18558] EXT4-fs: Ignoring removed nobh option [ 707.476145][T18558] EXT4-fs: Ignoring removed mblk_io_submit option [ 707.542318][T18558] EXT4-fs (loop5): orphan cleanup on readonly fs [ 707.603664][T18558] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 707.684417][T18558] EXT4-fs error (device loop5): ext4_clear_blocks:874: inode #13: comm syz.5.4981: attempt to clear invalid blocks 2 len 1 [ 707.761777][T18558] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 707.765769][T18558] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1314: group 0, [ 707.776505][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 707.776543][ C1] EXT4-fs (loop5): initial error at time 1777420105: ext4_clear_blocks:874: inode 13 [ 707.776598][ C1] EXT4-fs (loop5): last error at time 1777420105: ext4_clear_blocks:874: inode 13 [ 707.811814][T18558] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 707.889169][T18558] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.4981: invalid indirect mapped block 1819239214 (level 0) [ 707.964311][T18558] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 707.965991][T18558] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.4981: invalid indirect mapped block 1819239214 (level 1) [ 708.032144][T18558] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 708.033804][T18558] EXT4-fs (loop5): 1 truncate cleaned up [ 708.134722][T18558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 708.491862][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.944977][T18594] loop4: detected capacity change from 0 to 128 [ 709.028149][T18594] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 709.138073][T18594] ext4 filesystem being mounted at /854/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.309075][ T5624] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 709.437091][T18603] loop2: detected capacity change from 0 to 256 [ 709.461886][ T5746] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 709.637997][T18607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4997'. [ 709.680505][ T5746] usb 4-1: Using ep0 maxpacket: 32 [ 709.697479][ T5746] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 709.735079][ T5746] usb 4-1: config 0 has no interface number 0 [ 709.776205][ T5746] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 709.809852][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.848337][ T5746] usb 4-1: Product: syz [ 709.868315][ T5746] usb 4-1: Manufacturer: syz [ 709.888321][ T5746] usb 4-1: SerialNumber: syz [ 709.922959][ T5746] usb 4-1: config 0 descriptor?? [ 709.959230][ T5746] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 710.136589][T18617] loop0: detected capacity change from 0 to 512 [ 710.173150][T18600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.200052][T18617] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 710.220140][T18617] System zones: 1-20 [ 710.243780][T18600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.276146][T18617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.367247][ T5746] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 710.428639][ T5746] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 710.469330][T18627] loop2: detected capacity change from 0 to 8 [ 710.528308][T18617] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 710.572415][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 32 [ 710.745741][T17370] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.779190][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 710.798523][ T9] usb 4-1: USB disconnect, device number 31 [ 710.857692][T18631] loop4: detected capacity change from 0 to 16 [ 710.877687][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 710.884619][T18631] erofs (device loop4): mounted with root inode @ nid 36. [ 711.062333][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 711.112959][ T9] quatech2 4-1:0.51: device disconnected [ 711.125462][T18635] ªªªªªª: renamed from vlan0 (while UP) [ 711.268518][ T5753] udevd[5753]: symlink '../../loop5' '/dev/disk/by-diskseq/1575.tmp-b7:5' failed: Read-only file system [ 711.310159][ T6000] udevd[6000]: symlink '../../loop0' '/dev/disk/by-diskseq/1584.tmp-b7:0' failed: Read-only file system [ 711.313301][ T5987] udevd[5987]: symlink '../../loop4' '/dev/disk/by-diskseq/1582.tmp-b7:4' failed: Read-only file system [ 711.388022][ T5753] udevd[5753]: symlink '../../loop1' '/dev/disk/by-diskseq/1574.tmp-b7:1' failed: Read-only file system [ 711.416205][T18637] loop5: detected capacity change from 0 to 4096 [ 711.469485][ T6019] udevd[6019]: symlink '../../loop4' '/dev/disk/by-diskseq/1582.tmp-b7:4' failed: Read-only file system [ 711.516228][ T5987] udevd[5987]: symlink '../../loop1' '/dev/disk/by-diskseq/1574.tmp-b7:1' failed: Read-only file system [ 711.518139][ T6000] udevd[6000]: symlink '../../loop3' '/dev/disk/by-diskseq/1569.tmp-b7:3' failed: Read-only file system [ 711.616812][ T6019] udevd[6019]: symlink '../../loop4' '/dev/disk/by-diskseq/1582.tmp-b7:4' failed: Read-only file system [ 711.721223][ T6019] udevd[6019]: symlink '../../loop4' '/dev/disk/by-diskseq/1585.tmp-b7:4' failed: Read-only file system [ 711.786965][ T5753] udevd[5753]: symlink '../../loop5' '/dev/disk/by-diskseq/1586.tmp-b7:5' failed: Read-only file system [ 711.812403][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 711.999546][T18652] loop1: detected capacity change from 0 to 512 [ 712.022149][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 712.047168][ T9] usb 1-1: config 4 has an invalid interface number: 138 but max is 0 [ 712.059576][T18652] EXT4-fs: Ignoring removed nobh option [ 712.088929][ T9] usb 1-1: config 4 has no interface number 0 [ 712.109060][T18652] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 712.142177][ T9] usb 1-1: config 4 interface 138 has no altsetting 0 [ 712.165942][ T9] usb 1-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 712.185493][T18652] EXT4-fs (loop1): 1 truncate cleaned up [ 712.218607][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.242304][T18652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 712.273513][ T9] usb 1-1: Product: syz [ 712.295236][ T9] usb 1-1: Manufacturer: syz [ 712.320252][ T9] usb 1-1: SerialNumber: syz [ 712.489041][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.017459][ T9] catc 1-1:4.138: Missing or invalid endpoints [ 713.039669][T18649] loop3: detected capacity change from 0 to 32768 [ 713.078959][T18649] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5018 (18649) [ 713.149169][T18649] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 713.201320][T18649] BTRFS info (device loop3): using sha256 checksum algorithm [ 713.257587][ T2374] block nbd2: Possible stuck request ffff888027c37000: control (read@0,1024B). Runtime 30 seconds [ 713.275027][ T2374] block nbd2: Possible stuck request ffff888027c371c0: control (read@1024,1024B). Runtime 30 seconds [ 713.288673][ T2374] block nbd2: Possible stuck request ffff888027c37380: control (read@2048,1024B). Runtime 30 seconds [ 713.300197][ T2374] block nbd2: Possible stuck request ffff888027c37540: control (read@3072,1024B). Runtime 30 seconds [ 713.450954][ T24] usb 1-1: USB disconnect, device number 39 [ 713.567380][T18649] BTRFS info (device loop3): rebuilding free space tree [ 713.755896][T18649] BTRFS info (device loop3): disabling free space tree [ 713.807276][T18649] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 713.863212][T18649] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 714.057450][T18649] BTRFS info (device loop3): checking UUID tree [ 714.086516][T18649] BTRFS info (device loop3): setting nodatasum [ 714.112601][T18649] BTRFS info (device loop3): setting nodatacow [ 714.134503][T18649] BTRFS info (device loop3): turning off barriers [ 714.159910][T18649] BTRFS info (device loop3): force clearing of disk cache [ 714.199982][T18700] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5033'. [ 714.988932][ T5634] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 715.760167][T18724] loop3: detected capacity change from 0 to 256 [ 715.786178][T18724] FAT-fs (loop3): Directory bread(block 1285) failed [ 715.855854][T18724] FAT-fs (loop3): Directory bread(block 1286) failed [ 715.926354][T18724] FAT-fs (loop3): Directory bread(block 1287) failed [ 715.950074][ T149] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 715.969782][T18724] FAT-fs (loop3): Directory bread(block 1288) failed [ 716.285887][ T5987] udevd[5987]: symlink '../../loop4' '/dev/disk/by-diskseq/1585.tmp-b7:4' failed: Read-only file system [ 716.378948][ T6000] udevd[6000]: symlink '../../loop2' '/dev/disk/by-diskseq/1583.tmp-b7:2' failed: Read-only file system [ 716.490112][ T6019] udevd[6019]: symlink '../../loop3' '/dev/disk/by-diskseq/1590.tmp-b7:3' failed: Read-only file system [ 716.495444][T18741] loop1: detected capacity change from 0 to 256 [ 716.595502][ T6000] udevd[6000]: symlink '../../loop5' '/dev/disk/by-diskseq/1588.tmp-b7:5' failed: Read-only file system [ 716.679016][ T6019] udevd[6019]: symlink '../../loop3' '/dev/disk/by-diskseq/1591.tmp-b7:3' failed: Read-only file system [ 716.704583][ T5753] udevd[5753]: symlink '../../loop0' '/dev/disk/by-diskseq/1584.tmp-b7:0' failed: Read-only file system [ 716.737918][ T5987] udevd[5987]: symlink '../../loop1' '/dev/disk/by-diskseq/1589.tmp-b7:1' failed: Read-only file system [ 716.752726][T18741] FAT-fs (loop1): Directory bread(block 64) failed [ 716.794314][T18741] FAT-fs (loop1): Directory bread(block 65) failed [ 716.795808][T18747] loop0: detected capacity change from 0 to 512 [ 716.822761][ T6000] udevd[6000]: symlink '../../loop4' '/dev/disk/by-diskseq/1585.tmp-b7:4' failed: Read-only file system [ 716.825932][ T6019] udevd[6019]: symlink '../../loop3' '/dev/disk/by-diskseq/1592.tmp-b7:3' failed: Read-only file system [ 716.844839][T18747] EXT4-fs: Ignoring removed bh option [ 716.862612][T18741] FAT-fs (loop1): Directory bread(block 66) failed [ 716.871852][T18747] EXT4-fs: Ignoring removed nomblk_io_submit option [ 716.891030][T18741] FAT-fs (loop1): Directory bread(block 67) failed [ 716.916874][T18741] FAT-fs (loop1): Directory bread(block 68) failed [ 716.960228][ T6000] udevd[6000]: symlink '../../loop2' '/dev/disk/by-diskseq/1583.tmp-b7:2' failed: Read-only file system [ 716.961333][T18741] FAT-fs (loop1): Directory bread(block 69) failed [ 717.034935][T18741] FAT-fs (loop1): Directory bread(block 70) failed [ 717.054465][T18747] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 717.064322][T18741] FAT-fs (loop1): Directory bread(block 71) failed [ 717.085994][T18741] FAT-fs (loop1): Directory bread(block 72) failed [ 717.117608][T18741] FAT-fs (loop1): Directory bread(block 73) failed [ 717.205931][T18747] EXT4-fs (loop0): 1 truncate cleaned up [ 717.356752][T18747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 717.434365][T18747] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #13: comm syz.0.5054: invalid indirect mapped block 4294901760 (level 0) [ 717.454417][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 717.509514][T18747] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 717.536322][T18747] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #13: comm syz.0.5054: invalid indirect mapped block 4294967295 (level 1) [ 717.574275][T18747] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 717.574842][T18747] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #13: comm syz.0.5054: invalid indirect mapped block 65535 (level 2) [ 717.611168][T18747] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 717.642925][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 717.693332][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 717.709455][ T10] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 717.741867][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 717.760181][ T10] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 717.772881][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.809857][ T10] usb 5-1: Product: syz [ 717.834274][ T10] usb 5-1: Manufacturer: syz [ 717.854863][ T10] usb 5-1: SerialNumber: syz [ 717.899989][ T10] usb 5-1: config 0 descriptor?? [ 718.076776][T17370] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.269161][T18784] loop5: detected capacity change from 0 to 1024 [ 718.316099][T18784] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 718.342854][ T5746] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 718.355650][T18790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5069'. [ 718.374314][ T10] gs_usb 5-1:0.0: Configuring for 25 interfaces [ 718.385984][T18793] loop2: detected capacity change from 0 to 512 [ 718.396728][T18790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5069'. [ 718.422909][T18790] netlink: 'syz.3.5069': attribute type 20 has an invalid length. [ 718.466791][T18793] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 718.520587][ T5746] usb 2-1: Using ep0 maxpacket: 32 [ 718.533947][ T5746] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 718.534975][T18793] System zones: [ 718.548637][ T5746] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 718.561591][ T5746] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 718.570933][ T5746] usb 2-1: config 1 has no interface number 0 [ 718.583865][ T5746] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 718.596016][ T5746] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 718.613344][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.616048][T18793] 1-20 [ 718.622880][ T5746] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 718.636306][T18793] [ 718.644033][T18793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 718.657963][ T5746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.706804][ T5746] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 718.781971][ T10] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 718.816495][ T10] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 718.874096][ T10] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 718.885450][ T5746] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 718.933385][ T10] usb 5-1: USB disconnect, device number 38 [ 718.997434][T18793] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 719.174237][ T5622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.201917][T18799] loop5: detected capacity change from 0 to 4096 [ 719.340762][ T5746] usb 2-1: USB disconnect, device number 38 [ 719.359762][T18799] ntfs3(loop5): ino=1a, mi_enum_attr [ 719.383222][ T5746] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 719.390618][T18799] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 719.859033][T18799] ntfs3(loop5): ino=21, "file1" failed to extend initialized size to 8000. [ 720.146801][T18820] loop2: detected capacity change from 0 to 512 [ 720.218980][T18820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.268059][T18826] loop0: detected capacity change from 0 to 256 [ 720.307830][T18828] loop5: detected capacity change from 0 to 128 [ 720.371095][T18828] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 720.493045][T18828] ext4 filesystem being mounted at /847/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 720.506287][T18834] loop4: detected capacity change from 0 to 512 [ 720.549524][T18826] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 720.621298][T18834] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 720.667479][T18834] System zones: 1-20 [ 720.744633][ T5633] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 720.769189][T18834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.886495][ T5622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.058859][T18834] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 721.229738][T18848] loop2: detected capacity change from 0 to 8 [ 721.277623][ T5624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.333294][ T5987] udevd[5987]: symlink '../../loop0' '/dev/disk/by-diskseq/1605.tmp-b7:0' failed: Read-only file system [ 721.486272][ T6019] udevd[6019]: symlink '../../loop0' '/dev/disk/by-diskseq/1605.tmp-b7:0' failed: Read-only file system [ 721.514362][ T5987] udevd[5987]: symlink '../../loop2' '/dev/disk/by-diskseq/1610.tmp-b7:2' failed: Read-only file system [ 721.574630][ T6000] udevd[6000]: symlink '../../loop4' '/dev/disk/by-diskseq/1607.tmp-b7:4' failed: Read-only file system [ 721.597519][ T5753] udevd[5753]: symlink '../../loop5' '/dev/disk/by-diskseq/1608.tmp-b7:5' failed: Read-only file system [ 721.638698][ T5891] udevd[5891]: symlink '../../loop3' '/dev/disk/by-diskseq/1594.tmp-b7:3' failed: Read-only file system [ 721.650121][ T6019] udevd[6019]: symlink '../../loop0' '/dev/disk/by-diskseq/1611.tmp-b7:0' failed: Read-only file system [ 721.670947][ T5987] udevd[5987]: symlink '../../loop2' '/dev/disk/by-diskseq/1610.tmp-b7:2' failed: Read-only file system [ 721.724821][ T6000] udevd[6000]: symlink '../../loop4' '/dev/disk/by-diskseq/1607.tmp-b7:4' failed: Read-only file system [ 721.745885][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/1610.tmp-b7:2' failed: Read-only file system [ 722.692130][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 722.872389][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 722.889304][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.928065][T18879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5105'. [ 722.931158][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.950888][ T5746] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 722.995102][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 723.025862][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 723.064739][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.101908][ T9] usb 1-1: config 0 descriptor?? [ 723.119614][ T5746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 723.179163][ T5746] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 723.211747][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.223980][T18887] loop2: detected capacity change from 0 to 64 [ 723.236023][T18885] macsec4: entered promiscuous mode [ 723.255755][T18885] macsec4: entered allmulticast mode [ 723.269348][ T5746] usb 5-1: config 0 descriptor?? [ 723.298397][T18871] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 723.597159][ T9] hid (null): unknown global tag 0xd [ 723.640315][ T9] hid (null): report_id 1341611109 is invalid [ 723.664292][ T9] hid (null): unknown global tag 0xc [ 723.807520][ T5746] hid_parser_main: 29 callbacks suppressed [ 723.807553][ T5746] hid-picolcd 0003:04D8:C002.0051: unknown main item tag 0x0 [ 723.868917][ T5746] hid-picolcd 0003:04D8:C002.0051: unknown main item tag 0x0 [ 723.911526][ T5746] hid-picolcd 0003:04D8:C002.0051: unknown main item tag 0x0 [ 723.938976][ T5746] hid-picolcd 0003:04D8:C002.0051: unknown main item tag 0x0 [ 723.974265][ T5746] hid-picolcd 0003:04D8:C002.0051: unknown main item tag 0x0 [ 724.018445][ T30] usb 1-1: USB disconnect, device number 40 [ 724.026370][ T5746] hid-picolcd 0003:04D8:C002.0051: unknown main item tag 0x0 [ 724.078875][ T5746] hid-picolcd 0003:04D8:C002.0051: unknown main item tag 0x0 [ 724.138949][ T5746] hid-picolcd 0003:04D8:C002.0051: unknown main item tag 0x0 [ 724.186759][ T5746] hid-picolcd 0003:04D8:C002.0051: unknown main item tag 0x0 [ 724.236855][ T5746] hid-picolcd 0003:04D8:C002.0051: unknown main item tag 0x0 [ 724.308537][ T5746] hid-picolcd 0003:04D8:C002.0051: reserved main item tag 0xd [ 724.425639][ T5746] hid-picolcd 0003:04D8:C002.0051: No report with id 0x11 found [ 724.501932][ T5746] usb 5-1: USB disconnect, device number 39 [ 724.820159][T18917] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 724.826738][T18917] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 724.844627][T18918] loop3: detected capacity change from 0 to 256 [ 724.969892][T18917] vhci_hcd vhci_hcd.0: Device attached [ 725.017041][T18918] FAT-fs (loop3): Directory bread(block 64) failed [ 725.027848][T18921] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 725.034435][T18921] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 725.038996][T18918] FAT-fs (loop3): Directory bread(block 65) failed [ 725.079944][T18918] FAT-fs (loop3): Directory bread(block 66) failed [ 725.106221][T18925] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 725.112817][T18925] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 725.126416][T18918] FAT-fs (loop3): Directory bread(block 67) failed [ 725.168113][T18918] FAT-fs (loop3): Directory bread(block 68) failed [ 725.196114][T18918] FAT-fs (loop3): Directory bread(block 69) failed [ 725.200470][ T5746] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 725.215007][T18918] FAT-fs (loop3): Directory bread(block 70) failed [ 725.227820][T18925] vhci_hcd vhci_hcd.0: Device attached [ 725.238028][T18918] FAT-fs (loop3): Directory bread(block 71) failed [ 725.250219][T18932] netem: change failed [ 725.267175][T18921] vhci_hcd vhci_hcd.0: Device attached [ 725.273223][T18918] FAT-fs (loop3): Directory bread(block 72) failed [ 725.296692][T18918] FAT-fs (loop3): Directory bread(block 73) failed [ 725.307018][T18917] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(5) [ 725.313571][T18917] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 725.371250][T18917] vhci_hcd vhci_hcd.0: Device attached [ 725.465061][T18927] vhci_hcd: connection closed [ 725.468628][T18933] vhci_hcd: connection closed [ 725.470464][T15647] vhci_hcd vhci_hcd.4: stop threads [ 725.474015][T18919] vhci_hcd: connection reset by peer [ 725.498799][T18922] vhci_hcd: connection closed [ 725.509629][T15647] vhci_hcd vhci_hcd.4: release socket [ 725.543780][T15647] vhci_hcd vhci_hcd.4: disconnect device [ 725.559903][T15647] vhci_hcd vhci_hcd.4: stop threads [ 725.568694][T15647] vhci_hcd vhci_hcd.4: release socket [ 725.587699][T15647] vhci_hcd vhci_hcd.4: disconnect device [ 725.597993][T18902] loop1: detected capacity change from 0 to 32768 [ 725.601394][T15647] vhci_hcd vhci_hcd.4: stop threads [ 725.633991][T18902] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5114 (18902) [ 725.641380][T15647] vhci_hcd vhci_hcd.4: release socket [ 725.677636][T15647] vhci_hcd vhci_hcd.4: disconnect device [ 725.699488][T15647] vhci_hcd vhci_hcd.4: stop threads [ 725.717216][T18902] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 725.726729][T15647] vhci_hcd vhci_hcd.4: release socket [ 725.750685][T15647] vhci_hcd vhci_hcd.4: disconnect device [ 725.756251][T18902] BTRFS info (device loop1): using sha256 checksum algorithm [ 726.083159][T18902] BTRFS info (device loop1): rebuilding free space tree [ 726.143350][T18961] loop3: detected capacity change from 0 to 256 [ 726.215443][T18961] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001053e, chksum : 0x9ba9f90d, utbl_chksum : 0xe619d30d) [ 726.347332][ T5987] udevd[5987]: symlink '../../loop3' '/dev/disk/by-uuid/1234-1234.tmp-b7:3' failed: Read-only file system [ 726.365800][ T6000] udevd[6000]: symlink '../../loop5' '/dev/disk/by-diskseq/1608.tmp-b7:5' failed: Read-only file system [ 726.404399][T18902] BTRFS info (device loop1): disabling free space tree [ 726.438300][T18902] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 726.525894][T18902] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 726.549352][ T5987] udevd[5987]: symlink '../../loop3' '/dev/disk/by-diskseq/1619.tmp-b7:3' failed: Read-only file system [ 726.570909][ T6000] udevd[6000]: symlink '../../loop0' '/dev/disk/by-diskseq/1611.tmp-b7:0' failed: Read-only file system [ 726.599864][T18902] BTRFS info (device loop1): checking UUID tree [ 726.607143][ T5987] udevd[5987]: symlink '../../loop3' '/dev/disk/by-uuid/1234-1234.tmp-b7:3' failed: Read-only file system [ 726.661393][ T5987] udevd[5987]: symlink '../../loop3' '/dev/disk/by-diskseq/1619.tmp-b7:3' failed: Read-only file system [ 726.681207][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 726.707495][T18902] BTRFS info (device loop1): setting nodatasum [ 726.744450][T18902] BTRFS info (device loop1): setting nodatacow [ 726.762304][ T6000] udevd[6000]: symlink '../../loop5' '/dev/disk/by-diskseq/1608.tmp-b7:5' failed: Read-only file system [ 726.781059][ T5987] udevd[5987]: symlink '../../loop3' '/dev/disk/by-diskseq/1619.tmp-b7:3' failed: Read-only file system [ 726.783268][T18902] BTRFS info (device loop1): turning off barriers [ 726.838832][T18902] BTRFS info (device loop1): force clearing of disk cache [ 726.847862][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 726.873679][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.906759][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.935411][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 726.963727][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 726.975068][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.999159][ T9] usb 3-1: config 0 descriptor?? [ 727.128645][ T5753] udevd[5753]: symlink '../../loop0' '/dev/disk/by-diskseq/1611.tmp-b7:0' failed: Read-only file system [ 727.159045][ T5987] udevd[5987]: symlink '../../loop5' '/dev/disk/by-diskseq/1608.tmp-b7:5' failed: Read-only file system [ 727.216229][ T5632] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 727.349178][T18983] loop4: detected capacity change from 0 to 512 [ 727.420453][T18983] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 727.458627][ T9] microsoft 0003:045E:07DA.0052: ignoring exceeding usage max [ 727.488372][T18983] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 727.530382][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 727.536875][ C1] EXT4-fs (loop4): initial error at time 1777420124: ext4_mb_generate_buddy:1314 [ 727.546092][ C1] EXT4-fs (loop4): last error at time 1777420124: ext4_mb_generate_buddy:1314 [ 727.574392][T18983] Quota error (device loop4): write_blk: dquota write failed [ 727.592231][T18983] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 727.676474][T18983] Quota error (device loop4): write_blk: dquota write failed [ 727.677166][ T9] microsoft 0003:045E:07DA.0052: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 727.719503][T18983] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 727.788648][ T9] microsoft 0003:045E:07DA.0052: no inputs found [ 727.824784][ T9] microsoft 0003:045E:07DA.0052: could not initialize ff, continuing anyway [ 727.829766][T18983] EXT4-fs error (device loop4): ext4_acquire_dquot:7032: comm syz.4.5142: Failed to acquire dquot type 1 [ 727.859142][T18992] loop5: detected capacity change from 0 to 1024 [ 727.908677][ T9] usb 3-1: USB disconnect, device number 50 [ 727.913104][T18983] loop4: lost filesystem error report for type 5 error -28 [ 727.926500][T18983] EXT4-fs (loop4): 1 truncate cleaned up [ 728.039767][T18983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.047402][T18991] fido_id[18991]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 728.087070][T18992] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 728.145631][T18983] EXT4-fs error (device loop4): __ext4_remount:6837: comm syz.4.5142: Abort forced by user [ 728.160718][T18992] ext4 filesystem being mounted at /863/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 728.222954][T18983] EXT4-fs (loop4): Remounting filesystem read-only [ 728.248645][T18983] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 728.252480][T19000] loop3: detected capacity change from 0 to 512 [ 728.301329][T19000] EXT4-fs: Ignoring removed bh option [ 728.334447][T19000] EXT4-fs: Ignoring removed nomblk_io_submit option [ 728.420444][ T30] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 728.433745][T19000] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 728.503385][ T149] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 1) [ 728.552867][ T5624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.613880][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 728.647454][ T30] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 728.709678][T19000] EXT4-fs (loop3): 1 truncate cleaned up [ 728.717631][ T149] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 728.738636][ T30] usb 2-1: config 0 has no interface number 0 [ 728.799975][T19000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.821145][ T30] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.839670][ T149] EXT4-fs (loop5): This should not happen!! Data will be lost [ 728.839670][ T149] [ 728.898098][ T30] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.917683][ T5633] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 728.954179][T19007] loop2: detected capacity change from 0 to 256 [ 728.957392][T19000] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #13: comm syz.3.5145: invalid indirect mapped block 4294901760 (level 0) [ 728.963443][ T30] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 729.033325][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 729.063481][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.086910][T19000] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 729.089196][T19000] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #13: comm syz.3.5145: invalid indirect mapped block 4294967295 (level 1) [ 729.120123][ T30] usb 2-1: config 0 descriptor?? [ 729.180687][T19000] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 729.188095][T19000] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #13: comm syz.3.5145: invalid indirect mapped block 65535 (level 2) [ 729.361909][T19000] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 729.621606][ T5634] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.800039][ T30] uclogic 0003:28BD:0094.0053: pen parameters not found [ 729.826151][ T30] uclogic 0003:28BD:0094.0053: interface is invalid, ignoring [ 729.874479][ T30] usb 2-1: USB disconnect, device number 39 [ 729.891068][T18285] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 730.070581][T18285] usb 5-1: Using ep0 maxpacket: 16 [ 730.103278][T18285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.137054][T18285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.174358][T18285] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 730.203482][T18285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.233994][T18285] usb 5-1: config 0 descriptor?? [ 730.361665][ T5746] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 730.806461][T19044] loop5: detected capacity change from 0 to 256 [ 730.829067][T19046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5167'. [ 730.898667][T18285] usb 5-1: string descriptor 0 read error: -71 [ 730.952877][T18285] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 730.987096][T18285] letsketch 0003:6161:4D15.0054: probe with driver letsketch failed with error -32 [ 731.054426][T18285] usb 5-1: USB disconnect, device number 40 [ 731.469203][ T6019] udevd[6019]: symlink '../../loop1' '/dev/disk/by-diskseq/1624.tmp-b7:1' failed: Read-only file system [ 731.517814][T18807] syz.0.5074 (18807) used greatest stack depth: 19952 bytes left [ 731.653942][ T6019] udevd[6019]: symlink '../../loop0' '/dev/disk/by-diskseq/1611.tmp-b7:0' failed: Read-only file system [ 731.717785][ T5987] udevd[5987]: symlink '../../loop4' '/dev/disk/by-diskseq/1625.tmp-b7:4' failed: Read-only file system [ 731.753830][ T6019] udevd[6019]: symlink '../../loop1' '/dev/disk/by-diskseq/1624.tmp-b7:1' failed: Read-only file system [ 731.996369][ T6019] udevd[6019]: symlink '../../loop0' '/dev/disk/by-diskseq/1611.tmp-b7:0' failed: Read-only file system [ 732.069092][ T5987] udevd[5987]: symlink '../../loop1' '/dev/disk/by-diskseq/1624.tmp-b7:1' failed: Read-only file system [ 732.110106][ T6019] udevd[6019]: symlink '../../loop4' '/dev/disk/by-diskseq/1625.tmp-b7:4' failed: Read-only file system [ 732.194796][ T5987] udevd[5987]: symlink '../../loop5' '/dev/disk/by-diskseq/1631.tmp-b7:5' failed: Read-only file system [ 732.211123][T19051] loop2: detected capacity change from 0 to 32768 [ 732.370560][ T5987] udevd[5987]: symlink '../../loop0' '/dev/disk/by-diskseq/1611.tmp-b7:0' failed: Read-only file system [ 732.387565][T19078] loop0: detected capacity change from 0 to 512 [ 732.409324][T19078] EXT4-fs: Ignoring removed oldalloc option [ 732.434700][ T6000] udevd[6000]: symlink '../../loop1' '/dev/disk/by-diskseq/1624.tmp-b7:1' failed: Read-only file system [ 732.469410][T19078] EXT4-fs: Ignoring removed nobh option [ 732.784992][T19078] [ 732.787360][T19078] ====================================================== [ 732.794385][T19078] WARNING: possible circular locking dependency detected [ 732.801500][T19078] syzkaller #0 Tainted: G L [ 732.807483][T19078] ------------------------------------------------------ [ 732.814501][T19078] syz.0.5181/19078 is trying to acquire lock: [ 732.820570][T19078] ffff88807d3eec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 732.830496][T19078] [ 732.830496][T19078] but task is already holding lock: [ 732.837858][T19078] ffff8880361eafa0 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x5f0/0x890 [ 732.847786][T19078] [ 732.847786][T19078] which lock already depends on the new lock. [ 732.847786][T19078] [ 732.858182][T19078] [ 732.858182][T19078] the existing dependency chain (in reverse order) is: [ 732.867187][T19078] [ 732.867187][T19078] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 732.874770][T19078] down_write+0x8b/0x1f0 [ 732.879564][T19078] ext4_destroy_inline_data+0x2d/0xe0 [ 732.885468][T19078] ext4_do_writepages+0x118b/0x3f20 [ 732.891220][T19078] ext4_writepages+0x347/0x790 [ 732.896539][T19078] do_writepages+0x278/0x600 [ 732.901674][T19078] filemap_writeback+0x22d/0x2e0 [ 732.907159][T19078] file_write_and_wait_range+0xcd/0x140 [ 732.913238][T19078] mmb_fsync_noflush+0x7a/0x2b0 [ 732.918631][T19078] ext4_fsync_nojournal.constprop.0+0xe6/0x420 [ 732.925335][T19078] ext4_sync_file+0x892/0xb90 [ 732.930559][T19078] vfs_fsync_range+0x9b/0x190 [ 732.935771][T19078] ext4_buffered_write_iter+0x2a0/0x3f0 [ 732.941859][T19078] ext4_file_write_iter+0xa2f/0x1cf0 [ 732.947786][T19078] iter_file_splice_write+0x830/0x10a0 [ 732.953784][T19078] direct_splice_actor+0x192/0x6c0 [ 732.959423][T19078] splice_direct_to_actor+0x345/0xa30 [ 732.965320][T19078] do_splice_direct+0x174/0x240 [ 732.970697][T19078] vfs_copy_file_range+0xc92/0x1910 [ 732.976425][T19078] __do_sys_copy_file_range+0x1a1/0x460 [ 732.982505][T19078] do_syscall_64+0x10b/0xf80 [ 732.987633][T19078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.994057][T19078] [ 732.994057][T19078] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 733.002513][T19078] __lock_acquire+0x14b8/0x2630 [ 733.007936][T19078] lock_acquire+0x1b1/0x370 [ 733.012979][T19078] ext4_writepages+0x21d/0x790 [ 733.018295][T19078] do_writepages+0x278/0x600 [ 733.023437][T19078] __writeback_single_inode+0x164/0x1350 [ 733.029623][T19078] writeback_single_inode+0x4d3/0xf30 [ 733.035544][T19078] write_inode_now+0x174/0x1f0 [ 733.040860][T19078] iput.part.0+0x7f3/0xf50 [ 733.045844][T19078] iput+0x35/0x40 [ 733.050036][T19078] ext4_xattr_block_set+0x6f7/0x3660 [ 733.055861][T19078] ext4_expand_extra_isize_ea+0x17c6/0x1d70 [ 733.062318][T19078] __ext4_expand_extra_isize+0x346/0x480 [ 733.068489][T19078] __ext4_mark_inode_dirty+0x67d/0x890 [ 733.074506][T19078] ext4_evict_inode+0x846/0x1a30 [ 733.079973][T19078] evict+0x3c2/0xad0 [ 733.084404][T19078] iput.part.0+0x605/0xf50 [ 733.089371][T19078] iput+0x35/0x40 [ 733.093541][T19078] ext4_orphan_cleanup+0x71e/0x11e0 [ 733.099270][T19078] ext4_fill_super+0x916c/0xb5d0 [ 733.104745][T19078] get_tree_bdev_flags+0x38c/0x620 [ 733.110408][T19078] vfs_get_tree+0x92/0x320 [ 733.115356][T19078] path_mount+0x7d0/0x23d0 [ 733.120303][T19078] __x64_sys_mount+0x293/0x310 [ 733.125600][T19078] do_syscall_64+0x10b/0xf80 [ 733.130726][T19078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.137153][T19078] [ 733.137153][T19078] other info that might help us debug this: [ 733.137153][T19078] [ 733.147380][T19078] Possible unsafe locking scenario: [ 733.147380][T19078] [ 733.154844][T19078] CPU0 CPU1 [ 733.160202][T19078] ---- ---- [ 733.165558][T19078] lock(&ei->xattr_sem); [ 733.169893][T19078] lock(&sbi->s_writepages_rwsem); [ 733.177619][T19078] lock(&ei->xattr_sem); [ 733.184506][T19078] rlock(&sbi->s_writepages_rwsem); [ 733.189794][T19078] [ 733.189794][T19078] *** DEADLOCK *** [ 733.189794][T19078] [ 733.197930][T19078] 3 locks held by syz.0.5181/19078: [ 733.203129][T19078] #0: ffff8880278d00d8 (&type->s_umount_key#28/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20 [ 733.213311][T19078] #1: ffff8880278d0600 (sb_internal){++++}-{0:0}, at: evict+0x3c2/0xad0 [ 733.221806][T19078] #2: ffff8880361eafa0 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x5f0/0x890 [ 733.232167][T19078] [ 733.232167][T19078] stack backtrace: [ 733.238056][T19078] CPU: 1 UID: 0 PID: 19078 Comm: syz.0.5181 Tainted: G L syzkaller #0 PREEMPT(full) [ 733.238105][T19078] Tainted: [L]=SOFTLOCKUP [ 733.238117][T19078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 733.238139][T19078] Call Trace: [ 733.238153][T19078] [ 733.238167][T19078] dump_stack_lvl+0x100/0x190 [ 733.238206][T19078] print_circular_bug.cold+0x178/0x1c7 [ 733.238263][T19078] check_noncircular+0x146/0x160 [ 733.238300][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.238349][T19078] __lock_acquire+0x14b8/0x2630 [ 733.238396][T19078] lock_acquire+0x1b1/0x370 [ 733.238434][T19078] ? do_writepages+0x278/0x600 [ 733.238489][T19078] ? __pfx___might_resched+0x10/0x10 [ 733.238540][T19078] ext4_writepages+0x21d/0x790 [ 733.238594][T19078] ? do_writepages+0x278/0x600 [ 733.238646][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.238688][T19078] ? __pfx_ext4_writepages+0x10/0x10 [ 733.238749][T19078] ? do_writepages+0x4b5/0x600 [ 733.238801][T19078] ? do_writepages+0x4b5/0x600 [ 733.238852][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.238912][T19078] ? __pfx_ext4_writepages+0x10/0x10 [ 733.238969][T19078] do_writepages+0x278/0x600 [ 733.239023][T19078] ? __pfx_do_writepages+0x10/0x10 [ 733.239076][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.239120][T19078] __writeback_single_inode+0x164/0x1350 [ 733.239173][T19078] ? find_held_lock+0x2b/0x80 [ 733.239226][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.239270][T19078] ? __pfx___writeback_single_inode+0x10/0x10 [ 733.239321][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.239362][T19078] ? do_raw_spin_unlock+0x145/0x1e0 [ 733.239409][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.239453][T19078] writeback_single_inode+0x4d3/0xf30 [ 733.239505][T19078] ? ext4_evict_inode+0x846/0x1a30 [ 733.239539][T19078] write_inode_now+0x174/0x1f0 [ 733.239588][T19078] ? path_mount+0x7d0/0x23d0 [ 733.239627][T19078] ? __pfx_write_inode_now+0x10/0x10 [ 733.239702][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.239742][T19078] ? find_held_lock+0x2b/0x80 [ 733.239793][T19078] ? iput.part.0+0x7e6/0xf50 [ 733.239834][T19078] ? iput.part.0+0x7e6/0xf50 [ 733.239874][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.239925][T19078] iput.part.0+0x7f3/0xf50 [ 733.239966][T19078] ? __pfx_ext4_drop_inode+0x10/0x10 [ 733.240022][T19078] iput+0x35/0x40 [ 733.240060][T19078] ext4_xattr_block_set+0x6f7/0x3660 [ 733.240106][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.240150][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.240196][T19078] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 733.240245][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.240286][T19078] ? xattr_find_entry+0x240/0x2e0 [ 733.240330][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.240373][T19078] ? ext4_xattr_block_find+0x59/0x430 [ 733.240422][T19078] ext4_expand_extra_isize_ea+0x17c6/0x1d70 [ 733.240492][T19078] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 733.240551][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.240596][T19078] ? dquot_initialize_needed+0x183/0x2a0 [ 733.240659][T19078] __ext4_expand_extra_isize+0x346/0x480 [ 733.240711][T19078] __ext4_mark_inode_dirty+0x67d/0x890 [ 733.240775][T19078] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 733.240838][T19078] ? __pfx___might_resched+0x10/0x10 [ 733.240896][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.240947][T19078] ? __ext4_journal_start_sb+0x1ce/0x670 [ 733.241004][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.241049][T19078] ? ext4_evict_inode+0x6c8/0x1a30 [ 733.241087][T19078] ext4_evict_inode+0x846/0x1a30 [ 733.241126][T19078] ? __pfx_ext4_evict_inode+0x10/0x10 [ 733.241159][T19078] ? evict+0x37e/0xad0 [ 733.241201][T19078] ? evict+0x37e/0xad0 [ 733.241243][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.241294][T19078] ? __pfx_ext4_evict_inode+0x10/0x10 [ 733.241329][T19078] evict+0x3c2/0xad0 [ 733.241375][T19078] ? __pfx_evict+0x10/0x10 [ 733.241423][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.241473][T19078] ? iput.part.0+0x5fd/0xf50 [ 733.241518][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.241569][T19078] iput.part.0+0x605/0xf50 [ 733.241614][T19078] ? __pfx_ext4_drop_inode+0x10/0x10 [ 733.241674][T19078] iput+0x35/0x40 [ 733.241716][T19078] ext4_orphan_cleanup+0x71e/0x11e0 [ 733.241759][T19078] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 733.241801][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.241846][T19078] ? ext4_register_li_request+0xef/0xa00 [ 733.241889][T19078] ext4_fill_super+0x916c/0xb5d0 [ 733.241953][T19078] ? __pfx_ext4_fill_super+0x10/0x10 [ 733.241991][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.242039][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.242082][T19078] ? sb_set_blocksize+0x1fe/0x290 [ 733.242138][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.242180][T19078] ? setup_bdev_super+0x425/0x730 [ 733.242231][T19078] get_tree_bdev_flags+0x38c/0x620 [ 733.242280][T19078] ? __pfx_ext4_fill_super+0x10/0x10 [ 733.242319][T19078] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 733.242370][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.242414][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.242455][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.242495][T19078] ? security_capable+0x80/0x260 [ 733.242544][T19078] vfs_get_tree+0x92/0x320 [ 733.242585][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.242628][T19078] path_mount+0x7d0/0x23d0 [ 733.242670][T19078] ? __pfx_path_mount+0x10/0x10 [ 733.242708][T19078] ? lockdep_hardirqs_on+0x78/0x100 [ 733.242750][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.242793][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.242834][T19078] ? kmem_cache_free+0x127/0x6c0 [ 733.242879][T19078] ? __x64_sys_mount+0x293/0x310 [ 733.242924][T19078] __x64_sys_mount+0x293/0x310 [ 733.242965][T19078] ? __pfx___x64_sys_mount+0x10/0x10 [ 733.243007][T19078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 733.243048][T19078] ? rcu_is_watching+0x12/0xc0 [ 733.243099][T19078] do_syscall_64+0x10b/0xf80 [ 733.243141][T19078] ? irqentry_exit+0x117/0x790 [ 733.243184][T19078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.243219][T19078] RIP: 0033:0x7f971339e04a [ 733.243246][T19078] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.243280][T19078] RSP: 002b:00007f9714269e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 733.243311][T19078] RAX: ffffffffffffffda RBX: 00007f9714269ee0 RCX: 00007f971339e04a [ 733.243334][T19078] RDX: 00002000000001c0 RSI: 0000200000000b80 RDI: 00007f9714269ea0 [ 733.243357][T19078] RBP: 00002000000001c0 R08: 00007f9714269ee0 R09: 0000000000800744 [ 733.243379][T19078] R10: 0000000000800744 R11: 0000000000000246 R12: 0000200000000b80 [ 733.243401][T19078] R13: 00007f9714269ea0 R14: 000000000000047a R15: 000000000000002c [ 733.243435][T19078] [ 733.999909][T19078] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.5181: iget: bad extra_isize 90 (inode size 256) [ 734.015092][T19078] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 734.019091][T19078] EXT4-fs (loop0): Remounting filesystem read-only [ 734.028337][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 734.028372][ C1] EXT4-fs (loop0): initial error at time 1777420131: ext4_xattr_inode_iget:441: inode 11 [ 734.028425][ C1] EXT4-fs (loop0): last error at time 1777420131: ext4_xattr_inode_iget:441: inode 11 [ 734.063941][T19078] EXT4-fs warning (device loop0): ext4_evict_inode:269: couldn't mark inode dirty (err -30) [ 734.075375][T19078] EXT4-fs (loop0): 1 orphan inode deleted [ 734.082857][T19078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 734.125268][T17370] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.241627][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 734.391557][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 734.397984][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.410558][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.420304][ T10] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 734.431872][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.441606][ T10] usb 2-1: config 0 descriptor?? [ 735.057519][ T10] usb 2-1: string descriptor 0 read error: -71 [ 735.094147][ T10] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 735.104030][ T10] letsketch 0003:6161:4D15.0055: probe with driver letsketch failed with error -32 [ 735.116815][ T10] usb 2-1: USB disconnect, device number 40