last executing test programs: 1.662911903s ago: executing program 4 (id=1333): personality(0x500006) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 1.390600357s ago: executing program 1 (id=1340): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) 1.270460279s ago: executing program 2 (id=1342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x9, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x20}}, 0x0) 1.22608426s ago: executing program 1 (id=1343): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800010009081000418e00000004fcff", 0x58}], 0x1) 1.21516239s ago: executing program 0 (id=1344): unshare(0x22020400) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1001, 0x4) 1.115045582s ago: executing program 1 (id=1345): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x34}}, 0x0) 1.059434293s ago: executing program 2 (id=1346): r0 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x0, 0x0) io_setup(0x1, &(0x7f00000005c0)=0x0) io_submit(r1, 0x2000000000000106, &(0x7f0000001a40)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 1.058924742s ago: executing program 0 (id=1347): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback}, 0x10) 948.284334ms ago: executing program 1 (id=1348): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000001880)=[{{0x0, 0x4, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, 0x0, 0x0, 0x60ff}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x2, 0x0) 947.304734ms ago: executing program 0 (id=1349): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x7, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x3, 0x4) 898.843455ms ago: executing program 2 (id=1350): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000022000106000000001700000009000080"], 0x1c}], 0x1}, 0x0) 807.723167ms ago: executing program 1 (id=1352): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @private=0xa0100fc}, 0x1, r1}) 799.656927ms ago: executing program 0 (id=1353): syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc10, &(0x7f0000000180)=ANY=[], 0x3, 0x2f1, &(0x7f0000001040)="$eJzs3b9PFE0cx/HP7N3B8UB49gGekFiiJFZGsTE2GMMfYaFG5M6EcMEEMBEbibUxdv7oLOysjY2lPdHaaGVlD92amZ2FRW537wfHgr5fyV2W25nZ7+zu7X7nkmUE4K91feHb28s/7MtIFVUkXZUCSXWpKul/TdcfrG4sb7SajbyGKq6GfRnFNc2hMkurzXZVbT1XwwvtX1WNpT/DYERRFH3/Uskv8++xhYOSuG9/dPg8CKRh/+10K+tlBDcAW2UHUDKzq1091HjZcQAAymXv/7U48bf3+TGfvweBNOtv+6fs/p+fte4eXyAnUur+70ZZkbHH1+0ysz/ec0M4uz5IRok5LWauGVKcSB7ILk3RqNLFEozcW241LyzdbzUCPdG8lyo25d4b8ambKIh2JifYNor7nsX1OKjZPsxlxD/ZyxZfdB/Knp3IbJvbJtRrNfbyv2rk9og7UqGLO9yrEMd/MbvFUftmjCuV0cv/3EbO+C3ow7sOellX5rB0yLcZn7qP4w/DJM7nQzm1JnTwZ4W4d5eye+dqTbatNVdQaypdy185/dmcXbN3Gd3+jXlmbpgZ/dR7LaTy/8Du7VlXINntOUEaV9KfGbn9qbqSYQeBBR2Fj07Vctc+1V1d0fj65qOVxVarudbpwsevXRQ+qoVXb+KFSj/tJD0/tKqqfiOMhuOmB7UTeozQXnK6qJWcMIM+ppK2/CfJMTn2M6rkBfXdTkXDWkmumUcWmD8cWyuLrXipfaI00s91CSdI6vI4fbPsYFAGew0x8fjPZfJxVnfNrbNf/9Dl6TW1y9OjosZdiy9vbcfDh9TYYD9ZnXDv/3Q1ghvNHsGl+pA75jp7XjqXs8VPB5sNfZx/CLOgz7rD7/8AAAAAAAAAAAAAAAAAAACnTeGDATvR2vqmf7ylxydDSu4iAAAAAAAAAAAAAAAAAAAAAACnXt78v26OzIL5f5MnA7Ln/039V+/i+X/nbUMZ8//mT1ILoGu/AgAA//8icm1V") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) 771.489487ms ago: executing program 2 (id=1354): sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001e000504000000000000000004"], 0x114}], 0x1}, 0x10) 769.476257ms ago: executing program 3 (id=1355): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000040420f00b7030000000000f68500000083000000bf0900000000000055090100000000009500001000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000001780)="000000000000000002b2138373ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 739.936828ms ago: executing program 4 (id=1356): r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) get_mempolicy(0x0, 0x0, 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) 598.52748ms ago: executing program 1 (id=1357): syz_mount_image$reiserfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x1117, &(0x7f00000024c0)="$eJzs2cFq1FAUBuD/JqPtbiTug6ALF1JaxgewC4XZutWNSEGwqw4Iiq/hG/gWvoJ25b50r4uCSyESM3GqDKh0KgjfB8k9OcnJyV3emwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBvknwqyfUqacZclaQkbXs8P03Sjvlr7+sqJQ8P5ov7R7MHiyT198fLo6T0VX1Zmr2b282smTV7zd17+7c+LF6+ev7k8PDgaPmakjYnZxudRRlP9flc2WgPAAAA+G91FzbNmxd/0unqJfUHAAAAfmfT+wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6ubruJmDKokJWnb4/lpknZN3ZV/9H0AAADAxZVUeTxdlx+2AVbu5OO0/Mj345fSx7t5u6YeAAAAWHn27qfLbmsZnP+//rUb9Ovu25kM6/Lt4d6NTLKzM8TLIZ/3kzrJ7i+9Ts5ePx2P0tXJ1uXMCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBv7MABCQAAAICg/6/bESgAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//YwzhLg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x40087602, 0xfffffffffffffffe) 594.33971ms ago: executing program 3 (id=1358): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "edd0961fcbe3a714779b769277aa362003e40900661e12bcca7f88cd6d07f364ac21a4b612bf8bcc2e8ea25b96f8fffffffffffffffe700a13056afd600927"}, 0x60) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x40010041) 541.207781ms ago: executing program 4 (id=1359): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e1c, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414aa7f0000010000000010000000000000000000ff"], 0x30}}], 0x1, 0xa080) 460.662072ms ago: executing program 0 (id=1360): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="800000000000000004"]) 457.147452ms ago: executing program 3 (id=1361): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/oss_mixer\x00', 0x200000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff6000/0x9000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) 421.353053ms ago: executing program 4 (id=1362): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r0, &(0x7f0000000c00)=[{&(0x7f0000000740)=""/121, 0x79}], 0x1, 0x80000000, 0x5) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x2}) 415.971633ms ago: executing program 2 (id=1363): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f00000001c0)={[{@barrier}, {@gid}, {@barrier}, {@creator={'creator', 0x3d, "ff60f383"}}, {@force}, {@nls={'nls', 0x3d, 'cp737'}}, {}]}, 0x1, 0x6e4, &(0x7f0000000240)="$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") r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/4096, 0x9005) 332.114544ms ago: executing program 3 (id=1364): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)={0x8000201c}) 277.701525ms ago: executing program 4 (id=1365): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000000, &(0x7f0000000000)={[{@codepage={'codepage', 0x3d, 'macgreek'}}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@type={'type', 0x3d, "67369671"}}]}, 0x5, 0x2db, &(0x7f0000000200)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 145.993447ms ago: executing program 0 (id=1366): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xde61, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x4, "29907427"}, @local=@item_4={0x3, 0x2, 0x4, "f494df01"}]}}, 0x0}, 0x0) 71.021048ms ago: executing program 3 (id=1367): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x5000008, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56f5], 0xf8}}) 70.719788ms ago: executing program 4 (id=1368): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 65.959968ms ago: executing program 2 (id=1369): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 0s ago: executing program 3 (id=1370): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @multicast1}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): 110.160731][ T4167] XFS (loop1): Unmounting Filesystem [ 110.177653][ T1325] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 110.205550][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.228599][ T1325] usb 3-1: config 0 descriptor?? [ 110.441152][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 110.460133][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 110.484130][ T1107] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.502579][ T1107] usb 1-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00 [ 110.512215][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.531429][ T1107] usb 1-1: config 0 descriptor?? [ 110.550733][ T5531] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 110.557808][ T5531] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 110.610349][ T4555] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 110.635071][ T5557] loop3: detected capacity change from 0 to 4096 [ 110.661820][ T5559] loop1: detected capacity change from 0 to 512 [ 110.696269][ T5557] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 110.707182][ T5557] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 110.718922][ T5559] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 110.725557][ T5557] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 110.737414][ T1325] uclogic 0003:5543:0522.000A: item fetching failed at offset 5/7 [ 110.751101][ T1325] uclogic 0003:5543:0522.000A: parse failed [ 110.757577][ T5557] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 110.766073][ T1325] uclogic: probe of 0003:5543:0522.000A failed with error -22 [ 110.774344][ T5557] ntfs3: loop3: try to read out of volume at offset 0x3fffffc1c00 [ 110.786648][ T5559] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.541: invalid indirect mapped block 10 (level 1) [ 110.798972][ T5557] ntfs3: loop3: try to read out of volume at offset 0x3fffffc2c00 [ 110.813177][ T5559] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.541: invalid indirect mapped block 8 (level 1) [ 110.834239][ T5557] ntfs3: loop3: try to read out of volume at offset 0x3fffffc4c00 [ 110.842962][ T5557] ntfs3: loop3: try to read out of volume at offset 0x3fffffc8c00 [ 110.851873][ T5559] EXT4-fs (loop1): 1 truncate cleaned up [ 110.858131][ T5559] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 110.872572][ T4555] usb 5-1: Using ep0 maxpacket: 32 [ 110.877922][ T5557] ntfs3: loop3: try to read out of volume at offset 0x3fffffd0c00 [ 110.912858][ T5557] ntfs3: loop3: try to read out of volume at offset 0x3fffffe0c00 [ 110.949076][ T4216] usb 3-1: USB disconnect, device number 5 [ 111.000360][ T4555] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.011583][ T4555] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.048410][ T4555] usb 5-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 111.049618][ T1107] wacom 0003:056A:0303.000B: unknown main item tag 0x0 [ 111.073128][ T5563] loop1: detected capacity change from 0 to 16 [ 111.078599][ T1107] wacom 0003:056A:0303.000B: unknown main item tag 0x0 [ 111.082426][ T4555] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.087958][ T1107] wacom 0003:056A:0303.000B: unknown main item tag 0x0 [ 111.102398][ T4555] usb 5-1: config 0 descriptor?? [ 111.109783][ T1107] wacom 0003:056A:0303.000B: unknown main item tag 0x0 [ 111.117132][ T1107] wacom 0003:056A:0303.000B: unknown main item tag 0x0 [ 111.129426][ T5563] cramfs: Error -3 while decompressing! [ 111.137047][ T1107] wacom 0003:056A:0303.000B: unknown main item tag 0x0 [ 111.144887][ T1107] wacom 0003:056A:0303.000B: unknown main item tag 0x0 [ 111.157647][ T5563] cramfs: ffffffff96bbe268(27)->ffff8880699e6000(4096) [ 111.164804][ T1107] wacom 0003:056A:0303.000B: unknown main item tag 0x0 [ 111.164924][ T5563] cramfs: Error -3 while decompressing! [ 111.177563][ T5563] cramfs: ffffffff96bbe283(16)->ffff888069428000(4096) [ 111.178501][ T1107] wacom 0003:056A:0303.000B: Unknown device_type for 'HID 056a:0303'. Assuming pen. [ 111.184838][ T5563] cramfs: Error -3 while decompressing! [ 111.199677][ T5563] cramfs: ffffffff96bbe268(27)->ffff8880699e6000(4096) [ 111.209052][ T26] audit: type=1800 audit(1743089168.630:9): pid=5563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.548" name="file3" dev="loop1" ino=348 res=0 errno=0 [ 111.226722][ T1107] wacom 0003:056A:0303.000B: hidraw0: USB HID v0.06 Device [HID 056a:0303] on usb-dummy_hcd.0-1/input0 [ 111.270736][ T1107] input: Wacom Intuos PT M Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0303.000B/input/input13 [ 111.297411][ T5566] loop3: detected capacity change from 0 to 256 [ 111.408008][ T1107] usb 1-1: USB disconnect, device number 9 [ 111.433540][ T5568] loop1: detected capacity change from 0 to 24 [ 111.575852][ T4555] hid_mf 0003:0079:1843.000C: item fetching failed at offset 0/2 [ 111.585902][ T5572] loop2: detected capacity change from 0 to 512 [ 111.604110][ T4555] hid_mf 0003:0079:1843.000C: HID parse failed. [ 111.607416][ T5574] loop3: detected capacity change from 0 to 256 [ 111.620144][ T4555] hid_mf: probe of 0003:0079:1843.000C failed with error -22 [ 111.648492][ T5572] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 111.661477][ T5574] exfat: Deprecated parameter 'namecase' [ 111.698017][ T5572] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.552: couldn't read orphan inode 26 (err -116) [ 111.720675][ T5572] EXT4-fs (loop2): Remounting filesystem read-only [ 111.730565][ T5572] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsv0,nolazytime,journal_ioprio=0x0000000000000003,dax=never,barrier,. Quota mode: writeback. [ 111.734256][ T5574] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 111.768769][ T5572] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.806617][ T1107] usb 5-1: USB disconnect, device number 7 [ 111.940405][ T4555] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 112.109665][ T5586] loop0: detected capacity change from 0 to 256 [ 112.169626][ T5590] loop3: detected capacity change from 0 to 128 [ 112.210210][ T4555] usb 2-1: Using ep0 maxpacket: 16 [ 112.225242][ T5586] FAT-fs (loop0): Directory bread(block 64) failed [ 112.233867][ T5590] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.246253][ T5586] FAT-fs (loop0): Directory bread(block 65) failed [ 112.256843][ T5590] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.269629][ T5586] FAT-fs (loop0): Directory bread(block 66) failed [ 112.310317][ T5586] FAT-fs (loop0): Directory bread(block 67) failed [ 112.337911][ T5586] FAT-fs (loop0): Directory bread(block 68) failed [ 112.350602][ T4555] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.360222][ T5586] FAT-fs (loop0): Directory bread(block 69) failed [ 112.371767][ T4555] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.379404][ T5586] FAT-fs (loop0): Directory bread(block 70) failed [ 112.401102][ T4555] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 112.411948][ T4555] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.422024][ T4555] usb 2-1: config 0 descriptor?? [ 112.432194][ T5586] FAT-fs (loop0): Directory bread(block 71) failed [ 112.444886][ T5586] FAT-fs (loop0): Directory bread(block 72) failed [ 112.460209][ T5586] FAT-fs (loop0): Directory bread(block 73) failed [ 112.522852][ T5600] loop2: detected capacity change from 0 to 1024 [ 112.700413][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 112.712822][ T4663] hfsplus: b-tree write err: -5, ino 4 [ 112.794787][ T5610] loop3: detected capacity change from 0 to 128 [ 112.913966][ T4555] kye 0003:0458:501A.000D: item fetching failed at offset 3/5 [ 112.942327][ T4555] kye 0003:0458:501A.000D: parse failed [ 112.960235][ T4555] kye: probe of 0003:0458:501A.000D failed with error -22 [ 113.075150][ T5616] loop2: detected capacity change from 0 to 8192 [ 113.081108][ T5622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.577'. [ 113.103121][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.139652][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.141326][ T1107] usb 2-1: USB disconnect, device number 7 [ 113.151801][ T7] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 113.165755][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.167997][ T5616] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 113.184516][ T7] usb 5-1: config 0 descriptor?? [ 113.222199][ T5616] REISERFS (device loop2): using ordered data mode [ 113.228737][ T5616] reiserfs: using flush barriers [ 113.235926][ T5627] netlink: 'syz.0.578': attribute type 10 has an invalid length. [ 113.248517][ T5616] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 113.268332][ T5616] REISERFS (device loop2): checking transaction log (loop2) [ 113.301037][ T5627] team0: Port device netdevsim0 added [ 113.312629][ T5628] netlink: 'syz.0.578': attribute type 10 has an invalid length. [ 113.364595][ T5628] team0: Port device netdevsim0 removed [ 113.373783][ T5628] device netdevsim0 entered promiscuous mode [ 113.380797][ T5628] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 113.399545][ T5616] REISERFS (device loop2): Using tea hash to sort names [ 113.410554][ T5628] syz.0.578 (5628) used greatest stack depth: 19160 bytes left [ 113.416547][ T5616] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 113.441508][ T5616] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 113.500254][ T4216] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 113.742480][ T4216] usb 4-1: Using ep0 maxpacket: 32 [ 113.744657][ T5634] loop1: detected capacity change from 0 to 256 [ 113.813695][ T5634] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 113.841749][ T5634] FAT-fs (loop1): Filesystem has been set read-only [ 113.861379][ T4216] usb 4-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.870494][ T7] hid-led: probe of 0003:1D34:000A.000E failed with error -71 [ 113.892936][ T7] usb 5-1: USB disconnect, device number 8 [ 113.909652][ T4216] usb 4-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.932186][ T5637] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 113.937247][ T4216] usb 4-1: config 0 interface 0 has no altsetting 0 [ 113.960194][ T4216] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 113.985560][ T4216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.010627][ T4216] usb 4-1: config 0 descriptor?? [ 114.122191][ T5639] netlink: 32 bytes leftover after parsing attributes in process `syz.1.583'. [ 114.237886][ T5636] loop2: detected capacity change from 0 to 32768 [ 114.306551][ T5636] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.581 (5636) [ 114.374860][ T5636] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 114.393904][ T5636] BTRFS info (device loop2): force clearing of disk cache [ 114.401206][ T5636] BTRFS info (device loop2): force zlib compression, level 3 [ 114.408718][ T5636] BTRFS info (device loop2): enabling auto defrag [ 114.416072][ T5636] BTRFS info (device loop2): metadata ratio 257 [ 114.450813][ T5636] BTRFS info (device loop2): enabling disk space caching [ 114.490165][ T5636] BTRFS info (device loop2): disk space caching is enabled [ 114.497472][ T5636] BTRFS info (device loop2): has skinny extents [ 114.508416][ T4216] hkems 0003:2006:0118.000F: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.3-1/input0 [ 114.539252][ T4216] hkems 0003:2006:0118.000F: no inputs found [ 114.545930][ T4216] hkems 0003:2006:0118.000F: force feedback init failed [ 114.735167][ T5662] loop1: detected capacity change from 0 to 256 [ 114.754849][ T7] usb 4-1: USB disconnect, device number 6 [ 114.847730][ T5674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.591'. [ 114.868663][ T5636] BTRFS info (device loop2): enabling ssd optimizations [ 114.884017][ T5636] BTRFS info (device loop2): clearing free space tree [ 114.902520][ T5636] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.943870][ T5636] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 115.177495][ T5654] loop4: detected capacity change from 0 to 32768 [ 115.255623][ T144] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 115.324293][ T5691] loop3: detected capacity change from 0 to 64 [ 115.325164][ T5654] XFS (loop4): Mounting V5 Filesystem [ 115.606697][ T5654] XFS (loop4): Starting recovery (logdev: internal) [ 115.719891][ T5654] XFS (loop4): Ending recovery (logdev: internal) [ 115.936644][ T5679] loop0: detected capacity change from 0 to 40427 [ 116.059248][ T4172] XFS (loop4): Unmounting Filesystem [ 116.141543][ T5707] loop1: detected capacity change from 0 to 256 [ 116.193176][ T5679] F2FS-fs (loop0): invalid crc value [ 116.232885][ T5679] F2FS-fs (loop0): Found nat_bits in checkpoint [ 116.237077][ T5707] FAT-fs (loop1): Directory bread(block 64) failed [ 116.246286][ T5707] FAT-fs (loop1): Directory bread(block 65) failed [ 116.252950][ T5707] FAT-fs (loop1): Directory bread(block 66) failed [ 116.259571][ T5707] FAT-fs (loop1): Directory bread(block 67) failed [ 116.266408][ T5707] FAT-fs (loop1): Directory bread(block 68) failed [ 116.287128][ T5707] FAT-fs (loop1): Directory bread(block 69) failed [ 116.296558][ T5707] FAT-fs (loop1): Directory bread(block 70) failed [ 116.303300][ T5707] FAT-fs (loop1): Directory bread(block 71) failed [ 116.312100][ T5707] FAT-fs (loop1): Directory bread(block 72) failed [ 116.330209][ T5707] FAT-fs (loop1): Directory bread(block 73) failed [ 116.425056][ T5679] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 116.920840][ T5718] loop4: detected capacity change from 0 to 4096 [ 117.009112][ T5718] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 117.066304][ T5718] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 117.113289][ T5718] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 117.166259][ T5718] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 117.216100][ T5718] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 117.307568][ T5718] ntfs: volume version 3.1. [ 117.778892][ T5722] loop1: detected capacity change from 0 to 32768 [ 117.856973][ T5727] loop3: detected capacity change from 0 to 32768 [ 117.884279][ T5722] [ 117.884279][ T5722] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.884279][ T5722] [ 117.959754][ T5727] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.608 (5727) [ 117.972263][ T5732] loop2: detected capacity change from 0 to 32768 [ 117.980850][ T5722] ea_get: invalid extended attribute [ 117.987988][ T5722] ffff88805fd10330: 30 00 07 00 00 00 00 00 00 00 65 72 2e 78 61 74 0.........er.xat [ 118.041597][ T5722] ffff88805fd10340: 74 72 31 00 78 61 74 74 72 31 00 0b 06 00 75 73 tr1.xattr1....us [ 118.065031][ T5732] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.610 (5732) [ 118.073148][ T5722] ffff88805fd10350: 65 72 2e 78 61 74 74 72 32 00 78 61 74 74 72 32 er.xattr2.xattr2 [ 118.096668][ T5727] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 118.096750][ T5727] BTRFS info (device loop3): using free space tree [ 118.096770][ T5727] BTRFS info (device loop3): has skinny extents [ 118.142298][ T5755] ea_get: invalid extended attribute [ 118.142372][ T5755] ffff88805fd10330: 30 00 07 00 00 00 00 00 00 00 65 72 2e 78 61 74 0.........er.xat [ 118.142397][ T5755] ffff88805fd10340: 74 72 31 00 78 61 74 74 72 31 00 0b 06 00 75 73 tr1.xattr1....us [ 118.142416][ T5755] ffff88805fd10350: 65 72 2e 78 61 74 74 72 32 00 78 61 74 74 72 32 er.xattr2.xattr2 [ 118.169228][ T5732] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 118.169279][ T5732] BTRFS info (device loop2): force zlib compression, level 3 [ 118.169302][ T5732] BTRFS info (device loop2): force clearing of disk cache [ 118.169319][ T5732] BTRFS info (device loop2): setting nodatasum [ 118.169334][ T5732] BTRFS info (device loop2): use zlib compression, level 3 [ 118.169353][ T5732] BTRFS info (device loop2): allowing degraded mounts [ 118.169372][ T5732] BTRFS info (device loop2): enabling disk space caching [ 118.169389][ T5732] BTRFS info (device loop2): disk space caching is enabled [ 118.169406][ T5732] BTRFS info (device loop2): has skinny extents [ 118.220123][ T5727] BTRFS info (device loop3): enabling ssd optimizations [ 118.310507][ T5732] BTRFS info (device loop2): enabling ssd optimizations [ 118.321632][ T5732] BTRFS info (device loop2): clearing free space tree [ 118.321739][ T5732] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 118.321785][ T5732] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 118.386317][ T4167] [ 118.386317][ T4167] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.386317][ T4167] [ 118.386352][ T4167] [ 118.386352][ T4167] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.386352][ T4167] [ 118.446658][ T5779] loop0: detected capacity change from 0 to 4096 [ 118.533303][ T5779] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 118.533327][ T5779] ntfs: (device loop0): ntfs_read_inode_mount(): ntfs_mapping_pairs_decompress() failed with error code -5. $MFT is corrupt. [ 118.533359][ T5779] ntfs: (device loop0): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 118.533386][ T5779] ntfs: (device loop0): ntfs_fill_super(): Failed to load essential metadata. [ 118.962227][ T5804] syz.3.625 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 119.446561][ T5823] ramfs: Bad value for 'mode' [ 119.704583][ T5800] loop0: detected capacity change from 0 to 32768 [ 119.741220][ T5835] loop4: detected capacity change from 0 to 2048 [ 119.786027][ T5800] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.627 (5800) [ 119.886678][ T5847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.913191][ T5800] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 119.930507][ T5800] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 119.957166][ T5800] BTRFS info (device loop0): use zstd compression, level 3 [ 119.983592][ T5800] BTRFS info (device loop0): using free space tree [ 120.004311][ T5800] BTRFS info (device loop0): has skinny extents [ 120.085847][ T5872] program syz.4.645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.113092][ T5800] BTRFS info (device loop0): enabling ssd optimizations [ 120.466607][ T5892] sp0: Synchronizing with TNC [ 120.835151][ T4212] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 121.110285][ T4212] usb 3-1: Using ep0 maxpacket: 16 [ 121.231403][ T4212] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 121.231436][ T4212] usb 3-1: config 0 has no interface number 0 [ 121.231476][ T4212] usb 3-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.284560][ T5935] loop4: detected capacity change from 0 to 2048 [ 121.295217][ T26] audit: type=1326 audit(1743089178.720:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.3.671" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f601f547169 code=0x0 [ 121.361696][ T5938] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.470220][ T5918] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 121.470316][ T4212] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 121.507690][ T4212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.521887][ T4212] usb 3-1: Product: syz [ 121.526080][ T4212] usb 3-1: Manufacturer: syz [ 121.534731][ T4212] usb 3-1: SerialNumber: syz [ 121.554599][ T4212] usb 3-1: config 0 descriptor?? [ 121.631494][ T4212] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 121.746260][ T5955] netlink: 40 bytes leftover after parsing attributes in process `syz.1.677'. [ 121.840469][ T5918] usb 1-1: config index 0 descriptor too short (expected 2084, got 36) [ 121.852258][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 121.865290][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 121.873820][ T4212] usb 3-1: USB disconnect, device number 6 [ 121.877533][ T4663] usb 3-1: Failed to submit usb control message: -71 [ 121.899456][ T5918] usb 1-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 121.909690][ T4663] usb 3-1: unable to send the bmi data to the device: -71 [ 121.919280][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.930215][ T4663] usb 3-1: unable to get target info from device [ 121.951668][ T4663] usb 3-1: could not get target info (-71) [ 121.961918][ T5918] usb 1-1: config 0 descriptor?? [ 121.971772][ T4663] usb 3-1: could not probe fw (-71) [ 121.982476][ T5933] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 122.217785][ T5974] loop1: detected capacity change from 0 to 256 [ 122.316504][ T5974] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 122.443398][ T5918] acrux 0003:1A34:F705.0010: unknown main item tag 0x2 [ 122.464063][ T5918] acrux 0003:1A34:F705.0010: item fetching failed at offset 1/5 [ 122.484644][ T5918] acrux 0003:1A34:F705.0010: parse failed [ 122.491786][ T5978] loop2: detected capacity change from 0 to 256 [ 122.498268][ T5918] acrux: probe of 0003:1A34:F705.0010 failed with error -22 [ 122.553198][ T5978] exfat: Deprecated parameter 'namecase' [ 122.600777][ T5978] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 122.617216][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.689'. [ 122.676386][ T5918] usb 1-1: USB disconnect, device number 10 [ 122.898051][ T5976] loop3: detected capacity change from 0 to 32768 [ 123.307697][ T5988] loop4: detected capacity change from 0 to 32768 [ 123.331922][ T4212] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 123.520503][ T6012] loop3: detected capacity change from 0 to 1024 [ 123.554193][ T5988] XFS (loop4): Mounting V5 Filesystem [ 123.584548][ T5988] XFS (loop4): Ending clean mount [ 123.607521][ T5988] XFS (loop4): Quotacheck needed: Please wait. [ 123.607723][ T6008] loop0: detected capacity change from 0 to 4096 [ 123.620452][ T4212] usb 3-1: Using ep0 maxpacket: 32 [ 123.657847][ T6012] hfsplus: bad catalog entry type [ 123.715602][ T5988] XFS (loop4): Quotacheck: Done. [ 123.740402][ T4212] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 123.755132][ T5990] loop1: detected capacity change from 0 to 32768 [ 123.765597][ T144] hfsplus: b-tree write err: -5, ino 4 [ 123.791152][ T6016] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.821755][ T4172] XFS (loop4): Unmounting Filesystem [ 123.972368][ T5990] XFS (loop1): Mounting V5 Filesystem [ 123.987059][ T4212] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 124.005015][ T4212] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 124.029644][ T4212] usb 3-1: Product: syz [ 124.049022][ T4212] usb 3-1: Manufacturer: syz [ 124.062408][ T4212] usb 3-1: SerialNumber: syz [ 124.113710][ T4212] usb 3-1: config 0 descriptor?? [ 124.134302][ T5995] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.178337][ T5990] XFS (loop1): Ending clean mount [ 124.181141][ T4212] hub 3-1:0.0: bad descriptor, ignoring hub [ 124.189939][ T4212] hub: probe of 3-1:0.0 failed with error -5 [ 124.474270][ T4167] XFS (loop1): Unmounting Filesystem [ 124.607247][ T6040] loop0: detected capacity change from 0 to 8192 [ 124.753219][ T6040] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 124.760163][ T5818] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 124.763645][ T6040] REISERFS (device loop0): using ordered data mode [ 124.778820][ T6040] reiserfs: using flush barriers [ 124.785458][ T6040] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 124.802098][ T6040] REISERFS (device loop0): checking transaction log (loop0) [ 124.820002][ T6040] REISERFS (device loop0): Using rupasov hash to sort names [ 124.827533][ T6040] REISERFS (device loop0): using 3.5.x disk format [ 124.835754][ T6040] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 124.846978][ T6040] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 124.858205][ T6040] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 124.869352][ T6040] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 124.885474][ T6040] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 124.918698][ T6044] loop4: detected capacity change from 0 to 4096 [ 124.938191][ T6040] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 124.961676][ T6044] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 124.976328][ T6038] loop3: detected capacity change from 0 to 32768 [ 125.032437][ T6044] ntfs: volume version 3.1. [ 125.070644][ T6038] XFS: noikeep mount option is deprecated. [ 125.210356][ T6038] XFS (loop3): Mounting V5 Filesystem [ 125.222926][ T5995] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.255675][ T6059] loop0: detected capacity change from 0 to 512 [ 125.309109][ T6038] XFS (loop3): Ending clean mount [ 125.335764][ T6059] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 125.361477][ T6038] XFS (loop3): Quotacheck needed: Please wait. [ 125.395447][ T6059] EXT4-fs (loop0): 1 truncate cleaned up [ 125.426688][ T6059] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,errors=remount-ro,. Quota mode: none. [ 125.457091][ T6059] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.712: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 125.498914][ T6059] EXT4-fs (loop0): Remounting filesystem read-only [ 125.509879][ T6038] XFS (loop3): Quotacheck: Done. [ 125.525940][ T6059] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 125.549430][ T6059] EXT4-fs (loop0): Remounting filesystem read-only [ 125.610403][ T5818] usb 3-1: USB disconnect, device number 7 [ 125.658092][ T4166] XFS (loop3): Unmounting Filesystem [ 125.732162][ T4212] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 125.863607][ T6078] loop4: detected capacity change from 0 to 256 [ 125.883860][ T6078] exfat: Deprecated parameter 'namecase' [ 125.907316][ T6078] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8ce3369d, utbl_chksum : 0xe619d30d) [ 126.140337][ T4212] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.156328][ T6082] loop4: detected capacity change from 0 to 512 [ 126.180171][ T4212] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.189941][ T4212] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.214156][ T6084] device vlan2 entered promiscuous mode [ 126.230158][ T4212] usb 2-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 126.239281][ T4212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.250090][ T6084] device wlan1 entered promiscuous mode [ 126.279911][ T6082] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.723: invalid indirect mapped block 256 (level 2) [ 126.304853][ T4212] usb 2-1: config 0 descriptor?? [ 126.346018][ T6084] device wlan1 left promiscuous mode [ 126.394326][ T6082] EXT4-fs (loop4): 2 truncates cleaned up [ 126.412186][ T6082] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.779708][ T6077] loop0: detected capacity change from 0 to 40427 [ 126.794684][ T4212] wacom 0003:056A:0017.0011: Unknown device_type for 'HID 056a:0017'. Assuming pen. [ 126.825769][ T4212] wacom 0003:056A:0017.0011: hidraw0: USB HID v0.05 Device [HID 056a:0017] on usb-dummy_hcd.1-1/input0 [ 126.844875][ T4212] input: Wacom BambooFun 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0017.0011/input/input16 [ 126.918718][ T6077] F2FS-fs (loop0): invalid crc value [ 126.947076][ T6077] F2FS-fs (loop0): Found nat_bits in checkpoint [ 126.985401][ T6112] loop4: detected capacity change from 0 to 512 [ 127.035503][ T4212] usb 2-1: USB disconnect, device number 8 [ 127.083603][ T6122] netlink: 48 bytes leftover after parsing attributes in process `syz.3.740'. [ 127.134011][ T6112] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 127.146906][ T6077] F2FS-fs (loop0): recover fsync data on readonly fs [ 127.165527][ T6077] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 127.197111][ T6112] EXT4-fs (loop4): invalid journal inode [ 127.213273][ T6112] EXT4-fs (loop4): can't get journal size [ 127.259784][ T6112] EXT4-fs (loop4): 1 truncate cleaned up [ 127.266232][ T6112] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 127.294396][ T6112] EXT4-fs warning (device loop4): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 127.445755][ T6133] netlink: 763 bytes leftover after parsing attributes in process `syz.3.746'. [ 127.586482][ T6139] loop4: detected capacity change from 0 to 64 [ 127.866101][ T6147] sock: sock_timestamping_bind_phc: sock not bind to device [ 127.984368][ T6151] loop4: detected capacity change from 0 to 512 [ 128.087318][ T6151] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.204734][ T6164] netlink: 44 bytes leftover after parsing attributes in process `syz.1.759'. [ 128.230868][ T6151] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e119, mo2=0000] [ 128.282018][ T6129] loop2: detected capacity change from 0 to 32768 [ 128.362552][ T6151] EXT4-fs (loop4): 1 truncate cleaned up [ 128.368228][ T6151] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,norecovery,acl,resgid=0x000000000000ee01,norecovery,noauto_da_alloc,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 128.392344][ T144] Quota error (device loop4): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 128.464686][ T144] EXT4-fs error (device loop4): ext4_release_dquot:6220: comm kworker/u4:1: Failed to release dquot type 1 [ 128.500930][ T6135] loop3: detected capacity change from 0 to 32768 [ 128.508729][ T6151] EXT4-fs warning (device loop4): __ext4_unlink:3335: inode #15: comm syz.4.754: Deleting file 'file1' with no links [ 128.526839][ T6129] XFS (loop2): Mounting V5 Filesystem [ 128.531272][ T6177] loop0: detected capacity change from 0 to 512 [ 128.585640][ T6177] EXT4-fs (loop0): Ignoring removed nobh option [ 128.599714][ T144] Quota error (device loop4): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 128.611789][ T144] EXT4-fs error (device loop4): ext4_release_dquot:6220: comm kworker/u4:1: Failed to release dquot type 1 [ 128.618160][ T6184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.764'. [ 128.634583][ T6184] smc: net device bond0 applied user defined pnetid S [ 128.638372][ T6177] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 128.657996][ T6177] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 128.691379][ T6177] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #13: comm syz.0.762: casefold flag without casefold feature [ 128.739439][ T6129] XFS (loop2): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 128.742567][ T6135] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 128.742567][ T6135] [ 128.763035][ T6135] ialloc: diAlloc returned -5! [ 128.766267][ T6177] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.762: couldn't read orphan inode 13 (err -117) [ 128.826794][ T6177] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 128.939518][ T6193] loop1: detected capacity change from 0 to 2048 [ 128.949130][ T6129] XFS (loop2): Starting recovery (logdev: internal) [ 128.985343][ T6129] XFS (loop2): Ending recovery (logdev: internal) [ 129.228370][ T4171] XFS (loop2): Unmounting Filesystem [ 129.306177][ T6208] loop1: detected capacity change from 0 to 512 [ 129.441042][ T6208] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 129.484639][ T6208] ext4 filesystem being mounted at /157/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.546545][ T6220] loop3: detected capacity change from 0 to 512 [ 129.570475][ T5915] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 129.595657][ T6220] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 129.679241][ T6220] EXT4-fs (loop3): 1 truncate cleaned up [ 129.697454][ T6220] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 129.970355][ T5915] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.013804][ T5915] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 130.062873][ T5915] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.092610][ T6236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.787'. [ 130.104259][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.240615][ T6210] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 130.636214][ T6253] loop1: detected capacity change from 0 to 1024 [ 130.712988][ T5818] usb 5-1: USB disconnect, device number 9 [ 130.755359][ T6253] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.810226][ T4212] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 130.909156][ T6253] EXT4-fs warning (device loop1): empty_inline_dir:1844: bad inline directory (dir #12) - no `..' [ 131.220346][ T4212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.260187][ T4212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.280818][ T4212] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 131.334739][ T6278] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 131.345799][ T4212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.381720][ T4212] usb 4-1: config 0 descriptor?? [ 131.387993][ T6278] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 131.505269][ T6290] loop0: detected capacity change from 0 to 256 [ 131.627285][ T6290] FAT-fs (loop0): Directory bread(block 64) failed [ 131.641274][ T6296] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 131.650232][ T6290] FAT-fs (loop0): Directory bread(block 65) failed [ 131.657186][ T6290] FAT-fs (loop0): Directory bread(block 66) failed [ 131.695283][ T6290] FAT-fs (loop0): Directory bread(block 67) failed [ 131.716034][ T6290] FAT-fs (loop0): Directory bread(block 68) failed [ 131.739903][ T6290] FAT-fs (loop0): Directory bread(block 69) failed [ 131.756121][ T6290] FAT-fs (loop0): Directory bread(block 70) failed [ 131.771337][ T6290] FAT-fs (loop0): Directory bread(block 71) failed [ 131.788267][ T6290] FAT-fs (loop0): Directory bread(block 72) failed [ 131.798332][ T6290] FAT-fs (loop0): Directory bread(block 73) failed [ 131.903018][ T4212] pyra 0003:1E7D:2CF6.0012: global environment stack underflow [ 131.930245][ T5908] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 131.931217][ T4212] pyra 0003:1E7D:2CF6.0012: item 0 0 1 11 parsing failed [ 131.977192][ T4212] pyra 0003:1E7D:2CF6.0012: parse failed [ 131.989940][ T4212] pyra: probe of 0003:1E7D:2CF6.0012 failed with error -22 [ 132.055117][ T6314] virtio-fs: tag <(null)> not found [ 132.142200][ T5918] usb 4-1: USB disconnect, device number 7 [ 132.300380][ T5908] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 132.313985][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.366828][ T6330] loop0: detected capacity change from 0 to 256 [ 132.426375][ T6334] loop1: detected capacity change from 0 to 256 [ 132.433273][ T5908] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 132.450122][ T5915] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 132.457399][ T6330] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 132.475340][ T5908] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 132.492959][ T6334] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 132.493713][ T5908] usb 5-1: Manufacturer: syz [ 132.564262][ T5908] usb 5-1: config 0 descriptor?? [ 132.690145][ T5908] rc_core: IR keymap rc-hauppauge not found [ 132.696076][ T5908] Registered IR keymap rc-empty [ 132.707156][ T5908] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 132.717923][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 132.726909][ T5908] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input19 [ 132.767215][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.773672][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.860315][ T5915] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 132.871958][ T5915] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 132.883509][ T5915] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 132.897589][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.071042][ T5915] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 133.090591][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.100237][ C1] igorplugusb 5-1:0.0: receive overflow, at least 23 lost [ 133.113251][ T5915] usb 3-1: Product: syz [ 133.119047][ T5915] usb 3-1: Manufacturer: syz [ 133.128954][ T5915] usb 3-1: SerialNumber: syz [ 133.135438][ T6350] loop3: detected capacity change from 0 to 2048 [ 133.152152][ T5915] usb 3-1: config 0 descriptor?? [ 133.191107][ T6336] loop0: detected capacity change from 0 to 32768 [ 133.224202][ T6350] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 133.254706][ T6336] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 133.254706][ T6336] [ 133.264755][ T6350] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.283649][ T6336] ERROR: (device loop0): remounting filesystem as read-only [ 133.301357][ T6336] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 133.301357][ T6336] [ 133.314450][ T4212] usb 5-1: USB disconnect, device number 10 [ 133.343794][ T6336] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 133.343794][ T6336] [ 133.413197][ T5915] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input20 [ 133.448693][ T3531] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 133.500766][ T6361] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 133.515378][ T3531] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 133.556467][ T3531] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 133.589482][ T3531] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 133.628408][ T6365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.847'. [ 133.665157][ T6320] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 133.731710][ T4158] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 133.768780][ T4553] usb 3-1: USB disconnect, device number 8 [ 133.782175][ T3531] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 133.986364][ T6379] loop1: detected capacity change from 0 to 1024 [ 134.131455][ T6379] hfsplus: bad catalog entry type [ 134.209512][ T9] hfsplus: b-tree write err: -5, ino 4 [ 134.240335][ T6389] loop0: detected capacity change from 0 to 8192 [ 134.616071][ T6406] loop1: detected capacity change from 0 to 1024 [ 135.395540][ T6441] loop0: detected capacity change from 0 to 512 [ 135.468863][ T6441] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 135.554624][ T6441] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.883: invalid indirect mapped block 10 (level 1) [ 135.621206][ T6441] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.883: invalid indirect mapped block 8 (level 1) [ 135.625908][ T6410] loop2: detected capacity change from 0 to 40427 [ 135.652600][ T6419] loop1: detected capacity change from 0 to 32768 [ 135.661511][ T6441] EXT4-fs (loop0): 1 truncate cleaned up [ 135.667244][ T6441] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 135.715028][ T6428] loop4: detected capacity change from 0 to 32768 [ 135.740585][ T6419] JBD2: Ignoring recovery information on journal [ 135.775361][ T6428] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.876 (6428) [ 135.832483][ T6410] F2FS-fs (loop2): Found nat_bits in checkpoint [ 135.872036][ T6428] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 135.887237][ T6428] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 135.931205][ T6419] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 135.940356][ T6428] BTRFS info (device loop4): use zstd compression, level 3 [ 135.940419][ T6428] BTRFS info (device loop4): using free space tree [ 135.940437][ T6428] BTRFS info (device loop4): has skinny extents [ 136.051907][ T6410] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 136.135476][ T6410] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 136.159789][ T4167] ocfs2: Unmounting device (7,1) on (node local) [ 136.275354][ T6481] loop0: detected capacity change from 0 to 1024 [ 136.288290][ T6410] attempt to access beyond end of device [ 136.288290][ T6410] loop2: rw=2049, want=45104, limit=40427 [ 136.306847][ T6428] BTRFS info (device loop4): enabling ssd optimizations [ 136.355725][ T6481] EXT4-fs (loop0): Ignoring removed nobh option [ 136.382580][ T6481] EXT4-fs (loop0): Ignoring removed bh option [ 136.388699][ T6481] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.423431][ T6487] loop1: detected capacity change from 0 to 256 [ 136.589488][ T4160] udevd[4160]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 136.620444][ T6481] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 136.685404][ T4160] udevd[4160]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 136.850253][ T6495] loop1: detected capacity change from 0 to 2048 [ 136.881032][ T4661] udevd[4661]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 136.970181][ T6495] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 136.992134][ T4661] udevd[4661]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 137.034513][ T6499] loop3: detected capacity change from 0 to 256 [ 137.085636][ T6495] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,errors=continue,mblk_io_submit,minixdf,auto_da_alloc,grpjquota=,bsddf,. Quota mode: none. [ 137.124345][ T4661] udevd[4661]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 137.146653][ T6505] loop0: detected capacity change from 0 to 256 [ 137.232690][ T6505] exfat: Deprecated parameter 'namecase' [ 137.346379][ T6505] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 137.517917][ T6519] loop2: detected capacity change from 0 to 256 [ 137.536246][ T6515] loop1: detected capacity change from 0 to 4096 [ 137.543321][ T6521] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.906'. [ 137.601211][ T6524] loop0: detected capacity change from 0 to 512 [ 137.640922][ T6524] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 137.642579][ T6515] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 137.663563][ T6519] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 137.684938][ T6524] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.907: inode #255: comm syz.0.907: iget: illegal inode # [ 137.711259][ T6528] loop3: detected capacity change from 0 to 4096 [ 137.718003][ T6515] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 137.726562][ T6515] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 137.735234][ T6515] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 137.745583][ T6515] ntfs3: loop1: try to read out of volume at offset 0x3fffffc1c00 [ 137.753632][ T6515] ntfs3: loop1: try to read out of volume at offset 0x3fffffc2c00 [ 137.763141][ T6515] ntfs3: loop1: try to read out of volume at offset 0x3fffffc4c00 [ 137.771232][ T6515] ntfs3: loop1: try to read out of volume at offset 0x3fffffc8c00 [ 137.779396][ T6515] ntfs3: loop1: try to read out of volume at offset 0x3fffffd0c00 [ 137.788345][ T6515] ntfs3: loop1: try to read out of volume at offset 0x3fffffe0c00 [ 137.832711][ T6524] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.907: error while reading EA inode 255 err=-117 [ 137.854993][ T6524] EXT4-fs (loop0): 1 truncate cleaned up [ 137.864017][ T6524] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,resuid=0x000000000000ee01,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 137.976986][ T6533] loop2: detected capacity change from 0 to 64 [ 137.990277][ T26] audit: type=1800 audit(1743089195.410:11): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.907" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 138.066370][ T4661] udevd[4661]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 138.098215][ T6536] ntfs3: loop3: failed to convert "256c" to koi8-ru [ 138.125569][ T4661] udevd[4661]: symlink '../../loop3' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:3' failed: Read-only file system [ 138.166236][ T6538] netlink: 'syz.4.913': attribute type 11 has an invalid length. [ 138.395704][ T4661] udevd[4661]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 138.478293][ T6546] netlink: 32 bytes leftover after parsing attributes in process `syz.4.918'. [ 138.513174][ T6548] netlink: 48 bytes leftover after parsing attributes in process `syz.0.916'. [ 138.541620][ T4661] udevd[4661]: symlink '../../loop3' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:3' failed: Read-only file system [ 138.574486][ T6546] netlink: 32 bytes leftover after parsing attributes in process `syz.4.918'. [ 138.635344][ T6546] Zero length message leads to an empty skb [ 138.717492][ T6542] loop2: detected capacity change from 0 to 65536 [ 138.841353][ T6542] XFS (loop2): Mounting V5 Filesystem [ 138.875465][ T6566] tipc: Started in network mode [ 138.893302][ T4661] udevd[4661]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 138.907367][ T6566] tipc: Node identity @, cluster identity 4711 [ 138.931606][ T6542] XFS (loop2): Internal error !xlog_verify_bno(log, 0, nbblks) at line 88 of file fs/xfs/xfs_log_recover.c. Caller xlog_alloc_buffer+0x114/0x1e0 [ 138.936889][ T6570] loop0: detected capacity change from 0 to 256 [ 138.946670][ T6542] CPU: 0 PID: 6542 Comm: syz.2.914 Not tainted 5.15.179-syzkaller #0 [ 138.960942][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.963328][ T6566] tipc: Enabling of bearer rejected, failed to enable media [ 138.971023][ T6542] Call Trace: [ 138.971035][ T6542] [ 138.971050][ T6542] dump_stack_lvl+0x1e3/0x2d0 [ 138.971084][ T6542] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 138.971111][ T6542] ? __phys_addr+0xb6/0x170 [ 138.971133][ T6542] ? __kasan_kmalloc_large+0x8d/0xb0 [ 138.971157][ T6542] ? kvmalloc_node+0x80/0x140 [ 139.010360][ T6542] xfs_corruption_error+0x112/0x160 [ 139.015625][ T6542] ? xlog_alloc_buffer+0x114/0x1e0 [ 139.020769][ T6542] xlog_alloc_buffer+0x152/0x1e0 [ 139.025836][ T6542] ? xlog_alloc_buffer+0x114/0x1e0 [ 139.030972][ T6542] xlog_do_recovery_pass+0x1db/0xe30 [ 139.036299][ T6542] ? print_irqtrace_events+0x210/0x210 [ 139.041795][ T6542] ? xlog_do_io+0x310/0x310 [ 139.046337][ T6542] ? kasan_quarantine_put+0xd4/0x220 [ 139.051662][ T6542] ? kfree+0xf1/0x270 [ 139.055675][ T6542] xlog_verify_head+0x21b/0x590 [ 139.060552][ T6542] ? xlog_bread+0x57/0xc0 [ 139.064914][ T6542] ? xlog_check_unmount_rec+0x5c0/0x5c0 [ 139.070501][ T6542] ? xlog_check_unmount_rec+0x2e2/0x5c0 [ 139.076085][ T6542] ? xlog_set_state+0x3b0/0x3b0 [ 139.080383][ T5695] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 139.080950][ T6542] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 139.094471][ T6542] xlog_find_tail+0x9de/0xe30 [ 139.099185][ T6542] ? xlog_recover+0x530/0x530 [ 139.103890][ T6542] ? try_to_wake_up+0x844/0x12c0 [ 139.108855][ T6542] ? xfs_trans_ail_init+0x240/0x240 [ 139.114084][ T6542] xlog_recover+0xd9/0x530 [ 139.118522][ T6542] ? xlog_buf_readahead+0x180/0x180 [ 139.123751][ T6542] xfs_log_mount+0x39d/0x6b0 [ 139.128368][ T6542] xfs_mountfs+0xba8/0x1ce0 [ 139.132906][ T6542] ? xfs_default_resblks+0x70/0x70 [ 139.138041][ T6542] ? xfs_filestream_new_ag+0x410/0x410 [ 139.143515][ T6542] ? xfs_mru_cache_create+0x44c/0x550 [ 139.148918][ T6542] xfs_fs_fill_super+0x11b4/0x1400 [ 139.154069][ T6542] get_tree_bdev+0x3fe/0x620 [ 139.158676][ T6542] ? xfs_fs_warn_deprecated+0x180/0x180 [ 139.164241][ T6542] vfs_get_tree+0x88/0x270 [ 139.168679][ T6542] do_new_mount+0x2ba/0xb40 [ 139.173207][ T6542] ? do_move_mount_old+0x160/0x160 [ 139.178342][ T6542] ? user_path_at_empty+0x12b/0x180 [ 139.183563][ T6542] __se_sys_mount+0x2d5/0x3c0 [ 139.185292][ T6579] ubi31: attaching mtd0 [ 139.188260][ T6542] ? __x64_sys_mount+0xc0/0xc0 [ 139.197173][ T6542] ? syscall_enter_from_user_mode+0x2e/0x240 [ 139.199113][ T6579] ubi31: scanning is finished [ 139.203202][ T6542] ? lockdep_hardirqs_on+0x94/0x130 [ 139.203235][ T6542] ? __x64_sys_mount+0x1c/0xc0 [ 139.203261][ T6542] do_syscall_64+0x3b/0xb0 [ 139.203285][ T6542] ? clear_bhb_loop+0x15/0x70 [ 139.203317][ T6542] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.203340][ T6542] RIP: 0033:0x7fcdf683890a [ 139.203361][ T6542] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.203380][ T6542] RSP: 002b:00007fcdf469fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 139.203406][ T6542] RAX: ffffffffffffffda RBX: 00007fcdf469fef0 RCX: 00007fcdf683890a [ 139.203424][ T6542] RDX: 0000200000000800 RSI: 0000200000000000 RDI: 00007fcdf469feb0 [ 139.203440][ T6542] RBP: 0000200000000800 R08: 00007fcdf469fef0 R09: 0000000003000010 [ 139.203457][ T6542] R10: 0000000003000010 R11: 0000000000000246 R12: 0000200000000000 [ 139.222226][ T6579] ubi31: empty MTD device detected [ 139.222486][ T6542] R13: 00007fcdf469feb0 R14: 000000000000b967 R15: 00002000000002c0 [ 139.310307][ T6542] [ 139.314604][ T6542] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 139.323195][ T6542] XFS (loop2): Invalid block length (0x20040) for buffer [ 139.331036][ T6542] XFS (loop2): failed to locate log tail [ 139.336694][ T6542] XFS (loop2): log mount/recovery failed: error -12 [ 139.391161][ T6542] XFS (loop2): log mount failed [ 139.414652][ T6570] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 139.480402][ T5695] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.540228][ T5695] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 139.576448][ T5695] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 139.601925][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.621874][ T6581] loop3: detected capacity change from 0 to 4096 [ 139.681549][ T6581] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 139.730098][ T5695] usb 5-1: config 0 descriptor?? [ 139.793656][ T6581] ntfs: volume version 3.1. [ 139.803556][ T6579] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 139.813420][ T6579] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 139.822639][ T6579] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 139.830651][ T6579] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 139.895335][ T6579] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 139.996221][ T6579] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 140.095392][ T6579] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2202935566 [ 140.136757][ T6584] loop0: detected capacity change from 0 to 4096 [ 140.147113][ T6579] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 140.215477][ T6584] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 140.227615][ T6582] ubi31: background thread "ubi_bgt31d" started, PID 6582 [ 140.268448][ T6584] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 140.306452][ T6584] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 140.324777][ T6584] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 140.355328][ T6584] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 140.369725][ T6584] ntfs: volume version 3.1. [ 140.386489][ T6584] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 140.401486][ T6584] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 140.420863][ T6584] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 140.440426][ T5695] Bluetooth: Can't get version to change to load ram patch err [ 140.475348][ T5695] Bluetooth: Loading sysconfig file failed [ 140.482166][ T6589] loop3: detected capacity change from 0 to 8192 [ 140.489757][ T5695] ath3k: probe of 5-1:0.0 failed with error -71 [ 140.508377][ T5695] usb 5-1: USB disconnect, device number 11 [ 140.539588][ T6589] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 140.557687][ T6589] REISERFS (device loop3): using ordered data mode [ 140.565536][ T6589] reiserfs: using flush barriers [ 140.581921][ T6589] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 140.605810][ T6589] REISERFS (device loop3): checking transaction log (loop3) [ 140.887661][ T6589] REISERFS (device loop3): Using tea hash to sort names [ 140.905303][ T6589] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 140.949460][ T6591] loop1: detected capacity change from 0 to 32768 [ 140.997174][ T6591] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.934 (6591) [ 141.085091][ T6591] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 141.095812][ T6607] loop2: detected capacity change from 0 to 1024 [ 141.120508][ T6591] BTRFS info (device loop1): force clearing of disk cache [ 141.130339][ T5695] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 141.168133][ T6591] BTRFS info (device loop1): setting nodatacow, compression disabled [ 141.199401][ T6607] hfsplus: bad catalog entry type [ 141.202332][ T6591] BTRFS info (device loop1): turning off barriers [ 141.229906][ T6591] BTRFS info (device loop1): disabling free space tree [ 141.256159][ T6591] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 141.287843][ T6591] BTRFS info (device loop1): trying to use backup root at mount time [ 141.304645][ T1453] hfsplus: b-tree write err: -5, ino 4 [ 141.323294][ T6591] BTRFS info (device loop1): has skinny extents [ 141.390667][ T5695] usb 1-1: Using ep0 maxpacket: 16 [ 141.520464][ T5695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.520503][ T5695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.520529][ T5695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 141.520569][ T5695] usb 1-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 141.520594][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.524763][ T5695] usb 1-1: config 0 descriptor?? [ 141.659484][ T4663] BTRFS warning (device loop1): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 141.659756][ T6591] BTRFS warning (device loop1): couldn't read tree root [ 141.660836][ T9] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 141.660971][ T6591] BTRFS warning (device loop1): couldn't read tree root [ 141.661420][ T6591] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7 [ 141.661512][ T6591] BTRFS warning (device loop1): couldn't read tree root [ 141.687763][ T6591] BTRFS info (device loop1): enabling ssd optimizations [ 141.688444][ T6591] BTRFS info (device loop1): clearing free space tree [ 141.688516][ T6591] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 141.688543][ T6591] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 141.702621][ T6591] BTRFS info (device loop1): checking UUID tree [ 141.749057][ T6637] misc userio: Invalid payload size [ 141.797226][ T4160] udevd[4160]: symlink '../../loop1' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:1' failed: Read-only file system [ 141.996391][ T5695] wacom 0003:056A:00F8.0013: hidraw0: USB HID v0.00 Device [HID 056a:00f8] on usb-dummy_hcd.0-1/input0 [ 142.194741][ T5695] usb 1-1: USB disconnect, device number 11 [ 142.398074][ T6609] loop4: detected capacity change from 0 to 65536 [ 142.535072][ T6609] XFS (loop4): Mounting V5 Filesystem [ 142.671359][ T6609] XFS (loop4): Ending clean mount [ 142.678480][ T4160] udevd[4160]: symlink '../../loop4' '/dev/disk/by-uuid/9b7348e5-2fa0-41a5-9526-c53a678b01f3.tmp-b7:4' failed: Read-only file system [ 142.704310][ T6654] loop1: detected capacity change from 0 to 8192 [ 142.712236][ T6609] XFS (loop4): Quotacheck needed: Please wait. [ 142.720355][ T5806] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 142.778346][ T4661] udevd[4661]: symlink '../../loop1' '/dev/disk/by-label/syzk\x03.tmp-b7:1' failed: Read-only file system [ 142.800473][ T6654] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 142.809704][ T6654] REISERFS (device loop1): using ordered data mode [ 142.849560][ T4661] udevd[4661]: symlink '../../loop1' '/dev/disk/by-uuid/12312312-1233-1233-1231-123413412412.tmp-b7:1' failed: Read-only file system [ 142.856547][ T6654] reiserfs: using flush barriers [ 142.873607][ T6654] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 142.883436][ T6609] XFS (loop4): Quotacheck: Done. [ 142.890795][ T6654] REISERFS (device loop1): checking transaction log (loop1) [ 142.922922][ T4661] udevd[4661]: symlink '../../loop4' '/dev/disk/by-uuid/9b7348e5-2fa0-41a5-9526-c53a678b01f3.tmp-b7:4' failed: Read-only file system [ 142.980237][ T5806] usb 4-1: Using ep0 maxpacket: 8 [ 143.064995][ T4172] XFS (loop4): Unmounting Filesystem [ 143.094452][ T6680] loop0: detected capacity change from 0 to 256 [ 143.101063][ T5806] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 143.116084][ T5806] usb 4-1: config 179 has no interface number 0 [ 143.156953][ T5806] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 143.173394][ T6654] REISERFS (device loop1): Using tea hash to sort names [ 143.192791][ T6654] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 143.210246][ T6680] FAT-fs (loop0): Directory bread(block 64) failed [ 143.218564][ T5806] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 143.240237][ T6680] FAT-fs (loop0): Directory bread(block 65) failed [ 143.255497][ T5806] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 143.280786][ T4661] udevd[4661]: symlink '../../loop1' '/dev/disk/by-label/syzk\x03.tmp-b7:1' failed: Read-only file system [ 143.290282][ T6680] FAT-fs (loop0): Directory bread(block 66) failed [ 143.294405][ T4661] udevd[4661]: symlink '../../loop1' '/dev/disk/by-uuid/12312312-1233-1233-1231-123413412412.tmp-b7:1' failed: Read-only file system [ 143.310304][ T6680] FAT-fs (loop0): Directory bread(block 67) failed [ 143.326080][ T5806] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 143.348121][ T5806] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 143.360547][ T6680] FAT-fs (loop0): Directory bread(block 68) failed [ 143.369998][ T6680] FAT-fs (loop0): Directory bread(block 69) failed [ 143.396282][ T6680] FAT-fs (loop0): Directory bread(block 70) failed [ 143.401271][ T5806] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 143.420199][ T6680] FAT-fs (loop0): Directory bread(block 71) failed [ 143.427074][ T6686] hugetlbfs: Bad value '' for mount option 'size' [ 143.427074][ T6686] [ 143.428289][ T5806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.450962][ T6680] FAT-fs (loop0): Directory bread(block 72) failed [ 143.457539][ T6680] FAT-fs (loop0): Directory bread(block 73) failed [ 143.520571][ T6651] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 143.768072][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 143.768089][ T26] audit: type=1326 audit(1743089201.190:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6689 comm="syz.2.970" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdf6837169 code=0x0 [ 143.865383][ T6651] udc-core: couldn't find an available UDC or it's busy [ 143.948034][ T6651] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 144.016009][ T6700] loop0: detected capacity change from 0 to 64 [ 144.086700][ T4661] udevd[4661]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:0' failed: Read-only file system [ 144.106327][ T6700] virtiofs: Unexpected value for 'dax' [ 144.178816][ T5695] usb 4-1: USB disconnect, device number 8 [ 144.180157][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 144.768640][ T6699] loop1: detected capacity change from 0 to 32768 [ 144.926201][ T6699] XFS (loop1): Mounting V5 Filesystem [ 145.090932][ T6699] XFS (loop1): Ending clean mount [ 145.103579][ T4661] udevd[4661]: symlink '../../loop1' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:1' failed: Read-only file system [ 145.120295][ T5697] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 145.162116][ T6704] loop0: detected capacity change from 0 to 65536 [ 145.289271][ T4167] XFS (loop1): Unmounting Filesystem [ 145.302489][ T6733] loop2: detected capacity change from 0 to 4096 [ 145.305678][ T4160] udevd[4160]: symlink '../../loop0' '/dev/disk/by-uuid/9b7348e5-2fa0-41a5-9526-c53a678b01f3.tmp-b7:0' failed: Read-only file system [ 145.340910][ T6704] XFS (loop0): Mounting V5 Filesystem [ 145.481367][ T5697] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 242, using maximum allowed: 30 [ 145.489169][ T6733] ntfs: volume version 3.1. [ 145.500118][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 145.511944][ T5697] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 145.525382][ T5697] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 145.535424][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.543023][ T6704] XFS (loop0): Ending clean mount [ 145.550267][ T5697] usb 4-1: config 0 descriptor?? [ 145.573193][ T6704] XFS (loop0): Quotacheck needed: Please wait. [ 145.649777][ T6704] XFS (loop0): Quotacheck: Done. [ 145.725070][ T4177] XFS (loop0): Unmounting Filesystem [ 145.867326][ T6746] loop4: detected capacity change from 0 to 32768 [ 145.921621][ T6750] loop1: detected capacity change from 0 to 64 [ 146.033323][ T5697] zydacron 0003:13EC:0006.0014: unknown main item tag 0x3 [ 146.041545][ T6746] XFS (loop4): Mounting V5 Filesystem [ 146.059657][ T5697] zydacron 0003:13EC:0006.0014: hidraw0: USB HID v0.03 Device [HID 13ec:0006] on usb-dummy_hcd.3-1/input0 [ 146.299968][ T5695] usb 4-1: USB disconnect, device number 9 [ 146.328886][ T6746] XFS (loop4): Ending clean mount [ 146.372805][ T6746] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 [ 146.402047][ T6746] XFS (loop4): Unmount and run xfs_repair [ 146.407900][ T6746] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 146.418958][ T6746] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 146.444404][ T6746] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10 ................ [ 146.453548][ T6746] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 146.462951][ T6746] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01 ....lK.......... [ 146.472206][ T6746] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 146.481904][ T6746] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 146.492179][ T6746] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 146.501210][ T6746] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 146.511900][ T6746] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74 [ 146.528908][ T6746] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1750/0x1df0 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 146.547200][ T6746] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 146.560185][ T5697] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 146.608985][ T4172] XFS (loop4): Unmounting Filesystem [ 146.752480][ T6772] loop0: detected capacity change from 0 to 32768 [ 146.837698][ T4661] udevd[4661]: symlink '../../loop0' '/dev/disk/by-uuid/a2f82aab-77f8-4286-afd4-a8f747a74bab.tmp-b7:0' failed: Read-only file system [ 146.935812][ T6772] XFS (loop0): Mounting V5 Filesystem [ 146.950188][ T5697] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 146.990196][ T5697] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 147.051828][ T5697] usb 2-1: config 1 has no interface number 0 [ 147.057994][ T5697] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.115186][ T6774] loop3: detected capacity change from 0 to 4096 [ 147.146041][ T5697] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 147.188027][ T5697] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 48, using maximum allowed: 30 [ 147.194111][ T6783] loop4: detected capacity change from 0 to 32768 [ 147.226559][ T5697] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 147.255340][ T4661] udevd[4661]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 147.257872][ T6772] XFS (loop0): Ending clean mount [ 147.275488][ T6774] ntfs: volume version 3.1. [ 147.297248][ T4661] udevd[4661]: symlink '../../loop3' '/dev/disk/by-uuid/43CF732B47819AF7.tmp-b7:3' failed: Read-only file system [ 147.329121][ T6772] XFS (loop0): Quotacheck needed: Please wait. [ 147.345983][ T6783] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 147.410282][ T5697] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.419360][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.434427][ T5697] usb 2-1: Product: syz [ 147.439399][ T6772] XFS (loop0): Quotacheck: Done. [ 147.446135][ T5697] usb 2-1: Manufacturer: syz [ 147.450838][ T5697] usb 2-1: SerialNumber: syz [ 147.453455][ T4661] udevd[4661]: symlink '../../loop4' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:4' failed: Read-only file system [ 147.494637][ T6783] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 147.529953][ T4158] udevd[4158]: symlink '../../loop0' '/dev/disk/by-uuid/a2f82aab-77f8-4286-afd4-a8f747a74bab.tmp-b7:0' failed: Read-only file system [ 147.546972][ T4663] (kworker/u4:6,4663,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=67108936, rec_len=0, name_len=0 [ 147.675097][ T6791] netlink: 'syz.3.997': attribute type 16 has an invalid length. [ 147.678591][ T6792] (syz.4.993,6792,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=67108936, rec_len=0, name_len=0 [ 147.720573][ T4177] XFS (loop0): Unmounting Filesystem [ 147.725442][ T6792] (syz.4.993,6792,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 147.748380][ T6792] (syz.4.993,6792,0):__ocfs2_prepare_orphan_dir:2168 ERROR: status = -2 [ 147.778776][ T6792] (syz.4.993,6792,0):ocfs2_prepare_orphan_dir:2210 ERROR: status = -2 [ 147.817108][ T6792] (syz.4.993,6792,0):ocfs2_prepare_orphan_dir:2226 ERROR: status = -2 [ 147.824539][ T6798] loop3: detected capacity change from 0 to 8 [ 147.849659][ T6792] (syz.4.993,6792,0):ocfs2_unlink:964 ERROR: status = -2 [ 147.956468][ T4172] ocfs2: Unmounting device (7,4) on (node local) [ 148.170218][ T5697] cdc_ncm 2-1:1.1: bind() failure [ 148.199001][ T5697] usb 2-1: USB disconnect, device number 9 [ 148.398506][ T6807] loop3: detected capacity change from 0 to 128 [ 148.425891][ T6811] loop2: detected capacity change from 0 to 256 [ 148.616521][ T6821] loop4: detected capacity change from 0 to 1024 [ 148.826573][ T6821] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 148.850175][ T6821] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.907621][ T6821] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,max_dir_size_kb=0x0000000000000009,nomblk_io_submit,data_err=abort,. Quota mode: writeback. [ 148.997152][ T26] audit: type=1800 audit(1743089206.420:13): pid=6821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1012" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 149.103486][ T4158] udevd[4158]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 149.405906][ T6819] loop0: detected capacity change from 0 to 32768 [ 149.550299][ T5918] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 149.575627][ T6846] loop1: detected capacity change from 0 to 32768 [ 149.621137][ T4661] udevd[4661]: symlink '../../loop0' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:0' failed: Read-only file system [ 149.642978][ T6819] jfs_lookup: iget failed on inum 4 [ 149.699243][ T4160] udevd[4160]: symlink '../../loop1' '/dev/disk/by-uuid/a2f82aab-77f8-4286-afd4-a8f747a74bab.tmp-b7:1' failed: Read-only file system [ 149.714162][ T6846] XFS (loop1): Mounting V5 Filesystem [ 149.724985][ T6819] jfs_lookup: iget failed on inum 4 [ 149.740137][ T5806] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 149.869224][ T6846] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x33d/0xce0, inode 0x422 dinode [ 149.879892][ T6846] XFS (loop1): Unmount and run xfs_repair [ 149.885689][ T6846] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 149.893147][ T6846] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 149.902092][ T6846] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 149.911075][ T6846] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f 41 c3 20 ..e.....4.Xh.A. [ 149.919940][ T6846] 00000030: 34 f7 58 68 7f 41 c3 20 00 00 00 00 00 00 00 00 4.Xh.A. ........ [ 149.920402][ T5918] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 149.928841][ T6846] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 149.928861][ T6846] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 149.928876][ T6846] 00000060: ff ff ff ff 4d 6e 96 d4 00 00 00 00 00 00 00 02 ....Mn.......... [ 149.928892][ T6846] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 149.930772][ T6846] XFS (loop1): failed to read RT inodes [ 149.958020][ T5918] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 150.071072][ T5918] usb 5-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 150.094849][ T5806] usb 3-1: Using ep0 maxpacket: 8 [ 150.100132][ T5918] usb 5-1: config 220 has no interface number 2 [ 150.115375][ T5918] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 150.139035][ T5918] usb 5-1: config 220 interface 0 has no altsetting 0 [ 150.159360][ T5918] usb 5-1: config 220 interface 76 has no altsetting 0 [ 150.166396][ T5918] usb 5-1: config 220 interface 1 has no altsetting 0 [ 150.221842][ T5806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.236045][ T5806] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 150.270189][ T5806] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 150.279978][ T5806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.310427][ T5806] usb 3-1: config 0 descriptor?? [ 150.340400][ T5918] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 150.360579][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.385673][ T5918] usb 5-1: Product: syz [ 150.390260][ T5918] usb 5-1: Manufacturer: syz [ 150.405834][ T5918] usb 5-1: SerialNumber: syz [ 150.806381][ T6869] loop1: detected capacity change from 0 to 736 [ 150.816698][ T5918] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 150.840606][ T5918] usb 5-1: No valid video chain found. [ 150.848583][ T5918] usb 5-1: selecting invalid altsetting 0 [ 150.861928][ T5806] elecom 0003:056E:00FE.0015: unknown main item tag 0x0 [ 150.870121][ T5806] elecom 0003:056E:00FE.0015: unknown main item tag 0x0 [ 150.877100][ T5806] elecom 0003:056E:00FE.0015: unknown main item tag 0x0 [ 150.908554][ T4158] udevd[4158]: symlink '../../loop1' '/dev/disk/by-label/CDROM.tmp-b7:1' failed: Read-only file system [ 150.937041][ T5806] elecom 0003:056E:00FE.0015: unknown main item tag 0x0 [ 150.941748][ T5918] usb 5-1: selecting invalid altsetting 0 [ 150.948441][ T5806] elecom 0003:056E:00FE.0015: unexpected long global item [ 150.961402][ T5918] usbtest: probe of 5-1:220.1 failed with error -22 [ 150.978275][ T5806] elecom: probe of 0003:056E:00FE.0015 failed with error -22 [ 151.026720][ T4158] udevd[4158]: symlink '../../loop1' '/dev/disk/by-label/CDROM.tmp-b7:1' failed: Read-only file system [ 151.031475][ T5918] usb 5-1: USB disconnect, device number 12 [ 151.044028][ T6863] loop3: detected capacity change from 0 to 32768 [ 151.085827][ T5807] usb 3-1: USB disconnect, device number 9 [ 151.115030][ T6863] XFS: ikeep mount option is deprecated. [ 151.222797][ T6871] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma? [ 151.275404][ T6863] XFS (loop3): Mounting V5 Filesystem [ 151.341409][ T6867] loop0: detected capacity change from 0 to 32768 [ 151.397710][ T6867] gfs2: Invalid block size [ 151.743204][ T6863] XFS (loop3): Ending clean mount [ 151.807508][ T6863] XFS (loop3): Quotacheck needed: Please wait. [ 151.866114][ T6895] loop0: detected capacity change from 0 to 512 [ 151.931038][ T6895] EXT4-fs (loop0): Ignoring removed nobh option [ 151.949820][ T4661] udevd[4661]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 151.990137][ T5807] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 151.998954][ T6863] XFS (loop3): Quotacheck: Done. [ 152.017621][ T4661] udevd[4661]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 152.030394][ T6895] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 152.038174][ T6895] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 152.060470][ T6895] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #13: comm syz.0.1038: casefold flag without casefold feature [ 152.132598][ T4160] udevd[4160]: symlink '../../loop3' '/dev/disk/by-uuid/a2f82aab-77f8-4286-afd4-a8f747a74bab.tmp-b7:3' failed: Read-only file system [ 152.152074][ T6895] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1038: couldn't read orphan inode 13 (err -117) [ 152.176407][ T6895] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 152.177900][ T4661] udevd[4661]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 152.258986][ T6895] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 152.318880][ T6878] loop4: detected capacity change from 0 to 32768 [ 152.328397][ T4661] udevd[4661]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 152.392971][ T4166] XFS (loop3): Unmounting Filesystem [ 152.414375][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.424240][ T6878] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1031 (6878) [ 152.451601][ T5807] usb 3-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 152.475461][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.509923][ T4160] udevd[4160]: symlink '../../loop4' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:4' failed: Read-only file system [ 152.511725][ T5807] usb 3-1: config 0 descriptor?? [ 152.536579][ T6878] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 152.563555][ T6878] BTRFS info (device loop4): using free space tree [ 152.578782][ T6901] loop0: detected capacity change from 0 to 4096 [ 152.580231][ T6878] BTRFS info (device loop4): has skinny extents [ 152.628368][ T6901] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 152.667325][ T4661] udevd[4661]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 152.691043][ T4661] udevd[4661]: symlink '../../loop0' '/dev/disk/by-uuid/43CF732B47819AF7.tmp-b7:0' failed: Read-only file system [ 152.709915][ T6901] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 152.750122][ T6901] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 152.845897][ T6901] ntfs: volume version 3.1. [ 152.881826][ T6899] loop1: detected capacity change from 0 to 32768 [ 152.927301][ T4661] udevd[4661]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 152.980464][ T6901] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp865. You might want to try to use the mount option nls=utf8. [ 153.000444][ T6901] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 153.001631][ T4661] udevd[4661]: symlink '../../loop0' '/dev/disk/by-uuid/43CF732B47819AF7.tmp-b7:0' failed: Read-only file system [ 153.019575][ T6878] BTRFS info (device loop4): enabling ssd optimizations [ 153.045703][ T6899] XFS (loop1): Mounting V5 Filesystem [ 153.143486][ T5807] wacom 0003:056A:0043.0016: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 153.170558][ T5807] wacom 0003:056A:0043.0016: hidraw0: USB HID v10.00 Device [HID 056a:0043] on usb-dummy_hcd.2-1/input0 [ 153.185297][ T5807] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0043.0016/input/input24 [ 153.291188][ T6899] XFS (loop1): Ending clean mount [ 153.301434][ T6932] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1042'. [ 153.324812][ T6899] XFS (loop1): Quotacheck needed: Please wait. [ 153.378017][ T6932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1042'. [ 153.404583][ T4212] usb 3-1: USB disconnect, device number 10 [ 153.456670][ T6932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1042'. [ 153.515242][ T6932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1042'. [ 153.724526][ T6899] XFS (loop1): Quotacheck: Done. [ 153.879778][ T4167] XFS (loop1): Unmounting Filesystem [ 154.014808][ T6943] loop4: detected capacity change from 0 to 1764 [ 154.741935][ T6973] loop0: detected capacity change from 0 to 47 [ 154.769931][ T6975] loop1: detected capacity change from 0 to 8 [ 154.894492][ T6975] SQUASHFS error: Unable to read directory block [631:32] [ 154.917469][ T6973] minix_free_block (loop0:20): bit already cleared [ 154.948266][ T6973] minix_free_block (loop0:21): bit already cleared [ 154.987520][ T6973] minix_free_block (loop0:19): bit already cleared [ 155.348279][ T6999] loop0: detected capacity change from 0 to 512 [ 155.349012][ T6997] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1072'. [ 155.384481][ T6965] loop2: detected capacity change from 0 to 32768 [ 155.387264][ T6997] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 155.451039][ T6965] XFS: noikeep mount option is deprecated. [ 155.461532][ T6965] XFS: noikeep mount option is deprecated. [ 155.473837][ T6999] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 155.490267][ T4212] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 155.511632][ T6999] EXT4-fs (loop0): invalid journal inode [ 155.527993][ T6999] EXT4-fs (loop0): can't get journal size [ 155.549131][ T6965] XFS (loop2): Mounting V5 Filesystem [ 155.558757][ T7014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1078'. [ 155.586069][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'. [ 155.588800][ T6999] EXT4-fs (loop0): 1 truncate cleaned up [ 155.601870][ T6999] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 155.726042][ T6999] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 9 (only 1 groups) [ 155.750372][ T4212] usb 2-1: Using ep0 maxpacket: 8 [ 155.880464][ T4212] usb 2-1: config 0 interface 0 altsetting 142 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.902218][ T4212] usb 2-1: config 0 interface 0 altsetting 142 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.921331][ T6965] XFS (loop2): Ending clean mount [ 155.949536][ T4212] usb 2-1: config 0 interface 0 has no altsetting 0 [ 155.962858][ T6965] XFS (loop2): Quotacheck needed: Please wait. [ 155.979276][ T4212] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 156.020174][ T4212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.070084][ T4212] usb 2-1: config 0 descriptor?? [ 156.097106][ T6965] XFS (loop2): Quotacheck: Done. [ 156.259601][ T4171] XFS (loop2): Unmounting Filesystem [ 156.340262][ T5807] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 156.558094][ T7055] loop4: detected capacity change from 0 to 4096 [ 156.562407][ T4212] lenovo 0003:17EF:6009.0017: unknown main item tag 0x0 [ 156.580078][ T4212] lenovo 0003:17EF:6009.0017: unknown main item tag 0x0 [ 156.590481][ T4212] lenovo 0003:17EF:6009.0017: unknown main item tag 0x0 [ 156.597456][ T4212] lenovo 0003:17EF:6009.0017: unknown main item tag 0x0 [ 156.620358][ T4212] lenovo 0003:17EF:6009.0017: unknown main item tag 0x0 [ 156.621746][ T7055] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 156.652529][ T4212] lenovo 0003:17EF:6009.0017: hidraw0: USB HID v0.05 Device [HID 17ef:6009] on usb-dummy_hcd.1-1/input0 [ 156.746806][ T7055] ntfs: (device loop4): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 156.766946][ T7055] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 156.797946][ T7055] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 156.802366][ T5917] usb 2-1: USB disconnect, device number 10 [ 156.854922][ T7055] ntfs: volume version 3.1. [ 156.904648][ T7055] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 156.960513][ T5807] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 156.980286][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.988319][ T5807] usb 1-1: Product: syz [ 156.993584][ T5807] usb 1-1: Manufacturer: syz [ 156.998196][ T5807] usb 1-1: SerialNumber: syz [ 157.041571][ T5807] usb 1-1: config 0 descriptor?? [ 157.246372][ T7074] loop2: detected capacity change from 0 to 4096 [ 157.344589][ T5807] usb 1-1: USB disconnect, device number 12 [ 157.346827][ T7074] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 157.384742][ T4661] udevd[4661]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 157.457061][ T4661] udevd[4661]: symlink '../../loop2' '/dev/disk/by-uuid/43CF732B47819AF7.tmp-b7:2' failed: Read-only file system [ 157.503554][ T7074] ntfs: (device loop2): parse_options(): NLS character set cp9251 not found. Using previous one macturkish. [ 157.592980][ T7074] ntfs: volume version 3.1. [ 157.627828][ T4661] udevd[4661]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 157.643505][ T4661] udevd[4661]: symlink '../../loop2' '/dev/disk/by-uuid/43CF732B47819AF7.tmp-b7:2' failed: Read-only file system [ 157.830213][ T4170] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 157.892786][ T7086] loop2: detected capacity change from 0 to 4096 [ 157.895549][ T7090] syz.4.1110 uses obsolete (PF_INET,SOCK_PACKET) [ 157.964671][ T7079] loop3: detected capacity change from 0 to 32768 [ 158.024519][ T7079] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1105 (7079) [ 158.052097][ T4661] udevd[4661]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 158.099150][ T4661] udevd[4661]: symlink '../../loop2' '/dev/disk/by-uuid/399AA58E54924951.tmp-b7:2' failed: Read-only file system [ 158.118597][ T7079] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 158.144103][ T7079] BTRFS info (device loop3): using free space tree [ 158.171846][ T7079] BTRFS info (device loop3): has skinny extents [ 158.197169][ T4160] udevd[4160]: symlink '../../loop3' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:3' failed: Read-only file system [ 158.227222][ T4171] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 158.240445][ T4171] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 158.256098][ T4170] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 158.272105][ T4170] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.314622][ T4170] usb 2-1: config 0 has no interface number 0 [ 158.355921][ T4170] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid wMaxPacketSize 0 [ 158.390149][ T4170] usb 2-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 0 [ 158.406237][ T4170] usb 2-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.419672][ T4170] usb 2-1: config 0 interface 11 has no altsetting 0 [ 158.426865][ T4170] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 158.436658][ T4170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.505998][ T4170] usb 2-1: config 0 descriptor?? [ 158.577152][ T4170] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 158.598902][ T4170] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 87 [ 158.620213][ T7079] BTRFS info (device loop3): enabling ssd optimizations [ 158.649334][ T4170] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 158.680163][ T4170] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 158.687955][ T4170] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 158.706734][ T7094] loop4: detected capacity change from 0 to 32768 [ 158.720211][ T4170] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 158.728064][ T4170] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 158.736106][ T4170] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 158.774878][ T7094] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1112 (7094) [ 158.790458][ T4170] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 158.800919][ T7084] device sit1 entered promiscuous mode [ 158.826650][ T4170] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 158.861477][ T4170] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 158.874808][ T4170] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 158.886940][ T4170] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 158.901478][ T4170] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 158.915969][ T4170] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 158.935740][ T7114] loop0: detected capacity change from 0 to 32768 [ 158.939299][ T4170] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 158.946227][ T4160] udevd[4160]: symlink '../../loop4' '/dev/disk/by-uuid/a6a605fc-d5f1-4e66-8595-3726e2b761d6.tmp-b7:4' failed: Read-only file system [ 158.958367][ T4158] udevd[4158]: symlink '../../loop3' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:3' failed: Read-only file system [ 158.964183][ T7094] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 159.002169][ T7094] BTRFS info (device loop4): using free space tree [ 159.011183][ T7094] BTRFS info (device loop4): has skinny extents [ 159.016193][ T4170] usb 2-1: USB disconnect, device number 11 [ 159.060793][ T4170] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 159.093956][ T7114] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1116 (7114) [ 159.164977][ T4170] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 159.190384][ T4170] keyspan 2-1:0.11: device disconnected [ 159.369363][ T7114] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 159.370252][ T4184] udevd[4184]: symlink '../../loop0' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:0' failed: Read-only file system [ 159.390169][ T7114] BTRFS info (device loop0): metadata ratio 4 [ 159.408621][ T7114] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 159.420226][ T7114] BTRFS info (device loop0): force lzo compression, level 0 [ 159.432555][ T7094] BTRFS info (device loop4): enabling ssd optimizations [ 159.454816][ T7114] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 159.464058][ T7084] syz.1.1107 (7084) used greatest stack depth: 18840 bytes left [ 159.490348][ T7114] BTRFS info (device loop0): trying to use backup root at mount time [ 159.543568][ T7114] BTRFS info (device loop0): doing ref verification [ 159.620227][ T7114] BTRFS info (device loop0): enabling ssd optimizations [ 159.627283][ T7114] BTRFS info (device loop0): using spread ssd allocation scheme [ 159.703453][ T7114] BTRFS info (device loop0): using free space tree [ 159.734740][ T7114] BTRFS info (device loop0): has skinny extents [ 160.083340][ T7177] loop1: detected capacity change from 0 to 512 [ 160.120578][ T4231] BTRFS warning (device loop0): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 160.137591][ T7114] BTRFS warning (device loop0): couldn't read tree root [ 160.146749][ T7177] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 160.171647][ T4231] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x78ca8373 level 0 [ 160.236397][ T7114] BTRFS warning (device loop0): couldn't read tree root [ 160.244354][ T7114] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7 [ 160.278742][ T7114] BTRFS warning (device loop0): couldn't read tree root [ 160.331548][ T7177] EXT4-fs (loop1): 1 truncate cleaned up [ 160.337246][ T7177] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.381646][ T7114] BTRFS info (device loop0): clearing free space tree [ 160.398881][ T7114] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.418874][ T7114] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 160.468954][ T26] audit: type=1800 audit(1743089217.890:14): pid=7177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1127" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 160.491122][ T7114] BTRFS info (device loop0): creating free space tree [ 160.533557][ T7114] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.588172][ T7114] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 161.119758][ T7185] loop3: detected capacity change from 0 to 32768 [ 161.202296][ T7208] loop0: detected capacity change from 0 to 1024 [ 161.388456][ T7215] loop1: detected capacity change from 0 to 512 [ 161.410757][ T26] audit: type=1326 audit(1743089218.830:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7214 comm="syz.4.1141" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c5ee89169 code=0x0 [ 161.629102][ T7215] EXT4-fs (loop1): 1 orphan inode deleted [ 161.668108][ T7215] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 161.713095][ T7221] loop0: detected capacity change from 0 to 512 [ 161.736880][ T7215] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.763847][ T7221] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 161.829925][ T7221] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.1143: bad orphan inode 16 [ 161.906182][ T7221] ext4_test_bit(bit=15, block=4) = 0 [ 161.938584][ T7221] EXT4-fs (loop0): 1 orphan inode deleted [ 161.944902][ T7221] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,max_dir_size_kb=0x0000000000000003,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000010000,acl,quota,init_itable=0x0000000000000008,journal_dev=0x000000007ffffffe,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 161.995016][ T7221] EXT4-fs error (device loop0): __ext4_new_inode:1076: comm syz.0.1143: reserved inode found cleared - inode=9 [ 162.286392][ T7242] loop2: detected capacity change from 0 to 2048 [ 162.429850][ T7242] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.483202][ T4661] udevd[4661]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 162.524173][ T4661] udevd[4661]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 162.578270][ T7242] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 162.736634][ T7271] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1165'. [ 162.885945][ T7281] loop2: detected capacity change from 0 to 64 [ 162.904891][ T7279] loop0: detected capacity change from 0 to 512 [ 162.921020][ T4661] udevd[4661]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system [ 163.030088][ T26] audit: type=1326 audit(1743089220.450:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.3.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601f547169 code=0x7fc00000 [ 163.052268][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.090331][ T4212] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 163.120947][ T4661] udevd[4661]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 163.139282][ T7279] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.199776][ T7279] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.259241][ T4661] udevd[4661]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 163.336331][ T7297] loop2: detected capacity change from 0 to 1024 [ 163.409471][ T7283] loop1: detected capacity change from 0 to 32768 [ 163.471545][ T7297] hfsplus: bad catalog entry type [ 163.490511][ T5806] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 163.508784][ T7283] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 163.539131][ T4212] usb 5-1: config 0 interface 0 has no altsetting 0 [ 163.549204][ T7283] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 163.558911][ T4212] usb 5-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 163.572316][ T144] (kworker/u4:1,144,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=67108936, rec_len=0, name_len=0 [ 163.572926][ T4212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.600271][ T4212] usb 5-1: config 0 descriptor?? [ 163.607772][ T4231] hfsplus: b-tree write err: -5, ino 4 [ 163.634186][ T4661] udevd[4661]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system [ 163.669533][ T4661] udevd[4661]: symlink '../../loop2' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:2' failed: Read-only file system [ 163.673547][ T7283] (syz.1.1171,7283,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=67108936, rec_len=0, name_len=0 [ 163.700715][ T7283] (syz.1.1171,7283,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 163.712781][ T7283] (syz.1.1171,7283,0):__ocfs2_prepare_orphan_dir:2168 ERROR: status = -2 [ 163.721627][ T7283] (syz.1.1171,7283,0):ocfs2_prepare_orphan_dir:2210 ERROR: status = -2 [ 163.730153][ T7283] (syz.1.1171,7283,0):ocfs2_prepare_orphan_dir:2226 ERROR: status = -2 [ 163.750134][ T7283] (syz.1.1171,7283,0):ocfs2_unlink:964 ERROR: status = -2 [ 163.811690][ T7307] loop0: detected capacity change from 0 to 4096 [ 163.835636][ T4167] ocfs2: Unmounting device (7,1) on (node local) [ 163.877468][ T7307] ntfs3: Unknown parameter 'čazytim' [ 163.946605][ T7309] loop2: detected capacity change from 0 to 8192 [ 164.026350][ T7309] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 164.036483][ T7309] REISERFS (device loop2): using writeback data mode [ 164.045129][ T7309] reiserfs: using flush barriers [ 164.051103][ T5806] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 164.060319][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.068447][ T5806] usb 4-1: Product: syz [ 164.068457][ T4160] udevd[4160]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 164.069798][ T4160] udevd[4160]: symlink '../../loop2' '/dev/disk/by-uuid/12312308-1233-1233-1231-123413412412.tmp-b7:2' failed: Read-only file system [ 164.072712][ T5806] usb 4-1: Manufacturer: syz [ 164.072734][ T5806] usb 4-1: SerialNumber: syz [ 164.104199][ T4212] wacom 0003:056A:0315.0018: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 164.121075][ T7309] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 164.130190][ T4212] wacom 0003:056A:0315.0018: hidraw0: USB HID v0.00 Device [HID 056a:0315] on usb-dummy_hcd.4-1/input0 [ 164.150783][ T4212] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0315.0018/input/input27 [ 164.167401][ T5806] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 164.175931][ T7309] REISERFS (device loop2): checking transaction log (loop2) [ 164.219035][ T7309] REISERFS (device loop2): Using r5 hash to sort names [ 164.382396][ T4212] usb 5-1: USB disconnect, device number 13 [ 164.672968][ T7328] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 164.910450][ T5806] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 165.124294][ T7335] loop4: detected capacity change from 0 to 4096 [ 165.191704][ T7335] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 165.203605][ T7331] loop0: detected capacity change from 0 to 32768 [ 165.266362][ T7329] loop1: detected capacity change from 0 to 40427 [ 165.278347][ T7342] loop2: detected capacity change from 0 to 64 [ 165.283560][ T7335] ntfs: (device loop4): parse_options(): NLS character set cp9251 not found. Using previous one macturkish. [ 165.320069][ T7329] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 165.332790][ T5818] usb 4-1: USB disconnect, device number 10 [ 165.336025][ T7331] jfs_rmdir: dtDelete returned -2 [ 165.348221][ T7335] ntfs: volume version 3.1. [ 165.353080][ T7329] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 165.375217][ T7329] F2FS-fs (loop1): invalid crc value [ 165.412749][ T4171] hfs: node 4:3 still has 1 user(s)! [ 165.448433][ T7329] F2FS-fs (loop1): Found nat_bits in checkpoint [ 165.546798][ T7329] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 165.560257][ T7329] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 165.721905][ T7354] program syz.2.1201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.772871][ T7355] program syz.2.1201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.806607][ T7355] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 165.949656][ T7359] loop3: detected capacity change from 0 to 64 [ 165.956070][ T5806] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 165.964759][ T5806] ath9k_htc: Failed to initialize the device [ 165.986107][ T5818] usb 4-1: ath9k_htc: USB layer deinitialized [ 166.244520][ T7368] loop2: detected capacity change from 0 to 4096 [ 166.300860][ T4158] udevd[4158]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 166.304338][ T7374] loop1: detected capacity change from 0 to 64 [ 166.415218][ T7368] ntfs: volume version 3.1. [ 166.577971][ T7350] loop4: detected capacity change from 0 to 32768 [ 166.634895][ T7350] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1198 (7350) [ 166.717274][ T7350] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 166.777354][ T7350] BTRFS info (device loop4): metadata ratio 4 [ 166.817444][ T7350] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 166.863802][ T7350] BTRFS info (device loop4): force lzo compression, level 0 [ 166.915779][ T7350] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 166.949247][ T7396] loop0: detected capacity change from 0 to 64 [ 166.990278][ T7350] BTRFS info (device loop4): trying to use backup root at mount time [ 166.998418][ T7350] BTRFS info (device loop4): doing ref verification [ 167.030148][ T7350] BTRFS info (device loop4): enabling ssd optimizations [ 167.037135][ T7350] BTRFS info (device loop4): using spread ssd allocation scheme [ 167.057807][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 167.104131][ T7350] BTRFS info (device loop4): using free space tree [ 167.139078][ T7350] BTRFS info (device loop4): has skinny extents [ 167.146087][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.175986][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.258396][ T7402] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 167.297592][ T7422] loop3: detected capacity change from 0 to 2048 [ 167.356543][ T1166] BTRFS warning (device loop4): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 167.400235][ T7422] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.433878][ T7350] BTRFS warning (device loop4): couldn't read tree root [ 167.462773][ T1453] BTRFS warning (device loop4): checksum verify failed on 5324800 wanted 0x9f73850b found 0x78ca8373 level 0 [ 167.494529][ T7350] BTRFS warning (device loop4): couldn't read tree root [ 167.506752][ T7350] BTRFS error (device loop4): parent transid verify failed on 5255168 wanted 5 found 7 [ 167.507512][ T4661] udevd[4661]: symlink '../../loop3' '/dev/disk/by-label/LinuxUDF.tmp-b7:3' failed: Read-only file system [ 167.530667][ T4661] udevd[4661]: symlink '../../loop3' '/dev/disk/by-uuid/1234567812345678.tmp-b7:3' failed: Read-only file system [ 167.554425][ T7438] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 167.581548][ T4661] udevd[4661]: symlink '../../loop3' '/dev/disk/by-label/LinuxUDF.tmp-b7:3' failed: Read-only file system [ 167.592204][ T7350] BTRFS warning (device loop4): couldn't read tree root [ 167.611186][ T4661] udevd[4661]: symlink '../../loop3' '/dev/disk/by-uuid/1234567812345678.tmp-b7:3' failed: Read-only file system [ 167.646208][ T7350] BTRFS info (device loop4): clearing free space tree [ 167.649558][ T7440] tipc: Started in network mode [ 167.658035][ T7440] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 167.669415][ T7440] tipc: Enabling of bearer rejected, failed to enable media [ 167.674065][ T7350] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 167.702114][ T7437] loop1: detected capacity change from 0 to 4096 [ 167.706313][ T7350] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 167.750132][ T7444] loop2: detected capacity change from 0 to 1024 [ 167.765263][ T7350] BTRFS info (device loop4): creating free space tree [ 167.782073][ T7437] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 167.806479][ T7350] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 167.852922][ T7350] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 167.968569][ T6450] hfsplus: b-tree write err: -5, ino 4 [ 168.019984][ T4661] udevd[4661]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 168.068880][ T4661] udevd[4661]: symlink '../../loop1' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:1' failed: Read-only file system [ 168.098491][ T4158] udevd[4158]: symlink '../../loop4' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:4' failed: Read-only file system [ 168.104778][ T7461] loop3: detected capacity change from 0 to 64 [ 168.128251][ T4160] udevd[4160]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system [ 168.149495][ T4661] udevd[4661]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 168.172471][ T4184] udevd[4184]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 168.403369][ T7466] binder: 7465:7466 ioctl 40046205 0 returned -22 [ 168.436978][ T7466] binder: 7465:7466 ioctl c0306201 200000001100 returned -11 [ 168.697229][ T7479] loop1: detected capacity change from 0 to 64 [ 168.877482][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1253'. [ 168.878342][ T7490] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 168.906976][ T5807] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 168.925871][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1253'. [ 168.988952][ T7486] netlink: 'syz.4.1253': attribute type 18 has an invalid length. [ 169.078454][ T7498] netlink: 'syz.2.1259': attribute type 2 has an invalid length. [ 169.126627][ T7502] loop3: detected capacity change from 0 to 256 [ 169.178263][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1264'. [ 169.200218][ T5807] usb 1-1: Using ep0 maxpacket: 8 [ 169.340194][ T5807] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 169.383729][ T5807] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 169.403099][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.444634][ T5807] usb 1-1: config 0 descriptor?? [ 169.885863][ T7544] loop1: detected capacity change from 0 to 64 [ 169.908252][ T7543] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 169.929883][ T7543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.942537][ T5807] corsair 0003:1B1C:1B09.0019: unbalanced collection at end of report description [ 169.960604][ T5807] corsair 0003:1B1C:1B09.0019: parse failed [ 169.969007][ T7543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.976813][ T5807] corsair: probe of 0003:1B1C:1B09.0019 failed with error -22 [ 169.987089][ T7543] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 170.143717][ T5807] usb 1-1: USB disconnect, device number 13 [ 170.181858][ T7554] netlink: 'syz.4.1287': attribute type 27 has an invalid length. [ 170.413290][ T7568] loop1: detected capacity change from 0 to 64 [ 170.610310][ T5914] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 170.710099][ T6937] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 170.806376][ T7584] sp0: Synchronizing with TNC [ 170.859082][ T7586] netlink: 'syz.1.1301': attribute type 1 has an invalid length. [ 170.903701][ T7588] netlink: 'syz.0.1304': attribute type 7 has an invalid length. [ 170.938183][ T7588] netlink: 'syz.0.1304': attribute type 8 has an invalid length. [ 170.954007][ T6937] usb 4-1: Using ep0 maxpacket: 32 [ 170.992306][ T5914] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 171.028479][ T5914] usb 5-1: config 0 has no interface number 0 [ 171.050811][ T5914] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 171.080188][ T6937] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 171.094014][ T5914] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 171.115295][ T6937] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 171.127500][ T7600] loop1: detected capacity change from 0 to 164 [ 171.134094][ T5914] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 171.145949][ T5914] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 171.207436][ T7600] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 171.300566][ T6937] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 171.310329][ T5914] usb 5-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 171.319372][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.328211][ T6937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.336440][ T6937] usb 4-1: Product: syz [ 171.345232][ T5914] usb 5-1: Product: syz [ 171.349401][ T5914] usb 5-1: Manufacturer: syz [ 171.355677][ T6937] usb 4-1: Manufacturer: syz [ 171.364731][ T6937] usb 4-1: SerialNumber: syz [ 171.371548][ T5914] usb 5-1: SerialNumber: syz [ 171.378696][ T5914] usb 5-1: config 0 descriptor?? [ 171.454347][ T5914] xpad 5-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 171.471356][ T5914] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.237/input/input30 [ 171.600338][ T4553] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 171.647770][ T5807] usb 5-1: USB disconnect, device number 14 [ 171.661752][ T5807] xpad 5-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 171.687727][ T7604] loop2: detected capacity change from 0 to 32768 [ 171.697706][ T7612] tipc: Started in network mode [ 171.705086][ T6937] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 171.716511][ T6937] usb 4-1: 2:1 : invalid channels 0 [ 171.722175][ T7612] tipc: Node identity , cluster identity 4711 [ 171.733680][ T7612] tipc: Failed to set node id, please configure manually [ 171.745443][ T7604] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1312 (7604) [ 171.764368][ T7612] tipc: Enabling of bearer rejected, failed to enable media [ 171.786979][ T6937] usb 4-1: USB disconnect, device number 11 [ 171.810397][ T7604] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 171.829408][ T7604] BTRFS info (device loop2): metadata ratio 4 [ 171.862016][ T7604] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 171.911180][ T7604] BTRFS info (device loop2): force lzo compression, level 0 [ 171.924561][ T4553] usb 1-1: Using ep0 maxpacket: 32 [ 171.949516][ T7604] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 171.980411][ T7604] BTRFS info (device loop2): trying to use backup root at mount time [ 172.009284][ T7604] BTRFS info (device loop2): doing ref verification [ 172.026243][ T7604] BTRFS info (device loop2): enabling ssd optimizations [ 172.033400][ T7604] BTRFS info (device loop2): using spread ssd allocation scheme [ 172.048381][ T7604] BTRFS info (device loop2): using free space tree [ 172.055065][ T7604] BTRFS info (device loop2): has skinny extents [ 172.091004][ T4553] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 172.104764][ T4553] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.126276][ T4553] usb 1-1: config 0 descriptor?? [ 172.174367][ T144] BTRFS warning (device loop2): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 172.182453][ T4553] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 172.193710][ T7604] BTRFS warning (device loop2): couldn't read tree root [ 172.227944][ T1453] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x78ca8373 level 0 [ 172.251131][ T7604] BTRFS warning (device loop2): couldn't read tree root [ 172.273040][ T7604] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7 [ 172.318972][ T7604] BTRFS warning (device loop2): couldn't read tree root [ 172.389603][ T7604] BTRFS info (device loop2): clearing free space tree [ 172.406125][ T7604] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 172.453164][ T7639] loop3: detected capacity change from 0 to 4096 [ 172.454000][ T7604] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 172.504688][ T7639] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 172.525916][ T7604] BTRFS info (device loop2): creating free space tree [ 172.538071][ T7639] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 172.546376][ T7604] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 172.566264][ T7604] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 172.624353][ T4160] udevd[4160]: symlink '../../loop2' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:2' failed: Read-only file system [ 172.630230][ T4553] gspca_nw80x: reg_r err -71 [ 172.659007][ T4553] nw80x: probe of 1-1:0.0 failed with error -71 [ 172.687966][ T4553] usb 1-1: USB disconnect, device number 14 [ 172.774015][ T144] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22. [ 172.792067][ T4166] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 173.191053][ T5807] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 173.415652][ T7643] loop4: detected capacity change from 0 to 32768 [ 173.550485][ T4661] udevd[4661]: symlink '../../loop4' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:4' failed: Read-only file system [ 173.580249][ T5807] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.597946][ T5807] usb 4-1: config 0 interface 0 has no altsetting 0 [ 173.609269][ T5807] usb 4-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 173.614310][ T7655] loop0: detected capacity change from 0 to 4096 [ 173.675075][ T7643] XFS (loop4): Mounting V5 Filesystem [ 173.688675][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.706871][ T5807] usb 4-1: config 0 descriptor?? [ 173.742814][ T4661] udevd[4661]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 173.784187][ T7655] ntfs: volume version 3.1. [ 173.857113][ T4661] udevd[4661]: symlink '../../loop0' '/dev/disk/by-uuid/43CF732B47819AF7.tmp-b7:0' failed: Read-only file system [ 173.915651][ T7643] XFS (loop4): Ending clean mount [ 173.940351][ T7643] XFS (loop4): Quotacheck needed: Please wait. [ 174.069407][ T7643] XFS (loop4): Quotacheck: Done. [ 174.077409][ T7674] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1332'. [ 174.190221][ T4661] udevd[4661]: symlink '../../loop4' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:4' failed: Read-only file system [ 174.208590][ T5807] hid-alps 0003:044E:120B.001A: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.3-1/input0 [ 174.238332][ T4172] XFS (loop4): Unmounting Filesystem [ 174.409049][ T6937] usb 4-1: USB disconnect, device number 12 [ 174.646428][ T7694] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1342'. [ 175.110826][ T7719] loop0: detected capacity change from 0 to 64 [ 175.143013][ T7721] netlink: 'syz.2.1354': attribute type 1 has an invalid length. [ 175.191651][ T26] audit: type=1800 audit(1743089232.620:17): pid=7724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1356" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 175.195930][ T7721] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1354'. [ 175.240331][ T4661] udevd[4661]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:0' failed: Read-only file system [ 175.318481][ T4661] udevd[4661]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:0' failed: Read-only file system [ 175.526368][ T7739] loop2: detected capacity change from 0 to 1024 [ 175.532997][ T7737] program syz.0.1360 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.578115][ T7726] loop1: detected capacity change from 0 to 8192 [ 175.611991][ T7743] loop4: detected capacity change from 0 to 64 [ 175.645890][ T4661] udevd[4661]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system [ 175.656769][ T7739] hfsplus: bad catalog entry type [ 175.676391][ T7726] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 175.685532][ T4661] udevd[4661]: symlink '../../loop2' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:2' failed: Read-only file system [ 175.722987][ T7726] REISERFS (device loop1): using ordered data mode [ 175.729616][ T7726] reiserfs: using flush barriers [ 175.763353][ T7726] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 175.788350][ T4231] hfsplus: b-tree write err: -5, ino 4 [ 175.816107][ T7726] REISERFS (device loop1): checking transaction log (loop1) [ 175.826954][ T4661] udevd[4661]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 175.848703][ T7726] REISERFS (device loop1): Using r5 hash to sort names [ 175.867691][ T7726] [ 175.870022][ T7726] ====================================================== [ 175.877027][ T7726] WARNING: possible circular locking dependency detected [ 175.884036][ T7726] 5.15.179-syzkaller #0 Not tainted [ 175.889229][ T7726] ------------------------------------------------------ [ 175.896243][ T7726] syz.1.1357/7726 is trying to acquire lock: [ 175.902230][ T7726] ffff888063538460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write_file+0x5a/0x1f0 [ 175.911571][ T7726] [ 175.911571][ T7726] but task is already holding lock: [ 175.918933][ T7726] ffff88801fd33090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x76/0xd0 [ 175.927917][ T7726] [ 175.927917][ T7726] which lock already depends on the new lock. [ 175.927917][ T7726] [ 175.938323][ T7726] [ 175.938323][ T7726] the existing dependency chain (in reverse order) is: [ 175.947334][ T7726] [ 175.947334][ T7726] -> #2 (&sbi->lock){+.+.}-{3:3}: [ 175.954573][ T7726] lock_acquire+0x1db/0x4f0 [ 175.959605][ T7726] __mutex_lock_common+0x1da/0x25a0 [ 175.965354][ T7726] mutex_lock_nested+0x17/0x20 [ 175.970648][ T7726] reiserfs_write_lock+0x76/0xd0 [ 175.976120][ T7726] reiserfs_lookup+0x15c/0x4b0 [ 175.981420][ T7726] __lookup_slow+0x275/0x3d0 [ 175.986557][ T7726] lookup_one_len+0x187/0x2d0 [ 175.991770][ T7726] reiserfs_lookup_privroot+0x85/0x1e0 [ 175.995432][ T7752] loop4: detected capacity change from 0 to 1024 [ 175.997759][ T7726] reiserfs_fill_super+0x2224/0x2690 [ 176.009877][ T7726] mount_bdev+0x2c9/0x3f0 [ 176.015413][ T7726] legacy_get_tree+0xeb/0x180 [ 176.020714][ T7726] vfs_get_tree+0x88/0x270 [ 176.025639][ T7726] do_new_mount+0x2ba/0xb40 [ 176.030662][ T7726] __se_sys_mount+0x2d5/0x3c0 [ 176.035840][ T7726] do_syscall_64+0x3b/0xb0 [ 176.040760][ T7726] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.047157][ T7726] [ 176.047157][ T7726] -> #1 (&type->i_mutex_dir_key#8){+.+.}-{3:3}: [ 176.055570][ T7726] lock_acquire+0x1db/0x4f0 [ 176.060703][ T7726] down_write+0x38/0x60 [ 176.065380][ T7726] path_openat+0x824/0x2f20 [ 176.070386][ T7726] do_filp_open+0x21c/0x460 [ 176.075390][ T7726] do_sys_openat2+0x13b/0x4f0 [ 176.080573][ T7726] __x64_sys_openat+0x243/0x290 [ 176.085925][ T7726] do_syscall_64+0x3b/0xb0 [ 176.090846][ T7726] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.097243][ T7726] [ 176.097243][ T7726] -> #0 (sb_writers#13){.+.+}-{0:0}: [ 176.104724][ T7726] validate_chain+0x1649/0x5930 [ 176.110080][ T7726] __lock_acquire+0x1295/0x1ff0 [ 176.115451][ T7726] lock_acquire+0x1db/0x4f0 [ 176.120469][ T7726] sb_start_write+0x4f/0x1c0 [ 176.125560][ T7726] mnt_want_write_file+0x5a/0x1f0 [ 176.131085][ T7726] reiserfs_ioctl+0x170/0x340 [ 176.136273][ T7726] __se_sys_ioctl+0xf1/0x160 [ 176.141367][ T7726] do_syscall_64+0x3b/0xb0 [ 176.146287][ T7726] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.152708][ T7726] [ 176.152708][ T7726] other info that might help us debug this: [ 176.152708][ T7726] [ 176.162922][ T7726] Chain exists of: [ 176.162922][ T7726] sb_writers#13 --> &type->i_mutex_dir_key#8 --> &sbi->lock [ 176.162922][ T7726] [ 176.176125][ T7726] Possible unsafe locking scenario: [ 176.176125][ T7726] [ 176.183644][ T7726] CPU0 CPU1 [ 176.188987][ T7726] ---- ---- [ 176.194333][ T7726] lock(&sbi->lock); [ 176.198299][ T7726] lock(&type->i_mutex_dir_key#8); [ 176.206000][ T7726] lock(&sbi->lock); [ 176.212488][ T7726] lock(sb_writers#13); [ 176.216738][ T7726] [ 176.216738][ T7726] *** DEADLOCK *** [ 176.216738][ T7726] [ 176.224863][ T7726] 1 lock held by syz.1.1357/7726: [ 176.229863][ T7726] #0: ffff88801fd33090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x76/0xd0 [ 176.239246][ T7726] [ 176.239246][ T7726] stack backtrace: [ 176.245112][ T7726] CPU: 0 PID: 7726 Comm: syz.1.1357 Not tainted 5.15.179-syzkaller #0 [ 176.253250][ T7726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 176.263290][ T7726] Call Trace: [ 176.266554][ T7726] [ 176.269485][ T7726] dump_stack_lvl+0x1e3/0x2d0 [ 176.274160][ T7726] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 176.279801][ T7726] ? print_circular_bug+0x12b/0x1a0 [ 176.284988][ T7726] check_noncircular+0x2f8/0x3b0 [ 176.289912][ T7726] ? add_chain_block+0x850/0x850 [ 176.294835][ T7726] ? lockdep_lock+0x11f/0x2a0 [ 176.299497][ T7726] ? kasan_set_free_info+0x1f/0x40 [ 176.304590][ T7726] ? ____kasan_slab_free+0xd8/0x120 [ 176.309769][ T7726] ? slab_free_freelist_hook+0xdd/0x160 [ 176.315300][ T7726] ? kfree+0xf1/0x270 [ 176.319267][ T7726] ? tomoyo_path_number_perm+0x648/0x810 [ 176.324892][ T7726] ? reacquire_held_locks+0x660/0x660 [ 176.330253][ T7726] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.336326][ T7726] validate_chain+0x1649/0x5930 [ 176.341169][ T7726] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 176.347139][ T7726] ? reacquire_held_locks+0x660/0x660 [ 176.352503][ T7726] ? __lock_acquire+0x1295/0x1ff0 [ 176.357533][ T7726] ? look_up_lock_class+0x77/0x120 [ 176.362638][ T7726] ? register_lock_class+0x100/0x9a0 [ 176.367915][ T7726] ? is_dynamic_key+0x1f0/0x1f0 [ 176.372784][ T7726] ? mark_lock+0x98/0x340 [ 176.377101][ T7726] __lock_acquire+0x1295/0x1ff0 [ 176.381942][ T7726] lock_acquire+0x1db/0x4f0 [ 176.386435][ T7726] ? mnt_want_write_file+0x5a/0x1f0 [ 176.391624][ T7726] ? read_lock_is_recursive+0x10/0x10 [ 176.396978][ T7726] ? __might_sleep+0xc0/0xc0 [ 176.401551][ T7726] ? mutex_lock_io_nested+0x60/0x60 [ 176.406758][ T7726] sb_start_write+0x4f/0x1c0 [ 176.411335][ T7726] ? mnt_want_write_file+0x5a/0x1f0 [ 176.416519][ T7726] mnt_want_write_file+0x5a/0x1f0 [ 176.421529][ T7726] reiserfs_ioctl+0x170/0x340 [ 176.426187][ T7726] ? __se_sys_ioctl+0xe6/0x160 [ 176.430942][ T7726] ? reiserfs_unpack+0x5a0/0x5a0 [ 176.435891][ T7726] __se_sys_ioctl+0xf1/0x160 [ 176.440494][ T7726] do_syscall_64+0x3b/0xb0 [ 176.444914][ T7726] ? clear_bhb_loop+0x15/0x70 [ 176.449574][ T7726] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.455452][ T7726] RIP: 0033:0x7f0881129169 [ 176.459850][ T7726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.479440][ T7726] RSP: 002b:00007f087ef92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.487841][ T7726] RAX: ffffffffffffffda RBX: 00007f0881341fa0 RCX: 00007f0881129169 [ 176.495797][ T7726] RDX: 9999999999999999 RSI: 0000000040087602 RDI: 0000000000000004 [ 176.503766][ T7726] RBP: 00007f08811aa2a0 R08: 0000000000000000 R09: 0000000000000000 [ 176.511715][ T7726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.519667][ T7726] R13: 0000000000000000 R14: 00007f0881341fa0 R15: 00007ffd7db79358 [ 176.527720][ T7726] [ 176.599308][ T7752] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.619653][ T5807] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 177.030178][ T5807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.041145][ T5807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.050927][ T5807] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 177.059956][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.068960][ T5807] usb 1-1: config 0 descriptor?? [ 177.551570][ T5807] cypress 0003:04B4:DE61.001B: item fetching failed at offset 5/7 [ 177.559633][ T5807] cypress 0003:04B4:DE61.001B: parse failed [ 177.565570][ T5807] cypress: probe of 0003:04B4:DE61.001B failed with error -22 [ 177.752953][ T5807] usb 1-1: USB disconnect, device number 15