last executing test programs: 2m53.375927019s ago: executing program 4 (id=35): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp865,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1545, &(0x7f0000001a00)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 2m52.99279103s ago: executing program 4 (id=37): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getsadinfo={0x88, 0x23, 0x200, 0x70bd2b, 0x5dfdbff, 0x0, [@etimer_thresh={0x8, 0xc, 0x5}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd27, 0x70bd24, 0x70bd26, 0x70bd2d, 0x9, [0x80000001, 0x9, 0xbd93, 0x6bca, 0x800]}}, @policy_type={0xa, 0x10, {0x1}}, @coaddr={0x14, 0xe, @in=@broadcast}, @srcaddr={0x14, 0xd, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m52.519522541s ago: executing program 4 (id=40): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='4', 0x1) 2m51.093664437s ago: executing program 4 (id=52): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000340)={[{@test_dummy_encryption}, {@nodioread_nolock}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 2m50.266235544s ago: executing program 4 (id=57): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100)=0x2000003, 0x4) listen(r0, 0x10001) 2m49.432391878s ago: executing program 4 (id=65): unshare(0x22020600) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r0, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x11}, 0x18) 2m49.210671072s ago: executing program 32 (id=65): unshare(0x22020600) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r0, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x11}, 0x18) 27.455964749s ago: executing program 5 (id=1560): sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x9, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 27.287384275s ago: executing program 5 (id=1562): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}}, 0x0) 27.072210867s ago: executing program 5 (id=1565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000d80)={0x0, [{0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xe0, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x2, 0x0, 0xca, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x13f, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xffffffbc, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x1, 0x18, 0x0, &(0x7f0000000d00)="cbfd14"}]}) 26.792257886s ago: executing program 5 (id=1569): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bond0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x8f97, 0x4) 26.437385339s ago: executing program 5 (id=1571): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 26.002003588s ago: executing program 5 (id=1573): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0x551, 0x82, 0x200000, 0x100000002}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x3800) 10.688691898s ago: executing program 33 (id=1573): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0x551, 0x82, 0x200000, 0x100000002}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x3800) 2.81270632s ago: executing program 2 (id=1755): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x2000) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000100)={0x5c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @private1, 0x18d}}}}]}]}, 0x5c}}, 0x810) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) 2.568659357s ago: executing program 2 (id=1759): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 2.053794547s ago: executing program 1 (id=1767): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 1.872235764s ago: executing program 1 (id=1770): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 1.748253238s ago: executing program 0 (id=1772): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x60, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}]}}}]}, 0x60}}, 0x0) 1.626029369s ago: executing program 1 (id=1774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) 1.5495194s ago: executing program 0 (id=1776): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) setresuid(0x0, 0xee00, 0x0) fcntl$setlease(r0, 0x400, 0x2) 1.460994028s ago: executing program 0 (id=1777): r0 = syz_open_dev$mtd(&(0x7f0000000040), 0x1e, 0x100) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) read$FUSE(r0, &(0x7f0000001440)={0x2020}, 0x2020) 1.446243122s ago: executing program 3 (id=1778): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0xfffffffffffffffd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x1, 0xffffffff, 0x33565348, 0x5, 0x7, 0x5, 0x9, 0x6, 0x0, 0x6, 0x0, 0x6}}) 1.408587584s ago: executing program 0 (id=1779): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000f80)="900000001c001f4d154a817193278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0b21a1c69d33e02cdba86c9d2896c013bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x80, 0x0, 0x0) 1.389956046s ago: executing program 6 (id=1780): syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 1.361283526s ago: executing program 1 (id=1781): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000240)=ANY=[], 0x3, 0xd99, &(0x7f0000006900)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.292152477s ago: executing program 0 (id=1782): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r1 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440)=r0, 0x1) 1.20102558s ago: executing program 3 (id=1783): r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000005080)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='V', 0x1}], 0x1}}], 0x1, 0x0) 1.127688657s ago: executing program 6 (id=1784): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000180)="7d786516062b1e1b9e85e9", 0xb}], 0x2}, 0x24000008) 1.100308557s ago: executing program 3 (id=1785): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c0003"], 0xcd0}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.083093925s ago: executing program 0 (id=1786): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x78, 0x74]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x193) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000000200)={0x0, 0x0, 0x300000000000000, 0x0, 0x4, 0xb, 0x80000003, 0x1}) 859.845877ms ago: executing program 6 (id=1787): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000480)="6303b03ad2cd507f1fb1ba83e2b03aea8dc519babe9f174093966e40211e6a3cd08beed15107ad1209aaa9e3cf66bf0a801dbe00e6d68f3c1568ee4a5f05c4d0f7fc6613dfda9e5b11fde8d677206c5c0d2bb0c0b5e698e8a8e1292a5ea1e55d", 0x60}], 0x1) 842.310411ms ago: executing program 3 (id=1788): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="b37326bd7000fbdbdf2511"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x400d0) 620.073016ms ago: executing program 3 (id=1789): syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 616.205995ms ago: executing program 2 (id=1790): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0xff06, 0x0) 541.49647ms ago: executing program 6 (id=1791): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x80881) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) 471.498629ms ago: executing program 1 (id=1792): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1000, 0xfc}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) 447.262308ms ago: executing program 2 (id=1793): unshare(0x2a020400) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 327.811164ms ago: executing program 3 (id=1794): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x1004002, &(0x7f0000000040)=ANY=[], 0x1, 0x319, &(0x7f0000000a40)="$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") 251.02395ms ago: executing program 1 (id=1795): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000940)=ANY=[], 0xff, 0x2c5, &(0x7f0000002c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x107042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 191.755341ms ago: executing program 6 (id=1796): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11"], 0x17) 131.535663ms ago: executing program 2 (id=1797): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x7, 0xff, 0x7, 0x0, 0x1, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 70.736779ms ago: executing program 2 (id=1798): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) 0s ago: executing program 6 (id=1799): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x52, 0x201, 0x4, 0x25dfdbfc, {0x5}}, 0x14}}, 0x40044c4) kernel console output (not intermixed with test programs): 4][ T8991] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1092 (8991) [ 185.022847][ T8991] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 185.022893][ T8991] BTRFS info (device loop5): using sha256 checksum algorithm [ 185.024013][ T9002] loop3: detected capacity change from 0 to 2048 [ 185.071123][ T9002] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.204248][ T8991] BTRFS info (device loop5 state E): enabling free space tree [ 185.204292][ T8991] BTRFS info (device loop5 state E): force clearing of disk cache [ 185.204643][ T8991] BTRFS info (device loop5 state E): ignoring unknown super block flags [ 185.247760][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-diskseq/440.tmp-b7:2' failed: Read-only file system [ 185.251297][ T5639] udevd[5639]: symlink '../../loop1' '/dev/disk/by-diskseq/438.tmp-b7:1' failed: Read-only file system [ 185.290711][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-diskseq/440.tmp-b7:2' failed: Read-only file system [ 185.345814][ T5628] udevd[5628]: symlink '../../loop5' '/dev/disk/by-diskseq/442.tmp-b7:5' failed: Read-only file system [ 185.348542][ T5633] udevd[5633]: symlink '../../loop3' '/dev/disk/by-diskseq/443.tmp-b7:3' failed: Read-only file system [ 185.353463][ T5628] udevd[5628]: symlink '../../loop5' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:5' failed: Read-only file system [ 185.356027][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-diskseq/441.tmp-b7:2' failed: Read-only file system [ 185.362740][ T5633] udevd[5633]: symlink '../../loop3' '/dev/disk/by-label/LinuxUDF.tmp-b7:3' failed: Read-only file system [ 185.368910][ T5633] udevd[5633]: symlink '../../loop3' '/dev/disk/by-uuid/1234567812345678.tmp-b7:3' failed: Read-only file system [ 185.432456][ T5971] BTRFS info (device loop5 state E): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 185.698478][ T9031] loop1: detected capacity change from 0 to 4096 [ 185.734372][ T9031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.777013][ T5740] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 185.825193][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.926385][ T5740] usb 3-1: Using ep0 maxpacket: 32 [ 185.927023][ T5740] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 185.928169][ T5740] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.928197][ T5740] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.928222][ T5740] usb 3-1: config 0 interface 0 has no altsetting 0 [ 185.928253][ T5740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.933904][ T5740] usb 3-1: config 0 descriptor?? [ 185.966326][ T25] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 186.005787][ T9037] loop1: detected capacity change from 0 to 1024 [ 186.058645][ T9037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 186.061778][ T9037] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.105049][ T9037] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.1105: bg 0: block 112: padding at end of block bitmap is not set [ 186.119965][ T25] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 186.121772][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 186.121805][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.150292][ T25] usb 6-1: config 0 descriptor?? [ 186.271444][ T9024] loop3: detected capacity change from 0 to 32768 [ 186.354214][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 186.396197][ T9024] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 186.417894][ T9024] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 186.435868][ T5740] input: HID 17ef:6009 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:17EF:6009.000D/input/input10 [ 186.562938][ T5740] lenovo 0003:17EF:6009.000D: input,hidraw0: USB HID v80.00 Joystick [HID 17ef:6009] on usb-dummy_hcd.2-1/input0 [ 186.625817][ T5740] usb 3-1: USB disconnect, device number 10 [ 186.641051][ T9024] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 186.653854][ T25] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x1 [ 186.653951][ T25] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x5 [ 186.653983][ T25] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x6 [ 186.654015][ T25] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0 [ 186.654046][ T25] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0 [ 186.654076][ T25] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0 [ 186.654107][ T25] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0 [ 186.654137][ T25] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0 [ 186.654167][ T25] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0 [ 186.654197][ T25] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0 [ 186.701521][ T1218] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 186.701538][ T1218] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 186.821681][ T25] hid-led 0003:0FC5:B080.000E: probe with driver hid-led failed with error -71 [ 186.882570][ T25] usb 6-1: USB disconnect, device number 5 [ 186.974868][ T9051] fido_id[9051]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 187.113094][ T1218] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 411ms [ 187.113789][ T1218] gfs2: fsid=syz:syz.0: jid=0: Done [ 187.119308][ T9024] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 187.471035][ T9063] loop2: detected capacity change from 0 to 1024 [ 187.479644][ T9063] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 187.792812][ T9069] Bluetooth: MGMT ver 1.23 [ 187.930561][ T9073] xt_hashlimit: size too large, truncated to 1048576 [ 188.116242][ T1218] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 188.196728][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 188.253954][ T9077] loop2: detected capacity change from 0 to 32768 [ 188.268163][ T1218] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 188.269755][ T1218] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.269783][ T1218] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.269818][ T1218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.279176][ T1218] usb 6-1: config 0 descriptor?? [ 188.336505][ T9077] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 188.368405][ T10] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 188.379523][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.379600][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 188.379659][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.451692][ T9077] XFS (loop2): Ending clean mount [ 188.464573][ T9095] Bluetooth: hci0: unsupported parameter 5135 [ 188.464627][ T9095] Bluetooth: hci0: unsupported parameter 8192 [ 188.464654][ T9095] Bluetooth: hci0: unsupported parameter 5135 [ 188.464669][ T9095] Bluetooth: hci0: unsupported parameter 8192 [ 188.491973][ T9077] XFS (loop2): Quotacheck needed: Please wait. [ 188.560657][ T9077] XFS (loop2): Quotacheck: Done. [ 188.621216][ T5614] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 188.639688][ T10] ttusb_dec_init_stb: unknown model returned by firmware (00000000) - please report [ 188.649542][ T10] ttusb-dec 4-1:1.0: probe with driver ttusb-dec failed with error -2 [ 188.722376][ T1218] pyra 0003:1E7D:2CF6.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 188.852018][ T5719] usb 4-1: USB disconnect, device number 6 [ 188.911327][ T1218] pyra 0003:1E7D:2CF6.000F: couldn't init struct pyra_device [ 188.911403][ T1218] pyra 0003:1E7D:2CF6.000F: couldn't install mouse [ 188.931022][ T1218] pyra 0003:1E7D:2CF6.000F: probe with driver pyra failed with error -71 [ 188.953487][ T1218] usb 6-1: USB disconnect, device number 6 [ 189.168428][ T9114] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 189.980182][ T9151] netlink: 'syz.2.1151': attribute type 11 has an invalid length. [ 189.981506][ T5644] udevd[5644]: symlink '../../loop0' '/dev/disk/by-diskseq/390.tmp-b7:0' failed: Read-only file system [ 190.006013][ T5633] udevd[5633]: symlink '../../loop2' '/dev/disk/by-diskseq/455.tmp-b7:2' failed: Read-only file system [ 190.023731][ T5644] udevd[5644]: symlink '../../loop3' '/dev/disk/by-diskseq/452.tmp-b7:3' failed: Read-only file system [ 190.092092][ T5644] udevd[5644]: symlink '../../loop0' '/dev/disk/by-diskseq/390.tmp-b7:0' failed: Read-only file system [ 190.129317][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-diskseq/455.tmp-b7:2' failed: Read-only file system [ 190.142132][ T9157] loop2: detected capacity change from 0 to 64 [ 190.148437][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 190.206844][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-diskseq/456.tmp-b7:2' failed: Read-only file system [ 190.245474][ T9160] openvswitch: netlink: Missing key (keys=40, expected=100) [ 190.270960][ T5628] udevd[5628]: symlink '../../loop3' '/dev/disk/by-diskseq/452.tmp-b7:3' failed: Read-only file system [ 190.314827][ T5628] udevd[5628]: symlink '../../loop0' '/dev/disk/by-diskseq/390.tmp-b7:0' failed: Read-only file system [ 190.317580][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-diskseq/456.tmp-b7:2' failed: Read-only file system [ 190.346570][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 190.357787][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.357846][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 190.357883][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 190.357907][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.357949][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.415153][ T10] usb 2-1: config 0 descriptor?? [ 190.432818][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-diskseq/456.tmp-b7:2' failed: Read-only file system [ 190.560584][ T9169] loop0: detected capacity change from 0 to 64 [ 190.695824][ T5740] usb 2-1: USB disconnect, device number 8 [ 191.056021][ T9187] netlink: 'syz.2.1167': attribute type 3 has an invalid length. [ 191.056057][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1167'. [ 191.146367][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 191.146632][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 191.147369][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 191.680478][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 191.710320][ T9218] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1181'. [ 191.836319][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 191.841931][ T10] usb 6-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 191.853286][ T10] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.853330][ T10] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.853367][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 191.853402][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.910321][ T10] usb 6-1: config 0 descriptor?? [ 191.948963][ T9227] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1184'. [ 192.315793][ T9241] loop3: detected capacity change from 0 to 16 [ 192.325519][ T9241] erofs (device loop3): mounted with root inode @ nid 36. [ 192.356303][ T10] hid_parser_main: 7 callbacks suppressed [ 192.356355][ T10] elecom 0003:056E:00FB.0010: unknown main item tag 0x0 [ 192.356389][ T10] elecom 0003:056E:00FB.0010: unknown main item tag 0x0 [ 192.356419][ T10] elecom 0003:056E:00FB.0010: unknown main item tag 0x0 [ 192.356449][ T10] elecom 0003:056E:00FB.0010: unknown main item tag 0x0 [ 192.356479][ T10] elecom 0003:056E:00FB.0010: unknown main item tag 0x0 [ 192.356509][ T10] elecom 0003:056E:00FB.0010: unknown main item tag 0x0 [ 192.356538][ T10] elecom 0003:056E:00FB.0010: unknown main item tag 0x0 [ 192.356576][ T10] elecom 0003:056E:00FB.0010: unknown main item tag 0x0 [ 192.356606][ T10] elecom 0003:056E:00FB.0010: unknown main item tag 0x0 [ 192.356636][ T10] elecom 0003:056E:00FB.0010: unknown main item tag 0x0 [ 192.372147][ T31] audit: type=1800 audit(1787936353.701:60): pid=9241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1193" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 192.466828][ T10] elecom 0003:056E:00FB.0010: hidraw0: USB HID v0.dc Device [HID 056e:00fb] on usb-dummy_hcd.5-1/input0 [ 192.555894][ T10] usb 6-1: USB disconnect, device number 7 [ 192.981060][ T9234] loop1: detected capacity change from 0 to 32768 [ 192.996859][ T9234] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1190 (9234) [ 193.034852][ T9234] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.034907][ T9234] BTRFS info (device loop1): using crc32c checksum algorithm [ 193.237249][ T9234] BTRFS info (device loop1): enabling ssd optimizations [ 193.237291][ T9234] BTRFS info (device loop1): turning on flush-on-commit [ 193.237329][ T9234] BTRFS info (device loop1): enabling free space tree [ 193.237349][ T9234] BTRFS info (device loop1): enabling auto defrag [ 193.237370][ T9234] BTRFS info (device loop1): use lzo compression, level 1 [ 193.237393][ T9234] BTRFS info (device loop1): max_inline set to 4096 [ 193.343106][ T9278] loop0: detected capacity change from 0 to 1024 [ 193.422355][ T9278] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 193.670102][ T5615] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 194.196925][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.196996][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.366363][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1218'. [ 194.717036][ T9304] loop3: detected capacity change from 0 to 32768 [ 194.774361][ T9304] JBD2: Ignoring recovery information on journal [ 194.820859][ T9332] loop2: detected capacity change from 0 to 64 [ 194.880187][ T9304] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 195.071090][ T9332] Trying to free block not in datazone [ 195.097831][ T5633] udevd[5633]: symlink '../../loop5' '/dev/disk/by-diskseq/446.tmp-b7:5' failed: Read-only file system [ 195.107714][ T5644] udevd[5644]: symlink '../../loop1' '/dev/disk/by-diskseq/461.tmp-b7:1' failed: Read-only file system [ 195.159956][ T5628] udevd[5628]: symlink '../../loop3' '/dev/disk/by-diskseq/466.tmp-b7:3' failed: Read-only file system [ 195.172470][ T5628] udevd[5628]: symlink '../../loop3' '/dev/disk/by-uuid/03e7aa51-a951-448e-b9eb-6dd609435e20.tmp-b7:3' failed: Read-only file system [ 195.281430][ T5612] ocfs2: Unmounting device (7,3) on (node local) [ 195.334284][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-diskseq/467.tmp-b7:2' failed: Read-only file system [ 195.404634][ T5628] udevd[5628]: symlink '../../loop3' '/dev/disk/by-diskseq/466.tmp-b7:3' failed: Read-only file system [ 195.408599][ T9346] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 195.409969][ T9346] [U] J"—E:ÀÆ" [ 195.420589][ T9346] [U] *~›"ÁÝÏCǘB³Ü¼ÇÌ‘•WØ ‚<Ô_À ª‡Ó [ 195.459653][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-diskseq/467.tmp-b7:2' failed: Read-only file system [ 195.509485][ T5628] udevd[5628]: symlink '../../loop0' '/dev/disk/by-diskseq/464.tmp-b7:0' failed: Read-only file system [ 195.590908][ T5628] udevd[5628]: symlink '../../loop0' '/dev/disk/by-diskseq/464.tmp-b7:0' failed: Read-only file system [ 195.592472][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-diskseq/467.tmp-b7:2' failed: Read-only file system [ 195.856370][ T5740] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 195.978913][ T9374] loop0: detected capacity change from 0 to 1024 [ 196.007727][ T5740] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 196.008856][ T5740] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 196.008897][ T5740] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.045702][ T31] audit: type=1326 audit(1787936357.371:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9378 comm="syz.2.1246" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7399e159 code=0x7ffc0000 [ 196.045926][ T31] audit: type=1326 audit(1787936357.371:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9378 comm="syz.2.1246" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7399e159 code=0x7ffc0000 [ 196.074315][ T9374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.087261][ T5740] usb 2-1: config 0 descriptor?? [ 196.091730][ T9362] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 196.149550][ T31] audit: type=1326 audit(1787936357.481:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9378 comm="syz.2.1246" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fbe7399e159 code=0x7ffc0000 [ 196.149604][ T31] audit: type=1326 audit(1787936357.481:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9378 comm="syz.2.1246" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7399e159 code=0x7ffc0000 [ 196.149670][ T31] audit: type=1326 audit(1787936357.481:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9378 comm="syz.2.1246" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7399e159 code=0x7ffc0000 [ 196.163973][ T31] audit: type=1326 audit(1787936357.491:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9378 comm="syz.2.1246" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fbe7399e159 code=0x7ffc0000 [ 196.164017][ T31] audit: type=1326 audit(1787936357.491:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9378 comm="syz.2.1246" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7399e159 code=0x7ffc0000 [ 196.164056][ T31] audit: type=1326 audit(1787936357.491:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9378 comm="syz.2.1246" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7399e159 code=0x7ffc0000 [ 196.353703][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.539704][ T5740] hid (null): global environment stack underflow [ 196.584468][ T9391] loop3: detected capacity change from 0 to 1024 [ 196.599536][ T9391] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 196.600019][ T9391] hfsplus: hfsplus: invalid btree header node [ 196.600030][ T9391] hfsplus: (loop3): Extents Overflow File (cnid 0x3) map record invalid or bitmap corruption detected, forcing read-only. [ 196.600046][ T9391] hfsplus: Run fsck.hfsplus to repair. [ 196.619315][ T5740] asus 0003:0B05:1ABE.0011: unexpected long global item [ 196.620010][ T5740] asus 0003:0B05:1ABE.0011: Asus hid parse failed: -22 [ 196.624008][ T5740] asus 0003:0B05:1ABE.0011: probe with driver asus failed with error -22 [ 196.643847][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1254'. [ 196.706197][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 196.729590][ T5711] usb 2-1: USB disconnect, device number 9 [ 196.842573][ T9401] loop3: detected capacity change from 0 to 128 [ 196.866951][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 196.876646][ T10] usb 3-1: config 0 has no interfaces? [ 196.883898][ T9401] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 196.884005][ T9401] System zones: 1-3, 19-19, 35-36 [ 196.888986][ T9401] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 196.892346][ T9401] ext4 filesystem being mounted at /271/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 196.897243][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 196.897266][ T10] usb 3-1: Product: syz [ 196.897281][ T10] usb 3-1: Manufacturer: syz [ 196.967144][ T10] usb 3-1: config 0 descriptor?? [ 197.119537][ T5612] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.201802][ T31] audit: type=1400 audit(1787936358.531:69): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F260902 pid=9386 comm="syz.2.1252" [ 197.243912][ T5741] usb 3-1: USB disconnect, device number 11 [ 197.524568][ T31] audit: type=1326 audit(1787936358.851:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.3.1267" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4419e159 code=0x7ffc0000 [ 197.550963][ T31] audit: type=1326 audit(1787936358.881:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.3.1267" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4419e159 code=0x7ffc0000 [ 197.619721][ T31] audit: type=1326 audit(1787936358.941:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.3.1267" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4419e159 code=0x7ffc0000 [ 197.619767][ T31] audit: type=1326 audit(1787936358.941:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.3.1267" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4419e159 code=0x7ffc0000 [ 197.627671][ T31] audit: type=1326 audit(1787936358.951:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.3.1267" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f4a4419e159 code=0x7ffc0000 [ 197.627717][ T31] audit: type=1326 audit(1787936358.951:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.3.1267" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4419e159 code=0x7ffc0000 [ 197.627755][ T31] audit: type=1326 audit(1787936358.961:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.3.1267" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4419e159 code=0x7ffc0000 [ 197.627792][ T31] audit: type=1326 audit(1787936358.961:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.3.1267" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4419e159 code=0x7ffc0000 [ 197.628487][ T31] audit: type=1326 audit(1787936358.951:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.3.1267" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4419e159 code=0x7ffc0000 [ 197.628529][ T31] audit: type=1326 audit(1787936358.961:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.3.1267" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f4a4419e159 code=0x7ffc0000 [ 197.875744][ T9431] loop0: detected capacity change from 0 to 4096 [ 197.900579][ T9431] ntfs3(loop0): ino=3, mi_enum_attr [ 198.173997][ T9443] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1274'. [ 198.462172][ T9451] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 198.828710][ T9470] loop1: detected capacity change from 0 to 128 [ 198.867748][ T9470] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 198.867791][ T9470] FAT-fs (loop1): Filesystem has been set read-only [ 198.895199][ T9470] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 198.895249][ T9470] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 198.926732][ T9470] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 198.937385][ T9470] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 198.947907][ T9470] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 198.947933][ T9470] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 198.947955][ T9470] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 198.947976][ T9470] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 198.948285][ T9470] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 199.271227][ T9478] loop3: detected capacity change from 0 to 4096 [ 199.280361][ T9478] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 199.826796][ T9492] binder: 9491:9492 unknown command 0 [ 199.836274][ T9492] binder: 9491:9492 ioctl c0306201 200000000340 returned -22 [ 200.143586][ T5644] udevd[5644]: symlink '../../loop3' '/dev/disk/by-diskseq/479.tmp-b7:3' failed: Read-only file system [ 200.198999][ T5628] udevd[5628]: symlink '../../loop5' '/dev/disk/by-diskseq/446.tmp-b7:5' failed: Read-only file system [ 200.236555][ T9507] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 200.379936][ T5644] udevd[5644]: symlink '../../loop5' '/dev/disk/by-diskseq/446.tmp-b7:5' failed: Read-only file system [ 200.414995][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-diskseq/469.tmp-b7:2' failed: Read-only file system [ 200.448707][ T9503] loop1: detected capacity change from 0 to 32768 [ 200.460249][ T9503] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1304 (9503) [ 200.490740][ T9503] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 200.490794][ T9503] BTRFS info (device loop1): using sha256 checksum algorithm [ 200.582331][ T5628] udevd[5628]: symlink '../../loop5' '/dev/disk/by-diskseq/446.tmp-b7:5' failed: Read-only file system [ 200.613453][ T5644] udevd[5644]: symlink '../../loop1' '/dev/disk/by-diskseq/481.tmp-b7:1' failed: Read-only file system [ 200.628166][ T5644] udevd[5644]: symlink '../../loop1' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:1' failed: Read-only file system [ 200.641373][ T9525] loop5: detected capacity change from 0 to 512 [ 200.653551][ T9503] BTRFS info (device loop1): rebuilding free space tree [ 200.672182][ T9525] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.1309: corrupted in-inode xattr: invalid ea_ino [ 200.672228][ T9525] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 200.686120][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 200.686153][ C0] EXT4-fs (loop5): initial error at time 1787936362: ext4_iget_extra_inode:5210: inode 15 [ 200.686195][ C0] EXT4-fs (loop5): last error at time 1787936362: ext4_iget_extra_inode:5210: inode 15 [ 200.687616][ T9525] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1309: couldn't read orphan inode 15 (err -117) [ 200.687643][ T9525] loop5: lost filesystem error report for type 5 error -117 [ 200.698123][ T9525] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.711966][ T5633] udevd[5633]: symlink '../../loop2' '/dev/disk/by-diskseq/469.tmp-b7:2' failed: Read-only file system [ 200.781814][ T9531] loop2: detected capacity change from 0 to 128 [ 200.831733][ T5628] udevd[5628]: symlink '../../loop5' '/dev/disk/by-diskseq/482.tmp-b7:5' failed: Read-only file system [ 200.862497][ T5628] udevd[5628]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 200.953784][ T9503] BTRFS info (device loop1): setting nodatasum [ 200.953830][ T9503] BTRFS info (device loop1): setting nodatacow [ 200.953846][ T9503] BTRFS info (device loop1): turning off barriers [ 200.953862][ T9503] BTRFS info (device loop1): turning on sync discard [ 200.953874][ T9503] BTRFS info (device loop1): enabling free space tree [ 200.953888][ T9503] BTRFS info (device loop1): force clearing of disk cache [ 200.962833][ T9531] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 200.962861][ T9531] hpfs: filesystem error: improperly stopped [ 200.962875][ T9531] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 200.962888][ T9531] hpfs: You really don't want any checks? You are crazy... [ 200.962903][ T9531] hpfs: Code page index out of array [ 200.962919][ T9531] hpfs: code page support is disabled [ 200.971312][ T9531] hpfs: hpfs_map_4sectors(): unaligned read [ 200.971598][ T9531] hpfs: hpfs_map_4sectors(): unaligned read [ 200.971611][ T9531] hpfs: filesystem error: unable to find root dir [ 201.122195][ T5971] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.219237][ T9505] loop3: detected capacity change from 0 to 32768 [ 201.228221][ T9505] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 201.242818][ T9505] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1305 (9505) [ 201.265477][ T9505] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 201.265526][ T9505] BTRFS info (device loop3): using crc32c checksum algorithm [ 201.295019][ T9503] BTRFS warning (device loop1): discard failed for extent [5345280, 5357567]: errno=-512 unknown [ 201.324499][ T9503] BTRFS info (device loop1): balance: start -sconvert=raid0,usage=0..9 [ 201.324655][ T9503] BTRFS info (device loop1): balance: ended with status: 0 [ 201.413734][ T9503] BTRFS warning (device loop1): discard failed for extent [5242880, 5251071]: errno=-512 unknown [ 201.414166][ T9503] BTRFS warning (device loop1): discard failed for extent [5357568, 5369855]: errno=-512 unknown [ 201.443488][ T9554] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 201.448735][ T9505] BTRFS info (device loop3): rebuilding free space tree [ 201.482565][ T5615] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 201.518971][ T9558] netlink: 'syz.2.1315': attribute type 1 has an invalid length. [ 201.576898][ T9505] BTRFS info (device loop3): disabling free space tree [ 201.577114][ T9505] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 201.577138][ T9505] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 201.633928][ T9562] loop0: detected capacity change from 0 to 4096 [ 201.679472][ T9562] ntfs3(loop0): ino=3, Correct links count -> 2. [ 201.754603][ T9505] BTRFS info (device loop3): enabling ssd optimizations [ 201.754648][ T9505] BTRFS info (device loop3): turning on async discard [ 201.754665][ T9505] BTRFS info (device loop3): force clearing of disk cache [ 201.754681][ T9505] BTRFS info (device loop3): use zstd compression, level 3 [ 201.943099][ T5740] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 202.099852][ T5740] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 202.110289][ T5740] usb 2-1: config 0 interface 0 has no altsetting 0 [ 202.110366][ T5740] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.151051][ T5740] usb 2-1: config 0 descriptor?? [ 202.151842][ T9578] loop2: detected capacity change from 0 to 1024 [ 202.162574][ T9578] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 202.653219][ T5740] hid_parser_main: 425 callbacks suppressed [ 202.666897][ T5740] hid-led 0003:0FC5:B080.0012: unknown main item tag 0x1 [ 202.674883][ T5740] hid-led 0003:0FC5:B080.0012: unknown main item tag 0x5 [ 202.682354][ T5740] hid-led 0003:0FC5:B080.0012: unknown main item tag 0x6 [ 202.690947][ T5740] hid-led 0003:0FC5:B080.0012: unknown main item tag 0x0 [ 202.698554][ T5740] hid-led 0003:0FC5:B080.0012: unknown main item tag 0x0 [ 202.698585][ T5740] hid-led 0003:0FC5:B080.0012: unknown main item tag 0x0 [ 202.698613][ T5740] hid-led 0003:0FC5:B080.0012: unknown main item tag 0x0 [ 202.698640][ T5740] hid-led 0003:0FC5:B080.0012: unknown main item tag 0x0 [ 202.698666][ T5740] hid-led 0003:0FC5:B080.0012: unknown main item tag 0x0 [ 202.698693][ T5740] hid-led 0003:0FC5:B080.0012: unknown main item tag 0x0 [ 202.849352][ T5740] hid-led 0003:0FC5:B080.0012: probe with driver hid-led failed with error -71 [ 202.871817][ T5740] usb 2-1: USB disconnect, device number 10 [ 203.179619][ T5612] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 203.436955][ T5740] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 203.556204][ T5741] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 203.586454][ T5740] usb 3-1: Using ep0 maxpacket: 8 [ 203.597002][ T5740] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 203.609820][ T5740] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.609876][ T5740] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.609903][ T5740] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.609933][ T5740] usb 3-1: config 0 interface 0 has no altsetting 0 [ 203.609967][ T5740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.666313][ T5740] usb 3-1: config 0 descriptor?? [ 203.737110][ T5741] usb 6-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 203.747613][ T5741] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.747676][ T5741] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 203.747762][ T5741] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.030369][ T5741] ttusb_dec_init_stb: unknown model returned by firmware (00000000) - please report [ 204.030586][ T5741] ttusb-dec 6-1:1.0: probe with driver ttusb-dec failed with error -2 [ 204.105204][ T5740] itetech 0003:06CB:73F4.0013: hidraw0: USB HID v0.00 Device [HID 06cb:73f4] on usb-dummy_hcd.2-1/input0 [ 204.261793][ T10] usb 6-1: USB disconnect, device number 8 [ 204.314969][ T5711] usb 3-1: USB disconnect, device number 12 [ 204.389661][ T9631] fido_id[9631]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 204.530918][ T9633] loop0: detected capacity change from 0 to 32768 [ 204.540957][ T9633] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1349 (9633) [ 204.569721][ T9633] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 204.569764][ T9633] BTRFS info (device loop0): using sha256 checksum algorithm [ 204.711061][ T9633] BTRFS info (device loop0 state E): enabling free space tree [ 204.711102][ T9633] BTRFS info (device loop0 state E): force clearing of disk cache [ 204.711140][ T9633] BTRFS info (device loop0 state E): ignoring unknown super block flags [ 204.834262][ T5613] BTRFS info (device loop0 state E): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 205.319347][ T5644] udevd[5644]: symlink '../../loop0' '/dev/disk/by-diskseq/494.tmp-b7:0' failed: Read-only file system [ 205.333336][ T5644] udevd[5644]: symlink '../../loop0' '/dev/disk/by-diskseq/494.tmp-b7:0' failed: Read-only file system [ 205.351991][ T5644] udevd[5644]: symlink '../../loop0' '/dev/disk/by-diskseq/494.tmp-b7:0' failed: Read-only file system [ 205.364360][ T9661] loop1: detected capacity change from 0 to 32768 [ 205.376843][ T9661] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1356 (9661) [ 205.398283][ T9661] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 205.398332][ T9661] BTRFS info (device loop1): using sha256 checksum algorithm [ 205.447444][ T9661] BTRFS info (device loop1): checking UUID tree [ 205.455962][ T9661] BTRFS info (device loop1): enabling ssd optimizations [ 205.462005][ T5644] udevd[5644]: symlink '../../loop1' '/dev/disk/by-diskseq/496.tmp-b7:1' failed: Read-only file system [ 205.463385][ T5644] udevd[5644]: symlink '../../loop1' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:1' failed: Read-only file system [ 205.476295][ T9661] BTRFS info (device loop1): using spread ssd allocation scheme [ 205.476317][ T9661] BTRFS info (device loop1): turning on async discard [ 205.476334][ T9661] BTRFS info (device loop1): enabling free space tree [ 205.644921][ T5615] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 205.763572][ T5644] udevd[5644]: symlink '../../loop5' '/dev/disk/by-diskseq/485.tmp-b7:5' failed: Read-only file system [ 205.819232][ T5644] udevd[5644]: symlink '../../loop1' '/dev/disk/by-diskseq/496.tmp-b7:1' failed: Read-only file system [ 205.870608][ T5644] udevd[5644]: symlink '../../loop1' '/dev/disk/by-diskseq/496.tmp-b7:1' failed: Read-only file system [ 205.901274][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 205.901315][ T31] audit: type=1326 audit(1787936367.231:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.3.1364" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4419e159 code=0x7ffc0000 [ 205.933382][ T31] audit: type=1326 audit(1787936367.241:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.3.1364" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4419e159 code=0x7ffc0000 [ 205.933431][ T31] audit: type=1326 audit(1787936367.241:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.3.1364" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4419e159 code=0x7ffc0000 [ 205.933472][ T31] audit: type=1326 audit(1787936367.241:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.3.1364" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4419e159 code=0x7ffc0000 [ 205.933514][ T31] audit: type=1326 audit(1787936367.241:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.3.1364" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a4419e159 code=0x7ffc0000 [ 205.933561][ T31] audit: type=1326 audit(1787936367.241:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.3.1364" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4419e159 code=0x7ffc0000 [ 205.933601][ T31] audit: type=1326 audit(1787936367.241:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.3.1364" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4419e159 code=0x7ffc0000 [ 205.939488][ T5644] udevd[5644]: symlink '../../loop1' '/dev/disk/by-diskseq/497.tmp-b7:1' failed: Read-only file system [ 205.943331][ T5628] udevd[5628]: symlink '../../loop3' '/dev/disk/by-diskseq/493.tmp-b7:3' failed: Read-only file system [ 205.959351][ T31] audit: type=1326 audit(1787936367.271:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.3.1364" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4419e159 code=0x7ffc0000 [ 205.959396][ T31] audit: type=1326 audit(1787936367.271:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.3.1364" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4419e159 code=0x7ffc0000 [ 205.959435][ T31] audit: type=1326 audit(1787936367.271:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.3.1364" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f4a4419e159 code=0x7ffc0000 [ 206.297918][ T9698] loop3: detected capacity change from 0 to 512 [ 206.298812][ T9698] EXT4-fs: Ignoring removed bh option [ 206.342651][ T9698] EXT4-fs (loop3): failed to initialize system zone (-117) [ 206.342781][ T9698] EXT4-fs (loop3): mount failed [ 206.450661][ T9701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1367'. [ 206.505715][ T9696] loop5: detected capacity change from 0 to 32768 [ 206.516276][ T9696] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1365 (9696) [ 206.556084][ T9696] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.557088][ T9696] BTRFS info (device loop5): using sha256 checksum algorithm [ 206.708094][ T9719] loop2: detected capacity change from 0 to 8 [ 206.717619][ T9696] BTRFS info (device loop5): enabling ssd optimizations [ 206.727486][ T9696] BTRFS info (device loop5): turning on async discard [ 206.734350][ T9696] BTRFS info (device loop5): enabling free space tree [ 206.787166][ T9719] SQUASHFS error: Failed to read block 0x636: -5 [ 206.787202][ T9719] SQUASHFS error: Unable to read metadata cache entry [634] [ 206.858429][ T5971] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 207.256248][ T1218] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 207.421326][ T1218] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 207.433185][ T1218] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 207.433228][ T1218] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 207.433273][ T1218] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 207.433300][ T1218] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 207.433327][ T1218] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 207.433352][ T1218] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 207.513150][ T1218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 207.513202][ T1218] usb 3-1: Product: syz [ 207.513231][ T1218] usb 3-1: Manufacturer: syz [ 207.537187][ T9734] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 207.537565][ T9734] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 207.537693][ T9734] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 207.537789][ T9734] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 207.537882][ T9734] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 207.537982][ T9734] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 207.583580][ T1218] usb 3-1: USB2VGA dongle found at address 13 [ 207.594941][ T1218] usb 3-1: Allocated 8 output buffers [ 207.609967][ T1218] usb 3-1: Failed to early initialize device [ 207.784285][ T10] usb 3-1: USB disconnect, device number 13 [ 207.971822][ T9751] loop5: detected capacity change from 0 to 32768 [ 207.995914][ T9751] gfs2: fsid=noacl: Trying to join cluster "lock_nolock", "noacl" [ 207.995956][ T9751] gfs2: fsid=noacl: Now mounting FS (format 1801)... [ 208.025088][ T9751] gfs2: fsid=noacl.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 442 [ 208.025135][ T9751] gfs2: fsid=noacl.0: G: s:SH n:2/13 f:aqonN t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 208.025178][ T9751] gfs2: fsid=noacl.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 208.025218][ T9751] gfs2: fsid=noacl.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 208.025252][ T9751] CPU: 1 UID: 0 PID: 9751 Comm: syz.5.1383 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.025281][ T9751] Tainted: [L]=SOFTLOCKUP [ 208.025289][ T9751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.025301][ T9751] Call Trace: [ 208.025310][ T9751] [ 208.025319][ T9751] dump_stack_lvl+0xe8/0x150 [ 208.025350][ T9751] gfs2_withdraw+0xc3/0x1b0 [ 208.025379][ T9751] inode_go_instantiate+0xbc1/0x12b0 [ 208.025411][ T9751] ? __wait_on_bit+0xef/0x300 [ 208.025442][ T9751] ? __pfx_inode_go_instantiate+0x10/0x10 [ 208.025470][ T9751] ? do_raw_spin_unlock+0xf5/0x200 [ 208.025499][ T9751] ? __pfx_wake_bit_function+0x10/0x10 [ 208.025530][ T9751] gfs2_instantiate+0x168/0x220 [ 208.025554][ T9751] gfs2_glock_wait+0x1d4/0x2a0 [ 208.025578][ T9751] init_journal+0xc8c/0x2330 [ 208.025609][ T9751] ? init_inodes+0xdb/0x320 [ 208.025632][ T9751] ? __pfx_init_journal+0x10/0x10 [ 208.025651][ T9751] ? vsnprintf+0xe42/0xef0 [ 208.025686][ T9751] ? snprintf+0xe8/0x140 [ 208.025714][ T9751] ? init_inodes+0xdb/0x320 [ 208.025733][ T9751] ? __pfx_snprintf+0x10/0x10 [ 208.025759][ T9751] ? gfs2_glock_nq_num+0x15f/0x1a0 [ 208.025785][ T9751] init_inodes+0xdb/0x320 [ 208.025807][ T9751] gfs2_fill_super+0x1959/0x20d0 [ 208.025839][ T9751] ? __pfx_gfs2_fill_super+0x10/0x10 [ 208.025861][ T9751] ? init_locking+0xb8/0x210 [ 208.025879][ T9751] ? sb_set_blocksize+0x155/0x240 [ 208.025911][ T9751] ? setup_bdev_super+0x586/0x680 [ 208.025945][ T9751] get_tree_bdev_flags+0x430/0x4f0 [ 208.025975][ T9751] ? __pfx_gfs2_fill_super+0x10/0x10 [ 208.025994][ T9751] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 208.026036][ T9751] gfs2_get_tree+0x51/0x1e0 [ 208.026058][ T9751] vfs_get_tree+0x92/0x2a0 [ 208.026078][ T9751] do_new_mount+0x319/0xdc0 [ 208.026109][ T9751] ? __pfx_do_new_mount+0x10/0x10 [ 208.026137][ T9751] ? ns_capable+0x89/0xe0 [ 208.026165][ T9751] ? path_mount+0x647/0x1050 [ 208.026194][ T9751] ? user_path_at+0xd4/0x160 [ 208.026224][ T9751] __se_sys_mount+0x31d/0x420 [ 208.026256][ T9751] ? __pfx___se_sys_mount+0x10/0x10 [ 208.026288][ T9751] ? __x64_sys_mount+0x20/0xc0 [ 208.026316][ T9751] do_syscall_64+0x166/0x520 [ 208.026335][ T9751] ? trace_irq_disable+0x3b/0x140 [ 208.026354][ T9751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.026380][ T9751] ? clear_bhb_loop+0x70/0xc0 [ 208.026405][ T9751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.026425][ T9751] RIP: 0033:0x7f162c39f3ca [ 208.026443][ T9751] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.026460][ T9751] RSP: 002b:00007f162d2bde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 208.026481][ T9751] RAX: ffffffffffffffda RBX: 00007f162d2bdee0 RCX: 00007f162c39f3ca [ 208.026496][ T9751] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f162d2bdea0 [ 208.026510][ T9751] RBP: 0000200000000400 R08: 00007f162d2bdee0 R09: 0000000000210401 [ 208.026525][ T9751] R10: 0000000000210401 R11: 0000000000000246 R12: 0000200000012500 [ 208.026538][ T9751] R13: 00007f162d2bdea0 R14: 0000000000012613 R15: 00002000000000c0 [ 208.026570][ T9751] [ 208.026669][ T9751] gfs2: fsid=noacl.0: can't acquire journal inode glock: -5 [ 208.163593][ T9736] loop3: detected capacity change from 0 to 32768 [ 208.292347][ T9736] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 208.520474][ T9736] XFS (loop3): Ending clean mount [ 208.529251][ T9736] XFS (loop3): Quotacheck needed: Please wait. [ 208.536621][ T1218] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 208.676255][ T9773] can0: slcan on ttynull. [ 208.688455][ T1218] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 208.732207][ T1218] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.732258][ T1218] usb 6-1: Product: syz [ 208.732563][ T1218] usb 6-1: Manufacturer: syz [ 208.732579][ T1218] usb 6-1: SerialNumber: syz [ 208.755763][ T9736] XFS (loop3): Quotacheck: Done. [ 208.765105][ T1218] ums-karma 6-1:1.0: USB Mass Storage device detected [ 208.803519][ T1218] ums-karma 6-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 208.803519][ T1218] Please send a copy of this message to and [ 208.890340][ T5612] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 208.949647][ T9772] can0 (unregistered): slcan off ttynull. [ 209.275181][ T1218] ums-karma 6-1:1.0: probe with driver ums-karma failed with error -5 [ 209.398970][ T5719] usb 6-1: USB disconnect, device number 9 [ 209.464175][ T9805] loop3: detected capacity change from 0 to 256 [ 209.680931][ T9807] loop0: detected capacity change from 0 to 256 [ 209.692376][ T9807] exfat: Deprecated parameter 'utf8' [ 209.698246][ T9807] exfat: Deprecated parameter 'utf8' [ 209.769538][ T9807] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 209.880180][ T9801] loop2: detected capacity change from 0 to 32768 [ 209.924528][ T9801] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 210.138238][ T9832] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1406'. [ 210.138306][ T9832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.147724][ T9801] XFS (loop2): Ending clean mount [ 210.380141][ T9841] loop5: detected capacity change from 0 to 64 [ 210.392169][ T5614] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 210.416603][ T5628] udevd[5628]: symlink '../../loop3' '/dev/disk/by-diskseq/510.tmp-b7:3' failed: Read-only file system [ 210.435197][ T5644] udevd[5644]: symlink '../../loop5' '/dev/disk/by-diskseq/506.tmp-b7:5' failed: Read-only file system [ 210.479270][ T5644] udevd[5644]: symlink '../../loop5' '/dev/disk/by-label/untitled.tmp-b7:5' failed: Read-only file system [ 210.488319][ T5644] udevd[5644]: symlink '../../loop5' '/dev/disk/by-uuid/c5790787-4d45-3ec3-bf90-ba1d5c611373.tmp-b7:5' failed: Read-only file system [ 210.512293][ T5633] udevd[5633]: symlink '../../loop1' '/dev/disk/by-diskseq/497.tmp-b7:1' failed: Read-only file system [ 210.530829][ T5628] udevd[5628]: symlink '../../loop3' '/dev/disk/by-diskseq/510.tmp-b7:3' failed: Read-only file system [ 210.594803][ T5644] udevd[5644]: symlink '../../loop5' '/dev/disk/by-diskseq/513.tmp-b7:5' failed: Read-only file system [ 210.603986][ T5644] udevd[5644]: symlink '../../loop5' '/dev/disk/by-label/untitled.tmp-b7:5' failed: Read-only file system [ 210.615286][ T5644] udevd[5644]: symlink '../../loop5' '/dev/disk/by-uuid/c5790787-4d45-3ec3-bf90-ba1d5c611373.tmp-b7:5' failed: Read-only file system [ 210.700461][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-diskseq/511.tmp-b7:2' failed: Read-only file system [ 211.385292][ T9828] loop0: detected capacity change from 0 to 32768 [ 211.419299][ T9828] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 211.591989][ T9828] XFS (loop0): Ending clean mount [ 211.629849][ T9828] XFS (loop0): Quotacheck needed: Please wait. [ 211.843329][ T9828] XFS (loop0): Quotacheck: Done. [ 212.102467][ T5613] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 212.854975][ T9932] loop2: detected capacity change from 0 to 256 [ 213.298037][ T9942] loop1: detected capacity change from 0 to 256 [ 213.440213][ T9952] sctp: [Deprecated]: syz.3.1453 (pid 9952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.440213][ T9952] Use struct sctp_sack_info instead [ 213.769563][ T9963] ip_tables: iptables: counters copy to user failed while replacing table [ 213.809145][ T9967] loop2: detected capacity change from 0 to 1024 [ 213.863501][ T9931] loop5: detected capacity change from 0 to 32768 [ 213.890814][ T9967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 213.890926][ T9967] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.917429][ T9931] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 213.993144][ T9984] loop3: detected capacity change from 0 to 128 [ 214.006747][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 214.062072][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 214.062114][ T31] audit: type=1800 audit(1787936375.391:100): pid=9984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1461" name="file2" dev="loop3" ino=1048670 res=0 errno=0 [ 214.069743][ T9984] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 214.069769][ T9984] FAT-fs (loop3): Filesystem has been set read-only [ 214.069931][ T9984] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 214.069955][ T9984] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 214.069977][ T9984] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 214.069998][ T9984] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 214.070017][ T9984] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 214.070038][ T9984] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 214.070058][ T9984] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 214.070079][ T9984] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 214.070136][ T9984] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 214.077107][ T9986] loop0: detected capacity change from 0 to 1024 [ 214.082568][ T9931] XFS (loop5): Ending clean mount [ 214.084076][ T9986] EXT4-fs: Ignoring removed i_version option [ 214.089883][ T9986] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 214.104089][ T9931] XFS (loop5): Quotacheck needed: Please wait. [ 214.115857][ T9986] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #11: comm syz.0.1460: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 214.115901][ T9986] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 214.116368][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 214.116385][ C1] EXT4-fs (loop0): initial error at time 1787936375: ext4_ext_check_inode:521: inode 11 [ 214.116413][ C1] EXT4-fs (loop0): last error at time 1787936375: ext4_ext_check_inode:521: inode 11 [ 214.116684][ T9986] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.1460: couldn't read orphan inode 11 (err -117) [ 214.116710][ T9986] loop0: lost filesystem error report for type 5 error -117 [ 214.176683][ T9986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.470226][ T9931] XFS (loop5): Quotacheck: Done. [ 214.494611][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.627108][ T9993] use of bytesused == 0 is deprecated and will be removed in the future, [ 214.644876][ T9993] use the actual size instead. [ 214.679521][ T5971] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 215.331191][ T9989] loop2: detected capacity change from 0 to 32768 [ 215.416833][ T9989] ialloc: diAlloc returned -5! [ 215.427333][ T5628] udevd[5628]: symlink '../../loop2' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:2' failed: Read-only file system [ 215.436536][ T9989] jfs_create: dtInsert returned -EIO [ 215.436556][ T9989] ERROR: (device loop2): jfs_create: [ 215.436556][ T9989] [ 215.461412][T10013] loop5: detected capacity change from 0 to 256 [ 215.474357][T10013] exfat: Deprecated parameter 'utf8' [ 215.474450][T10013] exfat: Deprecated parameter 'namecase' [ 215.474508][T10013] exfat: Deprecated parameter 'namecase' [ 215.494342][ T9989] ERROR: (device loop2): remounting filesystem as read-only [ 215.537355][ T5633] udevd[5633]: symlink '../../loop3' '/dev/disk/by-diskseq/529.tmp-b7:3' failed: Read-only file system [ 215.555879][T10013] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 215.596022][ T5628] udevd[5628]: symlink '../../loop5' '/dev/disk/by-diskseq/531.tmp-b7:5' failed: Read-only file system [ 215.602847][ T5628] udevd[5628]: symlink '../../loop5' '/dev/disk/by-uuid/1234-1234.tmp-b7:5' failed: Read-only file system [ 215.659856][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-diskseq/530.tmp-b7:2' failed: Read-only file system [ 215.664258][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:2' failed: Read-only file system [ 215.739995][ T5628] udevd[5628]: symlink '../../loop5' '/dev/disk/by-diskseq/531.tmp-b7:5' failed: Read-only file system [ 215.770013][ T5628] udevd[5628]: symlink '../../loop5' '/dev/disk/by-diskseq/531.tmp-b7:5' failed: Read-only file system [ 215.808102][ T5628] udevd[5628]: symlink '../../loop5' '/dev/disk/by-diskseq/533.tmp-b7:5' failed: Read-only file system [ 215.809276][ T5633] udevd[5633]: symlink '../../loop3' '/dev/disk/by-diskseq/529.tmp-b7:3' failed: Read-only file system [ 215.864982][T10012] loop1: detected capacity change from 0 to 32768 [ 215.899271][T10012] JBD2: Ignoring recovery information on journal [ 215.959766][T10012] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 216.058701][T10019] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 216.067794][ T5615] ocfs2: Unmounting device (7,1) on (node local) [ 216.232811][ T31] audit: type=1800 audit(1787936377.561:101): pid=10025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1483" name="file2" dev="loop5" ino=1048671 res=0 errno=0 [ 216.257556][T10025] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 216.274065][T10025] FAT-fs (loop5): Filesystem has been set read-only [ 216.274253][T10025] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 216.274282][T10025] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 216.274307][T10025] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 216.274332][T10025] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 216.274364][T10025] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 216.274388][T10025] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 216.274413][T10025] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 216.274438][T10025] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 216.274507][T10025] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 216.528116][T10033] set_capacity_and_notify: 1 callbacks suppressed [ 216.528168][T10033] loop3: detected capacity change from 0 to 1024 [ 216.734319][T10031] loop1: detected capacity change from 0 to 32768 [ 216.773014][T10031] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.021032][T10031] XFS (loop1): Ending clean mount [ 217.055082][T10031] XFS (loop1): Quotacheck needed: Please wait. [ 217.259656][T10031] XFS (loop1): Quotacheck: Done. [ 217.326383][T10048] loop3: detected capacity change from 0 to 1024 [ 217.337497][T10048] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 217.384938][T10035] loop2: detected capacity change from 0 to 32768 [ 217.396408][T10035] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1486 (10035) [ 217.415865][T10035] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 217.415924][T10035] BTRFS info (device loop2): using sha256 checksum algorithm [ 217.521555][T10035] BTRFS info (device loop2): enabling ssd optimizations [ 217.522702][ T5615] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.541593][T10035] BTRFS info (device loop2): turning on async discard [ 217.542521][T10035] BTRFS info (device loop2): enabling free space tree [ 217.612048][ T5614] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.181762][T10050] loop5: detected capacity change from 0 to 40427 [ 218.193770][T10050] F2FS-fs (loop5): Image doesn't support compression [ 218.193808][T10050] F2FS-fs (loop5): build fault injection rate: 690 [ 218.213894][T10050] F2FS-fs (loop5): invalid crc value [ 218.572917][T10050] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 218.606647][T10050] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 219.622031][T10073] loop3: detected capacity change from 0 to 65536 [ 219.651759][T10073] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 219.744129][T10073] XFS (loop3): Ending clean mount [ 219.758856][T10073] XFS (loop3): Quotacheck needed: Please wait. [ 219.819965][ T3291] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x1 [ 219.845382][ T3291] XFS (loop3): Unmount and run xfs_repair [ 219.853390][ T3291] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 219.861209][ T3291] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 219.861248][ T3291] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 219.861267][ T3291] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 219.861284][ T3291] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 219.861300][ T3291] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 219.861317][ T3291] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 219.861334][ T3291] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 219.861351][ T3291] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 219.861369][ T3291] XFS (loop3): metadata I/O error in "xfs_read_agf+0x272/0x5c0" at daddr 0x1 len 1 error 74 [ 219.861565][ T3291] loop3: lost filesystem error report for type 5 error -117 [ 219.890062][T10073] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 219.891068][T10073] loop3: lost filesystem error report for type 5 error -117 [ 220.111015][ T5612] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 220.161426][ T5612] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 220.244125][T10140] loop0: detected capacity change from 0 to 32768 [ 220.252702][T10140] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1521 (10140) [ 220.326255][T10140] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.326311][T10140] BTRFS info (device loop0): using sha256 checksum algorithm [ 220.468387][ T5633] udevd[5633]: symlink '../../loop2' '/dev/disk/by-diskseq/545.tmp-b7:2' failed: Read-only file system [ 220.501131][T10140] BTRFS info (device loop0): enabling ssd optimizations [ 220.510161][T10140] BTRFS info (device loop0): turning on async discard [ 220.513029][ T5628] udevd[5628]: symlink '../../loop0' '/dev/disk/by-diskseq/549.tmp-b7:0' failed: Read-only file system [ 220.514300][ T5628] udevd[5628]: symlink '../../loop0' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:0' failed: Read-only file system [ 220.528903][T10140] BTRFS info (device loop0): enabling free space tree [ 220.677531][T10120] loop5: detected capacity change from 0 to 32768 [ 220.706359][ T5711] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 220.711953][T10120] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 220.783819][ T5613] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.813666][ T5639] udevd[5639]: symlink '../../loop1' '/dev/disk/by-diskseq/544.tmp-b7:1' failed: Read-only file system [ 220.858662][ T5711] usb 4-1: Using ep0 maxpacket: 16 [ 220.860352][ T5711] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 220.862945][ T5711] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 220.867790][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.867812][ T5711] usb 4-1: Product: syz [ 220.867826][ T5711] usb 4-1: Manufacturer: syz [ 220.867839][ T5711] usb 4-1: SerialNumber: syz [ 220.902421][T10120] XFS (loop5): Ending clean mount [ 220.945824][ T5711] r8152-cfgselector 4-1: Unknown version 0x0000 [ 220.945874][ T5711] r8152-cfgselector 4-1: config 0 descriptor?? [ 220.975127][T10120] XFS (loop5): Quotacheck needed: Please wait. [ 221.000537][ T5629] udevd[5629]: symlink '../../loop2' '/dev/disk/by-diskseq/545.tmp-b7:2' failed: Read-only file system [ 221.042027][T10180] loop2: detected capacity change from 0 to 128 [ 221.077359][ T5633] udevd[5633]: symlink '../../loop5' '/dev/disk/by-diskseq/551.tmp-b7:5' failed: Read-only file system [ 221.095334][ T5644] udevd[5644]: symlink '../../loop3' '/dev/disk/by-diskseq/548.tmp-b7:3' failed: Read-only file system [ 221.098100][ T5633] udevd[5633]: symlink '../../loop5' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:5' failed: Read-only file system [ 221.144768][ T5640] udevd[5640]: symlink '../../loop2' '/dev/disk/by-diskseq/552.tmp-b7:2' failed: Read-only file system [ 221.157376][ T31] audit: type=1800 audit(1787936382.471:102): pid=10180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1529" name="file2" dev="loop2" ino=1048672 res=0 errno=0 [ 221.168224][ T5644] udevd[5644]: symlink '../../loop3' '/dev/disk/by-diskseq/548.tmp-b7:3' failed: Read-only file system [ 221.191678][T10180] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 221.191721][T10180] FAT-fs (loop2): Filesystem has been set read-only [ 221.191947][T10180] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 221.191976][T10180] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 221.192001][T10180] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 221.192026][T10180] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 221.192050][T10180] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 221.192098][T10180] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 221.192122][T10180] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 221.192146][T10180] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 221.192234][T10180] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 221.340206][T10120] XFS (loop5): Quotacheck: Done. [ 221.445266][ T5971] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 221.475120][ T5711] r8152-cfgselector 4-1: USB disconnect, device number 7 [ 221.797035][T10189] loop1: detected capacity change from 0 to 512 [ 222.148062][T10197] loop1: detected capacity change from 0 to 256 [ 222.152898][T10197] exfat: Deprecated parameter 'namecase' [ 222.152953][T10197] exfat: Deprecated parameter 'namecase' [ 222.163081][T10197] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 222.401600][T10206] loop2: detected capacity change from 0 to 256 [ 222.432627][T10206] exFAT-fs (loop2): error, no upcase table entry. Please run fsck [ 222.432670][T10206] exFAT-fs (loop2): Filesystem has been set read-only [ 222.439505][T10206] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 222.466972][ T5711] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 222.626247][ T5711] usb 4-1: Using ep0 maxpacket: 8 [ 222.628191][ T5711] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 222.629330][ T5711] usb 4-1: config 0 interface 0 has no altsetting 0 [ 222.629362][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.632966][ T5711] usb 4-1: config 0 descriptor?? [ 222.720046][T10215] loop2: detected capacity change from 0 to 2048 [ 222.767393][T10216] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.821326][T10210] loop5: detected capacity change from 0 to 32768 [ 222.870230][T10210] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 222.964060][T10210] XFS (loop5): Ending clean mount [ 222.973671][T10210] XFS (loop5): Quotacheck needed: Please wait. [ 223.080018][ T5711] hid_parser_main: 24 callbacks suppressed [ 223.080073][ T5711] isku 0003:1E7D:3264.0014: unknown main item tag 0x0 [ 223.080106][ T5711] isku 0003:1E7D:3264.0014: unknown main item tag 0x1 [ 223.080161][ T5711] isku 0003:1E7D:3264.0014: unknown main item tag 0x0 [ 223.080190][ T5711] isku 0003:1E7D:3264.0014: unknown main item tag 0x5 [ 223.080215][ T5711] isku 0003:1E7D:3264.0014: unknown main item tag 0x6 [ 223.093967][ T5711] isku 0003:1E7D:3264.0014: hidraw0: USB HID v2.81 Device [HID 1e7d:3264] on usb-dummy_hcd.3-1/input0 [ 223.142112][T10210] XFS (loop5): Quotacheck: Done. [ 223.216628][T10231] loop2: detected capacity change from 0 to 256 [ 223.242885][ T5971] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 223.280738][ T5711] usb 4-1: USB disconnect, device number 8 [ 223.545199][T10236] loop1: detected capacity change from 0 to 1024 [ 224.051717][T10254] loop3: detected capacity change from 0 to 4096 [ 224.066013][T10254] ntfs3(loop3): ino=3, Correct links count -> 2. [ 224.090696][T10259] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 224.090761][T10259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.559757][T10266] loop1: detected capacity change from 0 to 4096 [ 224.562809][T10266] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 224.590751][T10255] loop2: detected capacity change from 0 to 32768 [ 224.591665][T10255] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 224.613062][T10255] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1558 (10255) [ 224.649984][T10255] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 224.650035][T10255] BTRFS info (device loop2): using crc32c checksum algorithm [ 224.665026][T10266] ntfs3(loop1): ino=19, mi_enum_attr [ 224.665051][T10266] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 224.678868][T10266] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 224.763160][T10277] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 224.763251][T10277] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 224.763292][T10277] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 224.833435][ T31] audit: type=1800 audit(1787936386.161:103): pid=10266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1563" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 224.864358][T10255] BTRFS info (device loop2): rebuilding free space tree [ 225.015597][T10255] BTRFS info (device loop2): disabling free space tree [ 225.015675][T10255] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 225.015694][T10255] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 225.055465][T10255] BTRFS info (device loop2): enabling ssd optimizations [ 225.055510][T10255] BTRFS info (device loop2): turning on async discard [ 225.055544][T10255] BTRFS info (device loop2): force clearing of disk cache [ 225.055562][T10255] BTRFS info (device loop2): use zstd compression, level 3 [ 225.283159][T10298] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 225.283195][T10298] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 225.283293][T10298] System zones: 0-1, 15-15, 18-18, 34-34 [ 225.283541][T10298] EXT4-fs (loop0): orphan cleanup on readonly fs [ 225.283617][T10298] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 225.283684][T10298] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 225.283715][T10298] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 225.337523][T10298] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.1572: bad orphan inode 16 [ 225.337549][T10298] loop0: lost filesystem error report for type 5 error -117 [ 225.354482][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 225.354503][ C1] EXT4-fs (loop0): initial error at time 1787936386: ext4_orphan_get:1429 [ 225.354527][ C1] EXT4-fs (loop0): last error at time 1787936386: ext4_orphan_get:1429 [ 225.361952][T10298] ext4_test_bit(bit=15, block=18) = 1 [ 225.361968][T10298] is_bad_inode(inode)=0 [ 225.361977][T10298] NEXT_ORPHAN(inode)=0 [ 225.361984][T10298] max_ino=32 [ 225.361992][T10298] i_nlink=2 [ 225.389040][T10298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 225.442607][T10298] EXT4-fs error (device loop0): ext4_lookup:1791: inode #12: comm syz.0.1572: deleted inode referenced: 14 [ 225.563019][T10290] ialloc: diAlloc returned -5! [ 225.573570][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.599742][ T5628] udevd[5628]: symlink '../../loop0' '/dev/disk/by-diskseq/577.tmp-b7:0' failed: Read-only file system [ 225.633178][ T5628] udevd[5628]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 225.683077][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-diskseq/573.tmp-b7:2' failed: Read-only file system [ 225.689658][ T5639] udevd[5639]: symlink '../../loop1' '/dev/disk/by-diskseq/576.tmp-b7:1' failed: Read-only file system [ 225.711566][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-uuid/24c7a497-3402-47dd-bef8-82358f5f30e0.tmp-b7:2' failed: Read-only file system [ 225.736713][ T5628] udevd[5628]: symlink '../../loop0' '/dev/disk/by-diskseq/577.tmp-b7:0' failed: Read-only file system [ 225.755047][T10303] EXT4-fs: Ignoring removed i_version option [ 225.775750][T10303] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 225.810313][T10303] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.1574: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 225.810383][T10303] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 225.810839][T10303] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.1574: couldn't read orphan inode 11 (err -117) [ 225.810867][T10303] loop1: lost filesystem error report for type 5 error -117 [ 225.823424][T10303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.849238][ T5628] udevd[5628]: symlink '../../loop0' '/dev/disk/by-diskseq/577.tmp-b7:0' failed: Read-only file system [ 225.898639][ T5633] udevd[5633]: symlink '../../loop3' '/dev/disk/by-diskseq/578.tmp-b7:3' failed: Read-only file system [ 225.901471][ T5628] udevd[5628]: symlink '../../loop0' '/dev/disk/by-diskseq/579.tmp-b7:0' failed: Read-only file system [ 225.908425][ T5633] udevd[5633]: symlink '../../loop3' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:3' failed: Read-only file system [ 226.026651][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.198433][ T5614] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 226.301347][T10315] netlink: 'syz.1.1577': attribute type 29 has an invalid length. [ 226.436238][ T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 226.601194][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 226.610503][ T25] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 226.622250][ T25] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 226.622288][ T25] usb 4-1: config 0 has no interface number 0 [ 226.622342][ T25] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 226.622371][ T25] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 226.663605][ T25] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 226.663643][ T25] usb 4-1: Product: syz [ 226.663674][ T25] usb 4-1: SerialNumber: syz [ 226.683592][ T25] usb 4-1: config 0 descriptor?? [ 226.701565][ T31] audit: type=1800 audit(1787936388.031:104): pid=10317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1579" name="file2" dev="loop0" ino=1048676 res=0 errno=0 [ 226.726037][T10317] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 226.726085][T10317] FAT-fs (loop0): Filesystem has been set read-only [ 226.726978][T10317] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 226.727004][T10317] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 226.727026][T10317] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 226.727046][T10317] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 226.727067][T10317] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 226.727088][T10317] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 226.727108][T10317] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 226.727129][T10317] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 226.727289][T10317] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 226.764628][ T25] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 226.847219][ T25] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input12 [ 227.005421][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.007188][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.007428][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.007667][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.007910][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.008136][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.008353][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.015431][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.015803][ T10] usb 4-1: USB disconnect, device number 9 [ 227.022484][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.022508][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 227.022910][ T10] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 227.062690][T10321] set_capacity_and_notify: 5 callbacks suppressed [ 227.062706][T10321] loop2: detected capacity change from 0 to 4096 [ 227.079790][T10321] ntfs3(loop2): ino=3, Correct links count -> 2. [ 227.436565][ T31] audit: type=1800 audit(1787936388.771:105): pid=10325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1582" name="features" dev="configfs" ino=21382 res=0 errno=0 [ 227.988845][T10338] loop1: detected capacity change from 0 to 4096 [ 228.376764][T10353] loop0: detected capacity change from 0 to 256 [ 228.775127][T10361] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 228.863558][T10363] loop1: detected capacity change from 0 to 512 [ 228.877233][T10363] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 228.916471][T10351] loop2: detected capacity change from 0 to 32768 [ 228.926338][T10351] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1595 (10351) [ 228.959507][T10351] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 228.959552][T10351] BTRFS info (device loop2): using sha256 checksum algorithm [ 229.076536][T10351] BTRFS info (device loop2): rebuilding free space tree [ 229.083688][T10379] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 229.188311][T10351] BTRFS info (device loop2): setting nodatasum [ 229.188355][T10351] BTRFS info (device loop2): setting nodatacow [ 229.188372][T10351] BTRFS info (device loop2): turning off barriers [ 229.188386][T10351] BTRFS info (device loop2): turning on sync discard [ 229.188398][T10351] BTRFS info (device loop2): enabling free space tree [ 229.188412][T10351] BTRFS info (device loop2): force clearing of disk cache [ 229.253319][ T31] audit: type=1800 audit(1787936390.581:106): pid=10351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1595" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 229.405924][T10388] loop0: detected capacity change from 0 to 64 [ 229.441191][T10351] BTRFS warning (device loop2): discard failed for extent [5345280, 5353471]: errno=-512 unknown [ 229.441602][T10351] BTRFS warning (device loop2): discard failed for extent [6881280, 6885375]: errno=-512 unknown [ 229.441793][T10351] BTRFS info (device loop2): balance: start -sconvert=raid0,usage=0..9 [ 229.441902][T10351] BTRFS info (device loop2): balance: ended with status: 0 [ 229.447428][T10388] hfs: unable to open catalog tree [ 229.545207][T10351] BTRFS warning (device loop2): discard failed for extent [5242880, 5251071]: errno=-512 unknown [ 229.545657][T10351] BTRFS warning (device loop2): discard failed for extent [5353472, 5365759]: errno=-512 unknown [ 229.611035][ T5614] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 229.886701][T10395] loop0: detected capacity change from 0 to 512 [ 229.887640][T10395] EXT4-fs: Ignoring removed nobh option [ 229.889826][T10395] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 229.955994][T10395] EXT4-fs (loop0): 1 truncate cleaned up [ 229.984592][T10395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.095320][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.560432][ C1] sd 0:0:1:0: [sda] tag#10005 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 230.560528][ C1] sd 0:0:1:0: [sda] tag#10005 CDB: Write(6) 0a 00 00 00 08 00 00 00 42 00 00 00 [ 230.779006][ T5628] udevd[5628]: symlink '../../loop3' '/dev/disk/by-diskseq/582.tmp-b7:3' failed: Read-only file system [ 230.785097][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-diskseq/593.tmp-b7:2' failed: Read-only file system [ 230.813953][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-diskseq/593.tmp-b7:2' failed: Read-only file system [ 230.855411][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-diskseq/599.tmp-b7:2' failed: Read-only file system [ 230.977421][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-diskseq/599.tmp-b7:2' failed: Read-only file system [ 231.029818][ T5644] udevd[5644]: symlink '../../loop1' '/dev/disk/by-diskseq/594.tmp-b7:1' failed: Read-only file system [ 231.088435][ T5644] udevd[5644]: symlink '../../loop1' '/dev/disk/by-diskseq/594.tmp-b7:1' failed: Read-only file system [ 231.183837][ T5644] udevd[5644]: symlink '../../loop1' '/dev/disk/by-diskseq/594.tmp-b7:1' failed: Read-only file system [ 231.369338][ T5644] udevd[5644]: symlink '../../loop1' '/dev/disk/by-diskseq/594.tmp-b7:1' failed: Read-only file system [ 231.543288][ T5644] udevd[5644]: symlink '../../loop0' '/dev/disk/by-diskseq/598.tmp-b7:0' failed: Read-only file system [ 231.630130][T10429] loop0: detected capacity change from 0 to 256 [ 231.630977][T10429] exfat: Deprecated parameter 'namecase' [ 231.672522][T10420] loop2: detected capacity change from 0 to 32768 [ 231.687450][T10429] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d) [ 231.706484][T10420] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 231.855244][T10420] XFS (loop2): Ending clean mount [ 231.960318][ T5614] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 232.148376][T10448] xt_IDLETIMER: label is empty or not nul-terminated [ 232.836414][T10450] loop2: detected capacity change from 0 to 32768 [ 232.874398][T10450] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 233.004961][T10450] XFS (loop2): Ending clean mount [ 233.080963][ T5614] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 233.394606][T10457] loop1: detected capacity change from 0 to 40427 [ 233.415622][T10457] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 233.415661][T10457] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 233.467758][T10473] netlink: 476 bytes leftover after parsing attributes in process `syz.3.1639'. [ 233.734672][T10457] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 233.768078][T10457] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 233.775278][T10457] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 233.982068][T10490] loop2: detected capacity change from 0 to 512 [ 234.027153][T10492] loop3: detected capacity change from 0 to 512 [ 234.044067][T10490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.070194][T10492] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 234.070226][T10492] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 234.104204][T10492] EXT4-fs (loop3): orphan cleanup on readonly fs [ 234.122030][T10492] Quota error (device loop3): v2_read_file_info: Block with free entry 5 out of range (1, 5). [ 234.122145][T10492] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 234.123828][T10492] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 234.161158][T10492] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 234.173225][T10492] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #12: comm syz.3.1646: corrupted inode contents [ 234.173252][T10492] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 234.186122][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 234.186141][ C0] EXT4-fs (loop3): initial error at time 1787936395: mb_free_blocks:2049: inode 12: block 14 [ 234.186174][ C0] EXT4-fs (loop3): last error at time 1787936395: ext4_do_update_inode:5801: inode 12 [ 234.199551][T10492] EXT4-fs error (device loop3): ext4_dirty_inode:6731: inode #12: comm syz.3.1646: mark_inode_dirty error [ 234.199578][T10492] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 234.201339][T10492] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #12: comm syz.3.1646: corrupted inode contents [ 234.201367][T10492] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 234.201647][T10492] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #12: comm syz.3.1646: mark_inode_dirty error [ 234.201671][T10492] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 234.204687][T10492] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #12: comm syz.3.1646: corrupted inode contents [ 234.204714][T10492] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 234.240258][T10492] EXT4-fs error (device loop3) in ext4_orphan_del:304: Corrupt filesystem [ 234.240280][T10492] loop3: lost filesystem error report for type 5 error -117 [ 234.240489][T10492] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #12: comm syz.3.1646: corrupted inode contents [ 234.240514][T10492] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 234.242204][T10492] EXT4-fs error (device loop3): ext4_truncate:4721: inode #12: comm syz.3.1646: mark_inode_dirty error [ 234.242230][T10492] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 234.242461][T10492] EXT4-fs error (device loop3) in ext4_process_orphan:346: Corrupt filesystem [ 234.242478][T10492] loop3: lost filesystem error report for type 5 error -117 [ 234.248151][T10492] EXT4-fs (loop3): 1 truncate cleaned up [ 234.260360][T10492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 234.342525][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.463670][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.508214][T10499] loop2: detected capacity change from 0 to 64 [ 234.548207][T10499] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 235.147724][T10518] veth1_macvtap: left promiscuous mode [ 235.153368][T10518] macsec0: entered promiscuous mode [ 235.159729][T10518] macsec0: entered allmulticast mode [ 235.181180][T10518] veth1_macvtap: entered promiscuous mode [ 235.181215][T10518] veth1_macvtap: entered allmulticast mode [ 235.181506][T10518] macsec0: left promiscuous mode [ 235.181651][T10518] macsec0: left allmulticast mode [ 235.181666][T10518] veth1_macvtap: left allmulticast mode [ 235.789917][T10535] loop0: detected capacity change from 0 to 8 [ 235.820802][ T5644] udevd[5644]: symlink '../../loop0' '/dev/disk/by-diskseq/614.tmp-b7:0' failed: Read-only file system [ 235.878510][ T5628] udevd[5628]: symlink '../../loop1' '/dev/disk/by-diskseq/610.tmp-b7:1' failed: Read-only file system [ 235.891288][ T5644] udevd[5644]: symlink '../../loop0' '/dev/disk/by-diskseq/614.tmp-b7:0' failed: Read-only file system [ 236.005208][T10538] loop1: detected capacity change from 0 to 512 [ 236.008106][ T5644] udevd[5644]: symlink '../../loop0' '/dev/disk/by-diskseq/614.tmp-b7:0' failed: Read-only file system [ 236.015279][ T5628] udevd[5628]: symlink '../../loop2' '/dev/disk/by-diskseq/613.tmp-b7:2' failed: Read-only file system [ 236.019299][T10538] EXT4-fs: Ignoring removed oldalloc option [ 236.046948][T10522] loop3: detected capacity change from 0 to 32768 [ 236.064785][T10538] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1665: Parent and EA inode have the same ino 15 [ 236.065575][T10538] loop1: lost filesystem error report for type 5 error -117 [ 236.086124][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 236.086159][ C0] EXT4-fs (loop1): initial error at time 1787936397: ext4_xattr_inode_iget:433 [ 236.086198][ C0] EXT4-fs (loop1): last error at time 1787936397: ext4_xattr_inode_iget:433 [ 236.100733][ T5644] udevd[5644]: symlink '../../loop0' '/dev/disk/by-diskseq/614.tmp-b7:0' failed: Read-only file system [ 236.102734][T10538] EXT4-fs (loop1): Remounting filesystem read-only [ 236.102965][T10538] EXT4-fs (loop1): 1 orphan inode deleted [ 236.115682][ T5633] udevd[5633]: symlink '../../loop1' '/dev/disk/by-diskseq/616.tmp-b7:1' failed: Read-only file system [ 236.128555][T10538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.130408][ T5633] udevd[5633]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 236.180518][T10545] loop0: detected capacity change from 0 to 256 [ 236.191530][T10522] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 236.205294][T10545] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 236.229961][ T5644] udevd[5644]: symlink '../../loop1' '/dev/disk/by-diskseq/616.tmp-b7:1' failed: Read-only file system [ 236.254029][ T5644] udevd[5644]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 236.297853][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.445593][T10522] XFS (loop3): Ending clean mount [ 236.459181][T10522] XFS (loop3): Quotacheck needed: Please wait. [ 236.656923][T10522] XFS (loop3): Quotacheck: Done. [ 236.690956][T10561] loop0: detected capacity change from 0 to 16 [ 236.777846][ T1218] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 236.814002][ T5612] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 236.947577][ T1218] usb 2-1: Using ep0 maxpacket: 16 [ 236.964629][ T1218] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.975013][ T1218] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.985486][ T1218] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.001497][ T1218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.001534][ T1218] usb 2-1: Product: syz [ 237.001566][ T1218] usb 2-1: Manufacturer: syz [ 237.001584][ T1218] usb 2-1: SerialNumber: syz [ 237.008508][T10569] erofs (device loop2): mounted with root inode @ nid 36. [ 237.065412][ T1218] usb 2-1: 0:2 : does not exist [ 237.271221][ T1218] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 237.399255][T10575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.451335][ T1218] usb 2-1: USB disconnect, device number 11 [ 237.567400][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.085090][T10600] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1688'. [ 238.404752][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1693'. [ 238.404801][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1693'. [ 238.716561][ T1218] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 238.782018][T10623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1698'. [ 238.867174][ T1218] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 238.880645][ T1218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.880683][ T1218] usb 2-1: Product: syz [ 238.880719][ T1218] usb 2-1: Manufacturer: syz [ 238.880738][ T1218] usb 2-1: SerialNumber: syz [ 238.914532][ T1218] ums-karma 2-1:1.0: USB Mass Storage device detected [ 238.934168][ T1218] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 238.934168][ T1218] Please send a copy of this message to and [ 239.324787][T10641] set_capacity_and_notify: 2 callbacks suppressed [ 239.324838][T10641] loop2: detected capacity change from 0 to 64 [ 239.358226][ T1218] scsi host1: usb-storage 2-1:1.0 [ 239.524567][T10646] loop0: detected capacity change from 0 to 256 [ 239.560610][ T5719] usb 2-1: USB disconnect, device number 12 [ 239.840338][T10653] loop0: detected capacity change from 0 to 128 [ 239.873933][ T31] audit: type=1800 audit(1787936401.201:107): pid=10653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1711" name="file2" dev="loop0" ino=1048686 res=0 errno=0 [ 239.883401][T10653] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 239.883427][T10653] FAT-fs (loop0): Filesystem has been set read-only [ 239.883584][T10653] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 239.883606][T10653] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 239.883626][T10653] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 239.883646][T10653] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 239.883667][T10653] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 239.883687][T10653] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 239.883706][T10653] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 239.883726][T10653] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 239.883783][T10653] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 240.388401][T10663] loop2: detected capacity change from 0 to 512 [ 240.404936][T10663] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 240.488102][T10663] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.1716: Allocating blocks 41-42 which overlap fs metadata [ 240.488160][T10663] loop2: lost filesystem error report for type 5 error -117 [ 240.506647][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 240.507503][ C0] EXT4-fs (loop2): initial error at time 1787936401: ext4_mb_mark_diskspace_used:4223 [ 240.507529][ C0] EXT4-fs (loop2): last error at time 1787936401: ext4_mb_mark_diskspace_used:4223 [ 240.526041][T10663] EXT4-fs (loop2): Remounting filesystem read-only [ 240.526304][T10663] Quota error (device loop2): write_blk: dquota write failed [ 240.526320][T10663] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 240.526511][T10663] Quota error (device loop2): write_blk: dquota write failed [ 240.526605][T10663] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 240.526720][T10663] EXT4-fs (loop2): 1 truncate cleaned up [ 240.532732][T10663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.673472][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.827201][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-diskseq/633.tmp-b7:2' failed: Read-only file system [ 240.885867][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-diskseq/634.tmp-b7:2' failed: Read-only file system [ 240.993029][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.009494][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.018495][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.033301][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.039418][ T5644] udevd[5644]: symlink '../../loop0' '/dev/disk/by-diskseq/632.tmp-b7:0' failed: Read-only file system [ 241.052002][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.091927][ T5633] udevd[5633]: symlink '../../loop3' '/dev/disk/by-diskseq/627.tmp-b7:3' failed: Read-only file system [ 241.100100][ T5644] udevd[5644]: symlink '../../loop0' '/dev/disk/by-diskseq/632.tmp-b7:0' failed: Read-only file system [ 241.147365][T10676] loop3: detected capacity change from 0 to 256 [ 241.156718][ T5644] udevd[5644]: symlink '../../loop0' '/dev/disk/by-diskseq/635.tmp-b7:0' failed: Read-only file system [ 241.323133][ T5628] udevd[5628]: symlink '../../loop3' '/dev/disk/by-diskseq/636.tmp-b7:3' failed: Read-only file system [ 241.336865][ T5633] udevd[5633]: symlink '../../loop2' '/dev/disk/by-diskseq/634.tmp-b7:2' failed: Read-only file system [ 241.529068][ T5644] udevd[5644]: symlink '../../loop0' '/dev/disk/by-diskseq/635.tmp-b7:0' failed: Read-only file system [ 241.591762][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-diskseq/634.tmp-b7:2' failed: Read-only file system [ 241.930362][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.944138][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.058935][T10702] loop2: detected capacity change from 0 to 64 [ 242.086575][ T5741] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 242.158338][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.172858][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.267726][ T5741] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 242.278764][ T5741] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.286609][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.286640][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.301139][ T5741] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 242.301167][ T5741] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 242.335685][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.343858][ T5741] usb 2-1: Product: syz [ 242.343874][ T5741] usb 2-1: Manufacturer: syz [ 242.343888][ T5741] usb 2-1: SerialNumber: syz [ 242.363502][ T5741] usb 2-1: config 0 descriptor?? [ 242.369426][T10691] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 242.409340][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.412999][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.446207][ T5741] rc_core: IR keymap rc-streamzap not found [ 242.452267][ T5741] Registered IR keymap rc-empty [ 242.459081][ T5741] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 242.472730][ T5741] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 242.592659][ T30] usb 2-1: USB disconnect, device number 13 [ 242.811308][ T12] bridge_slave_1: left allmulticast mode [ 242.821481][ T12] bridge_slave_1: left promiscuous mode [ 242.831496][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.842892][ T12] bridge_slave_0: left allmulticast mode [ 242.850892][ T12] bridge_slave_0: left promiscuous mode [ 242.857562][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.074998][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.089816][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.100225][ T12] bond0 (unregistering): Released all slaves [ 243.136334][ T5617] Bluetooth: hci5: command tx timeout [ 243.233517][ T12] tipc: Left network mode [ 243.243521][T10670] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.250905][T10670] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.251062][T10670] bridge_slave_0: entered allmulticast mode [ 243.266841][T10670] bridge_slave_0: entered promiscuous mode [ 243.277374][T10670] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.288812][T10670] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.296260][T10670] bridge_slave_1: entered allmulticast mode [ 243.311611][T10670] bridge_slave_1: entered promiscuous mode [ 243.332290][ T12] IPVS: stopping backup sync thread 7247 ... [ 243.367549][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 243.404672][T10670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.417243][T10670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.521072][T10670] team0: Port device team_slave_0 added [ 243.529740][T10670] team0: Port device team_slave_1 added [ 243.573406][T10670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.581238][T10670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.609894][T10670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.628872][T10670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.628903][T10670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.628941][T10670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.704156][ T12] hsr_slave_0: left promiscuous mode [ 243.710565][ T12] hsr_slave_1: left promiscuous mode [ 243.717406][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.725045][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.733163][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.733180][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.755363][ T12] veth1_macvtap: left promiscuous mode [ 243.762075][ T12] veth0_macvtap: left promiscuous mode [ 243.768073][ T12] veth1_vlan: left promiscuous mode [ 243.773406][ T12] veth0_vlan: left promiscuous mode [ 244.034200][ T12] team0 (unregistering): Port device team_slave_1 removed [ 244.054268][ T12] team0 (unregistering): Port device team_slave_0 removed [ 244.155397][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 244.169781][T10670] hsr_slave_0: entered promiscuous mode [ 244.170688][T10670] hsr_slave_1: entered promiscuous mode [ 244.171311][T10670] debugfs: 'hsr0' already exists in 'hsr' [ 244.171327][T10670] Cannot create hsr debugfs directory [ 244.459045][ T12] IPVS: stop unused estimator thread 0... [ 244.525630][T10670] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 244.536836][T10670] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 244.544759][T10670] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 244.554873][T10670] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 244.565857][T10670] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 244.578662][T10670] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 244.586871][T10670] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 244.599120][T10670] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 244.709520][T10670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.736066][T10670] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.749230][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.749345][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.775205][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.775308][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.828457][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7 [ 245.216335][ T5617] Bluetooth: hci5: command tx timeout [ 245.309747][T10670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.399332][ T5279] 8021q: adding VLAN 0 to HW filter on device eth8 [ 245.605799][T10670] veth0_vlan: entered promiscuous mode [ 245.622086][T10670] veth1_vlan: entered promiscuous mode [ 245.650199][T10670] veth0_macvtap: entered promiscuous mode [ 245.655121][T10670] veth1_macvtap: entered promiscuous mode [ 245.667072][T10670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.671525][T10670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.682953][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.683146][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.683332][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.768556][ T3313] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.822152][ T3313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.833132][ T3313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.853537][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.853964][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.981014][T10803] loop2: detected capacity change from 0 to 512 [ 246.006229][T10803] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 246.006264][T10803] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 246.037396][T10803] EXT4-fs (loop2): orphan cleanup on readonly fs [ 246.046553][T10803] Quota error (device loop2): v2_read_file_info: Block with free entry 5 out of range (1, 5). [ 246.046651][T10803] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 246.060703][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-diskseq/640.tmp-b7:2' failed: Read-only file system [ 246.064771][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 246.109781][T10803] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 246.122162][T10803] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 246.122294][T10803] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #12: comm syz.2.1740: corrupted inode contents [ 246.122322][T10803] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 246.130658][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-diskseq/640.tmp-b7:2' failed: Read-only file system [ 246.137509][ T5644] udevd[5644]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 246.138176][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 246.138196][ C0] EXT4-fs (loop2): initial error at time 1787936407: mb_free_blocks:2049: inode 12: block 14 [ 246.138231][ C0] EXT4-fs (loop2): last error at time 1787936407: ext4_do_update_inode:5801: inode 12 [ 246.234650][T10810] loop6: detected capacity change from 0 to 128 [ 246.238954][T10803] EXT4-fs error (device loop2): ext4_dirty_inode:6731: inode #12: comm syz.2.1740: mark_inode_dirty error [ 246.238991][T10803] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 246.247721][T10803] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #12: comm syz.2.1740: corrupted inode contents [ 246.247749][T10803] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 246.249233][ T5644] udevd[5644]: symlink '../../loop3' '/dev/disk/by-diskseq/637.tmp-b7:3' failed: Read-only file system [ 246.249665][T10803] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.1740: mark_inode_dirty error [ 246.249689][T10803] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 246.255449][T10803] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #12: comm syz.2.1740: corrupted inode contents [ 246.255477][T10803] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 246.304371][T10803] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 246.304397][T10803] loop2: lost filesystem error report for type 5 error -117 [ 246.304746][T10803] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #12: comm syz.2.1740: corrupted inode contents [ 246.304772][T10803] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 246.304981][T10803] EXT4-fs error (device loop2): ext4_truncate:4721: inode #12: comm syz.2.1740: mark_inode_dirty error [ 246.305004][T10803] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 246.306879][T10803] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 246.306900][T10803] loop2: lost filesystem error report for type 5 error -117 [ 246.309831][T10803] EXT4-fs (loop2): 1 truncate cleaned up [ 246.328027][T10803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 246.402776][ T31] audit: type=1800 audit(1787936407.731:108): pid=10810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1729" name="file2" dev="loop6" ino=1048692 res=0 errno=0 [ 246.406889][ T5644] udevd[5644]: symlink '../../loop6' '/dev/disk/by-diskseq/641.tmp-b7:6' failed: Read-only file system [ 246.418866][ T5644] udevd[5644]: symlink '../../loop6' '/dev/disk/by-label/SYZKALLER.tmp-b7:6' failed: Read-only file system [ 246.425652][T10810] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 246.425678][T10810] FAT-fs (loop6): Filesystem has been set read-only [ 246.425830][T10810] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 246.425852][T10810] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 246.425873][T10810] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 246.425893][T10810] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 246.425913][T10810] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 246.425934][T10810] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 246.425954][T10810] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 246.425983][T10810] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 246.426040][T10810] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 246.429291][ T5644] udevd[5644]: symlink '../../loop6' '/dev/disk/by-uuid/1DD9-F30B.tmp-b7:6' failed: Read-only file system [ 246.473006][ T5628] udevd[5628]: symlink '../../loop1' '/dev/disk/by-diskseq/619.tmp-b7:1' failed: Read-only file system [ 246.481533][ T5633] udevd[5633]: symlink '../../loop0' '/dev/disk/by-diskseq/635.tmp-b7:0' failed: Read-only file system [ 246.622349][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.050665][T10831] loop3: detected capacity change from 0 to 256 [ 247.093793][T10831] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 247.094118][T10831] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 247.114123][ T5711] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 247.279265][ T5711] usb 3-1: Using ep0 maxpacket: 8 [ 247.286377][ T5711] usb 3-1: New USB device found, idVendor=045e, idProduct=0730, bcdDevice= 0.00 [ 247.297410][ T5617] Bluetooth: hci5: command tx timeout [ 247.309000][ T5711] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.309058][ T5711] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.309089][ T5711] usb 3-1: config 0 interface 0 has no altsetting 0 [ 247.309123][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.352461][ T5711] usb 3-1: config 0 descriptor?? [ 247.540638][T10840] loop1: detected capacity change from 0 to 512 [ 247.591584][T10840] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.1747: iget: bad i_size value: 38620345925642 [ 247.591636][T10840] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 247.593704][T10840] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.1747: couldn't read orphan inode 15 (err -117) [ 247.593734][T10840] loop1: lost filesystem error report for type 5 error -117 [ 247.604274][T10840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.746903][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.796436][ T5719] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 247.816062][T10829] loop0: detected capacity change from 0 to 32768 [ 247.833168][ T5711] input: HID 045e:0730 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:0730.0015/input/input14 [ 247.841469][T10829] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 247.903642][ T5711] microsoft 0003:045E:0730.0015: input,hidraw0: USB HID v0.00 Joystick [HID 045e:0730] on usb-dummy_hcd.2-1/input0 [ 247.916332][T10829] XFS (loop0): Ending clean mount [ 247.948634][ T5719] usb 7-1: Using ep0 maxpacket: 8 [ 247.955725][ T5719] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 247.966537][ T5719] usb 7-1: config 0 interface 0 has no altsetting 0 [ 247.966587][ T5719] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.991053][ T5719] usb 7-1: config 0 descriptor?? [ 248.075429][ T1218] usb 3-1: USB disconnect, device number 14 [ 248.076748][ T5613] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 248.143875][T10857] fido_id[10857]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 248.387339][T10862] loop0: detected capacity change from 0 to 2048 [ 248.434454][T10862] GPT:first_usable_lbas don't match. [ 248.444255][T10862] GPT:34 != 290 [ 248.444299][T10862] GPT: Use GNU Parted to correct GPT errors. [ 248.444402][T10862] loop0: p1 p2 p3 [ 248.461946][ T5719] isku 0003:1E7D:3264.0016: unknown main item tag 0x0 [ 248.471138][ T5719] isku 0003:1E7D:3264.0016: unknown main item tag 0x1 [ 248.478091][ T5719] isku 0003:1E7D:3264.0016: unknown main item tag 0x0 [ 248.485003][ T5719] isku 0003:1E7D:3264.0016: unknown main item tag 0x5 [ 248.491958][ T5719] isku 0003:1E7D:3264.0016: unknown main item tag 0x6 [ 248.506449][ T5719] isku 0003:1E7D:3264.0016: hidraw0: USB HID v2.81 Device [HID 1e7d:3264] on usb-dummy_hcd.6-1/input0 [ 248.534248][ T4984] GPT:first_usable_lbas don't match. [ 248.534280][ T4984] GPT:34 != 290 [ 248.534303][ T4984] GPT: Use GNU Parted to correct GPT errors. [ 248.534407][ T4984] loop0: p1 p2 p3 [ 248.688518][ T1218] usb 7-1: USB disconnect, device number 2 [ 248.955805][T10876] fido_id[10876]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 249.137197][T10886] loop0: detected capacity change from 0 to 8192 [ 249.171858][T10886] Dev loop0: RDB in block 1 has bad checksum [ 249.256206][ T1218] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 249.378158][ T5617] Bluetooth: hci5: command tx timeout [ 249.406228][ T1218] usb 3-1: Using ep0 maxpacket: 16 [ 249.416691][ T1218] usb 3-1: unable to get BOS descriptor or descriptor too short [ 249.416756][ T1218] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 249.420949][ T1218] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.421023][ T1218] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.430419][ T1218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.430442][ T1218] usb 3-1: Product: syz [ 249.430456][ T1218] usb 3-1: Manufacturer: syz [ 249.430469][ T1218] usb 3-1: SerialNumber: syz [ 249.752698][ T1218] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 249.753419][ T1218] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 249.943778][ T1218] usb 3-1: 2:1 : can't get High Capability descriptor [ 250.083069][T10921] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1779'. [ 250.139955][T10923] vim2m vim2m.0: vidioc_s_fmt queue busy [ 250.149065][T10926] loop6: detected capacity change from 0 to 64 [ 250.188380][ T5719] usb 3-1: USB disconnect, device number 15 [ 250.305997][T10927] loop1: detected capacity change from 0 to 4096 [ 250.381039][T10934] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 251.062312][T10933] loop0: detected capacity change from 0 to 32768 [ 251.074469][T10933] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1786 (10933) [ 251.098768][ T5644] udevd[5644]: symlink '../../loop1' '/dev/disk/by-diskseq/655.tmp-b7:1' failed: Read-only file system [ 251.111324][T10933] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 251.123487][ T5644] udevd[5644]: symlink '../../loop1' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:1' failed: Read-only file system [ 251.130614][T10933] BTRFS info (device loop0): using crc32c checksum algorithm [ 251.200725][ T5644] udevd[5644]: symlink '../../loop1' '/dev/disk/by-diskseq/655.tmp-b7:1' failed: Read-only file system [ 251.211865][ T5633] udevd[5633]: symlink '../../loop3' '/dev/disk/by-diskseq/644.tmp-b7:3' failed: Read-only file system [ 251.248872][ T5644] udevd[5644]: symlink '../../loop1' '/dev/disk/by-diskseq/655.tmp-b7:1' failed: Read-only file system [ 251.289837][T10968] loop1: detected capacity change from 0 to 128 [ 251.359448][T10933] BTRFS info (device loop0): enabling ssd optimizations [ 251.370187][T10933] BTRFS info (device loop0): turning on flush-on-commit [ 251.370236][T10933] BTRFS info (device loop0): enabling free space tree [ 251.370257][T10933] BTRFS info (device loop0): enabling auto defrag [ 251.370279][T10933] BTRFS info (device loop0): use lzo compression, level 1 [ 251.370302][T10933] BTRFS info (device loop0): max_inline set to 0 [ 251.399730][ T31] audit: type=1800 audit(1787936412.731:109): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1795" name="file2" dev="loop1" ino=1048694 res=0 errno=0 [ 251.409951][T10968] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 251.409977][T10968] FAT-fs (loop1): Filesystem has been set read-only [ 251.410150][T10968] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 251.410172][T10968] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 251.410193][T10968] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 251.410213][T10968] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 251.410233][T10968] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) ** replaying previous printk message ** [ 251.410233][T10968] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 251.410255][T10968] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 251.410274][T10968] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 251.410295][T10968] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 251.410377][T10968] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 251.459086][T10967] loop3: detected capacity change from 0 to 64 [ 251.465722][ T5628] udevd[5628]: symlink '../../loop0' '/dev/disk/by-diskseq/657.tmp-b7:0' failed: Read-only file system [ 251.481046][ T5628] udevd[5628]: symlink '../../loop0' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:0' failed: Read-only file system [ 251.500440][T10967] [ 251.587490][T10967] ====================================================== [ 251.591177][ T5644] udevd[5644]: symlink '../../loop1' '/dev/disk/by-diskseq/659.tmp-b7:1' failed: Read-only file system [ 251.592069][ T5644] udevd[5644]: symlink '../../loop1' '/dev/disk/by-label/SYZKALLER.tmp-b7:1' failed: Read-only file system [ 251.592935][ T5644] udevd[5644]: symlink '../../loop1' '/dev/disk/by-uuid/1DD9-F30B.tmp-b7:1' failed: Read-only file system [ 251.628086][T10967] WARNING: possible circular locking dependency detected [ 251.635116][T10967] syzkaller #0 Tainted: G L [ 251.641089][T10967] ------------------------------------------------------ [ 251.648100][T10967] syz.3.1794/10967 is trying to acquire lock: [ 251.654159][T10967] ffff8880542be0a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x18d/0x300 [ 251.663677][T10967] [ 251.663677][T10967] but task is already holding lock: [ 251.671033][T10967] ffff8880528e80a0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_get_block+0x25c/0xbf0 [ 251.681662][T10967] [ 251.681662][T10967] which lock already depends on the new lock. [ 251.681662][T10967] [ 251.692066][T10967] [ 251.692066][T10967] the existing dependency chain (in reverse order) is: [ 251.701082][T10967] [ 251.701082][T10967] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 251.710297][T10967] __mutex_lock+0x19d/0x1550 [ 251.715413][T10967] hfs_extend_file+0xf9/0x1680 [ 251.720702][T10967] hfs_bmap_reserve+0x108/0x430 [ 251.726082][T10967] __hfs_ext_write_extent+0x1fc/0x470 [ 251.731976][T10967] __hfs_ext_cache_extent+0x6e/0x9b0 [ 251.737785][T10967] hfs_extend_file+0x3ad/0x1680 [ 251.743162][T10967] hfs_get_block+0x401/0xbf0 [ 251.748269][T10967] __block_write_begin_int+0x6c2/0x1900 [ 251.754338][T10967] cont_write_begin+0x71b/0xac0 [ 251.759704][T10967] hfs_write_begin+0x123/0x1c0 [ 251.764980][T10967] generic_perform_write+0x2d5/0x8f0 [ 251.770797][T10967] generic_file_write_iter+0xae/0x330 [ 251.776693][T10967] vfs_write+0x612/0xba0 [ 251.781467][T10967] ksys_write+0x150/0x270 [ 251.786325][T10967] do_syscall_64+0x166/0x520 [ 251.791437][T10967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.797852][T10967] [ 251.797852][T10967] -> #0 (&tree->tree_lock#2/1){+.+.}-{4:4}: [ 251.805938][T10967] __lock_acquire+0x15ff/0x2e50 [ 251.811313][T10967] lock_acquire+0x115/0x350 [ 251.816331][T10967] __mutex_lock+0x19d/0x1550 [ 251.821445][T10967] hfs_find_init+0x18d/0x300 [ 251.826565][T10967] hfs_get_block+0x4fd/0xbf0 [ 251.831677][T10967] block_read_full_folio+0x29f/0x810 [ 251.837489][T10967] filemap_read_folio+0x12c/0x3a0 [ 251.843045][T10967] do_read_cache_folio+0x354/0x590 [ 251.848694][T10967] read_cache_page+0x5d/0x170 [ 251.853899][T10967] __hfs_bnode_create+0x4ad/0x970 [ 251.859451][T10967] hfs_bnode_find+0x20e/0xcf0 [ 251.864650][T10967] hfs_btree_open+0x1428/0x1f50 [ 251.870029][T10967] hfs_mdb_get+0x1552/0x2130 [ 251.875144][T10967] hfs_fill_super+0x482/0x7b0 [ 251.880343][T10967] get_tree_bdev_flags+0x430/0x4f0 [ 251.885974][T10967] vfs_get_tree+0x92/0x2a0 [ 251.890911][T10967] do_new_mount+0x319/0xdc0 [ 251.895942][T10967] __se_sys_mount+0x31d/0x420 [ 251.901131][T10967] do_syscall_64+0x166/0x520 [ 251.906230][T10967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.912628][T10967] [ 251.912628][T10967] other info that might help us debug this: [ 251.912628][T10967] [ 251.922835][T10967] Possible unsafe locking scenario: [ 251.922835][T10967] [ 251.930263][T10967] CPU0 CPU1 [ 251.935620][T10967] ---- ---- [ 251.940968][T10967] lock(&HFS_I(tree->inode)->extents_lock); [ 251.946940][T10967] lock(&tree->tree_lock#2/1); [ 251.954312][T10967] lock(&HFS_I(tree->inode)->extents_lock); [ 251.962796][T10967] lock(&tree->tree_lock#2/1); [ 251.967644][T10967] [ 251.967644][T10967] *** DEADLOCK *** [ 251.967644][T10967] [ 251.975769][T10967] locks held by syz.3.1794/10967: 3, last CPU#1: [ 251.982079][T10967] #0: ffff8880299ec0e8 (&type->s_umount_key#88/1){+.+.}-{4:4}, at: sget_fc+0x97c/0x1a40 [ 251.991919][T10967] #1: ffff88802552b060 (&sbi->mdb_lock){+.+.}-{4:4}, at: hfs_fill_super+0x47a/0x7b0 [ 252.001396][T10967] #2: ffff8880528e80a0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_get_block+0x25c/0xbf0 [ 252.012430][T10967] [ 252.012430][T10967] stack backtrace: [ 252.018305][T10967] CPU: 1 UID: 0 PID: 10967 Comm: syz.3.1794 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.029226][T10967] Tainted: [L]=SOFTLOCKUP [ 252.033532][T10967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.043587][T10967] Call Trace: [ 252.046858][T10967] [ 252.049774][T10967] dump_stack_lvl+0xe8/0x150 [ 252.054359][T10967] print_circular_bug+0x2e2/0x300 [ 252.059380][T10967] check_noncircular+0x12f/0x150 [ 252.064313][T10967] __lock_acquire+0x15ff/0x2e50 [ 252.069151][T10967] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 252.074956][T10967] ? kasan_save_track+0x4f/0x80 [ 252.079789][T10967] ? kasan_save_track+0x3e/0x80 [ 252.084624][T10967] ? __kasan_kmalloc+0x93/0xb0 [ 252.089376][T10967] ? __kmalloc_noprof+0x36b/0x720 [ 252.094396][T10967] ? hfs_find_init+0x9d/0x300 [ 252.099062][T10967] ? hfs_get_block+0x4fd/0xbf0 [ 252.103812][T10967] ? block_read_full_folio+0x29f/0x810 [ 252.109258][T10967] ? filemap_read_folio+0x12c/0x3a0 [ 252.114449][T10967] lock_acquire+0x115/0x350 [ 252.118937][T10967] ? hfs_find_init+0x18d/0x300 [ 252.123698][T10967] __mutex_lock+0x19d/0x1550 [ 252.128274][T10967] ? hfs_find_init+0x18d/0x300 [ 252.133035][T10967] ? hfs_find_init+0x18d/0x300 [ 252.137788][T10967] ? __pfx___mutex_lock+0x10/0x10 [ 252.142798][T10967] ? rcu_is_watching+0x16/0xb0 [ 252.147554][T10967] ? trace_kmalloc+0x2a/0xf0 [ 252.152144][T10967] ? __kmalloc_noprof+0x38c/0x720 [ 252.157164][T10967] ? __kmalloc_noprof+0x1ab/0x720 [ 252.162181][T10967] ? hfs_find_init+0x9d/0x300 [ 252.166849][T10967] hfs_find_init+0x18d/0x300 [ 252.171433][T10967] hfs_get_block+0x4fd/0xbf0 [ 252.176015][T10967] ? __pfx_hfs_get_block+0x10/0x10 [ 252.181118][T10967] ? _raw_spin_unlock+0x28/0x50 [ 252.185961][T10967] ? create_empty_buffers+0x460/0x520 [ 252.191326][T10967] block_read_full_folio+0x29f/0x810 [ 252.196605][T10967] ? __pfx_hfs_get_block+0x10/0x10 [ 252.201702][T10967] filemap_read_folio+0x12c/0x3a0 [ 252.206719][T10967] ? __pfx_hfs_read_folio+0x10/0x10 [ 252.211902][T10967] ? __pfx_filemap_read_folio+0x10/0x10 [ 252.217441][T10967] ? filemap_add_folio+0x336/0x4e0 [ 252.222541][T10967] do_read_cache_folio+0x354/0x590 [ 252.227643][T10967] ? __pfx_hfs_read_folio+0x10/0x10 [ 252.232828][T10967] read_cache_page+0x5d/0x170 [ 252.237498][T10967] __hfs_bnode_create+0x4ad/0x970 [ 252.242523][T10967] ? __pfx___hfs_bnode_create+0x10/0x10 [ 252.248060][T10967] ? do_raw_spin_lock+0x12b/0x2f0 [ 252.253081][T10967] ? do_raw_spin_unlock+0xf5/0x200 [ 252.258184][T10967] hfs_bnode_find+0x20e/0xcf0 [ 252.262857][T10967] ? out_of_line_wait_on_bit+0x13b/0x190 [ 252.268477][T10967] ? __pfx_bit_wait_io+0x10/0x10 [ 252.273401][T10967] ? __pfx_hfs_bnode_find+0x10/0x10 [ 252.278591][T10967] ? __pfx_wake_bit_function+0x10/0x10 [ 252.284046][T10967] ? __bread_gfp+0x233/0x380 [ 252.288629][T10967] hfs_btree_open+0x1428/0x1f50 [ 252.293481][T10967] hfs_mdb_get+0x1552/0x2130 [ 252.298063][T10967] ? __pfx_hfs_mdb_get+0x10/0x10 [ 252.302992][T10967] ? mutex_init_lockdep+0xdf/0x110 [ 252.308098][T10967] hfs_fill_super+0x482/0x7b0 [ 252.312765][T10967] ? __pfx_hfs_fill_super+0x10/0x10 [ 252.317959][T10967] ? sb_set_blocksize+0x155/0x240 [ 252.322978][T10967] ? setup_bdev_super+0x586/0x680 [ 252.328002][T10967] get_tree_bdev_flags+0x430/0x4f0 [ 252.333114][T10967] ? __pfx_hfs_fill_super+0x10/0x10 [ 252.338301][T10967] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 252.343938][T10967] vfs_get_tree+0x92/0x2a0 [ 252.348337][T10967] do_new_mount+0x319/0xdc0 [ 252.352836][T10967] ? __pfx_do_new_mount+0x10/0x10 [ 252.357856][T10967] ? ns_capable+0x89/0xe0 [ 252.362179][T10967] ? path_mount+0x647/0x1050 [ 252.366760][T10967] ? user_path_at+0xd4/0x160 [ 252.371346][T10967] __se_sys_mount+0x31d/0x420 [ 252.376019][T10967] ? __pfx___se_sys_mount+0x10/0x10 [ 252.381212][T10967] ? __x64_sys_mount+0x20/0xc0 [ 252.385967][T10967] do_syscall_64+0x166/0x520 [ 252.390544][T10967] ? trace_irq_disable+0x3b/0x140 [ 252.395557][T10967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.401609][T10967] ? clear_bhb_loop+0x70/0xc0 [ 252.406273][T10967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.412151][T10967] RIP: 0033:0x7f4a4419f3ca [ 252.416553][T10967] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.436147][T10967] RSP: 002b:00007f4a44fcbe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 252.444552][T10967] RAX: ffffffffffffffda RBX: 00007f4a44fcbee0 RCX: 00007f4a4419f3ca [ 252.452511][T10967] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f4a44fcbea0 [ 252.460478][T10967] RBP: 0000200000000180 R08: 00007f4a44fcbee0 R09: 0000000001004002 [ 252.468436][T10967] R10: 0000000001004002 R11: 0000000000000246 R12: 0000200000000000 [ 252.476393][T10967] R13: 00007f4a44fcbea0 R14: 0000000000000319 R15: 0000200000000040 [ 252.484359][T10967] [ 252.539257][T10967] hfs: unable to open catalog tree [ 252.539282][T10967] hfs: can't find a HFS filesystem on dev loop3 [ 252.590247][ T5613] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 255.630925][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.637459][ T1311] ieee802154 phy1 wpan1: encryption failed: -22