last executing test programs: 3.258264228s ago: executing program 3 (id=8560): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x24008800) 3.224983059s ago: executing program 2 (id=8561): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001080), 0x40, 0x0) preadv(r0, &(0x7f0000009980)=[{0x0}, {&(0x7f0000008480)=""/10, 0xa}], 0x2, 0x1, 0x1ff) 3.11361867s ago: executing program 3 (id=8564): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}, {0x7}, {}, {0x0, 0x9}, {0x0, 0x1}, {}, {0x0, 0x7}], 0x20}) 3.048822592s ago: executing program 2 (id=8565): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) 2.940659834s ago: executing program 3 (id=8567): unshare(0x26000400) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x40045d6, 0x2}) 2.862826604s ago: executing program 2 (id=8568): r0 = socket(0x10, 0x803, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f00000002c0)) 2.768305696s ago: executing program 3 (id=8569): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f00000", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.667848707s ago: executing program 2 (id=8571): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 2.563423039s ago: executing program 2 (id=8573): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xec, 0x62, 0xf9, 0x40, 0xf3d, 0x68aa, 0xb4ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x3, 0xf, 0x1f, 0xe7, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x8, 0x0, 0x3, 0x1}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x2, 0x86, 0x3}}, {{0x9, 0x5, 0x87, 0x2, 0x400, 0xb, 0x7f, 0x14}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.370855522s ago: executing program 3 (id=8575): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000006c0)={[{@gquota}, {@nolargeio}, {@uqnoenforce}]}, 0x1, 0x9793, &(0x7f0000012f40)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000580)={0x1, 0x51, 0x0, 0x6}) 1.916008409s ago: executing program 0 (id=8577): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 1.765516922s ago: executing program 0 (id=8578): open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000280)='./bus\x00', &(0x7f0000000000)='omfs\x00', 0x8004, 0x0) 1.563095735s ago: executing program 0 (id=8579): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x209, 0x4) 1.367922688s ago: executing program 0 (id=8580): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000100)={[{@nodiscard}, {@nocheckpoint_merge}, {@discard_unit_block}, {@six_active_logs}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x1f}}, {@discard}, {@noacl}, {@fsync_mode_posix}, {@alloc_mode_def}, {@discard_unit_block}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xfdffff}}]}, 0x1, 0x5517, &(0x7f0000005880)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x28040, 0x0) 1.324361229s ago: executing program 1 (id=8581): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x418, &(0x7f0000002600)=ANY=[@ANYRES8=0x0], 0xff, 0x6a8, &(0x7f0000001dc0)="$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") mknod$loop(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) 1.063342062s ago: executing program 3 (id=8582): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f00000008c0)={[{@shortname_win95}, {@shortname_lower}, {@utf8}, {@shortname_win95}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@utf8no}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {}, {@utf8no}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_win95}, {@shortname_winnt}]}, 0x1, 0x27b, &(0x7f0000000640)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 743.338928ms ago: executing program 1 (id=8583): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, 0x0) 616.045ms ago: executing program 2 (id=8584): r0 = syz_mount_image$xfs(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000300)={[{@swalloc}, {@dax}, {@grpid}]}, 0x0, 0x9732, &(0x7f0000013240)="$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") ioctl$FS_IOC_GETFSMAP(r0, 0x80205871, &(0x7f00000000c0)=ANY=[]) 516.308351ms ago: executing program 1 (id=8585): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x62}, &(0x7f0000000180)=0x8) 505.829681ms ago: executing program 0 (id=8586): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef0000060003"], 0x24}}, 0x0) 418.497273ms ago: executing program 1 (id=8587): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000002b40)={0x24, @short={0x2, 0x1, 0xfffe}}, 0x14) 228.434546ms ago: executing program 1 (id=8588): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8a042, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='trylock me'], 0xc) 54.416808ms ago: executing program 0 (id=8589): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000700)={[{@quota}, {@dioread_nolock}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4e1, &(0x7f0000000b00)="$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") lchown(&(0x7f0000000000)='./file0\x00', 0xee01, 0x0) 0s ago: executing program 1 (id=8590): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@utf8no}, {@rodir}, {@fat=@nfs}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@utf8no}, {@uni_xlate}, {@shortname_winnt}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@shortname_lower}, {@fat=@check_strict}, {@shortname_winnt}, {@uni_xlate}]}, 0x26, 0x336, &(0x7f00000001c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): ptors missing [ 943.577195][ T9] usb 3-1: USB disconnect, device number 27 [ 943.583028][ T5893] cdc_ncm 2-1:1.1: bind() failure [ 943.653402][ T7543] udevd[7543]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 943.656697][ T5916] em28xx 1-1:0.232: reading from i2c device at 0xa0 failed (error=-5) [ 943.698929][ T5916] em28xx 1-1:0.232: board has no eeprom [ 943.780273][ T5916] em28xx 1-1:0.232: Identified as Hauppauge WinTV HVR 950 (card=16) [ 943.792757][ T5916] em28xx 1-1:0.232: analog set to bulk mode. [ 943.799898][ T5879] em28xx 1-1:0.232: Registering V4L2 extension [ 943.823445][ T5916] usb 1-1: USB disconnect, device number 121 [ 943.830405][ T5916] em28xx 1-1:0.232: Disconnecting em28xx [ 943.888892][ T5892] usb 2-1: USB disconnect, device number 13 [ 944.017231][ T5879] em28xx 1-1:0.232: Config register raw data: 0xffffffed [ 944.025010][ T5879] em28xx 1-1:0.232: AC97 chip type couldn't be determined [ 944.036014][ T5879] em28xx 1-1:0.232: No AC97 audio processor [ 944.057831][ T5879] usb 1-1: Decoder not found [ 944.064302][ T5879] em28xx 1-1:0.232: failed to create media graph [ 944.074556][ T5879] em28xx 1-1:0.232: V4L2 device video103 deregistered [ 944.089281][ T5879] em28xx 1-1:0.232: Binding DVB extension [ 944.099137][ T5879] em28xx 1-1:0.232: no endpoint for DVB mode and transfer type 0 [ 944.120088][ T5879] em28xx 1-1:0.232: failed to pre-allocate USB transfer buffers for DVB. [ 944.137807][ T5879] em28xx 1-1:0.232: Registering input extension [ 944.175450][ T5916] em28xx 1-1:0.232: Closing input extension [ 944.208243][ T5916] em28xx 1-1:0.232: Freeing device [ 944.271936][T23334] loop0: detected capacity change from 0 to 1024 [ 944.315768][T23334] EXT4-fs: Ignoring removed nobh option [ 944.340483][T23334] EXT4-fs: Ignoring removed nobh option [ 944.373046][T23334] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 944.404713][T23334] EXT4-fs error (device loop0): ext4_get_journal_inode:5805: comm syz.0.7588: inode #4294967295: comm syz.0.7588: iget: illegal inode # [ 944.469773][T23334] EXT4-fs (loop0): no journal found [ 944.475052][T23334] EXT4-fs (loop0): can't get journal size [ 944.551722][T23334] EXT4-fs (loop0): failed to initialize system zone (-22) [ 944.572574][T23334] EXT4-fs (loop0): mount failed [ 944.708031][T23342] loop1: detected capacity change from 0 to 2048 [ 944.796970][T23342] NILFS (loop1): too small inode size: 0 bytes [ 944.954719][T23329] loop3: detected capacity change from 0 to 65536 [ 945.056388][T23329] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel. [ 945.153132][T23354] loop1: detected capacity change from 0 to 2048 [ 945.648140][T23374] loop3: detected capacity change from 0 to 128 [ 945.716141][T23374] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4634: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 945.804868][T23374] EXT4-fs (loop3): Test dummy encryption mode enabled [ 945.823631][T23374] EXT4-fs (loop3): Encoding requested by superblock is unknown [ 945.862888][T23376] loop1: detected capacity change from 0 to 4096 [ 945.902549][T23376] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 945.936535][T23376] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 945.957073][T23376] ntfs3: loop1: try to read out of volume at offset 0x1ff000 [ 946.008409][T23376] ntfs3: loop1: Failed to load $MFT. [ 946.277727][T23384] loop2: detected capacity change from 0 to 4096 [ 946.346365][T23384] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 946.379262][T23384] ntfs3: loop2: Failed to load $Volume (-22). [ 946.859250][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 946.913805][T23389] loop0: detected capacity change from 0 to 32768 [ 946.941286][T23389] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.7611 (23389) [ 946.954089][T23391] loop1: detected capacity change from 0 to 32768 [ 946.965595][T23386] loop3: detected capacity change from 0 to 32768 [ 946.967854][T23389] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 946.978531][T23391] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 8 /dev/loop1 scanned by syz.1.7612 (23391) [ 946.998766][T23389] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 947.008704][T23389] BTRFS info (device loop0): using free space tree [ 947.028949][T23386] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.7610 (23386) [ 947.044184][T23391] BTRFS info (device loop1): first mount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 947.054744][T23391] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 947.063565][T23391] BTRFS info (device loop1): using free space tree [ 947.073706][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 947.082252][ T9] usb 3-1: config 0 has an invalid interface number: 60 but max is 0 [ 947.092301][ T9] usb 3-1: config 0 has no interface number 0 [ 947.102096][T23386] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 947.145113][T23386] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 947.154467][T23386] BTRFS info (device loop3): using free space tree [ 947.164021][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 947.218016][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.276862][ T9] usb 3-1: Product: syz [ 947.281197][T23391] BTRFS info (device loop1): enabling ssd optimizations [ 947.292153][T23389] BTRFS info (device loop0): enabling ssd optimizations [ 947.308228][T23391] BTRFS info (device loop1): auto enabling async discard [ 947.310701][ T9] usb 3-1: Manufacturer: syz [ 947.335553][T23389] BTRFS info (device loop0): auto enabling async discard [ 947.350094][ T9] usb 3-1: SerialNumber: syz [ 947.350116][T23386] BTRFS info (device loop3): enabling ssd optimizations [ 947.368804][ T9] usb 3-1: config 0 descriptor?? [ 947.404175][ T9] gspca_main: spca500-2.14.0 probing 046d:0900 [ 947.407558][T23386] BTRFS info (device loop3): auto enabling async discard [ 947.496126][ T5819] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 947.517728][ T5826] BTRFS info (device loop1): last unmount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 947.662982][ T9] gspca_spca500: reg write: error -71 [ 947.668226][ T5827] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 947.691818][ T9] gspca_spca500: reg write: error -71 [ 947.720696][ T9] gspca_spca500: reg write: error -71 [ 947.741152][ T9] gspca_spca500: reg write: error -71 [ 947.769377][ T9] gspca_spca500: reg write: error -71 [ 947.792167][ T9] gspca_spca500: reg write: error -71 [ 947.832225][ T7544] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 9 /dev/loop0 scanned by udevd (7544) [ 947.846987][ T9] gspca_spca500: reg write: error -71 [ 947.885616][ T9] gspca_spca500: reg write: error -71 [ 947.892641][ T9] gspca_spca500: reg write: error -71 [ 947.919337][ T9] gspca_spca500: reg write: error -71 [ 947.946537][ T9] gspca_spca500: reg write: error -71 [ 947.971130][ T9] gspca_spca500: reg write: error -71 [ 947.981783][ T9] gspca_spca500: reg write: error -71 [ 948.024667][ T9] gspca_spca500: reg write: error -71 [ 948.068617][ T9] usb 3-1: USB disconnect, device number 28 [ 948.843083][T23444] loop1: detected capacity change from 0 to 32768 [ 948.899158][T23444] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 scanned by syz.1.7615 (23444) [ 948.964930][T23444] BTRFS info (device loop1): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 948.992186][T23444] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 949.017430][T23444] BTRFS info (device loop1): using free space tree [ 949.215100][T23456] loop0: detected capacity change from 0 to 32768 [ 949.222049][T23444] BTRFS info (device loop1): enabling ssd optimizations [ 949.243439][T23456] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop0 scanned by syz.0.7619 (23456) [ 949.256001][T23444] BTRFS info (device loop1): auto enabling async discard [ 949.299540][T23449] loop3: detected capacity change from 0 to 32768 [ 949.319949][T23456] BTRFS info (device loop0): first mount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 949.345469][T23456] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 949.361052][T23449] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop3 scanned by syz.3.7616 (23449) [ 949.383196][T23456] BTRFS info (device loop0): using free space tree [ 949.394782][ T5826] BTRFS info (device loop1): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 949.432215][T23449] BTRFS info (device loop3): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 949.486916][T23449] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 949.558427][T23454] loop2: detected capacity change from 0 to 32768 [ 949.560159][T23449] BTRFS info (device loop3): using free space tree [ 949.573558][T23454] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.7618 (23454) [ 949.623671][T23454] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 949.684534][T23454] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 949.722532][T23454] BTRFS info (device loop2): using free space tree [ 949.821927][T23449] BTRFS info (device loop3): enabling ssd optimizations [ 949.843434][T23449] BTRFS info (device loop3): auto enabling async discard [ 949.887183][T23456] BTRFS info (device loop0): enabling ssd optimizations [ 949.894238][T23456] BTRFS info (device loop0): auto enabling async discard [ 950.015302][T23454] BTRFS info (device loop2): enabling ssd optimizations [ 950.064433][T23454] BTRFS info (device loop2): auto enabling async discard [ 950.099001][ T5827] BTRFS info (device loop3): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 950.130054][ T5819] BTRFS info (device loop0): last unmount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 950.278931][ T5823] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 950.603567][T23527] loop3: detected capacity change from 0 to 8 [ 950.708322][T23527] SQUASHFS error: lzo decompression failed, data probably corrupt [ 950.717110][T23527] SQUASHFS error: Failed to read block 0x91: -5 [ 950.772282][T23527] SQUASHFS error: Unable to read metadata cache entry [8f] [ 950.783433][T23527] SQUASHFS error: Unable to read inode 0x11f [ 950.953769][ T5916] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 951.155951][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 951.170622][ T5916] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.188962][ T5892] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 951.195758][T23524] loop1: detected capacity change from 0 to 32768 [ 951.221098][ T5916] usb 3-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 951.240127][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.253272][T23524] BTRFS: device fsid f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 devid 1 transid 8 /dev/loop1 scanned by syz.1.7623 (23524) [ 951.285282][ T5916] usb 3-1: Product: syz [ 951.297825][ T5916] usb 3-1: Manufacturer: syz [ 951.304028][T23524] BTRFS info (device loop1): first mount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 951.312284][ T5916] usb 3-1: SerialNumber: syz [ 951.339587][T23524] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 951.345356][ T5916] usb 3-1: config 0 descriptor?? [ 951.377991][T23524] BTRFS info (device loop1): using free space tree [ 951.387275][ T5916] cdc_phonet: probe of 3-1:0.0 failed with error -22 [ 951.448198][ T5892] usb 1-1: unable to get BOS descriptor or descriptor too short [ 951.459557][ T5892] usb 1-1: not running at top speed; connect to a high speed hub [ 951.470929][ T5892] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 951.509592][ T5892] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 951.530681][ T5892] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 47, using maximum allowed: 30 [ 951.542980][ T5892] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 951.553084][ T5892] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 47 [ 951.589360][ T5892] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 951.622409][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.638038][T23524] BTRFS info (device loop1): enabling ssd optimizations [ 951.645043][T23524] BTRFS info (device loop1): auto enabling async discard [ 951.668171][ T5892] usb 1-1: Product: syz [ 951.702593][ T5892] usb 1-1: Manufacturer: syz [ 951.707264][ T5892] usb 1-1: SerialNumber: syz [ 951.718832][ T5916] usb 3-1: USB disconnect, device number 29 [ 951.825948][ T5826] BTRFS info (device loop1): last unmount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 951.926670][T23537] loop3: detected capacity change from 0 to 32768 [ 951.958613][T23537] BTRFS: device fsid 8f67342e-760a-4d9f-bdfe-dfdef307742f devid 1 transid 8 /dev/loop3 scanned by syz.3.7627 (23537) [ 952.004107][ T5892] usb 1-1: 0:2 : does not exist [ 952.031484][T23537] BTRFS info (device loop3): first mount of filesystem 8f67342e-760a-4d9f-bdfe-dfdef307742f [ 952.053484][ T5892] usb 1-1: USB disconnect, device number 122 [ 952.054667][T23537] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 952.117882][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 952.141612][T23537] BTRFS info (device loop3): using free space tree [ 952.311249][T23537] BTRFS info (device loop3): enabling ssd optimizations [ 952.332458][T23537] BTRFS info (device loop3): auto enabling async discard [ 952.400621][T10930] BTRFS: device fsid f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 devid 1 transid 9 /dev/loop1 scanned by udevd (10930) [ 952.471160][T23576] overlayfs: failed to resolve './file0': -2 [ 952.494532][T23578] loop2: detected capacity change from 0 to 720 [ 952.577758][ T5827] BTRFS info (device loop3): last unmount of filesystem 8f67342e-760a-4d9f-bdfe-dfdef307742f [ 952.587593][ T5820] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 952.830269][T23583] loop2: detected capacity change from 0 to 128 [ 952.974619][T23587] loop0: detected capacity change from 0 to 16 [ 952.996236][T18257] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 953.007175][T23587] erofs: (device loop0): mounted with root inode @ nid 36. [ 953.111459][T23589] loop2: detected capacity change from 0 to 16 [ 953.150033][T23589] erofs: (device loop2): mounted with root inode @ nid 36. [ 953.188273][ T5892] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 953.236746][T18257] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 953.271214][T18257] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 953.295872][T18257] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 953.328894][T18257] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 953.360048][T18257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 953.364484][T23593] loop2: detected capacity change from 0 to 16 [ 953.381136][T18257] usb 2-1: SerialNumber: syz [ 953.408046][T23593] erofs: (device loop2): mounted with root inode @ nid 36. [ 953.435734][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.447644][ T5892] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 953.467693][ T5892] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 953.480518][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 953.491328][ T5892] usb 4-1: SerialNumber: syz [ 953.509452][ T5892] usb 4-1: config 0 descriptor?? [ 953.519599][ T5816] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 953.645582][T18257] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 953.674590][T18257] usb 2-1: USB disconnect, device number 14 [ 953.686943][T23595] loop2: detected capacity change from 0 to 16 [ 953.718033][T23595] erofs: (device loop2): mounted with root inode @ nid 36. [ 953.738234][ T5816] usb 1-1: Using ep0 maxpacket: 16 [ 953.751043][ T5816] usb 1-1: config 0 has an invalid interface number: 60 but max is 0 [ 953.769955][ T5892] usb 4-1: 0:2 : does not exist [ 953.778212][ T5816] usb 1-1: config 0 has no interface number 0 [ 953.786954][ T5892] usb 4-1: unit 203 not found! [ 953.790563][ T5816] usb 1-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 953.810937][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.819961][ T5816] usb 1-1: Product: syz [ 953.824163][ T5816] usb 1-1: Manufacturer: syz [ 953.828958][ T5816] usb 1-1: SerialNumber: syz [ 953.858401][ T5892] usb 4-1: USB disconnect, device number 21 [ 953.867962][ T5816] usb 1-1: config 0 descriptor?? [ 953.901592][ T7544] udevd[7544]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 953.922655][ T5816] gspca_main: spca500-2.14.0 probing 046d:0900 [ 954.142621][ T5816] gspca_spca500: reg write: error -71 [ 954.150761][ T5816] gspca_spca500: reg write: error -71 [ 954.156443][ T5816] gspca_spca500: reg write: error -71 [ 954.162528][ T5816] gspca_spca500: reg write: error -71 [ 954.168180][ T5816] gspca_spca500: reg write: error -71 [ 954.174185][ T5816] gspca_spca500: reg write: error -71 [ 954.179855][ T5816] gspca_spca500: reg write: error -71 [ 954.186141][ T5816] gspca_spca500: reg write: error -71 [ 954.191799][ T5816] gspca_spca500: reg write: error -71 [ 954.198410][ T5816] gspca_spca500: reg write: error -71 [ 954.204192][ T5879] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 954.204468][ T5816] gspca_spca500: reg write: error -71 [ 954.220961][ T5816] gspca_spca500: reg write: error -71 [ 954.228209][ T5816] gspca_spca500: reg write: error -71 [ 954.233976][ T5816] gspca_spca500: reg write: error -71 [ 954.243273][ T5816] usb 1-1: USB disconnect, device number 123 [ 954.368385][T23600] loop1: detected capacity change from 0 to 512 [ 954.417668][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 954.428879][ T5879] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 954.439654][ T5879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 954.450026][ T5879] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 954.460980][ T5879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 954.471052][ T5879] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 954.479668][T23600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 954.484078][ T5879] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 954.484106][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.534873][ T5879] usbtmc: probe of 3-1:16.0 failed with error -22 [ 954.558699][T23600] ext4 filesystem being mounted at /1894/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 954.634840][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.720834][T23607] loop1: detected capacity change from 0 to 1024 [ 954.746703][T23607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 954.834505][T18257] usb 3-1: USB disconnect, device number 30 [ 954.963165][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.034120][T23604] loop3: detected capacity change from 0 to 32768 [ 955.062881][T23604] BTRFS: device fsid a830dcec-d20e-42dc-8160-bf13f3286f97 devid 1 transid 8 /dev/loop3 scanned by syz.3.7642 (23604) [ 955.129972][T23604] BTRFS info (device loop3): first mount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97 [ 955.177262][T23604] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 955.212514][T23604] BTRFS info (device loop3): using free space tree [ 955.337910][T23610] loop0: detected capacity change from 0 to 32768 [ 955.344545][T23604] BTRFS info (device loop3): enabling ssd optimizations [ 955.348236][T23610] XFS: noikeep mount option is deprecated. [ 955.365737][T23604] BTRFS info (device loop3): auto enabling async discard [ 955.394080][T23610] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 955.517081][ T5827] BTRFS info (device loop3): last unmount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97 [ 955.568723][T23638] loop2: detected capacity change from 0 to 2048 [ 955.684845][T23610] XFS (loop0): invalid iclog size (4096 bytes), using lsunit (32768 bytes) [ 955.708723][T23638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 955.723249][T23610] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 955.740366][T23638] ext4 filesystem being mounted at /1854/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 955.803374][T23642] loop3: detected capacity change from 0 to 512 [ 955.871216][T23610] XFS (loop0): Starting recovery (logdev: internal) [ 955.885036][T23642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 955.903263][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.007674][T23610] XFS (loop0): Ending recovery (logdev: internal) [ 956.046730][T23645] loop2: detected capacity change from 0 to 512 [ 956.089942][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.109600][T23645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 956.122227][T23612] loop1: detected capacity change from 0 to 32768 [ 956.134465][T23612] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.7645 (23612) [ 956.240731][ T5819] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 956.257613][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.287281][T23612] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 956.317987][T23612] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 956.394573][T23648] loop3: detected capacity change from 0 to 512 [ 956.405301][T23612] BTRFS info (device loop1): enabling ssd optimizations [ 956.438098][T23612] BTRFS info (device loop1): using spread ssd allocation scheme [ 956.449129][T23612] BTRFS info (device loop1): disabling free space tree [ 956.456092][T23612] BTRFS info (device loop1): max_inline at 0 [ 956.463472][T23650] loop2: detected capacity change from 0 to 512 [ 956.508277][T23648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 956.531167][T23612] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 956.570643][T23612] BTRFS info (device loop1): use lzo compression, level 0 [ 956.579440][T23612] BTRFS info (device loop1): turning off barriers [ 956.586446][T23650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 956.602179][T23612] BTRFS error (device loop1): support for check_integrity* not compiled in! [ 956.612477][T23612] BTRFS error (device loop1): cannot disable free space tree [ 956.622862][T23612] BTRFS error (device loop1): open_ctree failed: -22 [ 956.760029][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.798920][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.964693][T23657] loop2: detected capacity change from 0 to 2048 [ 956.981109][T23655] loop0: detected capacity change from 0 to 1024 [ 957.106703][T23663] loop3: detected capacity change from 0 to 512 [ 957.114838][T23657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 957.183758][T23655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 957.218985][T23663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 957.425581][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.446432][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.514783][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.579261][T23659] loop1: detected capacity change from 0 to 32768 [ 957.633065][T23659] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.7654 (23659) [ 957.686438][T23669] loop0: detected capacity change from 0 to 512 [ 957.707204][T23659] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 957.747340][T23659] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 957.771654][T23669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 957.843933][T23669] ext4 filesystem being mounted at /1944/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 957.854794][T23659] BTRFS info (device loop1): using free space tree [ 958.045924][T23674] loop3: detected capacity change from 0 to 32768 [ 958.063304][T23674] BTRFS: device fsid d4515e72-4b5f-44ec-805d-b3edf811e7f1 devid 1 transid 8 /dev/loop3 scanned by syz.3.7657 (23674) [ 958.092800][T23674] BTRFS info (device loop3): first mount of filesystem d4515e72-4b5f-44ec-805d-b3edf811e7f1 [ 958.112782][T23659] BTRFS info (device loop1): enabling ssd optimizations [ 958.139990][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.154389][T23659] BTRFS info (device loop1): auto enabling async discard [ 958.162744][T23674] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 958.226561][T23674] BTRFS info (device loop3): using free space tree [ 958.426306][T23674] BTRFS info (device loop3): enabling ssd optimizations [ 958.433624][T23674] BTRFS info (device loop3): auto enabling async discard [ 958.465210][T23705] loop0: detected capacity change from 0 to 1024 [ 958.482444][ T5826] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 958.602908][ T5827] BTRFS info (device loop3): last unmount of filesystem d4515e72-4b5f-44ec-805d-b3edf811e7f1 [ 958.653303][T23705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 958.813635][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.090894][ T7544] BTRFS: device fsid d4515e72-4b5f-44ec-805d-b3edf811e7f1 devid 1 transid 9 /dev/loop3 scanned by udevd (7544) [ 959.120296][T23716] loop0: detected capacity change from 0 to 2048 [ 959.228928][T23716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 959.362309][T23670] loop2: detected capacity change from 0 to 32768 [ 959.424211][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.459673][T23670] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 959.507366][T23670] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 959.551829][T23713] loop1: detected capacity change from 0 to 32768 [ 959.569232][T23713] BTRFS: device fsid ed4422de-dbc1-4dc1-8d60-3583f36c24cc devid 1 transid 8 /dev/loop1 scanned by syz.1.7659 (23713) [ 959.651601][T23670] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 959.671784][T23713] BTRFS info (device loop1): first mount of filesystem ed4422de-dbc1-4dc1-8d60-3583f36c24cc [ 959.719682][ T5879] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 959.727029][ T5879] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 959.747390][T23713] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 959.788255][T23713] BTRFS info (device loop1): using free space tree [ 960.013161][ T5879] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 267ms [ 960.068475][T23713] BTRFS info (device loop1): enabling ssd optimizations [ 960.076503][ T5879] gfs2: fsid=syz:syz.0: jid=0: Done [ 960.081790][T23670] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 960.083486][T23713] BTRFS info (device loop1): auto enabling async discard [ 960.481382][ T5826] BTRFS info (device loop1): last unmount of filesystem ed4422de-dbc1-4dc1-8d60-3583f36c24cc [ 960.667026][T23731] loop3: detected capacity change from 0 to 32768 [ 960.730885][T23731] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.7664 (23731) [ 960.829134][T23731] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 960.866813][T23731] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 960.897347][T23731] BTRFS info (device loop3): using free space tree [ 961.024877][T23724] loop0: detected capacity change from 0 to 32768 [ 961.045908][T23724] BTRFS: device fsid e5ec6bdf-b4e4-4163-9622-8db3a33753bd devid 1 transid 8 /dev/loop0 scanned by syz.0.7663 (23724) [ 961.163663][T23731] BTRFS info (device loop3): enabling ssd optimizations [ 961.170727][T23731] BTRFS info (device loop3): auto enabling async discard [ 961.191858][T23724] BTRFS info (device loop0): first mount of filesystem e5ec6bdf-b4e4-4163-9622-8db3a33753bd [ 961.227570][T23724] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 961.258724][T23724] BTRFS info (device loop0): using free space tree [ 961.343804][T23744] loop2: detected capacity change from 0 to 32768 [ 961.378710][ T5827] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 961.452176][T23744] BTRFS: device fsid 9c2593b3-5c40-4e29-8ff3-7b58260955bc devid 1 transid 8 /dev/loop2 scanned by syz.2.7665 (23744) [ 961.558460][T23744] BTRFS info (device loop2): first mount of filesystem 9c2593b3-5c40-4e29-8ff3-7b58260955bc [ 961.606626][T23744] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 961.619886][T23724] BTRFS info (device loop0): enabling ssd optimizations [ 961.644778][T23724] BTRFS info (device loop0): auto enabling async discard [ 961.679199][T10930] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop3 scanned by udevd (10930) [ 961.695095][T23744] BTRFS info (device loop2): using free space tree [ 961.887043][ T5819] BTRFS info (device loop0): last unmount of filesystem e5ec6bdf-b4e4-4163-9622-8db3a33753bd [ 961.977952][T23762] loop1: detected capacity change from 0 to 32768 [ 962.061951][T23744] BTRFS info (device loop2): enabling ssd optimizations [ 962.068967][T23744] BTRFS info (device loop2): auto enabling async discard [ 962.112297][T23762] JBD2: Ignoring recovery information on journal [ 962.304885][T23762] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 962.327258][ T5823] BTRFS info (device loop2): last unmount of filesystem 9c2593b3-5c40-4e29-8ff3-7b58260955bc [ 962.697287][ T5826] ocfs2: Unmounting device (7,1) on (node local) [ 962.964969][T23783] loop3: detected capacity change from 0 to 32768 [ 963.044913][T23783] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.7667 (23783) [ 963.161639][T23783] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 963.197728][T23783] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 963.219832][T23806] loop1: detected capacity change from 0 to 512 [ 963.237221][T23783] BTRFS info (device loop3): using free space tree [ 963.318425][T23806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 963.524630][T23783] BTRFS info (device loop3): enabling ssd optimizations [ 963.556883][T23783] BTRFS info (device loop3): auto enabling async discard [ 963.579913][T23802] loop0: detected capacity change from 0 to 32768 [ 963.588014][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.603982][T23804] loop2: detected capacity change from 0 to 32768 [ 963.654415][T23802] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 8 /dev/loop0 scanned by syz.0.7668 (23802) [ 963.785254][T23804] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.7669 (23804) [ 963.789875][T23826] loop1: detected capacity change from 0 to 2048 [ 963.842312][T23802] BTRFS info (device loop0): first mount of filesystem afd29e67-b8c6-49b0-b0d7-0efab618e2f3 [ 963.886097][T23804] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 963.897239][T23804] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 963.906666][T23804] BTRFS info (device loop2): using free space tree [ 963.914173][T23802] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 963.923509][T23802] BTRFS info (device loop0): using free space tree [ 963.953190][T23826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 963.982549][ T5827] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 964.103585][T23804] BTRFS info (device loop2): enabling ssd optimizations [ 964.110697][T23804] BTRFS info (device loop2): auto enabling async discard [ 964.195101][T23802] BTRFS info (device loop0): enabling ssd optimizations [ 964.220922][T23802] BTRFS info (device loop0): auto enabling async discard [ 964.240487][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.487241][ T5823] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 964.512048][ T5819] BTRFS info (device loop0): last unmount of filesystem afd29e67-b8c6-49b0-b0d7-0efab618e2f3 [ 964.900151][ T5820] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 9 /dev/loop0 scanned by udevd (5820) [ 965.533949][T23866] loop2: detected capacity change from 0 to 32768 [ 965.569672][T23866] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.7674 (23866) [ 965.656833][T23864] loop1: detected capacity change from 0 to 32768 [ 965.685486][T23866] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 965.709776][T23864] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 scanned by syz.1.7673 (23864) [ 965.744485][T23866] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 965.797811][T23866] BTRFS info (device loop2): using free space tree [ 965.826125][T23864] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 965.862697][T23864] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 965.910803][T23864] BTRFS info (device loop1): using free space tree [ 965.951540][T23862] loop3: detected capacity change from 0 to 32768 [ 965.982311][T23862] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 965.992779][T23862] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 966.059769][T23866] BTRFS info (device loop2): enabling ssd optimizations [ 966.066791][T23866] BTRFS info (device loop2): auto enabling async discard [ 966.125515][T23862] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 966.175639][ T5879] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 966.188718][ T5879] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 966.218250][T23864] BTRFS info (device loop1): enabling ssd optimizations [ 966.255174][T23864] BTRFS info (device loop1): auto enabling async discard [ 966.360219][ T5823] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 966.530478][ T5879] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 319ms [ 966.538327][ T5879] gfs2: fsid=syz:syz.0: jid=0: Done [ 966.585852][T23862] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 966.630929][ T5826] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 966.867282][ T7544] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop2 scanned by udevd (7544) [ 968.093925][T23913] loop3: detected capacity change from 0 to 64 [ 968.401769][T23909] loop1: detected capacity change from 0 to 32768 [ 968.437789][T23909] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 968.518367][T23909] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 968.584342][T23909] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 968.630881][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 968.647479][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 968.736594][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 83ms [ 968.757180][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 968.775770][T23909] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 969.214775][T23918] loop0: detected capacity change from 0 to 32768 [ 969.237321][T23918] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 8 /dev/loop0 scanned by syz.0.7680 (23918) [ 969.295636][T23918] BTRFS info (device loop0): first mount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 969.325184][T23918] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 969.352332][T23918] BTRFS info (device loop0): using free space tree [ 969.435216][T23915] loop3: detected capacity change from 0 to 32768 [ 969.445411][T23918] BTRFS info (device loop0): enabling ssd optimizations [ 969.469029][T23915] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 969.476766][T23918] BTRFS info (device loop0): auto enabling async discard [ 969.494553][T23915] CPU: 1 PID: 23915 Comm: syz.3.7679 Not tainted 6.6.99-syzkaller #0 [ 969.502678][T23915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 969.512753][T23915] Call Trace: [ 969.516050][T23915] [ 969.519005][T23915] dump_stack_lvl+0x16c/0x230 [ 969.523723][T23915] ? show_regs_print_info+0x20/0x20 [ 969.528952][T23915] ? load_image+0x3b0/0x3b0 [ 969.533521][T23915] sysfs_create_dir_ns+0x256/0x280 [ 969.538672][T23915] ? sysfs_warn_dup+0xa0/0xa0 [ 969.543388][T23915] ? do_raw_spin_unlock+0x121/0x230 [ 969.548626][T23915] kobject_add_internal+0x6b8/0xc70 [ 969.553863][T23915] kobject_init_and_add+0x126/0x190 [ 969.559093][T23915] ? lockdep_softirqs_off+0x430/0x430 [ 969.564495][T23915] ? kobject_add+0x220/0x220 [ 969.569121][T23915] ? __init_swait_queue_head+0xa9/0x150 [ 969.574711][T23915] gfs2_sys_fs_add+0x238/0x470 [ 969.579507][T23915] ? gfs2_recover_set+0x250/0x250 [ 969.584568][T23915] ? apply_workqueue_attrs+0x180/0x180 [ 969.590077][T23915] gfs2_fill_super+0x1323/0x1f80 [ 969.595074][T23915] ? gfs2_reconfigure+0xb10/0xb10 [ 969.600151][T23915] ? setup_bdev_super+0x56b/0x660 [ 969.605213][T23915] get_tree_bdev+0x3e4/0x510 [ 969.609830][T23915] ? end_current_label_crit_section+0x170/0x170 [ 969.616108][T23915] ? gfs2_reconfigure+0xb10/0xb10 [ 969.621164][T23915] ? setup_bdev_super+0x660/0x660 [ 969.626314][T23915] gfs2_get_tree+0x51/0x1e0 [ 969.630852][T23915] vfs_get_tree+0x8c/0x280 [ 969.635293][T23915] do_new_mount+0x24b/0xa40 [ 969.639830][T23915] __se_sys_mount+0x2da/0x3c0 [ 969.644538][T23915] ? __x64_sys_mount+0xc0/0xc0 [ 969.649328][T23915] ? lockdep_hardirqs_on+0x98/0x150 [ 969.654554][T23915] ? __x64_sys_mount+0x20/0xc0 [ 969.659346][T23915] do_syscall_64+0x55/0xb0 [ 969.663788][T23915] ? clear_bhb_loop+0x40/0x90 [ 969.668487][T23915] ? clear_bhb_loop+0x40/0x90 [ 969.673259][T23915] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 969.679198][T23915] RIP: 0033:0x7f2d0799014a [ 969.683636][T23915] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 969.703269][T23915] RSP: 002b:00007f2d0879ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 969.711714][T23915] RAX: ffffffffffffffda RBX: 00007f2d0879aef0 RCX: 00007f2d0799014a [ 969.719712][T23915] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f2d0879aeb0 [ 969.727715][T23915] RBP: 00002000000124c0 R08: 00007f2d0879aef0 R09: 0000000000000000 [ 969.735703][T23915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 969.743696][T23915] R13: 00007f2d0879aeb0 R14: 00000000000124ab R15: 0000200000012540 [ 969.751709][T23915] [ 969.822944][T23915] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 969.851371][T23915] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 970.111664][ T5819] BTRFS info (device loop0): last unmount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 970.507362][T23945] loop1: detected capacity change from 0 to 1024 [ 970.963726][T23950] loop1: detected capacity change from 0 to 1024 [ 971.124749][T23951] loop2: detected capacity change from 0 to 1768 [ 971.300648][T23955] loop1: detected capacity change from 0 to 160 [ 971.444762][T23957] loop2: detected capacity change from 0 to 2364 [ 972.225713][T23953] loop0: detected capacity change from 0 to 32768 [ 972.255520][T23953] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 972.270980][T23953] dlm: no local IP address has been set [ 972.276625][T23953] dlm: cannot start dlm midcomms -107 [ 972.309686][T23953] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 972.584722][T23964] loop0: detected capacity change from 0 to 256 [ 972.802703][T23959] loop1: detected capacity change from 0 to 32768 [ 972.849603][T23959] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 972.857823][T23959] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 973.025068][T23959] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 973.094129][ T5892] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 973.111829][ T5892] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 973.263930][ T5892] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 142ms [ 973.280505][ T5892] gfs2: fsid=syz:syz.0: jid=0: Done [ 973.298118][T23959] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 973.986381][T23966] loop0: detected capacity change from 0 to 32768 [ 974.027184][T23966] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 974.045656][T23966] CPU: 1 PID: 23966 Comm: syz.0.7693 Not tainted 6.6.99-syzkaller #0 [ 974.053790][T23966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 974.063880][T23966] Call Trace: [ 974.067182][T23966] [ 974.070133][T23966] dump_stack_lvl+0x16c/0x230 [ 974.074855][T23966] ? show_regs_print_info+0x20/0x20 [ 974.080083][T23966] ? load_image+0x3b0/0x3b0 [ 974.084649][T23966] sysfs_create_dir_ns+0x256/0x280 [ 974.089810][T23966] ? sysfs_warn_dup+0xa0/0xa0 [ 974.094534][T23966] ? do_raw_spin_unlock+0x121/0x230 [ 974.099794][T23966] kobject_add_internal+0x6b8/0xc70 [ 974.105042][T23966] kobject_init_and_add+0x126/0x190 [ 974.110322][T23966] ? lockdep_softirqs_off+0x430/0x430 [ 974.115790][T23966] ? kobject_add+0x220/0x220 [ 974.120389][T23966] ? __init_swait_queue_head+0xa9/0x150 [ 974.125934][T23966] gfs2_sys_fs_add+0x238/0x470 [ 974.130729][T23966] ? gfs2_recover_set+0x250/0x250 [ 974.135761][T23966] ? apply_workqueue_attrs+0x180/0x180 [ 974.141223][T23966] gfs2_fill_super+0x1323/0x1f80 [ 974.146180][T23966] ? gfs2_reconfigure+0xb10/0xb10 [ 974.151213][T23966] ? setup_bdev_super+0x56b/0x660 [ 974.156257][T23966] get_tree_bdev+0x3e4/0x510 [ 974.160872][T23966] ? end_current_label_crit_section+0x170/0x170 [ 974.167124][T23966] ? gfs2_reconfigure+0xb10/0xb10 [ 974.172148][T23966] ? setup_bdev_super+0x660/0x660 [ 974.177192][T23966] gfs2_get_tree+0x51/0x1e0 [ 974.181697][T23966] vfs_get_tree+0x8c/0x280 [ 974.186109][T23966] do_new_mount+0x24b/0xa40 [ 974.190621][T23966] __se_sys_mount+0x2da/0x3c0 [ 974.195387][T23966] ? __x64_sys_mount+0xc0/0xc0 [ 974.200156][T23966] ? lockdep_hardirqs_on+0x98/0x150 [ 974.205374][T23966] ? __x64_sys_mount+0x20/0xc0 [ 974.210158][T23966] do_syscall_64+0x55/0xb0 [ 974.214582][T23966] ? clear_bhb_loop+0x40/0x90 [ 974.219255][T23966] ? clear_bhb_loop+0x40/0x90 [ 974.223924][T23966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 974.229813][T23966] RIP: 0033:0x7f8632f9014a [ 974.234220][T23966] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 974.253829][T23966] RSP: 002b:00007f8633db7e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 974.262252][T23966] RAX: ffffffffffffffda RBX: 00007f8633db7ef0 RCX: 00007f8632f9014a [ 974.270221][T23966] RDX: 0000200000021180 RSI: 00002000000211c0 RDI: 00007f8633db7eb0 [ 974.278193][T23966] RBP: 0000200000021180 R08: 00007f8633db7ef0 R09: 0000000000000000 [ 974.286161][T23966] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000211c0 [ 974.294126][T23966] R13: 00007f8633db7eb0 R14: 000000000002114d R15: 0000200000021200 [ 974.302105][T23966] [ 974.358553][T23966] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 974.397176][T23966] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 974.707485][T23972] loop3: detected capacity change from 0 to 128 [ 974.810873][T23974] loop0: detected capacity change from 0 to 4096 [ 974.845742][T23974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 975.081854][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.299273][T23980] loop0: detected capacity change from 0 to 760 [ 975.621611][T23982] loop0: detected capacity change from 0 to 2048 [ 975.856300][T23984] loop0: detected capacity change from 0 to 256 [ 976.211219][T23986] loop0: detected capacity change from 0 to 256 [ 976.358790][T23988] loop1: detected capacity change from 0 to 256 [ 977.128537][T23990] loop2: detected capacity change from 0 to 32768 [ 977.158887][T23990] BTRFS: device fsid 100ef7e5-a5de-41f0-884c-a25b1c06c78a devid 1 transid 8 /dev/loop2 scanned by syz.2.7702 (23990) [ 977.235366][T23990] BTRFS info (device loop2): first mount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 977.252776][T23990] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 977.262376][T23990] BTRFS info (device loop2): using free space tree [ 977.434327][T23990] BTRFS info (device loop2): enabling ssd optimizations [ 977.441343][T23990] BTRFS info (device loop2): auto enabling async discard [ 977.702174][ T5823] BTRFS info (device loop2): last unmount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 978.543617][T24017] loop2: detected capacity change from 0 to 4096 [ 978.572263][T24017] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 979.244873][T24021] loop3: detected capacity change from 0 to 64 [ 979.616241][T24019] loop2: detected capacity change from 0 to 32768 [ 980.114587][T24027] loop2: detected capacity change from 0 to 128 [ 981.017184][T24031] loop0: detected capacity change from 0 to 4096 [ 981.150025][T24031] ntfs: volume version 3.1. [ 981.416918][T24035] loop0: detected capacity change from 0 to 64 [ 982.663355][T24037] loop0: detected capacity change from 0 to 32768 [ 982.688588][T24037] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 982.717682][T24037] dlm: no local IP address has been set [ 982.723288][T24037] dlm: cannot start dlm midcomms -107 [ 982.729351][T24037] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 983.833599][T24042] loop3: detected capacity change from 0 to 2048 [ 983.902626][T24043] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 986.931602][T24045] loop3: detected capacity change from 0 to 131072 [ 986.985548][T24045] F2FS-fs (loop3): Found nat_bits in checkpoint [ 987.120577][T24045] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 987.258640][T24054] loop0: detected capacity change from 0 to 4096 [ 987.772400][T24057] loop3: detected capacity change from 0 to 4096 [ 987.798546][T24057] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 987.872259][T24059] loop0: detected capacity change from 0 to 8192 [ 987.962211][T24060] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 988.053169][T24049] loop1: detected capacity change from 0 to 131072 [ 988.301748][T24063] loop3: detected capacity change from 0 to 128 [ 988.318039][T24064] loop0: detected capacity change from 0 to 512 [ 988.422705][T24049] NILFS (loop1): error -4 creating segctord thread [ 988.659478][ T5820] I/O error, dev loop1, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 989.457141][T24067] loop3: detected capacity change from 0 to 32768 [ 989.484403][T24067] (syz.3.7728,24067,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 989.525688][T24067] (syz.3.7728,24067,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 989.561698][T24069] loop0: detected capacity change from 0 to 32768 [ 989.599907][T24069] (syz.0.7729,24069,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 989.632359][T24069] (syz.0.7729,24069,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 989.728608][T10930] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 989.808861][T24071] loop2: detected capacity change from 0 to 32768 [ 989.837760][T24071] (syz.2.7731,24071,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 989.881505][T24071] (syz.2.7731,24071,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 990.277449][T24073] loop3: detected capacity change from 0 to 16384 [ 990.402636][T24079] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 990.681014][T24080] loop0: detected capacity change from 0 to 8192 [ 990.721670][T24080] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 990.746009][T24080] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 990.756208][T24080] REISERFS (device loop0): using ordered data mode [ 990.762774][T24080] reiserfs: using flush barriers [ 990.770135][T24080] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 990.787725][T24080] REISERFS (device loop0): checking transaction log (loop0) [ 991.003616][T24080] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 991.054198][T24080] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 991.086247][T24080] REISERFS (device loop0): Remounting filesystem read-only [ 991.093517][T24080] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 991.145814][T24080] REISERFS warning (device loop0): reiserfs_fill_super: corrupt root inode, run fsck [ 991.479425][T24082] loop3: detected capacity change from 0 to 32768 [ 991.501821][T24082] (syz.3.7735,24082,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 991.522680][T24082] (syz.3.7735,24082,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 991.697907][T24077] loop2: detected capacity change from 0 to 65536 [ 991.705742][T24077] (syz.2.7733,24077,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 991.749008][T24077] (syz.2.7733,24077,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 992.199249][T24087] loop3: detected capacity change from 0 to 16384 [ 992.235848][T24087] REISERFS warning (device loop3): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop3, block 16, size 4096) [ 992.251636][T24087] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 [ 993.017047][T24075] loop1: detected capacity change from 0 to 131072 [ 993.263537][T24075] NILFS (loop1): error -4 creating segctord thread [ 993.936093][T24095] loop1: detected capacity change from 0 to 16384 [ 994.004818][T24095] REISERFS warning (device loop1): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop1, block 16, size 4096) [ 994.077159][T24095] REISERFS warning (device loop1): sh-2021 reiserfs_fill_super: can not find reiserfs on loop1 [ 995.145760][T24089] loop2: detected capacity change from 0 to 131072 [ 995.184458][T24089] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 995.223539][T24089] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 995.233178][T24089] REISERFS (device loop2): using ordered data mode [ 995.275835][T24089] reiserfs: using flush barriers [ 995.296610][T24089] REISERFS warning (device loop2): journal-1256 journal_init: unable to get memory for journal structure [ 995.340652][T24089] REISERFS warning (device loop2): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 995.670672][T24101] loop2: detected capacity change from 0 to 4096 [ 995.732924][T24104] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 996.074005][T24106] loop2: detected capacity change from 0 to 4096 [ 996.178617][T24106] ntfs: volume version 3.1. [ 998.539049][T24112] loop1: detected capacity change from 0 to 3 [ 998.557696][T24112] syz.1.7747: attempt to access beyond end of device [ 998.557696][T24112] loop1: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 998.584113][T24112] SQUASHFS error: Failed to read block 0x0: -5 [ 998.590448][T24112] unable to read squashfs_super_block [ 998.650544][T24103] loop0: detected capacity change from 0 to 131072 [ 998.684792][T24103] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 998.716524][T24103] REISERFS (device loop0): found reiserfs format "3.6" with standard journal [ 998.726018][T24103] REISERFS (device loop0): using ordered data mode [ 998.733253][T24103] reiserfs: using flush barriers [ 998.749166][T24103] REISERFS (device loop0): journal params: device loop0, size 8192, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 998.796355][T24103] REISERFS (device loop0): checking transaction log (loop0) [ 998.824129][T24115] loop1: detected capacity change from 0 to 8 [ 999.366999][T24117] loop1: detected capacity change from 0 to 8192 [ 999.410150][T24117] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 999.511689][T24117] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 999.520992][T24117] REISERFS (device loop1): using ordered data mode [ 999.570811][T24117] reiserfs: using flush barriers [ 999.592462][T24117] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 999.644684][T24117] REISERFS (device loop1): checking transaction log (loop1) [ 999.713657][T24108] loop2: detected capacity change from 0 to 131072 [ 999.757677][T24108] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 999.778187][T24108] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 999.840734][T24108] REISERFS (device loop2): using ordered data mode [ 999.890167][T24108] reiserfs: using flush barriers [ 999.907395][T24108] REISERFS warning (device loop2): journal-1256 journal_init: unable to get memory for journal structure [ 999.951842][T24108] REISERFS warning (device loop2): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 999.993308][T24117] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 1000.055056][T24117] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 1000.093491][T24117] REISERFS (device loop1): Remounting filesystem read-only [ 1000.121180][T24117] REISERFS error (device loop1): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 1000.171592][T24117] REISERFS warning (device loop1): reiserfs_fill_super: corrupt root inode, run fsck [ 1000.294364][T24121] loop2: detected capacity change from 0 to 2048 [ 1000.369213][T24121] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1000.646724][T24123] loop2: detected capacity change from 0 to 128 [ 1000.688556][T24123] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1000.731493][T24123] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1000.948215][T24127] loop2: detected capacity change from 0 to 128 [ 1001.016042][T24127] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1001.078713][T24127] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1001.357068][T24129] loop3: detected capacity change from 0 to 4096 [ 1001.513560][T24129] ntfs: volume version 3.1. [ 1001.643064][T24133] loop2: detected capacity change from 0 to 4096 [ 1001.696335][T24133] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1001.730943][T24133] UDF-fs: Scanning with blocksize 512 failed [ 1001.782845][T24133] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1002.073857][T24103] REISERFS (device loop0): Using rupasov hash to sort names [ 1002.082052][T24103] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1002.188732][T24135] loop3: detected capacity change from 0 to 8192 [ 1002.285936][T24135] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1002.288028][T24140] loop2: detected capacity change from 0 to 256 [ 1002.365299][T24135] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1002.418538][T24135] REISERFS (device loop3): using ordered data mode [ 1002.450465][T24135] reiserfs: using flush barriers [ 1002.488077][T24135] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1002.558615][T24135] REISERFS (device loop3): checking transaction log (loop3) [ 1002.633121][T24142] loop2: detected capacity change from 0 to 512 [ 1002.832738][T24135] REISERFS (device loop3): Using r5 hash to sort names [ 1002.858517][T24135] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1002.865712][T24144] loop2: detected capacity change from 0 to 512 [ 1004.324561][T24150] loop0: detected capacity change from 0 to 128 [ 1004.486037][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1004.497023][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1004.541279][T24152] loop1: detected capacity change from 0 to 512 [ 1004.776557][T24156] loop1: detected capacity change from 0 to 8 [ 1007.333356][T24160] loop2: detected capacity change from 0 to 128 [ 1007.580484][T24162] loop2: detected capacity change from 0 to 128 [ 1007.759564][T24164] loop3: detected capacity change from 0 to 2048 [ 1007.768057][T24166] loop2: detected capacity change from 0 to 512 [ 1012.929586][T24181] loop3: detected capacity change from 0 to 32768 [ 1013.012264][T24181] XFS (loop3): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 1013.184945][T24181] XFS (loop3): Ending clean mount [ 1013.291288][ T5827] XFS (loop3): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 1013.666128][T24178] loop2: detected capacity change from 0 to 65536 [ 1013.735679][T24178] XFS (loop2): Mounting V5 Filesystem e4654a66-62e5-4963-a81e-012d9d4871af [ 1013.800389][T24178] XFS (loop2): Ending clean mount [ 1013.837782][ T5823] XFS (loop2): Unmounting Filesystem e4654a66-62e5-4963-a81e-012d9d4871af [ 1015.450502][T24205] loop2: detected capacity change from 0 to 65536 [ 1015.510927][T24205] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 1016.730243][T24200] loop1: detected capacity change from 0 to 131072 [ 1016.818817][T24200] XFS (loop1): Mounting V5 Filesystem 38ffc24f-675a-4986-9d8e-4951dc618329 [ 1016.989027][T24200] XFS (loop1): Ending clean mount [ 1017.100442][ T5826] XFS (loop1): Unmounting Filesystem 38ffc24f-675a-4986-9d8e-4951dc618329 [ 1017.265075][T24224] loop0: detected capacity change from 0 to 128 [ 1019.024672][T24226] loop1: detected capacity change from 0 to 65536 [ 1019.061724][T24226] XFS (loop1): Deprecated V4 format (crc=0) not supported by kernel. [ 1020.678693][T24228] loop3: detected capacity change from 0 to 131072 [ 1020.741436][T24228] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel. [ 1020.758213][T24230] loop0: detected capacity change from 0 to 131072 [ 1020.832224][T24230] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop0": -EINTR [ 1023.811992][T24264] loop1: detected capacity change from 0 to 16 [ 1023.873576][T24264] overlay: filesystem on ./file0 is read-only [ 1024.319748][T24254] loop0: detected capacity change from 0 to 65536 [ 1024.386943][T24254] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1024.491183][T24285] loop2: detected capacity change from 0 to 512 [ 1024.516702][T24254] XFS (loop0): Ending clean mount [ 1024.584154][T24285] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1024.623715][T24285] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.7804: bad orphan inode 13 [ 1024.678460][T24285] ext4_test_bit(bit=12, block=18) = 1 [ 1024.683942][T24285] is_bad_inode(inode)=0 [ 1024.697577][T24285] NEXT_ORPHAN(inode)=2130706432 [ 1024.702579][T24285] max_ino=32 [ 1024.705794][T24285] i_nlink=1 [ 1024.717474][ T5819] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1024.761827][T24285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1024.969969][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.625336][T24289] loop1: detected capacity change from 0 to 32768 [ 1025.712472][T24289] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1025.864040][T24289] XFS (loop1): Ending clean mount [ 1026.029789][ T5826] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1026.078079][T24333] loop3: detected capacity change from 0 to 1024 [ 1026.236566][T24333] hfsplus: xattr searching failed [ 1026.603053][T24347] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 1026.685367][T24353] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1026.712761][T24351] netlink: 'syz.3.7833': attribute type 21 has an invalid length. [ 1026.715186][T24353] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1026.782219][T24351] netlink: 'syz.3.7833': attribute type 15 has an invalid length. [ 1026.790367][T24351] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7833'. [ 1026.832010][T24351] IPv6: NLM_F_CREATE should be specified when creating new route [ 1026.840981][T24351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1026.848915][T24351] IPv6: NLM_F_CREATE should be set when creating new route [ 1026.856297][T24351] IPv6: NLM_F_CREATE should be set when creating new route [ 1026.863610][T24351] IPv6: NLM_F_CREATE should be set when creating new route [ 1027.046393][T24363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7837'. [ 1027.211747][T24371] loop2: detected capacity change from 0 to 128 [ 1027.245908][T24371] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1027.314470][T24371] ext4 filesystem being mounted at /1913/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.441089][ T5823] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1027.566943][T24390] loop2: detected capacity change from 0 to 256 [ 1027.664094][T24390] FAT-fs (loop2): Directory bread(block 64) failed [ 1027.690921][T24390] FAT-fs (loop2): Directory bread(block 65) failed [ 1027.697644][T24390] FAT-fs (loop2): Directory bread(block 66) failed [ 1027.707919][T24390] FAT-fs (loop2): Directory bread(block 67) failed [ 1027.714939][T24390] FAT-fs (loop2): Directory bread(block 68) failed [ 1027.721921][T24390] FAT-fs (loop2): Directory bread(block 69) failed [ 1027.734304][T24390] FAT-fs (loop2): Directory bread(block 70) failed [ 1027.740945][T24390] FAT-fs (loop2): Directory bread(block 71) failed [ 1027.769545][T24390] FAT-fs (loop2): Directory bread(block 72) failed [ 1027.772774][T24396] loop1: detected capacity change from 0 to 1024 [ 1027.780265][T24390] FAT-fs (loop2): Directory bread(block 73) failed [ 1027.851742][T24396] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1027.859527][T24396] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1027.884998][T24396] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1027.929138][T24396] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1028.014263][T24396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1028.262016][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.873610][T24437] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.7873'. [ 1028.887802][T24440] loop0: detected capacity change from 0 to 64 [ 1030.083927][T24486] ufs: You didn't specify the type of your ufs filesystem [ 1030.083927][T24486] [ 1030.083927][T24486] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1030.083927][T24486] [ 1030.083927][T24486] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1030.086133][T24484] loop0: detected capacity change from 0 to 512 [ 1030.114630][ C1] vkms_vblank_simulate: vblank timer overrun [ 1030.115241][T24487] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1030.139999][T24486] ufs: ufstype=old is supported read-only [ 1030.146069][T24486] syz.1.7897: attempt to access beyond end of device [ 1030.146069][T24486] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1030.225155][T24487] xt_TCPMSS: Only works on TCP SYN packets [ 1030.240331][T24484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1030.266687][T24484] ext4 filesystem being mounted at /2006/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1030.455714][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.703151][T24503] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7905'. [ 1030.772882][T24505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7906'. [ 1030.786268][T24501] loop3: detected capacity change from 0 to 2048 [ 1030.827724][T24501] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1030.886991][T24459] loop2: detected capacity change from 0 to 65536 [ 1030.927710][T24459] XFS (loop2): Mounting V5 Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd [ 1031.110117][T24459] XFS (loop2): Ending clean mount [ 1031.334948][T24522] bond1: entered promiscuous mode [ 1031.369447][ T5823] XFS (loop2): Unmounting Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd [ 1031.396498][T24522] bond1: entered allmulticast mode [ 1031.427766][T24522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1031.893532][T24547] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1031.977987][T24546] loop0: detected capacity change from 0 to 4096 [ 1032.044957][T24546] ntfs: volume version 3.1. [ 1032.085308][ T28] audit: type=1400 audit(1753921346.048:40): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=24548 comm="syz.3.7924" [ 1032.386126][T24560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7927'. [ 1032.442065][T24560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7927'. [ 1032.484453][T24560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7927'. [ 1033.021964][T24589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7944'. [ 1033.075064][T24591] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1033.097773][T24591] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1033.645740][T24613] syz.0.7954 uses old SIOCAX25GETINFO [ 1034.008367][T24625] loop0: detected capacity change from 0 to 256 [ 1034.072218][T24625] FAT-fs (loop0): Directory bread(block 64) failed [ 1034.083880][T24625] FAT-fs (loop0): Directory bread(block 65) failed [ 1034.101491][T24625] FAT-fs (loop0): Directory bread(block 66) failed [ 1034.134079][T24625] FAT-fs (loop0): Directory bread(block 67) failed [ 1034.159161][T24625] FAT-fs (loop0): Directory bread(block 68) failed [ 1034.195029][T24625] FAT-fs (loop0): Directory bread(block 69) failed [ 1034.223297][T24625] FAT-fs (loop0): Directory bread(block 70) failed [ 1034.255413][T24625] FAT-fs (loop0): Directory bread(block 71) failed [ 1034.261552][T24631] loop2: detected capacity change from 0 to 256 [ 1034.262090][T24625] FAT-fs (loop0): Directory bread(block 72) failed [ 1034.291360][T24631] exfat: Deprecated parameter 'utf8' [ 1034.300565][T24625] FAT-fs (loop0): Directory bread(block 73) failed [ 1034.370161][T24631] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 1034.953619][T24639] bond1: entered promiscuous mode [ 1034.982280][T24639] bond1: entered allmulticast mode [ 1034.994700][T24639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1035.573739][T24656] xt_hashlimit: size too large, truncated to 1048576 [ 1035.602154][T24656] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 1035.835061][T24664] netlink: 'syz.2.7980': attribute type 15 has an invalid length. [ 1035.837307][T24594] loop3: detected capacity change from 0 to 131072 [ 1035.843094][T24664] netlink: 666 bytes leftover after parsing attributes in process `syz.2.7980'. [ 1035.901364][T24594] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel. [ 1036.051189][ T5816] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1036.131978][T24677] xt_cgroup: path and classid specified [ 1036.216536][T24680] loop1: detected capacity change from 0 to 8 [ 1036.272985][ T5816] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 1036.303135][ T5816] usb 1-1: config 0 has no interface number 0 [ 1036.313225][T24680] SQUASHFS error: Failed to read block 0x738: -5 [ 1036.328595][ T5816] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1036.351456][T24680] SQUASHFS error: Unable to read metadata cache entry [736] [ 1036.359756][ T5816] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1036.370729][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.389976][ T5816] usb 1-1: Product: syz [ 1036.394653][ T5816] usb 1-1: Manufacturer: syz [ 1036.399274][ T5816] usb 1-1: SerialNumber: syz [ 1036.425865][ T5816] usb 1-1: config 0 descriptor?? [ 1036.458992][ T5816] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 1036.750361][ C0] yurex 1-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 1036.985800][ T5893] usb 1-1: USB disconnect, device number 124 [ 1037.021535][ T5893] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 1037.064840][T24703] loop1: detected capacity change from 0 to 256 [ 1037.103287][T24703] exfat: Deprecated parameter 'namecase' [ 1037.192259][T24703] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 1037.418264][T24689] loop2: detected capacity change from 0 to 32768 [ 1037.488589][T24689] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1037.549181][T24689] XFS (loop2): Ending clean mount [ 1037.594538][T24689] XFS (loop2): Quotacheck needed: Please wait. [ 1037.721318][T24689] XFS (loop2): Quotacheck: Done. [ 1037.742047][T24689] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1037.775235][T24726] loop1: detected capacity change from 0 to 1764 [ 1037.829334][T24726] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1037.995735][T24730] netlink: 'syz.3.8006': attribute type 11 has an invalid length. [ 1038.050297][T24730] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.8006'. [ 1038.414016][T24743] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1038.745500][T24756] loop3: detected capacity change from 0 to 1024 [ 1039.020625][T24765] loop0: detected capacity change from 0 to 2048 [ 1039.059154][T24765] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1039.117265][T24769] loop3: detected capacity change from 0 to 128 [ 1039.156689][T24769] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1039.166608][T24771] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8027'. [ 1039.194593][T24771] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8027'. [ 1039.226823][T24771] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 1039.247718][T24769] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1039.599960][T24781] netlink: 'syz.2.8031': attribute type 6 has an invalid length. [ 1039.904247][T24787] loop3: detected capacity change from 0 to 4096 [ 1039.945341][T24787] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1040.009055][T24793] bond1: entered promiscuous mode [ 1040.014448][T24793] bond1: entered allmulticast mode [ 1040.020502][T24793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1040.084162][T24787] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1040.567824][T24758] loop1: detected capacity change from 0 to 65536 [ 1040.687198][T24758] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1040.794501][T24758] XFS (loop1): Ending clean mount [ 1040.928155][T24829] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8051'. [ 1040.974837][ T5826] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1041.603602][T24846] loop3: detected capacity change from 0 to 1764 [ 1041.682651][T24846] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1041.943219][T24860] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8066'. [ 1042.070450][T24866] loop0: detected capacity change from 0 to 64 [ 1042.109890][T24864] loop3: detected capacity change from 0 to 4096 [ 1042.151093][T24864] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1042.223332][T24864] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 1042.491596][ T5827] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 1042.516378][T24878] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.8076'. [ 1042.573114][T24879] xt_hashlimit: invalid rate [ 1042.699571][T24884] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1042.829586][T24888] loop3: detected capacity change from 0 to 2048 [ 1042.900582][T24888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1042.956137][T24897] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1043.064625][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.085482][T24899] netlink: 'syz.0.8084': attribute type 4 has an invalid length. [ 1043.530762][T24917] loop2: detected capacity change from 0 to 2048 [ 1043.592147][T24917] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1043.633262][T24923] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1043.814951][T24917] syz.2.8094: attempt to access beyond end of device [ 1043.814951][T24917] loop2: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 1043.847808][T24917] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=1) [ 1043.855393][T24929] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1043.982456][T24934] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8101'. [ 1044.144750][T24936] loop3: detected capacity change from 0 to 1024 [ 1045.020587][ T5892] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1045.030925][T24965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8116'. [ 1045.043887][T24965] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8116'. [ 1045.224003][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 1045.231216][ T5892] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.259654][ T5892] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1045.275181][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.306540][T24975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8121'. [ 1045.315708][ T5892] usb 2-1: Product: syz [ 1045.320596][ T5892] usb 2-1: Manufacturer: syz [ 1045.326429][ T5892] usb 2-1: SerialNumber: syz [ 1045.338968][T24975] geneve2: entered promiscuous mode [ 1045.340071][ T5892] kobil_sct 2-1:2.0: required endpoints missing [ 1045.357821][T24977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8122'. [ 1045.566432][ T5892] usb 2-1: USB disconnect, device number 15 [ 1045.772155][T24993] netlink: 'syz.2.8130': attribute type 32 has an invalid length. [ 1046.185660][ T5879] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1046.250348][ T5892] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1046.376907][T25019] autofs4:pid:25019:autofs_fill_super: called with bogus options [ 1046.399711][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 1046.407865][ T5879] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1046.417431][ T5879] usb 3-1: config 8 has an invalid interface number: 101 but max is 0 [ 1046.437458][ T5879] usb 3-1: config 8 has no interface number 0 [ 1046.453646][ T5879] usb 3-1: too many endpoints for config 8 interface 101 altsetting 114: 112, using maximum allowed: 30 [ 1046.476435][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1046.485687][ T5879] usb 3-1: config 8 interface 101 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 112 [ 1046.507489][ T5879] usb 3-1: config 8 interface 101 has no altsetting 0 [ 1046.508391][T25022] [U] „ [ 1046.517423][ T5879] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=ab.34 [ 1046.535907][ T5892] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 1046.537661][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.560032][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.566815][ T5879] usb 3-1: Product: syz [ 1046.575526][ T5879] usb 3-1: Manufacturer: syz [ 1046.580240][ T5879] usb 3-1: SerialNumber: syz [ 1046.587148][ T5892] usb 4-1: Product: syz [ 1046.591453][ T5892] usb 4-1: Manufacturer: syz [ 1046.600214][ T5892] usb 4-1: SerialNumber: syz [ 1046.609518][ T5892] usb 4-1: config 0 descriptor?? [ 1046.656576][T25027] netlink: 'syz.0.8147': attribute type 7 has an invalid length. [ 1046.834281][ T5879] usb 3-1: USB disconnect, device number 31 [ 1046.846955][T25031] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1046.848686][ T5892] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 1046.854726][ T5916] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1046.874699][ T5892] dvb_usb_af9035: probe of 4-1:0.0 failed with error -8 [ 1046.900919][ T5892] usb 4-1: USB disconnect, device number 22 [ 1047.064643][ T5916] usb 2-1: config index 0 descriptor too short (expected 4114, got 18) [ 1047.077013][ T5916] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.09 [ 1047.094309][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.111630][ T5916] usb 2-1: Product: syz [ 1047.117129][ T5916] usb 2-1: Manufacturer: syz [ 1047.121828][ T5916] usb 2-1: SerialNumber: syz [ 1047.131017][ T5916] usb 2-1: config 0 descriptor?? [ 1047.221327][T25041] loop0: detected capacity change from 0 to 1024 [ 1047.260777][T25041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1047.273554][T25041] ext4 filesystem being mounted at /2080/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1047.304077][T25041] cifs: Unknown parameter 'no'‘a£Nð[G¶zob,erèèµ;%j¸¼ [ 1047.304077][T25041] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.W1ȱ¨nNCº"†CÙ׈¡E)Ð8+€î¶á÷™¿1®ðÚ<“™+`# ÷Ž¢k²–' [ 1047.339042][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.379081][ T5916] usb 2-1: USB disconnect, device number 16 [ 1047.467231][T25046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8155'. [ 1047.681559][T25054] loop2: detected capacity change from 0 to 2048 [ 1047.700466][T25054] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1048.273295][T25076] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1048.612582][T25088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8175'. [ 1048.806275][T25060] loop3: detected capacity change from 0 to 40427 [ 1048.854360][T25060] F2FS-fs (loop3): invalid crc value [ 1048.867717][T25060] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1049.020422][T25060] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1049.400602][T25104] Cannot find add_set index 0 as target [ 1049.412374][T25090] loop1: detected capacity change from 0 to 32768 [ 1049.470338][T25090] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1049.620346][T25110] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1049.779955][T25090] syz.1.8176 (25090) used greatest stack depth: 17712 bytes left [ 1049.807143][T25099] loop0: detected capacity change from 0 to 32768 [ 1049.848704][T25099] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.8180 (25099) [ 1049.919137][ T5826] ocfs2: Unmounting device (7,1) on (node local) [ 1049.919531][T25099] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1049.959603][T25099] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1049.968443][T25099] BTRFS info (device loop0): setting nodatasum [ 1050.012068][T25099] BTRFS info (device loop0): force zlib compression, level 3 [ 1050.061782][T25099] BTRFS info (device loop0): metadata ratio 1 [ 1050.134218][T25099] BTRFS info (device loop0): enabling ssd optimizations [ 1050.158938][T25099] BTRFS info (device loop0): allowing degraded mounts [ 1050.180566][T25123] netlink: 'syz.1.8186': attribute type 2 has an invalid length. [ 1050.185052][T25099] BTRFS info (device loop0): using free space tree [ 1050.220126][T25123] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.8186'. [ 1050.492679][T25122] loop3: detected capacity change from 0 to 8192 [ 1050.510710][T25143] loop1: detected capacity change from 0 to 256 [ 1050.549004][T25122] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1050.635309][T25122] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1050.707429][T25122] REISERFS (device loop3): using ordered data mode [ 1050.724378][T25143] FAT-fs (loop1): Directory bread(block 64) failed [ 1050.758654][T25143] FAT-fs (loop1): Directory bread(block 65) failed [ 1050.772290][T25122] reiserfs: using flush barriers [ 1050.789625][T25143] FAT-fs (loop1): Directory bread(block 66) failed [ 1050.799703][ T5819] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1050.833491][T25143] FAT-fs (loop1): Directory bread(block 67) failed [ 1050.840135][T25122] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1050.840685][T25122] REISERFS (device loop3): checking transaction log (loop3) [ 1050.924277][T25122] REISERFS (device loop3): Using r5 hash to sort names [ 1050.931637][T25122] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1050.955650][T25143] FAT-fs (loop1): Directory bread(block 68) failed [ 1050.966391][T25143] FAT-fs (loop1): Directory bread(block 69) failed [ 1050.985764][T25143] FAT-fs (loop1): Directory bread(block 70) failed [ 1051.030386][T25143] FAT-fs (loop1): Directory bread(block 71) failed [ 1051.038899][T25143] FAT-fs (loop1): Directory bread(block 72) failed [ 1051.050004][T25143] FAT-fs (loop1): Directory bread(block 73) failed [ 1051.146224][T25122] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1051.765573][T25171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8195'. [ 1051.841196][T25172] 9pnet_fd: p9_fd_create_tcp (25172): problem connecting socket to 127.0.0.1 [ 1052.074595][T25179] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (13) [ 1052.896656][T25216] xt_TCPMSS: Only works on TCP SYN packets [ 1053.194299][T25226] loop3: detected capacity change from 0 to 1764 [ 1053.278959][T25198] loop1: detected capacity change from 0 to 32768 [ 1053.570161][T25236] loop0: detected capacity change from 0 to 512 [ 1053.664995][T25236] FAT-fs (loop0): Directory bread(block 900) failed [ 1053.708618][T25236] FAT-fs (loop0): Directory bread(block 901) failed [ 1053.761752][T25236] FAT-fs (loop0): Directory bread(block 902) failed [ 1053.786385][T25236] FAT-fs (loop0): Directory bread(block 903) failed [ 1053.808476][T25236] FAT-fs (loop0): Directory bread(block 904) failed [ 1053.836481][T25236] FAT-fs (loop0): Directory bread(block 905) failed [ 1053.873768][T25236] FAT-fs (loop0): Directory bread(block 906) failed [ 1053.903328][T25236] FAT-fs (loop0): Directory bread(block 907) failed [ 1053.953333][T25236] FAT-fs (loop0): Directory bread(block 900) failed [ 1054.011913][T25236] FAT-fs (loop0): Directory bread(block 901) failed [ 1054.696703][ T28] audit: type=1326 audit(1753921367.197:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25272 comm="syz.0.8229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8632f8e9a9 code=0x0 [ 1054.762537][T25233] loop3: detected capacity change from 0 to 32768 [ 1054.877327][T25233] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1055.073763][T25233] XFS (loop3): Ending clean mount [ 1055.304940][ T5827] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1056.079975][T25334] loop0: detected capacity change from 0 to 256 [ 1056.098729][T25334] exfat: Deprecated parameter 'namecase' [ 1056.211768][T25334] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1056.331301][T25340] netlink: 'syz.2.8249': attribute type 21 has an invalid length. [ 1056.339200][T25340] IPv6: NLM_F_CREATE should be specified when creating new route [ 1056.357318][T25340] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1056.364648][T25340] IPv6: NLM_F_CREATE should be set when creating new route [ 1056.371939][T25340] IPv6: NLM_F_CREATE should be set when creating new route [ 1056.379270][T25340] IPv6: NLM_F_CREATE should be set when creating new route [ 1056.387651][T25343] binder: 25341:25343 unknown command 1074553619 [ 1056.394272][T25343] binder: 25341:25343 ioctl c0306201 200000000540 returned -22 [ 1056.865241][ T28] audit: type=1326 audit(1753921369.227:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25363 comm="syz.3.8260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0798e9a9 code=0x7ffc0000 [ 1056.927372][ T28] audit: type=1326 audit(1753921369.227:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25363 comm="syz.3.8260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0798e9a9 code=0x7ffc0000 [ 1057.048845][ T28] audit: type=1326 audit(1753921369.227:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25363 comm="syz.3.8260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f2d0798e9a9 code=0x7ffc0000 [ 1057.136778][ T28] audit: type=1326 audit(1753921369.227:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25363 comm="syz.3.8260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0798e9a9 code=0x7ffc0000 [ 1057.233781][ T28] audit: type=1326 audit(1753921369.227:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25363 comm="syz.3.8260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0798e9a9 code=0x7ffc0000 [ 1057.291595][T25384] loop3: detected capacity change from 0 to 1024 [ 1057.527040][ T48] hfsplus: b-tree write err: -5, ino 4 [ 1057.569059][T25393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8268'. [ 1058.030321][T25407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1058.220878][T25397] loop2: detected capacity change from 0 to 32768 [ 1058.277012][T25416] netlink: 'syz.1.8277': attribute type 11 has an invalid length. [ 1058.287015][T25397] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1058.309650][T25416] netlink: 440 bytes leftover after parsing attributes in process `syz.1.8277'. [ 1058.421721][T25397] XFS (loop2): Ending clean mount [ 1058.526759][T25397] XFS (loop2): Quotacheck needed: Please wait. [ 1058.554285][T25431] netlink: 268 bytes leftover after parsing attributes in process `syz.1.8282'. [ 1058.630049][T25397] XFS (loop2): Quotacheck: Done. [ 1058.742489][ T5823] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1058.845221][T25429] loop3: detected capacity change from 0 to 32768 [ 1058.944162][T25429] JBD2: Ignoring recovery information on journal [ 1059.021557][T25429] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1059.070117][T25429] (syz.3.8281,25429,1):ocfs2_mknod:502 ERROR: status = -31 [ 1059.077841][T25429] (syz.3.8281,25429,1):ocfs2_mkdir:659 ERROR: status = -31 [ 1059.115562][ T5827] ocfs2: Unmounting device (7,3) on (node local) [ 1059.241778][T25439] wg1 speed is unknown, defaulting to 1000 [ 1059.266517][T25439] wg1 speed is unknown, defaulting to 1000 [ 1059.291222][T25439] wg1 speed is unknown, defaulting to 1000 [ 1059.320660][T25439] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1059.351040][T25439] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1059.415879][T25439] wg1 speed is unknown, defaulting to 1000 [ 1059.444605][T25439] wg1 speed is unknown, defaulting to 1000 [ 1059.451979][T25439] wg1 speed is unknown, defaulting to 1000 [ 1059.508051][T25439] wg1 speed is unknown, defaulting to 1000 [ 1059.673346][T25453] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8292'. [ 1059.700381][T25453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8292'. [ 1059.713126][T25456] netlink: 'syz.0.8294': attribute type 8 has an invalid length. [ 1059.994400][T25466] loop0: detected capacity change from 0 to 128 [ 1060.093933][T25466] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1060.109167][T25466] ext4 filesystem being mounted at /2119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1060.333902][T25480] loop1: detected capacity change from 0 to 8192 [ 1060.347877][ T5819] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1060.373009][T25480] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1060.402685][T25480] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1060.440208][T25480] REISERFS (device loop1): using ordered data mode [ 1060.446783][T25480] reiserfs: using flush barriers [ 1060.475016][T25480] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1060.506005][T25480] REISERFS (device loop1): checking transaction log (loop1) [ 1060.514934][T25480] REISERFS (device loop1): Using r5 hash to sort names [ 1060.526221][T25480] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1060.540111][T25480] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1060.692331][T25495] loop3: detected capacity change from 0 to 24 [ 1060.719535][T25495] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1060.730400][T25493] geneve2: entered promiscuous mode [ 1060.749889][T25495] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1060.760584][T25493] geneve2: entered allmulticast mode [ 1060.827358][T25495] VFS: Lookup of 'file0' in romfs loop3 would have caused loop [ 1061.187547][T25505] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1061.237639][T25512] netlink: 'syz.2.8318': attribute type 10 has an invalid length. [ 1061.246426][T25512] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8318'. [ 1061.255724][T25512] bridge0: port 3(batadv0) entered blocking state [ 1061.265375][T25512] bridge0: port 3(batadv0) entered disabled state [ 1061.274723][T25512] batadv0: entered allmulticast mode [ 1061.313953][T25512] batadv0: entered promiscuous mode [ 1061.320238][T25512] bridge0: port 3(batadv0) entered blocking state [ 1061.328908][T25512] bridge0: port 3(batadv0) entered forwarding state [ 1061.589199][T25526] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 1061.599511][T25523] libceph: resolve '4' (ret=-3): failed [ 1061.645002][T25528] tmpfs: Bad value for 'mpol' [ 1061.648104][T25526] comedi comedi3: 8255: I/O port conflict (0xffffffff80000000,4) [ 1061.716623][T25530] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8328'. [ 1061.786482][ T140] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1061.796525][ T140] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1062.231827][T25552] loop0: detected capacity change from 0 to 1024 [ 1062.407373][ T1114] hfsplus: b-tree write err: -5, ino 4 [ 1062.563685][ T9] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1062.573814][T25558] loop2: detected capacity change from 0 to 4096 [ 1062.649055][T25558] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1062.789751][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1062.813943][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 1062.836747][ T9] usb 2-1: config 14 has an invalid interface number: 18 but max is 0 [ 1062.845540][ T9] usb 2-1: config 14 has no interface number 0 [ 1062.869419][ T9] usb 2-1: config 14 interface 18 has no altsetting 0 [ 1062.884621][T25571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8348'. [ 1062.903731][ T9] usb 2-1: New USB device found, idVendor=3980, idProduct=0003, bcdDevice=de.62 [ 1062.919050][T25571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8348'. [ 1062.924051][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.947122][ T5823] ntfs3: loop2: ino=9, ntfs_sync_fs failed, -22. [ 1062.951127][ T9] usb 2-1: Product: syz [ 1062.970255][ T9] usb 2-1: Manufacturer: syz [ 1062.974905][ T9] usb 2-1: SerialNumber: syz [ 1063.058004][T25569] loop0: detected capacity change from 0 to 8192 [ 1063.097240][T25569] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1063.130443][T25569] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 1063.143056][T25569] REISERFS (device loop0): using ordered data mode [ 1063.149700][T25569] reiserfs: using flush barriers [ 1063.180354][T25576] loop2: detected capacity change from 0 to 2048 [ 1063.220170][T25569] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1063.239173][T25569] REISERFS (device loop0): checking transaction log (loop0) [ 1063.246938][T25577] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1063.247436][ T9] rtl8150 2-1:14.18: couldn't find required endpoints [ 1063.287352][ T9] rtl8150: probe of 2-1:14.18 failed with error -5 [ 1063.295087][T25569] REISERFS (device loop0): Using r5 hash to sort names [ 1063.295658][T25576] NILFS (loop2): bad btree root (ino=16): level = 164, flags = 0x1, nchildren = 1 [ 1063.320944][T25569] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1063.366964][ T9] usb 2-1: USB disconnect, device number 17 [ 1063.376165][T25569] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1063.421030][ T5893] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1063.470474][T25579] loop2: detected capacity change from 0 to 256 [ 1063.524305][T25579] FAT-fs (loop2): Directory bread(block 64) failed [ 1063.544147][T25579] FAT-fs (loop2): Directory bread(block 65) failed [ 1063.574435][T25579] FAT-fs (loop2): Directory bread(block 66) failed [ 1063.588489][T25579] FAT-fs (loop2): Directory bread(block 67) failed [ 1063.595734][T25579] FAT-fs (loop2): Directory bread(block 68) failed [ 1063.633259][T25579] FAT-fs (loop2): Directory bread(block 69) failed [ 1063.641281][ T5893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.655116][T25579] FAT-fs (loop2): Directory bread(block 70) failed [ 1063.661698][T25579] FAT-fs (loop2): Directory bread(block 71) failed [ 1063.677578][T25579] FAT-fs (loop2): Directory bread(block 72) failed [ 1063.692747][ T5893] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1063.712596][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.712611][T25579] FAT-fs (loop2): Directory bread(block 73) failed [ 1063.733518][ T5893] usb 4-1: config 0 descriptor?? [ 1063.748429][ T5893] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1063.866224][T25583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8353'. [ 1064.040885][T25587] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1064.181572][ T5893] gspca_spca501: reg write: error -71 [ 1064.187019][ T5893] spca501 4-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 1064.210133][ T5893] spca501: probe of 4-1:0.0 failed with error -22 [ 1064.239382][ T5893] usb 4-1: USB disconnect, device number 23 [ 1064.452245][T25601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8362'. [ 1064.560580][T25593] loop2: detected capacity change from 0 to 32768 [ 1064.567712][ T5916] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1064.619302][T25593] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.8358 (25593) [ 1064.638260][T25593] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1064.659491][T25593] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1064.668257][T25593] BTRFS info (device loop2): setting nodatasum [ 1064.698870][T25593] BTRFS info (device loop2): force zlib compression, level 3 [ 1064.707076][T25593] BTRFS info (device loop2): metadata ratio 1 [ 1064.733835][T25593] BTRFS info (device loop2): enabling ssd optimizations [ 1064.740844][T25593] BTRFS info (device loop2): allowing degraded mounts [ 1064.768950][T25593] BTRFS info (device loop2): using free space tree [ 1064.787411][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 1064.822663][ T5916] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1064.846950][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.875075][ T5916] usb 2-1: Product: syz [ 1064.879298][ T5916] usb 2-1: Manufacturer: syz [ 1064.893354][T25621] netlink: 'syz.0.8366': attribute type 4 has an invalid length. [ 1064.915705][ T5916] usb 2-1: SerialNumber: syz [ 1064.923810][ T5916] usb 2-1: config 0 descriptor?? [ 1065.149660][T25631] loop3: detected capacity change from 0 to 256 [ 1065.169285][ T5916] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 1065.181312][ T5916] 5e 57 f9 3a eb 9a 47 80 [ 1065.190738][T25631] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x0ff561db, utbl_chksum : 0xe619d30d) [ 1065.213324][ T5916] snd-usb-6fire: probe of 2-1:0.0 failed with error -5 [ 1065.328294][ T5823] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1065.413470][ T5916] usb 2-1: USB disconnect, device number 18 [ 1065.655790][T25642] loop0: detected capacity change from 0 to 64 [ 1065.808706][T25646] loop2: detected capacity change from 0 to 512 [ 1065.847020][T25646] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 1066.031385][T25646] block device autoloading is deprecated and will be removed. [ 1066.081186][T25646] EXT4-fs (loop2): external journal has bad superblock [ 1066.231134][ T5832] Bluetooth: hci0: command tx timeout [ 1067.043220][ T5879] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1067.058488][T25690] loop1: detected capacity change from 0 to 64 [ 1067.293259][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 1067.304780][ T5879] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1067.313332][ T28] audit: type=1326 audit(1753921379.011:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25693 comm="syz.1.8400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03edd8e9a9 code=0x7ffc0000 [ 1067.336103][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.336129][ T5879] usb 3-1: Product: syz [ 1067.336142][ T5879] usb 3-1: Manufacturer: syz [ 1067.336155][ T5879] usb 3-1: SerialNumber: syz [ 1067.343800][ T5879] usb 3-1: config 0 descriptor?? [ 1067.387510][ T5879] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1067.406610][ T28] audit: type=1326 audit(1753921379.011:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25693 comm="syz.1.8400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03edd8e9a9 code=0x7ffc0000 [ 1067.407040][ T5879] usb 3-1: Detected FT232H [ 1067.505606][T25684] loop0: detected capacity change from 0 to 32768 [ 1067.515368][ T28] audit: type=1326 audit(1753921379.048:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25693 comm="syz.1.8400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f03edd8e9a9 code=0x7ffc0000 [ 1067.567362][ T28] audit: type=1326 audit(1753921379.067:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25693 comm="syz.1.8400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03edd8e9a9 code=0x7ffc0000 [ 1067.590926][ T28] audit: type=1326 audit(1753921379.067:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25693 comm="syz.1.8400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03edd8e9a9 code=0x7ffc0000 [ 1067.625081][ T5879] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1067.638257][ T28] audit: type=1326 audit(1753921379.067:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25695 comm="syz.1.8400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f03eddc1265 code=0x7ffc0000 [ 1067.661404][ T5879] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1067.671824][ T5879] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1067.679747][T25684] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1067.684052][ T5879] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1067.707176][ T5879] usb 3-1: USB disconnect, device number 32 [ 1067.733590][ T28] audit: type=1326 audit(1753921379.282:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25695 comm="syz.1.8400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f03edd8e9a9 code=0x7ffc0000 [ 1067.766828][ T5879] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1067.812039][ T5879] ftdi_sio 3-1:0.0: device disconnected [ 1067.817299][T25684] (syz.0.8395,25684,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 1067.888342][T25684] (syz.0.8395,25684,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 1067.920655][T25684] (syz.0.8395,25684,0):ocfs2_mknod:298 ERROR: status = -2 [ 1067.927849][T25684] (syz.0.8395,25684,0):ocfs2_mknod:502 ERROR: status = -2 [ 1067.963868][T25684] (syz.0.8395,25684,1):ocfs2_mkdir:659 ERROR: status = -2 [ 1067.975515][T25692] loop3: detected capacity change from 0 to 32768 [ 1068.046109][T25692] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 1068.046109][T25692] [ 1068.069527][T25692] ERROR: (device loop3): remounting filesystem as read-only [ 1068.090179][ T5819] ocfs2: Unmounting device (7,0) on (node local) [ 1068.220321][T25706] loop1: detected capacity change from 0 to 512 [ 1068.247225][T25706] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1068.321041][T25706] EXT4-fs (loop1): 1 truncate cleaned up [ 1068.348605][T25706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1068.394568][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.522515][T25712] netlink: 'syz.3.8407': attribute type 3 has an invalid length. [ 1068.571069][T25715] loop2: detected capacity change from 0 to 256 [ 1068.622425][T25718] loop0: detected capacity change from 0 to 512 [ 1068.683849][T25718] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1068.771780][T25718] EXT4-fs (loop0): 1 truncate cleaned up [ 1068.787853][T25718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1068.969626][T25718] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.8404: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1068.996134][T25731] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1069.082410][T25718] EXT4-fs (loop0): Remounting filesystem read-only [ 1069.091120][T25718] EXT4-fs warning (device loop0): ext4_rename_delete:3778: inode #2: comm syz.0.8404: Deleting old file: nlink 4, error=-117 [ 1069.186071][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.317208][T25739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8419'. [ 1069.342995][T25739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8419'. [ 1069.795790][T25729] loop3: detected capacity change from 0 to 32768 [ 1069.835861][T25729] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 1069.835861][T25729] [ 1069.868358][T25729] ialloc: diAlloc returned -5! [ 1070.178785][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1070.186051][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1070.207995][T25766] loop3: detected capacity change from 0 to 2048 [ 1070.306083][T25766] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1070.361383][T25774] loop0: detected capacity change from 0 to 256 [ 1070.477993][T25774] FAT-fs (loop0): Directory bread(block 64) failed [ 1070.484594][T25774] FAT-fs (loop0): Directory bread(block 65) failed [ 1070.529383][T25774] FAT-fs (loop0): Directory bread(block 66) failed [ 1070.538918][T25774] FAT-fs (loop0): Directory bread(block 67) failed [ 1070.545621][T25774] FAT-fs (loop0): Directory bread(block 68) failed [ 1070.587229][T25774] FAT-fs (loop0): Directory bread(block 69) failed [ 1070.622194][T25774] FAT-fs (loop0): Directory bread(block 70) failed [ 1070.646226][T25774] FAT-fs (loop0): Directory bread(block 71) failed [ 1070.674794][T25774] FAT-fs (loop0): Directory bread(block 72) failed [ 1070.708996][T25774] FAT-fs (loop0): Directory bread(block 73) failed [ 1070.841707][T25785] netlink: 'syz.3.8443': attribute type 21 has an invalid length. [ 1070.870559][T25785] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8443'. [ 1071.114212][T25794] loop3: detected capacity change from 0 to 2048 [ 1071.165078][T25794] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1071.258462][T25801] loop2: detected capacity change from 0 to 1024 [ 1071.276715][T25803] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8451'. [ 1071.425973][T25807] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8453'. [ 1071.450821][T25801] hfsplus: trying to free free bnode 0(1) [ 1071.571342][ T28] audit: type=1326 audit(1753921382.987:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25812 comm="syz.3.8455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0798e9a9 code=0x7ffc0000 [ 1071.609929][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1071.654835][ T28] audit: type=1326 audit(1753921383.015:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25812 comm="syz.3.8455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0798e9a9 code=0x7ffc0000 [ 1071.677110][ C0] vkms_vblank_simulate: vblank timer overrun [ 1071.740414][ T28] audit: type=1326 audit(1753921383.033:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25812 comm="syz.3.8455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2d0798e9a9 code=0x7ffc0000 [ 1071.885232][T25821] loop2: detected capacity change from 0 to 256 [ 1071.922283][T25821] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1071.951379][T25821] FAT-fs (loop2): Filesystem has been set read-only [ 1071.961421][T25821] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1071.992840][T25821] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1072.197964][T25828] PKCS8: Unsupported PKCS#8 version [ 1072.323402][T25811] loop1: detected capacity change from 0 to 32768 [ 1072.394066][T25811] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1072.521113][T25811] XFS (loop1): Ending clean mount [ 1072.705913][T25846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8467'. [ 1072.728250][T25846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8467'. [ 1072.741978][ T5826] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1072.974610][T25854] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1073.183727][T25861] loop1: detected capacity change from 0 to 128 [ 1073.254542][ T7544] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1073.260524][T25861] autofs4:pid:25861:autofs_fill_super: called with bogus options [ 1073.657649][T25880] loop2: detected capacity change from 0 to 2048 [ 1073.672019][T25880] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1073.721925][T25881] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1073.723667][T25880] syz.2.8485: attempt to access beyond end of device [ 1073.723667][T25880] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1073.877933][T25880] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 16777227 [ 1073.897960][T25880] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1073.936292][T25880] Remounting filesystem read-only [ 1073.951372][T25880] NILFS (loop2): error -5 truncating bmap (ino=16) [ 1074.060020][ T5823] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 1074.077435][ T5823] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 1074.093293][ T5823] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1074.113652][ T5823] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1074.137901][ T5823] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1074.171179][ T5823] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 1074.194103][T25891] loop3: detected capacity change from 0 to 4096 [ 1074.202796][T25891] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1074.236140][ T5823] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 1074.256634][ T5823] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1074.268928][ T5823] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1074.278666][ T5823] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 1074.299771][ T5823] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1074.414812][T25898] loop0: detected capacity change from 0 to 1024 [ 1074.634327][T25903] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1074.802894][T25909] loop3: detected capacity change from 0 to 8 [ 1074.819255][T25909] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1074.846104][ T7544] udevd[7544]: incorrect cramfs checksum on /dev/loop3 [ 1075.328519][T25925] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8507'. [ 1075.364778][T25900] loop1: detected capacity change from 0 to 32768 [ 1075.421366][T25900] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1075.536650][T25900] XFS (loop1): Ending clean mount [ 1075.598631][T25900] XFS (loop1): Quotacheck needed: Please wait. [ 1075.716241][T25945] Zero length message leads to an empty skb [ 1075.888709][T25900] XFS (loop1): Quotacheck: Done. [ 1076.102818][ T5826] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1076.274906][T25927] loop2: detected capacity change from 0 to 32768 [ 1076.313122][T25927] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.8508 (25927) [ 1076.477945][T25927] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1076.504862][T25927] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1076.538764][T25927] BTRFS info (device loop2): force zlib compression, level 3 [ 1076.560467][T25961] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1076.568996][T25927] BTRFS info (device loop2): force clearing of disk cache [ 1076.576153][T25927] BTRFS info (device loop2): setting nodatasum [ 1076.644113][T25927] BTRFS info (device loop2): doing ref verification [ 1076.656714][T25927] BTRFS info (device loop2): allowing degraded mounts [ 1076.671922][T25927] BTRFS info (device loop2): enabling disk space caching [ 1076.723323][T25927] BTRFS info (device loop2): disk space caching is enabled [ 1076.976086][T25927] BTRFS info (device loop2): enabling ssd optimizations [ 1076.983113][T25927] BTRFS info (device loop2): auto enabling async discard [ 1077.027410][T25988] loop1: detected capacity change from 0 to 512 [ 1077.045153][T25927] BTRFS info (device loop2): rebuilding free space tree [ 1077.078086][T25989] loop3: detected capacity change from 0 to 512 [ 1077.109273][T25927] BTRFS info (device loop2): disabling free space tree [ 1077.125950][T25989] EXT4-fs: Ignoring removed mblk_io_submit option [ 1077.141442][T25988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1077.166052][T25927] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1077.208469][T25988] ext4 filesystem being mounted at /2093/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1077.222562][T25927] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1077.246682][T25989] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.8527: inode #13: comm syz.3.8527: iget: illegal inode # [ 1077.301100][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.359689][T25989] EXT4-fs (loop3): Remounting filesystem read-only [ 1077.371858][ T5823] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1077.381890][T25989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1077.473337][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.489495][ T5879] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1077.622179][ T7544] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop2 scanned by udevd (7544) [ 1077.724715][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1077.739288][ T5879] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1077.787165][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.810824][ T5879] usb 1-1: config 0 descriptor?? [ 1077.875527][ T5879] smsusb:smsusb_probe: board id=8, interface number 0 [ 1077.889342][T26009] netlink: 'syz.3.8535': attribute type 10 has an invalid length. [ 1077.905572][T26009] bond0: (slave wlan1): Opening slave failed [ 1077.910904][ T5879] smsusb:smsusb_probe: Device initialized with return code -19 [ 1078.093778][ T5816] usb 1-1: USB disconnect, device number 125 [ 1078.254426][T26017] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8538'. [ 1078.357277][T26021] team0: Port device team_slave_0 removed [ 1078.363879][T26021] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1078.529740][T26028] loop1: detected capacity change from 0 to 64 [ 1078.599614][T26028] hfs: keylen 94 too large [ 1078.859567][T26040] tmpfs: Bad value for 'mpol' [ 1079.037232][T26047] netlink: 'syz.1.8552': attribute type 75 has an invalid length. [ 1079.052216][T26050] Cannot find map_set index 65532 as target [ 1079.463206][T26069] loop1: detected capacity change from 0 to 256 [ 1079.495795][T26069] FAT-fs (loop1): Directory bread(block 64) failed [ 1079.518970][T26069] FAT-fs (loop1): Directory bread(block 65) failed [ 1079.557365][T26069] FAT-fs (loop1): Directory bread(block 66) failed [ 1079.591778][T26069] FAT-fs (loop1): Directory bread(block 67) failed [ 1079.623920][T26069] FAT-fs (loop1): Directory bread(block 68) failed [ 1079.634802][T26069] FAT-fs (loop1): Directory bread(block 69) failed [ 1079.662345][T26069] FAT-fs (loop1): Directory bread(block 70) failed [ 1079.669220][T26069] FAT-fs (loop1): Directory bread(block 71) failed [ 1079.683711][T26069] FAT-fs (loop1): Directory bread(block 72) failed [ 1079.696306][T26069] FAT-fs (loop1): Directory bread(block 73) failed [ 1079.924570][T26084] loop0: detected capacity change from 0 to 256 [ 1080.050573][T26084] FAT-fs (loop0): Directory bread(block 64) failed [ 1080.068290][T26084] FAT-fs (loop0): Directory bread(block 65) failed [ 1080.085968][T26084] FAT-fs (loop0): Directory bread(block 66) failed [ 1080.100832][T26084] FAT-fs (loop0): Directory bread(block 67) failed [ 1080.119252][T26084] FAT-fs (loop0): Directory bread(block 68) failed [ 1080.126368][T26084] FAT-fs (loop0): Directory bread(block 69) failed [ 1080.144482][T26084] FAT-fs (loop0): Directory bread(block 70) failed [ 1080.155990][T26084] FAT-fs (loop0): Directory bread(block 71) failed [ 1080.162846][T26084] FAT-fs (loop0): Directory bread(block 72) failed [ 1080.169400][T26084] FAT-fs (loop0): Directory bread(block 73) failed [ 1080.352864][ T5879] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1080.506567][T26095] netlink: 'syz.0.8576': attribute type 1 has an invalid length. [ 1080.523906][T26095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8576'. [ 1080.558060][ T5879] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 1080.566218][ T5879] usb 3-1: config 0 has no interface number 0 [ 1080.577371][ T5879] usb 3-1: config 0 interface 11 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 1080.598396][ T5879] usb 3-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1080.629233][ T5879] usb 3-1: config 0 interface 11 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 1080.652901][ T5879] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 1080.662319][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.681391][ T5879] usb 3-1: Product: syz [ 1080.686041][ T5879] usb 3-1: Manufacturer: syz [ 1080.690852][ T5879] usb 3-1: SerialNumber: syz [ 1080.717212][ T5879] usb 3-1: config 0 descriptor?? [ 1080.723009][T26089] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1080.723785][T26091] loop1: detected capacity change from 0 to 32768 [ 1080.731337][T26089] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1080.774363][T26091] (syz.1.8574,26091,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1080.824848][T26091] (syz.1.8574,26091,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1080.872414][T26091] JBD2: Ignoring recovery information on journal [ 1080.895573][T26093] loop3: detected capacity change from 0 to 32768 [ 1080.947495][T26091] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1080.969065][T26093] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1080.989757][T26089] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1081.015961][T26089] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1081.110910][T26093] XFS (loop3): Ending clean mount [ 1081.123678][T26093] XFS (loop3): Quotacheck needed: Please wait. [ 1081.271732][ T5879] usb 3-1: Incompatible driver and firmware versions [ 1081.275571][ T5826] ocfs2: Unmounting device (7,1) on (node local) [ 1081.297617][ T5879] usb 3-1: USB disconnect, device number 33 [ 1081.326664][T26093] XFS (loop3): Quotacheck: Done. [ 1081.481100][ T5827] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1081.662560][T26116] loop1: detected capacity change from 0 to 1024 [ 1081.691500][T26114] loop0: detected capacity change from 0 to 40427 [ 1081.705398][T26114] F2FS-fs (loop0): build fault injection attr: rate: 25, type: 0x7ffff [ 1081.729355][T26114] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x7698c [ 1081.747632][T26114] F2FS-fs (loop0): invalid crc value [ 1081.763952][T26114] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920 [ 1081.787530][T26114] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1081.832778][T26114] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 1081.882431][T26114] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1081.917157][T26114] F2FS-fs (loop0): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0 [ 1082.054958][ C1] F2FS-fs (loop0): inject write IO error in f2fs_write_end_io of blk_update_request+0x597/0xe40 [ 1082.066478][ C1] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1082.073454][ T5819] F2FS-fs (loop0): do_checkpoint failed err:-5, stop checkpoint [ 1082.383010][T26122] loop2: detected capacity change from 0 to 32768 [ 1082.523298][T26122] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 1082.552243][T26122] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1082.581995][T26138] loop0: detected capacity change from 0 to 512 [ 1082.600706][T26143] loop1: detected capacity change from 0 to 256 [ 1082.634130][T26138] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1082.674541][T26143] FAT-fs (loop1): Directory bread(block 64) failed [ 1082.682227][T26143] FAT-fs (loop1): Directory bread(block 65) failed [ 1082.690751][T26143] FAT-fs (loop1): Directory bread(block 66) failed [ 1082.698417][T26143] FAT-fs (loop1): Directory bread(block 67) failed [ 1082.706811][T26143] FAT-fs (loop1): Directory bread(block 68) failed [ 1082.714124][T26143] FAT-fs (loop1): Directory bread(block 69) failed [ 1082.722545][T26143] FAT-fs (loop1): Directory bread(block 70) failed [ 1082.729997][T26143] FAT-fs (loop1): Directory bread(block 71) failed [ 1082.737974][T26138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1082.751409][T26143] FAT-fs (loop1): Directory bread(block 72) failed [ 1082.762335][T26143] FAT-fs (loop1): Directory bread(block 73) failed [ 1082.769411][T26138] ext4 filesystem being mounted at /2200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1082.803837][T26122] XFS (loop2): Ending clean mount [ 1082.960279][T26138] [ 1082.962672][T26138] ====================================================== [ 1082.969702][T26138] WARNING: possible circular locking dependency detected [ 1082.977090][T26138] 6.6.99-syzkaller #0 Not tainted [ 1082.982130][T26138] ------------------------------------------------------ [ 1082.989160][T26138] syz.0.8589/26138 is trying to acquire lock: [ 1082.995240][T26138] ffff88805eb0ece8 (&dquot->dq_lock){+.+.}-{3:3}, at: dqget+0x6fc/0xeb0 [ 1083.003638][T26138] [ 1083.003638][T26138] but task is already holding lock: [ 1083.011021][T26138] ffff88805b4e00c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_setattr+0x86b/0x1c90 [ 1083.020028][T26138] [ 1083.020028][T26138] which lock already depends on the new lock. [ 1083.020028][T26138] [ 1083.030451][T26138] [ 1083.030451][T26138] the existing dependency chain (in reverse order) is: [ 1083.039475][T26138] [ 1083.039475][T26138] -> #5 (&ei->xattr_sem){++++}-{3:3}: [ 1083.047074][T26138] down_read+0x46/0x2e0 [ 1083.051779][T26138] ext4_setattr+0x86b/0x1c90 [ 1083.056923][T26138] notify_change+0xb0d/0xe10 [ 1083.062231][T26138] chown_common+0x3f9/0x5a0 [ 1083.067281][T26138] do_fchownat+0x168/0x270 [ 1083.069536][T26148] loop3: detected capacity change from 0 to 256 [ 1083.072221][T26138] __x64_sys_chown+0x82/0x90 [ 1083.072251][T26138] do_syscall_64+0x55/0xb0 [ 1083.088559][T26138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1083.095028][T26138] [ 1083.095028][T26138] -> #4 (jbd2_handle){++++}-{0:0}: [ 1083.102348][T26138] start_this_handle+0x1e9d/0x20c0 [ 1083.108004][T26138] jbd2__journal_start+0x2bb/0x5b0 [ 1083.113657][T26138] jbd2_journal_start+0x2a/0x40 [ 1083.119028][T26138] ocfs2_start_trans+0x376/0x6c0 [ 1083.124483][T26138] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 1083.130712][T26138] ocfs2_mount_volume+0x12bc/0x14d0 [ 1083.136417][T26138] ocfs2_fill_super+0x3462/0x4d90 [ 1083.141947][T26138] mount_bdev+0x22b/0x2d0 [ 1083.146788][T26138] legacy_get_tree+0xea/0x180 [ 1083.151976][T26138] vfs_get_tree+0x8c/0x280 [ 1083.156897][T26138] do_new_mount+0x24b/0xa40 [ 1083.161907][T26138] __se_sys_mount+0x2da/0x3c0 [ 1083.167090][T26138] do_syscall_64+0x55/0xb0 [ 1083.172018][T26138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1083.178424][T26138] [ 1083.178424][T26138] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1083.187017][T26138] down_read+0x46/0x2e0 [ 1083.191687][T26138] ocfs2_start_trans+0x36a/0x6c0 [ 1083.197153][T26138] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 1083.203420][T26138] ocfs2_mount_volume+0x12bc/0x14d0 [ 1083.209233][T26138] ocfs2_fill_super+0x3462/0x4d90 [ 1083.214771][T26138] mount_bdev+0x22b/0x2d0 [ 1083.219613][T26138] legacy_get_tree+0xea/0x180 [ 1083.224799][T26138] vfs_get_tree+0x8c/0x280 [ 1083.229727][T26138] do_new_mount+0x24b/0xa40 [ 1083.234740][T26138] __se_sys_mount+0x2da/0x3c0 [ 1083.239927][T26138] do_syscall_64+0x55/0xb0 [ 1083.244856][T26138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1083.251266][T26138] [ 1083.251266][T26138] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 1083.258733][T26138] ocfs2_start_trans+0x26b/0x6c0 [ 1083.264191][T26138] ocfs2_acquire_dquot+0x67b/0xaf0 [ 1083.269815][T26138] dqget+0x77c/0xeb0 [ 1083.274222][T26138] dquot_set_dqblk+0x2b/0xf90 [ 1083.279410][T26138] quota_setquota+0x4b0/0x530 [ 1083.284603][T26138] __se_sys_quotactl+0x27b/0x950 [ 1083.290052][T26138] do_syscall_64+0x55/0xb0 [ 1083.294977][T26138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1083.301385][T26138] [ 1083.301385][T26138] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 1083.310237][T26138] down_write+0x97/0x1f0 [ 1083.314994][T26138] ocfs2_create_local_dquot+0x1a4/0x1790 [ 1083.321135][T26138] ocfs2_acquire_dquot+0x7cf/0xaf0 [ 1083.326756][T26138] dqget+0x77c/0xeb0 [ 1083.331161][T26138] dquot_set_dqblk+0x2b/0xf90 [ 1083.336351][T26138] quota_setquota+0x4b0/0x530 [ 1083.341545][T26138] __se_sys_quotactl+0x27b/0x950 [ 1083.346999][T26138] do_syscall_64+0x55/0xb0 [ 1083.352012][T26138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1083.358419][T26138] [ 1083.358419][T26138] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 1083.366053][T26138] __lock_acquire+0x2ddb/0x7c80 [ 1083.371415][T26138] lock_acquire+0x197/0x410 [ 1083.376429][T26138] __mutex_lock+0x129/0xcc0 [ 1083.381445][T26138] dqget+0x6fc/0xeb0 [ 1083.385852][T26138] dquot_transfer+0x2f9/0x6d0 [ 1083.391040][T26138] ext4_setattr+0x87d/0x1c90 [ 1083.396145][T26138] notify_change+0xb0d/0xe10 [ 1083.401246][T26138] chown_common+0x3f9/0x5a0 [ 1083.406258][T26138] do_fchownat+0x168/0x270 [ 1083.411182][T26138] __x64_sys_lchown+0x85/0x90 [ 1083.416366][T26138] do_syscall_64+0x55/0xb0 [ 1083.421295][T26138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1083.427701][T26138] [ 1083.427701][T26138] other info that might help us debug this: [ 1083.427701][T26138] [ 1083.438000][T26138] Chain exists of: [ 1083.438000][T26138] &dquot->dq_lock --> jbd2_handle --> &ei->xattr_sem [ 1083.438000][T26138] [ 1083.450595][T26138] Possible unsafe locking scenario: [ 1083.450595][T26138] [ 1083.458028][T26138] CPU0 CPU1 [ 1083.463463][T26138] ---- ---- [ 1083.468815][T26138] rlock(&ei->xattr_sem); [ 1083.473222][T26138] lock(jbd2_handle); [ 1083.479795][T26138] lock(&ei->xattr_sem); [ 1083.486650][T26138] lock(&dquot->dq_lock); [ 1083.491119][T26138] [ 1083.491119][T26138] *** DEADLOCK *** [ 1083.491119][T26138] [ 1083.499256][T26138] 3 locks held by syz.0.8589/26138: [ 1083.504434][T26138] #0: ffff888020a78418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1083.513576][T26138] #1: ffff88805b4e0410 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: chown_common+0x313/0x5a0 [ 1083.523927][T26138] #2: ffff88805b4e00c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_setattr+0x86b/0x1c90 [ 1083.533317][T26138] [ 1083.533317][T26138] stack backtrace: [ 1083.539187][T26138] CPU: 1 PID: 26138 Comm: syz.0.8589 Not tainted 6.6.99-syzkaller #0 [ 1083.547237][T26138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1083.557277][T26138] Call Trace: [ 1083.560576][T26138] [ 1083.563498][T26138] dump_stack_lvl+0x16c/0x230 [ 1083.568172][T26138] ? load_image+0x3b0/0x3b0 [ 1083.572671][T26138] ? show_regs_print_info+0x20/0x20 [ 1083.577860][T26138] ? print_circular_bug+0x12b/0x1a0 [ 1083.583052][T26138] check_noncircular+0x2bd/0x3c0 [ 1083.587978][T26138] ? look_up_lock_class+0x75/0x140 [ 1083.593084][T26138] ? print_deadlock_bug+0x5d0/0x5d0 [ 1083.598273][T26138] ? lockdep_lock+0xe0/0x220 [ 1083.602854][T26138] ? _find_first_zero_bit+0xd3/0x100 [ 1083.608134][T26138] __lock_acquire+0x2ddb/0x7c80 [ 1083.612981][T26138] ? mark_lock+0x94/0x320 [ 1083.617304][T26138] ? verify_lock_unused+0x140/0x140 [ 1083.622493][T26138] ? __lock_acquire+0x1334/0x7c80 [ 1083.627512][T26138] lock_acquire+0x197/0x410 [ 1083.632008][T26138] ? dqget+0x6fc/0xeb0 [ 1083.636070][T26138] ? __might_sleep+0xe0/0xe0 [ 1083.640650][T26138] ? read_lock_is_recursive+0x20/0x20 [ 1083.646100][T26138] ? mark_lock+0x94/0x320 [ 1083.650422][T26138] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1083.656393][T26138] __mutex_lock+0x129/0xcc0 [ 1083.660892][T26138] ? dqget+0x6fc/0xeb0 [ 1083.664951][T26138] ? percpu_counter_add_batch+0x1d9/0x280 [ 1083.670663][T26138] ? lockdep_hardirqs_on+0x98/0x150 [ 1083.675857][T26138] ? percpu_counter_add_batch+0x22b/0x280 [ 1083.681571][T26138] ? dqget+0x6fc/0xeb0 [ 1083.685631][T26138] ? mutex_lock_nested+0x20/0x20 [ 1083.690561][T26138] ? percpu_counter_set+0x1a0/0x1a0 [ 1083.695754][T26138] ? make_kuid+0x640/0x640 [ 1083.700162][T26138] ? do_raw_spin_unlock+0x121/0x230 [ 1083.705353][T26138] dqget+0x6fc/0xeb0 [ 1083.709255][T26138] dquot_transfer+0x2f9/0x6d0 [ 1083.713927][T26138] ? __dquot_transfer+0x22f0/0x22f0 [ 1083.719120][T26138] ? down_read+0x1ac/0x2e0 [ 1083.723537][T26138] ext4_setattr+0x87d/0x1c90 [ 1083.728123][T26138] ? evm_inode_setattr+0x94/0x6a0 [ 1083.733144][T26138] ? bpf_lsm_inode_setattr+0x9/0x10 [ 1083.738332][T26138] ? try_break_deleg+0x79/0x120 [ 1083.743185][T26138] ? ext4_write_inode+0x550/0x550 [ 1083.748202][T26138] notify_change+0xb0d/0xe10 [ 1083.752789][T26138] chown_common+0x3f9/0x5a0 [ 1083.757286][T26138] ? __ia32_sys_chmod+0x70/0x70 [ 1083.762127][T26138] ? rcu_read_lock_any_held+0xb4/0x120 [ 1083.767583][T26138] ? __mnt_want_write+0x223/0x2a0 [ 1083.772604][T26138] do_fchownat+0x168/0x270 [ 1083.777011][T26138] ? chown_common+0x5a0/0x5a0 [ 1083.781717][T26138] __x64_sys_lchown+0x85/0x90 [ 1083.786387][T26138] do_syscall_64+0x55/0xb0 [ 1083.790794][T26138] ? clear_bhb_loop+0x40/0x90 [ 1083.795634][T26138] ? clear_bhb_loop+0x40/0x90 [ 1083.800298][T26138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1083.806186][T26138] RIP: 0033:0x7f8632f8e9a9 [ 1083.810592][T26138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1083.830193][T26138] RSP: 002b:00007f8633db8038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 1083.838598][T26138] RAX: ffffffffffffffda RBX: 00007f86331b5fa0 RCX: 00007f8632f8e9a9 [ 1083.846561][T26138] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000200000000000 [ 1083.854527][T26138] RBP: 00007f8633010d69 R08: 0000000000000000 R09: 0000000000000000 [ 1083.862487][T26138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1083.870451][T26138] R13: 0000000000000000 R14: 00007f86331b5fa0 R15: 00007ffd68898b08 [ 1083.878591][T26138] [ 1083.933012][ T5823] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1083.949957][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.018096][T26150] bridge2: entered allmulticast mode