last executing test programs: 5.196104282s ago: executing program 3 (id=8475): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f0000000080)={[{@compress_force}, {@clear_cache}, {@nobarrier}, {@ref_verify}, {@acl}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000840)={0x10, 0x0, {0x1, @struct={0x7, 0xffffffff}, 0x0, 0xf, 0x0, 0x1ff, 0x3, 0x7, 0x0, @struct={0x7, 0x3}, 0x6, 0x2, [0x5, 0x3, 0x70cc, 0x4, 0x27f]}, {0x0, @usage=0x8, 0x0, 0xd4a, 0x7f, 0x0, 0x2, 0x6e1, 0x449, @struct={0x45a4, 0xc}, 0x5, 0x0, [0xba, 0x1, 0x6, 0x0, 0xfffffffffffffffe, 0x83bd]}, {0x5, @usage=0xffffffff, 0x0, 0xc, 0x9, 0x6, 0x1, 0x3, 0x4, @usage=0x2, 0x3, 0x3, [0xf, 0xffffffff987532e6, 0x8, 0x3, 0x30560, 0x1]}, {0x100000000, 0x400, 0x6}}) 3.604309292s ago: executing program 2 (id=8488): syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000180)={[{@nolazytime}, {@abort}, {@lazytime}, {@quota}, {@noauto_da_alloc}]}, 0xde, 0x53b, &(0x7f0000000e00)="$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") symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.887449725s ago: executing program 3 (id=8491): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000003c0)={{0x14, 0x3f8, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000009}, 0x4) 2.701872039s ago: executing program 2 (id=8493): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x37, 0x2d, 0x30, 0x3a]}}}, 0x4e}]}) 2.349528705s ago: executing program 3 (id=8495): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800dac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 2.295436957s ago: executing program 2 (id=8496): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000200)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@jqfmt_vfsv1}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x6, 0x800077, 0x20800000000412, 0x6, 0x7, 0x1000, 0xf67, 0x10}) 2.246853418s ago: executing program 0 (id=8497): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x80000, 0x0, 0x0, 0x20, 0x19, 0xffffffff}) 2.0979261s ago: executing program 0 (id=8498): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000140)={0x0, 0x80, 0x2, 0x9, 0x1, [], [0xce, 0x1, 0x7], [0xe, 0x6, 0x0, 0x9], [0x2, 0xffffffff, 0x9, 0x3]}) 1.886693304s ago: executing program 3 (id=8499): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x3c, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@typed={0x8, 0x55, 0x0, 0x0, @u32}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0xc004) 1.787536826s ago: executing program 3 (id=8500): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000290000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f00000001c0), 0x0}, 0x20) 1.761694687s ago: executing program 0 (id=8501): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xdd2fcb245114ab72}}) 1.668901359s ago: executing program 3 (id=8502): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000440)={0x1, 0xb46, 0x0, 0x20000000000413, 0x4, 0x8, 0x1000, 0xf67, 0xf}) 1.59949648s ago: executing program 0 (id=8503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x20000000) 1.487467572s ago: executing program 2 (id=8504): r0 = socket(0x11, 0xa, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 1.354764404s ago: executing program 0 (id=8506): r0 = syz_open_dev$loop(&(0x7f00000006c0), 0xff, 0x84800) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) 1.216974177s ago: executing program 2 (id=8508): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x276, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.idle_time\x00', 0x275a, 0x0) 1.197254517s ago: executing program 0 (id=8509): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f00000001c0)='./file1\x00', 0x810, &(0x7f0000000300)={[{@treelog}, {@nossd}, {@autodefrag}, {@thread_pool={'thread_pool', 0x3d, 0x4}}, {@nodatasum}, {@thread_pool={'thread_pool', 0x3d, 0x4}}, {@flushoncommit}, {@user_subvol_rm}, {@ref_verify}, {}, {@clear_cache}, {@flushoncommit}, {@ssd}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@ssd}]}, 0x1, 0x50f3, &(0x7f0000005140)="$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") llistxattr(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 1.116424059s ago: executing program 1 (id=8510): r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) 1.009776651s ago: executing program 2 (id=8511): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 911.327253ms ago: executing program 1 (id=8512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xeb489d8}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x94}}, 0x0) 779.506666ms ago: executing program 1 (id=8513): capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0xc771, 0xffffffff, 0x11}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000850000009900000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 599.430449ms ago: executing program 1 (id=8514): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, 0x0) 458.881402ms ago: executing program 1 (id=8515): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005b80)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}}, 0x4000000) 0s ago: executing program 1 (id=8516): iopl(0x3) fadvise64(0xffffffffffffffff, 0xf149, 0x318, 0x4) kernel console output (not intermixed with test programs): : detected capacity change from 0 to 512 [ 991.260515][T22616] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 991.273606][T22620] futex_wake_op: syz.3.7494 tries to shift op by 35; fix this program [ 991.295635][T22616] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 991.311216][T21140] gspca_main: sonixj-2.14.0 probing 06f8:3004 [ 991.317682][T22616] EXT4-fs (loop0): 1 truncate cleaned up [ 991.329483][T22616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 991.343687][T21140] gspca_sonixj: reg_w1 err -71 [ 991.351032][T21140] sonixj: probe of 3-1:8.0 failed with error -71 [ 991.363186][T21140] usb 3-1: USB disconnect, device number 14 [ 991.558773][ T6226] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.234434][T21140] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 992.456375][T22630] loop1: detected capacity change from 0 to 32768 [ 992.462949][T21140] usb 1-1: Using ep0 maxpacket: 8 [ 992.471941][T22624] loop3: detected capacity change from 0 to 32768 [ 992.478710][T21140] usb 1-1: config 0 has an invalid interface number: 124 but max is 0 [ 992.478738][T21140] usb 1-1: config 0 has no interface number 0 [ 992.481510][T21140] usb 1-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=72.01 [ 992.504855][T21140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.513113][T21140] usb 1-1: Product: syz [ 992.517825][T21140] usb 1-1: Manufacturer: syz [ 992.522644][T21140] usb 1-1: SerialNumber: syz [ 992.530139][T21140] usb 1-1: config 0 descriptor?? [ 992.561613][T22630] (syz.1.7499,22630,0):ocfs2_journal_addressable:1993 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2 [ 992.561655][T22630] (syz.1.7499,22630,0):ocfs2_check_volume:2490 ERROR: status = -27 [ 992.582121][T22624] gfs2: fsid=meta: Trying to join cluster "lock_nolock", "meta" [ 992.587908][T22630] (syz.1.7499,22630,0):ocfs2_mount_volume:1822 ERROR: status = -27 [ 992.604857][T22630] (syz.1.7499,22630,0):ocfs2_fill_super:1178 ERROR: status = -27 [ 992.616345][T22624] gfs2: fsid=meta: Now mounting FS (format 0)... [ 992.648200][T22624] gfs2: Invalid block size [ 992.655263][T22624] gfs2: fsid=meta: can't read superblock [ 992.667738][T22624] gfs2: fsid=meta: can't read superblock: -22 [ 992.737895][T21140] usb 1-1: USB disconnect, device number 126 [ 993.095524][T22656] loop2: detected capacity change from 0 to 164 [ 993.222089][T21140] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 993.448651][T21140] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 993.483182][T21140] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 993.526090][T21140] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 993.557908][T21140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.573437][T21140] usb 4-1: Product: syz [ 993.579848][T21140] usb 4-1: Manufacturer: syz [ 993.584504][T21140] usb 4-1: SerialNumber: syz [ 993.877047][T21140] usb 4-1: USB disconnect, device number 17 [ 993.923113][ T8734] udevd[8734]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 994.188117][T22682] loop1: detected capacity change from 0 to 512 [ 994.219977][T22662] loop2: detected capacity change from 0 to 32768 [ 994.239376][T22662] XFS (loop2): stripe width (6) must be a multiple of the stripe unit (32769) [ 994.274204][T22682] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.7524: invalid block [ 994.288281][T22682] EXT4-fs (loop1): Remounting filesystem read-only [ 994.300613][T22682] EXT4-fs (loop1): 1 truncate cleaned up [ 994.308126][T22682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 994.321828][ T6283] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 994.524018][ T6223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.539640][ T6283] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 994.555282][ T6283] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 994.562235][T22690] loop3: detected capacity change from 0 to 128 [ 994.588204][T22690] hpfs: bad mount options. [ 994.618982][ T6283] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 994.667594][ T6283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 994.706147][ T6283] usb 1-1: SerialNumber: syz [ 994.742697][ T6283] cdc_ether 1-1:1.0: skipping garbage [ 994.748142][ T6283] usb 1-1: bad CDC descriptors [ 994.797915][ T6283] usb-storage 1-1:1.0: USB Mass Storage device detected [ 994.836105][ T6283] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 994.970495][T21140] usb 1-1: USB disconnect, device number 127 [ 995.158927][T22708] tmpfs: Bad value for 'mpol' [ 995.411693][T22718] loop1: detected capacity change from 0 to 512 [ 995.434930][T22718] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 995.477329][T13736] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 995.485196][T22718] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.7540: iget: bad i_size value: 360287970189639680 [ 995.535663][T22718] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.7540: couldn't read orphan inode 15 (err -117) [ 995.604224][T22718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 995.676738][T13736] usb 4-1: unable to get BOS descriptor or descriptor too short [ 995.693314][T13736] usb 4-1: config 2 has an invalid interface number: 254 but max is 0 [ 995.726440][T13736] usb 4-1: config 2 has no interface number 0 [ 995.750492][T13736] usb 4-1: New USB device found, idVendor=04cb, idProduct=0109, bcdDevice=c1.88 [ 995.773229][T13736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.792176][T13736] usb 4-1: Product: syz [ 995.799413][ T6223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.813436][T13736] usb 4-1: Manufacturer: syz [ 995.818084][T13736] usb 4-1: SerialNumber: syz [ 996.029138][T22714] loop2: detected capacity change from 0 to 32768 [ 996.048995][T13736] gspca_main: finepix-2.14.0 probing 04cb:0109 [ 996.090936][T13736] usb 4-1: USB disconnect, device number 18 [ 996.298017][T21140] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 996.503063][T21140] usb 1-1: Using ep0 maxpacket: 32 [ 996.528863][T21140] usb 1-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 996.544757][T21140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.560501][T21140] usb 1-1: Product: syz [ 996.575430][T21140] usb 1-1: Manufacturer: syz [ 996.598987][T21140] usb 1-1: SerialNumber: syz [ 996.614818][T21140] usb 1-1: config 0 descriptor?? [ 996.622646][T21140] empeg 1-1:0.0: empeg converter detected [ 996.639730][T21140] usb 1-1: active config #0 != 1 ?? [ 996.782217][ T6320] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 996.823255][ T5632] usb 1-1: USB disconnect, device number 2 [ 996.831980][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 996.931262][T15159] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 996.959333][ T6320] usb 2-1: Using ep0 maxpacket: 32 [ 996.973752][ T6320] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 996.983212][ T6320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.991615][ T6320] usb 2-1: Product: syz [ 996.995977][ T6320] usb 2-1: Manufacturer: syz [ 997.000652][ T6320] usb 2-1: SerialNumber: syz [ 997.008158][ T6320] usb 2-1: config 0 descriptor?? [ 997.014875][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 997.022389][ T6320] gspca_main: 174f:6a31 too many config [ 997.030582][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 997.041023][ T9] usb 3-1: config 1 has an invalid interface number: 67 but max is 0 [ 997.049305][ T9] usb 3-1: config 1 has no interface number 0 [ 997.057109][ T9] usb 3-1: config 1 interface 67 altsetting 9 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 997.069148][ T9] usb 3-1: config 1 interface 67 altsetting 9 endpoint 0x2 has invalid wMaxPacketSize 0 [ 997.079388][ T9] usb 3-1: config 1 interface 67 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 997.092550][ T9] usb 3-1: config 1 interface 67 has no altsetting 0 [ 997.102167][ T9] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=b9.ec [ 997.111392][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.119629][T15159] usb 4-1: Using ep0 maxpacket: 8 [ 997.124954][ T9] usb 3-1: Product: syz [ 997.129344][ T9] usb 3-1: Manufacturer: syz [ 997.134324][ T9] usb 3-1: SerialNumber: syz [ 997.140201][T15159] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 997.148996][T15159] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 997.161499][T15159] usb 4-1: config 135 has no interface number 0 [ 997.169386][T15159] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 997.186856][T15159] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 997.196013][T15159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.204119][T15159] usb 4-1: Product: syz [ 997.208348][T15159] usb 4-1: Manufacturer: syz [ 997.213088][T15159] usb 4-1: SerialNumber: syz [ 997.234338][T15159] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 997.241742][T21140] usb 2-1: USB disconnect, device number 30 [ 997.260902][T15159] usb 4-1: No valid video chain found. [ 997.370646][ T9] radio-si470x 3-1:1.67: could not find interrupt in endpoint [ 997.385005][ T9] radio-si470x: probe of 3-1:1.67 failed with error -5 [ 997.394305][ T9] usbhid 3-1:1.67: couldn't find an input interrupt endpoint [ 997.422051][ T9] usb 3-1: USB disconnect, device number 15 [ 997.452848][ T27] usb 4-1: USB disconnect, device number 19 [ 997.849592][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.856280][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.900895][T21140] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 998.104443][T22764] loop3: detected capacity change from 0 to 2048 [ 998.114678][T21140] usb 1-1: Using ep0 maxpacket: 8 [ 998.121890][T21140] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 998.147788][T21140] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 998.166924][T21140] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 998.175140][T22764] loop3: p1 < > p4 [ 998.175140][T22764] p4: [ 998.186265][T22764] loop3: p4 size 722688 extends beyond EOD, truncated [ 998.195642][T21140] usb 1-1: Product: syz [ 998.202139][T21140] usb 1-1: Manufacturer: syz [ 998.227170][T22764] loop3: p6 start 262464109 is beyond EOD, truncated [ 998.237138][T21140] usb 1-1: SerialNumber: syz [ 998.245784][T22764] loop3: p7 size 2304 extends beyond EOD, truncated [ 998.336293][T22768] loop2: detected capacity change from 0 to 8 [ 998.449011][T22768] SQUASHFS error: xz decompression failed, data probably corrupt [ 998.474814][T21140] usb 1-1: palm_os_3_probe - error -71 getting connection information [ 998.489766][T21140] visor: probe of 1-1:1.0 failed with error -71 [ 998.508721][T22768] SQUASHFS error: Failed to read block 0x108: -5 [ 998.515138][T22768] SQUASHFS error: Unable to read metadata cache entry [106] [ 998.549754][T22768] SQUASHFS error: Unable to read inode 0x11f [ 998.561667][T22760] loop1: detected capacity change from 0 to 32768 [ 998.570444][T21140] usb 1-1: USB disconnect, device number 3 [ 998.635809][ T27] XFS (loop1): Metadata CRC error detected at xfs_sb_read_verify+0x3dd/0x4d0, xfs_sb block 0x0 [ 998.727927][ T8734] udevd[8734]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 998.733466][ T27] XFS (loop1): Unmount and run xfs_repair [ 998.761387][ T6182] udevd[6182]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 998.769306][ T6096] udevd[6096]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 998.783617][ T6183] udevd[6183]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 998.801368][ T27] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 998.841641][ T27] 00000000: 58 46 53 42 00 00 08 00 00 00 00 00 00 00 00 40 XFSB...........@ [ 998.859791][ T27] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 998.871884][ T27] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 998.916145][ T27] 00000030: 00 00 00 00 00 00 00 20 00 00 00 00 00 00 24 40 ....... ......$@ [ 998.930969][T15694] udevd[15694]: incorrect xfs checksum on /dev/loop1 [ 998.948316][ T27] 00000040: 00 00 00 00 00 00 24 41 00 00 00 00 00 00 24 42 ......$A......$B [ 998.987286][ T27] 00000050: 00 00 00 02 00 00 20 00 00 00 00 01 00 00 00 00 ...... ......... [ 999.028418][ T27] 00000060: 00 00 12 00 b4 b5 02 00 04 00 00 02 00 00 00 00 ................ [ 999.037513][ T27] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32 ...............2 [ 999.065409][T22779] loop2: detected capacity change from 0 to 8192 [ 999.073246][T22760] XFS (loop1): SB validate failed with error -74. [ 999.130508][ T8734] udevd[8734]: incorrect xfs checksum on /dev/loop1 [ 999.913017][T22782] loop0: detected capacity change from 0 to 32768 [ 999.969894][T21140] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 999.988682][ T9] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 1000.166981][ T9] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1000.174755][T21140] usb 4-1: Using ep0 maxpacket: 16 [ 1000.182697][T21140] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.192947][ T9] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1000.192975][ T9] usb 3-1: config 0 has no interface number 0 [ 1000.194547][ T9] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1000.220297][T22801] loop0: detected capacity change from 0 to 4096 [ 1000.226837][T21140] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1000.248032][ T9] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1000.253847][T21140] usb 4-1: config 1 has no interface number 1 [ 1000.264301][T22801] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1000.281225][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1000.289840][T21140] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1000.304619][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.305676][T21140] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1000.328249][T22801] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1000.344500][ T9] usb 3-1: config 0 descriptor?? [ 1000.351385][T22801] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 1000.370076][T21140] usb 4-1: config 1 interface 2 has no altsetting 0 [ 1000.377997][T22801] ntfs3: loop0: Failed to load $MFTMirr (-22). [ 1000.402312][T22801] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 1000.415540][T21140] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1000.429518][T21140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.444771][T21140] usb 4-1: Product: syz [ 1000.458648][T21140] usb 4-1: Manufacturer: syz [ 1000.477698][T21140] usb 4-1: SerialNumber: syz [ 1000.574636][ T9] usb 3-1: USB disconnect, device number 16 [ 1000.675582][T22799] loop1: detected capacity change from 0 to 40427 [ 1000.709258][T22799] F2FS-fs (loop1): heap/no_heap options were deprecated [ 1000.735968][T22799] F2FS-fs (loop1): build fault injection attr: rate: 19, type: 0x7ffff [ 1000.761693][T22799] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1dff [ 1000.768563][T21140] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1000.780969][T21140] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 1000.789552][T22799] F2FS-fs (loop1): extra_attr or flexible_inline_xattr feature is off [ 1000.798339][T21140] usb 4-1: selecting invalid altsetting 0 [ 1000.805781][T21140] usb 4-1: selecting invalid altsetting 0 [ 1000.873439][T21140] usb 4-1: USB disconnect, device number 20 [ 1000.944329][T17281] udevd[17281]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1001.115834][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1001.302659][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1001.317624][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 1001.330074][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.348242][ T9] usb 1-1: Product: syz [ 1001.364351][ T9] usb 1-1: Manufacturer: syz [ 1001.369280][ T9] usb 1-1: SerialNumber: syz [ 1001.385024][ T9] usb 1-1: config 0 descriptor?? [ 1001.397379][ T9] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1001.420451][ T9] usb-storage 1-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 1001.435372][ T9] usb-storage 1-1:0.0: This device (054c,002e,0500 S 04 P c9) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1001.435372][ T9] Please send a copy of this message to and [ 1001.544722][T21140] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 1001.616687][T15159] usb 1-1: USB disconnect, device number 4 [ 1001.742342][T21140] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 1001.750998][T21140] usb 2-1: config 8 has no interface number 0 [ 1001.757152][T21140] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1001.768766][T21140] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1001.778699][T21140] usb 2-1: config 8 interface 177 has no altsetting 0 [ 1001.785551][T21140] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1001.794700][T21140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.810253][T22815] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1001.817959][ T9] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1001.870383][ T27] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1001.993957][ T9] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1002.002428][ T9] usb 4-1: config 1 has no interface number 0 [ 1002.008606][ T9] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1002.019816][T21140] usb 2-1: string descriptor 0 read error: -71 [ 1002.022534][ T9] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1002.040355][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.048721][T21140] ir_toy 2-1:8.177: required endpoints not found [ 1002.051389][ T9] usb 4-1: Product: syz [ 1002.061941][ T9] usb 4-1: Manufacturer: syz [ 1002.066769][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 1002.069102][T21140] usb 2-1: USB disconnect, device number 31 [ 1002.074672][ T9] usb 4-1: SerialNumber: syz [ 1002.078307][ T27] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 1002.091970][ T27] usb 3-1: config 0 has no interface number 0 [ 1002.101444][ T27] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1002.113592][ T27] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1002.146307][ T27] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1002.166596][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.175391][ T27] usb 3-1: Product: syz [ 1002.179913][ T27] usb 3-1: Manufacturer: syz [ 1002.184552][ T27] usb 3-1: SerialNumber: syz [ 1002.201415][ T27] usb 3-1: config 0 descriptor?? [ 1002.217340][T22823] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1002.230336][T22823] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1002.250350][ T27] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, fe:75:d1:19:9f:32 [ 1002.318664][ T9] aqc111: probe of 4-1:1.105 failed with error -22 [ 1002.373157][ T9] usb 4-1: USB disconnect, device number 21 [ 1002.510741][T22830] loop0: detected capacity change from 0 to 512 [ 1002.528820][T22830] EXT4-fs (loop0): fragment/cluster size (8192) != block size (4096) [ 1002.549325][ T5632] usb 3-1: USB disconnect, device number 17 [ 1002.570220][ T5632] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 1002.780521][T22836] loop1: detected capacity change from 0 to 512 [ 1002.812027][T22836] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1002.834664][T22836] EXT4-fs (loop1): required journal recovery suppressed and not mounted read-only [ 1003.027442][ T6320] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1003.120362][T22848] loop3: detected capacity change from 0 to 1764 [ 1003.225296][ T6320] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1003.250410][ T6320] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1003.287364][ T6320] usb 1-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1003.330617][ T6320] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1003.351985][T21140] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1003.363620][ T6320] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1003.394460][ T6320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.412504][ T6320] usb 1-1: Product: syz [ 1003.416744][ T6320] usb 1-1: Manufacturer: syz [ 1003.433072][ T6320] usb 1-1: SerialNumber: syz [ 1003.559306][T21140] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.585181][T21140] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1003.638371][T21140] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1003.658066][T21140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.670730][ T6320] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1003.693653][T21140] usb 2-1: Product: syz [ 1003.700823][ T6320] usb 1-1: USB disconnect, device number 5 [ 1003.703480][T21140] usb 2-1: Manufacturer: syz [ 1003.734137][T22862] loop2: detected capacity change from 0 to 4096 [ 1003.737198][T21140] usb 2-1: SerialNumber: syz [ 1003.823545][T22862] ntfs: (device loop2): ntfs_read_locked_inode(): Resident data attribute is corrupt (size exceeds allocation). [ 1003.863938][T22862] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x4 as bad. Run chkdsk. [ 1003.901761][T22862] ntfs: (device loop2): load_and_init_attrdef(): Failed to initialize attribute definition table. [ 1003.927529][T22862] ntfs: (device loop2): ntfs_fill_super(): Failed to load system files. [ 1003.981699][T21140] usb 2-1: 0:2 : does not exist [ 1004.024497][T21140] usb 2-1: USB disconnect, device number 32 [ 1004.115664][T15694] udevd[15694]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1004.342647][T22879] loop0: detected capacity change from 0 to 64 [ 1004.607877][T22880] loop2: detected capacity change from 0 to 8192 [ 1004.652108][T22880] REISERFS warning (device loop2): super-6503 reiserfs_getopt: the option "usrquota" does not require an argument [ 1004.652108][T22880] [ 1004.891728][T22891] loop1: detected capacity change from 0 to 2048 [ 1004.966560][T22891] loop1: p4 < > [ 1005.142131][T22897] loop2: detected capacity change from 0 to 16 [ 1005.206923][T22897] erofs: (device loop2): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel [ 1005.269252][ T8734] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1005.447546][T22874] loop3: detected capacity change from 0 to 40427 [ 1005.493448][T22874] F2FS-fs (loop3): build fault injection attr: rate: 25, type: 0x7ffff [ 1005.527816][T22874] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7698c [ 1005.563231][T22874] F2FS-fs (loop3): invalid crc value [ 1005.603573][T22874] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920 [ 1005.649218][T22874] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1005.759451][T22874] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 1005.808454][T22874] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1005.837875][T22895] loop0: detected capacity change from 0 to 32768 [ 1005.883118][T22895] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop0 scanned by syz.0.7609 (22895) [ 1005.929336][ T6229] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x67/0x210 [ 1005.975418][T22895] BTRFS info (device loop0): first mount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 1005.992064][ T6229] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x516/0x19c0 [ 1005.999240][T22895] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 1006.045697][ T6229] F2FS-fs (loop3): invalid blkaddr: 514, type: 10, run fsck to fix. [ 1006.046118][T22895] BTRFS info (device loop0): using free space tree [ 1006.062256][ C1] F2FS-fs (loop3): inject write IO error in f2fs_write_end_io of blk_update_request+0x597/0xe40 [ 1006.072924][ C1] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1006.097152][ T6229] F2FS-fs (loop3): do_checkpoint failed err:-5, stop checkpoint [ 1006.120641][T22899] loop1: detected capacity change from 0 to 32768 [ 1006.160740][T22899] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop1 scanned by syz.1.7611 (22899) [ 1006.203398][T22895] BTRFS info (device loop0): enabling ssd optimizations [ 1006.213087][T22899] BTRFS info (device loop1): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 1006.263178][T22899] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1006.272154][T22895] BTRFS info (device loop0): auto enabling async discard [ 1006.283578][T22899] BTRFS info (device loop1): using free space tree [ 1006.503050][ T6226] BTRFS info (device loop0): last unmount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 1006.564400][T22901] loop2: detected capacity change from 0 to 32768 [ 1006.576939][T22899] BTRFS info (device loop1): enabling ssd optimizations [ 1006.605245][T22899] BTRFS info (device loop1): auto enabling async discard [ 1006.610068][T22937] loop3: detected capacity change from 0 to 8 [ 1006.618569][T22901] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 8 /dev/loop2 scanned by syz.2.7612 (22901) [ 1006.643554][T22937] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1006.687198][T22937] cramfs: wrong endianness [ 1006.736666][T22901] BTRFS info (device loop2): first mount of filesystem afd29e67-b8c6-49b0-b0d7-0efab618e2f3 [ 1006.806271][T22901] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1006.829540][ T6223] BTRFS info (device loop1): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 1006.866153][T22901] BTRFS info (device loop2): using free space tree [ 1006.968982][T22947] loop3: detected capacity change from 0 to 256 [ 1007.192531][T22901] BTRFS info (device loop2): enabling ssd optimizations [ 1007.223618][T22901] BTRFS info (device loop2): auto enabling async discard [ 1007.530599][ T6232] BTRFS info (device loop2): last unmount of filesystem afd29e67-b8c6-49b0-b0d7-0efab618e2f3 [ 1008.519173][T22956] loop1: detected capacity change from 0 to 32768 [ 1008.575173][T22956] gfs2: fsid=commit: Trying to join cluster "lock_nolock", "commit" [ 1008.590856][T22956] gfs2: fsid=commit: Now mounting FS (format 1802)... [ 1008.650043][T22956] gfs2: fsid=commit.s: journal 0 mapped with 7 extents in 0ms [ 1008.686245][T22956] syz.1.7615: attempt to access beyond end of device [ 1008.686245][T22956] loop1: rw=0, sector=19193135816, nr_sectors = 8 limit=32768 [ 1008.870312][T22956] gfs2: fsid=commit.s: Error parsing journal for spectator mount. [ 1008.908841][T22962] loop0: detected capacity change from 0 to 32768 [ 1008.993850][T22962] (syz.0.7614,22962,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0x5bee9555. Applying ECC. [ 1009.022103][T22966] loop3: detected capacity change from 0 to 32768 [ 1009.044274][T22962] (syz.0.7614,22962,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc2d589a7, computed 0x4b9c4e7d [ 1009.067461][T22966] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.7620 (22966) [ 1009.113791][T22962] (syz.0.7614,22962,1):ocfs2_validate_inode_block:1382 ERROR: Checksum failed for dinode 17 [ 1009.155884][T22962] (syz.0.7614,22962,1):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 1009.169270][T22966] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1009.185093][T22962] (syz.0.7614,22962,1):ocfs2_init_global_system_inodes:440 ERROR: status = -5 [ 1009.195080][T22966] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1009.234995][T22966] BTRFS info (device loop3): using free space tree [ 1009.235284][T22962] (syz.0.7614,22962,1):ocfs2_init_global_system_inodes:472 ERROR: status = -5 [ 1009.281971][T22968] loop2: detected capacity change from 0 to 32768 [ 1009.315193][T22962] (syz.0.7614,22962,1):ocfs2_initialize_super:2256 ERROR: status = -5 [ 1009.333969][T22968] BTRFS: device fsid ed4422de-dbc1-4dc1-8d60-3583f36c24cc devid 1 transid 8 /dev/loop2 scanned by syz.2.7618 (22968) [ 1009.357706][T22962] (syz.0.7614,22962,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 1009.402864][T22968] BTRFS info (device loop2): first mount of filesystem ed4422de-dbc1-4dc1-8d60-3583f36c24cc [ 1009.467505][T22968] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1009.546189][T22968] BTRFS info (device loop2): using free space tree [ 1009.607539][T22966] BTRFS info (device loop3): enabling ssd optimizations [ 1009.638340][T22966] BTRFS info (device loop3): auto enabling async discard [ 1009.773242][T23000] loop0: detected capacity change from 0 to 128 [ 1009.782378][ T6229] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1009.882390][T22968] BTRFS info (device loop2): enabling ssd optimizations [ 1009.931559][T22968] BTRFS info (device loop2): auto enabling async discard [ 1009.970985][ T6183] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (6183) [ 1010.152647][ T6320] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1010.194979][ T6232] BTRFS info (device loop2): last unmount of filesystem ed4422de-dbc1-4dc1-8d60-3583f36c24cc [ 1010.360669][ T6320] usb 2-1: Using ep0 maxpacket: 16 [ 1010.381726][ T6320] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1010.399755][ T6320] usb 2-1: config 9 has an invalid interface number: 212 but max is 0 [ 1010.436689][ T6320] usb 2-1: config 9 has no interface number 0 [ 1010.463991][ T6320] usb 2-1: config 9 interface 212 has no altsetting 0 [ 1010.503889][ T6320] usb 2-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice=f3.5f [ 1010.528937][ T6320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.537114][ T6320] usb 2-1: Product: syz [ 1010.584868][ T6320] usb 2-1: Manufacturer: syz [ 1010.589523][ T6320] usb 2-1: SerialNumber: syz [ 1010.899528][ T6320] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:9.212/input/input74 [ 1010.968335][T23012] loop2: detected capacity change from 0 to 128 [ 1010.976630][ T5144] bcm5974 2-1:9.212: could not read from device [ 1010.985913][ T6320] usb 2-1: USB disconnect, device number 33 [ 1011.258405][T23010] loop0: detected capacity change from 0 to 32768 [ 1011.281031][T23010] BTRFS: device fsid 59b5568a-a427-4554-b73a-27dcd238cc5a devid 1 transid 8 /dev/loop0 scanned by syz.0.7624 (23010) [ 1011.296559][T23008] loop3: detected capacity change from 0 to 32768 [ 1011.300597][T23015] loop2: detected capacity change from 0 to 128 [ 1011.351137][T23010] BTRFS info (device loop0): first mount of filesystem 59b5568a-a427-4554-b73a-27dcd238cc5a [ 1011.367334][ T8734] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1011.414203][T23010] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1011.516392][T23010] BTRFS info (device loop0): using free space tree [ 1011.720864][T23010] BTRFS info (device loop0): enabling ssd optimizations [ 1011.738155][T23010] BTRFS info (device loop0): auto enabling async discard [ 1011.918881][ T6226] BTRFS info (device loop0): last unmount of filesystem 59b5568a-a427-4554-b73a-27dcd238cc5a [ 1012.124979][T23037] loop3: detected capacity change from 0 to 720 [ 1012.462711][T23028] loop2: detected capacity change from 0 to 32768 [ 1012.509239][T23028] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by syz.2.7627 (23028) [ 1012.516003][T23039] loop3: detected capacity change from 0 to 16 [ 1012.554781][T23026] loop1: detected capacity change from 0 to 32768 [ 1012.567700][T23039] erofs: (device loop3): mounted with root inode @ nid 36. [ 1012.591859][T23041] loop0: detected capacity change from 0 to 128 [ 1012.604107][T23028] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 1012.617064][T23026] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.7628 (23026) [ 1012.654235][T23028] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1012.667058][T23041] ADFS-fs (loop0): error: can't find an ADFS filesystem on dev loop0. [ 1012.701772][T23028] BTRFS info (device loop2): using free space tree [ 1012.705968][T23026] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1012.777519][T23026] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1012.810194][T23026] BTRFS info (device loop1): using free space tree [ 1012.961572][T23028] BTRFS info (device loop2): enabling ssd optimizations [ 1012.968628][T23028] BTRFS info (device loop2): auto enabling async discard [ 1013.077103][T23075] loop3: detected capacity change from 0 to 512 [ 1013.083874][T23074] loop0: detected capacity change from 0 to 512 [ 1013.115635][T23075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.136895][T23026] BTRFS info (device loop1): enabling ssd optimizations [ 1013.144455][T23026] BTRFS info (device loop1): auto enabling async discard [ 1013.153234][T23075] ext4 filesystem being mounted at /1814/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1013.207236][T23074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1013.332735][ T6232] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 1013.344546][ T6229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.384401][ T6223] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1013.396453][ T6226] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.774623][T23087] loop0: detected capacity change from 0 to 512 [ 1013.933221][T23087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1014.183417][ T6226] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.611778][T23088] loop3: detected capacity change from 0 to 32768 [ 1014.653186][T23088] BTRFS: device fsid a4d06b90-61a4-49cd-bf5f-2183c3574322 devid 1 transid 8 /dev/loop3 scanned by syz.3.7638 (23088) [ 1014.683410][T23088] BTRFS info (device loop3): first mount of filesystem a4d06b90-61a4-49cd-bf5f-2183c3574322 [ 1014.724237][T23088] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1014.759971][T23088] BTRFS info (device loop3): using free space tree [ 1014.983810][T23088] BTRFS info (device loop3): enabling ssd optimizations [ 1015.018664][T23088] BTRFS info (device loop3): auto enabling async discard [ 1015.022467][T23097] loop0: detected capacity change from 0 to 32768 [ 1015.093523][T23097] (syz.0.7639,23097,0):ocfs2_verify_heartbeat:826 ERROR: Mismatching o2cb heartbeat modes [ 1015.110975][T23095] loop1: detected capacity change from 0 to 32768 [ 1015.139642][T23097] (syz.0.7639,23097,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1015.139839][T23095] BTRFS: device fsid 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 devid 1 transid 8 /dev/loop1 scanned by syz.1.7637 (23095) [ 1015.281559][T23095] BTRFS info (device loop1): first mount of filesystem 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 [ 1015.337599][T23095] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1015.388179][ T6229] BTRFS info (device loop3): last unmount of filesystem a4d06b90-61a4-49cd-bf5f-2183c3574322 [ 1015.393160][T23095] BTRFS info (device loop1): using free space tree [ 1015.688562][T23090] loop2: detected capacity change from 0 to 32768 [ 1015.709889][T23095] BTRFS info (device loop1): enabling ssd optimizations [ 1015.716902][T23095] BTRFS info (device loop1): auto enabling async discard [ 1015.759577][T23090] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1015.817380][T23090] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1015.865676][T23090] syz.2.7635: attempt to access beyond end of device [ 1015.865676][T23090] loop2: rw=12288, sector=99999999, nr_sectors = 1 limit=32768 [ 1015.915974][T23090] gfs2: fsid=syz:syz.0: can't lookup journal index: 0 [ 1016.083464][ T6223] BTRFS info (device loop1): last unmount of filesystem 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 [ 1016.322708][T23136] loop3: detected capacity change from 0 to 1024 [ 1016.376849][T23136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1016.649212][ T6229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.904231][T23120] loop0: detected capacity change from 0 to 32768 [ 1016.954728][T23120] BTRFS: device fsid 16bad5ef-498e-43ba-8a30-25ddcaa179c7 devid 1 transid 8 /dev/loop0 scanned by syz.0.7640 (23120) [ 1016.985330][T23143] loop3: detected capacity change from 0 to 1024 [ 1017.041688][T23143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1017.056647][T23120] BTRFS info (device loop0): first mount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 1017.093944][T23120] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1017.104256][T23120] BTRFS info (device loop0): using free space tree [ 1017.239512][T23141] loop1: detected capacity change from 0 to 32768 [ 1017.263076][T23141] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.7642 (23141) [ 1017.298576][ T6229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.417412][T23159] loop3: detected capacity change from 0 to 512 [ 1017.422323][T23141] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1017.453253][T23141] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1017.460695][T23140] loop2: detected capacity change from 0 to 32768 [ 1017.476556][T23141] BTRFS info (device loop1): using free space tree [ 1017.499971][T23140] BTRFS: device fsid 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 devid 1 transid 8 /dev/loop2 scanned by syz.2.7643 (23140) [ 1017.521060][T23140] BTRFS info (device loop2): first mount of filesystem 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 [ 1017.545784][T23159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1017.558165][T23120] BTRFS info (device loop0): enabling ssd optimizations [ 1017.567416][T23140] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1017.596160][T23120] BTRFS info (device loop0): auto enabling async discard [ 1017.605252][T23140] BTRFS info (device loop2): using free space tree [ 1017.737561][ T6229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.789479][T23141] BTRFS info (device loop1): enabling ssd optimizations [ 1017.796505][T23141] BTRFS info (device loop1): auto enabling async discard [ 1017.928543][T23140] BTRFS info (device loop2): enabling ssd optimizations [ 1017.961522][T23140] BTRFS info (device loop2): auto enabling async discard [ 1017.970963][T23198] loop3: detected capacity change from 0 to 512 [ 1017.984679][ T6223] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1017.995522][ T6226] BTRFS info (device loop0): last unmount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 1018.049948][T23198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1018.079333][T23198] ext4 filesystem being mounted at /1820/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1018.197155][ T6232] BTRFS info (device loop2): last unmount of filesystem 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 [ 1018.315235][ T6229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.657371][T23206] loop3: detected capacity change from 0 to 1024 [ 1018.714255][T23206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1018.942303][ T6229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.100549][T23209] loop1: detected capacity change from 0 to 2048 [ 1019.192193][T23211] loop3: detected capacity change from 0 to 512 [ 1019.235671][T23209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1019.340470][T23214] loop2: detected capacity change from 0 to 4096 [ 1019.346102][T23211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1019.447708][T23214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1019.460789][T23203] loop0: detected capacity change from 0 to 32768 [ 1019.537208][T23203] *** Log Format Error ! *** [ 1019.543391][ T6223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.553582][T23203] lmLogInit: exit(-22) [ 1019.557751][T23203] lmLogOpen: exit(-22) [ 1019.590737][T23203] jfs_mount_rw failed, return code = -22 [ 1019.632612][ T6232] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.645132][ T6229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.809359][T23219] loop1: detected capacity change from 0 to 16 [ 1019.844040][T23219] erofs: (device loop1): mounted with root inode @ nid 36. [ 1021.276298][T23224] loop0: detected capacity change from 0 to 32768 [ 1021.321760][T23224] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 1021.348657][T23223] loop2: detected capacity change from 0 to 32768 [ 1021.378943][T23224] dlm: no local IP address has been set [ 1021.384563][T23224] dlm: cannot start dlm midcomms -107 [ 1021.404438][T23223] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 1021.444137][T23223] CPU: 1 PID: 23223 Comm: syz.2.7654 Not tainted syzkaller #0 [ 1021.451677][T23223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1021.461784][T23223] Call Trace: [ 1021.465197][T23223] [ 1021.468172][T23223] dump_stack_lvl+0x16c/0x230 [ 1021.472906][T23223] ? show_regs_print_info+0x20/0x20 [ 1021.478146][T23223] ? load_image+0x3b0/0x3b0 [ 1021.482712][T23223] sysfs_create_dir_ns+0x256/0x280 [ 1021.487871][T23223] ? sysfs_warn_dup+0xa0/0xa0 [ 1021.492606][T23223] ? do_raw_spin_unlock+0x121/0x230 [ 1021.497852][T23223] kobject_add_internal+0x6b8/0xc70 [ 1021.503104][T23223] kobject_init_and_add+0x126/0x190 [ 1021.508360][T23223] ? lockdep_softirqs_off+0x430/0x430 [ 1021.513794][T23223] ? kobject_add+0x220/0x220 [ 1021.518437][T23223] ? __init_swait_queue_head+0xa9/0x150 [ 1021.524022][T23223] gfs2_sys_fs_add+0x238/0x470 [ 1021.528826][T23223] ? gfs2_recover_set+0x250/0x250 [ 1021.533909][T23223] ? apply_workqueue_attrs+0x180/0x180 [ 1021.539427][T23223] gfs2_fill_super+0x1323/0x1f80 [ 1021.544419][T23223] ? gfs2_reconfigure+0xb10/0xb10 [ 1021.549495][T23223] ? setup_bdev_super+0x56b/0x660 [ 1021.554550][T23223] get_tree_bdev+0x3e4/0x510 [ 1021.559172][T23223] ? end_current_label_crit_section+0x170/0x170 [ 1021.565470][T23223] ? gfs2_reconfigure+0xb10/0xb10 [ 1021.570542][T23223] ? setup_bdev_super+0x660/0x660 [ 1021.575608][T23223] gfs2_get_tree+0x51/0x1e0 [ 1021.580160][T23223] vfs_get_tree+0x8c/0x280 [ 1021.584621][T23223] do_new_mount+0x24b/0xa40 [ 1021.589279][T23223] __se_sys_mount+0x2da/0x3c0 [ 1021.594033][T23223] ? __x64_sys_mount+0xc0/0xc0 [ 1021.598835][T23223] ? lockdep_hardirqs_on+0x98/0x150 [ 1021.600182][T23224] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 1021.604057][T23223] ? __x64_sys_mount+0x20/0xc0 [ 1021.604087][T23223] do_syscall_64+0x55/0xb0 [ 1021.604113][T23223] ? clear_bhb_loop+0x40/0x90 [ 1021.624519][T23223] ? clear_bhb_loop+0x40/0x90 [ 1021.629250][T23223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1021.635234][T23223] RIP: 0033:0x7f97c219066a [ 1021.639688][T23223] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1021.659598][T23223] RSP: 002b:00007f97c3041e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1021.668070][T23223] RAX: ffffffffffffffda RBX: 00007f97c3041ef0 RCX: 00007f97c219066a [ 1021.676089][T23223] RDX: 0000200000021180 RSI: 00002000000211c0 RDI: 00007f97c3041eb0 [ 1021.684099][T23223] RBP: 0000200000021180 R08: 00007f97c3041ef0 R09: 0000000000000000 [ 1021.692111][T23223] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000211c0 [ 1021.700121][T23223] R13: 00007f97c3041eb0 R14: 000000000002114d R15: 0000200000021200 [ 1021.708144][T23223] [ 1021.739551][T23223] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 1021.754052][T23223] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 1022.745149][T23231] loop2: detected capacity change from 0 to 32768 [ 1022.769595][T23231] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.7659 (23231) [ 1022.806534][T23231] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1022.823147][T23231] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1022.848786][T23231] BTRFS info (device loop2): using free space tree [ 1022.994264][T23231] BTRFS info (device loop2): enabling ssd optimizations [ 1023.001721][T23231] BTRFS info (device loop2): auto enabling async discard [ 1023.151653][ T6232] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1023.486233][T23256] loop1: detected capacity change from 0 to 1024 [ 1023.916195][T23258] loop1: detected capacity change from 0 to 1024 [ 1024.260590][T23260] loop1: detected capacity change from 0 to 1024 [ 1024.351521][T23252] loop3: detected capacity change from 0 to 32768 [ 1024.379065][T23252] BTRFS: device fsid 100ef7e5-a5de-41f0-884c-a25b1c06c78a devid 1 transid 8 /dev/loop3 scanned by syz.3.7661 (23252) [ 1024.426109][T23252] BTRFS info (device loop3): first mount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 1024.452576][T23252] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1024.482388][T23252] BTRFS info (device loop3): using free space tree [ 1024.669305][T23252] BTRFS info (device loop3): enabling ssd optimizations [ 1024.695490][T23252] BTRFS info (device loop3): auto enabling async discard [ 1024.901442][ T6229] BTRFS info (device loop3): last unmount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 1026.115616][T23284] loop0: detected capacity change from 0 to 4096 [ 1026.158293][T23284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1026.387442][ T6226] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.646248][T23288] loop0: detected capacity change from 0 to 760 [ 1026.924981][T23291] loop0: detected capacity change from 0 to 21 [ 1026.948382][T23292] loop2: detected capacity change from 0 to 736 [ 1026.959768][T23291] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1027.167257][T23294] loop0: detected capacity change from 0 to 21 [ 1027.209896][T23294] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1027.223828][T23296] loop2: detected capacity change from 0 to 21 [ 1027.257897][T23296] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1027.516571][T23298] loop2: detected capacity change from 0 to 1024 [ 1027.636188][T23298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1027.845281][ T6232] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.866039][T23303] loop1: detected capacity change from 0 to 64 [ 1028.540691][T23309] loop3: detected capacity change from 0 to 64 [ 1028.736456][T23311] loop3: detected capacity change from 0 to 1024 [ 1028.800166][T23311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1029.015185][T23307] loop1: detected capacity change from 0 to 32768 [ 1029.045640][ T6229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.091239][T23307] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 1029.102898][T23307] dlm: no local IP address has been set [ 1029.108503][T23307] dlm: cannot start dlm midcomms -107 [ 1029.163984][T23307] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 1029.340592][T23316] loop3: detected capacity change from 0 to 2048 [ 1029.413397][T23305] loop2: detected capacity change from 0 to 32768 [ 1029.470488][T23305] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1029.521989][T23305] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1029.677381][T23305] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1029.756629][T15159] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1029.787768][T15159] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1029.969646][T15159] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 195ms [ 1030.003280][T15159] gfs2: fsid=syz:syz.0: jid=0: Done [ 1030.024322][T23305] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1030.617454][T23321] loop3: detected capacity change from 0 to 32768 [ 1030.879714][T23325] loop0: detected capacity change from 0 to 256 [ 1030.955449][T23327] loop3: detected capacity change from 0 to 1024 [ 1031.251109][T23331] loop3: detected capacity change from 0 to 256 [ 1031.500536][T23333] loop3: detected capacity change from 0 to 128 [ 1031.701351][T23335] loop3: detected capacity change from 0 to 512 [ 1032.009935][T23337] loop3: detected capacity change from 0 to 512 [ 1032.310348][T23339] loop3: detected capacity change from 0 to 2048 [ 1032.418715][T23329] loop0: detected capacity change from 0 to 32768 [ 1032.435404][T23329] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 1032.448515][T23329] CPU: 1 PID: 23329 Comm: syz.0.7686 Not tainted syzkaller #0 [ 1032.456070][T23329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1032.466145][T23329] Call Trace: [ 1032.469557][T23329] [ 1032.472521][T23329] dump_stack_lvl+0x16c/0x230 [ 1032.477238][T23329] ? show_regs_print_info+0x20/0x20 [ 1032.482461][T23329] ? load_image+0x3b0/0x3b0 [ 1032.486987][T23329] sysfs_create_dir_ns+0x256/0x280 [ 1032.492125][T23329] ? sysfs_warn_dup+0xa0/0xa0 [ 1032.496823][T23329] ? do_raw_spin_unlock+0x121/0x230 [ 1032.502039][T23329] kobject_add_internal+0x6b8/0xc70 [ 1032.507260][T23329] kobject_init_and_add+0x126/0x190 [ 1032.512489][T23329] ? lockdep_softirqs_off+0x430/0x430 [ 1032.517902][T23329] ? kobject_add+0x220/0x220 [ 1032.522596][T23329] ? __init_swait_queue_head+0xa9/0x150 [ 1032.528165][T23329] gfs2_sys_fs_add+0x238/0x470 [ 1032.532948][T23329] ? gfs2_recover_set+0x250/0x250 [ 1032.537991][T23329] ? apply_workqueue_attrs+0x180/0x180 [ 1032.543476][T23329] gfs2_fill_super+0x1323/0x1f80 [ 1032.548441][T23329] ? gfs2_reconfigure+0xb10/0xb10 [ 1032.553484][T23329] ? setup_bdev_super+0x56b/0x660 [ 1032.558518][T23329] get_tree_bdev+0x3e4/0x510 [ 1032.563125][T23329] ? end_current_label_crit_section+0x170/0x170 [ 1032.569389][T23329] ? gfs2_reconfigure+0xb10/0xb10 [ 1032.574471][T23329] ? setup_bdev_super+0x660/0x660 [ 1032.579560][T23329] gfs2_get_tree+0x51/0x1e0 [ 1032.584101][T23329] vfs_get_tree+0x8c/0x280 [ 1032.588543][T23329] do_new_mount+0x24b/0xa40 [ 1032.593084][T23329] __se_sys_mount+0x2da/0x3c0 [ 1032.597792][T23329] ? __x64_sys_mount+0xc0/0xc0 [ 1032.602587][T23329] ? lockdep_hardirqs_on+0x98/0x150 [ 1032.607809][T23329] ? __x64_sys_mount+0x20/0xc0 [ 1032.612598][T23329] do_syscall_64+0x55/0xb0 [ 1032.617046][T23329] ? clear_bhb_loop+0x40/0x90 [ 1032.621739][T23329] ? clear_bhb_loop+0x40/0x90 [ 1032.626431][T23329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1032.632340][T23329] RIP: 0033:0x7fb07279066a [ 1032.636768][T23329] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1032.656392][T23329] RSP: 002b:00007fb073669e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1032.664842][T23329] RAX: ffffffffffffffda RBX: 00007fb073669ef0 RCX: 00007fb07279066a [ 1032.672849][T23329] RDX: 000020000003b2c0 RSI: 000020000003b300 RDI: 00007fb073669eb0 [ 1032.680833][T23329] RBP: 000020000003b2c0 R08: 00007fb073669ef0 R09: 0000000000000000 [ 1032.688815][T23329] R10: 0000000000000000 R11: 0000000000000246 R12: 000020000003b300 [ 1032.696806][T23329] R13: 00007fb073669eb0 R14: 000000000003b285 R15: 000020000003b340 [ 1032.704799][T23329] [ 1032.746735][T23329] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 1032.793150][T23329] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 1032.892336][T23342] loop3: detected capacity change from 0 to 512 [ 1037.643427][T23354] loop3: detected capacity change from 0 to 32768 [ 1037.852900][T23358] loop2: detected capacity change from 0 to 2048 [ 1038.950605][T23356] loop1: detected capacity change from 0 to 65536 [ 1039.572776][T23364] loop1: detected capacity change from 0 to 16384 [ 1039.689353][T23365] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1040.214041][T23367] loop1: detected capacity change from 0 to 4096 [ 1040.243961][T23369] loop0: detected capacity change from 0 to 4096 [ 1040.269883][T23370] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1040.372091][T23369] ntfs: volume version 3.1. [ 1040.767564][T23372] loop1: detected capacity change from 0 to 4096 [ 1040.795528][T23372] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1041.274956][T23376] loop1: detected capacity change from 0 to 4096 [ 1041.331542][T23378] loop3: detected capacity change from 0 to 4096 [ 1041.490860][T23378] ntfs: volume version 3.1. [ 1041.837579][T23380] loop1: detected capacity change from 0 to 4096 [ 1042.035101][T23380] ntfs: volume version 3.1. [ 1042.064550][T23382] loop3: detected capacity change from 0 to 8192 [ 1042.116045][T23382] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1042.199611][T23374] loop0: detected capacity change from 0 to 32768 [ 1042.247521][T23374] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 1042.317433][T23374] dlm: no local IP address has been set [ 1042.323043][T23374] dlm: cannot start dlm midcomms -107 [ 1042.401167][T23374] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 1042.834979][T23384] loop2: detected capacity change from 0 to 32768 [ 1042.867945][T23384] (syz.2.7711,23384,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1042.914359][T23384] (syz.2.7711,23384,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1043.096571][T23387] loop1: detected capacity change from 0 to 32768 [ 1043.111965][T23387] (syz.1.7713,23387,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1043.132847][T23387] (syz.1.7713,23387,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1043.513131][T23395] loop1: detected capacity change from 0 to 2048 [ 1043.613191][T23396] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1044.521678][T23389] loop3: detected capacity change from 0 to 65536 [ 1044.537259][T23389] (syz.3.7714,23389,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1044.565470][T23389] (syz.3.7714,23389,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1045.056634][T23393] loop2: detected capacity change from 0 to 65536 [ 1045.085057][T23393] (syz.2.7716,23393,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1045.141951][T23393] (syz.2.7716,23393,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1045.433316][T23398] loop1: detected capacity change from 0 to 65536 [ 1045.477999][T23398] (syz.1.7718,23398,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1045.505521][T23398] (syz.1.7718,23398,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1046.406695][T23402] loop2: detected capacity change from 0 to 32768 [ 1046.421018][T23402] (syz.2.7720,23402,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1046.445822][T23402] (syz.2.7720,23402,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1046.813557][T23400] loop3: detected capacity change from 0 to 65536 [ 1046.841064][T23400] (syz.3.7719,23400,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1046.891650][T23400] (syz.3.7719,23400,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1047.684580][T23404] loop1: detected capacity change from 0 to 65536 [ 1047.940803][T23413] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1048.376592][T23406] loop0: detected capacity change from 0 to 65536 [ 1048.408198][T23406] (syz.0.7722,23406,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1048.447382][T23406] (syz.0.7722,23406,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1048.805884][T23417] loop0: detected capacity change from 0 to 4096 [ 1048.915692][T23418] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1049.886870][T23422] loop2: detected capacity change from 0 to 24 [ 1049.917768][T23422] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1049.950817][T23422] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1050.155281][T23424] loop2: detected capacity change from 0 to 8 [ 1050.451709][T23426] loop2: detected capacity change from 0 to 8 [ 1050.684267][T23428] loop2: detected capacity change from 0 to 1 [ 1050.713560][T23428] syz.2.7732: attempt to access beyond end of device [ 1050.713560][T23428] loop2: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 1050.766339][T23428] SQUASHFS error: Failed to read block 0x0: -5 [ 1050.779167][T23428] unable to read squashfs_super_block [ 1051.109915][T23430] loop2: detected capacity change from 0 to 4096 [ 1051.147837][T23430] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1051.597238][T23434] loop2: detected capacity change from 0 to 2048 [ 1051.670983][T23436] loop1: detected capacity change from 0 to 2048 [ 1051.681991][T23434] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1051.758198][T23436] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1052.033226][T23440] loop1: detected capacity change from 0 to 256 [ 1052.082854][T23440] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1052.132297][T23440] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1052.161019][T23438] loop2: detected capacity change from 0 to 8192 [ 1052.171123][T23440] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1052.192263][T23438] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1052.209677][T23440] UDF-fs: Scanning with blocksize 512 failed [ 1052.228685][T23438] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1052.231343][T23440] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1052.238276][T23438] REISERFS (device loop2): using ordered data mode [ 1052.255248][T23438] reiserfs: using flush barriers [ 1052.269259][T23438] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1052.304237][T23438] REISERFS (device loop2): checking transaction log (loop2) [ 1052.361535][T23440] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1052.597510][T23438] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 1052.635798][T23443] loop0: detected capacity change from 0 to 256 [ 1052.660522][T23438] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 1052.676856][T23443] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1052.697475][T23438] REISERFS (device loop2): Remounting filesystem read-only [ 1052.707842][T23443] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1052.727412][T23438] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 1052.741199][T23443] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1052.754923][T23443] UDF-fs: Scanning with blocksize 512 failed [ 1052.764452][T23438] REISERFS warning (device loop2): reiserfs_fill_super: corrupt root inode, run fsck [ 1052.788301][T23445] loop1: detected capacity change from 0 to 4096 [ 1052.802889][T23443] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1052.855815][T23445] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1052.873506][T23443] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1052.882881][T23445] UDF-fs: Scanning with blocksize 512 failed [ 1052.952649][T23445] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1053.187028][T23447] loop0: detected capacity change from 0 to 256 [ 1053.242209][T23449] loop1: detected capacity change from 0 to 256 [ 1053.260649][T23447] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1053.270610][T23449] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1053.315473][T23449] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1053.327855][T23447] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1053.361216][T23449] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1053.376240][T23447] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1053.387024][T23449] UDF-fs: Scanning with blocksize 512 failed [ 1053.416533][T23447] UDF-fs: Scanning with blocksize 512 failed [ 1053.435341][T23449] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1053.457664][T23447] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1053.479060][T23451] loop2: detected capacity change from 0 to 512 [ 1053.501476][T23449] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1053.534817][T23451] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1053.547031][T23447] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1053.552841][T23451] UDF-fs: Scanning with blocksize 512 failed [ 1053.575505][T23451] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1053.593269][T23451] UDF-fs: Scanning with blocksize 1024 failed [ 1053.610095][T23451] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1053.630785][T23451] UDF-fs: Scanning with blocksize 2048 failed [ 1053.643148][T23451] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1053.697220][T23451] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1053.842154][T23453] loop1: detected capacity change from 0 to 512 [ 1053.920048][T23453] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1053.929363][T23453] UDF-fs: Scanning with blocksize 512 failed [ 1053.959682][T23453] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1053.970630][T23453] UDF-fs: Scanning with blocksize 1024 failed [ 1053.993487][T23453] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1054.004330][T23457] loop2: detected capacity change from 0 to 512 [ 1054.022703][T23453] UDF-fs: Scanning with blocksize 2048 failed [ 1054.032453][T23457] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1054.039020][T23453] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1054.049859][T23457] UDF-fs: Scanning with blocksize 512 failed [ 1054.066861][T23453] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1054.107394][T23457] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1054.114870][T23457] UDF-fs: Scanning with blocksize 1024 failed [ 1054.169181][T23457] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1054.198838][T23457] UDF-fs: Scanning with blocksize 2048 failed [ 1054.241835][T23457] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1054.323173][T23457] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1054.389530][T23461] loop1: detected capacity change from 0 to 128 [ 1054.433162][T23461] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1054.500513][T23461] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1054.605553][T23463] loop2: detected capacity change from 0 to 128 [ 1054.632453][T23463] VFS: could not find a valid V7 on loop2. [ 1054.838090][T23465] loop1: detected capacity change from 0 to 512 [ 1054.855369][T23467] loop2: detected capacity change from 0 to 128 [ 1055.110235][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.124699][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.184763][T23471] loop2: detected capacity change from 0 to 256 [ 1055.438126][T23473] loop2: detected capacity change from 0 to 256 [ 1055.471907][T23473] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1055.498942][T23473] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1055.722075][T23475] loop2: detected capacity change from 0 to 128 [ 1055.756601][T23475] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1055.786556][T23475] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1056.633185][T23469] loop1: detected capacity change from 0 to 65536 [ 1056.828155][T23478] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1057.310916][T23482] loop1: detected capacity change from 0 to 512 [ 1057.429997][T23484] loop0: detected capacity change from 0 to 2048 [ 1057.747740][T23488] loop0: detected capacity change from 0 to 128 [ 1058.124536][T23490] loop0: detected capacity change from 0 to 512 [ 1058.454789][T23494] loop3: detected capacity change from 0 to 256 [ 1063.203815][T23504] loop3: detected capacity change from 0 to 32768 [ 1063.269413][T23504] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1063.565426][T23504] XFS (loop3): Ending clean mount [ 1063.713206][ T6229] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1063.728811][T23513] loop2: detected capacity change from 0 to 32768 [ 1063.790509][T23513] loop2: p9 p11 p16 [ 1064.569106][ T6183] udevd[6183]: inotify_add_watch(7, /dev/loop2p16, 10) failed: No such file or directory [ 1064.569277][T15694] udevd[15694]: inotify_add_watch(7, /dev/loop2p11, 10) failed: No such file or directory [ 1064.604073][ T8734] udevd[8734]: inotify_add_watch(7, /dev/loop2p9, 10) failed: No such file or directory [ 1065.962213][T23518] loop2: detected capacity change from 0 to 65536 [ 1066.066917][T23518] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1066.112311][T23518] XFS (loop2): Ending clean mount [ 1066.232952][ T6232] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1067.058576][T23522] loop1: detected capacity change from 0 to 65536 [ 1067.164899][T23522] XFS (loop1): Deprecated V4 format (crc=0) not supported by kernel. [ 1073.867977][T23600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7804'. [ 1074.339438][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1074.347392][T23616] ip6t_srh: unknown srh match flags 4001 [ 1074.516366][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1074.544281][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1074.588046][ T9] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1074.607714][ T9] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1074.628202][ T9] usb 1-1: Product: syz [ 1074.632426][ T9] usb 1-1: Manufacturer: syz [ 1074.637051][ T9] usb 1-1: SerialNumber: syz [ 1074.863816][T23633] UBIFS error (pid: 23633): cannot open "./file0", error -22 [ 1074.890610][ T9] usb 1-1: Invalid connection information received from device [ 1074.997919][ C1] sd 0:0:1:0: [sda] tag#4463 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1075.008439][ C1] sd 0:0:1:0: [sda] tag#4463 CDB: Read(6) 08 00 9f d1 fe de [ 1075.081466][T21140] usb 1-1: USB disconnect, device number 6 [ 1075.091305][T23638] loop3: detected capacity change from 0 to 2048 [ 1075.124266][T23638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1075.144899][T23638] ext4 filesystem being mounted at /1877/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1075.271889][T23647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7826'. [ 1075.281561][T23647] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7826'. [ 1075.301228][ T6229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.319890][T23647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7826'. [ 1075.335152][T23647] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7826'. [ 1075.376260][T23647] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7826'. [ 1075.916857][T23667] netlink: 'syz.2.7836': attribute type 10 has an invalid length. [ 1075.941545][T23667] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7836'. [ 1076.216281][T23679] syz.1.7842: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1076.245773][T23679] CPU: 0 PID: 23679 Comm: syz.1.7842 Not tainted syzkaller #0 [ 1076.253376][T23679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1076.263544][T23679] Call Trace: [ 1076.266836][T23679] [ 1076.269776][T23679] dump_stack_lvl+0x16c/0x230 [ 1076.274478][T23679] ? show_regs_print_info+0x20/0x20 [ 1076.279705][T23679] ? load_image+0x3b0/0x3b0 [ 1076.284235][T23679] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1076.290693][T23679] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1076.297213][T23679] warn_alloc+0x210/0x300 [ 1076.301566][T23679] ? stack_trace_save+0x9c/0xe0 [ 1076.306430][T23679] ? zone_watermark_ok_safe+0x230/0x230 [ 1076.312003][T23679] ? kasan_set_track+0x5f/0x70 [ 1076.316792][T23679] ? kasan_set_track+0x4e/0x70 [ 1076.321568][T23679] ? __kasan_kmalloc+0x8f/0xa0 [ 1076.326338][T23679] ? xsk_init_queue+0xb0/0x110 [ 1076.331108][T23679] ? xsk_setsockopt+0x43c/0x6f0 [ 1076.335972][T23679] ? do_sock_setsockopt+0x175/0x1a0 [ 1076.341186][T23679] ? __x64_sys_setsockopt+0x184/0x200 [ 1076.346585][T23679] __vmalloc_node_range+0x126/0x1320 [ 1076.351905][T23679] ? free_vm_area+0x50/0x50 [ 1076.356430][T23679] vmalloc_user+0x74/0x80 [ 1076.360772][T23679] ? xskq_create+0xbf/0x170 [ 1076.365303][T23679] xskq_create+0xbf/0x170 [ 1076.369647][T23679] xsk_init_queue+0xb0/0x110 [ 1076.374258][T23679] xsk_setsockopt+0x43c/0x6f0 [ 1076.378951][T23679] ? xsk_poll+0x670/0x670 [ 1076.383318][T23679] ? __fget_files+0x28/0x4d0 [ 1076.387931][T23679] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1076.393497][T23679] ? security_socket_setsockopt+0x7e/0xa0 [ 1076.399230][T23679] ? xsk_poll+0x670/0x670 [ 1076.403569][T23679] do_sock_setsockopt+0x175/0x1a0 [ 1076.408620][T23679] ? __fdget+0x180/0x210 [ 1076.412896][T23679] __x64_sys_setsockopt+0x184/0x200 [ 1076.418118][T23679] do_syscall_64+0x55/0xb0 [ 1076.422595][T23679] ? clear_bhb_loop+0x40/0x90 [ 1076.427377][T23679] ? clear_bhb_loop+0x40/0x90 [ 1076.432069][T23679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1076.437988][T23679] RIP: 0033:0x7fe3d158eec9 [ 1076.442413][T23679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1076.462036][T23679] RSP: 002b:00007fe3d23a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1076.470470][T23679] RAX: ffffffffffffffda RBX: 00007fe3d17e5fa0 RCX: 00007fe3d158eec9 [ 1076.478460][T23679] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1076.486463][T23679] RBP: 00007fe3d1611f91 R08: 0000000000000004 R09: 0000000000000000 [ 1076.494454][T23679] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 1076.502452][T23679] R13: 00007fe3d17e6038 R14: 00007fe3d17e5fa0 R15: 00007ffe462fb598 [ 1076.510467][T23679] [ 1076.603282][T23679] Mem-Info: [ 1076.631742][T23679] active_anon:9633 inactive_anon:0 isolated_anon:0 [ 1076.631742][T23679] active_file:12639 inactive_file:42548 isolated_file:0 [ 1076.631742][T23679] unevictable:768 dirty:333 writeback:0 [ 1076.631742][T23679] slab_reclaimable:11780 slab_unreclaimable:93401 [ 1076.631742][T23679] mapped:25670 shmem:1372 pagetables:664 [ 1076.631742][T23679] sec_pagetables:0 bounce:0 [ 1076.631742][T23679] kernel_misc_reclaimable:0 [ 1076.631742][T23679] free:1336751 free_pcp:8408 free_cma:0 [ 1076.676885][ C1] vkms_vblank_simulate: vblank timer overrun [ 1076.726691][T23688] loop2: detected capacity change from 0 to 512 [ 1076.742353][T23679] Node 0 active_anon:38832kB inactive_anon:0kB active_file:50556kB inactive_file:169992kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102680kB dirty:1332kB writeback:0kB shmem:4152kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11156kB pagetables:2656kB sec_pagetables:0kB all_unreclaimable? no [ 1076.774900][ C1] vkms_vblank_simulate: vblank timer overrun [ 1076.791649][T23679] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1076.821849][ C1] vkms_vblank_simulate: vblank timer overrun [ 1076.835363][T23679] Node 0 DMA free:15356kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1076.862545][ C1] vkms_vblank_simulate: vblank timer overrun [ 1076.870976][T23679] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1076.876740][T23688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1076.884537][T23679] Node 0 DMA32 free:1433844kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:38788kB inactive_anon:0kB active_file:50556kB inactive_file:168672kB unevictable:1536kB writepending:1332kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:13444kB local_pcp:7204kB free_cma:0kB [ 1076.919973][ C1] vkms_vblank_simulate: vblank timer overrun [ 1076.926514][T23679] lowmem_reserve[]: 0 0 1 1 1 [ 1076.932397][T23679] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1076.959715][ C1] vkms_vblank_simulate: vblank timer overrun [ 1076.968059][T23679] lowmem_reserve[]: 0 0 0 0 0 [ 1076.972842][T23679] Node 1 Normal free:3897316kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20128kB local_pcp:8576kB free_cma:0kB [ 1077.002313][ C1] vkms_vblank_simulate: vblank timer overrun [ 1077.008731][T23688] ext4 filesystem being mounted at /1866/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1077.041149][T23679] lowmem_reserve[]: 0 0 0 0 0 [ 1077.049626][T23679] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 1077.076948][T23688] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1077.133846][T23679] Node 0 DMA32: 2321*4kB (UME) 1884*8kB (UME) 813*16kB (UME) 502*32kB (UME) 231*64kB (ME) 149*128kB (UME) 94*256kB (UM) 49*512kB (UM) 35*1024kB (UME) 10*2048kB (UM) 303*4096kB (UM) = 1433844kB [ 1077.153073][ C1] vkms_vblank_simulate: vblank timer overrun [ 1077.190095][T23679] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1077.204832][T23679] Node 1 Normal: 265*4kB (UME) 50*8kB (UME) 45*16kB (UME) 111*32kB (UME) 30*64kB (UE) 4*128kB (UM) 2*256kB (UE) 3*512kB (UME) 0*1024kB 2*2048kB (UE) 948*4096kB (M) = 3897316kB [ 1077.224491][T23679] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1077.236521][T23679] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1077.246720][T23679] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1077.259223][ T6232] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.284630][T23679] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1077.302612][T23679] 54480 total pagecache pages [ 1077.308754][T23679] 0 pages in swap cache [ 1077.313465][T23679] Free swap = 124996kB [ 1077.317682][T23679] Total swap = 124996kB [ 1077.331324][T23679] 2097051 pages RAM [ 1077.359895][T23679] 0 pages HighMem/MovableOnly [ 1077.364635][T23679] 416137 pages reserved [ 1077.369395][T23679] 0 pages cma reserved [ 1077.616344][T23709] loop3: detected capacity change from 0 to 8 [ 1078.150486][ T6320] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1078.292219][T23737] netlink: 'syz.0.7868': attribute type 21 has an invalid length. [ 1078.318727][T23737] netlink: 'syz.0.7868': attribute type 1 has an invalid length. [ 1078.353823][ T6320] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.375056][ T6320] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1078.407655][T23739] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1078.418985][ T6320] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1078.458118][ T6320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1078.480588][ T6320] usb 4-1: SerialNumber: syz [ 1078.506393][ T6320] usb 4-1: 0:2 : does not exist [ 1078.791677][T23752] netlink: 'syz.1.7875': attribute type 21 has an invalid length. [ 1078.816481][T23752] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7875'. [ 1078.975734][ T27] usb 4-1: USB disconnect, device number 22 [ 1079.077013][T23762] xt_hashlimit: max too large, truncated to 1048576 [ 1079.221246][T23764] loop2: detected capacity change from 0 to 764 [ 1079.245288][T23764] rock: directory entry would overflow storage [ 1079.246235][T23766] netlink: 'syz.0.7881': attribute type 10 has an invalid length. [ 1079.276748][T23764] rock: sig=0x4654, size=5, remaining=4 [ 1079.290842][T23766] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7881'. [ 1079.326406][T23764] isofs: Unable to find the ".." directory for NFS. [ 1079.516875][T23772] loop2: detected capacity change from 0 to 8 [ 1079.564402][T23772] SQUASHFS error: Failed to read block 0x1ec: -5 [ 1079.606076][T23772] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 1080.009093][T23789] warning: `syz.0.7894' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1080.155324][T23792] netlink: 'syz.0.7895': attribute type 1 has an invalid length. [ 1080.167811][T23792] netlink: 'syz.0.7895': attribute type 1 has an invalid length. [ 1080.739101][T23813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7905'. [ 1080.968178][T23820] loop1: detected capacity change from 0 to 64 [ 1080.991204][T23822] comedi comedi2: dmm32at: I/O port conflict (0xcf8,16) [ 1081.389982][T23834] netlink: 'syz.1.7916': attribute type 10 has an invalid length. [ 1081.398229][T23834] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7916'. [ 1081.403895][T23832] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7914'. [ 1081.425694][T23807] loop3: detected capacity change from 0 to 32768 [ 1081.508046][T23807] [ 1081.508046][T23807] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1081.508046][T23807] [ 1081.537220][T23836] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1081.579539][T23807] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 1081.579539][T23807] [ 1081.704395][T23840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7919'. [ 1081.749450][T23840] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7919'. [ 1081.774076][ T48] read_mapping_page failed! [ 1081.776294][T23840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7919'. [ 1081.793632][ T48] ERROR: (device loop3): txCommit: [ 1081.793632][ T48] [ 1081.810210][ T48] jfs_write_inode: jfs_commit_inode failed! [ 1081.816508][T23840] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7919'. [ 1081.818195][ T6229] [ 1081.818195][ T6229] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1081.818195][ T6229] [ 1081.841343][ T6229] [ 1081.841343][ T6229] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1081.841343][ T6229] [ 1081.856499][T23840] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7919'. [ 1082.934709][T23851] loop2: detected capacity change from 0 to 32768 [ 1082.993620][T23851] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1083.018577][T23851] (syz.2.7924,23851,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 1083.028840][T23851] (syz.2.7924,23851,1):ocfs2_get_suballoc_slot_bit:2709 ERROR: read block 3229604089285250693 failed -12 [ 1083.045341][T23851] (syz.2.7924,23851,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: status = -12 [ 1083.055025][T23851] (syz.2.7924,23851,1):ocfs2_test_inode_bit:2823 ERROR: get alloc slot and bit failed -12 [ 1083.065124][T23851] (syz.2.7924,23851,1):ocfs2_test_inode_bit:2864 ERROR: status = -12 [ 1083.073912][T23851] (syz.2.7924,23851,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 1083.090228][T23881] netlink: 'syz.3.7938': attribute type 10 has an invalid length. [ 1083.120851][ T6232] (syz-executor,6232,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 1083.136497][ T27] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1083.168863][ T6232] ocfs2: Unmounting device (7,2) on (node local) [ 1083.323127][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 1083.334702][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.363440][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1083.400389][ T27] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1083.419312][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.443554][ T27] usb 2-1: Product: syz [ 1083.461523][ T27] usb 2-1: Manufacturer: syz [ 1083.472062][ T27] usb 2-1: SerialNumber: syz [ 1083.613500][T23893] binder: 23892:23893 ioctl c00c6211 0 returned -14 [ 1083.621190][T21140] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1083.690295][T23895] __nla_validate_parse: 3 callbacks suppressed [ 1083.690325][T23895] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7945'. [ 1083.727323][T23895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7945'. [ 1083.745572][T23895] netlink: 31 bytes leftover after parsing attributes in process `syz.3.7945'. [ 1083.758591][T23895] netlink: 'syz.3.7945': attribute type 2 has an invalid length. [ 1083.770292][T23895] netlink: 31 bytes leftover after parsing attributes in process `syz.3.7945'. [ 1083.818841][T21140] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.842224][T21140] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x61, skipping [ 1083.866060][T21140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1083.891334][T21140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 1083.919024][T21140] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1083.937949][ T27] usb 2-1: cannot find UAC_HEADER [ 1083.965051][T21140] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1083.977192][T21140] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1083.996310][ T27] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1084.020978][T21140] usb 3-1: Manufacturer: syz [ 1084.034195][ T27] usb 2-1: USB disconnect, device number 34 [ 1084.049319][T21140] usb 3-1: config 0 descriptor?? [ 1084.126194][ T8734] udevd[8734]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1084.261156][T15159] usb 3-1: USB disconnect, device number 18 [ 1084.763176][T23929] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7961'. [ 1084.832575][T23929] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1084.840588][T23929] IPv6: NLM_F_CREATE should be set when creating new route [ 1084.848068][T23929] IPv6: NLM_F_CREATE should be set when creating new route [ 1084.868855][T23931] netlink: 'syz.1.7963': attribute type 1 has an invalid length. [ 1084.887383][T23931] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7963'. [ 1085.065997][T23939] vivid-003: ================= START STATUS ================= [ 1085.082774][T23937] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7966'. [ 1085.094785][T23939] vivid-003: RDS Tx I/O Mode: Controls [ 1085.104207][T23939] vivid-003: RDS Program ID: 32904 [ 1085.109392][T23939] vivid-003: RDS Program Type: 3 [ 1085.111646][T23942] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1085.116640][T23939] vivid-003: RDS PS Name: VIVID-TX [ 1085.129380][T23939] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1085.149471][T23939] vivid-003: RDS Stereo: true [ 1085.158618][T23939] vivid-003: RDS Artificial Head: false [ 1085.168116][T23939] vivid-003: RDS Compressed: false [ 1085.177432][T23939] vivid-003: RDS Dynamic PTY: false [ 1085.186431][T23939] vivid-003: RDS Traffic Announcement: false [ 1085.233816][T23939] vivid-003: RDS Traffic Program: true [ 1085.239458][T23939] vivid-003: RDS Music: true [ 1085.251546][T23939] vivid-003: ================== END STATUS ================== [ 1085.453904][T23951] netlink: 'syz.0.7973': attribute type 21 has an invalid length. [ 1085.504038][T23951] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7973'. [ 1086.054901][T23973] netlink: 772 bytes leftover after parsing attributes in process `syz.2.7984'. [ 1086.174991][T23977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7986'. [ 1086.477303][T23985] loop2: detected capacity change from 0 to 64 [ 1086.533243][T23985] hfs: unable to locate alternate MDB [ 1086.543254][T23955] loop3: detected capacity change from 0 to 32768 [ 1086.550357][T23985] hfs: continuing without an alternate MDB [ 1086.584352][T23955] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1086.596279][T23955] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1086.699750][T23955] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 1086.788876][T15159] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1086.805998][T15159] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1086.892317][T23996] netlink: 'syz.2.7994': attribute type 1 has an invalid length. [ 1086.983549][T15159] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 190ms [ 1087.013494][T15159] gfs2: fsid=syz:syz.0: jid=0: Done [ 1087.018790][T23955] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1087.762155][T24026] overlayfs: missing 'lowerdir' [ 1088.608119][T24055] comedi comedi2: pcmmio: I/O port conflict (0xff,32) [ 1088.824114][T24062] loop0: detected capacity change from 0 to 16 [ 1088.877095][T24062] erofs: (device loop0): mounted with root inode @ nid 36. [ 1089.304623][T24078] loop0: detected capacity change from 0 to 64 [ 1089.362443][T24078] hfs: unable to locate alternate MDB [ 1089.368824][T24078] hfs: continuing without an alternate MDB [ 1089.560568][T24087] loop1: detected capacity change from 0 to 128 [ 1089.627571][T24087] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1089.700224][T24087] ext4 filesystem being mounted at /1948/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1089.808523][ T6223] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1090.223328][T24111] tmpfs: Group quota block hardlimit too large. [ 1090.498775][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1090.522390][T24119] loop0: detected capacity change from 0 to 4096 [ 1090.567055][T24121] binder: 24120:24121 ioctl c018620b 0 returned -14 [ 1090.627606][T24119] ntfs3: loop0: ino=5, "/" directory corrupted [ 1090.635236][T24119] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1090.694933][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1090.741908][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1090.760119][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.768228][ T9] usb 2-1: Product: syz [ 1090.778334][ T9] usb 2-1: Manufacturer: syz [ 1090.782994][ T9] usb 2-1: SerialNumber: syz [ 1090.802093][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 1090.812547][T24103] loop2: detected capacity change from 0 to 32768 [ 1090.838761][T24103] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.8044 (24103) [ 1090.887186][T24125] __nla_validate_parse: 1 callbacks suppressed [ 1090.887205][T24125] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8055'. [ 1090.961462][T24103] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1091.021123][T24103] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1091.040538][T24103] BTRFS info (device loop2): enabling ssd optimizations [ 1091.047631][T24103] BTRFS info (device loop2): not using ssd optimizations [ 1091.077325][T24103] BTRFS info (device loop2): turning off barriers [ 1091.083816][T24103] BTRFS info (device loop2): using free space tree [ 1091.117035][T24130] loop3: detected capacity change from 0 to 64 [ 1091.270229][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1091.279733][ T9] r8152-cfgselector 2-1: USB disconnect, device number 35 [ 1091.474780][ T6232] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1092.676438][T24186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8076'. [ 1092.709861][T24186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8076'. [ 1092.731849][T24186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1092.920754][T24165] loop3: detected capacity change from 0 to 32768 [ 1092.961163][T24165] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.8066 (24165) [ 1093.011394][T24165] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1093.050745][T24165] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1093.069802][T24165] BTRFS info (device loop3): turning on async discard [ 1093.077114][T24165] BTRFS info (device loop3): using free space tree [ 1093.201519][T24165] BTRFS info (device loop3): enabling ssd optimizations [ 1093.272538][T24218] QAT: failed to copy from user cfg_data. [ 1093.369457][ T6229] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1094.055470][T24242] ieee802154 phy0 wpan0: encryption failed: -22 [ 1094.261988][T24247] loop1: detected capacity change from 0 to 512 [ 1094.338373][T24247] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1094.414435][T24247] EXT4-fs (loop1): 1 truncate cleaned up [ 1094.461008][T24247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1094.557878][T24247] cifs: Unknown parameter 'dioread_lock' [ 1094.701937][T24259] xt_HMARK: spi-set and port-set can't be combined [ 1094.734112][ T6223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.016748][T24263] loop2: detected capacity change from 0 to 4096 [ 1095.288872][T24275] loop0: detected capacity change from 0 to 16 [ 1095.318682][T24275] erofs: (device loop0): mounted with root inode @ nid 36. [ 1095.353914][T24275] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1095.391716][T24275] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1095.415002][T24275] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1095.435075][T24275] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1095.465630][T24275] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 1095.853186][T24291] loop2: detected capacity change from 0 to 8 [ 1096.028761][T24267] loop1: detected capacity change from 0 to 32768 [ 1096.112287][T24267] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1096.240911][T24267] XFS (loop1): Ending clean mount [ 1096.556215][ T6223] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1096.939126][ T9] IPVS: starting estimator thread 0... [ 1097.041795][T24328] IPVS: using max 17 ests per chain, 40800 per kthread [ 1097.151704][T24331] tmpfs: User quota inode hardlimit too large. [ 1097.366676][T24321] loop3: detected capacity change from 0 to 32768 [ 1097.465368][T24321] find_entry called with index >= next_index [ 1097.509459][T24321] find_entry called with index >= next_index [ 1097.519843][T24321] find_entry called with index >= next_index [ 1098.169297][T15159] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1098.379805][T15159] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1098.400474][T15159] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1098.421530][T15159] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1098.431225][T15159] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1098.458124][T15159] usb 3-1: Product: syz [ 1098.476389][T15159] usb 3-1: Manufacturer: syz [ 1098.481042][T15159] usb 3-1: SerialNumber: syz [ 1098.510272][T15159] usb 3-1: config 0 descriptor?? [ 1098.538870][T15159] usb 3-1: selecting invalid altsetting 0 [ 1098.772338][T15159] usb 3-1: USB disconnect, device number 19 [ 1098.935245][T24386] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8160'. [ 1099.189592][T24394] loop0: detected capacity change from 0 to 2048 [ 1099.208715][T24397] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1099.306176][T15159] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1099.421708][T24403] lo: entered promiscuous mode [ 1099.452206][T24403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1099.483476][ T6320] IPVS: starting estimator thread 0... [ 1099.492344][T15159] usb 4-1: Using ep0 maxpacket: 8 [ 1099.505979][T15159] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1099.547233][T15159] usb 4-1: config 179 has no interface number 0 [ 1099.583689][T15159] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1099.614260][T15159] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1099.640686][T15159] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1099.642324][T24406] IPVS: using max 17 ests per chain, 40800 per kthread [ 1099.653591][T15159] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1099.669996][T15159] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1099.697631][T15159] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1099.712660][T15159] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1099.735001][T24411] netlink: 'syz.2.8172': attribute type 11 has an invalid length. [ 1099.743154][T15159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.794056][T15159] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input75 [ 1099.905544][T24416] IPv6: NLM_F_CREATE should be specified when creating new route [ 1099.928984][T24416] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8174'. [ 1100.103825][T15159] usb 4-1: USB disconnect, device number 23 [ 1100.148394][T15159] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1100.313073][T21140] IPVS: starting estimator thread 0... [ 1100.416220][T24427] IPVS: using max 19 ests per chain, 45600 per kthread [ 1100.464322][T24433] sock: sock_timestamping_bind_phc: sock not bind to device [ 1100.493027][T24429] loop0: detected capacity change from 0 to 4096 [ 1100.639897][T24429] ntfs3: loop0: ino=5, "/" directory corrupted [ 1100.848253][T24443] overlayfs: empty lowerdir [ 1100.959856][T24444] ALSA: mixer_oss: invalid OSS volume 'u' [ 1101.116061][T24452] loop0: detected capacity change from 0 to 764 [ 1101.145598][T24452] Symlink component flag not implemented [ 1101.169492][T24452] Symlink component flag not implemented [ 1101.180634][T24452] Symlink component flag not implemented (128) [ 1101.191001][T24452] Symlink component flag not implemented (122) [ 1101.637386][T24439] loop1: detected capacity change from 0 to 40427 [ 1101.652696][T24439] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1101.683000][T24439] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1101.721353][T24439] F2FS-fs (loop1): invalid crc value [ 1101.760541][T24439] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1101.889267][T24439] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1101.904826][T24439] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1102.012323][T24476] loop2: detected capacity change from 0 to 512 [ 1102.087738][T24476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1102.150631][T24476] ext4 filesystem being mounted at /1945/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1102.292889][ T6232] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1102.573859][T24489] loop0: detected capacity change from 0 to 1024 [ 1102.819769][ T28] audit: type=1326 audit(1759218344.069:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24498 comm="syz.1.8203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d158eec9 code=0x7ffc0000 [ 1102.875105][T24501] netlink: 'syz.0.8212': attribute type 9 has an invalid length. [ 1102.891372][ T28] audit: type=1326 audit(1759218344.069:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24498 comm="syz.1.8203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d158eec9 code=0x7ffc0000 [ 1102.969826][T24450] Bluetooth: hci1: command 0x0c1a tx timeout [ 1102.978124][ T28] audit: type=1326 audit(1759218344.080:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24498 comm="syz.1.8203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe3d1590de7 code=0x7ffc0000 [ 1103.040934][ T28] audit: type=1326 audit(1759218344.080:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24498 comm="syz.1.8203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe3d1590d5c code=0x7ffc0000 [ 1103.119241][ T28] audit: type=1326 audit(1759218344.080:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24498 comm="syz.1.8203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe3d1590c94 code=0x7ffc0000 [ 1103.148928][T24509] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8216'. [ 1103.211081][ T28] audit: type=1326 audit(1759218344.080:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24498 comm="syz.1.8203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe3d1590c94 code=0x7ffc0000 [ 1103.266882][ T28] audit: type=1326 audit(1759218344.080:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24498 comm="syz.1.8203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe3d158db2a code=0x7ffc0000 [ 1103.359833][ T28] audit: type=1326 audit(1759218344.080:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24498 comm="syz.1.8203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d158eec9 code=0x7ffc0000 [ 1103.435049][ T28] audit: type=1326 audit(1759218344.080:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24498 comm="syz.1.8203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d158eec9 code=0x7ffc0000 [ 1103.656465][T24528] bridge_slave_0: mtu greater than device maximum [ 1104.408690][ T28] audit: type=1326 audit(1759218345.786:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24556 comm="syz.1.8240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d158eec9 code=0x7ffc0000 [ 1105.034018][T24544] loop2: detected capacity change from 0 to 40427 [ 1105.080026][T24544] F2FS-fs (loop2): invalid crc value [ 1105.108717][T24544] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1105.295342][T24544] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1105.522802][T24592] lo: entered promiscuous mode [ 1105.555003][T24592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1106.360064][T24620] netlink: 'syz.0.8268': attribute type 1 has an invalid length. [ 1106.384440][T24620] netlink: 'syz.0.8268': attribute type 2 has an invalid length. [ 1106.409389][T24620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8268'. [ 1106.442689][T24616] loop3: detected capacity change from 0 to 8192 [ 1106.465627][T24616] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1106.500143][T24616] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1106.511070][T24616] REISERFS (device loop3): using ordered data mode [ 1106.517625][T24616] reiserfs: using flush barriers [ 1106.547395][T24616] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1106.570235][T24616] REISERFS (device loop3): checking transaction log (loop3) [ 1106.579213][T24616] REISERFS (device loop3): Using r5 hash to sort names [ 1106.587963][T24616] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1106.602955][T24628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8271'. [ 1107.906719][T24652] loop0: detected capacity change from 0 to 32768 [ 1107.962899][T24652] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 1107.998451][T24652] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1108.009282][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1108.009298][ T28] audit: type=1326 audit(1759218349.649:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24667 comm="syz.3.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d9f8eec9 code=0x7ffc0000 [ 1108.127759][ T28] audit: type=1326 audit(1759218349.692:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24667 comm="syz.3.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d9f8eec9 code=0x7ffc0000 [ 1108.157316][T24652] (syz.0.8282,24652,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=9 [ 1108.211714][ T28] audit: type=1326 audit(1759218349.692:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24667 comm="syz.3.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fc2d9f8eec9 code=0x7ffc0000 [ 1108.213686][T24672] loop2: detected capacity change from 0 to 256 [ 1108.240830][T24652] (syz.0.8282,24652,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 1108.267913][ T28] audit: type=1326 audit(1759218349.692:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24667 comm="syz.3.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d9f8eec9 code=0x7ffc0000 [ 1108.291094][T24652] (syz.0.8282,24652,1):ocfs2_mknod:298 ERROR: status = -2 [ 1108.298312][T24652] (syz.0.8282,24652,1):ocfs2_mknod:502 ERROR: status = -2 [ 1108.364771][ T28] audit: type=1326 audit(1759218349.692:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24667 comm="syz.3.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d9f8eec9 code=0x7ffc0000 [ 1108.393543][T24652] (syz.0.8282,24652,1):ocfs2_mkdir:659 ERROR: status = -2 [ 1108.619249][T24679] loop3: detected capacity change from 0 to 1024 [ 1108.631167][ T6226] ocfs2: Unmounting device (7,0) on (node local) [ 1109.245632][T24696] loop3: detected capacity change from 0 to 1024 [ 1109.368570][T24696] hfsplus: xattr searching failed [ 1109.570753][T24706] loop2: detected capacity change from 0 to 1024 [ 1110.199208][T24728] Illegal XDP return value 4294967274 on prog (id 485) dev N/A, expect packet loss! [ 1110.563067][T24742] loop2: detected capacity change from 0 to 2048 [ 1110.604853][T24742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1110.690827][T24742] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.8327: inline data xattr refers to an external xattr inode [ 1110.780053][T24742] EXT4-fs (loop2): Remounting filesystem read-only [ 1110.874448][ T6232] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.140909][T24758] loop2: detected capacity change from 0 to 1024 [ 1111.177575][T24760] loop1: detected capacity change from 0 to 256 [ 1111.209557][T24760] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1111.282559][T24760] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 1111.477768][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1111.693558][ T9] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 1111.710355][ T9] usb 1-1: config 0 has no interface number 0 [ 1111.716537][ T9] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1111.748498][ T9] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1111.777886][ T9] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1111.788307][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.811367][ T9] usb 1-1: Product: syz [ 1111.818755][ T9] usb 1-1: Manufacturer: syz [ 1111.828201][ T9] usb 1-1: SerialNumber: syz [ 1111.835882][ T9] usb 1-1: config 0 descriptor?? [ 1111.851063][T24762] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1111.861026][ T9] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1111.881444][ T9] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1112.133017][T24783] loop1: detected capacity change from 0 to 1024 [ 1112.270764][T21140] usb 1-1: USB disconnect, device number 7 [ 1112.297615][T21140] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1112.330767][T21140] cyberjack 1-1:0.69: device disconnected [ 1112.367007][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1112.373699][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1112.791551][T24799] netlink: 'syz.2.8352': attribute type 7 has an invalid length. [ 1113.094446][T24809] loop0: detected capacity change from 0 to 128 [ 1113.138003][T24811] loop2: detected capacity change from 0 to 256 [ 1113.193165][T24809] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 1113.239766][T24809] FAT-fs (loop0): Filesystem has been set read-only [ 1113.269379][T24811] FAT-fs (loop2): Directory bread(block 64) failed [ 1113.289790][T24811] FAT-fs (loop2): Directory bread(block 65) failed [ 1113.302238][T24811] FAT-fs (loop2): Directory bread(block 66) failed [ 1113.311892][T24811] FAT-fs (loop2): Directory bread(block 67) failed [ 1113.318939][T24811] FAT-fs (loop2): Directory bread(block 68) failed [ 1113.329696][T24811] FAT-fs (loop2): Directory bread(block 69) failed [ 1113.339058][T24811] FAT-fs (loop2): Directory bread(block 70) failed [ 1113.346092][T24811] FAT-fs (loop2): Directory bread(block 71) failed [ 1113.353176][T24811] FAT-fs (loop2): Directory bread(block 72) failed [ 1113.362719][T24811] FAT-fs (loop2): Directory bread(block 73) failed [ 1113.702877][T24822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8364'. [ 1113.805961][T24827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8367'. [ 1114.025134][T24837] loop1: detected capacity change from 0 to 128 [ 1114.065908][T24837] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1114.120569][T24837] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1114.559797][T24847] loop2: detected capacity change from 0 to 4096 [ 1114.649170][T24852] unsupported nla_type 39 [ 1114.797396][T24854] loop0: detected capacity change from 0 to 64 [ 1114.866352][T24847] ntfs3: loop2: try to read out of volume at offset 0x3fffffc7000 [ 1115.001182][T24832] loop3: detected capacity change from 0 to 32768 [ 1115.110073][T24832] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1115.313943][T24832] XFS (loop3): Ending clean mount [ 1115.359103][T24872] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.8385'. [ 1115.587238][ T6229] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1116.410360][T24904] netlink: 'syz.1.8401': attribute type 1 has an invalid length. [ 1116.431863][T24906] loop2: detected capacity change from 0 to 64 [ 1116.479093][T24906] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1116.501729][T24908] loop0: detected capacity change from 0 to 128 [ 1116.549341][T24908] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1116.573062][ T28] audit: type=1800 audit(1759218358.834:52): pid=24906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8402" name="file1" dev="loop2" ino=8 res=0 errno=0 [ 1116.667667][T24908] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1117.031346][ T6320] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1117.227569][ T6320] usb 4-1: Using ep0 maxpacket: 32 [ 1117.244457][ T6320] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.270845][ T6320] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1117.292316][ T6320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.300367][ T6320] usb 4-1: Product: syz [ 1117.334747][ T6320] usb 4-1: Manufacturer: syz [ 1117.354440][ T6320] usb 4-1: SerialNumber: syz [ 1117.379046][ T6320] usb 4-1: config 0 descriptor?? [ 1117.422156][ T6320] cdc_ether 4-1:0.0: skipping garbage [ 1117.434661][ T28] audit: type=1326 audit(1759218359.757:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24934 comm="syz.1.8416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d158eec9 code=0x7ffc0000 [ 1117.455139][T24936] loop1: detected capacity change from 0 to 2048 [ 1117.461076][ T6320] cdc_ether 4-1:0.0: skipping garbage [ 1117.468704][ T6320] usb 4-1: bad CDC descriptors [ 1117.480081][ T6320] usb 4-1: unsupported MDLM descriptors [ 1117.493464][ T28] audit: type=1326 audit(1759218359.757:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24934 comm="syz.1.8416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d158eec9 code=0x7ffc0000 [ 1117.525591][ T28] audit: type=1326 audit(1759218359.768:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24934 comm="syz.1.8416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe3d158eec9 code=0x7ffc0000 [ 1117.564380][ T28] audit: type=1326 audit(1759218359.768:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24934 comm="syz.1.8416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe3d158ef03 code=0x7ffc0000 [ 1117.569332][T24936] Alternate GPT is invalid, using primary GPT. [ 1117.597163][T24936] loop1: p2 p3 p7 [ 1117.607464][ T28] audit: type=1326 audit(1759218359.768:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24934 comm="syz.1.8416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe3d158d97f code=0x7ffc0000 [ 1117.633606][ T28] audit: type=1326 audit(1759218359.768:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24934 comm="syz.1.8416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe3d158ef57 code=0x7ffc0000 [ 1117.661684][ T6320] usb 4-1: USB disconnect, device number 24 [ 1117.675030][T21140] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1117.697850][ T28] audit: type=1326 audit(1759218359.768:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24934 comm="syz.1.8416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3d158d710 code=0x7ffc0000 [ 1117.720184][ C0] vkms_vblank_simulate: vblank timer overrun [ 1117.737916][ T28] audit: type=1326 audit(1759218359.768:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24934 comm="syz.1.8416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3d158eacb code=0x7ffc0000 [ 1117.794632][ T28] audit: type=1326 audit(1759218359.821:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24934 comm="syz.1.8416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe3d158db2a code=0x7ffc0000 [ 1117.816788][ C0] vkms_vblank_simulate: vblank timer overrun [ 1117.889255][T21140] usb 3-1: Using ep0 maxpacket: 8 [ 1117.934537][T21140] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1117.943131][T21140] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1117.962140][T21140] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1117.982293][T21140] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1117.998263][T21140] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1118.026691][T21140] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1118.043587][ T8734] udevd[8734]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1118.045131][T21140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.147629][ T6183] udevd[6183]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 1118.160792][ T8734] udevd[8734]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1118.415570][T24956] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8427'. [ 1118.488979][T21140] usb 3-1: USB disconnect, device number 20 [ 1119.104450][T24978] loop0: detected capacity change from 0 to 64 [ 1119.398684][T24990] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8443'. [ 1119.445089][T24990] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1119.448289][T24992] loop3: detected capacity change from 0 to 256 [ 1119.796910][T25002] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1119.827529][T25004] comedi comedi4: bad chanlist[0]=0x00000009 chan=9 range length=2 [ 1120.270529][T25022] netlink: 112 bytes leftover after parsing attributes in process `syz.2.8458'. [ 1120.638151][T25036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8467'. [ 1120.680801][T25038] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1120.967132][T25049] loop2: detected capacity change from 0 to 256 [ 1121.012532][T25049] exfat: Deprecated parameter 'utf8' [ 1121.017976][T25049] exfat: Deprecated parameter 'namecase' [ 1121.058665][T25049] exfat: Deprecated parameter 'utf8' [ 1121.110386][T25049] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1121.190621][T25056] netlink: 'syz.1.8477': attribute type 1 has an invalid length. [ 1121.235687][T25056] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8477'. [ 1121.442079][T25060] dlm: no local IP address has been set [ 1121.451626][T25060] dlm: cannot start dlm midcomms -107 [ 1121.817581][T25054] loop0: detected capacity change from 0 to 32768 [ 1121.837979][T25052] loop3: detected capacity change from 0 to 32768 [ 1121.845011][T25054] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.8476 (25054) [ 1121.930212][T25052] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.8475 (25052) [ 1121.935936][T25054] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1122.010667][T25054] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1122.057655][T25052] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1122.064043][T25054] BTRFS info (device loop0): enabling auto defrag [ 1122.101083][T25052] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1122.135736][T25054] BTRFS info (device loop0): force clearing of disk cache [ 1122.139370][T25052] BTRFS info (device loop3): force zlib compression, level 3 [ 1122.166721][T25054] BTRFS info (device loop0): max_inline at 0 [ 1122.194371][T25052] BTRFS info (device loop3): force clearing of disk cache [ 1122.208808][T25054] BTRFS info (device loop0): turning on sync discard [ 1122.228241][T25054] BTRFS info (device loop0): using free space tree [ 1122.257884][T25052] BTRFS info (device loop3): turning off barriers [ 1122.280998][T25052] BTRFS info (device loop3): doing ref verification [ 1122.287673][T25052] BTRFS info (device loop3): enabling disk space caching [ 1122.351121][T25052] BTRFS info (device loop3): disk space caching is enabled [ 1122.429562][T25054] BTRFS info (device loop0): enabling ssd optimizations [ 1122.451328][T25054] BTRFS info (device loop0): rebuilding free space tree [ 1122.622995][T25052] BTRFS info (device loop3): enabling ssd optimizations [ 1122.642135][T25052] BTRFS info (device loop3): auto enabling async discard [ 1122.659601][T25052] BTRFS info (device loop3): rebuilding free space tree [ 1122.725139][T25106] loop2: detected capacity change from 0 to 512 [ 1122.738362][T25052] BTRFS info (device loop3): disabling free space tree [ 1122.761869][ T6226] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1122.763645][T25052] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1122.786899][T25106] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1122.838725][T25052] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1122.853532][T25106] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 1122.925600][T25106] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84fc01c, mo2=0102] [ 1122.938345][T25106] System zones: 0-2, 18-18, 34-34 [ 1122.950713][T25106] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.8488: iget: bad i_size value: 360287970189639680 [ 1123.013655][T25106] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.8488: couldn't read orphan inode 15 (err -117) [ 1123.048003][T25106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1123.198721][T25106] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.8488: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1123.247695][ T6229] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1123.266468][ T27] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1123.440257][ T6232] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.499682][ T27] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1123.509553][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.567563][ T27] usb 2-1: Product: syz [ 1123.571789][ T27] usb 2-1: Manufacturer: syz [ 1123.610473][ T27] usb 2-1: SerialNumber: syz [ 1123.634315][ T27] usb 2-1: config 0 descriptor?? [ 1123.673901][ T27] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 036 [ 1123.692663][T25123] tmpfs: Bad value for 'mpol' [ 1123.911679][T25127] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.8495'. [ 1123.982241][T25129] loop2: detected capacity change from 0 to 512 [ 1124.052740][ T27] (null): failure reading functionality [ 1124.096260][ T27] i2c i2c-3: failure reading functionality [ 1124.102911][T25129] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1124.123000][ T27] i2c i2c-3: connected i2c-tiny-usb device [ 1124.152892][ T27] usb 2-1: USB disconnect, device number 36 [ 1124.197937][T25129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1124.287021][T25137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8499'. [ 1124.310987][T25129] ext4 filesystem being mounted at /2013/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1124.657300][ T6232] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.989615][T25155] loop2: detected capacity change from 0 to 256 [ 1125.533167][T25143] loop3: detected capacity change from 0 to 32768 [ 1125.560115][T25143] (syz.3.8502,25143,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1125.600886][T25143] (syz.3.8502,25143,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1125.693115][T25143] JBD2: Ignoring recovery information on journal [ 1125.867565][T25143] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1126.075398][T25157] loop0: detected capacity change from 0 to 32768 [ 1126.115544][T25143] [ 1126.117942][T25143] ====================================================== [ 1126.118313][T25157] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.8509 (25157) [ 1126.124987][T25143] WARNING: possible circular locking dependency detected [ 1126.125008][T25143] syzkaller #0 Not tainted [ 1126.125019][T25143] ------------------------------------------------------ [ 1126.125045][T25143] syz.3.8502/25143 is trying to acquire lock: [ 1126.161879][T25143] ffff8880534c0608 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x67b/0xaf0 [ 1126.171372][T25143] [ 1126.171372][T25143] but task is already holding lock: [ 1126.178771][T25143] ffff88806c32a2e0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e9/0x270 [ 1126.189711][T25143] [ 1126.189711][T25143] which lock already depends on the new lock. [ 1126.189711][T25143] [ 1126.200137][T25143] [ 1126.200137][T25143] the existing dependency chain (in reverse order) is: [ 1126.209173][T25143] [ 1126.209173][T25143] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 1126.218061][T25143] down_write+0x97/0x1f0 [ 1126.222857][T25143] ocfs2_lock_global_qf+0x1e9/0x270 [ 1126.228771][T25143] ocfs2_acquire_dquot+0x2a1/0xaf0 [ 1126.234425][T25143] dqget+0x77c/0xeb0 [ 1126.238862][T25143] dquot_set_dqblk+0x2b/0xf90 [ 1126.244083][T25143] quota_setquota+0x4b0/0x530 [ 1126.249316][T25143] __se_sys_quotactl+0x27b/0x950 [ 1126.254798][T25143] do_syscall_64+0x55/0xb0 [ 1126.259754][T25143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1126.266196][T25143] [ 1126.266196][T25143] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 1126.276742][T25143] down_write+0x97/0x1f0 [ 1126.281532][T25143] ocfs2_lock_global_qf+0x1cb/0x270 [ 1126.287275][T25143] ocfs2_acquire_dquot+0x2a1/0xaf0 [ 1126.292924][T25143] dqget+0x77c/0xeb0 [ 1126.297359][T25143] dquot_set_dqblk+0x2b/0xf90 [ 1126.302577][T25143] quota_setquota+0x4b0/0x530 [ 1126.307795][T25143] __se_sys_quotactl+0x27b/0x950 [ 1126.313273][T25143] do_syscall_64+0x55/0xb0 [ 1126.318228][T25143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1126.324687][T25143] [ 1126.324687][T25143] -> #4 (&dquot->dq_lock){+.+.}-{3:3}: [ 1126.332404][T25143] __mutex_lock+0x129/0xcc0 [ 1126.337464][T25143] dqget+0x6fc/0xeb0 [ 1126.341912][T25143] __dquot_initialize+0x3ba/0xcb0 [ 1126.347486][T25143] __ext4_new_inode+0x77b/0x3a00 [ 1126.352976][T25143] ext4_xattr_inode_lookup_create+0x57b/0x1d80 [ 1126.359678][T25143] ext4_xattr_block_set+0x23e/0x32a0 [ 1126.365512][T25143] ext4_xattr_set_handle+0x10a1/0x1290 [ 1126.371508][T25143] __ext4_set_acl+0x56f/0x650 [ 1126.376728][T25143] ext4_set_acl+0x359/0x520 [ 1126.381773][T25143] vfs_set_acl+0x803/0xa60 [ 1126.386723][T25143] do_set_acl+0xf5/0x180 [ 1126.391504][T25143] path_setxattr+0x39f/0x550 [ 1126.396627][T25143] __x64_sys_setxattr+0xbb/0xd0 [ 1126.402009][T25143] do_syscall_64+0x55/0xb0 [ 1126.406958][T25143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1126.413396][T25143] [ 1126.413396][T25143] -> #3 (&ei->xattr_sem){++++}-{3:3}: [ 1126.420968][T25143] down_read+0x46/0x2e0 [ 1126.425659][T25143] ext4_setattr+0x86b/0x1c90 [ 1126.430788][T25143] notify_change+0xb0d/0xe10 [ 1126.435914][T25143] chown_common+0x3f9/0x5a0 [ 1126.440958][T25143] do_fchownat+0x168/0x270 [ 1126.445908][T25143] __x64_sys_chown+0x82/0x90 [ 1126.451029][T25143] do_syscall_64+0x55/0xb0 [ 1126.455992][T25143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1126.462439][T25143] [ 1126.462439][T25143] -> #2 (jbd2_handle){++++}-{0:0}: [ 1126.469758][T25143] start_this_handle+0x1e9d/0x20c0 [ 1126.475409][T25143] jbd2__journal_start+0x2bb/0x5b0 [ 1126.481053][T25143] jbd2_journal_start+0x2a/0x40 [ 1126.486431][T25143] ocfs2_start_trans+0x376/0x6c0 [ 1126.491911][T25143] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 1126.498161][T25143] ocfs2_dismount_volume+0x1e2/0x890 [ 1126.503991][T25143] generic_shutdown_super+0x134/0x2b0 [ 1126.509904][T25143] kill_block_super+0x44/0x90 [ 1126.515130][T25143] deactivate_locked_super+0x97/0x100 [ 1126.521052][T25143] cleanup_mnt+0x429/0x4c0 [ 1126.526015][T25143] task_work_run+0x1ce/0x250 [ 1126.531151][T25143] exit_to_user_mode_loop+0xe6/0x110 [ 1126.536979][T25143] exit_to_user_mode_prepare+0xf6/0x180 [ 1126.543073][T25143] syscall_exit_to_user_mode+0x1a/0x50 [ 1126.549077][T25143] do_syscall_64+0x61/0xb0 [ 1126.554035][T25143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1126.560488][T25143] [ 1126.560488][T25143] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1126.569029][T25143] down_read+0x46/0x2e0 [ 1126.573724][T25143] ocfs2_start_trans+0x36a/0x6c0 [ 1126.579204][T25143] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 1126.585455][T25143] ocfs2_dismount_volume+0x1e2/0x890 [ 1126.591330][T25143] generic_shutdown_super+0x134/0x2b0 [ 1126.597247][T25143] kill_block_super+0x44/0x90 [ 1126.602465][T25143] deactivate_locked_super+0x97/0x100 [ 1126.608560][T25143] cleanup_mnt+0x429/0x4c0 [ 1126.613505][T25143] task_work_run+0x1ce/0x250 [ 1126.618634][T25143] exit_to_user_mode_loop+0xe6/0x110 [ 1126.624453][T25143] exit_to_user_mode_prepare+0xf6/0x180 [ 1126.630532][T25143] syscall_exit_to_user_mode+0x1a/0x50 [ 1126.636529][T25143] do_syscall_64+0x61/0xb0 [ 1126.641473][T25143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1126.647899][T25143] [ 1126.647899][T25143] -> #0 (sb_internal#2){.+.+}-{0:0}: [ 1126.655385][T25143] __lock_acquire+0x2ddb/0x7c80 [ 1126.660764][T25143] lock_acquire+0x197/0x410 [ 1126.665797][T25143] ocfs2_start_trans+0x26b/0x6c0 [ 1126.671288][T25143] ocfs2_acquire_dquot+0x67b/0xaf0 [ 1126.676931][T25143] dqget+0x77c/0xeb0 [ 1126.681363][T25143] dquot_set_dqblk+0x2b/0xf90 [ 1126.686586][T25143] quota_setquota+0x4b0/0x530 [ 1126.691802][T25143] __se_sys_quotactl+0x27b/0x950 [ 1126.697273][T25143] do_syscall_64+0x55/0xb0 [ 1126.702221][T25143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1126.708659][T25143] [ 1126.708659][T25143] other info that might help us debug this: [ 1126.708659][T25143] [ 1126.718896][T25143] Chain exists of: [ 1126.718896][T25143] sb_internal#2 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4 --> &ocfs2_quota_ip_alloc_sem_key [ 1126.718896][T25143] [ 1126.735876][T25143] Possible unsafe locking scenario: [ 1126.735876][T25143] [ 1126.743348][T25143] CPU0 CPU1 [ 1126.748729][T25143] ---- ---- [ 1126.754101][T25143] lock(&ocfs2_quota_ip_alloc_sem_key); [ 1126.759749][T25143] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4); [ 1126.769576][T25143] lock(&ocfs2_quota_ip_alloc_sem_key); [ 1126.777751][T25143] rlock(sb_internal#2); [ 1126.782110][T25143] [ 1126.782110][T25143] *** DEADLOCK *** [ 1126.782110][T25143] [ 1126.790520][T25143] 4 locks held by syz.3.8502/25143: [ 1126.795726][T25143] #0: ffff8880534c00e0 (&type->s_umount_key#104){++++}-{3:3}, at: super_lock+0x167/0x360 [ 1126.805676][T25143] #1: ffff88804bc780a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x294/0xaf0 [ 1126.815704][T25143] #2: ffff88806c32a658 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1cb/0x270 [ 1126.828689][T25143] #3: ffff88806c32a2e0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e9/0x270 [ 1126.840018][T25143] [ 1126.840018][T25143] stack backtrace: [ 1126.845912][T25143] CPU: 0 PID: 25143 Comm: syz.3.8502 Not tainted syzkaller #0 [ 1126.853378][T25143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1126.863717][T25143] Call Trace: [ 1126.867022][T25143] [ 1126.869986][T25143] dump_stack_lvl+0x16c/0x230 [ 1126.874685][T25143] ? load_image+0x3b0/0x3b0 [ 1126.879201][T25143] ? show_regs_print_info+0x20/0x20 [ 1126.884412][T25143] ? print_circular_bug+0x12b/0x1a0 [ 1126.889623][T25143] check_noncircular+0x2bd/0x3c0 [ 1126.894579][T25143] ? print_deadlock_bug+0x5d0/0x5d0 [ 1126.899787][T25143] ? lockdep_lock+0xe0/0x220 [ 1126.904392][T25143] ? _find_first_zero_bit+0xd3/0x100 [ 1126.909713][T25143] __lock_acquire+0x2ddb/0x7c80 [ 1126.914586][T25143] ? verify_lock_unused+0x140/0x140 [ 1126.919802][T25143] ? verify_lock_unused+0x140/0x140 [ 1126.925039][T25143] ? mark_lock+0x94/0x320 [ 1126.929376][T25143] ? verify_lock_unused+0x140/0x140 [ 1126.934586][T25143] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1126.940582][T25143] ? lock_chain_count+0x20/0x20 [ 1126.945448][T25143] lock_acquire+0x197/0x410 [ 1126.949964][T25143] ? ocfs2_acquire_dquot+0x67b/0xaf0 [ 1126.955273][T25143] ? __might_sleep+0xe0/0xe0 [ 1126.959877][T25143] ? do_raw_spin_lock+0x121/0x2c0 [ 1126.964929][T25143] ? read_lock_is_recursive+0x20/0x20 [ 1126.970317][T25143] ? __rwlock_init+0x150/0x150 [ 1126.975100][T25143] ? do_raw_spin_unlock+0x121/0x230 [ 1126.980323][T25143] ocfs2_start_trans+0x26b/0x6c0 [ 1126.985278][T25143] ? ocfs2_acquire_dquot+0x67b/0xaf0 [ 1126.990581][T25143] ? ocfs2_recovery_exit+0x50/0x50 [ 1126.995718][T25143] ? do_raw_spin_unlock+0x121/0x230 [ 1127.000969][T25143] ? _raw_spin_unlock+0x28/0x40 [ 1127.005844][T25143] ? ocfs2_qinfo_unlock+0x11e/0x140 [ 1127.011069][T25143] ocfs2_acquire_dquot+0x67b/0xaf0 [ 1127.016216][T25143] ? ocfs2_destroy_dquot+0x50/0x50 [ 1127.021348][T25143] ? do_raw_spin_unlock+0x121/0x230 [ 1127.026565][T25143] dqget+0x77c/0xeb0 [ 1127.030487][T25143] dquot_set_dqblk+0x2b/0xf90 [ 1127.035177][T25143] ? __might_fault+0xaa/0x120 [ 1127.039867][T25143] quota_setquota+0x4b0/0x530 [ 1127.044563][T25143] ? quota_getnextquota+0x490/0x490 [ 1127.049780][T25143] ? bpf_lsm_capable+0x9/0x10 [ 1127.054480][T25143] ? do_quotactl+0x72f/0x860 [ 1127.059132][T25143] __se_sys_quotactl+0x27b/0x950 [ 1127.064096][T25143] ? __x64_sys_quotactl+0xb0/0xb0 [ 1127.069146][T25143] ? lockdep_hardirqs_on+0x98/0x150 [ 1127.074374][T25143] do_syscall_64+0x55/0xb0 [ 1127.078807][T25143] ? clear_bhb_loop+0x40/0x90 [ 1127.083499][T25143] ? clear_bhb_loop+0x40/0x90 [ 1127.088193][T25143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1127.094118][T25143] RIP: 0033:0x7fc2d9f8eec9 [ 1127.098553][T25143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1127.118178][T25143] RSP: 002b:00007fc2dad40038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 1127.126613][T25143] RAX: ffffffffffffffda RBX: 00007fc2da1e5fa0 RCX: 00007fc2d9f8eec9 [ 1127.134597][T25143] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffff80000800 [ 1127.142596][T25143] RBP: 00007fc2da011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1127.150584][T25143] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 1127.158574][T25143] R13: 00007fc2da1e6038 R14: 00007fc2da1e5fa0 R15: 00007ffdd8b7d928 [ 1127.166568][T25143] [ 1127.169678][ C0] vkms_vblank_simulate: vblank timer overrun [ 1127.211532][T25157] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1127.223507][T25157] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1127.234374][T25157] BTRFS info (device loop0): enabling auto defrag [ 1127.242506][T25157] BTRFS info (device loop0): setting nodatasum [ 1127.248855][T25157] BTRFS info (device loop0): turning on flush-on-commit [ 1127.266762][T25157] BTRFS info (device loop0): doing ref verification [ 1127.275769][T25157] BTRFS info (device loop0): allowing degraded mounts [ 1127.282968][T25157] BTRFS info (device loop0): force clearing of disk cache [ 1127.290155][T25157] BTRFS info (device loop0): enabling ssd optimizations [ 1127.298651][T25157] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1127.313853][T25157] BTRFS info (device loop0): use lzo compression, level 0 [ 1127.321460][T25157] BTRFS info (device loop0): using free space tree [ 1127.366551][ T6229] ocfs2: Unmounting device (7,3) on (node local) [ 1127.452203][T25157] BTRFS info (device loop0): auto enabling async discard [ 1127.465527][T25157] BTRFS info (device loop0): rebuilding free space tree [ 1127.615264][ T6226] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf