last executing test programs: 7.145663026s ago: executing program 0 (id=7281): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) 6.457409272s ago: executing program 0 (id=7285): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0) 6.372169129s ago: executing program 0 (id=7287): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000001180)={[{@barrier}, {@nodecompose}, {@uid}, {@umask={'umask', 0x3d, 0x9}}, {@force}, {}, {@nls={'nls', 0x3d, 'iso8859-3'}}, {@nobarrier}]}, 0x7, 0x6b3, &(0x7f0000000780)="$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") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="6f73782e26d78a601b8d3a"], 0x0, 0x0, 0x0) 6.101196741s ago: executing program 0 (id=7291): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x3a, 0xb, 0x0, 0x0, {0x2}, [@nested={0xc, 0x83, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @u32}]}]}, 0x20}}, 0x0) 5.733088232s ago: executing program 0 (id=7297): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500230000002400128009000100766c616e000000001400028006000100fa30ac900600050081"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.414597227s ago: executing program 0 (id=7304): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2810880, &(0x7f0000000000)=ANY=[], 0x1, 0x2c6, &(0x7f0000000c80)="$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") rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.120664483s ago: executing program 1 (id=7321): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000700000035da144f"], 0x0, 0x0, 0x0, 0x0}) 2.890945904s ago: executing program 4 (id=7328): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd018, 0x80882) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000040)={0xe7, 0x0, {0x8, 0x7, 0x1009, 0x8, 0xb, 0x3}}) 2.701308559s ago: executing program 4 (id=7330): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.475275058s ago: executing program 1 (id=7333): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='::,\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3/\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xaeqKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_\xc0\xe1\x9d>= v4.3) to resolve. [ 841.187722][ T4322] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_inobt block 0x18 [ 841.224553][T19170] loop0: detected capacity change from 0 to 32768 [ 841.252326][ T4322] XFS (loop4): Unmount and run xfs_repair [ 841.261155][T19170] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 8 /dev/loop0 scanned by syz.0.6375 (19170) [ 841.293792][ T4322] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 841.301251][ T4322] 00000000: 49 41 42 33 00 00 00 01 ff ff ff ff ff ff ff ff IAB3............ [ 841.355781][ T4322] 00000010: 00 00 00 00 00 00 00 18 00 00 00 03 00 00 00 10 ................ [ 841.371065][ T4322] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 841.414478][ T4322] 00000030: 00 00 00 00 f0 ea ad a5 00 00 11 40 00 00 40 37 ...........@..@7 [ 841.464607][ T4322] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 841.473555][ T4322] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 841.529797][ T4322] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 841.575069][ T4322] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 841.606721][T19136] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x18 len 8 error 74 [ 841.635333][T19170] BTRFS info (device loop0): first mount of filesystem afd29e67-b8c6-49b0-b0d7-0efab618e2f3 [ 841.655805][T19170] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 841.664835][T19136] XFS (loop4): Failed to read root inode 0x1140, error 117 [ 841.684365][T19170] BTRFS info (device loop0): using free space tree [ 841.848538][T19181] loop2: detected capacity change from 0 to 32768 [ 841.908526][T19181] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 8 /dev/loop2 scanned by syz.2.6378 (19181) [ 841.945338][T19181] BTRFS info (device loop2): first mount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 841.979491][T19181] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 842.005392][T19181] BTRFS info (device loop2): using free space tree [ 842.086948][T19170] BTRFS info (device loop0): enabling ssd optimizations [ 842.103149][T19192] loop3: detected capacity change from 0 to 32768 [ 842.128332][T19192] BTRFS: device fsid d09153a9-5497-4f31-8e52-d2d02bbdf7fc devid 1 transid 8 /dev/loop3 scanned by syz.3.6379 (19192) [ 842.254391][T19192] BTRFS info (device loop3): first mount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc [ 842.263754][T19179] loop1: detected capacity change from 0 to 32768 [ 842.313774][T19179] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 8 /dev/loop1 scanned by syz.1.6377 (19179) [ 842.330974][T19179] BTRFS info (device loop1): first mount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 842.348880][T19179] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 842.359067][T19179] BTRFS info (device loop1): using free space tree [ 842.366537][T19192] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 842.378459][ T4265] BTRFS info (device loop0): last unmount of filesystem afd29e67-b8c6-49b0-b0d7-0efab618e2f3 [ 842.398581][T19192] BTRFS info (device loop3): using free space tree [ 842.399423][T19181] BTRFS info (device loop2): enabling ssd optimizations [ 842.783969][ T4271] BTRFS info (device loop2): last unmount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 842.910450][T19192] BTRFS info (device loop3): enabling ssd optimizations [ 842.948688][T19179] BTRFS info (device loop1): enabling ssd optimizations [ 843.519390][ T4266] BTRFS info (device loop3): last unmount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc [ 843.539382][ T4276] BTRFS info (device loop1): last unmount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 844.013058][ T4694] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 9 /dev/loop1 scanned by udevd (4694) [ 844.552372][T19272] loop2: detected capacity change from 0 to 32768 [ 844.600890][T19272] BTRFS: device fsid f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 devid 1 transid 8 /dev/loop2 scanned by syz.2.6382 (19272) [ 844.631505][T19272] BTRFS info (device loop2): first mount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 844.694570][T19272] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 844.703346][T19272] BTRFS info (device loop2): using free space tree [ 844.851809][T19291] loop3: detected capacity change from 0 to 2048 [ 844.944286][T19291] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 845.049618][T19272] BTRFS info (device loop2): enabling ssd optimizations [ 845.087503][T19270] loop0: detected capacity change from 0 to 32768 [ 845.136662][T19270] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 845.170315][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 845.190466][T19270] dlm: no local IP address has been set [ 845.196571][T19270] dlm: cannot start dlm midcomms -107 [ 845.237481][T19270] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 845.333067][ T4271] BTRFS info (device loop2): last unmount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 845.648908][T19315] loop0: detected capacity change from 0 to 1024 [ 845.876800][T19289] loop1: detected capacity change from 0 to 32768 [ 845.908953][T19317] loop4: detected capacity change from 0 to 1024 [ 845.913278][T19289] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.6384 (19289) [ 845.993053][T19289] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 846.063663][T19289] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 846.121326][T19289] BTRFS info (device loop1): using free space tree [ 846.168477][T19321] loop2: detected capacity change from 0 to 1024 [ 846.479820][T19289] BTRFS info (device loop1): enabling ssd optimizations [ 846.808017][ T4276] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 847.359358][T19329] loop4: detected capacity change from 0 to 32768 [ 847.443656][T19329] BTRFS: device fsid e5ec6bdf-b4e4-4163-9622-8db3a33753bd devid 1 transid 8 /dev/loop4 scanned by syz.4.6390 (19329) [ 847.481172][T19320] loop0: detected capacity change from 0 to 32768 [ 847.531529][T19329] BTRFS info (device loop4): first mount of filesystem e5ec6bdf-b4e4-4163-9622-8db3a33753bd [ 847.546551][T19320] BTRFS: device fsid d4515e72-4b5f-44ec-805d-b3edf811e7f1 devid 1 transid 8 /dev/loop0 scanned by syz.0.6389 (19320) [ 847.572272][T19329] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 847.577604][T19313] loop3: detected capacity change from 0 to 32768 [ 847.648988][T19313] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 847.657814][T19329] BTRFS info (device loop4): using free space tree [ 847.694711][T19320] BTRFS info (device loop0): first mount of filesystem d4515e72-4b5f-44ec-805d-b3edf811e7f1 [ 847.716283][T19313] dlm: no local IP address has been set [ 847.721712][T19320] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 847.723677][T19313] dlm: cannot start dlm midcomms -107 [ 847.772377][T19313] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 847.820690][T19320] BTRFS info (device loop0): using free space tree [ 848.206967][T19343] loop2: detected capacity change from 0 to 32768 [ 848.241209][T19343] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 scanned by syz.2.6391 (19343) [ 848.351127][T19343] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 848.382161][T19329] BTRFS info (device loop4): enabling ssd optimizations [ 848.390342][T19320] BTRFS info (device loop0): enabling ssd optimizations [ 848.412816][T19343] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 848.441573][T19343] BTRFS info (device loop2): using free space tree [ 848.495257][T19388] loop3: detected capacity change from 0 to 64 [ 848.669403][ T4265] BTRFS info (device loop0): last unmount of filesystem d4515e72-4b5f-44ec-805d-b3edf811e7f1 [ 848.681133][ T4269] BTRFS info (device loop4): last unmount of filesystem e5ec6bdf-b4e4-4163-9622-8db3a33753bd [ 848.911670][T19405] loop3: detected capacity change from 0 to 128 [ 848.996059][T19343] BTRFS info (device loop2): enabling ssd optimizations [ 849.541473][ T6172] BTRFS: device fsid e5ec6bdf-b4e4-4163-9622-8db3a33753bd devid 1 transid 9 /dev/loop4 scanned by udevd (6172) [ 849.656578][ T4271] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 849.700465][T19352] loop1: detected capacity change from 0 to 32768 [ 849.746865][T19352] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 849.795939][T19352] dlm: no local IP address has been set [ 849.811202][T19412] loop3: detected capacity change from 0 to 2048 [ 849.835112][T19352] dlm: cannot start dlm midcomms -107 [ 849.871523][T19352] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 849.896858][ T4694] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 9 /dev/loop2 scanned by udevd (4694) [ 849.904229][T19412] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 850.201587][T19418] loop0: detected capacity change from 0 to 256 [ 850.404616][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 850.659438][T19428] loop0: detected capacity change from 0 to 128 [ 850.952260][T19430] loop3: detected capacity change from 0 to 128 [ 850.983281][T19432] loop2: detected capacity change from 0 to 128 [ 851.091970][T19434] loop0: detected capacity change from 0 to 256 [ 851.315240][T19438] loop3: detected capacity change from 0 to 128 [ 851.471767][T19440] loop0: detected capacity change from 0 to 64 [ 851.888935][T19444] loop0: detected capacity change from 0 to 4096 [ 851.892607][T19442] loop3: detected capacity change from 0 to 8192 [ 851.966860][T19445] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 852.498928][T19425] loop4: detected capacity change from 0 to 32768 [ 852.519517][T19425] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 852.562732][T19425] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 852.672155][T19425] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 852.702644][ T5216] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 852.709895][ T5216] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 852.821182][T19451] loop3: detected capacity change from 0 to 4096 [ 852.891006][T19451] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 852.936174][ T5216] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 237ms [ 852.959231][ T5216] gfs2: fsid=syz:syz.0: jid=0: Done [ 852.964535][T19425] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 852.988951][T19437] loop2: detected capacity change from 0 to 32768 [ 853.051837][T19437] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 853.074702][T19437] CPU: 1 PID: 19437 Comm: syz.2.6409 Not tainted syzkaller #0 [ 853.082253][T19437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 853.092346][T19437] Call Trace: [ 853.095657][T19437] [ 853.098613][T19437] dump_stack_lvl+0x168/0x22e [ 853.103454][T19437] ? show_regs_print_info+0x12/0x12 [ 853.108688][T19437] ? load_image+0x3b0/0x3b0 [ 853.113250][T19437] sysfs_create_dir_ns+0x252/0x280 [ 853.118412][T19437] ? sysfs_warn_dup+0xa0/0xa0 [ 853.123210][T19437] ? kobject_set_name_vargs+0x5d/0x110 [ 853.128708][T19437] ? do_raw_spin_unlock+0x11d/0x230 [ 853.133956][T19437] kobject_add_internal+0x6b8/0xc80 [ 853.139210][T19437] kobject_init_and_add+0x122/0x190 [ 853.144459][T19437] ? lockdep_softirqs_off+0x420/0x420 [ 853.149878][T19437] ? kobject_add+0x210/0x210 [ 853.154527][T19437] ? __init_swait_queue_head+0xa5/0x150 [ 853.160116][T19437] gfs2_sys_fs_add+0x234/0x480 [ 853.164924][T19437] ? gfs2_recover_set+0x240/0x240 [ 853.170003][T19437] ? snprintf+0xd7/0x120 [ 853.174293][T19437] ? vscnprintf+0x80/0x80 [ 853.178682][T19437] gfs2_fill_super+0x126f/0x1f80 [ 853.183681][T19437] ? gfs2_reconfigure+0xcd0/0xcd0 [ 853.188765][T19437] ? sb_set_blocksize+0xa5/0xe0 [ 853.193742][T19437] get_tree_bdev+0x3f1/0x610 [ 853.198468][T19437] ? gfs2_reconfigure+0xcd0/0xcd0 [ 853.203563][T19437] gfs2_get_tree+0x4d/0x1e0 [ 853.208120][T19437] vfs_get_tree+0x88/0x270 [ 853.212659][T19437] do_new_mount+0x24a/0xa40 [ 853.217216][T19437] __se_sys_mount+0x2d6/0x3c0 [ 853.221933][T19437] ? __x64_sys_mount+0xc0/0xc0 [ 853.226739][T19437] ? lockdep_hardirqs_on+0x94/0x140 [ 853.232075][T19437] ? __x64_sys_mount+0x1c/0xc0 [ 853.236874][T19437] do_syscall_64+0x4c/0xa0 [ 853.241430][T19437] ? clear_bhb_loop+0x60/0xb0 [ 853.246326][T19437] ? clear_bhb_loop+0x60/0xb0 [ 853.251049][T19437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 853.257076][T19437] RIP: 0033:0x7f866759038a [ 853.261524][T19437] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.281352][T19437] RSP: 002b:00007f86683d5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 853.289864][T19437] RAX: ffffffffffffffda RBX: 00007f86683d5ef0 RCX: 00007f866759038a [ 853.297892][T19437] RDX: 0000200000021140 RSI: 0000200000021180 RDI: 00007f86683d5eb0 [ 853.305905][T19437] RBP: 0000200000021140 R08: 00007f86683d5ef0 R09: 0000000000000000 [ 853.313909][T19437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000021180 [ 853.322089][T19437] R13: 00007f86683d5eb0 R14: 0000000000021135 R15: 00002000000211c0 [ 853.330116][T19437] [ 853.340472][T19437] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 853.373251][T19449] loop0: detected capacity change from 0 to 32768 [ 853.415794][T19437] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 854.039380][T19457] loop0: detected capacity change from 0 to 8192 [ 854.180035][T19460] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 854.738856][T19455] loop3: detected capacity change from 0 to 32768 [ 855.299350][T19468] loop0: detected capacity change from 0 to 4096 [ 855.350440][T19468] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 856.154566][T19462] loop1: detected capacity change from 0 to 65536 [ 856.177526][T19472] loop0: detected capacity change from 0 to 4096 [ 856.201527][T19472] __ntfs_error: 12 callbacks suppressed [ 856.201546][T19472] ntfs: (device loop0): parse_ntfs_boot_sector(): Sector size (256) is smaller than the device block size (512). This is not supported. Sorry. [ 856.280760][T19472] ntfs: (device loop0): ntfs_fill_super(): Unsupported NTFS filesystem. [ 856.448725][T19474] loop4: detected capacity change from 0 to 4096 [ 856.553822][T19474] ntfs: volume version 3.1. [ 857.009615][T19467] loop3: detected capacity change from 0 to 32768 [ 857.069255][T19467] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 857.125903][T19467] dlm: no local IP address has been set [ 857.154727][T19467] dlm: cannot start dlm midcomms -107 [ 857.200202][T19467] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 857.397349][T19482] loop2: detected capacity change from 0 to 4096 [ 857.427861][T19482] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 857.800821][T19476] loop1: detected capacity change from 0 to 32768 [ 857.848305][T19476] (syz.1.6426,19476,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 857.900047][T19476] (syz.1.6426,19476,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 858.152766][T19480] loop4: detected capacity change from 0 to 32768 [ 858.201471][T19480] (syz.4.6428,19480,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 858.251697][T19480] (syz.4.6428,19480,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 858.760231][T19484] loop3: detected capacity change from 0 to 32768 [ 858.797079][T19484] (syz.3.6430,19484,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 858.843815][T19484] (syz.3.6430,19484,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 859.061302][T19486] loop2: detected capacity change from 0 to 32768 [ 859.104369][T19486] (syz.2.6431,19486,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 859.146082][T19486] (syz.2.6431,19486,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 862.297917][T19498] loop1: detected capacity change from 0 to 32768 [ 862.325856][T19498] (syz.1.6437,19498,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 862.372076][T19498] (syz.1.6437,19498,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 862.626395][T19492] Process accounting paused [ 862.666864][T19500] loop4: detected capacity change from 0 to 32768 [ 862.734279][T19500] (syz.4.6438,19500,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 862.788560][T19500] (syz.4.6438,19500,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 862.812416][T19504] loop2: detected capacity change from 0 to 128 [ 863.339302][T19510] loop2: detected capacity change from 0 to 4096 [ 863.353841][T19506] loop3: detected capacity change from 0 to 8192 [ 863.437035][T19506] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 863.474305][T19506] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 863.483635][T19506] REISERFS (device loop3): using ordered data mode [ 863.613284][T19510] ntfs: volume version 3.1. [ 863.627997][T19506] reiserfs: using flush barriers [ 863.671993][T19506] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 863.758657][T19506] REISERFS (device loop3): checking transaction log (loop3) [ 864.083413][T19506] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 864.110959][T19506] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 864.143047][T19506] REISERFS (device loop3): Remounting filesystem read-only [ 864.150908][T19506] REISERFS error (device loop3): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 864.170559][T19506] REISERFS warning (device loop3): reiserfs_fill_super: corrupt root inode, run fsck [ 864.519491][T19502] loop1: detected capacity change from 0 to 32768 [ 864.569749][T19502] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 864.599873][T19502] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 864.706702][T19502] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 864.739389][T19278] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 864.752674][T19278] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 864.765388][T19508] loop4: detected capacity change from 0 to 65536 [ 864.966993][T19278] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 224ms [ 864.986015][T19278] gfs2: fsid=syz:syz.0: jid=0: Done [ 865.008774][T19502] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 865.073000][T19520] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 866.221917][T19513] loop2: detected capacity change from 0 to 65536 [ 866.247820][T19513] (syz.2.6444,19513,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 866.266140][T19513] (syz.2.6444,19513,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 866.318532][T19515] loop0: detected capacity change from 0 to 65536 [ 866.365366][T19515] (syz.0.6445,19515,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 866.417045][T19515] (syz.0.6445,19515,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 870.431163][T19534] loop0: detected capacity change from 0 to 24 [ 870.465326][T19534] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 870.475615][T19534] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 870.488756][T19536] loop2: detected capacity change from 0 to 3 [ 870.532801][T19536] syz.2.6454: attempt to access beyond end of device [ 870.532801][T19536] loop2: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 870.595039][T19536] SQUASHFS error: Failed to read block 0x0: -5 [ 870.609391][T19536] unable to read squashfs_super_block [ 870.736236][T19538] loop0: detected capacity change from 0 to 8 [ 871.027162][T19542] loop0: detected capacity change from 0 to 2048 [ 871.070357][T19542] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 871.302833][T19544] loop0: detected capacity change from 0 to 128 [ 871.343759][T19544] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 871.390276][T19544] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 871.639602][T19546] loop0: detected capacity change from 0 to 128 [ 871.710899][T19546] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 871.727800][T19546] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 871.856453][T19540] loop2: detected capacity change from 0 to 32768 [ 871.904141][T19540] (syz.2.6456,19540,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 871.943652][T19540] (syz.2.6456,19540,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 872.239310][T19550] loop0: detected capacity change from 0 to 2048 [ 872.256983][T19552] loop1: detected capacity change from 0 to 512 [ 872.324795][T19550] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 872.335058][T19552] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 872.361884][T19550] UDF-fs: Scanning with blocksize 512 failed [ 872.383230][T19552] UDF-fs: Scanning with blocksize 512 failed [ 872.416028][T19552] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 872.466716][T19550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 872.479850][T19552] UDF-fs: Scanning with blocksize 1024 failed [ 872.533863][T19552] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 872.537377][T19556] loop4: detected capacity change from 0 to 128 [ 872.575757][T19558] loop3: detected capacity change from 0 to 128 [ 872.640651][T19552] UDF-fs: Scanning with blocksize 2048 failed [ 872.670778][T19552] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 872.711856][T19560] loop2: detected capacity change from 0 to 256 [ 872.741552][T19552] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 872.922878][T19565] loop4: detected capacity change from 0 to 512 [ 873.456773][T19570] loop1: detected capacity change from 0 to 8192 [ 873.523655][T19570] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 873.594019][T19570] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 873.603875][T19570] REISERFS (device loop1): using ordered data mode [ 873.614145][T19570] reiserfs: using flush barriers [ 873.621411][T19570] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 873.707903][T19570] REISERFS (device loop1): checking transaction log (loop1) [ 873.944725][T19570] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 873.974553][T19570] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 874.014518][T19570] REISERFS (device loop1): Remounting filesystem read-only [ 874.021818][T19570] REISERFS error (device loop1): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 874.125442][T19570] REISERFS warning (device loop1): reiserfs_fill_super: corrupt root inode, run fsck [ 876.140080][T19577] loop0: detected capacity change from 0 to 256 [ 876.412828][T19579] loop0: detected capacity change from 0 to 512 [ 876.457071][T19581] loop2: detected capacity change from 0 to 128 [ 876.732208][T19585] loop0: detected capacity change from 0 to 128 [ 876.748667][T19583] loop4: detected capacity change from 0 to 2048 [ 876.824956][T19587] loop2: detected capacity change from 0 to 512 [ 877.093962][T19589] loop3: detected capacity change from 0 to 2048 [ 877.184906][T19594] loop4: detected capacity change from 0 to 128 [ 877.698527][T19597] loop3: detected capacity change from 0 to 8192 [ 877.976265][T19599] loop4: detected capacity change from 0 to 16384 [ 878.024784][T19599] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 878.032244][T19599] UDF-fs: Scanning with blocksize 512 failed [ 878.071080][T19599] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 878.109734][T19599] UDF-fs: Scanning with blocksize 1024 failed [ 878.126258][T19599] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 878.154229][T19599] UDF-fs: Scanning with blocksize 2048 failed [ 878.208343][T19599] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 878.528531][T19601] loop1: detected capacity change from 0 to 16384 [ 878.592535][T19601] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 878.604888][T19601] UDF-fs: Scanning with blocksize 512 failed [ 878.651022][T19601] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 878.681602][T19601] UDF-fs: Scanning with blocksize 1024 failed [ 878.741886][T19601] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 878.761943][T19601] UDF-fs: Scanning with blocksize 2048 failed [ 878.829467][T19601] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 879.358607][T19607] loop1: detected capacity change from 0 to 8192 [ 879.421867][T19607] loop1: p1 p2 p3 [ 879.857248][ T6172] udevd[6172]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 879.857356][ T4408] udevd[4408]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 879.880934][ T4694] udevd[4694]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 881.426510][T19609] loop1: detected capacity change from 0 to 65536 [ 881.513733][T19609] XFS (loop1): Deprecated V4 format (crc=0) not supported by kernel. [ 882.251846][T19611] loop0: detected capacity change from 0 to 65536 [ 882.356211][T19611] XFS (loop0): Mounting V5 Filesystem [ 882.377228][T19613] loop2: detected capacity change from 0 to 65536 [ 882.452000][T19613] XFS (loop2): Mounting V5 Filesystem [ 882.524937][T19611] XFS (loop0): Ending clean mount [ 882.602273][T19613] XFS (loop2): Ending clean mount [ 882.780648][ T4265] XFS (loop0): Unmounting Filesystem [ 882.903062][ T4271] XFS (loop2): Unmounting Filesystem [ 883.880539][T19644] loop0: detected capacity change from 0 to 512 [ 884.094237][T19640] loop4: detected capacity change from 0 to 32768 [ 884.204672][T19640] XFS (loop4): Mounting V5 Filesystem [ 884.356820][T19640] XFS (loop4): Ending clean mount [ 884.450976][T19656] loop3: detected capacity change from 0 to 128 [ 884.560816][ T4269] XFS (loop4): Unmounting Filesystem [ 884.910456][T19658] loop3: detected capacity change from 0 to 2048 [ 885.596486][T19642] loop2: detected capacity change from 0 to 65536 [ 885.714969][T19642] XFS (loop2): Mounting V5 Filesystem [ 885.844289][T19642] XFS (loop2): Ending clean mount [ 885.980700][ T4271] XFS (loop2): Unmounting Filesystem [ 886.051726][T19651] loop0: detected capacity change from 0 to 65536 [ 886.269806][T19651] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel. [ 886.812323][T19679] loop0: detected capacity change from 0 to 128 [ 887.403957][T19687] loop0: detected capacity change from 0 to 256 [ 888.014342][T19697] loop2: detected capacity change from 0 to 1024 [ 888.079038][T19697] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 888.206536][T19697] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 888.257582][T19697] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.2.6513: bad entry in directory: inode out of bounds - offset=44, inode=196620, rec_len=16, size=1024 fake=0 [ 888.360524][T19697] EXT4-fs (loop2): Remounting filesystem read-only [ 888.369228][T19697] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem [ 888.384891][T19697] EXT4-fs (loop2): Remounting filesystem read-only [ 888.506157][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 888.875531][T19710] loop2: detected capacity change from 0 to 256 [ 888.942161][T19710] exfat: Deprecated parameter 'namecase' [ 888.977870][T19710] exfat: Deprecated parameter 'namecase' [ 888.992857][T19710] exfat: Deprecated parameter 'namecase' [ 889.022536][T19710] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 889.131435][T19710] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 889.359576][T19699] loop0: detected capacity change from 0 to 32768 [ 889.554272][T19699] XFS (loop0): Mounting V5 Filesystem [ 889.738227][T19699] XFS (loop0): Ending clean mount [ 889.956259][ T4265] XFS (loop0): Unmounting Filesystem [ 890.528772][T19766] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 890.593138][T19766] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 890.625963][T19766] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 890.651146][T19766] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 890.683692][T19766] device geneve2 entered promiscuous mode [ 890.759927][T19775] QAT: failed to copy from user. [ 891.072906][T19787] netlink: 'syz.0.6551': attribute type 1 has an invalid length. [ 891.175066][T19791] loop3: detected capacity change from 0 to 16 [ 891.228352][T19791] erofs: (device loop3): mounted with root inode @ nid 36. [ 891.351655][T19791] overlayfs: upper fs is r/o, try multi-lower layers mount [ 891.408518][T19796] loop1: detected capacity change from 0 to 736 [ 891.477365][T19790] Process accounting resumed [ 891.548776][T19793] loop2: detected capacity change from 0 to 8192 [ 891.626711][T19793] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 891.734690][T19793] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 891.754434][T19793] FAT-fs (loop2): Filesystem has been set read-only [ 891.979216][ T4271] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 892.158325][T19813] loop1: detected capacity change from 0 to 64 [ 892.245081][ T4408] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 892.297783][T19815] overlayfs: missing 'lowerdir' [ 892.929626][T19835] netlink: 'syz.4.6577': attribute type 1 has an invalid length. [ 892.983419][T19835] netlink: 'syz.4.6577': attribute type 1 has an invalid length. [ 893.433243][T19858] binder: BC_ATTEMPT_ACQUIRE not supported [ 893.469052][T19858] binder: 19857:19858 ioctl c0306201 2000000003c0 returned -22 [ 893.563385][T19862] loop2: detected capacity change from 0 to 128 [ 893.589359][T19863] ieee802154 phy0 wpan0: encryption failed: -22 [ 894.695172][T19899] delete_channel: no stack [ 894.752133][T19903] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 894.807303][T19903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 895.032051][T19913] loop2: detected capacity change from 0 to 256 [ 895.144716][T19913] FAT-fs (loop2): Directory bread(block 64) failed [ 895.170498][T19913] FAT-fs (loop2): Directory bread(block 65) failed [ 895.184878][T19913] FAT-fs (loop2): Directory bread(block 66) failed [ 895.201624][T19913] FAT-fs (loop2): Directory bread(block 67) failed [ 895.290306][T19913] FAT-fs (loop2): Directory bread(block 68) failed [ 895.297019][T19913] FAT-fs (loop2): Directory bread(block 69) failed [ 895.346976][T19913] FAT-fs (loop2): Directory bread(block 70) failed [ 895.353597][T19913] FAT-fs (loop2): Directory bread(block 71) failed [ 895.376351][T19913] FAT-fs (loop2): Directory bread(block 72) failed [ 895.383990][T19913] FAT-fs (loop2): Directory bread(block 73) failed [ 895.542621][T19930] binder: 19929:19930 ioctl c018620c 0 returned -14 [ 895.705980][T19933] netlink: 'syz.0.6623': attribute type 21 has an invalid length. [ 895.746551][T19933] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6623'. [ 895.775038][T19936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6625'. [ 895.797106][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 895.803898][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 896.058031][T19949] loop1: detected capacity change from 0 to 64 [ 896.755559][T19964] loop1: detected capacity change from 0 to 8192 [ 896.762616][T19972] loop3: detected capacity change from 0 to 256 [ 896.790967][T19964] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 896.866677][T19972] FAT-fs (loop3): Directory bread(block 64) failed [ 896.884198][T19964] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 896.907112][T19972] FAT-fs (loop3): Directory bread(block 65) failed [ 896.931518][T19972] FAT-fs (loop3): Directory bread(block 66) failed [ 896.956851][T19972] FAT-fs (loop3): Directory bread(block 67) failed [ 896.973777][T19964] FAT-fs (loop1): Filesystem has been set read-only [ 896.993885][T19972] FAT-fs (loop3): Directory bread(block 68) failed [ 897.041606][T19972] FAT-fs (loop3): Directory bread(block 69) failed [ 897.066452][T19972] FAT-fs (loop3): Directory bread(block 70) failed [ 897.142978][T19972] FAT-fs (loop3): Directory bread(block 71) failed [ 897.158586][ T4276] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 897.217379][T19972] FAT-fs (loop3): Directory bread(block 72) failed [ 897.235542][T19972] FAT-fs (loop3): Directory bread(block 73) failed [ 897.736203][T19990] device ipvlan1 entered promiscuous mode [ 897.973759][T19962] loop0: detected capacity change from 0 to 32768 [ 898.025052][T19962] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 898.058173][T19962] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 898.113153][T19962] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 898.280757][T19962] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 898.780753][T20018] loop4: detected capacity change from 0 to 256 [ 898.786310][T20022] xt_limit: Overflow, try lower: 0/0 [ 899.070707][ T27] audit: type=1326 audit(1756441830.095:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20030 comm="syz.0.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797f78ebe9 code=0x7ffc0000 [ 899.130456][ T27] audit: type=1326 audit(1756441830.137:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20030 comm="syz.0.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797f78ebe9 code=0x7ffc0000 [ 899.249030][ T27] audit: type=1326 audit(1756441830.137:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20030 comm="syz.0.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f797f78ebe9 code=0x7ffc0000 [ 899.276693][ T27] audit: type=1326 audit(1756441830.158:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20030 comm="syz.0.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797f78ebe9 code=0x7ffc0000 [ 899.510197][T20044] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.541598][T20044] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.550424][T20047] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6680'. [ 899.794033][T20051] loop1: detected capacity change from 0 to 4096 [ 899.812947][T20050] loop4: detected capacity change from 0 to 4096 [ 899.849512][T20056] loop2: detected capacity change from 0 to 1024 [ 899.877398][T20050] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 900.034208][T20050] ntfs3: loop4: Inode r=19 is not in use! [ 900.060292][T20050] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 900.213618][T20060] loop0: detected capacity change from 0 to 256 [ 900.520203][ T4282] Bluetooth: hci3: command 0x0405 tx timeout [ 900.687844][T20067] loop4: detected capacity change from 0 to 2048 [ 900.726534][T20072] loop0: detected capacity change from 0 to 1024 [ 900.771246][T20067] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 900.798890][T20067] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 900.862984][ T4322] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 901.081739][ T4322] usb 4-1: Using ep0 maxpacket: 16 [ 901.088751][ T4322] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 901.127211][ T4322] usb 4-1: config 0 has no interface number 0 [ 901.147102][ T4322] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 901.178519][T20084] loop0: detected capacity change from 0 to 512 [ 901.187424][ T4322] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 901.235235][ T4322] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 901.289155][T20084] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 901.342030][ T4322] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 901.357149][T20090] loop2: detected capacity change from 0 to 512 [ 901.358556][T20084] ext4 filesystem being mounted at /1409/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 901.401686][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.454823][ T4322] usb 4-1: Product: syz [ 901.460570][T20090] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 901.469130][ T4322] usb 4-1: Manufacturer: syz [ 901.499038][ T4322] usb 4-1: SerialNumber: syz [ 901.537314][ T4322] usb 4-1: config 0 descriptor?? [ 901.546506][T20090] EXT4-fs (loop2): 1 truncate cleaned up [ 901.555745][T20090] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 901.623100][T20068] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 901.667359][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 901.671085][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 901.866208][ T4322] usb 4-1: USB disconnect, device number 83 [ 901.983528][T20104] loop1: detected capacity change from 0 to 4096 [ 902.010253][T20104] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 902.098224][T20114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6707'. [ 902.121451][T20114] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6707'. [ 902.142639][T20116] device netdevsim0 entered promiscuous mode [ 902.191057][T20116] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 902.304177][T20120] loop2: detected capacity change from 0 to 512 [ 902.389124][T20120] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 902.430182][T20120] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 3: comm syz.2.6710: lblock 0 mapped to illegal pblock 3 (length 1) [ 902.461084][T20123] netlink: 'syz.0.6711': attribute type 2 has an invalid length. [ 902.462443][T20120] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.6710: error -117 reading directory block [ 902.482758][T20123] device .*! entered promiscuous mode [ 902.518325][T20125] netlink: 'syz.1.6712': attribute type 1 has an invalid length. [ 902.620810][T20127] netlink: 'syz.4.6713': attribute type 6 has an invalid length. [ 902.694749][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 903.059113][T20143] netlink: 'syz.2.6721': attribute type 1 has an invalid length. [ 903.087266][T20146] loop1: detected capacity change from 0 to 8 [ 904.536050][T20231] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 904.589911][T20231] exFAT-fs (nullb0): invalid boot record signature [ 904.607568][T20231] exFAT-fs (nullb0): failed to read boot sector [ 904.613983][T20231] exFAT-fs (nullb0): failed to recognize exfat type [ 905.255038][T20256] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.295058][T20256] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.423795][T20256] device netdevsim0 left promiscuous mode [ 905.437271][T20265] xt_hashlimit: max too large, truncated to 1048576 [ 905.569475][T19278] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 905.779314][T19278] usb 2-1: Using ep0 maxpacket: 8 [ 905.793994][T19278] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 905.812475][T19278] usb 2-1: config 0 has no interface number 0 [ 905.838225][T19278] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 905.861828][T19278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.880807][T19278] usb 2-1: Product: syz [ 905.890731][T19278] usb 2-1: Manufacturer: syz [ 905.909145][T19278] usb 2-1: SerialNumber: syz [ 905.917568][T20280] netlink: 'syz.4.6758': attribute type 4 has an invalid length. [ 905.937407][ T4256] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 905.946798][T19278] usb 2-1: config 0 descriptor?? [ 906.041166][T20280] device veth1_macvtap left promiscuous mode [ 906.073599][T20285] loop3: detected capacity change from 0 to 128 [ 906.138789][ T4256] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 906.164746][T19278] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 906.173550][T19278] usb 2-1: No valid video chain found. [ 906.185870][ T4256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.197518][T19278] usb 2-1: USB disconnect, device number 102 [ 906.257102][ T4256] usb 3-1: Product: syz [ 906.261351][ T4256] usb 3-1: Manufacturer: syz [ 906.316441][ T4256] usb 3-1: SerialNumber: syz [ 906.366990][ T4256] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 906.384611][T20289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 906.454172][ T4256] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 906.566451][T20291] loop3: detected capacity change from 0 to 4096 [ 906.656310][T20291] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 906.687641][ C0] usb 3-1: ath: unknown panic pattern! [ 906.807547][T20291] ntfs3: loop3: no free space to extend mft [ 906.895446][T19278] usb 3-1: USB disconnect, device number 79 [ 907.217369][T20304] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.275236][T20304] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.358531][T20308] netlink: 'syz.3.6770': attribute type 1 has an invalid length. [ 907.392148][T20304] device ipvlan1 left promiscuous mode [ 907.445541][T20309] device tunl0 entered promiscuous mode [ 907.461747][T20309] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 907.465568][ T4256] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 907.519545][ T4256] ath9k_htc: Failed to initialize the device [ 907.534183][T19278] usb 3-1: ath9k_htc: USB layer deinitialized [ 907.766098][T20318] device netdevsim0 entered promiscuous mode [ 907.789190][T20318] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 907.999549][ T4322] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 908.092515][T20327] loop1: detected capacity change from 0 to 256 [ 908.110564][T20295] loop4: detected capacity change from 0 to 32768 [ 908.138411][T20295] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 908.171364][T20327] FAT-fs (loop1): Directory bread(block 64) failed [ 908.192358][T20327] FAT-fs (loop1): Directory bread(block 65) failed [ 908.200216][T20295] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 908.200352][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 908.217443][ T4322] usb 1-1: config 1 has an invalid interface descriptor of length 6, skipping [ 908.237780][ T4322] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.256887][T20327] FAT-fs (loop1): Directory bread(block 66) failed [ 908.263632][T20327] FAT-fs (loop1): Directory bread(block 67) failed [ 908.275646][ T4322] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 908.284668][ T4322] usb 1-1: config 1 has no interface number 1 [ 908.315251][T20327] FAT-fs (loop1): Directory bread(block 68) failed [ 908.333903][T20295] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 908.345407][T20327] FAT-fs (loop1): Directory bread(block 69) failed [ 908.359461][ T4322] usb 1-1: string descriptor 0 read error: -22 [ 908.390322][T20327] FAT-fs (loop1): Directory bread(block 70) failed [ 908.397515][T20327] FAT-fs (loop1): Directory bread(block 71) failed [ 908.404765][ T4322] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 908.424248][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.444007][T20327] FAT-fs (loop1): Directory bread(block 72) failed [ 908.479197][T20327] FAT-fs (loop1): Directory bread(block 73) failed [ 908.497548][ T4322] usb 1-1: MIDIStreaming interface descriptor not found [ 908.504699][T20295] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 908.571432][ T4322] snd-usb-audio: probe of 1-1:1.2 failed with error -16 [ 908.700108][T19285] usb 1-1: USB disconnect, device number 61 [ 908.935632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 909.054790][T20337] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.073502][T20337] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.188822][T20337] device geneve2 left promiscuous mode [ 909.412857][T20350] netlink: 'syz.0.6803': attribute type 1 has an invalid length. [ 909.786908][T20368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6801'. [ 910.082917][T20378] loop0: detected capacity change from 0 to 512 [ 910.186774][T20378] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 910.200419][T20378] ext4 filesystem being mounted at /1430/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 910.213853][T20385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6808'. [ 910.245588][T20378] Quota error (device loop0): do_check_range: Getting block 4128768 out of range 0-5 [ 910.369887][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 910.683231][T20399] loop2: detected capacity change from 0 to 2048 [ 910.756155][T20399] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 911.274647][T20421] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 911.874826][T20438] loop2: detected capacity change from 0 to 4096 [ 911.918359][T20412] loop4: detected capacity change from 0 to 32768 [ 911.947706][T20438] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 911.971914][T20445] fuse: Bad value for 'rootmode' [ 912.020321][T20412] JBD2: Ignoring recovery information on journal [ 912.090515][T20453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6842'. [ 912.102560][T20453] netlink: zone id is out of range [ 912.125984][T20453] netlink: zone id is out of range [ 912.131353][T20453] netlink: zone id is out of range [ 912.136879][T20453] netlink: zone id is out of range [ 912.142160][T20453] netlink: zone id is out of range [ 912.147931][T20453] netlink: zone id is out of range [ 912.161498][T20412] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 912.163509][T20453] netlink: zone id is out of range [ 912.182300][T20453] netlink: zone id is out of range [ 912.314131][T20453] net_ratelimit: 268 callbacks suppressed [ 912.314152][T20453] netlink: set zone limit has 4 unknown bytes [ 912.369285][ T27] audit: type=1326 audit(1756441844.053:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20456 comm="syz.0.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797f78ebe9 code=0x7ffc0000 [ 912.473233][T20412] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 912.522997][ T27] audit: type=1326 audit(1756441844.053:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20456 comm="syz.0.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f797f78ebe9 code=0x7ffc0000 [ 912.544791][T20461] loop1: detected capacity change from 0 to 512 [ 912.615270][T20412] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 912.642230][T20461] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 912.702215][ T27] audit: type=1326 audit(1756441844.053:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20456 comm="syz.0.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797f78ebe9 code=0x7ffc0000 [ 912.730736][ T27] audit: type=1326 audit(1756441844.053:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20456 comm="syz.0.6843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797f78ebe9 code=0x7ffc0000 [ 912.747257][T20467] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 912.754576][T20412] OCFS2: File system is now read-only. [ 912.789009][T20412] (syz.4.6823,20412,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 912.795959][T20461] ext4 filesystem being mounted at /1319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 912.808140][T20412] (syz.4.6823,20412,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 912.825062][T20412] (syz.4.6823,20412,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 912.865841][T20412] (syz.4.6823,20412,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 912.908656][T20412] (syz.4.6823,20412,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 912.937478][T20412] (syz.4.6823,20412,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 912.977442][T20412] (syz.4.6823,20412,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 913.001074][T20412] (syz.4.6823,20412,1):ocfs2_mknod:385 ERROR: status = -30 [ 913.038672][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 913.077357][T20412] (syz.4.6823,20412,1):ocfs2_mknod:502 ERROR: status = -30 [ 913.092800][T20412] (syz.4.6823,20412,1):ocfs2_create:676 ERROR: status = -30 [ 913.108630][T20477] loop3: detected capacity change from 0 to 512 [ 913.131973][T20477] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 913.204100][T20477] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 913.246462][T20477] ext4 filesystem being mounted at /1304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 913.281176][ T4269] ocfs2: Unmounting device (7,4) on (node local) [ 913.401933][ T4382] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 913.434328][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 913.602319][ T4382] usb 3-1: Using ep0 maxpacket: 32 [ 913.613412][ T4382] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 913.659354][ T4382] usb 3-1: config 0 has no interface number 0 [ 913.676688][ T4382] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 913.726036][ T4382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.744770][ T4382] usb 3-1: Product: syz [ 913.766031][ T4382] usb 3-1: Manufacturer: syz [ 913.774410][T20494] loop0: detected capacity change from 0 to 512 [ 913.781723][ T4382] usb 3-1: SerialNumber: syz [ 913.798923][T20494] EXT4-fs: Ignoring removed nobh option [ 913.801734][T20498] loop3: detected capacity change from 0 to 256 [ 913.826644][ T4382] usb 3-1: config 0 descriptor?? [ 913.835550][ T4382] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 913.862345][T20494] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #3: comm syz.0.6861: corrupted inode contents [ 913.968347][T20494] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #3: comm syz.0.6861: mark_inode_dirty error [ 914.012791][T20494] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #3: comm syz.0.6861: corrupted inode contents [ 914.033469][ T4382] etas_es58x 3-1:0.2: Product info: 424242424242 [ 914.079403][T20494] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.6861: mark_inode_dirty error [ 914.171714][T20494] Quota error (device loop0): write_blk: dquota write failed [ 914.206676][T20494] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 914.248168][T20494] EXT4-fs error (device loop0): ext4_acquire_dquot:6816: comm syz.0.6861: Failed to acquire dquot type 0 [ 914.257017][ T4322] usb 3-1: USB disconnect, device number 80 [ 914.260515][T20502] xt_CT: No such helper "snmp_trap" [ 914.267116][ T4322] etas_es58x 3-1:0.2: Disconnecting syz syz [ 914.294179][T20494] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #16: comm syz.0.6861: corrupted inode contents [ 914.344448][T20494] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #16: comm syz.0.6861: mark_inode_dirty error [ 914.363817][T20494] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #16: comm syz.0.6861: corrupted inode contents [ 914.393018][T20494] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.6861: mark_inode_dirty error [ 914.456699][T20494] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #16: comm syz.0.6861: corrupted inode contents [ 914.470745][T20494] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 914.487792][T20514] netlink: 'syz.3.6866': attribute type 1 has an invalid length. [ 914.504981][T20494] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #16: comm syz.0.6861: corrupted inode contents [ 914.552299][T20494] EXT4-fs error (device loop0): ext4_truncate:4312: inode #16: comm syz.0.6861: mark_inode_dirty error [ 914.600215][T20517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6867'. [ 914.603084][T20494] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 914.626522][T20517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6867'. [ 914.687061][T20494] EXT4-fs (loop0): 1 truncate cleaned up [ 914.707157][T20494] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 914.735101][T20494] ext4 filesystem being mounted at /1444/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 914.760761][T20521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6869'. [ 914.837198][T20494] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #12: block 13: comm syz.0.6861: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 915.074218][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 915.096858][T20214] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 915.098377][T20529] tmpfs: Bad value for 'mpol' [ 915.108833][T20214] EXT4-fs error (device loop0): ext4_release_dquot:6852: comm kworker/u4:22: Failed to release dquot type 1 [ 915.370921][T20541] loop4: detected capacity change from 0 to 128 [ 916.076613][T20568] loop4: detected capacity change from 0 to 1024 [ 916.153831][T20568] EXT4-fs: Ignoring removed orlov option [ 916.195535][T20568] EXT4-fs: Ignoring removed nomblk_io_submit option [ 916.288347][T20568] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 916.575863][T20589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6896'. [ 916.596240][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 916.647192][T20594] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 917.149207][T20610] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 917.150677][T20603] loop3: detected capacity change from 0 to 4096 [ 917.182370][T20610] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 917.233287][T20610] overlayfs: missing 'lowerdir' [ 917.260296][T20603] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 917.521687][T20603] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 918.032519][ T4382] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 918.257402][ T4382] usb 3-1: Using ep0 maxpacket: 16 [ 918.259976][T20651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6921'. [ 918.265942][ T4382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.278008][T20645] loop0: detected capacity change from 0 to 2048 [ 918.318310][ T4382] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 918.337839][ T4382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.361338][ T4382] usb 3-1: config 0 descriptor?? [ 918.378949][T20645] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 918.399968][ T4382] xbox_remote_probe: Unexpected endpoint_in [ 918.461471][ T4382] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 918.661676][ T4382] usb 3-1: USB disconnect, device number 81 [ 918.790983][T20661] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.6924'. [ 918.835337][T20661] openvswitch: netlink: Flow actions attr not present in new flow. [ 919.037829][T20638] loop4: detected capacity change from 0 to 32768 [ 919.074070][T20638] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.6917 (20638) [ 919.105559][T20638] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 919.169391][T20638] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 919.211848][T20638] BTRFS info (device loop4): using free space tree [ 919.321424][T20679] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 919.502156][T20638] BTRFS info (device loop4): enabling ssd optimizations [ 919.621057][T20703] loop2: detected capacity change from 0 to 256 [ 919.658738][ T4269] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 919.660861][T20703] exfat: Deprecated parameter 'utf8' [ 919.754175][T20703] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 919.899244][T20709] loop0: detected capacity change from 0 to 512 [ 919.963761][T20709] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 920.095790][T20709] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 920.161898][T20709] Quota error (device loop0): write_blk: dquota write failed [ 920.169917][ T27] audit: type=1800 audit(1756441852.229:40): pid=20694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.6935" name="/" dev="sockfs" ino=77688 res=0 errno=0 [ 920.218269][T20709] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 920.262866][T20709] EXT4-fs error (device loop0): ext4_acquire_dquot:6816: comm syz.0.6940: Failed to acquire dquot type 0 [ 920.290524][T20694] Process accounting paused [ 920.311845][T20709] EXT4-fs (loop0): 1 truncate cleaned up [ 920.357736][T20709] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 920.460261][T20709] Quota error (device loop0): write_blk: dquota write failed [ 920.525559][T20709] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 920.548029][T20723] netlink: 'syz.2.6942': attribute type 11 has an invalid length. [ 920.586404][T20709] EXT4-fs error (device loop0): ext4_acquire_dquot:6816: comm syz.0.6940: Failed to acquire dquot type 0 [ 920.793496][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 920.922494][ T27] audit: type=1326 audit(1756441853.037:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20732 comm="syz.1.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63c98ebe9 code=0x7ffc0000 [ 921.004004][ T27] audit: type=1326 audit(1756441853.069:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20732 comm="syz.1.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fb63c98ebe9 code=0x7ffc0000 [ 921.026613][ C0] vkms_vblank_simulate: vblank timer overrun [ 921.108449][ T27] audit: type=1326 audit(1756441853.069:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20732 comm="syz.1.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63c98ebe9 code=0x7ffc0000 [ 921.146714][ T27] audit: type=1326 audit(1756441853.069:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20732 comm="syz.1.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63c98ebe9 code=0x7ffc0000 [ 921.169481][ C0] vkms_vblank_simulate: vblank timer overrun [ 921.198039][ T4382] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 921.208389][T20744] loop0: detected capacity change from 0 to 128 [ 921.283282][T20747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6955'. [ 921.398143][ T4382] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 921.420089][ T4382] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.436206][ T4382] usb 3-1: config 1 interface 1 has no altsetting 0 [ 921.463551][ T4382] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 921.500905][ T4382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.518959][ T4382] usb 3-1: Product: syz [ 921.527789][ T4382] usb 3-1: Manufacturer: syz [ 921.555717][ T4382] usb 3-1: SerialNumber: syz [ 921.601940][ T4382] usb 3-1: selecting invalid altsetting 1 [ 921.613159][ T4382] usb 3-1: selecting invalid altsetting 0 [ 921.622937][ T4382] usb 3-1: selecting invalid altsetting 0 [ 921.636835][ T4382] cdc_ncm 3-1:1.0: bind() failure [ 921.653171][ T4382] usb 3-1: selecting invalid altsetting 0 [ 921.690490][ T4382] usbtest: probe of 3-1:1.1 failed with error -22 [ 921.852872][T19278] usb 3-1: USB disconnect, device number 82 [ 921.957756][T20771] device netdevsim0 entered promiscuous mode [ 922.006931][T20771] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 922.053341][T19285] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 922.234793][T19285] usb 4-1: Using ep0 maxpacket: 32 [ 922.246596][T19285] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 922.301396][T19285] usb 4-1: config 0 has no interface number 0 [ 922.367065][T19285] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 922.427080][T19285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.451412][T19285] usb 4-1: Product: syz [ 922.460023][T19285] usb 4-1: Manufacturer: syz [ 922.478260][T19285] usb 4-1: SerialNumber: syz [ 922.534444][T19285] usb 4-1: config 0 descriptor?? [ 922.556545][T19285] smsc95xx v2.0.0 [ 922.571535][T19285] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 922.601370][T19285] smsc95xx: probe of 4-1:0.67 failed with error -22 [ 922.658962][T20790] loop0: detected capacity change from 0 to 4096 [ 922.696221][T20790] ntfs3: loop0: ino=3, Correct links count -> 2. [ 922.762538][T19285] usb 4-1: USB disconnect, device number 84 [ 923.263235][T20815] loop1: detected capacity change from 0 to 64 [ 923.462984][T20819] block device autoloading is deprecated and will be removed. [ 923.721057][T19281] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 923.786772][T20833] comedi comedi0: aio_aio12_8: I/O port conflict (0x2,32) [ 923.914894][T19281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 923.946146][T19281] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 923.999828][T19281] usb 4-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 924.016666][T20841] loop1: detected capacity change from 0 to 256 [ 924.023869][T19281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.046235][T20841] exfat: Deprecated parameter 'namecase' [ 924.052160][T20841] exfat: Deprecated parameter 'namecase' [ 924.078915][T19281] usb 4-1: Product: syz [ 924.087536][T19281] usb 4-1: Manufacturer: syz [ 924.113538][T20841] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 924.118282][T19281] usb 4-1: SerialNumber: syz [ 924.156994][T19281] usb 4-1: config 0 descriptor?? [ 924.360069][T20849] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 924.412748][T20853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7007'. [ 924.426445][T19278] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 924.628101][T19278] usb 1-1: config 6 has an invalid interface number: 109 but max is 0 [ 924.650885][T19278] usb 1-1: config 6 has no interface number 0 [ 924.662695][T19278] usb 1-1: config 6 interface 109 has no altsetting 0 [ 924.676552][T20857] loop2: detected capacity change from 0 to 8 [ 924.683670][T17276] Bluetooth: hci0: command 0x2021 tx timeout [ 924.692429][T20857] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 924.699717][T19278] usb 1-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=62.59 [ 924.710835][T19278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.729768][T20857] cramfs: Error -3 while decompressing! [ 924.738498][T19285] usb 4-1: USB disconnect, device number 85 [ 924.747409][T20857] cramfs: ffffffff96d751c2(26)->ffff88804fac6000(4096) [ 924.757233][T19278] usb 1-1: Found UVC 0.00 device (046d:0821) [ 924.764534][T19278] usb 1-1: No valid video chain found. [ 924.769448][T20857] cramfs: Error -3 while decompressing! [ 924.785722][T20857] cramfs: ffffffff96d751dc(16)->ffff888052a51000(4096) [ 924.856764][ T6172] udevd[6172]: incorrect cramfs checksum on /dev/loop2 [ 924.867306][T20857] cramfs: Error -3 while decompressing! [ 924.877927][T20857] cramfs: ffffffff96d751c2(26)->ffff88804fac6000(4096) [ 924.910219][ T27] audit: type=1800 audit(1756441857.214:45): pid=20857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7009" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 924.979940][T19278] usb 1-1: USB disconnect, device number 62 [ 924.986142][ T6172] udevd[6172]: incorrect cramfs checksum on /dev/loop2 [ 925.064015][T20865] loop4: detected capacity change from 0 to 512 [ 925.076167][ T6172] udevd[6172]: incorrect cramfs checksum on /dev/loop2 [ 925.090224][T20865] EXT4-fs: Ignoring removed nobh option [ 925.187685][T20865] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #3: comm syz.4.7013: corrupted inode contents [ 925.211211][T20865] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #3: comm syz.4.7013: mark_inode_dirty error [ 925.232881][T20872] SET target dimension over the limit! [ 925.282444][T20865] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #3: comm syz.4.7013: corrupted inode contents [ 925.295576][T20865] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.7013: mark_inode_dirty error [ 925.326032][T20865] Quota error (device loop4): write_blk: dquota write failed [ 925.340809][T20865] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 925.365607][T20865] EXT4-fs error (device loop4): ext4_acquire_dquot:6816: comm syz.4.7013: Failed to acquire dquot type 0 [ 925.407731][T20865] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #16: comm syz.4.7013: corrupted inode contents [ 925.451788][T20865] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #16: comm syz.4.7013: mark_inode_dirty error [ 925.504871][T20865] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #16: comm syz.4.7013: corrupted inode contents [ 925.541237][T20865] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.7013: mark_inode_dirty error [ 925.593747][T20865] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #16: comm syz.4.7013: corrupted inode contents [ 925.628235][T20884] loop2: detected capacity change from 0 to 64 [ 925.642846][T20865] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 925.674609][T20865] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #16: comm syz.4.7013: corrupted inode contents [ 925.743338][T20865] EXT4-fs error (device loop4): ext4_truncate:4312: inode #16: comm syz.4.7013: mark_inode_dirty error [ 925.797926][T20865] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 925.874277][T20865] EXT4-fs (loop4): 1 truncate cleaned up [ 925.906976][T20865] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 925.936561][T20865] ext4 filesystem being mounted at /1500/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 926.081167][T20897] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7037'. [ 926.169832][T20865] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #12: block 13: comm syz.4.7013: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 926.352453][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 926.376420][T20201] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 926.403228][T20201] EXT4-fs error (device loop4): ext4_release_dquot:6852: comm kworker/u4:18: Failed to release dquot type 1 [ 926.404457][T20907] loop1: detected capacity change from 0 to 64 [ 926.510014][T20911] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 926.521520][T20911] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 926.872260][T20924] netlink: 'syz.3.7039': attribute type 5 has an invalid length. [ 926.910564][T20924] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7039'. [ 926.946542][T20926] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.7041'. [ 927.005177][T20926] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.7041'. [ 927.301557][T20940] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7048'. [ 927.596513][T20955] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7053'. [ 927.957213][T20967] loop4: detected capacity change from 0 to 256 [ 928.176867][T20973] loop1: detected capacity change from 0 to 256 [ 928.217416][T17276] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 928.339660][T20976] loop2: detected capacity change from 0 to 4096 [ 928.343059][T20973] FAT-fs (loop1): Directory bread(block 64) failed [ 928.389960][T20973] FAT-fs (loop1): Directory bread(block 65) failed [ 928.414634][T20976] ntfs3: loop2: ino=3, Correct links count -> 2. [ 928.437656][T20973] FAT-fs (loop1): Directory bread(block 66) failed [ 928.444344][T20973] FAT-fs (loop1): Directory bread(block 67) failed [ 928.472523][T20973] FAT-fs (loop1): Directory bread(block 68) failed [ 928.486383][T20973] FAT-fs (loop1): Directory bread(block 69) failed [ 928.497456][T20973] FAT-fs (loop1): Directory bread(block 70) failed [ 928.514045][T20973] FAT-fs (loop1): Directory bread(block 71) failed [ 928.535439][T20982] loop0: detected capacity change from 0 to 1024 [ 928.559825][T20973] FAT-fs (loop1): Directory bread(block 72) failed [ 928.621255][T20973] FAT-fs (loop1): Directory bread(block 73) failed [ 928.781293][T20220] hfsplus: b-tree write err: -5, ino 4 [ 928.961350][T20987] netlink: 288 bytes leftover after parsing attributes in process `syz.2.7071'. [ 929.451673][T21007] loop4: detected capacity change from 0 to 512 [ 929.523577][T21008] device geneve2 entered promiscuous mode [ 929.540260][T21007] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 929.566633][T21007] ext4 filesystem being mounted at /1511/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 929.870795][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 929.970821][T21024] netlink: 472 bytes leftover after parsing attributes in process `syz.2.7088'. [ 930.657673][ T27] audit: type=1326 audit(1756441863.238:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21047 comm="syz.2.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866758ebe9 code=0x7ffc0000 [ 930.753111][ T27] audit: type=1326 audit(1756441863.249:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21047 comm="syz.2.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866758ebe9 code=0x7ffc0000 [ 930.836552][ T27] audit: type=1326 audit(1756441863.249:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21047 comm="syz.2.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f866758ebe9 code=0x7ffc0000 [ 930.968021][T21057] loop4: detected capacity change from 0 to 256 [ 930.972809][ T27] audit: type=1326 audit(1756441863.249:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21047 comm="syz.2.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866758ebe9 code=0x7ffc0000 [ 931.068120][T21057] FAT-fs (loop4): Directory bread(block 64) failed [ 931.102029][T21057] FAT-fs (loop4): Directory bread(block 65) failed [ 931.125365][ T27] audit: type=1326 audit(1756441863.249:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21047 comm="syz.2.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866758ebe9 code=0x7ffc0000 [ 931.148828][T21057] FAT-fs (loop4): Directory bread(block 66) failed [ 931.162323][T21057] FAT-fs (loop4): Directory bread(block 67) failed [ 931.220031][T21057] FAT-fs (loop4): Directory bread(block 68) failed [ 931.239132][T21057] FAT-fs (loop4): Directory bread(block 69) failed [ 931.245925][T21057] FAT-fs (loop4): Directory bread(block 70) failed [ 931.286237][T21057] FAT-fs (loop4): Directory bread(block 71) failed [ 931.344217][T21057] FAT-fs (loop4): Directory bread(block 72) failed [ 931.379309][T21057] FAT-fs (loop4): Directory bread(block 73) failed [ 931.861742][T21082] cgroup: name respecified [ 932.312565][T21096] loop0: detected capacity change from 0 to 8 [ 932.425913][T21101] autofs4:pid:21101:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 932.448514][T21096] SQUASHFS error: Failed to read block 0x738: -5 [ 932.455524][T21096] SQUASHFS error: Unable to read metadata cache entry [736] [ 932.523873][T21097] loop1: detected capacity change from 0 to 4096 [ 932.590326][T21097] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 932.761570][T21097] ntfs3: loop1: failed to convert "c46c" to macinuit [ 932.864750][T21105] loop2: detected capacity change from 0 to 4096 [ 932.908703][T21109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7127'. [ 932.912550][T21105] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 932.981142][T21109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7127'. [ 933.566755][T21125] netlink: 'syz.4.7135': attribute type 10 has an invalid length. [ 933.582679][T21125] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7135'. [ 933.647742][T21125] device virt_wifi0 entered promiscuous mode [ 933.670594][T21125] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 933.891810][T21133] netlink: 'syz.2.7140': attribute type 1 has an invalid length. [ 934.131720][T21142] loop2: detected capacity change from 0 to 256 [ 934.171777][T21147] netlink: 676 bytes leftover after parsing attributes in process `syz.4.7145'. [ 934.276897][T21142] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 934.316812][T21142] FAT-fs (loop2): Filesystem has been set read-only [ 934.342272][T21142] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 934.543297][T21153] 8021q: VLANs not supported on gre0 [ 934.602838][T21155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7150'. [ 934.782233][T21161] loop4: detected capacity change from 0 to 128 [ 934.887090][T21161] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 934.938124][T21161] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 936.199877][T21159] loop2: detected capacity change from 0 to 40427 [ 936.267595][T21159] F2FS-fs (loop2): invalid crc value [ 936.312386][T21189] device netdevsim0 left promiscuous mode [ 936.341294][T21189] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 936.355590][T21159] F2FS-fs (loop2): Found nat_bits in checkpoint [ 936.549177][T21159] F2FS-fs (loop2): Start checkpoint disabled! [ 936.595623][T21159] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 936.626665][T21197] loop1: detected capacity change from 0 to 1024 [ 936.877237][T20203] hfsplus: b-tree write err: -5, ino 4 [ 937.160597][T21208] netlink: 'syz.0.7177': attribute type 5 has an invalid length. [ 937.201838][T21208] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7177'. [ 937.745357][T21227] loop4: detected capacity change from 0 to 1024 [ 937.948928][T20212] hfsplus: b-tree write err: -5, ino 4 [ 937.984094][T21233] netlink: 'syz.0.7188': attribute type 1 has an invalid length. [ 937.991959][T21233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7188'. [ 939.046829][T21267] loop0: detected capacity change from 0 to 1024 [ 939.061640][T21270] xt_TCPMSS: Only works on TCP SYN packets [ 939.219838][T21267] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 939.238880][T21267] hfsplus: xattr searching failed [ 939.299114][T21267] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 939.347295][T21267] hfsplus: xattr searching failed [ 939.378441][T21277] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7210'. [ 939.426366][T21277] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7210'. [ 939.898355][ T27] audit: type=1326 audit(1756441872.946:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21293 comm="syz.2.7218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866758ebe9 code=0x7ffc0000 [ 939.981734][ T27] audit: type=1326 audit(1756441872.946:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21293 comm="syz.2.7218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866758ebe9 code=0x7ffc0000 [ 940.011425][T21298] netlink: 'syz.3.7221': attribute type 29 has an invalid length. [ 940.026726][T21257] loop1: detected capacity change from 0 to 32768 [ 940.029688][T21298] netlink: 'syz.3.7221': attribute type 29 has an invalid length. [ 940.079569][ T27] audit: type=1326 audit(1756441872.999:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21293 comm="syz.2.7218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f866758ebe9 code=0x7ffc0000 [ 940.105867][T21257] jfs_strtoUCS: char2uni returned -22. [ 940.134147][T21257] charset = cp950, char = 0xd4 [ 940.153016][ T27] audit: type=1326 audit(1756441872.999:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21293 comm="syz.2.7218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866758ebe9 code=0x7ffc0000 [ 940.204115][T21299] loop0: detected capacity change from 0 to 4096 [ 940.231326][ T27] audit: type=1326 audit(1756441872.999:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21293 comm="syz.2.7218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866758ebe9 code=0x7ffc0000 [ 940.261058][T21299] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 940.681630][T21311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7227'. [ 940.957854][ T7259] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 941.192546][ T7259] usb 4-1: Using ep0 maxpacket: 8 [ 941.202008][ T7259] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 941.223094][ T7259] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.236711][ T7259] usb 4-1: Product: syz [ 941.241261][ T7259] usb 4-1: Manufacturer: syz [ 941.262609][ T7259] usb 4-1: SerialNumber: syz [ 941.280816][ T7259] usb 4-1: config 0 descriptor?? [ 941.302476][ T7259] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 941.318642][ T27] audit: type=1326 audit(1756441874.437:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21330 comm="syz.1.7237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63c98ebe9 code=0x7ffc0000 [ 941.371099][ T27] audit: type=1326 audit(1756441874.437:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21330 comm="syz.1.7237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fb63c98ebe9 code=0x7ffc0000 [ 941.461809][ T27] audit: type=1326 audit(1756441874.437:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21330 comm="syz.1.7237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63c98ebe9 code=0x7ffc0000 [ 941.463950][T21303] loop2: detected capacity change from 0 to 32768 [ 941.685579][T21335] loop4: detected capacity change from 0 to 4096 [ 941.707110][ T7259] radio-usb-si4713: probe of 4-1:0.0 failed with error -71 [ 941.729650][T21335] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 941.735424][ T7259] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 941.789957][ T7259] usb 4-1: USB disconnect, device number 86 [ 941.923496][T21335] ntfs3: loop4: failed to convert "c46c" to iso8859-2 [ 942.821313][T21372] binfmt_misc: register: failed to install interpreter file ./file0 [ 943.096554][T21381] netlink: 'syz.3.7260': attribute type 7 has an invalid length. [ 943.292107][T21356] loop1: detected capacity change from 0 to 32768 [ 943.354309][T21356] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 943.354309][T21356] [ 943.385488][T21356] ERROR: (device loop1): remounting filesystem as read-only [ 943.404685][T21359] loop2: detected capacity change from 0 to 32768 [ 943.428639][T21356] ialloc: diAlloc returned -5! [ 943.510444][T21359] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 943.510444][T21359] [ 943.557994][T21359] ERROR: (device loop2): remounting filesystem as read-only [ 943.595950][T21359] ERROR: (device loop2): jfs_unlink: [ 943.595950][T21359] [ 943.850501][ T4271] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 943.850501][ T4271] [ 944.394550][T21416] loop4: detected capacity change from 0 to 2048 [ 944.492104][T21421] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 944.614657][T21416] CPU: 0 PID: 21416 Comm: syz.4.7277 Not tainted syzkaller #0 [ 944.622845][T21416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 944.633030][T21416] Call Trace: [ 944.636430][T21416] [ 944.639384][T21416] dump_stack_lvl+0x168/0x22e [ 944.644165][T21416] ? show_regs_print_info+0x12/0x12 [ 944.649379][T21416] ? kmem_cache_alloc+0x151/0x2f0 [ 944.654510][T21416] ? memset+0x1e/0x40 [ 944.658689][T21416] ? nilfs_btree_alloc_path+0x5e5/0x600 [ 944.664271][T21416] nilfs_btree_last_key+0x485/0x610 [ 944.669583][T21416] nilfs_bmap_last_key+0x70/0x120 [ 944.674626][T21416] nilfs_truncate_bmap+0xfb/0x340 [ 944.679677][T21416] ? rcu_is_watching+0x11/0xa0 [ 944.684473][T21416] ? nilfs_update_inode+0x1d0/0x1d0 [ 944.689821][T21416] ? block_truncate_page+0x1f3/0x680 [ 944.695292][T21416] ? nilfs_transaction_begin+0x525/0x700 [ 944.700960][T21416] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 944.706361][T21416] nilfs_truncate+0x263/0x4c0 [ 944.711079][T21416] ? nilfs_write_failed+0x90/0x90 [ 944.716123][T21416] ? preempt_count_add+0x8d/0x190 [ 944.721178][T21416] ? unmap_mapping_range+0x91/0x100 [ 944.726402][T21416] nilfs_setattr+0x20d/0x2a0 [ 944.731013][T21416] ? nilfs_clear_inode+0x280/0x280 [ 944.736149][T21416] ? evm_inode_setattr+0x91/0x790 [ 944.741211][T21416] ? bpf_lsm_inode_setattr+0x5/0x10 [ 944.746420][T21416] ? security_inode_setattr+0xd8/0x140 [ 944.751885][T21416] ? try_break_deleg+0x79/0x120 [ 944.756748][T21416] ? nilfs_clear_inode+0x280/0x280 [ 944.761879][T21416] notify_change+0xc74/0xf40 [ 944.766933][T21416] do_truncate+0x197/0x220 [ 944.771360][T21416] ? aa_get_current_label+0x110/0x1d0 [ 944.776756][T21416] ? put_page_bootmem+0x2c0/0x2c0 [ 944.781795][T21416] ? ima_bprm_check+0x1f0/0x1f0 [ 944.786667][T21416] ? bpf_lsm_path_truncate+0x5/0x10 [ 944.791884][T21416] path_openat+0x27f2/0x2e70 [ 944.796520][T21416] ? do_filp_open+0x3c0/0x3c0 [ 944.801232][T21416] do_filp_open+0x1c1/0x3c0 [ 944.805845][T21416] ? vfs_tmpfile+0x480/0x480 [ 944.810467][T21416] ? _raw_spin_unlock+0x24/0x40 [ 944.815332][T21416] ? alloc_fd+0x58f/0x630 [ 944.819689][T21416] do_sys_openat2+0x142/0x490 [ 944.824407][T21416] ? __se_sys_futex+0x14a/0x440 [ 944.829305][T21416] ? do_sys_open+0xe0/0xe0 [ 944.833745][T21416] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 944.839852][T21416] ? lock_chain_count+0x20/0x20 [ 944.844726][T21416] __x64_sys_creat+0x8c/0xb0 [ 944.849426][T21416] do_syscall_64+0x4c/0xa0 [ 944.853857][T21416] ? clear_bhb_loop+0x60/0xb0 [ 944.858630][T21416] ? clear_bhb_loop+0x60/0xb0 [ 944.863313][T21416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 944.869347][T21416] RIP: 0033:0x7fa16ff8ebe9 [ 944.873786][T21416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 944.893410][T21416] RSP: 002b:00007fa170e51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 944.901930][T21416] RAX: ffffffffffffffda RBX: 00007fa1701b5fa0 RCX: 00007fa16ff8ebe9 [ 944.910084][T21416] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000000 [ 944.918065][T21416] RBP: 00007fa170011e19 R08: 0000000000000000 R09: 0000000000000000 [ 944.926915][T21416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 944.934980][T21416] R13: 00007fa1701b6038 R14: 00007fa1701b5fa0 R15: 00007fff9b729918 [ 944.943084][T21416] [ 945.024585][T21416] NILFS (loop4): btree level mismatch (ino=16): 1 != 7 [ 945.031854][T21416] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 945.117622][T21416] Remounting filesystem read-only [ 945.164082][T21416] NILFS (loop4): error -5 truncating bmap (ino=16) [ 945.185634][T21435] loop0: detected capacity change from 0 to 1024 [ 945.326759][ T4269] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 945.417809][T20214] hfsplus: b-tree write err: -5, ino 4 [ 945.704685][T21451] loop4: detected capacity change from 0 to 24 [ 945.752030][T21451] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 945.795088][T21451] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 945.933698][T21459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7297'. [ 946.234849][T21469] loop0: detected capacity change from 0 to 64 [ 946.311188][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 27748 [ 946.351614][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 25455 [ 946.366710][T21473] comedi comedi0: adq12b: I/O port conflict (0x5,16) [ 946.383704][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 25902 [ 946.396467][T21467] loop3: detected capacity change from 0 to 4096 [ 946.430296][T21467] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 946.439418][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 26988 [ 946.508911][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 2406 [ 946.569789][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 43520 [ 946.639054][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 1024 [ 946.678993][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 1536 [ 946.751942][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 25906 [ 946.769626][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 26988 [ 946.834317][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 1382 [ 946.902034][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 1024 [ 946.932523][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 1536 [ 947.003671][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 25905 [ 947.074709][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 26988 [ 947.116569][T21488] loop2: detected capacity change from 0 to 4096 [ 947.129677][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 1382 [ 947.147353][T21488] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 947.166858][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 1024 [ 947.178025][T21495] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 947.208107][T21488] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 947.220167][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 1536 [ 947.242024][T21488] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 947.274628][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 1536 [ 947.303269][T21488] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 947.339322][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 1536 [ 947.360507][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 25904 [ 947.379592][T21488] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 947.388608][T21499] loop3: detected capacity change from 0 to 128 [ 947.392117][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 26988 [ 947.428322][T21499] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 947.444390][T21488] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 947.450083][T21499] syz.3.7319: attempt to access beyond end of device [ 947.450083][T21499] loop3: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 947.485254][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 1382 [ 947.517252][T21488] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 947.537897][T21499] Buffer I/O error on dev loop3, logical block 3245768, async page read [ 947.547742][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 1024 [ 947.584585][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 65283 [ 947.602517][T21503] loop4: detected capacity change from 0 to 4096 [ 947.612126][T21488] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr. [ 947.627354][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 1536 [ 947.630049][T21488] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 947.648183][T21503] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 947.668234][ T4266] sysv_free_block: flc_count > flc_size [ 947.682810][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 13286 [ 947.694480][T21488] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 947.696407][ T4266] sysv_free_block: flc_count > flc_size [ 947.714159][T19278] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 947.722030][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 57253 [ 947.736276][T21488] ntfs: volume version 3.1. [ 947.755089][ T4266] sysv_free_block: flc_count > flc_size [ 947.766591][ T4266] sysv_free_block: flc_count > flc_size [ 947.780509][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 13286 [ 947.792530][ T4266] sysv_free_block: flc_count > flc_size [ 947.799689][ T4266] sysv_free_block: flc_count > flc_size [ 947.806538][T21503] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 947.819537][ T4266] sysv_free_block: flc_count > flc_size [ 947.830143][ T4266] sysv_free_block: flc_count > flc_size [ 947.839415][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 57253 [ 947.849060][ T4266] sysv_free_block: flc_count > flc_size [ 947.858580][ T4266] sysv_free_block: flc_count > flc_size [ 947.866515][ T4266] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 947.893008][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 1536 [ 947.903790][T19278] usb 2-1: Using ep0 maxpacket: 16 [ 947.908407][T19278] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 947.934591][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 1050 [ 947.945436][T19278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.970560][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 16191 [ 948.000569][T19278] usb 2-1: Product: syz [ 948.017991][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 16191 [ 948.028226][T19278] usb 2-1: Manufacturer: syz [ 948.036934][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 16191 [ 948.047682][T19278] usb 2-1: SerialNumber: syz [ 948.056731][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 16191 [ 948.073346][T19278] r8152-cfgselector 2-1: config 0 descriptor?? [ 948.075593][ T4269] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 948.103977][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 33280 [ 948.144192][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 512 [ 948.203445][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 25904 [ 948.251999][T21509] loop4: detected capacity change from 0 to 16 [ 948.264878][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 26988 [ 948.284158][T21509] erofs: (device loop4): mounted with root inode @ nid 36. [ 948.304995][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 1382 [ 948.319762][T21509] erofs: (device loop4): init_inode_xattrs: xattr_isize 12 of nid 86 is not supported yet [ 948.327435][T21511] Illegal XDP return value 4070780662 on prog (id 452) dev N/A, expect packet loss! [ 948.359662][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 23808 [ 948.385297][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 28529 [ 948.417118][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 25904 [ 948.445391][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 26988 [ 948.493420][T19278] r8152-cfgselector 2-1: Unknown version 0x0000 [ 948.505999][T19278] r8152-cfgselector 2-1: USB disconnect, device number 103 [ 948.523287][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 1382 [ 948.560218][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 1280 [ 948.599269][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 768 [ 948.627216][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 65535 [ 948.668808][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset 65281 [ 948.698363][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -2 [ 948.718390][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -4 [ 948.738884][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -6 [ 948.758454][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -8 [ 948.790908][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -10 [ 948.831428][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -12 [ 948.863186][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -14 [ 948.875334][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -16 [ 948.886991][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -18 [ 948.900660][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -20 [ 948.914037][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -22 [ 948.925387][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -24 [ 948.942118][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -26 [ 948.947252][T21507] loop3: detected capacity change from 0 to 32768 [ 948.970527][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -28 [ 949.007745][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -30 [ 949.032815][T21507] JBD2: Ignoring recovery information on journal [ 949.037614][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -32 [ 949.056192][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -34 [ 949.067098][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -36 [ 949.078880][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -38 [ 949.090086][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -40 [ 949.100725][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -42 [ 949.111590][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -44 [ 949.122359][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -46 [ 949.132797][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -48 [ 949.143248][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -50 [ 949.151568][ T7259] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 949.158826][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -52 [ 949.171598][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -54 [ 949.183384][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -56 [ 949.194479][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -58 [ 949.218163][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -60 [ 949.237375][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -62 [ 949.245637][T21507] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 949.266505][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -64 [ 949.304326][T21507] (syz.3.7322,21507,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=32, inode=17057, rec_len=1304, name_len=0 [ 949.318590][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -66 [ 949.346160][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -68 [ 949.361529][ T7259] usb 5-1: Using ep0 maxpacket: 32 [ 949.369286][ T7259] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 949.388171][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -70 [ 949.390153][T21507] (syz.3.7322,21507,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 949.416442][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -72 [ 949.416954][ T7259] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 949.457521][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -74 [ 949.475628][T21533] loop1: detected capacity change from 0 to 1024 [ 949.485262][ T7259] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 949.486756][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -76 [ 949.494382][T21507] (syz.3.7322,21507,0):ocfs2_mknod:298 ERROR: status = -2 [ 949.523634][ T7259] usb 5-1: config 1 has no interface number 0 [ 949.529810][ T7259] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 949.552002][T21507] (syz.3.7322,21507,0):ocfs2_mknod:502 ERROR: status = -2 [ 949.559342][T21507] (syz.3.7322,21507,0):ocfs2_create:676 ERROR: status = -2 [ 949.562419][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -78 [ 949.599510][ T7259] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 949.615603][T21535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7336'. [ 949.642349][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -80 [ 949.645239][ T7259] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 949.661948][T21535] netlink: 'syz.2.7336': attribute type 2 has an invalid length. [ 949.672890][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -82 [ 949.693377][T21535] netlink: 'syz.2.7336': attribute type 1 has an invalid length. [ 949.695194][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -84 [ 949.704331][T21507] Process accounting resumed [ 949.722254][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -86 [ 949.723465][ T7259] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.738884][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -88 [ 949.740826][T21535] netlink: 120 bytes leftover after parsing attributes in process `syz.2.7336'. [ 949.751387][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -90 [ 949.780117][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -92 [ 949.792669][ T7259] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 949.799421][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -94 [ 949.813290][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -96 [ 949.829215][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -98 [ 949.848529][ T4266] ocfs2: Unmounting device (7,3) on (node local) [ 949.894865][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -100 [ 949.918270][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -102 [ 949.939459][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -104 [ 949.960847][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -106 [ 949.986490][ T7259] snd_usb_pod 5-1:1.1: invalid control EP [ 949.991993][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -108 [ 949.993291][ T7259] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 950.066837][ T7259] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 950.073394][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -110 [ 950.074338][ T7259] snd_usb_pod: probe of 5-1:1.1 failed with error -22 [ 950.115276][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -112 [ 950.135702][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -114 [ 950.171012][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -116 [ 950.201000][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -118 [ 950.206702][ T7259] usb 5-1: USB disconnect, device number 76 [ 950.260745][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -120 [ 950.323990][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -122 [ 950.362069][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -124 [ 950.386370][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -126 [ 950.417259][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -128 [ 950.444276][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -130 [ 950.445753][T21545] loop1: detected capacity change from 0 to 8192 [ 950.466675][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -132 [ 950.492000][T21545] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 950.517647][T21545] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 950.542578][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -134 [ 950.556679][T21545] REISERFS (device loop1): using ordered data mode [ 950.564743][T21545] reiserfs: using flush barriers [ 950.573204][T21545] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 950.582107][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -136 [ 950.600417][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -138 [ 950.611195][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -140 [ 950.621865][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -142 [ 950.632275][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -144 [ 950.644068][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -146 [ 950.654742][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -148 [ 950.665943][T21545] REISERFS (device loop1): checking transaction log (loop1) [ 950.670036][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -150 [ 950.684307][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -152 [ 950.694837][T21545] REISERFS (device loop1): Using r5 hash to sort names [ 950.728888][T21545] reiserfs: enabling write barrier flush mode [ 950.736211][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -154 [ 950.736246][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -156 [ 950.736274][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -158 [ 950.736292][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -160 [ 950.736312][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -162 [ 950.736331][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -164 [ 950.736350][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -166 [ 950.736370][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -168 [ 950.736390][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -170 [ 950.736409][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -172 [ 950.736428][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -174 [ 950.736447][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -176 [ 950.736466][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -178 [ 950.736485][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -180 [ 950.736505][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -182 [ 950.736522][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -184 [ 950.736541][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -186 [ 950.829531][T21545] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 950.959647][T21545] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 950.970757][T21545] REISERFS (device loop1): Remounting filesystem read-only [ 950.979695][T21545] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 951.027783][T21545] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 951.101500][T21545] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 951.136286][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -188 [ 951.167241][T21545] REISERFS error (device loop1): zam-7001 reiserfs_find_entry: io error [ 951.177557][T21545] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 951.190529][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -190 [ 951.200692][T21545] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 951.227107][T21545] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 951.235418][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -192 [ 951.289362][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -194 [ 951.306274][T21545] REISERFS warning (device loop1): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 951.332408][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -196 [ 951.363349][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -198 [ 951.405037][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -200 [ 951.438647][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -202 [ 951.486069][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -204 [ 951.515263][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -206 [ 951.519285][ T4276] ------------[ cut here ]------------ [ 951.531120][ T4276] kernel BUG at fs/reiserfs/journal.c:1916! [ 951.558964][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -208 [ 951.562461][ T4276] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 951.575372][ T4276] CPU: 1 PID: 4276 Comm: syz-executor Not tainted syzkaller #0 [ 951.581025][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -210 [ 951.582926][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 951.582941][ T4276] RIP: 0010:do_journal_release+0x536/0x540 [ 951.606341][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -212 [ 951.609212][ T4276] Code: b9 ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 f4 1e b9 ff e9 ac fc ff ff e8 aa 02 69 ff <0f> 0b e8 a3 02 69 ff 0f 0b 90 41 57 41 56 53 48 89 f3 49 bf 00 00 [ 951.609235][ T4276] RSP: 0018:ffffc90003de7b00 EFLAGS: 00010293 [ 951.609254][ T4276] RAX: ffffffff8217cd76 RBX: ffff888053d5e000 RCX: ffff888027538000 [ 951.656110][ T4276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 951.664183][ T4276] RBP: ffffc90003de7bf8 R08: dffffc0000000000 R09: ffffc90003de7b40 [ 951.672178][ T4276] R10: fffff520007bcf6f R11: 1ffff920007bcf68 R12: ffffc90004ab1000 [ 951.680179][ T4276] R13: 1ffff920007bcf64 R14: ffff888053d5e678 R15: 0000000000000000 [ 951.688347][ T4276] FS: 0000555563814500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 951.697477][ T4276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.704133][ T4276] CR2: 0000001b2f922ff8 CR3: 000000005c048000 CR4: 00000000003506e0 [ 951.712290][ T4276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 951.720268][ T4276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 951.728240][ T4276] Call Trace: [ 951.731520][ T4276] [ 951.734565][ T4276] ? journal_release+0x30/0x30 [ 951.739503][ T4276] journal_release+0x1b/0x30 [ 951.744105][ T4276] reiserfs_put_super+0x21e/0x480 [ 951.749138][ T4276] ? hook_inode_free_security+0xa0/0xa0 [ 951.754694][ T4276] ? reiserfs_dirty_inode+0x240/0x240 [ 951.760071][ T4276] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 951.765803][ T4276] ? reiserfs_dirty_inode+0x240/0x240 [ 951.771176][ T4276] generic_shutdown_super+0x130/0x340 [ 951.776571][ T4276] kill_block_super+0x7c/0xe0 [ 951.781346][ T4276] deactivate_locked_super+0x93/0xf0 [ 951.786970][ T4276] cleanup_mnt+0x463/0x4f0 [ 951.791396][ T4276] ? lockdep_hardirqs_on+0x94/0x140 [ 951.796696][ T4276] task_work_run+0x1ca/0x250 [ 951.801292][ T4276] ? task_work_cancel+0x230/0x230 [ 951.806322][ T4276] ? exit_to_user_mode_loop+0x3b/0x110 [ 951.811791][ T4276] exit_to_user_mode_loop+0xe6/0x110 [ 951.817170][ T4276] exit_to_user_mode_prepare+0xb1/0x140 [ 951.822724][ T4276] syscall_exit_to_user_mode+0x16/0x40 [ 951.828199][ T4276] do_syscall_64+0x58/0xa0 [ 951.832618][ T4276] ? clear_bhb_loop+0x60/0xb0 [ 951.837295][ T4276] ? clear_bhb_loop+0x60/0xb0 [ 951.842149][ T4276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 951.848058][ T4276] RIP: 0033:0x7fb63c98ff17 [ 951.852653][ T4276] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 951.872280][ T4276] RSP: 002b:00007fff33a605f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 951.880797][ T4276] RAX: 0000000000000000 RBX: 00007fb63ca11c05 RCX: 00007fb63c98ff17 [ 951.888773][ T4276] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff33a606b0 [ 951.896749][ T4276] RBP: 00007fff33a606b0 R08: 0000000000000000 R09: 0000000000000000 [ 951.904809][ T4276] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff33a61740 [ 951.912961][ T4276] R13: 00007fb63ca11c05 R14: 00000000000e2b44 R15: 00007fff33a61780 [ 951.920950][ T4276] [ 951.923971][ T4276] Modules linked in: [ 951.927915][ C1] vkms_vblank_simulate: vblank timer overrun [ 951.934974][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -214 [ 951.945655][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -216 [ 951.973281][ T4276] ---[ end trace 0000000000000000 ]--- [ 951.979020][ T4276] RIP: 0010:do_journal_release+0x536/0x540 [ 951.983988][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -218 [ 951.987379][ T4276] Code: b9 ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 f4 1e b9 ff e9 ac fc ff ff e8 aa 02 69 ff <0f> 0b e8 a3 02 69 ff 0f 0b 90 41 57 41 56 53 48 89 f3 49 bf 00 00 [ 952.020766][ T4276] RSP: 0018:ffffc90003de7b00 EFLAGS: 00010293 [ 952.022927][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -220 [ 952.026977][ T4276] RAX: ffffffff8217cd76 RBX: ffff888053d5e000 RCX: ffff888027538000 [ 952.047611][ T4276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 952.055744][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -222 [ 952.056458][ T4276] RBP: ffffc90003de7bf8 R08: dffffc0000000000 R09: ffffc90003de7b40 [ 952.066574][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -224 [ 952.074957][ T4276] R10: fffff520007bcf6f R11: 1ffff920007bcf68 R12: ffffc90004ab1000 [ 952.093598][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -226 [ 952.102476][ T4276] R13: 1ffff920007bcf64 R14: ffff888053d5e678 R15: 0000000000000000 [ 952.108140][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -228 [ 952.124546][ T4276] FS: 0000555563814500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 952.125558][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -230 [ 952.143575][ T4276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 952.145380][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -232 [ 952.151504][ T4276] CR2: 00007f5b2f4f5440 CR3: 000000005c048000 CR4: 00000000003506f0 [ 952.151529][ T4276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 952.151542][ T4276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 952.162609][T21469] hfs: requested invalid offset: NODE: id 2, type 0xff, height 1, node_size 512, offset -234 [ 952.186005][ T4276] Kernel panic - not syncing: Fatal exception [ 952.187347][ T4276] Kernel Offset: disabled [ 952.208726][ T4276] Rebooting in 86400 seconds..