last executing test programs: 1.239082856s ago: executing program 2 (id=9326): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newnexthop={0x28, 0x5e, 0x103, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x1, 0x0, 0x4}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_IN={0x7, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x28}, 0x1, 0x0, 0x0, 0x200444c1}, 0x200000c0) 1.04590927s ago: executing program 2 (id=9329): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0) fcntl$getflags(r0, 0xb) 956.899512ms ago: executing program 3 (id=9332): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) rt_tgsigqueueinfo(0x0, 0x0, 0x24, &(0x7f0000000000)={0x17, 0xb, 0x85}) 816.760335ms ago: executing program 0 (id=9333): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000100)={0x10, 0x8, 0xf2c8}) 816.630414ms ago: executing program 2 (id=9334): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x1000000, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0xfffe, 0x4}, {0x3d, 0x0, 0x5}, {0xfffe}, {0x0, 0x1, 0x0, 0x7a3a}, {}, {0x0, 0x0, 0x0, 0x7}, {0x3}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3349, 0x0, 0x0, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 804.867365ms ago: executing program 1 (id=9336): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r0, &(0x7f0000000240)=[@t={0x81, 0x3, 0xe, 0x2}], 0x8) 776.104165ms ago: executing program 3 (id=9337): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x8008af26, &(0x7f00000003c0)={0x19}) 664.352458ms ago: executing program 1 (id=9338): ioperm(0x0, 0x82, 0x1e) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0) 663.732238ms ago: executing program 0 (id=9339): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xffffff1f}, {}, {0x85, 0x0, 0x0, 0xa3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 620.765548ms ago: executing program 2 (id=9340): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000003c0)={0x0, 0x318, 0xeff4ffc0, 0x0, 0x0, "83843c556dec3a9ab904cfc27929a300", 0x0, 0x8}) 620.658048ms ago: executing program 3 (id=9341): capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000200)={0x200000, 0x200000, 0x20000000}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xb, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 539.8333ms ago: executing program 1 (id=9342): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000) 507.968391ms ago: executing program 3 (id=9343): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x3f, 0x0}) 493.326151ms ago: executing program 0 (id=9344): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40043d0d, 0x0) 480.545831ms ago: executing program 2 (id=9345): prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xb, 0x400}, 0x48) 363.555163ms ago: executing program 1 (id=9346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) 341.460684ms ago: executing program 0 (id=9347): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_int(r0, 0x0, 0xb, 0x0, &(0x7f0000000100)) 340.955454ms ago: executing program 3 (id=9348): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x114, 0xe}, {0x10, 0x110, 0xe}], 0x20}, 0x0) 284.764324ms ago: executing program 2 (id=9349): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000100)={[{@uid_forget}, {}, {@shortad}, {@gid}, {@utf8}, {@longad}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}]}, 0x1, 0xc43, &(0x7f0000001040)="$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") mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 227.265506ms ago: executing program 0 (id=9350): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x80000000, 0xbb46, 0x33424752, 0x0, 0x0, 0x0, 0xc, 0x8, 0x0, 0x0, 0x1}}) 194.631606ms ago: executing program 1 (id=9351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="88000000000101040000000000000004020000022400018014000180080001007f00000108000200ac14141c0c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c0002800500010000000000080007400000000024000e800c00028004000100840000001400018008000100e0000001080002"], 0x88}}, 0x0) 76.801029ms ago: executing program 3 (id=9352): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 39.933509ms ago: executing program 1 (id=9353): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180200000000000100000000000000008500000005000000180100002020642500000000000820207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000009b00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=9354): r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000ac0)={0x0, 0x9, 0xfffffffe}) kernel console output (not intermixed with test programs): 668160][T25392] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1022.687841][T25392] RSP: 002b:00007f7e9e85de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1022.696247][T25392] RAX: ffffffffffffffda RBX: 00007f7e9e85def0 RCX: 00007f7e9d9903ca [ 1022.704206][T25392] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f7e9e85deb0 [ 1022.712252][T25392] RBP: 0000200000000400 R08: 00007f7e9e85def0 R09: 0000000000200001 [ 1022.720217][T25392] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 1022.728263][T25392] R13: 00007f7e9e85deb0 R14: 00000000000125bb R15: 0000200000000180 [ 1022.736232][T25392] [ 1022.752573][T25392] gfs2: fsid=syz:syz.s: G: s:SH n:2/13 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:3 [ 1022.763264][T25392] gfs2: fsid=syz:syz.s: H: s:SH f:eEcH e:0 p:25392 [syz.3.8562] init_journal+0x17f1/0x2260 [ 1022.773527][T25392] gfs2: fsid=syz:syz.s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 1022.782136][T25392] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 1022.792419][T18298] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.826194][T18298] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1022.849395][T18298] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1022.873239][T18298] usb 3-1: Manufacturer: syz [ 1022.884453][T18298] usb 3-1: config 0 descriptor?? [ 1023.144841][ T6112] usb 3-1: USB disconnect, device number 51 [ 1023.146254][T25409] loop0: detected capacity change from 0 to 512 [ 1023.174231][T25409] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1023.199436][T25409] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1023.225860][T25409] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.8569: bg 0: block 248: padding at end of block bitmap is not set [ 1023.243177][T25409] Quota error (device loop0): write_blk: dquota write failed [ 1023.251073][T25409] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1023.261491][T25409] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.8569: Failed to acquire dquot type 1 [ 1023.272839][T18298] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1023.274351][T25409] EXT4-fs (loop0): 1 truncate cleaned up [ 1023.287395][T25409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1023.350543][ T6006] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1023.447623][ T28] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1023.469094][T18298] usb 2-1: Using ep0 maxpacket: 16 [ 1023.481744][T18298] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1023.489942][T18298] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.511711][T18298] usb 2-1: config 0 has no interface number 0 [ 1023.517852][T18298] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1023.540615][T18298] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1023.549982][T18298] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1023.558508][T18298] usb 2-1: Product: syz [ 1023.562772][T18298] usb 2-1: SerialNumber: syz [ 1023.569707][T18298] usb 2-1: config 0 descriptor?? [ 1023.579293][T18298] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 1023.663182][ T28] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1023.671319][ T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.681484][ T28] usb 4-1: config 0 has no interface number 0 [ 1023.690318][ T28] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1023.699563][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.707608][ T28] usb 4-1: Product: syz [ 1023.711778][ T28] usb 4-1: Manufacturer: syz [ 1023.725469][ T28] usb 4-1: SerialNumber: syz [ 1023.755614][ T28] usb 4-1: config 0 descriptor?? [ 1023.797610][T18298] usb 2-1: USB disconnect, device number 29 [ 1023.821687][ T6112] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1023.992919][ T28] usb 4-1: USB disconnect, device number 41 [ 1024.025070][ T6112] usb 1-1: Using ep0 maxpacket: 32 [ 1024.031899][ T6112] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1024.042095][ T6112] usb 1-1: config 7 has an invalid interface number: 80 but max is 0 [ 1024.050247][ T6112] usb 1-1: config 7 has no interface number 0 [ 1024.056394][ T6112] usb 1-1: config 7 interface 80 has no altsetting 0 [ 1024.063259][ T5941] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1024.073762][ T6112] usb 1-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=36.cc [ 1024.082889][ T6112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.090945][ T6112] usb 1-1: Product: syz [ 1024.095141][ T6112] usb 1-1: Manufacturer: syz [ 1024.099870][ T6112] usb 1-1: SerialNumber: syz [ 1024.260043][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 1024.266906][ T5941] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 1024.275137][ T5941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.285380][ T5941] usb 3-1: config 0 has no interface number 0 [ 1024.296133][ T5941] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 1024.305330][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.313598][ T5941] usb 3-1: Product: syz [ 1024.317782][ T5941] usb 3-1: Manufacturer: syz [ 1024.322733][ T5941] usb 3-1: SerialNumber: syz [ 1024.349803][ T6112] pegasus: probe of 1-1:7.80 failed with error -71 [ 1024.357035][ T5941] usb 3-1: config 0 descriptor?? [ 1024.375014][ T6112] usb 1-1: USB disconnect, device number 47 [ 1024.526352][T25427] loop1: detected capacity change from 0 to 1024 [ 1024.547473][T25427] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1024.560872][T25427] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1024.579257][T25427] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1024.596780][T25427] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 1024.605658][ T5941] usb 3-1: USB disconnect, device number 52 [ 1024.613316][T25427] EXT4-fs warning (device loop1): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 1024.632718][T25427] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 1024.649720][T25427] EXT4-fs (loop1): 1 truncate cleaned up [ 1024.670218][T25427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1024.744828][T25430] loop3: detected capacity change from 0 to 8192 [ 1024.767606][T25430] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1024.779451][T25430] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 2048) [ 1024.790555][ T6012] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.801542][T25430] NILFS (loop3): mounting unchecked fs [ 1024.830876][T12094] udevd[12094]: incorrect nilfs2 checksum on /dev/loop3 [ 1024.871577][T25430] NILFS (loop3): recovery complete [ 1024.878829][T25433] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1025.241584][T25439] loop3: detected capacity change from 0 to 4096 [ 1025.597144][T25435] loop1: detected capacity change from 0 to 32768 [ 1025.622019][T25435] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 1025.622019][T25435] [ 1025.653341][T25435] ERROR: (device loop1): remounting filesystem as read-only [ 1025.671488][T25435] xtLookup: xtSearch returned -5 [ 1025.693491][T25435] read_mapping_page failed! [ 1025.701985][T25435] jfs_mount: diMount(ipaimap) failed w/rc = -5 [ 1025.724917][T25435] Mount JFS Failure: -5 [ 1025.729127][T25435] jfs_mount failed w/return code = -5 [ 1025.977707][T25441] loop0: detected capacity change from 0 to 32768 [ 1026.015844][T25441] (syz.0.8583,25441,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1026.066946][T25441] (syz.0.8583,25441,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1026.645359][ T5941] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1026.687170][ T28] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1026.741502][ T6112] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1026.847956][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 1026.855718][ T5941] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1026.860591][T25492] loop0: detected capacity change from 0 to 8 [ 1026.865402][ T5941] usb 2-1: config 255 has an invalid interface number: 10 but max is 0 [ 1026.879081][ T5941] usb 2-1: config 255 has no interface number 0 [ 1026.886043][ T5941] usb 2-1: config 255 interface 10 has no altsetting 0 [ 1026.893276][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 1026.902391][ T5941] usb 2-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=ed.bf [ 1026.912200][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.918255][T25492] SQUASHFS error: xz decompression failed, data probably corrupt [ 1026.920894][ T28] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1026.938998][ T5941] usb 2-1: Product: syz [ 1026.943190][ T5941] usb 2-1: Manufacturer: syz [ 1026.947922][T25492] SQUASHFS error: Failed to read block 0x108: -5 [ 1026.948468][ T5941] usb 2-1: SerialNumber: syz [ 1026.954266][T25492] SQUASHFS error: Unable to read metadata cache entry [106] [ 1026.964286][T25492] SQUASHFS error: Unable to read inode 0x11f [ 1026.966406][ T6112] usb 4-1: Using ep0 maxpacket: 16 [ 1026.979030][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.990425][ T6112] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1027.001833][ T28] usb 3-1: config 0 descriptor?? [ 1027.012929][ T6112] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 1027.022664][ T6112] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.032754][ T6112] usb 4-1: Product: syz [ 1027.037186][ T6112] usb 4-1: Manufacturer: syz [ 1027.042302][ T6112] usb 4-1: SerialNumber: syz [ 1027.049189][ T6112] usb 4-1: config 0 descriptor?? [ 1027.232476][ T28] usb 3-1: string descriptor 0 read error: -71 [ 1027.239764][ T28] usb 3-1: Found UVC 0.00 device (2833:0201) [ 1027.249077][ T28] usb 3-1: No valid video chain found. [ 1027.275912][ T5941] usb 2-1: Expected 3 endpoints, found: 0 [ 1027.282148][ T28] usb 3-1: USB disconnect, device number 53 [ 1027.293833][ T6112] usb 4-1: USB disconnect, device number 42 [ 1027.307428][ T5941] usb 2-1: USB disconnect, device number 30 [ 1027.467660][T17732] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1027.670783][T17732] usb 1-1: Using ep0 maxpacket: 16 [ 1027.677940][T17732] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1027.687961][T17732] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 7 [ 1027.701030][T17732] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1027.710558][T17732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.718685][T17732] usb 1-1: Product: syz [ 1027.722903][T17732] usb 1-1: Manufacturer: syz [ 1027.727584][T17732] usb 1-1: SerialNumber: syz [ 1028.006059][T17732] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1028.008484][T25498] loop1: detected capacity change from 0 to 8192 [ 1028.022682][ T27] audit: type=1326 audit(1758805719.875:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25499 comm="syz.3.8613" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e9d98ec29 code=0x0 [ 1028.025259][T17732] usb 1-1: unit 0 not found! [ 1028.064124][T17732] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1028.072792][T25498] loop1: p1 p4 < > [ 1028.076668][T25498] loop1: partition table partially beyond EOD, truncated [ 1028.087528][T17732] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1028.098267][T25498] loop1: p1 start 4261412864 is beyond EOD, truncated [ 1028.170607][T17732] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1028.189041][T17732] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1028.223704][T17732] usb 1-1: USB disconnect, device number 48 [ 1028.284018][T25506] loop3: detected capacity change from 0 to 512 [ 1028.373108][T12094] udevd[12094]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1028.415794][T21686] udevd[21686]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1028.430489][ T5917] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1028.582469][T25516] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 1028.589016][T25516] PKCS7: Only support pkcs7_signedData type [ 1028.601982][ T5772] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 1028.751219][T18298] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1028.807191][ T5772] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.831065][ T5772] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 1028.842182][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.861937][ T5772] usb 2-1: Product: syz [ 1028.866138][ T5772] usb 2-1: Manufacturer: syz [ 1028.877192][ T5772] usb 2-1: SerialNumber: syz [ 1028.885635][T25526] loop3: detected capacity change from 0 to 2048 [ 1028.916304][T25526] NILFS (loop3): couldn't mount RDWR because of unsupported optional features (40) [ 1028.964604][T18298] usb 3-1: Using ep0 maxpacket: 8 [ 1028.972822][T18298] usb 3-1: config 0 has an invalid interface number: 193 but max is 0 [ 1028.985901][T18298] usb 3-1: config 0 has no interface number 0 [ 1029.017714][T18298] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7c.ce [ 1029.044718][T18298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.078352][T18298] usb 3-1: Product: syz [ 1029.099434][T18298] usb 3-1: Manufacturer: syz [ 1029.125014][T18298] usb 3-1: SerialNumber: syz [ 1029.143521][ T5772] pxrc 2-1:1.0: Could not find endpoint [ 1029.151557][T18298] usb 3-1: config 0 descriptor?? [ 1029.179578][ T5772] usb 2-1: USB disconnect, device number 31 [ 1029.391926][T18298] usb_ehset_test: probe of 3-1:0.193 failed with error -32 [ 1029.411994][T18298] usb 3-1: USB disconnect, device number 54 [ 1029.535933][T25532] loop0: detected capacity change from 0 to 40427 [ 1029.552678][T25532] F2FS-fs (loop0): build fault injection attr: rate: 25, type: 0x7ffff [ 1029.561023][T25532] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0xe [ 1029.571754][T25532] F2FS-fs (loop0): invalid crc value [ 1029.583168][T25532] F2FS-fs (loop0): inject kvmalloc in f2fs_kvmalloc of f2fs_build_segment_manager+0x30ee/0x4730 [ 1029.596800][T25532] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-12) [ 1029.660832][ T8] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1029.790626][T25544] IPv6: addrconf: prefix option has invalid lifetime [ 1029.863581][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1029.884486][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1029.893483][ T8] usb 4-1: config 1 interface 0 altsetting 71 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1029.909824][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1029.923724][ T8] usb 4-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.40 [ 1029.939995][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.948553][ T8] usb 4-1: Product: syz [ 1029.959378][ T8] usb 4-1: SerialNumber: syz [ 1029.991693][T17732] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1030.198549][ T8] usbhid 4-1:1.0: can't add hid device: -71 [ 1030.205985][T17732] usb 1-1: Using ep0 maxpacket: 16 [ 1030.206325][ T8] usbhid: probe of 4-1:1.0 failed with error -71 [ 1030.213461][T17732] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1030.231282][ T8] usb 4-1: USB disconnect, device number 43 [ 1030.234758][T17732] usb 1-1: config 218 has an invalid interface number: 5 but max is 0 [ 1030.247555][T17732] usb 1-1: config 218 has no interface number 0 [ 1030.253848][T17732] usb 1-1: config 218 interface 5 has no altsetting 0 [ 1030.267185][T17732] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=f1.1d [ 1030.276699][T17732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.285362][T17732] usb 1-1: Product: syz [ 1030.289516][T17732] usb 1-1: Manufacturer: syz [ 1030.295258][T17732] usb 1-1: SerialNumber: syz [ 1030.450785][ T6112] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 1030.458460][ T5941] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 1030.527572][T17732] snd-usb-audio: probe of 1-1:218.5 failed with error -22 [ 1030.541467][T17732] usb 1-1: USB disconnect, device number 49 [ 1030.657729][ T5941] usb 2-1: config 7 interface 0 has no altsetting 0 [ 1030.665389][ T6112] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 1030.674523][ T6112] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.682662][ T6112] usb 3-1: Product: syz [ 1030.687009][ T6112] usb 3-1: Manufacturer: syz [ 1030.691654][ T6112] usb 3-1: SerialNumber: syz [ 1030.698330][ T5941] usb 2-1: string descriptor 0 read error: -22 [ 1030.704611][ T5941] usb 2-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 1030.714048][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.726498][ T6112] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 1030.735700][ T6112] usb 3-1: setting power ON [ 1030.741049][ T6112] dvb-usb: bulk message failed: -22 (2/0) [ 1030.764020][ T5941] usb 2-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 1030.775400][ T6112] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1030.786009][ T5941] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1030.803184][ T6112] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 1030.813119][ T5941] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 1030.821999][ T6112] dvb_usb_cxusb: probe of 3-1:4.0 failed with error -22 [ 1030.822095][T25561] loop3: detected capacity change from 0 to 512 [ 1030.830478][ T5941] usb 2-1: media controller created [ 1030.860189][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1030.875741][T25561] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1030.896787][T25561] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1030.929374][T25561] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1030.964820][T25561] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1030.984491][T25561] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 1030.999080][ T5772] usb 3-1: USB disconnect, device number 55 [ 1031.027337][T25561] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1031.034914][T25561] EXT4-fs (loop3): mount failed [ 1031.076911][ T5941] usb 2-1: USB disconnect, device number 32 [ 1031.206697][T25565] syz.0.8642: attempt to access beyond end of device [ 1031.206697][T25565] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1031.279436][T25572] loop3: detected capacity change from 0 to 1024 [ 1031.294472][T25572] hfsplus: failed to load catalog file [ 1031.464659][T25574] loop3: detected capacity change from 0 to 4096 [ 1031.475145][T25574] ntfs: (device loop3): parse_ntfs_boot_sector(): Mft record size (262144) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 1031.496813][T25574] ntfs: (device loop3): ntfs_fill_super(): Unsupported NTFS filesystem. [ 1031.797915][ T5941] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1031.903990][T25580] loop3: detected capacity change from 0 to 40427 [ 1031.913115][T25580] F2FS-fs (loop3): build fault injection attr: rate: 25, type: 0x7ffff [ 1031.922531][ T5772] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1031.924832][T25580] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7698c [ 1031.940611][T25580] F2FS-fs (loop3): invalid crc value [ 1031.950240][T25580] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920 [ 1031.964443][T25580] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1032.001438][ T5941] usb 1-1: Using ep0 maxpacket: 16 [ 1032.006680][T25580] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 1032.008822][ T5941] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1032.032910][ T5941] usb 1-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1032.035457][T25580] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1032.046216][T17732] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1032.071086][ T5941] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1032.107316][ T5941] usb 1-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 1032.118569][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.127356][ T5941] usb 1-1: Product: syz [ 1032.127586][ T6017] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x67/0x210 [ 1032.133992][ T5941] usb 1-1: Manufacturer: syz [ 1032.151698][ T5941] usb 1-1: SerialNumber: syz [ 1032.153006][ T5772] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.177906][ T5772] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1032.189366][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.200129][ T6017] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x516/0x19c0 [ 1032.212386][ T5772] usb 3-1: Product: syz [ 1032.213473][ T6017] F2FS-fs (loop3): invalid blkaddr: 514, type: 10, run fsck to fix. [ 1032.227487][ T5772] usb 3-1: Manufacturer: syz [ 1032.229926][ C1] F2FS-fs (loop3): inject write IO error in f2fs_write_end_io of blk_update_request+0x597/0xe40 [ 1032.232104][ T5772] usb 3-1: SerialNumber: syz [ 1032.242683][ C1] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1032.256985][ T5772] usb 3-1: config 0 descriptor?? [ 1032.262415][ T6017] F2FS-fs (loop3): do_checkpoint failed err:-5, stop checkpoint [ 1032.275668][ T5772] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1032.292354][T17732] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1032.301489][T17732] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 1032.309716][T17732] usb 2-1: config 0 has no interface number 0 [ 1032.317062][T17732] usb 2-1: config 0 interface 107 altsetting 140 bulk endpoint 0x4 has invalid maxpacket 64 [ 1032.328718][T17732] usb 2-1: config 0 interface 107 has no altsetting 0 [ 1032.338986][T17732] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice=a5.5f [ 1032.348637][T17732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.357058][T17732] usb 2-1: Product: syz [ 1032.361804][T17732] usb 2-1: Manufacturer: syz [ 1032.374370][T17732] usb 2-1: SerialNumber: syz [ 1032.388533][T17732] usb 2-1: config 0 descriptor?? [ 1032.395185][T25584] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1032.420341][ T5941] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input86 [ 1032.432733][ T5142] bcm5974 1-1:1.0: could not read from device [ 1032.448122][ T5142] bcm5974 1-1:1.0: could not read from device [ 1032.455502][ T5941] usb 1-1: USB disconnect, device number 50 [ 1032.473385][ T5142] bcm5974 1-1:1.0: could not read from device [ 1032.579095][ T5772] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 1032.606504][ T5772] usb 3-1: USB disconnect, device number 56 [ 1032.629094][T21686] udevd[21686]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1032.656920][T17732] ti_usb_3410_5052 2-1:0.107: TI USB 5052 2 port adapter converter detected [ 1032.666075][T17732] ti_usb_3410_5052 2-1:0.107: missing endpoints [ 1032.687161][T17732] usb 2-1: USB disconnect, device number 33 [ 1032.826319][T25592] loop3: detected capacity change from 0 to 8192 [ 1033.010190][T25596] loop3: detected capacity change from 0 to 512 [ 1033.019935][T25596] EXT4-fs (loop3): can't mount with both data=journal and dax [ 1033.128714][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1033.135218][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1033.572948][T17732] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1033.648181][ T5772] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1033.797366][T17732] usb 4-1: Using ep0 maxpacket: 16 [ 1033.808876][T17732] usb 4-1: too many configurations: 60, using maximum allowed: 8 [ 1033.839397][T17732] usb 4-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 1033.855690][ T5772] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1033.861412][T17732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 1033.876101][ T5772] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.882757][T17732] usb 4-1: Product: syz [ 1033.890971][T17732] usb 4-1: Manufacturer: syz [ 1033.901402][T17732] usb 4-1: SerialNumber: syz [ 1033.907468][ T5772] usb 1-1: config 220 has no interface number 2 [ 1033.915342][T17732] usb 4-1: config 0 descriptor?? [ 1033.921332][ T5772] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1033.927226][T17732] pwc: Philips SPC 880NC USB webcam detected. [ 1033.957198][ T5772] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1033.967786][ T5772] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1033.978574][ T5772] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1034.006953][ T5772] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1034.016343][ T5772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.037871][ T5772] usb 1-1: Product: syz [ 1034.042074][ T5772] usb 1-1: Manufacturer: syz [ 1034.059369][ T5772] usb 1-1: SerialNumber: syz [ 1034.109052][T25621] loop1: detected capacity change from 0 to 40427 [ 1034.130727][T25621] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 1034.160915][T25621] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1dff [ 1034.177821][T25621] F2FS-fs (loop1): invalid crc value [ 1034.188073][T17732] pwc: Warning: more than 1 configuration available. [ 1034.196892][T25621] F2FS-fs (loop1): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x4552/0x6c20 [ 1034.211883][T17732] pwc: Failed to set LED on/off time (-71) [ 1034.214613][T25621] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-12) [ 1034.241043][T17732] pwc: send_video_command error -71 [ 1034.255962][T17732] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1034.281120][T17732] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 1034.312789][T17732] usb 4-1: USB disconnect, device number 44 [ 1034.333081][ T5772] usb 1-1: selecting invalid altsetting 0 [ 1034.355874][ T5772] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1034.406923][ T5772] usb 1-1: No valid video chain found. [ 1034.430898][ T5772] usb 1-1: selecting invalid altsetting 0 [ 1034.436681][ T5772] usbtest: probe of 1-1:220.1 failed with error -22 [ 1034.479713][ T5772] usb 1-1: USB disconnect, device number 51 [ 1034.553216][T25627] loop2: detected capacity change from 0 to 40427 [ 1034.588859][T25627] F2FS-fs (loop2): quotafile must be on filesystem root [ 1035.293533][T25631] loop1: detected capacity change from 0 to 40427 [ 1035.312174][T25631] F2FS-fs (loop1): Corrupted extension count (720933 + 1 > 64) [ 1035.326670][T25631] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1035.335196][T25631] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 1035.341776][T25647] loop3: detected capacity change from 0 to 2048 [ 1035.344182][T25631] F2FS-fs (loop1): Image doesn't support compression [ 1035.369580][T25631] F2FS-fs (loop1): Image doesn't support compression [ 1035.379837][ T5772] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 1035.395168][T25631] F2FS-fs (loop1): invalid crc value [ 1035.406543][T25631] F2FS-fs (loop1): SIT is corrupted node# 0 vs 7 [ 1035.418077][T25647] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1035.418458][T25631] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 1035.590368][ T5772] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1035.611933][ T5772] usb 1-1: not running at top speed; connect to a high speed hub [ 1035.637618][ T5772] usb 1-1: config 106 has an invalid interface number: 8 but max is 0 [ 1035.667478][ T5772] usb 1-1: config 106 has no interface number 0 [ 1035.689718][ T5772] usb 1-1: config 106 interface 8 has no altsetting 0 [ 1035.721859][ T5772] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 1035.742210][ T5772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.775539][ T5772] usb 1-1: Product: syz [ 1035.779753][ T5772] usb 1-1: Manufacturer: syz [ 1035.784373][ T5772] usb 1-1: SerialNumber: syz [ 1035.936395][T25646] loop2: detected capacity change from 0 to 32768 [ 1035.963959][T25646] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.8677 (25646) [ 1036.021638][T25646] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1036.054967][ T5772] kalmia 1-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 1036.066951][T25646] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 1036.079233][ T5772] kalmia: probe of 1-1:106.8 failed with error -22 [ 1036.086960][T25646] BTRFS info (device loop2): force clearing of disk cache [ 1036.089437][T25662] loop3: detected capacity change from 0 to 8 [ 1036.094096][T25646] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1036.094116][T25646] BTRFS info (device loop2): force zlib compression, level 3 [ 1036.094138][T25646] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1036.125423][T25660] loop1: detected capacity change from 0 to 8192 [ 1036.137391][T25646] BTRFS info (device loop2): force zstd compression, level 3 [ 1036.149322][ T5772] usb 1-1: USB disconnect, device number 52 [ 1036.155901][T25662] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1036.174889][T25646] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1036.189937][T25646] BTRFS info (device loop2): use lzo compression, level 0 [ 1036.192509][T25660] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1036.198842][T25662] SQUASHFS error: Failed to read block 0x91: -5 [ 1036.230209][T25646] BTRFS info (device loop2): using free space tree [ 1036.254592][T25660] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 2048) [ 1036.261766][T25662] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1036.282227][T25660] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1036.291382][T25662] SQUASHFS error: Unable to read inode 0x11f [ 1036.306334][T25660] NILFS (loop1): unable to fall back to spare super block [ 1036.318628][T25660] NILFS (loop1): error -22 while searching super root [ 1036.438340][T25646] BTRFS info (device loop2): enabling ssd optimizations [ 1036.446314][T25646] BTRFS info (device loop2): auto enabling async discard [ 1036.533256][T25646] BTRFS info (device loop2): rebuilding free space tree [ 1036.783716][ T6007] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1036.866095][T25689] loop0: detected capacity change from 0 to 1024 [ 1036.944349][T25689] EXT4-fs (loop0): The Hurd can't support 64-bit file systems [ 1037.393670][T25705] loop3: detected capacity change from 0 to 4096 [ 1037.445018][T25705] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1037.507383][ T5772] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1037.543382][T25705] ntfs3: loop3: Failed to load $Extend (-22). [ 1037.563973][T25705] ntfs3: loop3: Failed to initialize $Extend. [ 1037.709398][ T5772] usb 2-1: config 2 has an invalid interface number: 207 but max is 1 [ 1037.718928][ T5772] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.744972][ T5772] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1037.745015][ T5772] usb 2-1: config 2 has no interface number 0 [ 1037.745054][ T5772] usb 2-1: config 2 interface 207 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1037.745079][ T5772] usb 2-1: config 2 interface 207 has no altsetting 0 [ 1037.747855][ T5772] usb 2-1: New USB device found, idVendor=1410, idProduct=9010, bcdDevice=95.7e [ 1037.747882][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.747900][ T5772] usb 2-1: Product: syz [ 1037.747914][ T5772] usb 2-1: Manufacturer: syz [ 1037.747928][ T5772] usb 2-1: SerialNumber: syz [ 1038.012228][ T5772] qmi_wwan 2-1:2.207: skipping garbage [ 1038.017769][ T5772] qmi_wwan 2-1:2.207: skipping garbage [ 1038.048520][ T5772] qmi_wwan 2-1:2.207: bogus CDC Union: master=0, slave=0 [ 1038.069600][ T5772] qmi_wwan: probe of 2-1:2.207 failed with error -22 [ 1038.086228][ T5772] usb 2-1: USB disconnect, device number 34 [ 1038.152180][T25721] loop3: detected capacity change from 0 to 2048 [ 1038.190963][T25721] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1038.244400][T25714] loop0: detected capacity change from 0 to 32768 [ 1038.277560][T25714] JBD2: Ignoring recovery information on journal [ 1038.407855][T25714] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 1038.527544][T25734] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1038.547429][T25734] cramfs: wrong magic [ 1038.575464][ T6006] ocfs2: Unmounting device (7,0) on (node local) [ 1038.654001][ T5772] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1038.827636][T25742] loop2: detected capacity change from 0 to 2048 [ 1038.898316][ T5772] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 1038.919782][ T5772] usb 4-1: config 0 has no interface number 0 [ 1038.949996][ T5772] usb 4-1: config 0 interface 113 altsetting 2 has an invalid endpoint with address 0x14, skipping [ 1038.982859][ T5772] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1039.005740][ T5772] usb 4-1: config 0 interface 113 has no altsetting 0 [ 1039.015241][T18298] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1039.038665][ T5772] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1039.047905][ T5941] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1039.067461][ T5772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.080086][ T5772] usb 4-1: Product: syz [ 1039.084285][ T5772] usb 4-1: Manufacturer: syz [ 1039.089025][ T5772] usb 4-1: SerialNumber: syz [ 1039.096570][ T5772] usb 4-1: config 0 descriptor?? [ 1039.107603][ T5772] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1039.218140][T18298] usb 1-1: Using ep0 maxpacket: 16 [ 1039.225397][T18298] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1039.241297][ T5941] usb 2-1: config 0 has an invalid interface number: 170 but max is 0 [ 1039.241439][T18298] usb 1-1: config 11 has an invalid interface number: 56 but max is 0 [ 1039.264811][ T5941] usb 2-1: config 0 has no interface number 0 [ 1039.269418][T18298] usb 1-1: config 11 has no interface number 0 [ 1039.270926][ T5941] usb 2-1: config 0 interface 170 has no altsetting 0 [ 1039.298781][T18298] usb 1-1: config 11 interface 56 altsetting 8 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1039.309818][ T5941] usb 2-1: New USB device found, idVendor=c383, idProduct=abd3, bcdDevice=60.bf [ 1039.336575][T18298] usb 1-1: config 11 interface 56 altsetting 8 endpoint 0xA has invalid wMaxPacketSize 0 [ 1039.336574][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.355890][ T5941] usb 2-1: config 0 descriptor?? [ 1039.376652][ T5772] usb 4-1: USB disconnect, device number 45 [ 1039.383440][ T5941] usb 2-1: bad CDC descriptors [ 1039.405629][ T5941] usb 2-1: bad CDC descriptors [ 1039.415613][T18298] usb 1-1: config 11 interface 56 has no altsetting 0 [ 1039.443810][T18298] usb 1-1: New USB device found, idVendor=0c52, idProduct=a02c, bcdDevice= 0.75 [ 1039.453089][T18298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.470456][T18298] usb 1-1: Product: syz [ 1039.475296][T18298] usb 1-1: Manufacturer: syz [ 1039.480054][T18298] usb 1-1: SerialNumber: syz [ 1039.620772][ T28] usb 2-1: USB disconnect, device number 35 [ 1039.710860][T18298] ftdi_sio 1-1:11.56: FTDI USB Serial Device converter detected [ 1039.719400][T18298] usb 1-1: Detected SIO [ 1039.724185][T18298] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 10 [ 1039.733672][T18298] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1039.745709][T18298] usb 1-1: USB disconnect, device number 53 [ 1039.756253][T18298] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1039.766840][T18298] ftdi_sio 1-1:11.56: device disconnected [ 1039.816987][ T5941] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1040.023288][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1040.034481][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 102, changing to 7 [ 1040.050411][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24624, setting to 1024 [ 1040.070735][ T5941] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1040.080462][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.088852][ T5941] usb 3-1: Product: syz [ 1040.093185][ T5941] usb 3-1: Manufacturer: syz [ 1040.099559][ T5941] usb 3-1: SerialNumber: syz [ 1040.109427][ T5941] usb 3-1: config 0 descriptor?? [ 1040.117930][ T5941] usb 3-1: 0:0 : invalid sync pipe. bmAttributes b9, bLength 9, bSynchAddress 66 [ 1040.228590][T25758] loop1: detected capacity change from 0 to 1024 [ 1040.236786][T25758] EXT4-fs: Ignoring removed nobh option [ 1040.242512][T25758] EXT4-fs: Ignoring removed nobh option [ 1040.252669][T25758] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1040.262722][T25758] EXT4-fs error (device loop1): ext4_get_journal_inode:5807: comm syz.1.8720: inode #4294967295: comm syz.1.8720: iget: illegal inode # [ 1040.287431][T25758] EXT4-fs (loop1): no journal found [ 1040.292786][T25758] EXT4-fs (loop1): can't get journal size [ 1040.314381][T25758] EXT4-fs (loop1): failed to initialize system zone (-22) [ 1040.346536][T25758] EXT4-fs (loop1): mount failed [ 1040.377292][ T5966] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 1040.407617][T25761] loop0: detected capacity change from 0 to 512 [ 1040.433576][ T5941] usb 3-1: USB disconnect, device number 57 [ 1040.448020][T25761] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1040.472063][T25761] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.8721: bg 0: block 5: invalid block bitmap [ 1040.528321][T25761] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 1040.558935][T25761] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.8721: invalid indirect mapped block 3 (level 2) [ 1040.572658][T25765] loop1: detected capacity change from 0 to 512 [ 1040.582677][T25761] EXT4-fs (loop0): 2 truncates cleaned up [ 1040.590554][T25761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1040.627554][T25765] FAT-fs (loop1): bogus number of FAT sectors [ 1040.639955][ T5966] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1040.645330][T25765] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1040.688190][ T5966] usb 4-1: not running at top speed; connect to a high speed hub [ 1040.711425][ T5966] usb 4-1: config 4 has an invalid interface number: 159 but max is 0 [ 1040.722802][ T5966] usb 4-1: config 4 has an invalid descriptor of length 36, skipping remainder of the config [ 1040.734680][ T5966] usb 4-1: config 4 has no interface number 0 [ 1040.741895][ T5966] usb 4-1: config 4 interface 159 has no altsetting 0 [ 1040.751601][ T5966] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=b2.a3 [ 1040.767551][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.789194][ T5966] usb 4-1: Product: syz [ 1040.794739][ T5966] usb 4-1: Manufacturer: syz [ 1040.804041][ T5966] usb 4-1: SerialNumber: syz [ 1040.854930][ T6006] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.030277][T25769] loop1: detected capacity change from 0 to 8192 [ 1041.065207][T25773] loop0: detected capacity change from 0 to 128 [ 1041.070933][ T5966] usb 4-1: USB disconnect, device number 46 [ 1041.106651][T12094] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1041.360847][T25779] loop0: detected capacity change from 0 to 4096 [ 1041.402859][T25779] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 1041.444208][T25779] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1041.474495][T25779] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1041.502633][T25779] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1041.523038][T25779] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1041.536443][T25779] ntfs: volume version 3.1. [ 1041.546424][T25779] syz.0.8729: attempt to access beyond end of device [ 1041.546424][T25779] loop0: rw=0, sector=4108, nr_sectors = 4 limit=4096 [ 1041.564516][T25779] ntfs: (device loop0): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x403. [ 1041.575269][T25779] syz.0.8729: attempt to access beyond end of device [ 1041.575269][T25779] loop0: rw=0, sector=4112, nr_sectors = 4 limit=4096 [ 1041.595305][T25779] ntfs: (device loop0): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x404. [ 1041.610377][T25779] ntfs: (device loop0): ntfs_check_logfile(): Error mapping $LogFile page (index 0). [ 1041.620463][T25779] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1041.730748][ T28] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1041.763066][ T5941] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1041.959679][ T28] usb 2-1: config index 0 descriptor too short (expected 32820, got 52) [ 1041.979199][ T28] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.993737][ T5941] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 1042.008933][ T5941] usb 3-1: config 0 has an invalid interface number: 255 but max is 2 [ 1042.021983][ T28] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= a.97 [ 1042.040846][ T5941] usb 3-1: config 0 has no interface number 0 [ 1042.047079][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.058288][ T5941] usb 3-1: config 0 has no interface number 1 [ 1042.065546][ T28] usb 2-1: Product: syz [ 1042.069929][ T5941] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1042.081368][ T28] usb 2-1: Manufacturer: syz [ 1042.086423][ T28] usb 2-1: SerialNumber: syz [ 1042.092176][ T5941] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1042.110274][ T28] usb 2-1: config 0 descriptor?? [ 1042.126973][ T28] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1042.134078][ T5941] usb 3-1: config 0 interface 255 has no altsetting 0 [ 1042.143458][ T5941] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1042.158073][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.171485][ T28] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 1042.187273][ T5941] usb 3-1: config 0 descriptor?? [ 1042.219838][T21686] udevd[21686]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1042.393566][ T5772] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 1042.398789][ T28] usb 2-1: USB disconnect, device number 36 [ 1042.436437][ T5941] usb 3-1: Could not set interface, error -71 [ 1042.462693][ T5941] usb 3-1: selecting invalid altsetting 0 [ 1042.470004][ T5941] usb 3-1: Could not set interface, error -22 [ 1042.488392][ T5941] usb 3-1: USB disconnect, device number 58 [ 1042.598727][ T5772] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1042.607113][ T5772] usb 1-1: not running at top speed; connect to a high speed hub [ 1042.616804][ T5772] usb 1-1: config 1 has an invalid interface number: 138 but max is 0 [ 1042.625480][ T5772] usb 1-1: config 1 has no interface number 0 [ 1042.631988][ T5772] usb 1-1: config 1 interface 138 has no altsetting 0 [ 1042.641644][ T5772] usb 1-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 1042.651222][ T5772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.659234][ T5772] usb 1-1: Product: syz [ 1042.663987][ T5772] usb 1-1: Manufacturer: syz [ 1042.668613][ T5772] usb 1-1: SerialNumber: syz [ 1042.914950][ T5772] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1042.955321][ T5772] usb 1-1: USB disconnect, device number 54 [ 1043.016777][T11374] udevd[11374]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 1043.188807][T25800] loop2: detected capacity change from 0 to 8 [ 1043.207998][T25800] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1043.225858][T25800] cramfs: wrong endianness [ 1043.375727][T25803] loop2: detected capacity change from 0 to 128 [ 1043.443842][T21686] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1044.323923][T25809] loop0: detected capacity change from 0 to 32768 [ 1044.354516][T25809] (syz.0.8743,25809,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xb6731743. Applying ECC. [ 1044.386261][T25809] (syz.0.8743,25809,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1044.400811][T25809] (syz.0.8743,25809,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1044.419777][T25809] (syz.0.8743,25809,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0xa7efa3e4. Applying ECC. [ 1044.445174][T25809] (syz.0.8743,25809,1):ocfs2_verify_heartbeat:814 ERROR: Cannot heartbeat on a locally mounted device. [ 1044.496563][T25809] (syz.0.8743,25809,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1044.759997][T25811] loop2: detected capacity change from 0 to 32768 [ 1044.806877][T25811] BTRFS: device fsid f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 devid 1 transid 8 /dev/loop2 scanned by syz.2.8744 (25811) [ 1044.869338][T25816] loop0: detected capacity change from 0 to 16 [ 1044.876808][T25811] BTRFS info (device loop2): first mount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 1044.886870][T25816] erofs: (device loop0): mounted with root inode @ nid 36. [ 1044.921734][T25811] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1044.959227][T25811] BTRFS info (device loop2): using free space tree [ 1045.200632][T25811] BTRFS info (device loop2): enabling ssd optimizations [ 1045.233728][T25811] BTRFS info (device loop2): auto enabling async discard [ 1045.377321][ T6007] BTRFS info (device loop2): last unmount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 1045.868860][T25831] loop0: detected capacity change from 0 to 32768 [ 1045.910158][T25831] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 8 /dev/loop0 scanned by syz.0.8747 (25831) [ 1045.974747][T25831] BTRFS info (device loop0): first mount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 1046.006889][T25831] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1046.015646][T25831] BTRFS info (device loop0): using free space tree [ 1046.270833][T25831] BTRFS info (device loop0): enabling ssd optimizations [ 1046.326793][T25831] BTRFS info (device loop0): auto enabling async discard [ 1046.550837][ T6006] BTRFS info (device loop0): last unmount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 1046.695967][T25836] loop2: detected capacity change from 0 to 32768 [ 1046.733603][T25836] BTRFS: device fsid a830dcec-d20e-42dc-8160-bf13f3286f97 devid 1 transid 8 /dev/loop2 scanned by syz.2.8748 (25836) [ 1046.782356][T25836] BTRFS info (device loop2): first mount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97 [ 1046.813998][T25836] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1046.834134][T25836] BTRFS info (device loop2): using free space tree [ 1047.053471][T25836] BTRFS info (device loop2): enabling ssd optimizations [ 1047.095639][T25836] BTRFS info (device loop2): auto enabling async discard [ 1047.271945][ T6007] BTRFS info (device loop2): last unmount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97 [ 1047.284437][T25872] loop0: detected capacity change from 0 to 16 [ 1047.302873][T25872] erofs: (device loop0): mounted with root inode @ nid 36. [ 1047.614366][T25878] loop2: detected capacity change from 0 to 16 [ 1047.633496][T25878] erofs: (device loop2): mounted with root inode @ nid 36. [ 1047.747936][T25863] loop3: detected capacity change from 0 to 32768 [ 1047.773205][T25863] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop3 scanned by syz.3.8750 (25863) [ 1047.790798][T25863] BTRFS info (device loop3): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 1047.842745][T25863] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1047.908344][T25863] BTRFS info (device loop3): using free space tree [ 1047.932862][T25880] loop2: detected capacity change from 0 to 128 [ 1048.109850][T25863] BTRFS info (device loop3): enabling ssd optimizations [ 1048.133590][T25863] BTRFS info (device loop3): auto enabling async discard [ 1048.305369][T25898] loop2: detected capacity change from 0 to 1024 [ 1048.348532][T25898] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 1048.359475][ T6017] BTRFS info (device loop3): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 1048.737205][T25877] loop1: detected capacity change from 0 to 32768 [ 1048.871222][ T5941] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1048.890444][T25877] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 1049.018255][ T6012] ocfs2: Unmounting device (7,1) on (node local) [ 1049.080907][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1049.119773][ T5941] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1049.159855][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.180838][ T5941] usb 3-1: Product: syz [ 1049.192210][ T5941] usb 3-1: Manufacturer: syz [ 1049.196866][ T5941] usb 3-1: SerialNumber: syz [ 1049.247249][ T5941] usb 3-1: config 0 descriptor?? [ 1049.261077][ T5941] em28xx 3-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 1049.277387][ T5941] em28xx 3-1:0.0: Device initialization failed. [ 1049.294747][ T5941] em28xx 3-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 1049.512012][ T5941] usb 3-1: USB disconnect, device number 59 [ 1049.572207][T25903] loop3: detected capacity change from 0 to 32768 [ 1049.609144][T25903] BTRFS: device fsid 9c2593b3-5c40-4e29-8ff3-7b58260955bc devid 1 transid 8 /dev/loop3 scanned by syz.3.8756 (25903) [ 1049.648010][T25903] BTRFS info (device loop3): first mount of filesystem 9c2593b3-5c40-4e29-8ff3-7b58260955bc [ 1049.675907][T25903] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1049.695446][T25903] BTRFS info (device loop3): using free space tree [ 1049.816961][T25907] loop1: detected capacity change from 0 to 32768 [ 1049.834961][T25907] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 8 /dev/loop1 scanned by syz.1.8758 (25907) [ 1049.849884][T25903] BTRFS info (device loop3): enabling ssd optimizations [ 1049.867665][T25907] BTRFS info (device loop1): first mount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 1049.913739][T25903] BTRFS info (device loop3): auto enabling async discard [ 1049.930032][T25907] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1049.959769][T25907] BTRFS info (device loop1): using free space tree [ 1050.076529][ T6017] BTRFS info (device loop3): last unmount of filesystem 9c2593b3-5c40-4e29-8ff3-7b58260955bc [ 1050.122725][T25907] BTRFS info (device loop1): enabling ssd optimizations [ 1050.158790][T25907] BTRFS info (device loop1): auto enabling async discard [ 1050.387215][ T6012] BTRFS info (device loop1): last unmount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 1050.413101][T25941] loop2: detected capacity change from 0 to 2048 [ 1050.515609][T25941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1050.717801][T25948] loop3: detected capacity change from 0 to 2048 [ 1050.726604][ T6007] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.832894][T25948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1050.875464][T25948] ext4 filesystem being mounted at /2136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1050.958826][ T6017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.106123][T25953] loop3: detected capacity change from 0 to 512 [ 1051.166029][T25953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1051.244430][ T6112] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1051.348888][ T6017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.364379][T25946] loop1: detected capacity change from 0 to 32768 [ 1051.399747][T25946] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.8761 (25946) [ 1051.478626][T25946] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1051.489039][ T6112] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 1051.505287][T25946] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1051.532008][T25956] loop3: detected capacity change from 0 to 512 [ 1051.547004][ T6112] usb 3-1: string descriptor 0 read error: -22 [ 1051.553955][ T6112] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1051.563236][T25946] BTRFS info (device loop1): using free space tree [ 1051.588910][T25956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1051.621553][ T6112] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.695146][ T6112] usb 3-1: found format II with max.bitrate = 65528, frame size=65535 [ 1051.711526][ T6112] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1051.743224][T25970] loop0: detected capacity change from 0 to 512 [ 1051.802827][ T6017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.822442][T25946] BTRFS info (device loop1): enabling ssd optimizations [ 1051.838322][T25970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.861961][T25946] BTRFS info (device loop1): auto enabling async discard [ 1051.962924][ T6112] usb 3-1: USB disconnect, device number 60 [ 1052.043253][T25978] loop3: detected capacity change from 0 to 512 [ 1052.068927][ T6006] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.086816][ T6012] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1052.128945][T25978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.277424][ T6017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.369339][T21686] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop1 scanned by udevd (21686) [ 1053.080219][T25982] loop0: detected capacity change from 0 to 32768 [ 1053.125573][T25982] BTRFS: device fsid a4d06b90-61a4-49cd-bf5f-2183c3574322 devid 1 transid 8 /dev/loop0 scanned by syz.0.8767 (25982) [ 1053.200371][T25982] BTRFS info (device loop0): first mount of filesystem a4d06b90-61a4-49cd-bf5f-2183c3574322 [ 1053.230574][T25984] loop1: detected capacity change from 0 to 32768 [ 1053.237265][T25982] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 1053.262197][T25987] loop3: detected capacity change from 0 to 32768 [ 1053.269223][T25984] BTRFS: device fsid 18898830-c59e-4026-919d-fe1055706c2c devid 1 transid 8 /dev/loop1 scanned by syz.1.8768 (25984) [ 1053.282416][T25982] BTRFS info (device loop0): using free space tree [ 1053.308195][T25984] BTRFS info (device loop1): first mount of filesystem 18898830-c59e-4026-919d-fe1055706c2c [ 1053.318699][T25987] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop3 scanned by syz.3.8769 (25987) [ 1053.362877][T25984] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1053.381689][T25987] BTRFS info (device loop3): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 1053.413272][T25989] loop2: detected capacity change from 0 to 32768 [ 1053.413776][T25984] BTRFS info (device loop1): using free space tree [ 1053.447071][T25989] BTRFS: device fsid 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 devid 1 transid 8 /dev/loop2 scanned by syz.2.8770 (25989) [ 1053.463404][T25987] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1053.474702][T25987] BTRFS info (device loop3): using free space tree [ 1053.507835][T25989] BTRFS info (device loop2): first mount of filesystem 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 [ 1053.557880][T25982] BTRFS info (device loop0): enabling ssd optimizations [ 1053.574422][T25982] BTRFS info (device loop0): auto enabling async discard [ 1053.588331][T25989] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1053.653333][T25989] BTRFS info (device loop2): using free space tree [ 1053.692086][T25984] BTRFS info (device loop1): enabling ssd optimizations [ 1053.712313][T25987] BTRFS info (device loop3): enabling ssd optimizations [ 1053.756928][T25984] BTRFS info (device loop1): auto enabling async discard [ 1053.764329][T25987] BTRFS info (device loop3): auto enabling async discard [ 1053.807135][ T6006] BTRFS info (device loop0): last unmount of filesystem a4d06b90-61a4-49cd-bf5f-2183c3574322 [ 1053.924503][ T6012] BTRFS info (device loop1): last unmount of filesystem 18898830-c59e-4026-919d-fe1055706c2c [ 1053.982157][T25989] BTRFS info (device loop2): enabling ssd optimizations [ 1053.996402][T25989] BTRFS info (device loop2): auto enabling async discard [ 1054.162686][ T6017] BTRFS info (device loop3): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 1054.197477][ T6007] BTRFS info (device loop2): last unmount of filesystem 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 [ 1054.231457][T12094] BTRFS: device fsid 18898830-c59e-4026-919d-fe1055706c2c devid 1 transid 9 /dev/loop1 scanned by udevd (12094) [ 1054.279770][T21686] BTRFS: device fsid a4d06b90-61a4-49cd-bf5f-2183c3574322 devid 1 transid 9 /dev/loop0 scanned by udevd (21686) [ 1054.587453][ T5917] BTRFS: device fsid 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 devid 1 transid 9 /dev/loop2 scanned by udevd (5917) [ 1055.143587][T26069] loop3: detected capacity change from 0 to 2048 [ 1055.150477][T26071] loop1: detected capacity change from 0 to 2048 [ 1055.234508][T26069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1055.248844][T26071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1055.431026][ T6017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.455127][ T6012] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.637050][T26077] loop3: detected capacity change from 0 to 512 [ 1055.761622][T26077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1055.910693][ T6017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.598382][T26078] loop1: detected capacity change from 0 to 32768 [ 1056.633612][T26078] BTRFS: device fsid 16bad5ef-498e-43ba-8a30-25ddcaa179c7 devid 1 transid 8 /dev/loop1 scanned by syz.1.8779 (26078) [ 1056.678888][T26078] BTRFS info (device loop1): first mount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 1056.699751][T26078] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1056.727958][T26078] BTRFS info (device loop1): using free space tree [ 1056.892560][T26078] BTRFS info (device loop1): enabling ssd optimizations [ 1056.945033][T26078] BTRFS info (device loop1): auto enabling async discard [ 1057.134407][ T6012] BTRFS info (device loop1): last unmount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 1057.425118][T26100] loop1: detected capacity change from 0 to 128 [ 1058.662192][T26102] loop1: detected capacity change from 0 to 32768 [ 1058.704554][T26102] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 1058.732838][T26102] dlm: no local IP address has been set [ 1058.736682][T26104] loop0: detected capacity change from 0 to 32768 [ 1058.748273][T26102] dlm: cannot start dlm midcomms -107 [ 1058.753686][T26102] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 1058.833603][T26104] BTRFS: device fsid d4515e72-4b5f-44ec-805d-b3edf811e7f1 devid 1 transid 8 /dev/loop0 scanned by syz.0.8783 (26104) [ 1058.886839][T26104] BTRFS info (device loop0): first mount of filesystem d4515e72-4b5f-44ec-805d-b3edf811e7f1 [ 1058.929761][T26104] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1058.952030][T26104] BTRFS info (device loop0): using free space tree [ 1059.028423][T26122] loop1: detected capacity change from 0 to 64 [ 1059.090857][T26104] BTRFS info (device loop0): enabling ssd optimizations [ 1059.131069][T26104] BTRFS info (device loop0): auto enabling async discard [ 1059.313872][T26127] loop1: detected capacity change from 0 to 1024 [ 1059.411872][ T6006] BTRFS info (device loop0): last unmount of filesystem d4515e72-4b5f-44ec-805d-b3edf811e7f1 [ 1059.667372][T12094] BTRFS: device fsid d4515e72-4b5f-44ec-805d-b3edf811e7f1 devid 1 transid 9 /dev/loop0 scanned by udevd (12094) [ 1060.480527][T26129] loop1: detected capacity change from 0 to 32768 [ 1060.509705][T26129] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.8788 (26129) [ 1060.560854][T26129] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1060.597687][T26129] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1060.628133][T26129] BTRFS info (device loop1): using free space tree [ 1060.800374][T26129] BTRFS info (device loop1): enabling ssd optimizations [ 1060.807521][T26129] BTRFS info (device loop1): auto enabling async discard [ 1061.000671][ T6012] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1061.236599][T26106] loop2: detected capacity change from 0 to 131072 [ 1061.279256][T26134] loop0: detected capacity change from 0 to 32768 [ 1061.337797][T26134] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1061.349241][T26134] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1061.376207][T26106] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1061.428853][T26134] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1061.467679][T17732] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1061.477259][T17732] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1061.644104][T26106] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1061.721835][T17732] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 228ms [ 1061.741250][T17732] gfs2: fsid=syz:syz.0: jid=0: Done [ 1061.751011][T26134] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1062.358231][T26159] loop1: detected capacity change from 0 to 32768 [ 1062.383864][T26159] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop1 scanned by syz.1.8791 (26159) [ 1062.445609][T26159] BTRFS info (device loop1): first mount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 1062.478876][T26159] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1062.488378][T26159] BTRFS info (device loop1): using free space tree [ 1062.645293][T26159] BTRFS info (device loop1): enabling ssd optimizations [ 1062.687680][T26159] BTRFS info (device loop1): auto enabling async discard [ 1062.936543][ T6012] BTRFS info (device loop1): last unmount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 1063.025590][T26179] loop2: detected capacity change from 0 to 1164 [ 1063.280298][T21686] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 9 /dev/loop1 scanned by udevd (21686) [ 1063.665477][T26187] loop2: detected capacity change from 0 to 2364 [ 1063.981197][T26193] loop2: detected capacity change from 0 to 512 [ 1064.063674][T26193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1064.258926][T26189] loop0: detected capacity change from 0 to 32768 [ 1064.271304][ T6007] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.296866][T26189] BTRFS: device fsid cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 devid 1 transid 8 /dev/loop0 scanned by syz.0.8794 (26189) [ 1064.370023][T26189] BTRFS info (device loop0): first mount of filesystem cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 [ 1064.395560][T26189] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1064.413908][T26189] BTRFS info (device loop0): using free space tree [ 1064.531028][T26189] BTRFS info (device loop0): enabling ssd optimizations [ 1064.538029][T26189] BTRFS info (device loop0): auto enabling async discard [ 1064.734938][ T6006] BTRFS info (device loop0): last unmount of filesystem cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 [ 1064.812134][T26191] loop1: detected capacity change from 0 to 32768 [ 1064.838440][T26191] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1064.859074][T26191] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1064.973883][T26191] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1065.022405][ T5966] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1065.044220][ T5966] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1065.106168][T26218] loop3: detected capacity change from 0 to 256 [ 1065.307899][ T5966] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 246ms [ 1065.355310][ T5966] gfs2: fsid=syz:syz.0: jid=0: Done [ 1065.360584][T26191] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1065.461478][T26222] loop3: detected capacity change from 0 to 128 [ 1065.756963][T26224] loop3: detected capacity change from 0 to 128 [ 1065.959162][T26226] loop3: detected capacity change from 0 to 512 [ 1066.222641][T26228] loop3: detected capacity change from 0 to 128 [ 1066.292215][T26210] loop2: detected capacity change from 0 to 65536 [ 1066.370067][T26235] loop3: detected capacity change from 0 to 128 [ 1066.382179][T26210] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 1066.439815][T26210] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1066.556070][T26210] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x40. [ 1066.669472][T26210] XFS (loop2): Starting recovery (logdev: internal) [ 1066.702074][T26240] loop3: detected capacity change from 0 to 128 [ 1066.759457][T26210] XFS (loop2): Ending recovery (logdev: internal) [ 1066.792622][T26210] XFS (loop2): Quotacheck needed: Please wait. [ 1066.900619][T26210] XFS (loop2): Quotacheck: Done. [ 1066.979289][T26242] loop3: detected capacity change from 0 to 1156 [ 1067.081384][ T6007] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1067.281815][T26244] loop3: detected capacity change from 0 to 2048 [ 1067.333695][T26245] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1067.634849][T26247] loop3: detected capacity change from 0 to 1024 [ 1067.822048][T26249] loop1: detected capacity change from 0 to 8192 [ 1068.001409][T26253] loop2: detected capacity change from 0 to 64 [ 1068.422175][T26257] loop2: detected capacity change from 0 to 8192 [ 1068.481285][T26258] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1068.811095][T26255] loop1: detected capacity change from 0 to 32768 [ 1069.018683][T26251] loop3: detected capacity change from 0 to 32768 [ 1069.075183][T26251] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1069.085256][T26251] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1069.229796][T26251] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1069.270193][ T28] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1069.287597][ T28] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1069.509498][T26260] loop2: detected capacity change from 0 to 32768 [ 1069.549642][ T28] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 245ms [ 1069.574905][ T28] gfs2: fsid=syz:syz.0: jid=0: Done [ 1069.581725][T26260] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 1069.589723][T26251] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1069.606744][T26260] CPU: 0 PID: 26260 Comm: syz.2.8816 Not tainted syzkaller #0 [ 1069.614263][T26260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1069.624357][T26260] Call Trace: [ 1069.627645][T26260] [ 1069.630592][T26260] dump_stack_lvl+0x16c/0x230 [ 1069.635291][T26260] ? show_regs_print_info+0x20/0x20 [ 1069.640509][T26260] ? load_image+0x3b0/0x3b0 [ 1069.645048][T26260] sysfs_create_dir_ns+0x256/0x280 [ 1069.650186][T26260] ? sysfs_warn_dup+0xa0/0xa0 [ 1069.654893][T26260] ? do_raw_spin_unlock+0x121/0x230 [ 1069.660120][T26260] kobject_add_internal+0x6b8/0xc70 [ 1069.665356][T26260] kobject_init_and_add+0x126/0x190 [ 1069.670586][T26260] ? lockdep_softirqs_off+0x430/0x430 [ 1069.675994][T26260] ? kobject_add+0x220/0x220 [ 1069.680617][T26260] ? __init_swait_queue_head+0xa9/0x150 [ 1069.686188][T26260] gfs2_sys_fs_add+0x238/0x470 [ 1069.690975][T26260] ? gfs2_recover_set+0x250/0x250 [ 1069.696040][T26260] ? apply_workqueue_attrs+0x180/0x180 [ 1069.701531][T26260] gfs2_fill_super+0x1323/0x1f80 [ 1069.706502][T26260] ? gfs2_reconfigure+0xb10/0xb10 [ 1069.711673][T26260] ? setup_bdev_super+0x56b/0x660 [ 1069.716712][T26260] get_tree_bdev+0x3e4/0x510 [ 1069.721316][T26260] ? end_current_label_crit_section+0x170/0x170 [ 1069.727566][T26260] ? gfs2_reconfigure+0xb10/0xb10 [ 1069.732586][T26260] ? setup_bdev_super+0x660/0x660 [ 1069.737608][T26260] gfs2_get_tree+0x51/0x1e0 [ 1069.742195][T26260] vfs_get_tree+0x8c/0x280 [ 1069.746604][T26260] do_new_mount+0x24b/0xa40 [ 1069.751103][T26260] __se_sys_mount+0x2da/0x3c0 [ 1069.755773][T26260] ? __x64_sys_mount+0xc0/0xc0 [ 1069.760528][T26260] ? lockdep_hardirqs_on+0x98/0x150 [ 1069.765726][T26260] ? __x64_sys_mount+0x20/0xc0 [ 1069.770479][T26260] do_syscall_64+0x55/0xb0 [ 1069.774893][T26260] ? clear_bhb_loop+0x40/0x90 [ 1069.779558][T26260] ? clear_bhb_loop+0x40/0x90 [ 1069.784224][T26260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1069.790116][T26260] RIP: 0033:0x7f10063903ca [ 1069.794526][T26260] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1069.814213][T26260] RSP: 002b:00007f10071a0e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1069.822621][T26260] RAX: ffffffffffffffda RBX: 00007f10071a0ef0 RCX: 00007f10063903ca [ 1069.830586][T26260] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007f10071a0eb0 [ 1069.838570][T26260] RBP: 000020000001f680 R08: 00007f10071a0ef0 R09: 0000000000000000 [ 1069.846534][T26260] R10: 0000000000000000 R11: 0000000000000246 R12: 000020000001f6c0 [ 1069.854524][T26260] R13: 00007f10071a0eb0 R14: 000000000001f67b R15: 000020000001f700 [ 1069.862589][T26260] [ 1069.912933][T26265] loop0: detected capacity change from 0 to 16384 [ 1069.952377][T26260] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 1069.998972][T26260] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 1070.005822][T26269] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1070.681073][T26273] loop2: detected capacity change from 0 to 4096 [ 1071.166454][T26275] loop2: detected capacity change from 0 to 4096 [ 1071.227165][T26277] loop3: detected capacity change from 0 to 4096 [ 1071.231480][T26275] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1071.257214][T26277] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1071.325213][T26271] loop0: detected capacity change from 0 to 32768 [ 1071.373648][T26271] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1071.381859][T26271] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1071.512632][T26271] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1071.575443][ T5941] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1071.583129][ T5941] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1071.814017][ T5941] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 215ms [ 1071.842600][ T5941] gfs2: fsid=syz:syz.0: jid=0: Done [ 1071.858841][T26271] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1071.894221][T26282] loop2: detected capacity change from 0 to 4096 [ 1072.003946][T26282] ntfs: volume version 3.1. [ 1072.181350][T26280] loop3: detected capacity change from 0 to 32768 [ 1072.313183][T26286] loop2: detected capacity change from 0 to 2048 [ 1072.340125][T26287] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1072.362217][T26288] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1072.830601][T26290] loop3: detected capacity change from 0 to 4096 [ 1072.969274][T26290] ntfs: volume version 3.1. [ 1073.435998][T26292] loop2: detected capacity change from 0 to 32768 [ 1073.459850][T26292] (syz.2.8827,26292,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1073.483419][T26292] (syz.2.8827,26292,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1073.821899][T26294] loop3: detected capacity change from 0 to 32768 [ 1073.845642][T26294] (syz.3.8828,26294,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1073.887881][T26294] (syz.3.8828,26294,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1074.098763][T26296] loop1: detected capacity change from 0 to 32768 [ 1074.109520][T26296] (syz.1.8829,26296,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1074.127383][T26296] (syz.1.8829,26296,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1074.988767][T26300] loop3: detected capacity change from 0 to 32768 [ 1075.012335][T26300] (syz.3.8831,26300,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1075.050319][T26300] (syz.3.8831,26300,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1075.914253][T26302] loop1: detected capacity change from 0 to 65536 [ 1075.943633][T26302] (syz.1.8833,26302,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1075.975784][T26302] (syz.1.8833,26302,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1076.755981][T26306] loop3: detected capacity change from 0 to 65536 [ 1076.815071][T26306] (syz.3.8834,26306,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1076.827675][T26308] loop1: detected capacity change from 0 to 32768 [ 1076.844992][T26306] (syz.3.8834,26306,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1076.863395][T26308] (syz.1.8835,26308,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1076.887650][T26308] (syz.1.8835,26308,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1077.865608][T26312] loop1: detected capacity change from 0 to 32768 [ 1077.888177][T26312] (syz.1.8837,26312,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1077.923658][T26312] (syz.1.8837,26312,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1078.647447][T26316] loop2: detected capacity change from 0 to 8192 [ 1078.669108][T26316] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1078.692151][T26316] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1078.715598][T26316] REISERFS (device loop2): using ordered data mode [ 1078.722156][T26316] reiserfs: using flush barriers [ 1078.755170][T26310] loop3: detected capacity change from 0 to 65536 [ 1078.764666][T26316] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1078.810426][T26316] REISERFS (device loop2): checking transaction log (loop2) [ 1078.999519][T26314] loop1: detected capacity change from 0 to 32768 [ 1079.018939][T26320] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1079.026942][T26314] (syz.1.8838,26314,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1079.050196][T26316] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 1079.074764][T26314] (syz.1.8838,26314,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1079.084521][T26316] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 1079.107891][T26316] REISERFS (device loop2): Remounting filesystem read-only [ 1079.153942][T26316] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 1079.173014][T26316] REISERFS warning (device loop2): reiserfs_fill_super: corrupt root inode, run fsck [ 1080.236451][T26319] loop0: detected capacity change from 0 to 65536 [ 1080.274210][T26319] (syz.0.8840,26319,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1080.295498][T26319] (syz.0.8840,26319,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1082.447320][T26326] loop3: detected capacity change from 0 to 131072 [ 1082.479977][T26326] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1082.517657][T26326] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1082.590880][T26326] REISERFS (device loop3): using ordered data mode [ 1082.629632][T26326] reiserfs: using flush barriers [ 1082.680957][T26326] REISERFS (device loop3): journal params: device loop3, size 15748, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1082.753584][T26326] REISERFS (device loop3): checking transaction log (loop3) [ 1083.931596][T26331] loop1: detected capacity change from 0 to 8192 [ 1084.002308][T26331] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1084.050642][T26331] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1084.068426][T26331] REISERFS (device loop1): using ordered data mode [ 1084.081541][T26331] reiserfs: using flush barriers [ 1084.164091][T26331] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1084.235899][T26331] REISERFS (device loop1): checking transaction log (loop1) [ 1084.456036][T26331] REISERFS (device loop1): Using r5 hash to sort names [ 1084.464516][T26331] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1087.076652][T26333] loop2: detected capacity change from 0 to 131072 [ 1087.202946][T26326] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 1087.239627][T26326] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 1087.272434][T26326] REISERFS (device loop3): Remounting filesystem read-only [ 1087.290920][T26326] REISERFS error (device loop3): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 1087.346253][T26326] REISERFS warning (device loop3): reiserfs_fill_super: corrupt root inode, run fsck [ 1087.418273][T26342] loop2: detected capacity change from 0 to 1 [ 1087.425628][T26342] syz.2.8850: attempt to access beyond end of device [ 1087.425628][T26342] loop2: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 1087.480709][T26342] SQUASHFS error: Failed to read block 0x0: -5 [ 1087.486959][T26342] unable to read squashfs_super_block [ 1087.529651][T26336] loop0: detected capacity change from 0 to 131072 [ 1087.577860][T26336] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1087.619960][T26336] REISERFS (device loop0): found reiserfs format "3.5" with standard journal [ 1087.629240][T26336] REISERFS (device loop0): using ordered data mode [ 1087.636430][T26336] reiserfs: using flush barriers [ 1087.651104][T26336] REISERFS (device loop0): journal params: device loop0, size 8192, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 1087.674424][T26345] loop2: detected capacity change from 0 to 1 [ 1087.681707][T26345] syz.2.8851: attempt to access beyond end of device [ 1087.681707][T26345] loop2: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 1087.696230][T26345] SQUASHFS error: Failed to read block 0x0: -5 [ 1087.702464][T26345] unable to read squashfs_super_block [ 1087.716197][T26336] REISERFS (device loop0): checking transaction log (loop0) [ 1088.010406][T26347] loop2: detected capacity change from 0 to 3 [ 1088.049684][T26347] syz.2.8852: attempt to access beyond end of device [ 1088.049684][T26347] loop2: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 1088.092562][T26347] SQUASHFS error: Failed to read block 0x0: -5 [ 1088.114100][T26347] unable to read squashfs_super_block [ 1088.349864][T26349] loop2: detected capacity change from 0 to 128 [ 1088.401507][T26349] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1088.456291][T26349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1088.696985][T26351] loop2: detected capacity change from 0 to 256 [ 1088.737922][T26351] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1088.782719][T26351] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1088.816999][T26351] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1088.824687][T26351] UDF-fs: Scanning with blocksize 512 failed [ 1088.870674][T26351] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1088.910258][T26351] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1089.098832][T26353] loop2: detected capacity change from 0 to 256 [ 1089.177184][T26353] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1089.265448][T26353] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1089.285464][T26355] loop1: detected capacity change from 0 to 256 [ 1089.302520][T26353] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1089.331597][T26355] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1089.337387][T26353] UDF-fs: Scanning with blocksize 512 failed [ 1089.374348][T26355] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1089.385372][T26353] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1089.396834][T26355] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1089.404606][T26355] UDF-fs: Scanning with blocksize 512 failed [ 1089.430779][T26355] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1089.472790][T26353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1089.516319][T26355] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1089.756484][T26357] loop1: detected capacity change from 0 to 512 [ 1089.791060][T26357] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1089.809815][T26357] UDF-fs: Scanning with blocksize 512 failed [ 1089.839092][T26359] loop2: detected capacity change from 0 to 512 [ 1089.863842][T26357] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1089.874876][T26359] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1089.893622][T26359] UDF-fs: Scanning with blocksize 512 failed [ 1089.904618][T26357] UDF-fs: Scanning with blocksize 1024 failed [ 1089.907463][T26359] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1089.933973][T26359] UDF-fs: Scanning with blocksize 1024 failed [ 1089.955880][T26357] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1089.975717][T26359] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1089.990878][T26357] UDF-fs: Scanning with blocksize 2048 failed [ 1089.992582][T26359] UDF-fs: Scanning with blocksize 2048 failed [ 1090.013536][T26359] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1090.051798][T26359] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1090.067844][T26357] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1090.103585][T26357] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1090.315929][T26362] loop1: detected capacity change from 0 to 128 [ 1090.323247][T26363] loop2: detected capacity change from 0 to 512 [ 1090.342738][T26363] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1090.362417][T26363] UDF-fs: Scanning with blocksize 512 failed [ 1090.426485][T26363] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1090.439335][T26363] UDF-fs: Scanning with blocksize 1024 failed [ 1090.451165][T26363] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1090.480721][T26363] UDF-fs: Scanning with blocksize 2048 failed [ 1090.494502][T26363] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1090.528561][T26363] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1090.551165][T26365] loop1: detected capacity change from 0 to 512 [ 1090.701695][T26367] loop3: detected capacity change from 0 to 128 [ 1090.721005][T26367] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1090.746769][T26367] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1090.840205][T26371] loop2: detected capacity change from 0 to 128 [ 1091.083563][T26373] loop3: detected capacity change from 0 to 2048 [ 1091.110301][T26336] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 1091.114464][T26370] loop1: detected capacity change from 0 to 8192 [ 1091.136650][T26336] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 8211. Fsck? [ 1091.162459][T26336] REISERFS (device loop0): Remounting filesystem read-only [ 1091.173944][T26370] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1091.189943][T26336] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 1091.204715][T26370] UDF-fs: Scanning with blocksize 512 failed [ 1091.222512][T26336] REISERFS warning (device loop0): reiserfs_fill_super: corrupt root inode, run fsck [ 1091.235820][T26370] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1091.269235][T26370] UDF-fs: Scanning with blocksize 1024 failed [ 1091.322415][T26370] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1091.337492][T26370] UDF-fs: Scanning with blocksize 2048 failed [ 1091.372204][T26370] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1091.716167][T26381] loop1: detected capacity change from 0 to 1 [ 1091.736030][T26381] syz.1.8869: attempt to access beyond end of device [ 1091.736030][T26381] loop1: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 1091.751762][T26381] SQUASHFS error: Failed to read block 0x0: -5 [ 1091.773728][T26381] unable to read squashfs_super_block [ 1091.910025][T26377] loop3: detected capacity change from 0 to 16384 [ 1091.950928][T26377] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1091.973984][T26377] UDF-fs: Scanning with blocksize 512 failed [ 1091.988403][T26383] loop1: detected capacity change from 0 to 256 [ 1091.994895][T26377] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1092.013250][T26377] UDF-fs: Scanning with blocksize 1024 failed [ 1092.031826][T26377] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1092.077121][T26377] UDF-fs: Scanning with blocksize 2048 failed [ 1092.087977][T26377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1092.274202][T26386] loop3: detected capacity change from 0 to 128 [ 1092.286214][T26387] loop1: detected capacity change from 0 to 256 [ 1092.902242][T26391] loop3: detected capacity change from 0 to 16384 [ 1092.926478][T26391] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1092.947270][T26391] UDF-fs: Scanning with blocksize 512 failed [ 1092.965212][T26391] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1092.987618][T26391] UDF-fs: Scanning with blocksize 1024 failed [ 1093.006076][T26391] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1093.017872][T26391] UDF-fs: Scanning with blocksize 2048 failed [ 1093.062637][T26391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1093.571364][T26397] loop0: detected capacity change from 0 to 512 [ 1095.651992][T26401] loop2: detected capacity change from 0 to 32768 [ 1095.740471][T26401] XFS (loop2): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 1095.893576][T26401] XFS (loop2): Ending clean mount [ 1095.943368][ T6007] XFS (loop2): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 1097.739291][T26411] loop2: detected capacity change from 0 to 65536 [ 1097.813221][T26411] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 1097.988178][T21686] I/O error, dev loop2, sector 65408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1098.079580][T26413] loop1: detected capacity change from 0 to 65536 [ 1098.805543][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1098.815904][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1099.127150][T26415] loop3: detected capacity change from 0 to 65536 [ 1099.170673][T26424] loop1: detected capacity change from 0 to 32768 [ 1099.205475][T26415] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1099.239555][T26424] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1099.290745][T26415] XFS (loop3): Ending clean mount [ 1099.423888][T26424] XFS (loop1): Ending clean mount [ 1099.442445][ T6017] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1099.623155][ T6012] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1100.586560][T26447] loop3: detected capacity change from 0 to 32768 [ 1100.671018][T26447] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1100.840031][T26447] XFS (loop3): Ending clean mount [ 1100.991487][ T6017] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1101.229823][T26449] loop1: detected capacity change from 0 to 65536 [ 1101.302563][T26449] XFS (loop1): Deprecated V4 format (crc=0) not supported by kernel. [ 1102.896448][T26468] loop1: detected capacity change from 0 to 65536 [ 1102.977112][T26468] XFS (loop1): Mounting V5 Filesystem e4654a66-62e5-4963-a81e-012d9d4871af [ 1103.094591][T26468] XFS (loop1): Ending clean mount [ 1103.189076][ T6012] XFS (loop1): Unmounting Filesystem e4654a66-62e5-4963-a81e-012d9d4871af [ 1105.435911][T26484] loop3: detected capacity change from 0 to 2048 [ 1105.554828][T26484] loop3: p2 p3 p7 [ 1105.892583][T12094] udevd[12094]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 1105.912374][T12093] udevd[12093]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 1105.939210][T21686] udevd[21686]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1108.210829][T26500] loop1: detected capacity change from 0 to 2048 [ 1108.278947][T26500] loop1: p1 p2 p3 [ 1108.618687][T12093] udevd[12093]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1108.647472][T21686] udevd[21686]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1108.648022][T12094] udevd[12094]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1108.840195][T26506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8904'. [ 1109.263685][T26510] loop1: detected capacity change from 0 to 1024 [ 1109.308697][T26510] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1109.547222][T26512] loop1: detected capacity change from 0 to 512 [ 1109.656611][T26512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1109.716877][T26512] ext4 filesystem being mounted at /2338/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1109.913519][ T6012] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.829573][T26532] Zero length message leads to an empty skb [ 1111.882463][T26545] loop0: detected capacity change from 0 to 32768 [ 1112.001092][T26545] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1112.177286][T26545] XFS (loop0): Ending clean mount [ 1112.290626][T26588] fuse: Bad value for 'rootmode' [ 1112.365663][ T6006] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1112.638803][T26596] loop3: detected capacity change from 0 to 64 [ 1112.741061][T26596] Trying to free block not in datazone [ 1112.750052][T26596] Trying to free block not in datazone [ 1113.027078][T26606] qrtr: Invalid version 195 [ 1113.224943][T26614] loop3: detected capacity change from 0 to 8 [ 1113.491776][T26525] loop1: detected capacity change from 0 to 131072 [ 1113.519756][ T5966] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1113.560569][T26525] XFS (loop1): Mounting V5 Filesystem f37484a6-847f-4c37-be64-3b143b6edc4c [ 1113.572615][T26631] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1113.677106][T26525] XFS (loop1): Ending clean mount [ 1113.723237][ T5966] usb 1-1: Using ep0 maxpacket: 32 [ 1113.746956][ T6012] XFS (loop1): Unmounting Filesystem f37484a6-847f-4c37-be64-3b143b6edc4c [ 1113.755143][ T5966] usb 1-1: config 0 has an invalid interface number: 74 but max is 1 [ 1113.770597][ T5966] usb 1-1: config 0 has no interface number 1 [ 1113.785258][ T5966] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 1113.812632][ T5966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.828534][ T5966] usb 1-1: Product: syz [ 1113.837601][ T5966] usb 1-1: Manufacturer: syz [ 1113.843162][ T5966] usb 1-1: SerialNumber: syz [ 1113.854306][ T5966] usb 1-1: config 0 descriptor?? [ 1113.888968][ T5966] snd-usb-audio: probe of 1-1:0.74 failed with error -22 [ 1113.944762][T12094] udevd[12094]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1114.114959][ T28] usb 1-1: USB disconnect, device number 55 [ 1114.412523][T26656] netlink: 4108 bytes leftover after parsing attributes in process `syz.1.8965'. [ 1115.013712][T26678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8977'. [ 1115.524591][T26701] loop2: detected capacity change from 0 to 1764 [ 1116.061537][T26720] loop3: detected capacity change from 0 to 256 [ 1116.360005][T26708] loop1: detected capacity change from 0 to 32768 [ 1116.419289][T26708] loop1: p9 p11 p16 [ 1116.998290][T12094] udevd[12094]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory [ 1117.018054][T21686] udevd[21686]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory [ 1117.018190][T12093] udevd[12093]: inotify_add_watch(7, /dev/loop1p16, 10) failed: No such file or directory [ 1117.420493][T26772] loop3: detected capacity change from 0 to 512 [ 1117.427142][T26773] capability: warning: `syz.1.9022' uses 32-bit capabilities (legacy support in use) [ 1117.578183][T26769] loop0: detected capacity change from 0 to 4096 [ 1117.606285][T26777] Cannot find del_set index 1 as target [ 1117.675720][T26769] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 1117.695706][T26769] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 1117.803175][T26783] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9028'. [ 1117.852149][T26783] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9028'. [ 1117.877686][T26783] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9028'. [ 1117.927255][ T1076] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 1117.948352][ T6006] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 1117.954936][ T6006] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1117.977530][ T6006] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 1117.993076][ T1076] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 1118.366078][T26805] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.9038'. [ 1118.584920][T26820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9041'. [ 1118.675030][T26824] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9044'. [ 1119.214058][T26841] loop3: detected capacity change from 0 to 8192 [ 1119.247219][T26841] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1119.270629][T26841] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1119.279995][T26841] REISERFS (device loop3): using ordered data mode [ 1119.320652][T26841] reiserfs: using flush barriers [ 1119.378895][T26854] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1119.395626][T26841] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1119.420581][T26854] xt_HMARK: spi-set and port-set can't be combined [ 1119.460759][T26841] REISERFS (device loop3): checking transaction log (loop3) [ 1119.659636][T26841] REISERFS (device loop3): Using tea hash to sort names [ 1119.680997][T26841] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1119.826482][T26867] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1120.309519][T26884] geneve2: entered promiscuous mode [ 1120.395283][T26890] netlink: 300 bytes leftover after parsing attributes in process `syz.0.9075'. [ 1120.408220][ T28] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1120.490460][T26892] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9078'. [ 1120.514704][T26892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9078'. [ 1120.537428][T26895] loop0: detected capacity change from 0 to 764 [ 1120.565624][T26895] rock: directory entry would overflow storage [ 1120.571828][T26895] rock: sig=0x4654, size=5, remaining=4 [ 1120.617735][ T28] usb 2-1: Using ep0 maxpacket: 16 [ 1120.639622][ T28] usb 2-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 1120.667455][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.684543][ T28] usb 2-1: Product: syz [ 1120.710562][ T28] usb 2-1: Manufacturer: syz [ 1120.721295][ T28] usb 2-1: SerialNumber: syz [ 1120.746284][ T28] usb 2-1: config 0 descriptor?? [ 1120.778548][ T28] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 1121.089186][T26914] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9087'. [ 1121.218154][ T28] gspca_sn9c20x: Write register 1001 failed -71 [ 1121.224557][ T28] gspca_sn9c20x: Device initialization failed [ 1121.248102][ T28] gspca_sn9c20x: probe of 2-1:0.0 failed with error -71 [ 1121.259289][T26920] cgroup: noprefix used incorrectly [ 1121.271735][ T28] usb 2-1: USB disconnect, device number 37 [ 1121.481150][T26926] loop0: detected capacity change from 0 to 256 [ 1121.525368][T26926] FAT-fs (loop0): Directory bread(block 64) failed [ 1121.546245][T26926] FAT-fs (loop0): Directory bread(block 65) failed [ 1121.555022][T26926] FAT-fs (loop0): Directory bread(block 66) failed [ 1121.587012][T26926] FAT-fs (loop0): Directory bread(block 67) failed [ 1121.603349][T26926] FAT-fs (loop0): Directory bread(block 68) failed [ 1121.609922][T26926] FAT-fs (loop0): Directory bread(block 69) failed [ 1121.640737][T26930] xt_CT: No such helper "snmp" [ 1121.640888][T26926] FAT-fs (loop0): Directory bread(block 70) failed [ 1121.654262][T26926] FAT-fs (loop0): Directory bread(block 71) failed [ 1121.661076][T26926] FAT-fs (loop0): Directory bread(block 72) failed [ 1121.669242][T26926] FAT-fs (loop0): Directory bread(block 73) failed [ 1121.790405][T26935] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9097'. [ 1122.188218][T26933] loop2: detected capacity change from 0 to 32768 [ 1122.252004][T26933] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1122.429606][T26933] XFS (loop2): Ending clean mount [ 1122.472545][T26933] XFS (loop2): Quotacheck needed: Please wait. [ 1122.571427][T26933] XFS (loop2): Quotacheck: Done. [ 1122.750247][ T6007] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1122.783618][T26971] loop0: detected capacity change from 0 to 512 [ 1122.823809][T26973] loop1: detected capacity change from 0 to 8 [ 1122.837028][T26973] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1122.841392][T26971] EXT4-fs error (device loop0): __ext4_iget:5053: inode #11: block 1: comm syz.0.9111: invalid block [ 1122.882192][T26973] cramfs: Error -3 while decompressing! [ 1122.888207][T26973] cramfs: ffffffff96fe0308(26)->ffff888058280000(4096) [ 1122.896265][T26973] cramfs: Error -3 while decompressing! [ 1122.901829][T26973] cramfs: ffffffff96fe0322(26)->ffff888058281000(4096) [ 1122.908887][T26973] cramfs: Error -3 while decompressing! [ 1122.916225][T26973] cramfs: ffffffff96fe0308(26)->ffff888058280000(4096) [ 1122.924779][T12093] udevd[12093]: incorrect cramfs checksum on /dev/loop1 [ 1122.967506][T26971] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.9111: couldn't read orphan inode 11 (err -117) [ 1123.002907][T26971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1123.145203][T26981] loop3: detected capacity change from 0 to 2048 [ 1123.188445][ T6006] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.196786][T26981] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1123.516133][T26989] xt_ipcomp: unknown flags 12 [ 1123.654515][ T27] audit: type=1326 audit(1758805809.343:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26994 comm="syz.1.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec9d8ec29 code=0x7ffc0000 [ 1123.718720][ T27] audit: type=1326 audit(1758805809.343:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26994 comm="syz.1.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec9d8ec29 code=0x7ffc0000 [ 1123.767835][ T27] audit: type=1326 audit(1758805809.343:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26994 comm="syz.1.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f9ec9d8ec29 code=0x7ffc0000 [ 1123.795850][ T27] audit: type=1326 audit(1758805809.428:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26994 comm="syz.1.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec9d8ec29 code=0x7ffc0000 [ 1123.887132][ T27] audit: type=1326 audit(1758805809.428:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26994 comm="syz.1.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec9d8ec29 code=0x7ffc0000 [ 1124.015917][T27006] loop1: detected capacity change from 0 to 4096 [ 1124.041334][T27013] netlink: 'syz.0.9131': attribute type 21 has an invalid length. [ 1124.044950][T27006] EXT4-fs: Ignoring removed mblk_io_submit option [ 1124.073924][T27013] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9131'. [ 1124.084712][T27006] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1124.113680][T27006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1124.411783][T27006] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1124.414778][T27026] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1124.468455][T27028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9137'. [ 1124.525882][ T6012] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.665891][ T27] audit: type=1326 audit(1758805810.279:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27032 comm="syz.0.9140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac9f8ec29 code=0x7ffc0000 [ 1124.744207][ T27] audit: type=1326 audit(1758805810.307:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27032 comm="syz.0.9140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac9f8ec29 code=0x7ffc0000 [ 1124.824718][ T27] audit: type=1326 audit(1758805810.326:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27032 comm="syz.0.9140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fcac9f8ec29 code=0x7ffc0000 [ 1124.875994][ T27] audit: type=1326 audit(1758805810.326:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27032 comm="syz.0.9140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac9f8ec29 code=0x7ffc0000 [ 1125.144010][T27056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9150'. [ 1125.167887][T27054] loop0: detected capacity change from 0 to 512 [ 1125.188565][T27056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9150'. [ 1125.215401][T27058] tmpfs: Bad value for 'mpol' [ 1125.224166][T27054] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1125.251300][T27054] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1125.260670][T27054] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 1125.271112][T27054] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.9149: Failed to acquire dquot type 1 [ 1125.346146][T27054] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.9149: bg 0: block 40: padding at end of block bitmap is not set [ 1125.410384][T27067] kernel read not supported for file / œÏüÔ¢W)ëS“§Ç-ë (pid: 27067 comm: syz.3.9156) [ 1125.421333][T27054] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 1125.443302][T27054] EXT4-fs (loop0): 1 truncate cleaned up [ 1125.453514][T27054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1125.552219][T27054] EXT4-fs error (device loop0): ext4_get_link:104: inode #16: comm syz.0.9149: bad symlink. [ 1125.622211][T27075] program syz.2.9159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1125.742889][ T6006] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.956657][T27089] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1126.742044][T27117] loop3: detected capacity change from 0 to 2048 [ 1126.806360][T27119] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1126.903899][T27117] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1126.966210][T27117] Remounting filesystem read-only [ 1126.977535][T27117] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1126.987394][T27117] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1126.998237][T27117] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1127.008591][T27117] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1127.018646][T27117] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1127.028536][T27117] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1127.038485][T27117] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1127.066534][T27117] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1127.088037][T27117] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1127.117358][T27107] loop2: detected capacity change from 0 to 32768 [ 1127.127925][T27107] (syz.2.9175,27107,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1127.168129][T27107] (syz.2.9175,27107,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1127.233086][T27107] JBD2: Ignoring recovery information on journal [ 1127.249318][T27113] loop0: detected capacity change from 0 to 32768 [ 1127.256902][T27113] XFS: attr2 mount option is deprecated. [ 1127.268338][T27117] syz.3.9180 (27117) used greatest stack depth: 19408 bytes left [ 1127.339279][T27113] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 1127.363670][T27113] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1127.400398][T27107] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1127.530510][T27113] XFS (loop0): Ending clean mount [ 1127.549236][T27113] XFS (loop0): Quotacheck needed: Please wait. [ 1127.630315][T27113] XFS (loop0): Quotacheck: Done. [ 1127.830283][ T6006] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1127.912230][ T6007] ocfs2: Unmounting device (7,2) on (node local) [ 1127.980489][T27145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9190'. [ 1128.363447][T27155] loop0: detected capacity change from 0 to 256 [ 1128.392623][T27155] exfat: Deprecated parameter 'utf8' [ 1128.423499][T27155] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1128.624680][T27163] netlink: 'syz.1.9197': attribute type 5 has an invalid length. [ 1129.603163][T27207] loop1: detected capacity change from 0 to 256 [ 1129.689789][T27190] loop2: detected capacity change from 0 to 32768 [ 1129.707588][T27207] FAT-fs (loop1): Directory bread(block 64) failed [ 1129.736209][T27207] FAT-fs (loop1): Directory bread(block 65) failed [ 1129.771948][T27207] FAT-fs (loop1): Directory bread(block 66) failed [ 1129.784971][T27207] FAT-fs (loop1): Directory bread(block 67) failed [ 1129.801580][T27207] FAT-fs (loop1): Directory bread(block 68) failed [ 1129.820307][T27207] FAT-fs (loop1): Directory bread(block 69) failed [ 1129.835389][T27207] FAT-fs (loop1): Directory bread(block 70) failed [ 1129.861305][T27207] FAT-fs (loop1): Directory bread(block 71) failed [ 1129.872885][T27207] FAT-fs (loop1): Directory bread(block 72) failed [ 1129.887430][T27207] FAT-fs (loop1): Directory bread(block 73) failed [ 1130.811988][T27213] loop0: detected capacity change from 0 to 32768 [ 1130.860972][T27242] loop2: detected capacity change from 0 to 256 [ 1130.936080][T27213] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1131.065990][T27253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9235'. [ 1131.094966][T27242] FAT-fs (loop2): Directory bread(block 64) failed [ 1131.101563][T27242] FAT-fs (loop2): Directory bread(block 65) failed [ 1131.157010][T27242] FAT-fs (loop2): Directory bread(block 66) failed [ 1131.163589][T27242] FAT-fs (loop2): Directory bread(block 67) failed [ 1131.176574][T27242] FAT-fs (loop2): Directory bread(block 68) failed [ 1131.183466][T27242] FAT-fs (loop2): Directory bread(block 69) failed [ 1131.200213][T27242] FAT-fs (loop2): Directory bread(block 70) failed [ 1131.210457][T27213] XFS (loop0): Ending clean mount [ 1131.218366][T27242] FAT-fs (loop2): Directory bread(block 71) failed [ 1131.242648][T27242] FAT-fs (loop2): Directory bread(block 72) failed [ 1131.243485][T27213] XFS (loop0): Quotacheck needed: Please wait. [ 1131.249240][T27242] FAT-fs (loop2): Directory bread(block 73) failed [ 1131.354713][T27213] XFS (loop0): Quotacheck: Done. [ 1131.518477][T27263] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1131.622022][ T6006] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1131.908373][T27273] netlink: 'syz.1.9247': attribute type 7 has an invalid length. [ 1131.919341][T27273] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9247'. [ 1132.139280][T27281] loop3: detected capacity change from 0 to 512 [ 1132.146860][T27281] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1132.184740][T27281] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2817: inode #11: comm syz.3.9250: corrupted xattr block 95: invalid header [ 1132.207195][T27281] EXT4-fs (loop3): Remounting filesystem read-only [ 1132.215958][T27281] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 1132.237844][T27281] EXT4-fs (loop3): 1 orphan inode deleted [ 1132.244809][T27281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1132.283160][ T6017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.609094][T27296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9256'. [ 1133.587856][T27305] loop3: detected capacity change from 0 to 32768 [ 1133.609930][T27305] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1133.627400][T27341] trusted_key: encrypted_key: keyword 'ne' not recognized [ 1133.652452][T27305] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1133.936143][T27305] gfs2: fsid=syz:syz.s: fatal: invalid metadata block [ 1133.936143][T27305] bh = 138 (type: exp=5, found=8) [ 1133.936143][T27305] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 503 [ 1134.026453][T27305] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 1134.042534][T27365] raw_sendmsg: syz.2.9273 forgot to set AF_INET. Fix it! [ 1134.066232][T27305] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 1134.087324][T27305] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 1134.105220][T27305] gfs2: fsid=syz:syz.s: File system withdrawn [ 1134.128596][T27305] CPU: 1 PID: 27305 Comm: syz.3.9260 Not tainted syzkaller #0 [ 1134.136106][T27305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1134.146177][T27305] Call Trace: [ 1134.149471][T27305] [ 1134.152413][T27305] dump_stack_lvl+0x16c/0x230 [ 1134.157115][T27305] ? kobject_uevent_env+0x363/0x8c0 [ 1134.162334][T27305] ? show_regs_print_info+0x20/0x20 [ 1134.167554][T27305] ? load_image+0x3b0/0x3b0 [ 1134.172072][T27305] ? kobject_uevent_env+0x363/0x8c0 [ 1134.177297][T27305] gfs2_withdraw+0xe50/0x13b0 [ 1134.182014][T27305] ? gfs2_lm+0x220/0x220 [ 1134.186270][T27305] ? gfs2_freeze_unlock+0x60/0x60 [ 1134.191319][T27305] ? gfs2_meta_read+0x83f/0x980 [ 1134.196199][T27305] ? gfs2_meta_new+0x160/0x160 [ 1134.200976][T27305] ? gfs2_meta_read+0x791/0x980 [ 1134.205855][T27305] gfs2_metatype_check_ii+0x78/0x90 [ 1134.211079][T27305] gfs2_meta_buffer+0x266/0x310 [ 1134.215964][T27305] __fillup_metapath+0x14d/0x340 [ 1134.220942][T27305] __gfs2_iomap_get+0x707/0x13f0 [ 1134.225920][T27305] ? gfs2_alloc_extent+0x4f0/0x4f0 [ 1134.231050][T27305] ? rcu_is_watching+0x15/0xb0 [ 1134.235877][T27305] gfs2_block_map+0x22d/0x670 [ 1134.240595][T27305] ? gfs2_iomap_end+0x6b0/0x6b0 [ 1134.245467][T27305] ? __wait_on_bit+0x2d0/0x2d0 [ 1134.250254][T27305] ? bit_waitqueue+0x30/0x30 [ 1134.254896][T27305] gfs2_write_alloc_required+0x366/0x620 [ 1134.260554][T27305] ? from_kuid_munged+0x690/0x690 [ 1134.265704][T27305] ? gfs2_map_journal_extents+0xab0/0xab0 [ 1134.271563][T27305] ? gfs2_glock_nq+0xd4f/0x1420 [ 1134.276441][T27305] ? inode_go_held+0xf8/0x200 [ 1134.281145][T27305] gfs2_jdesc_check+0x1c7/0x2a0 [ 1134.286039][T27305] check_journal_clean+0x159/0x300 [ 1134.291177][T27305] ? gfs2_trans_remove_revoke+0x370/0x370 [ 1134.296929][T27305] ? init_journal+0x17f1/0x2260 [ 1134.301804][T27305] ? __rwlock_init+0x150/0x150 [ 1134.306590][T27305] ? do_raw_spin_unlock+0x121/0x230 [ 1134.311810][T27305] ? _raw_spin_unlock+0x28/0x40 [ 1134.316678][T27305] ? gfs2_jdesc_find+0xab/0xc0 [ 1134.321460][T27305] init_journal+0x17f1/0x2260 [ 1134.326156][T27305] ? gfs2_glock_dq_uninit+0x28/0xe0 [ 1134.331384][T27305] ? init_inodes+0xdb/0x320 [ 1134.335909][T27305] ? vsnprintf+0x7b2/0x1a40 [ 1134.340425][T27305] ? _compound_head+0x120/0x120 [ 1134.345293][T27305] ? vsnprintf+0x1957/0x1a40 [ 1134.349908][T27305] ? snprintf+0xdb/0x120 [ 1134.354167][T27305] ? init_inodes+0xdb/0x320 [ 1134.358689][T27305] ? vscnprintf+0x80/0x80 [ 1134.363015][T27305] ? gfs2_glock_nq_num+0x183/0x1c0 [ 1134.368128][T27305] init_inodes+0xdb/0x320 [ 1134.372458][T27305] gfs2_fill_super+0x1815/0x1f80 [ 1134.377401][T27305] ? gfs2_reconfigure+0xb10/0xb10 [ 1134.382427][T27305] ? init_locking+0xb8/0x200 [ 1134.387102][T27305] ? setup_bdev_super+0x56b/0x660 [ 1134.392118][T27305] get_tree_bdev+0x3e4/0x510 [ 1134.396697][T27305] ? end_current_label_crit_section+0x170/0x170 [ 1134.403015][T27305] ? gfs2_reconfigure+0xb10/0xb10 [ 1134.408041][T27305] ? setup_bdev_super+0x660/0x660 [ 1134.413072][T27305] gfs2_get_tree+0x51/0x1e0 [ 1134.417577][T27305] vfs_get_tree+0x8c/0x280 [ 1134.421985][T27305] do_new_mount+0x24b/0xa40 [ 1134.426485][T27305] __se_sys_mount+0x2da/0x3c0 [ 1134.431155][T27305] ? __x64_sys_mount+0xc0/0xc0 [ 1134.435911][T27305] ? lockdep_hardirqs_on+0x98/0x150 [ 1134.441099][T27305] ? __x64_sys_mount+0x20/0xc0 [ 1134.445852][T27305] do_syscall_64+0x55/0xb0 [ 1134.450263][T27305] ? clear_bhb_loop+0x40/0x90 [ 1134.454926][T27305] ? clear_bhb_loop+0x40/0x90 [ 1134.459591][T27305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1134.465479][T27305] RIP: 0033:0x7f7e9d9903ca [ 1134.469885][T27305] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1134.489500][T27305] RSP: 002b:00007f7e9e85de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1134.497905][T27305] RAX: ffffffffffffffda RBX: 00007f7e9e85def0 RCX: 00007f7e9d9903ca [ 1134.505869][T27305] RDX: 0000200000000000 RSI: 0000200000037f80 RDI: 00007f7e9e85deb0 [ 1134.513842][T27305] RBP: 0000200000000000 R08: 00007f7e9e85def0 R09: 0000000000000010 [ 1134.521807][T27305] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000037f80 [ 1134.529792][T27305] R13: 00007f7e9e85deb0 R14: 0000000000037f6a R15: 0000200000000040 [ 1134.537768][T27305] [ 1134.543861][T27305] gfs2: fsid=syz:syz.s: G: s:SH n:2/47 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:3 [ 1134.580205][T27305] gfs2: fsid=syz:syz.s: H: s:SH f:eEcH e:0 p:27305 [syz.3.9260] init_journal+0x17f1/0x2260 [ 1134.611564][T27305] gfs2: fsid=syz:syz.s: I: n:1/71 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 1134.618646][T27379] tc_dump_action: action bad kind [ 1134.622520][T27305] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 1134.710622][ T5966] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1134.745070][T27381] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1134.774041][T27383] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1134.944751][ T5966] usb 3-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 1134.964874][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.002064][ T5966] usb 3-1: Product: syz [ 1135.015658][ T5966] usb 3-1: Manufacturer: syz [ 1135.023871][ T5966] usb 3-1: SerialNumber: syz [ 1135.033073][ T5966] usb 3-1: config 0 descriptor?? [ 1135.051267][ T5966] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 1135.406038][T27407] loop1: detected capacity change from 0 to 64 [ 1135.526725][ T5966] usb 3-1: USB disconnect, device number 61 [ 1135.543960][T27411] xt_hashlimit: max too large, truncated to 1048576 [ 1135.559063][T27411] xt_hashlimit: overflow, try lower: 241/0 [ 1135.633483][T27413] sctp: [Deprecated]: syz.1.9296 (pid 27413) Use of int in maxseg socket option. [ 1135.633483][T27413] Use struct sctp_assoc_value instead [ 1135.794032][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 1135.794046][ T27] audit: type=1326 audit(1758805820.691:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27420 comm="syz.1.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec9d8ec29 code=0x7ffc0000 [ 1135.829481][ T27] audit: type=1326 audit(1758805820.729:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27420 comm="syz.1.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec9d8ec29 code=0x7ffc0000 [ 1135.870880][ T27] audit: type=1326 audit(1758805820.729:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27420 comm="syz.1.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f9ec9d8ec29 code=0x7ffc0000 [ 1135.894558][ T27] audit: type=1326 audit(1758805820.729:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27420 comm="syz.1.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec9d8ec29 code=0x7ffc0000 [ 1135.971872][T27425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9302'. [ 1136.309091][T27433] warning: `syz.2.9306' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1136.346358][T27431] loop0: detected capacity change from 0 to 4096 [ 1136.367644][T27431] EXT4-fs: Ignoring removed mblk_io_submit option [ 1136.422197][T27417] loop3: detected capacity change from 0 to 32768 [ 1136.433845][T27431] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1136.467514][T27417] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.9298 (27417) [ 1136.476070][T27431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1136.518203][T27417] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1136.550712][T27417] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1136.565859][T27417] BTRFS info (device loop3): using free space tree [ 1136.711569][T27417] BTRFS info (device loop3): enabling ssd optimizations [ 1136.718757][T27454] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9309'. [ 1136.740127][T27417] BTRFS info (device loop3): auto enabling async discard [ 1136.756082][ T6006] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.854957][T27460] netlink: 'syz.2.9312': attribute type 1 has an invalid length. [ 1136.886316][T27460] netlink: 216 bytes leftover after parsing attributes in process `syz.2.9312'. [ 1136.895417][T27460] NCSI netlink: No device for ifindex 0 [ 1136.993627][ T6017] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1137.143565][T27470] loop1: detected capacity change from 0 to 256 [ 1137.201708][T27470] exFAT-fs (loop1): error, The cluster chain has a loop [ 1137.215904][T27470] exFAT-fs (loop1): failed to count the number of clusters in root [ 1137.267005][T27470] exFAT-fs (loop1): failed to recognize exfat type [ 1137.396215][T27476] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1138.679564][T27537] loop2: detected capacity change from 0 to 2048 [ 1138.720673][T27540] netlink: 'syz.1.9351': attribute type 1 has an invalid length. [ 1138.746650][T27537] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1138.870054][T27544] loop3: detected capacity change from 0 to 512 [ 1138.945827][T27544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1139.001528][T27544] ext4 filesystem being mounted at /2300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1139.041331][T27544] [ 1139.043701][T27544] ====================================================== [ 1139.050725][T27544] WARNING: possible circular locking dependency detected [ 1139.057757][T27544] syzkaller #0 Not tainted [ 1139.062175][T27544] ------------------------------------------------------ [ 1139.069189][T27544] syz.3.9352/27544 is trying to acquire lock: [ 1139.075257][T27544] ffff8880747df068 (&dquot->dq_lock){+.+.}-{3:3}, at: dqget+0x6fc/0xeb0 [ 1139.083643][T27544] [ 1139.083643][T27544] but task is already holding lock: [ 1139.091015][T27544] ffff888074501ec8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_setattr+0x86b/0x1c90 [ 1139.099999][T27544] [ 1139.099999][T27544] which lock already depends on the new lock. [ 1139.099999][T27544] [ 1139.110534][T27544] [ 1139.110534][T27544] the existing dependency chain (in reverse order) is: [ 1139.119561][T27544] [ 1139.119561][T27544] -> #5 (&ei->xattr_sem){++++}-{3:3}: [ 1139.127134][T27544] down_read+0x46/0x2e0 [ 1139.131823][T27544] ext4_setattr+0x86b/0x1c90 [ 1139.136936][T27544] notify_change+0xb0d/0xe10 [ 1139.142051][T27544] chown_common+0x3f9/0x5a0 [ 1139.147062][T27544] do_fchownat+0x168/0x270 [ 1139.151991][T27544] __x64_sys_chown+0x82/0x90 [ 1139.157177][T27544] do_syscall_64+0x55/0xb0 [ 1139.162108][T27544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1139.168517][T27544] [ 1139.168517][T27544] -> #4 (jbd2_handle){++++}-{0:0}: [ 1139.175812][T27544] start_this_handle+0x1e9d/0x20c0 [ 1139.181428][T27544] jbd2__journal_start+0x2bb/0x5b0 [ 1139.187130][T27544] jbd2_journal_start+0x2a/0x40 [ 1139.192484][T27544] ocfs2_start_trans+0x376/0x6c0 [ 1139.197932][T27544] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 1139.204246][T27544] ocfs2_dismount_volume+0x1e2/0x890 [ 1139.210049][T27544] generic_shutdown_super+0x134/0x2b0 [ 1139.215937][T27544] kill_block_super+0x44/0x90 [ 1139.221210][T27544] deactivate_locked_super+0x97/0x100 [ 1139.227103][T27544] cleanup_mnt+0x429/0x4c0 [ 1139.232036][T27544] task_work_run+0x1ce/0x250 [ 1139.237138][T27544] exit_to_user_mode_loop+0xe6/0x110 [ 1139.242936][T27544] exit_to_user_mode_prepare+0xf6/0x180 [ 1139.248990][T27544] syscall_exit_to_user_mode+0x1a/0x50 [ 1139.254959][T27544] do_syscall_64+0x61/0xb0 [ 1139.259880][T27544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1139.266288][T27544] [ 1139.266288][T27544] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1139.274794][T27544] down_read+0x46/0x2e0 [ 1139.279467][T27544] ocfs2_start_trans+0x36a/0x6c0 [ 1139.284918][T27544] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 1139.291139][T27544] ocfs2_dismount_volume+0x1e2/0x890 [ 1139.296929][T27544] generic_shutdown_super+0x134/0x2b0 [ 1139.302815][T27544] kill_block_super+0x44/0x90 [ 1139.307998][T27544] deactivate_locked_super+0x97/0x100 [ 1139.313878][T27544] cleanup_mnt+0x429/0x4c0 [ 1139.318798][T27544] task_work_run+0x1ce/0x250 [ 1139.323901][T27544] exit_to_user_mode_loop+0xe6/0x110 [ 1139.329705][T27544] exit_to_user_mode_prepare+0xf6/0x180 [ 1139.335765][T27544] syscall_exit_to_user_mode+0x1a/0x50 [ 1139.341749][T27544] do_syscall_64+0x61/0xb0 [ 1139.346679][T27544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1139.353117][T27544] [ 1139.353117][T27544] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 1139.360583][T27544] ocfs2_start_trans+0x26b/0x6c0 [ 1139.366034][T27544] ocfs2_acquire_dquot+0x67b/0xaf0 [ 1139.371654][T27544] dqget+0x77c/0xeb0 [ 1139.376058][T27544] dquot_set_dqblk+0x2b/0xf90 [ 1139.381243][T27544] quota_setquota+0x4b0/0x530 [ 1139.386437][T27544] __se_sys_quotactl+0x27b/0x950 [ 1139.391879][T27544] do_syscall_64+0x55/0xb0 [ 1139.396802][T27544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1139.403208][T27544] [ 1139.403208][T27544] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 1139.412137][T27544] down_write+0x97/0x1f0 [ 1139.416886][T27544] ocfs2_create_local_dquot+0x1a4/0x1790 [ 1139.423026][T27544] ocfs2_acquire_dquot+0x7cf/0xaf0 [ 1139.428641][T27544] dqget+0x77c/0xeb0 [ 1139.433044][T27544] dquot_set_dqblk+0x2b/0xf90 [ 1139.438223][T27544] quota_setquota+0x4b0/0x530 [ 1139.443405][T27544] __se_sys_quotactl+0x27b/0x950 [ 1139.448851][T27544] do_syscall_64+0x55/0xb0 [ 1139.453772][T27544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1139.460181][T27544] [ 1139.460181][T27544] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 1139.467822][T27544] __lock_acquire+0x2ddb/0x7c80 [ 1139.473183][T27544] lock_acquire+0x197/0x410 [ 1139.478188][T27544] __mutex_lock+0x129/0xcc0 [ 1139.483203][T27544] dqget+0x6fc/0xeb0 [ 1139.487613][T27544] dquot_transfer+0x4b9/0x6d0 [ 1139.492792][T27544] ext4_setattr+0x87d/0x1c90 [ 1139.497891][T27544] notify_change+0xb0d/0xe10 [ 1139.502982][T27544] chown_common+0x3f9/0x5a0 [ 1139.507994][T27544] do_fchownat+0x168/0x270 [ 1139.512910][T27544] __x64_sys_chown+0x82/0x90 [ 1139.518088][T27544] do_syscall_64+0x55/0xb0 [ 1139.523008][T27544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1139.529412][T27544] [ 1139.529412][T27544] other info that might help us debug this: [ 1139.529412][T27544] [ 1139.539622][T27544] Chain exists of: [ 1139.539622][T27544] &dquot->dq_lock --> jbd2_handle --> &ei->xattr_sem [ 1139.539622][T27544] [ 1139.552219][T27544] Possible unsafe locking scenario: [ 1139.552219][T27544] [ 1139.559655][T27544] CPU0 CPU1 [ 1139.565008][T27544] ---- ---- [ 1139.570354][T27544] rlock(&ei->xattr_sem); [ 1139.574765][T27544] lock(jbd2_handle); [ 1139.581360][T27544] lock(&ei->xattr_sem); [ 1139.588193][T27544] lock(&dquot->dq_lock); [ 1139.592590][T27544] [ 1139.592590][T27544] *** DEADLOCK *** [ 1139.592590][T27544] [ 1139.600711][T27544] 3 locks held by syz.3.9352/27544: [ 1139.605887][T27544] #0: ffff88806877a418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1139.615043][T27544] #1: ffff888074502210 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: chown_common+0x313/0x5a0 [ 1139.625211][T27544] #2: ffff888074501ec8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_setattr+0x86b/0x1c90 [ 1139.634592][T27544] [ 1139.634592][T27544] stack backtrace: [ 1139.640462][T27544] CPU: 1 PID: 27544 Comm: syz.3.9352 Not tainted syzkaller #0 [ 1139.647899][T27544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1139.657937][T27544] Call Trace: [ 1139.661203][T27544] [ 1139.664119][T27544] dump_stack_lvl+0x16c/0x230 [ 1139.668788][T27544] ? load_image+0x3b0/0x3b0 [ 1139.673276][T27544] ? show_regs_print_info+0x20/0x20 [ 1139.678463][T27544] ? print_circular_bug+0x12b/0x1a0 [ 1139.683647][T27544] check_noncircular+0x2bd/0x3c0 [ 1139.688578][T27544] ? look_up_lock_class+0x75/0x140 [ 1139.693679][T27544] ? print_deadlock_bug+0x5d0/0x5d0 [ 1139.698861][T27544] ? lockdep_lock+0xe0/0x220 [ 1139.703483][T27544] ? _find_first_zero_bit+0xd3/0x100 [ 1139.708760][T27544] __lock_acquire+0x2ddb/0x7c80 [ 1139.713603][T27544] ? mark_lock+0x94/0x320 [ 1139.717939][T27544] ? verify_lock_unused+0x140/0x140 [ 1139.723119][T27544] ? __lock_acquire+0x1334/0x7c80 [ 1139.728132][T27544] lock_acquire+0x197/0x410 [ 1139.732624][T27544] ? dqget+0x6fc/0xeb0 [ 1139.736686][T27544] ? __might_sleep+0xe0/0xe0 [ 1139.741262][T27544] ? read_lock_is_recursive+0x20/0x20 [ 1139.746616][T27544] ? mark_lock+0x94/0x320 [ 1139.750933][T27544] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1139.756902][T27544] __mutex_lock+0x129/0xcc0 [ 1139.761393][T27544] ? dqget+0x6fc/0xeb0 [ 1139.765444][T27544] ? percpu_counter_add_batch+0x1d9/0x280 [ 1139.771148][T27544] ? lockdep_hardirqs_on+0x98/0x150 [ 1139.776339][T27544] ? percpu_counter_add_batch+0x22b/0x280 [ 1139.782044][T27544] ? dqget+0x6fc/0xeb0 [ 1139.786102][T27544] ? mutex_lock_nested+0x20/0x20 [ 1139.791028][T27544] ? percpu_counter_set+0x1a0/0x1a0 [ 1139.796214][T27544] ? make_kgid+0x640/0x640 [ 1139.800616][T27544] ? do_raw_spin_unlock+0x121/0x230 [ 1139.805800][T27544] dqget+0x6fc/0xeb0 [ 1139.809769][T27544] dquot_transfer+0x4b9/0x6d0 [ 1139.814431][T27544] ? __dquot_transfer+0x22f0/0x22f0 [ 1139.819616][T27544] ? down_read+0x1ac/0x2e0 [ 1139.824016][T27544] ext4_setattr+0x87d/0x1c90 [ 1139.828594][T27544] ? inode_set_ctime_current+0x2d0/0x2d0 [ 1139.834207][T27544] ? apparmor_path_chown+0x239/0x2d0 [ 1139.839472][T27544] ? evm_inode_setattr+0x94/0x6a0 [ 1139.844483][T27544] ? bpf_lsm_inode_setattr+0x9/0x10 [ 1139.849666][T27544] ? try_break_deleg+0x79/0x120 [ 1139.854505][T27544] ? ext4_write_inode+0x550/0x550 [ 1139.859534][T27544] notify_change+0xb0d/0xe10 [ 1139.864120][T27544] chown_common+0x3f9/0x5a0 [ 1139.868609][T27544] ? __ia32_sys_chmod+0x70/0x70 [ 1139.873441][T27544] ? rcu_read_lock_any_held+0xb4/0x120 [ 1139.878884][T27544] ? __mnt_want_write+0x223/0x2a0 [ 1139.883900][T27544] do_fchownat+0x168/0x270 [ 1139.888299][T27544] ? chown_common+0x5a0/0x5a0 [ 1139.892964][T27544] __x64_sys_chown+0x82/0x90 [ 1139.897545][T27544] do_syscall_64+0x55/0xb0 [ 1139.901949][T27544] ? clear_bhb_loop+0x40/0x90 [ 1139.906610][T27544] ? clear_bhb_loop+0x40/0x90 [ 1139.911273][T27544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1139.917153][T27544] RIP: 0033:0x7f7e9d98ec29 [ 1139.921552][T27544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1139.941142][T27544] RSP: 002b:00007f7e9e85e038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 1139.949541][T27544] RAX: ffffffffffffffda RBX: 00007f7e9dbd5fa0 RCX: 00007f7e9d98ec29 [ 1139.957501][T27544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 1139.965459][T27544] RBP: 00007f7e9da11e41 R08: 0000000000000000 R09: 0000000000000000 [ 1139.973411][T27544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1139.981450][T27544] R13: 00007f7e9dbd6038 R14: 00007f7e9dbd5fa0 R15: 00007ffeb89d9ce8 [ 1139.989409][T27544] [ 1140.018851][T27556] loop1: detected capacity change from 0 to 8 [ 1140.118498][ T6017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1140.236295][T27558] loop0: detected capacity change from 0 to 32768 [ 1140.254703][T27558] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1140.287849][T27558] XFS (loop0): Ending clean mount [ 1140.294498][T27558] XFS (loop0): Quotacheck needed: Please wait. [ 1140.310175][T27558] XFS (loop0): Quotacheck: Done. [ 1140.349345][ T6006] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791