last executing test programs: 2.182678567s ago: executing program 3 (id=9912): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002240), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x40046f41, 0x1000000000000) 1.857359894s ago: executing program 3 (id=9917): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, '\x00', @bt={0x8, 0x7, 0x71c7, 0x5, 0x6, 0x3, 0x15, 0xd}}) 1.55350143s ago: executing program 3 (id=9918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x13, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000044}, 0x90) 1.50200062s ago: executing program 3 (id=9920): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x8005, 0x103800) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0xfffffffe, 0xbb6, 0x300a, 0x0, 0xa, 0xa, 0x1, 0x700}}) 1.372031623s ago: executing program 3 (id=9922): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @empty}, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 1.226194966s ago: executing program 3 (id=9925): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)={0x4, 0x6, 0x10001, 0x0, 0xea0f, 0xfffffffffffffffd, 0x27, 0x36a, 0xf8e}) 1.205179726s ago: executing program 2 (id=9926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 987.05091ms ago: executing program 2 (id=9929): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 899.494892ms ago: executing program 1 (id=9931): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000680)=@userptr={0x80000000, 0x8, 0x4, 0x0, 0x69b, {0x77359400}, {0x1, 0xc, 0x41, 0x1, 0x0, 0x0, "c2b9924c"}, 0x0, 0x2, {0x0}, 0x9}) 816.987864ms ago: executing program 0 (id=9932): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='dn+\x88\xfe\xf7\x01') 816.492644ms ago: executing program 2 (id=9933): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r0, 0x0, 0x0, 0x80800) 727.074376ms ago: executing program 0 (id=9934): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) 726.477846ms ago: executing program 1 (id=9935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x3c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x3c}}, 0x2) 592.545238ms ago: executing program 2 (id=9936): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200019000000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="4884000000400000080029"], 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 592.423418ms ago: executing program 1 (id=9937): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {}, [], {}, [], {0x20}}, 0x24, 0x0) 591.653438ms ago: executing program 0 (id=9938): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x0) 420.018051ms ago: executing program 1 (id=9939): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}}, 0x24) 407.376172ms ago: executing program 2 (id=9940): r0 = syz_open_dev$video(&(0x7f0000004a80), 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000003c0)={0xa, 0x101, 0x0, {0x80000004, 0x1, 0x2, 0x7}}) 358.273543ms ago: executing program 0 (id=9941): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a3, &(0x7f0000000040)={'bridge0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 287.101894ms ago: executing program 1 (id=9942): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=@newtaction={0x48, 0x76, 0x1, 0x6, 0x0, {0x0, 0x0, 0x300}, [{0x34, 0x1, [@m_police={0x30, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 195.402296ms ago: executing program 0 (id=9943): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x80000}, {0xfbfffffa, 0xa23e}]}}) 194.811326ms ago: executing program 2 (id=9944): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000180)={0xfd}) 103.933298ms ago: executing program 1 (id=9945): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x2000000, 0x1, 0x3, '\x00', &(0x7f0000000040)}) 0s ago: executing program 0 (id=9946): r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0xff, 0x0, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x10, 0x38fc5865, 0x10001}}) kernel console output (not intermixed with test programs): nd EOD, truncated [ 998.270907][T24854] loop1: p106 size 65536 extends beyond EOD, truncated [ 998.309631][T24854] loop1: p107 size 65536 extends beyond EOD, truncated [ 998.325252][T24854] loop1: p108 size 65536 extends beyond EOD, truncated [ 998.342520][T24884] loop2: detected capacity change from 0 to 32768 [ 998.362098][T24854] loop1: p109 size 65536 extends beyond EOD, truncated [ 998.375930][T24884] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 998.379996][T24896] loop3: detected capacity change from 0 to 2048 [ 998.399765][T24884] dlm: no local IP address has been set [ 998.401603][T24854] loop1: p110 size 65536 extends beyond EOD, truncated [ 998.405952][T24884] dlm: cannot start dlm midcomms -107 [ 998.417971][T24884] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 998.440839][T24854] loop1: p111 size 65536 extends beyond EOD, truncated [ 998.468409][T24854] loop1: p112 size 65536 extends beyond EOD, truncated [ 998.487655][T24854] loop1: p113 size 65536 extends beyond EOD, truncated [ 998.499731][T24854] loop1: p114 size 65536 extends beyond EOD, truncated [ 998.528776][T24854] loop1: p115 size 65536 extends beyond EOD, truncated [ 998.558221][T24854] loop1: p116 size 65536 extends beyond EOD, truncated [ 998.577527][T24854] loop1: p117 size 65536 extends beyond EOD, truncated [ 998.608040][T24854] loop1: p118 size 65536 extends beyond EOD, truncated [ 998.626298][T24854] loop1: p119 size 65536 extends beyond EOD, truncated [ 998.656097][T24854] loop1: p120 size 65536 extends beyond EOD, truncated [ 998.675999][T24899] loop2: detected capacity change from 0 to 128 [ 998.678334][T24854] loop1: p121 size 65536 extends beyond EOD, truncated [ 998.707506][T24854] loop1: p122 size 65536 extends beyond EOD, truncated [ 998.743155][T24854] loop1: p123 size 65536 extends beyond EOD, truncated [ 998.766705][T24854] loop1: p124 size 65536 extends beyond EOD, truncated [ 998.785470][T24854] loop1: p125 size 65536 extends beyond EOD, truncated [ 998.806197][T24854] loop1: p126 size 65536 extends beyond EOD, truncated [ 998.837976][T24854] loop1: p127 size 65536 extends beyond EOD, truncated [ 998.862762][T24854] loop1: p128 size 65536 extends beyond EOD, truncated [ 998.884779][T24854] loop1: p129 size 65536 extends beyond EOD, truncated [ 998.898325][T24890] loop0: detected capacity change from 0 to 32768 [ 998.907130][T24854] loop1: p130 size 65536 extends beyond EOD, truncated [ 998.919864][T24903] loop2: detected capacity change from 0 to 256 [ 998.947260][T24890] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 998.960110][T24854] loop1: p131 size 65536 extends beyond EOD, truncated [ 999.009334][T24854] loop1: p132 size 65536 extends beyond EOD, truncated [ 999.023298][T24890] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 999.057039][T24854] loop1: p133 size 65536 extends beyond EOD, truncated [ 999.109763][T24854] loop1: p134 size 65536 extends beyond EOD, truncated [ 999.120047][T24890] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 999.146049][T24854] loop1: p135 size 65536 extends beyond EOD, truncated [ 999.164097][ T5776] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 999.175663][ T5776] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 999.185841][T24854] loop1: p136 size 65536 extends beyond EOD, truncated [ 999.234045][T24854] loop1: p137 size 65536 extends beyond EOD, truncated [ 999.273707][T24854] loop1: p138 size 65536 extends beyond EOD, truncated [ 999.302647][T24854] loop1: p139 size 65536 extends beyond EOD, truncated [ 999.334948][T24854] loop1: p140 size 65536 extends beyond EOD, truncated [ 999.338823][T24906] loop2: detected capacity change from 0 to 512 [ 999.356645][T24854] loop1: p141 size 65536 extends beyond EOD, truncated [ 999.376567][T24854] loop1: p142 size 65536 extends beyond EOD, truncated [ 999.393120][ T5776] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 203ms [ 999.404377][T24854] loop1: p143 size 65536 extends beyond EOD, truncated [ 999.409548][ T5776] gfs2: fsid=syz:syz.0: jid=0: Done [ 999.435799][T24890] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 999.444637][T24854] loop1: p144 size 65536 extends beyond EOD, truncated [ 999.479154][T24854] loop1: p145 size 65536 extends beyond EOD, truncated [ 999.511219][T24854] loop1: p146 size 65536 extends beyond EOD, truncated [ 999.540450][T24854] loop1: p147 size 65536 extends beyond EOD, truncated [ 999.565683][T24854] loop1: p148 size 65536 extends beyond EOD, truncated [ 999.589745][T24854] loop1: p149 size 65536 extends beyond EOD, truncated [ 999.592274][T24910] loop2: detected capacity change from 0 to 128 [ 999.610560][T24854] loop1: p150 size 65536 extends beyond EOD, truncated [ 999.632207][T24854] loop1: p151 size 65536 extends beyond EOD, truncated [ 999.664351][T24854] loop1: p152 size 65536 extends beyond EOD, truncated [ 999.694906][T24854] loop1: p153 size 65536 extends beyond EOD, truncated [ 999.723254][T24854] loop1: p154 size 65536 extends beyond EOD, truncated [ 999.757186][T24854] loop1: p155 size 65536 extends beyond EOD, truncated [ 999.781821][T24854] loop1: p156 size 65536 extends beyond EOD, truncated [ 999.819061][T24854] loop1: p157 size 65536 extends beyond EOD, truncated [ 999.837234][T24854] loop1: p158 size 65536 extends beyond EOD, truncated [ 999.850823][T24912] loop2: detected capacity change from 0 to 128 [ 999.862557][T24854] loop1: p159 size 65536 extends beyond EOD, truncated [ 999.876674][T24854] loop1: p160 size 65536 extends beyond EOD, truncated [ 999.894821][T24854] loop1: p161 size 65536 extends beyond EOD, truncated [ 999.922006][T24854] loop1: p162 size 65536 extends beyond EOD, truncated [ 999.955770][T24854] loop1: p163 size 65536 extends beyond EOD, truncated [ 1000.010035][T24854] loop1: p164 size 65536 extends beyond EOD, truncated [ 1000.044106][T24854] loop1: p165 size 65536 extends beyond EOD, truncated [ 1000.079691][T24854] loop1: p166 size 65536 extends beyond EOD, truncated [ 1000.119568][T24854] loop1: p167 size 65536 extends beyond EOD, truncated [ 1000.140236][T24914] loop2: detected capacity change from 0 to 512 [ 1000.154826][T24854] loop1: p168 size 65536 extends beyond EOD, truncated [ 1000.165737][T24854] loop1: p169 size 65536 extends beyond EOD, truncated [ 1000.174446][T24854] loop1: p170 size 65536 extends beyond EOD, truncated [ 1000.183108][T24854] loop1: p171 size 65536 extends beyond EOD, truncated [ 1000.221671][T24854] loop1: p172 size 65536 extends beyond EOD, truncated [ 1000.260276][T24854] loop1: p173 size 65536 extends beyond EOD, truncated [ 1000.299276][T24854] loop1: p174 size 65536 extends beyond EOD, truncated [ 1000.345477][T24854] loop1: p175 size 65536 extends beyond EOD, truncated [ 1000.378587][T24854] loop1: p176 size 65536 extends beyond EOD, truncated [ 1000.400603][T24854] loop1: p177 size 65536 extends beyond EOD, truncated [ 1000.409843][T24854] loop1: p178 size 65536 extends beyond EOD, truncated [ 1000.425231][T24854] loop1: p179 size 65536 extends beyond EOD, truncated [ 1000.453651][T24854] loop1: p180 size 65536 extends beyond EOD, truncated [ 1000.473664][T24854] loop1: p181 size 65536 extends beyond EOD, truncated [ 1000.492406][T24854] loop1: p182 size 65536 extends beyond EOD, truncated [ 1000.499778][T24918] loop2: detected capacity change from 0 to 128 [ 1000.515434][T24916] loop0: detected capacity change from 0 to 2048 [ 1000.516575][T24854] loop1: p183 size 65536 extends beyond EOD, truncated [ 1000.570935][T24854] loop1: p184 size 65536 extends beyond EOD, truncated [ 1000.601372][T24854] loop1: p185 size 65536 extends beyond EOD, truncated [ 1000.615108][T24854] loop1: p186 size 65536 extends beyond EOD, truncated [ 1000.664640][T24854] loop1: p187 size 65536 extends beyond EOD, truncated [ 1000.684504][T24854] loop1: p188 size 65536 extends beyond EOD, truncated [ 1000.704061][T24854] loop1: p189 size 65536 extends beyond EOD, truncated [ 1000.732445][T24854] loop1: p190 size 65536 extends beyond EOD, truncated [ 1000.744320][T24854] loop1: p191 size 65536 extends beyond EOD, truncated [ 1000.762619][T24854] loop1: p192 size 65536 extends beyond EOD, truncated [ 1000.781156][T24854] loop1: p193 size 65536 extends beyond EOD, truncated [ 1000.816915][T24854] loop1: p194 size 65536 extends beyond EOD, truncated [ 1000.848019][T24854] loop1: p195 size 65536 extends beyond EOD, truncated [ 1000.868048][T24854] loop1: p196 size 65536 extends beyond EOD, truncated [ 1000.875739][T24922] loop0: detected capacity change from 0 to 2368 [ 1000.886896][T24854] loop1: p197 size 65536 extends beyond EOD, truncated [ 1000.904808][T24854] loop1: p198 size 65536 extends beyond EOD, truncated [ 1000.936511][T24854] loop1: p199 size 65536 extends beyond EOD, truncated [ 1000.957932][T24854] loop1: p200 size 65536 extends beyond EOD, truncated [ 1000.979225][T24854] loop1: p201 size 65536 extends beyond EOD, truncated [ 1001.005256][T24854] loop1: p202 size 65536 extends beyond EOD, truncated [ 1001.026792][T24854] loop1: p203 size 65536 extends beyond EOD, truncated [ 1001.069689][T24854] loop1: p204 size 65536 extends beyond EOD, truncated [ 1001.083152][T24854] loop1: p205 size 65536 extends beyond EOD, truncated [ 1001.102314][T24854] loop1: p206 size 65536 extends beyond EOD, truncated [ 1001.123328][T24854] loop1: p207 size 65536 extends beyond EOD, truncated [ 1001.161109][T24854] loop1: p208 size 65536 extends beyond EOD, truncated [ 1001.191580][T24854] loop1: p209 size 65536 extends beyond EOD, truncated [ 1001.221576][T24854] loop1: p210 size 65536 extends beyond EOD, truncated [ 1001.238915][T24924] loop0: detected capacity change from 0 to 4096 [ 1001.255254][T24854] loop1: p211 size 65536 extends beyond EOD, truncated [ 1001.273769][T24854] loop1: p212 size 65536 extends beyond EOD, truncated [ 1001.296385][T24854] loop1: p213 size 65536 extends beyond EOD, truncated [ 1001.314159][T24925] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1001.343162][T24854] loop1: p214 size 65536 extends beyond EOD, truncated [ 1001.365553][T24854] loop1: p215 size 65536 extends beyond EOD, truncated [ 1001.405887][T24854] loop1: p216 size 65536 extends beyond EOD, truncated [ 1001.451155][T24854] loop1: p217 size 65536 extends beyond EOD, truncated [ 1001.472126][T24854] loop1: p218 size 65536 extends beyond EOD, truncated [ 1001.498843][T24854] loop1: p219 size 65536 extends beyond EOD, truncated [ 1001.523292][T24854] loop1: p220 size 65536 extends beyond EOD, truncated [ 1001.563689][T24854] loop1: p221 size 65536 extends beyond EOD, truncated [ 1001.588640][T24854] loop1: p222 size 65536 extends beyond EOD, truncated [ 1001.610244][T24854] loop1: p223 size 65536 extends beyond EOD, truncated [ 1001.633886][T24854] loop1: p224 size 65536 extends beyond EOD, truncated [ 1001.656446][T24854] loop1: p225 size 65536 extends beyond EOD, truncated [ 1001.674553][T24854] loop1: p226 size 65536 extends beyond EOD, truncated [ 1001.697054][T24854] loop1: p227 size 65536 extends beyond EOD, truncated [ 1001.715027][T24854] loop1: p228 size 65536 extends beyond EOD, truncated [ 1001.734244][T24854] loop1: p229 size 65536 extends beyond EOD, truncated [ 1001.750469][T24854] loop1: p230 size 65536 extends beyond EOD, truncated [ 1001.778162][T24854] loop1: p231 size 65536 extends beyond EOD, truncated [ 1001.794012][T24854] loop1: p232 size 65536 extends beyond EOD, truncated [ 1001.811370][T24854] loop1: p233 size 65536 extends beyond EOD, truncated [ 1001.840269][T24854] loop1: p234 size 65536 extends beyond EOD, truncated [ 1001.853264][T24854] loop1: p235 size 65536 extends beyond EOD, truncated [ 1001.875432][T24854] loop1: p236 size 65536 extends beyond EOD, truncated [ 1001.894727][T24854] loop1: p237 size 65536 extends beyond EOD, truncated [ 1001.909553][T24854] loop1: p238 size 65536 extends beyond EOD, truncated [ 1001.930968][T24854] loop1: p239 size 65536 extends beyond EOD, truncated [ 1001.951771][T24854] loop1: p240 size 65536 extends beyond EOD, truncated [ 1001.966136][T24854] loop1: p241 size 65536 extends beyond EOD, truncated [ 1001.987193][T24854] loop1: p242 size 65536 extends beyond EOD, truncated [ 1002.007430][T24854] loop1: p243 size 65536 extends beyond EOD, truncated [ 1002.024084][T24854] loop1: p244 size 65536 extends beyond EOD, truncated [ 1002.040650][T24854] loop1: p245 size 65536 extends beyond EOD, truncated [ 1002.057368][T24854] loop1: p246 size 65536 extends beyond EOD, truncated [ 1002.074090][T24854] loop1: p247 size 65536 extends beyond EOD, truncated [ 1002.093408][T24854] loop1: p248 size 65536 extends beyond EOD, truncated [ 1002.114480][T24854] loop1: p249 size 65536 extends beyond EOD, truncated [ 1002.136070][T24854] loop1: p250 size 65536 extends beyond EOD, truncated [ 1002.157204][T24854] loop1: p251 size 65536 extends beyond EOD, truncated [ 1002.178972][T24854] loop1: p252 size 65536 extends beyond EOD, truncated [ 1002.196361][T24854] loop1: p253 size 65536 extends beyond EOD, truncated [ 1002.217559][T24854] loop1: p254 size 65536 extends beyond EOD, truncated [ 1002.240133][T24854] loop1: p255 size 65536 extends beyond EOD, truncated [ 1002.585727][T24927] loop0: detected capacity change from 0 to 32768 [ 1002.645806][T24927] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1002.716005][T24927] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1002.972663][T24927] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1003.032649][ T6440] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1003.056772][ T6440] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1003.134913][T24932] loop3: detected capacity change from 0 to 2048 [ 1003.193843][T24933] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1003.317836][ T6440] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 244ms [ 1003.354680][ T6440] gfs2: fsid=syz:syz.0: jid=0: Done [ 1003.385164][T24927] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1003.930541][T13992] udevd[13992]: inotify_add_watch(7, /dev/loop1p10, 10) failed: No such file or directory [ 1003.930702][ T6457] udevd[6457]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 1003.944688][T13988] udevd[13988]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory [ 1003.954483][T13002] udevd[13002]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory [ 1003.961468][ T6460] udevd[6460]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 1003.974283][ T7678] udevd[7678]: inotify_add_watch(7, /dev/loop1p8, 10) failed: No such file or directory [ 1003.994663][T13990] udevd[13990]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1004.008221][ T6456] udevd[6456]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 1004.018421][T13991] udevd[13991]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1004.041467][ T5813] udevd[5813]: inotify_add_watch(7, /dev/loop1p12, 10) failed: No such file or directory [ 1005.771892][T24941] loop2: detected capacity change from 0 to 4096 [ 1006.732464][T24945] loop1: detected capacity change from 0 to 16384 [ 1006.832605][T24946] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1007.053008][T24943] loop2: detected capacity change from 0 to 32768 [ 1007.093030][T24943] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 1007.101037][T24943] dlm: no local IP address has been set [ 1007.124885][T24943] dlm: cannot start dlm midcomms -107 [ 1007.131383][T24943] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 1007.186655][T24948] loop1: detected capacity change from 0 to 4096 [ 1007.207542][T24948] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1007.547753][T24951] loop2: detected capacity change from 0 to 4096 [ 1007.643711][T24951] ntfs: volume version 3.1. [ 1007.653928][T24953] loop3: detected capacity change from 0 to 4096 [ 1007.681109][T24957] loop1: detected capacity change from 0 to 4096 [ 1007.858793][T24957] ntfs: volume version 3.1. [ 1007.891531][T24953] ntfs: volume version 3.1. [ 1008.330067][T24962] loop1: detected capacity change from 0 to 4096 [ 1008.396948][T24962] ntfs: volume version 3.1. [ 1008.475928][T24956] loop0: detected capacity change from 0 to 32768 [ 1008.679544][T24959] loop2: detected capacity change from 0 to 32768 [ 1008.719458][T24959] (syz.2.8528,24959,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1008.793719][T24959] (syz.2.8528,24959,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1009.135156][T24967] loop1: detected capacity change from 0 to 8192 [ 1009.250627][T24970] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1009.281414][T24963] loop3: detected capacity change from 0 to 32768 [ 1009.329280][T24963] (syz.3.8530,24963,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1009.359842][T24963] (syz.3.8530,24963,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1010.073688][T24969] loop2: detected capacity change from 0 to 32768 [ 1010.094469][T24969] (syz.2.8533,24969,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1010.139634][T24969] (syz.2.8533,24969,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1010.489654][T24974] loop1: detected capacity change from 0 to 32768 [ 1010.504565][T24974] (syz.1.8534,24974,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1010.538888][T24974] (syz.1.8534,24974,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1010.797643][T24978] loop1: detected capacity change from 0 to 512 [ 1012.835734][T24982] loop0: detected capacity change from 0 to 8192 [ 1012.930179][T24983] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1014.380044][T24987] loop3: detected capacity change from 0 to 32768 [ 1014.389661][T24987] (syz.3.8541,24987,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1014.422148][T24987] (syz.3.8541,24987,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1015.723874][T24991] loop3: detected capacity change from 0 to 65536 [ 1015.747841][T24991] (syz.3.8543,24991,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1015.780034][T24991] (syz.3.8543,24991,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1016.127118][T24995] loop3: detected capacity change from 0 to 4096 [ 1016.234504][T24995] ntfs: volume version 3.1. [ 1016.596823][T24997] loop3: detected capacity change from 0 to 512 [ 1017.385055][T24993] loop1: detected capacity change from 0 to 65536 [ 1017.395848][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1017.402353][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1017.411807][T24993] (syz.1.8544,24993,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1017.464943][T24993] (syz.1.8544,24993,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1017.812871][T25003] loop1: detected capacity change from 0 to 4096 [ 1017.870427][T25003] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 1019.407356][T25007] loop2: detected capacity change from 0 to 16384 [ 1019.433442][T25007] REISERFS warning (device loop2): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop2, block 16, size 4096) [ 1019.463634][T25007] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 1020.185530][T25010] loop2: detected capacity change from 0 to 16384 [ 1020.222186][T25010] REISERFS warning (device loop2): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop2, block 16, size 4096) [ 1020.296875][T25010] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 1020.548264][T25001] loop0: detected capacity change from 0 to 131072 [ 1020.607030][T25001] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1020.658137][T25001] REISERFS (device loop0): found reiserfs format "3.5" with standard journal [ 1020.675253][T25001] REISERFS (device loop0): using ordered data mode [ 1020.681820][T25001] reiserfs: using flush barriers [ 1020.694550][T25001] REISERFS warning (device loop0): journal-1256 journal_init: unable to get memory for journal structure [ 1020.748940][T25001] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 1021.031274][T25014] loop2: detected capacity change from 0 to 16384 [ 1021.063376][T25019] loop3: detected capacity change from 0 to 8 [ 1021.082256][T25014] REISERFS warning (device loop2): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop2, block 16, size 4096) [ 1021.132017][T25014] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 1021.182907][T25005] loop1: detected capacity change from 0 to 131072 [ 1021.291509][T25005] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1021.326721][T25005] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1021.356548][T25005] REISERFS (device loop1): using ordered data mode [ 1021.365581][T25005] reiserfs: using flush barriers [ 1021.462305][T25005] REISERFS (device loop1): journal params: device loop1, size 15748, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1021.603626][T25005] REISERFS warning (device loop1): journal-2004 journal_init: Journal cnode memory allocation failed (2267712 bytes). Journal is too large for available memory. Usually this is due to a journal that is too large. [ 1021.694886][T25005] REISERFS warning (device loop1): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 1022.085755][T25028] loop1: detected capacity change from 0 to 128 [ 1022.118254][T25028] VFS: unable to find oldfs superblock on device loop1 [ 1022.473162][T25030] loop1: detected capacity change from 0 to 2048 [ 1022.480450][T25025] loop2: detected capacity change from 0 to 32768 [ 1022.581248][T25030] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1022.674659][T25031] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1023.115480][T25033] loop1: detected capacity change from 0 to 8192 [ 1023.181972][T25033] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1023.222219][T25033] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1023.281626][T25033] REISERFS (device loop1): using ordered data mode [ 1023.288190][T25033] reiserfs: using flush barriers [ 1023.371282][T25033] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1023.432897][T25033] REISERFS (device loop1): checking transaction log (loop1) [ 1023.677308][T25037] loop2: detected capacity change from 0 to 1024 [ 1023.697517][T25033] REISERFS (device loop1): Using r5 hash to sort names [ 1023.716215][T25033] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1023.749541][T25037] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1025.252714][T25047] loop3: detected capacity change from 0 to 256 [ 1025.276987][T25047] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1025.299722][T25048] loop0: detected capacity change from 0 to 256 [ 1025.326024][T25047] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1025.355415][T25047] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1025.369574][T25048] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1025.380630][T25047] UDF-fs: Scanning with blocksize 512 failed [ 1025.402457][T25047] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1025.416162][T25048] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1025.451568][T25048] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1025.482988][T25048] UDF-fs: Scanning with blocksize 512 failed [ 1025.485064][T25047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1025.510657][T25048] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1025.584526][T25048] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1025.789081][T25051] loop3: detected capacity change from 0 to 256 [ 1025.841920][T25051] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1025.883543][T25051] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1025.923143][T25051] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1025.963331][T25051] UDF-fs: Scanning with blocksize 512 failed [ 1025.987316][T25051] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1026.043012][T25051] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1026.302293][T25054] loop3: detected capacity change from 0 to 512 [ 1026.344895][T25054] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1026.376462][T25054] UDF-fs: Scanning with blocksize 512 failed [ 1026.418288][T25054] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1026.435734][T25054] UDF-fs: Scanning with blocksize 1024 failed [ 1026.457110][T25054] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1026.475510][T25054] UDF-fs: Scanning with blocksize 2048 failed [ 1026.487981][T25054] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1026.519784][T25054] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1026.789743][T25056] loop3: detected capacity change from 0 to 512 [ 1026.844902][T25056] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1026.873687][T25056] UDF-fs: Scanning with blocksize 512 failed [ 1026.895014][T25056] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1026.916417][T25056] UDF-fs: Scanning with blocksize 1024 failed [ 1026.948511][T25056] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1026.965908][T25056] UDF-fs: Scanning with blocksize 2048 failed [ 1026.985066][T25056] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1027.019732][T25056] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1027.229546][T25058] loop3: detected capacity change from 0 to 128 [ 1027.268835][T25058] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1027.317204][T25058] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1027.551521][T25060] loop3: detected capacity change from 0 to 128 [ 1027.612479][T25060] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1027.660324][T25060] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1028.218883][T25064] loop2: detected capacity change from 0 to 128 [ 1028.458216][T25066] loop1: detected capacity change from 0 to 2048 [ 1028.650497][T25068] loop2: detected capacity change from 0 to 8192 [ 1028.680934][T25068] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1028.688454][T25068] UDF-fs: Scanning with blocksize 512 failed [ 1028.720679][T25068] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1028.748371][T25068] UDF-fs: Scanning with blocksize 1024 failed [ 1028.774794][T25070] loop1: detected capacity change from 0 to 128 [ 1028.775920][T25068] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1028.812776][T25068] UDF-fs: Scanning with blocksize 2048 failed [ 1028.851023][T25068] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1029.094660][T25072] loop1: detected capacity change from 0 to 2048 [ 1029.505478][T25062] loop3: detected capacity change from 0 to 65536 [ 1029.547931][T25076] loop2: detected capacity change from 0 to 8192 [ 1029.771427][T25079] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1029.824925][T25081] loop2: detected capacity change from 0 to 256 [ 1030.056995][T25083] loop2: detected capacity change from 0 to 512 [ 1030.297208][T25087] loop0: detected capacity change from 0 to 2048 [ 1035.026784][T25099] loop3: detected capacity change from 0 to 2048 [ 1035.107193][T25099] loop3: p1 p2 p3 [ 1035.318811][T25095] loop2: detected capacity change from 0 to 32768 [ 1035.458940][T25101] loop3: detected capacity change from 0 to 2048 [ 1035.481003][T24938] udevd[24938]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1035.505820][ T5813] udevd[5813]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1035.512345][T13991] udevd[13991]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 1035.642296][T25101] loop3: p2 p3 p7 [ 1035.791763][ T5813] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1035.938289][T24938] udevd[24938]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 1035.955067][T13990] udevd[13990]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1035.971276][ T5813] udevd[5813]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 1036.449895][T25103] loop2: detected capacity change from 0 to 32768 [ 1036.533143][T25103] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1036.606448][T25105] loop3: detected capacity change from 0 to 32768 [ 1036.670061][T25103] XFS (loop2): Ending clean mount [ 1036.688036][T25105] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1036.829200][ T6582] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1036.832614][T25105] XFS (loop3): Ending clean mount [ 1036.953519][ T6580] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1038.196514][T25125] loop3: detected capacity change from 0 to 32768 [ 1038.264293][T25125] loop3: p1 p9 p11 [ 1038.687349][T25123] loop2: detected capacity change from 0 to 65536 [ 1038.773362][T25123] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1038.816518][T13990] udevd[13990]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1038.831509][T24938] udevd[24938]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory [ 1038.836274][T13991] udevd[13991]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory [ 1038.959638][T25123] XFS (loop2): Ending clean mount [ 1039.128125][ T6582] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1039.581168][T25127] loop1: detected capacity change from 0 to 65536 [ 1039.626736][T25127] XFS (loop1): Deprecated V4 format (crc=0) not supported by kernel. [ 1041.687452][T25139] loop0: detected capacity change from 0 to 131072 [ 1041.762095][T25139] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel. [ 1043.130640][T25157] loop3: detected capacity change from 0 to 2048 [ 1045.098928][T25169] loop2: detected capacity change from 0 to 16384 [ 1045.127074][T25169] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1045.145509][T25169] UDF-fs: Scanning with blocksize 512 failed [ 1045.170780][T25169] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1045.189881][T25169] UDF-fs: Scanning with blocksize 1024 failed [ 1045.210457][T25169] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1045.232800][T25169] UDF-fs: Scanning with blocksize 2048 failed [ 1045.282006][T25169] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1046.326195][T25171] loop2: detected capacity change from 0 to 32768 [ 1046.390799][T25171] XFS (loop2): Mounting V5 Filesystem 41ca08f1-94d2-48aa-bd9e-c0e7c187d3a2 [ 1046.716122][T25171] XFS (loop2): Ending clean mount [ 1046.774113][T25185] openvswitch: netlink: Actions may not be safe on all matching packets [ 1046.888864][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 1046.888879][ T28] audit: type=1326 audit(1757353035.341:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25186 comm="syz.0.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db2b8ebe9 code=0x7ffc0000 [ 1046.931295][ T6582] XFS (loop2): Unmounting Filesystem 41ca08f1-94d2-48aa-bd9e-c0e7c187d3a2 [ 1046.982989][ T28] audit: type=1326 audit(1757353035.341:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25186 comm="syz.0.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db2b8ebe9 code=0x7ffc0000 [ 1047.040234][ T28] audit: type=1326 audit(1757353035.341:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25186 comm="syz.0.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f7db2b8ebe9 code=0x7ffc0000 [ 1047.115161][ T28] audit: type=1326 audit(1757353035.341:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25186 comm="syz.0.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db2b8ebe9 code=0x7ffc0000 [ 1047.179236][ T28] audit: type=1326 audit(1757353035.341:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25186 comm="syz.0.8613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db2b8ebe9 code=0x7ffc0000 [ 1047.469152][ T5102] Bluetooth: hci0: unexpected event for opcode 0x0c1a [ 1047.868254][T25203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8621'. [ 1048.402650][T25221] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8630'. [ 1048.808421][T25237] netlink: 'syz.2.8637': attribute type 41 has an invalid length. [ 1049.278816][T25247] loop2: detected capacity change from 0 to 256 [ 1049.286451][T25201] loop3: detected capacity change from 0 to 65536 [ 1049.372556][T25201] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel. [ 1049.441373][T25247] FAT-fs (loop2): Directory bread(block 64) failed [ 1049.444493][T25256] usb usb8: usbfs: process 25256 (syz.0.8645) did not claim interface 0 before use [ 1049.465475][T25247] FAT-fs (loop2): Directory bread(block 65) failed [ 1049.488898][T25247] FAT-fs (loop2): Directory bread(block 66) failed [ 1049.495496][T25247] FAT-fs (loop2): Directory bread(block 67) failed [ 1049.522066][T25247] FAT-fs (loop2): Directory bread(block 68) failed [ 1049.528667][T25247] FAT-fs (loop2): Directory bread(block 69) failed [ 1049.575753][T25247] FAT-fs (loop2): Directory bread(block 70) failed [ 1049.610177][T25247] FAT-fs (loop2): Directory bread(block 71) failed [ 1049.617179][T25247] FAT-fs (loop2): Directory bread(block 72) failed [ 1049.643035][T25247] FAT-fs (loop2): Directory bread(block 73) failed [ 1049.656657][T25233] loop1: detected capacity change from 0 to 32768 [ 1049.703188][T25258] netlink: 'syz.3.8646': attribute type 21 has an invalid length. [ 1049.732886][T25258] netlink: 'syz.3.8646': attribute type 15 has an invalid length. [ 1049.762619][T25258] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8646'. [ 1049.785530][T25258] IPv6: NLM_F_CREATE should be specified when creating new route [ 1049.795534][T25233] loop1: p9 p11 p16 [ 1049.809817][T25258] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1049.817741][T25258] IPv6: NLM_F_CREATE should be set when creating new route [ 1049.825183][T25258] IPv6: NLM_F_CREATE should be set when creating new route [ 1049.832467][T25258] IPv6: NLM_F_CREATE should be set when creating new route [ 1050.097765][T25264] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8649'. [ 1051.323516][T25302] netlink: 'syz.0.8667': attribute type 1 has an invalid length. [ 1051.385395][T25304] netlink: 'syz.2.8668': attribute type 6 has an invalid length. [ 1051.877219][T25322] netlink: 'syz.2.8678': attribute type 4 has an invalid length. [ 1052.100813][T25328] loop2: detected capacity change from 0 to 512 [ 1052.130986][T25328] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1052.162350][T25328] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1052.176610][T25328] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 1052.547119][ T5776] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1052.762015][T25352] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1052.783179][ T5776] usb 3-1: config index 0 descriptor too short (expected 24931, got 36) [ 1052.806706][ T5776] usb 3-1: config 100 has too many interfaces: 114, using maximum allowed: 32 [ 1052.818307][ T5776] usb 3-1: config 100 has an invalid descriptor of length 105, skipping remainder of the config [ 1052.840428][ T5776] usb 3-1: config 100 has 0 interfaces, different from the descriptor's value: 114 [ 1052.861658][ T5776] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1052.878444][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.149918][ T27] usb 3-1: USB disconnect, device number 24 [ 1053.568026][T25378] dlm: no locking on control device [ 1053.579335][T25366] loop1: detected capacity change from 0 to 32768 [ 1053.629393][T25366] loop1: p1 p2 p3 [ 1053.844576][T24938] udevd[24938]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1053.854794][T13991] udevd[13991]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1053.876240][T13990] udevd[13990]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1053.893072][T25387] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1055.322858][T25444] loop2: detected capacity change from 0 to 2048 [ 1055.360773][T25444] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1055.443330][T25444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1055.541493][T25444] EXT4-fs error (device loop2): empty_inline_dir:1857: inode #12: block 9: comm syz.2.8732: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 1055.615930][T25444] EXT4-fs (loop2): Remounting filesystem read-only [ 1055.622514][T25444] EXT4-fs warning (device loop2): empty_inline_dir:1864: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 1055.752092][T25466] loop3: detected capacity change from 0 to 256 [ 1055.777262][T25466] FAT-fs (loop3): Directory bread(block 64) failed [ 1055.793421][T25466] FAT-fs (loop3): Directory bread(block 65) failed [ 1055.830679][T25466] FAT-fs (loop3): Directory bread(block 66) failed [ 1055.837262][T25466] FAT-fs (loop3): Directory bread(block 67) failed [ 1055.858590][ T6582] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.903430][T25466] FAT-fs (loop3): Directory bread(block 68) failed [ 1055.911674][T25466] FAT-fs (loop3): Directory bread(block 69) failed [ 1055.958148][T25466] FAT-fs (loop3): Directory bread(block 70) failed [ 1055.965709][T25466] FAT-fs (loop3): Directory bread(block 71) failed [ 1055.975297][T25466] FAT-fs (loop3): Directory bread(block 72) failed [ 1055.981977][T25466] FAT-fs (loop3): Directory bread(block 73) failed [ 1056.502181][T25494] loop2: detected capacity change from 0 to 256 [ 1056.564644][T25494] FAT-fs (loop2): Directory bread(block 64) failed [ 1056.582890][T25494] FAT-fs (loop2): Directory bread(block 65) failed [ 1056.615574][T25494] FAT-fs (loop2): Directory bread(block 66) failed [ 1056.645149][T25494] FAT-fs (loop2): Directory bread(block 67) failed [ 1056.673110][T25494] FAT-fs (loop2): Directory bread(block 68) failed [ 1056.680654][T25498] loop1: detected capacity change from 0 to 512 [ 1056.687575][T25494] FAT-fs (loop2): Directory bread(block 69) failed [ 1056.702207][T25494] FAT-fs (loop2): Directory bread(block 70) failed [ 1056.749207][T25498] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1056.757989][T25494] FAT-fs (loop2): Directory bread(block 71) failed [ 1056.777476][T25494] FAT-fs (loop2): Directory bread(block 72) failed [ 1056.785330][T25494] FAT-fs (loop2): Directory bread(block 73) failed [ 1056.790073][T25502] loop3: detected capacity change from 0 to 128 [ 1056.827564][T25498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.877541][T25498] ext4 filesystem being mounted at /2024/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1057.061363][ T6585] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.914368][T25540] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8785'. [ 1058.365564][T25558] befs: (loop1): No write support. Marking filesystem read-only [ 1058.386232][T25558] syz.1.8787: attempt to access beyond end of device [ 1058.386232][T25558] loop1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1058.409644][T25558] befs: (loop1): unable to read superblock [ 1058.760776][T25574] loop1: detected capacity change from 0 to 256 [ 1058.792794][T25577] loop3: detected capacity change from 0 to 1024 [ 1058.872275][T25574] FAT-fs (loop1): Directory bread(block 64) failed [ 1058.907465][T25574] FAT-fs (loop1): Directory bread(block 65) failed [ 1058.930583][T25574] FAT-fs (loop1): Directory bread(block 66) failed [ 1058.937179][T25574] FAT-fs (loop1): Directory bread(block 67) failed [ 1058.971945][T25574] FAT-fs (loop1): Directory bread(block 68) failed [ 1058.987394][T25574] FAT-fs (loop1): Directory bread(block 69) failed [ 1059.000337][T25574] FAT-fs (loop1): Directory bread(block 70) failed [ 1059.018018][T25574] FAT-fs (loop1): Directory bread(block 71) failed [ 1059.030430][T25574] FAT-fs (loop1): Directory bread(block 72) failed [ 1059.037030][T25574] FAT-fs (loop1): Directory bread(block 73) failed [ 1059.210508][T25588] netlink: 196 bytes leftover after parsing attributes in process `syz.0.8802'. [ 1059.235994][T25588] netlink: 196 bytes leftover after parsing attributes in process `syz.0.8802'. [ 1059.246990][T25588] netlink: 19 bytes leftover after parsing attributes in process `syz.0.8802'. [ 1060.261905][T25636] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8826'. [ 1060.602325][T25650] snd_dummy snd_dummy.0: control 2:8:3:syz1:4 is already present [ 1060.626262][T25652] loop1: detected capacity change from 0 to 764 [ 1060.647966][T25652] rock: directory entry would overflow storage [ 1060.668081][T25652] rock: sig=0x4654, size=5, remaining=4 [ 1060.729555][T25652] isofs: Unable to find the ".." directory for NFS. [ 1061.102090][T25675] loop0: detected capacity change from 0 to 256 [ 1061.215284][T25675] FAT-fs (loop0): Directory bread(block 64) failed [ 1061.248717][T25675] FAT-fs (loop0): Directory bread(block 65) failed [ 1061.272519][T25675] FAT-fs (loop0): Directory bread(block 66) failed [ 1061.291805][T25675] FAT-fs (loop0): Directory bread(block 67) failed [ 1061.314942][T25675] FAT-fs (loop0): Directory bread(block 68) failed [ 1061.331531][T25675] FAT-fs (loop0): Directory bread(block 69) failed [ 1061.347280][T25675] FAT-fs (loop0): Directory bread(block 70) failed [ 1061.354055][T25675] FAT-fs (loop0): Directory bread(block 71) failed [ 1061.379360][T25675] FAT-fs (loop0): Directory bread(block 72) failed [ 1061.385964][T25675] FAT-fs (loop0): Directory bread(block 73) failed [ 1061.540107][T25689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8852'. [ 1061.605147][T25689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8852'. [ 1061.946746][T25707] netlink: 'syz.0.8860': attribute type 5 has an invalid length. [ 1062.117522][ T6440] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1062.126664][T25713] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8864'. [ 1062.158885][T25713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8864'. [ 1062.184354][T25713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8864'. [ 1062.347955][ T6440] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 1062.366671][ T6440] usb 3-1: config 0 has no interface number 0 [ 1062.379874][ T6440] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1062.421580][ T6440] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1062.435693][ T6440] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.455152][ T6440] usb 3-1: Product: syz [ 1062.465944][ T6440] usb 3-1: Manufacturer: syz [ 1062.470973][ T6440] usb 3-1: SerialNumber: syz [ 1062.492726][ T6440] usb 3-1: config 0 descriptor?? [ 1062.507228][T25701] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1062.518734][ T6440] usb-storage 3-1:0.20: USB Mass Storage device detected [ 1062.569736][ T6440] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1062.770545][ T6440] scsi host1: usb-storage 3-1:0.20 [ 1062.851878][T25743] loop0: detected capacity change from 0 to 2048 [ 1062.918828][T25747] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1062.989804][T25743] NILFS (loop0): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 1062.993518][T17633] usb 3-1: USB disconnect, device number 25 [ 1063.004939][T25743] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1063.023572][T25743] Remounting filesystem read-only [ 1063.028750][T25743] NILFS (loop0): error -5 truncating bmap (ino=16) [ 1063.082903][T25743] syz.0.8878 (25743) used greatest stack depth: 19376 bytes left [ 1063.098148][ T6578] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 1063.105436][ T6578] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 1063.110402][T25749] loop1: detected capacity change from 0 to 8 [ 1063.113204][ T6578] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1063.133391][ T6578] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1063.142412][ T6578] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1063.166331][ T6578] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 1063.182708][ T6578] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 1063.190811][ T6578] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1063.197167][ T6440] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1063.200346][ T6578] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1063.217440][ T6578] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 1063.226017][ T6578] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1063.314061][T25751] loop1: detected capacity change from 0 to 256 [ 1063.349498][T25751] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 1063.421389][ T6440] usb 4-1: Using ep0 maxpacket: 16 [ 1063.430616][ T6440] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1063.441100][ T6440] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.457168][ T6440] usb 4-1: Product: syz [ 1063.464936][ T6440] usb 4-1: Manufacturer: syz [ 1063.469784][ T6440] usb 4-1: SerialNumber: syz [ 1063.504580][ T6440] r8152-cfgselector 4-1: config 0 descriptor?? [ 1063.906255][T25761] loop2: detected capacity change from 0 to 256 [ 1063.951325][T25761] FAT-fs (loop2): Directory bread(block 64) failed [ 1063.977487][T25761] FAT-fs (loop2): Directory bread(block 65) failed [ 1063.978181][ T6440] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1063.995117][T25761] FAT-fs (loop2): Directory bread(block 66) failed [ 1064.010296][T25761] FAT-fs (loop2): Directory bread(block 67) failed [ 1064.028702][ T6440] r8152-cfgselector 4-1: USB disconnect, device number 33 [ 1064.034226][T25761] FAT-fs (loop2): Directory bread(block 68) failed [ 1064.050733][T25761] FAT-fs (loop2): Directory bread(block 69) failed [ 1064.060163][T25761] FAT-fs (loop2): Directory bread(block 70) failed [ 1064.107041][T25761] FAT-fs (loop2): Directory bread(block 71) failed [ 1064.124664][T25761] FAT-fs (loop2): Directory bread(block 72) failed [ 1064.157349][T25761] FAT-fs (loop2): Directory bread(block 73) failed [ 1064.246653][T25759] loop1: detected capacity change from 0 to 32768 [ 1064.269737][T25759] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.8885 (25759) [ 1064.326092][T25759] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1064.360917][T25759] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1064.392195][T25759] BTRFS info (device loop1): allowing degraded mounts [ 1064.405148][T25759] BTRFS info (device loop1): using free space tree [ 1064.537283][T25759] BTRFS info (device loop1): auto enabling async discard [ 1064.577064][T25759] BTRFS info (device loop1): checking UUID tree [ 1064.813796][ T6585] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1065.146841][T25809] loop3: detected capacity change from 0 to 256 [ 1066.057691][T25842] loop1: detected capacity change from 0 to 256 [ 1066.372077][T25852] __nla_validate_parse: 2 callbacks suppressed [ 1066.372092][T25852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8923'. [ 1067.100939][T25888] loop1: detected capacity change from 0 to 128 [ 1067.114255][T25888] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 1067.133954][T25889] Driver unsupported XDP return value 0 on prog (id 495) dev N/A, expect packet loss! [ 1067.288866][ T6585] sysv_free_block: flc_count > flc_size [ 1067.306115][ T6585] sysv_free_block: flc_count > flc_size [ 1067.326099][ T6585] sysv_free_block: flc_count > flc_size [ 1067.331746][ T6585] sysv_free_block: flc_count > flc_size [ 1067.344424][ T6585] sysv_free_block: flc_count > flc_size [ 1067.368129][ T6585] sysv_free_block: flc_count > flc_size [ 1067.373727][ T6585] sysv_free_block: flc_count > flc_size [ 1067.410895][ T6585] sysv_free_block: flc_count > flc_size [ 1067.416499][ T6585] sysv_free_block: flc_count > flc_size [ 1067.422449][T25897] loop3: detected capacity change from 0 to 16 [ 1067.441124][T25897] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 1067.446059][ T6585] sysv_free_block: flc_count > flc_size [ 1067.462015][T25897] erofs: (device loop3): mounted with root inode @ nid 36. [ 1067.483884][ T6585] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1067.617089][T25903] netlink: 'syz.1.8944': attribute type 1 has an invalid length. [ 1067.994960][T25917] loop2: detected capacity change from 0 to 2048 [ 1068.077557][T25924] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1068.194085][T25928] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8960'. [ 1068.233597][T25917] NILFS (loop2): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 1068.265918][T25928] gretap0: entered promiscuous mode [ 1068.286895][T25917] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1068.317708][T25917] Remounting filesystem read-only [ 1068.332705][T25917] NILFS (loop2): error -5 truncating bmap (ino=16) [ 1068.468864][ T6582] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 1068.475904][ T6582] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 1068.531414][ T6582] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1068.554392][ T6582] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1068.569051][ T6582] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1068.592290][ T6582] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 1068.632700][ T6582] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 1068.667724][ T6582] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1068.680853][T25942] loop0: detected capacity change from 0 to 128 [ 1068.696887][ T6582] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1068.709902][T25942] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 1068.731865][ T6582] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 1068.756945][ T6582] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1069.131447][ T6578] sysv_free_block: flc_count > flc_size [ 1069.137062][ T6578] sysv_free_block: flc_count > flc_size [ 1069.154188][ T6578] sysv_free_block: flc_count > flc_size [ 1069.174075][ T6578] sysv_free_block: flc_count > flc_size [ 1069.194245][ T6578] sysv_free_block: flc_count > flc_size [ 1069.215728][ T6578] sysv_free_block: flc_count > flc_size [ 1069.238543][ T6578] sysv_free_block: flc_count > flc_size [ 1069.244226][ T6578] sysv_free_block: flc_count > flc_size [ 1069.254546][ T6578] sysv_free_block: flc_count > flc_size [ 1069.260622][ T6578] sysv_free_block: flc_count > flc_size [ 1069.267011][ T6578] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1069.435911][T25962] loop1: detected capacity change from 0 to 4096 [ 1069.462815][T25962] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1069.708833][T25962] ntfs3: loop1: failed to convert "c46c" to cp863 [ 1070.008504][T25979] kAFS: No cell specified [ 1070.039148][T25958] loop2: detected capacity change from 0 to 32768 [ 1070.106653][T25958] [ 1070.106653][T25958] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1070.106653][T25958] [ 1070.184822][T25958] ERROR: (device loop2): ea_get: invalid ea.flag [ 1070.184822][T25958] [ 1070.222050][T25958] ERROR: (device loop2): remounting filesystem as read-only [ 1070.314868][T25989] loop1: detected capacity change from 0 to 256 [ 1070.838877][T25999] : entered promiscuous mode [ 1071.052666][T25983] loop0: detected capacity change from 0 to 32768 [ 1071.265924][T26017] loop1: detected capacity change from 0 to 164 [ 1071.311826][T26017] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 1071.759442][T26035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9013'. [ 1071.858602][T26039] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000 [ 1071.997066][T22196] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1072.195626][T22196] usb 1-1: Using ep0 maxpacket: 16 [ 1072.224211][T22196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 102, changing to 7 [ 1072.246740][T26030] loop1: detected capacity change from 0 to 32768 [ 1072.253565][T22196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 10030, setting to 1024 [ 1072.295877][T22196] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1072.310311][T26030] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1072.342406][T22196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.374607][T22196] usb 1-1: Product: syz [ 1072.378831][T22196] usb 1-1: Manufacturer: syz [ 1072.429192][T22196] usb 1-1: SerialNumber: syz [ 1072.442499][ T6585] ocfs2: Unmounting device (7,1) on (node local) [ 1072.464840][T22196] usb 1-1: config 0 descriptor?? [ 1072.522102][T22196] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1072.555088][T22196] em28xx 1-1:0.0: DVB interface 0 found: isoc [ 1072.790003][T22196] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1072.884717][T22196] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1072.906010][T22196] em28xx 1-1:0.0: board has no eeprom [ 1073.003340][T22196] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1073.038335][T22196] em28xx 1-1:0.0: dvb set to isoc mode. [ 1073.051504][ T6445] em28xx 1-1:0.0: Binding DVB extension [ 1073.087916][T22196] usb 1-1: USB disconnect, device number 35 [ 1073.105796][T22196] em28xx 1-1:0.0: Disconnecting em28xx [ 1073.115266][ T28] audit: type=1326 audit(1757353059.872:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.2.9033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0578ebe9 code=0x7ffc0000 [ 1073.190819][ T28] audit: type=1326 audit(1757353059.900:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.2.9033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0578ebe9 code=0x7ffc0000 [ 1073.230434][ T6445] em28xx 1-1:0.0: Registering input extension [ 1073.280486][T22196] em28xx 1-1:0.0: Closing input extension [ 1073.298043][ T28] audit: type=1326 audit(1757353059.900:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.2.9033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fda0578ebe9 code=0x7ffc0000 [ 1073.343959][T26085] comedi comedi4: bad chanlist[0]=0x00001001 chan=4097 range length=2 [ 1073.362433][ T28] audit: type=1326 audit(1757355637.914:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.2.9033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0578ebe9 code=0x7ffc0000 [ 1073.376802][T22196] em28xx 1-1:0.0: Freeing device [ 1073.961573][T26110] dlm: no locking on control device [ 1074.262540][T26128] loop3: detected capacity change from 0 to 128 [ 1074.271056][T26127] loop0: detected capacity change from 0 to 24 [ 1074.287094][T26128] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1074.316322][T26127] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1074.372599][T26127] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1074.468740][T26127] VFS: Lookup of 'file0' in romfs loop0 would have caused loop [ 1074.603364][T26138] loop3: detected capacity change from 0 to 256 [ 1074.901125][T26146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9069'. [ 1075.073506][T26153] netlink: 'syz.2.9070': attribute type 5 has an invalid length. [ 1075.832989][T26191] caif0: entered allmulticast mode [ 1075.878781][T26194] loop2: detected capacity change from 0 to 24 [ 1075.896304][T26194] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1075.923948][T26194] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1076.008782][T26194] VFS: Lookup of 'file0' in romfs loop2 would have caused loop [ 1076.096219][T26200] netlink: 'syz.1.9094': attribute type 10 has an invalid length. [ 1076.111850][T26200] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9094'. [ 1076.187691][T26200] bridge0: port 3(dummy0) entered blocking state [ 1076.235625][T26200] bridge0: port 3(dummy0) entered disabled state [ 1076.291704][T26200] dummy0: entered allmulticast mode [ 1076.307390][T26200] dummy0: entered promiscuous mode [ 1076.318879][T26200] bridge0: port 3(dummy0) entered blocking state [ 1076.325963][T26200] bridge0: port 3(dummy0) entered forwarding state [ 1076.791448][T26227] Zero length message leads to an empty skb [ 1077.177824][T26243] No source specified [ 1078.412328][ T5776] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1078.529111][T26285] loop2: detected capacity change from 0 to 32768 [ 1078.537388][T26285] XFS: attr2 mount option is deprecated. [ 1078.566628][T26285] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 1078.590964][T26285] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1078.649924][ T5776] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1078.665725][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.703797][ T5776] usb 1-1: config 0 descriptor?? [ 1078.715848][ T5776] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1078.735216][T26285] XFS (loop2): Ending clean mount [ 1078.744908][T26285] XFS (loop2): Quotacheck needed: Please wait. [ 1078.815141][T26285] XFS (loop2): Quotacheck: Done. [ 1078.907551][ T6582] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1079.164818][ T5776] gspca_spca508: reg_read err -71 [ 1079.180751][ T5776] gspca_spca508: reg_read err -71 [ 1079.199802][ T5776] gspca_spca508: reg_read err -71 [ 1079.210728][ T5776] gspca_spca508: reg_read err -71 [ 1079.216543][ T5776] gspca_spca508: reg write: error -71 [ 1079.222484][ T5776] spca508: probe of 1-1:0.0 failed with error -71 [ 1079.263376][ T5776] usb 1-1: USB disconnect, device number 36 [ 1079.466728][T17633] IPVS: starting estimator thread 0... [ 1079.568521][T26322] IPVS: using max 24 ests per chain, 57600 per kthread [ 1080.157521][T26351] netlink: 236 bytes leftover after parsing attributes in process `syz.1.9164'. [ 1080.298392][T26354] netlink: 'syz.2.9166': attribute type 1 has an invalid length. [ 1080.332249][T26354] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9166'. [ 1080.525917][T26360] netlink: zone id is out of range [ 1080.631477][T26340] loop0: detected capacity change from 0 to 40427 [ 1081.253590][T26389] loop2: detected capacity change from 0 to 1024 [ 1081.294215][T26393] netlink: 'syz.0.9184': attribute type 10 has an invalid length. [ 1081.315410][T26389] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1081.318459][T26393] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9184'. [ 1081.365097][T26389] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1081.373354][T26389] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1081.400435][T26393] bridge0: port 3(dummy0) entered blocking state [ 1081.418038][T26393] bridge0: port 3(dummy0) entered disabled state [ 1081.424751][T26393] dummy0: entered allmulticast mode [ 1081.442704][T26389] EXT4-fs error (device loop2): __ext4_get_inode_loc:4483: comm syz.2.9182: Invalid inode table block 0 in block_group 0 [ 1081.450725][T26393] dummy0: entered promiscuous mode [ 1081.461466][T26393] bridge0: port 3(dummy0) entered blocking state [ 1081.467973][T26393] bridge0: port 3(dummy0) entered forwarding state [ 1081.483569][T26389] EXT4-fs (loop2): Remounting filesystem read-only [ 1081.490176][T26389] Quota error (device loop2): write_blk: dquota write failed [ 1081.497777][T26389] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1081.507925][T26389] EXT4-fs (loop2): 1 truncate cleaned up [ 1081.515192][T26389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1081.665575][ T6582] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.889836][T26410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9192'. [ 1081.954044][T26414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9193'. [ 1082.079949][T26417] loop1: detected capacity change from 0 to 512 [ 1082.111434][T26417] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1082.151894][T26417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1082.180497][T26417] ext4 filesystem being mounted at /2137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1082.309407][T26417] EXT4-fs error (device loop1): ext4_xattr_block_list:768: inode #15: comm syz.1.9196: corrupted xattr block 19: overlapping e_value [ 1082.318800][T26426] netlink: 'syz.2.9198': attribute type 10 has an invalid length. [ 1082.361822][T26426] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9198'. [ 1082.377156][T26426] bridge0: port 3(dummy0) entered blocking state [ 1082.384135][T26426] bridge0: port 3(dummy0) entered disabled state [ 1082.395418][T26426] dummy0: entered allmulticast mode [ 1082.402819][T26426] dummy0: entered promiscuous mode [ 1082.410768][T26426] bridge0: port 3(dummy0) entered blocking state [ 1082.412595][ T6585] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.417317][T26426] bridge0: port 3(dummy0) entered forwarding state [ 1082.465373][T26428] loop0: detected capacity change from 0 to 4096 [ 1082.493349][T26428] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1082.560184][T26431] autofs4:pid:26431:autofs_fill_super: called with bogus options [ 1082.587806][T26428] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 1083.089101][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1083.099099][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1083.139968][T26451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9210'. [ 1083.464368][T26462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9216'. [ 1083.483368][T26463] netlink: 'syz.1.9217': attribute type 4 has an invalid length. [ 1083.501136][T26463] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9217'. [ 1083.560639][T26463] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1083.860485][T26447] loop3: detected capacity change from 0 to 32768 [ 1083.895154][T26447] [ 1083.895154][T26447] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1083.895154][T26447] [ 1083.973923][T26447] ERROR: (device loop3): diWrite: ixpxd invalid [ 1083.973923][T26447] [ 1084.033978][T26447] ERROR: (device loop3): remounting filesystem as read-only [ 1084.070109][T26447] ERROR: (device loop3): txCommit: [ 1084.070109][T26447] [ 1084.225951][T26483] x_tables: duplicate underflow at hook 4 [ 1084.347358][T26489] sctp: [Deprecated]: syz.3.9230 (pid 26489) Use of int in max_burst socket option. [ 1084.347358][T26489] Use struct sctp_assoc_value instead [ 1084.983828][T26517] netlink: 'syz.2.9243': attribute type 1 has an invalid length. [ 1085.322463][T26531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9250'. [ 1085.468435][T26532] loop3: detected capacity change from 0 to 4096 [ 1085.496309][T26532] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1085.548522][T26532] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 1085.567379][T26532] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 1085.614438][T26532] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1085.648183][T26532] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1085.671045][T26532] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1085.692505][T26532] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1085.745551][T26532] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1085.767678][T26532] ntfs: volume version 3.1. [ 1086.154524][T26554] loop3: detected capacity change from 0 to 64 [ 1086.751652][T26583] loop0: detected capacity change from 0 to 256 [ 1087.444710][T26611] loop1: detected capacity change from 0 to 512 [ 1087.493314][T26611] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.9288: iget: bad i_size value: 38620345925642 [ 1087.545990][T26611] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.9288: couldn't read orphan inode 15 (err -117) [ 1087.582597][T26611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1087.718939][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 1087.718954][ T28] audit: type=1400 audit(1757355651.522:46): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3AF6EFF374925873ECE44CF3460B0BA260624F2A08BDBB6D3C92592016EA4E0F401876B1958B3F9AA5153386EED838C49D3A pid=26618 comm="syz.3.9291" [ 1087.796902][T26602] loop2: detected capacity change from 0 to 32768 [ 1087.831547][T26602] [ 1087.831547][T26602] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1087.831547][T26602] [ 1087.884326][T26602] ERROR: (device loop2): diWrite: ixpxd invalid [ 1087.884326][T26602] [ 1087.938230][T26625] loop0: detected capacity change from 0 to 1764 [ 1087.946358][T26602] ERROR: (device loop2): remounting filesystem as read-only [ 1087.981981][T26602] ERROR: (device loop2): txCommit: [ 1087.981981][T26602] [ 1088.049565][ T23] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1088.261426][T26632] loop3: detected capacity change from 0 to 1024 [ 1088.273960][ T23] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x98, skipping [ 1088.283168][T26632] EXT4-fs: Ignoring removed nobh option [ 1088.302560][ T23] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 47025, setting to 1024 [ 1088.325571][T26632] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1088.343631][T26635] netlink: 'syz.2.9299': attribute type 4 has an invalid length. [ 1088.349888][ T23] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1088.373141][T26635] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9299'. [ 1088.425257][T26635] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1088.430830][ T23] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1088.450142][T26632] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.9298: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1088.483961][T26632] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.9298: couldn't read orphan inode 11 (err -117) [ 1088.510715][T26632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1088.553549][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.593526][T26611] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1088.640801][ T23] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1088.678624][ T23] usb 2-1: invalid MIDI in EP 0 [ 1088.706091][ T6580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.903678][T26646] x_tables: unsorted underflow at hook 2 [ 1088.919689][ T23] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 1088.991228][ T23] usb 2-1: USB disconnect, device number 30 [ 1089.207958][T26658] loop3: detected capacity change from 0 to 64 [ 1089.633021][T26669] misc userio: No port type given on /dev/userio [ 1089.726591][ T6585] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.804785][T26670] loop2: detected capacity change from 0 to 4096 [ 1089.863706][T26670] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1090.027556][T26670] ntfs3: loop2: failed to convert "c46c" to iso8859-4 [ 1090.222443][T26684] loop0: detected capacity change from 0 to 512 [ 1090.339619][T26684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1090.389327][T26684] ext4 filesystem being mounted at /2089/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1090.496427][ T6578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1090.766871][T26708] loop2: detected capacity change from 0 to 64 [ 1090.841712][T26710] netlink: 'syz.1.9334': attribute type 10 has an invalid length. [ 1090.869891][T26710] veth1_vlan: entered allmulticast mode [ 1090.953853][T26710] team0: Device veth1_vlan failed to register rx_handler [ 1091.408847][T26730] netlink: 'syz.0.9343': attribute type 10 has an invalid length. [ 1091.431687][T26730] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9343'. [ 1091.476996][T26730] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1091.700722][T26741] tmpfs: Group quota inode hardlimit too large. [ 1092.122923][T26761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9354'. [ 1092.326303][T26772] usb usb1: usbfs: process 26772 (syz.0.9358) did not claim interface 2 before use [ 1092.798492][T26794] tmpfs: Bad value for 'mpol' [ 1092.847103][T26796] sctp: [Deprecated]: syz.3.9372 (pid 26796) Use of int in max_burst socket option. [ 1092.847103][T26796] Use struct sctp_assoc_value instead [ 1093.185744][T26813] loop1: detected capacity change from 0 to 16 [ 1093.219086][T26813] erofs: (device loop1): mounted with root inode @ nid 36. [ 1093.733343][T26828] loop1: detected capacity change from 0 to 4096 [ 1093.974939][T26824] loop2: detected capacity change from 0 to 40427 [ 1094.000507][T26824] F2FS-fs (loop2): heap/no_heap options were deprecated [ 1094.029119][T26824] F2FS-fs (loop2): invalid crc value [ 1094.045004][T26824] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 1094.105547][T26824] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1094.258245][T26824] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1094.273199][T26839] batadv1: entered allmulticast mode [ 1094.303658][T26839] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1094.488702][T26845] bridge2: entered promiscuous mode [ 1094.534610][T26848] IPv6: sit1: Disabled Multicast RS [ 1094.755748][T26854] netlink: 'syz.3.9397': attribute type 10 has an invalid length. [ 1094.784724][T26856] loop0: detected capacity change from 0 to 16 [ 1094.809089][T26854] veth1_vlan: entered allmulticast mode [ 1094.809565][T26856] erofs: (device loop0): mounted with root inode @ nid 36. [ 1094.892504][T26854] team0: Device veth1_vlan failed to register rx_handler [ 1094.951630][T26856] syz.0.9399: attempt to access beyond end of device [ 1094.951630][T26856] loop0: rw=0, sector=32, nr_sectors = 8 limit=16 [ 1095.182603][T26868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9404'. [ 1095.192431][ T5776] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1095.402698][ T5776] usb 3-1: Using ep0 maxpacket: 16 [ 1095.414152][T26870] loop3: detected capacity change from 0 to 4096 [ 1095.427120][ T5776] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1095.445361][ T5776] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1095.473850][ T5776] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1095.484992][ T5776] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1095.497273][ T5776] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1095.515484][ T5776] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1095.522820][ T5776] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1095.538106][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.557475][ T5776] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 1095.591769][T26874] loop1: detected capacity change from 0 to 4096 [ 1095.640086][T26870] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 1095.662988][T26864] loop0: detected capacity change from 0 to 32768 [ 1095.670490][T26864] XFS: attr2 mount option is deprecated. [ 1095.699821][T26874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.739676][T26864] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 1095.788933][ T5776] scsi host1: usb-storage 3-1:1.0 [ 1095.823172][T26864] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1095.955336][ T6585] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.963256][T26864] XFS (loop0): Ending clean mount [ 1096.047088][T26864] XFS (loop0): Quotacheck needed: Please wait. [ 1096.097341][T22196] usb 3-1: USB disconnect, device number 26 [ 1096.147867][T26864] XFS (loop0): Quotacheck: Done. [ 1096.240276][ T6578] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1096.427036][T26895] loop3: detected capacity change from 0 to 4096 [ 1096.682466][T26905] loop3: detected capacity change from 0 to 2048 [ 1096.729725][T26906] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1096.848117][T13990] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1096.917979][T26912] loop1: detected capacity change from 0 to 256 [ 1096.925309][T26914] bridge3: entered promiscuous mode [ 1097.204124][T26922] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9426'. [ 1097.610902][T26938] bridge3: entered promiscuous mode [ 1097.872616][T26946] netlink: 'syz.0.9413': attribute type 10 has an invalid length. [ 1097.911552][T26946] veth1_vlan: entered allmulticast mode [ 1097.965094][T26946] team0: Device veth1_vlan failed to register rx_handler [ 1098.210347][T26962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9444'. [ 1098.330296][T26964] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9445'. [ 1098.582331][T26976] netlink: 'syz.2.9451': attribute type 10 has an invalid length. [ 1098.608504][T26976] veth1_vlan: entered allmulticast mode [ 1098.685993][T26976] team0: Device veth1_vlan failed to register rx_handler [ 1098.829203][ T5102] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 1099.032495][T26996] loop3: detected capacity change from 0 to 22 [ 1099.074516][T26996] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1099.106981][T26996] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1099.470528][T27015] netlink: 'syz.1.9469': attribute type 10 has an invalid length. [ 1099.494418][T27015] team0: Device veth1_vlan failed to register rx_handler [ 1100.090071][T27042] netlink: 'syz.3.9483': attribute type 10 has an invalid length. [ 1100.112078][T27042] team0: Device veth1_vlan failed to register rx_handler [ 1100.249949][T27047] loop1: detected capacity change from 0 to 512 [ 1100.363440][T27047] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 1100.372610][T27048] loop0: detected capacity change from 0 to 4096 [ 1100.393887][T27048] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1100.405508][T27047] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1100.448496][T27047] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.9485: Failed to acquire dquot type 1 [ 1100.458677][T27059] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9490'. [ 1100.482582][T27057] netlink: 'syz.2.9489': attribute type 1 has an invalid length. [ 1100.508482][T27047] EXT4-fs (loop1): 1 truncate cleaned up [ 1100.524211][T27057] netlink: 220 bytes leftover after parsing attributes in process `syz.2.9489'. [ 1100.539608][T27047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1100.574428][T27047] ext4 filesystem being mounted at /2216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1100.680459][T27047] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 1100.735399][T27047] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1100.758969][T27047] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.9485: Failed to acquire dquot type 1 [ 1100.872730][ T6585] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.000314][T27068] netlink: 'syz.0.9494': attribute type 21 has an invalid length. [ 1101.035826][T27068] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9494'. [ 1101.059298][T27068] netlink: 'syz.0.9494': attribute type 4 has an invalid length. [ 1101.079312][T27068] netlink: 'syz.0.9494': attribute type 3 has an invalid length. [ 1101.102274][T27068] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9494'. [ 1101.144992][T27074] vlan0: entered promiscuous mode [ 1101.178605][T27076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9498'. [ 1101.592718][T17633] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1101.729502][T27092] netlink: 'syz.3.9506': attribute type 10 has an invalid length. [ 1101.755843][T27092] team0: Device veth1_vlan failed to register rx_handler [ 1101.822946][T17633] usb 1-1: config 1 has an invalid interface number: 28 but max is 0 [ 1101.837836][T17633] usb 1-1: config 1 has no interface number 0 [ 1101.840390][T27088] loop2: detected capacity change from 0 to 32768 [ 1101.890536][T17633] usb 1-1: config 1 interface 28 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1101.941603][T17633] usb 1-1: config 1 interface 28 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 1101.973994][T27088] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1102.007507][T17633] usb 1-1: config 1 interface 28 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 1102.078528][T17633] usb 1-1: config 1 interface 28 has no altsetting 0 [ 1102.125473][T17633] usb 1-1: New USB device found, idVendor=045e, idProduct=0473, bcdDevice=e4.34 [ 1102.163746][T17633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.186946][T17633] usb 1-1: Product: syz [ 1102.191186][T17633] usb 1-1: Manufacturer: syz [ 1102.212956][T17633] usb 1-1: SerialNumber: syz [ 1102.242380][T27080] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1102.260653][T17633] ipaq 1-1:1.28: PocketPC PDA converter detected [ 1102.265713][T27106] loop3: detected capacity change from 0 to 4096 [ 1102.310675][ T6582] ocfs2: Unmounting device (7,2) on (node local) [ 1102.377472][T27106] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1102.422336][T27106] NILFS (loop3): trying rollback from an earlier position [ 1102.482918][T27106] NILFS (loop3): recovery complete [ 1102.548159][T17633] usb 1-1: PocketPC PDA converter now attached to ttyUSB0 [ 1102.869312][T22196] usb 1-1: USB disconnect, device number 37 [ 1102.891115][T22196] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 1102.939147][T22196] ipaq 1-1:1.28: device disconnected [ 1103.194456][T27134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9525'. [ 1103.214992][T27134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9525'. [ 1103.236417][T27134] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9525'. [ 1103.297181][T27138] loop3: detected capacity change from 0 to 256 [ 1103.310190][T27138] exfat: Deprecated parameter 'namecase' [ 1103.339286][T27138] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1103.385315][T27140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9529'. [ 1103.608615][T27148] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9533'. [ 1103.736043][T27148] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9533'. [ 1103.757700][T27153] sctp: [Deprecated]: syz.2.9535 (pid 27153) Use of int in max_burst socket option deprecated. [ 1103.757700][T27153] Use struct sctp_assoc_value instead [ 1103.986430][T27148] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9533'. [ 1104.242222][T27176] loop0: detected capacity change from 0 to 256 [ 1104.257598][T27176] exfat: Deprecated parameter 'utf8' [ 1104.272587][T27176] exfat: Deprecated parameter 'utf8' [ 1104.304163][T27176] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7bac8b1f, utbl_chksum : 0xe619d30d) [ 1104.362281][T17633] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1104.482551][T27180] loop1: detected capacity change from 0 to 4096 [ 1104.527834][T27180] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1104.544184][T27180] NILFS (loop1): trying rollback from an earlier position [ 1104.565130][T17633] usb 3-1: Using ep0 maxpacket: 32 [ 1104.583885][T27180] NILFS (loop1): recovery complete [ 1104.591374][T17633] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.611269][T17633] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.652793][T17633] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1104.671114][T17633] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1104.688549][T27187] netlink: 'syz.3.9550': attribute type 4 has an invalid length. [ 1104.701578][T17633] usb 3-1: Product: syz [ 1104.706467][T27189] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 1104.714810][T17633] usb 3-1: Manufacturer: syz [ 1104.757913][T17633] hub 3-1:4.0: USB hub found [ 1104.964499][T17633] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 1105.174773][ T23] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1105.303178][T17633] usb 3-1: USB disconnect, device number 27 [ 1105.381919][ T23] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1105.409254][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.431509][ T23] usb 4-1: Product: syz [ 1105.435730][ T23] usb 4-1: Manufacturer: syz [ 1105.440509][ T23] usb 4-1: SerialNumber: syz [ 1105.458756][ T23] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1105.477454][T27215] netlink: 'syz.0.9564': attribute type 10 has an invalid length. [ 1105.486986][T22196] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1105.487502][T27215] ipvlan1: entered promiscuous mode [ 1105.503738][T27215] bridge0: port 4(ipvlan1) entered blocking state [ 1105.525399][T27215] bridge0: port 4(ipvlan1) entered disabled state [ 1105.544436][T27215] ipvlan1: entered allmulticast mode [ 1105.552754][T27215] veth0_vlan: entered allmulticast mode [ 1105.567861][T27215] ipvlan1: left allmulticast mode [ 1105.573565][T27215] veth0_vlan: left allmulticast mode [ 1105.927479][T27227] loop0: detected capacity change from 0 to 512 [ 1105.945945][T27227] EXT4-fs: Ignoring removed nobh option [ 1106.152671][T27227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1106.256265][T27227] ext4 filesystem being mounted at /2137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1106.428321][ T6445] usb 4-1: USB disconnect, device number 34 [ 1106.436521][T27227] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.9570: corrupted xattr block 33: bad e_name length [ 1106.570417][T27227] EXT4-fs error (device loop0): ext4_get_inode_usage:901: inode #15: comm syz.0.9570: corrupted xattr block 33: bad e_name length [ 1106.607406][T22196] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1106.639780][T22196] ath9k_htc: Failed to initialize the device [ 1106.648427][ T6445] usb 4-1: ath9k_htc: USB layer deinitialized [ 1106.712600][ T6578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.931055][T27253] __nla_validate_parse: 1 callbacks suppressed [ 1106.931073][T27253] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9581'. [ 1106.986066][T27255] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9582'. [ 1107.241096][T27266] loop1: detected capacity change from 0 to 512 [ 1107.260513][T27266] EXT4-fs: Ignoring removed nobh option [ 1107.295704][T27266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1107.315357][T27273] loop2: detected capacity change from 0 to 256 [ 1107.327995][T27273] exfat: Deprecated parameter 'namecase' [ 1107.335480][T27273] exfat: Deprecated parameter 'namecase' [ 1107.342607][T27266] ext4 filesystem being mounted at /2250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1107.382680][T27273] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 1107.397606][T27266] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.9588: corrupted xattr block 33: bad e_name length [ 1107.422787][T17633] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1107.480685][T27266] EXT4-fs error (device loop1): ext4_get_inode_usage:901: inode #15: comm syz.1.9588: corrupted xattr block 33: bad e_name length [ 1107.582622][ T6585] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.659193][T17633] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1107.677308][T17633] usb 4-1: not running at top speed; connect to a high speed hub [ 1107.697302][T17633] usb 4-1: config 5 has an invalid interface number: 64 but max is 0 [ 1107.730398][T17633] usb 4-1: config 5 has no interface number 0 [ 1107.736559][T17633] usb 4-1: config 5 interface 64 has no altsetting 0 [ 1107.759218][T17633] usb 4-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=28.39 [ 1107.771563][T17633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.803340][T17633] usb 4-1: Product: syz [ 1107.815985][T17633] usb 4-1: Manufacturer: syz [ 1107.823982][T17633] usb 4-1: SerialNumber: syz [ 1108.093725][T17633] snd-usb-audio: probe of 4-1:5.64 failed with error -71 [ 1108.097977][T27293] loop2: detected capacity change from 0 to 2048 [ 1108.120502][T17633] usb 4-1: USB disconnect, device number 35 [ 1108.128828][T27293] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1108.183089][T27297] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1108.381853][T27302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1108.432024][T27304] loop2: detected capacity change from 0 to 2048 [ 1108.453628][T27304] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1108.491625][T27304] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1108.635806][T27308] netlink: 800 bytes leftover after parsing attributes in process `syz.1.9607'. [ 1108.656999][T27308] netlink: 1301 bytes leftover after parsing attributes in process `syz.1.9607'. [ 1108.666815][T27311] netlink: 'syz.2.9608': attribute type 10 has an invalid length. [ 1108.674870][T27311] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9608'. [ 1108.690653][T27311] ipvlan1: entered promiscuous mode [ 1108.711586][T27311] bridge0: port 4(ipvlan1) entered blocking state [ 1108.736089][T27311] bridge0: port 4(ipvlan1) entered disabled state [ 1108.751933][T27311] ipvlan1: entered allmulticast mode [ 1108.769186][T27311] veth0_vlan: entered allmulticast mode [ 1108.785513][T27311] ipvlan1: left allmulticast mode [ 1108.793818][T27311] veth0_vlan: left allmulticast mode [ 1109.234440][T27335] loop2: detected capacity change from 0 to 512 [ 1109.246317][T27335] EXT4-fs: Ignoring removed nobh option [ 1109.365226][T27335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1109.394872][T27343] loop3: detected capacity change from 0 to 8 [ 1109.400880][T27335] ext4 filesystem being mounted at /2357/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1109.423353][T27335] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.9618: corrupted xattr block 33: bad e_name length [ 1109.442073][T27344] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9622'. [ 1109.451226][T27344] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1109.484509][T27335] EXT4-fs error (device loop2): ext4_get_inode_usage:901: inode #15: comm syz.2.9618: corrupted xattr block 33: bad e_name length [ 1109.655863][ T6582] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1109.679054][T27351] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32) [ 1109.789958][T27355] netlink: 'syz.0.9630': attribute type 10 has an invalid length. [ 1109.833695][T27355] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9630'. [ 1110.221308][ T6445] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1110.426958][ T6445] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1110.441132][ T6445] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.474855][ T6445] usb 3-1: config 0 descriptor?? [ 1110.491492][ T6445] cp210x 3-1:0.0: cp210x converter detected [ 1110.584832][T22196] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1110.753819][T27379] loop0: detected capacity change from 0 to 32768 [ 1110.777454][T27379] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.9641 (27379) [ 1110.789993][T22196] usb 2-1: Using ep0 maxpacket: 32 [ 1110.807892][T22196] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1110.817774][ T28] audit: type=1326 audit(1757355673.127:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27388 comm="syz.3.9646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab3f8ebe9 code=0x7ffc0000 [ 1110.823553][ T28] audit: type=1326 audit(1757355673.136:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27388 comm="syz.3.9646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab3f8ebe9 code=0x7ffc0000 [ 1110.842822][T22196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.876411][T27379] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1110.889417][T27379] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1110.900330][ T28] audit: type=1326 audit(1757355673.183:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27388 comm="syz.3.9646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fdab3f8ebe9 code=0x7ffc0000 [ 1110.931366][T22196] usb 2-1: config 0 descriptor?? [ 1110.955668][T27379] BTRFS info (device loop0): disabling free space tree [ 1110.966226][T22196] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1110.980708][ T6445] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1110.993733][T27379] BTRFS info (device loop0): allowing degraded mounts [ 1111.008006][ T6445] usb 3-1: USB disconnect, device number 28 [ 1111.014882][T27379] BTRFS info (device loop0): enabling disk space caching [ 1111.028560][T27379] BTRFS info (device loop0): force clearing of disk cache [ 1111.038967][ T28] audit: type=1326 audit(1757355673.183:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27388 comm="syz.3.9646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab3f8ebe9 code=0x7ffc0000 [ 1111.057099][T27379] BTRFS info (device loop0): max_inline at 0 [ 1111.069918][ T6445] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1111.070981][ T28] audit: type=1326 audit(1757355673.183:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27388 comm="syz.3.9646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab3f8ebe9 code=0x7ffc0000 [ 1111.112188][ T6445] cp210x 3-1:0.0: device disconnected [ 1111.129547][T27379] BTRFS info (device loop0): disk space caching is enabled [ 1111.266647][T27379] BTRFS info (device loop0): enabling ssd optimizations [ 1111.274963][T27379] BTRFS info (device loop0): auto enabling async discard [ 1111.296991][T27379] BTRFS info (device loop0): rebuilding free space tree [ 1111.340096][T27379] BTRFS info (device loop0): disabling free space tree [ 1111.349154][T27379] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1111.359425][T27379] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1111.412524][T22196] gspca_sq930x: ucbus_write failed -71 [ 1111.418237][T22196] sq930x: probe of 2-1:0.0 failed with error -71 [ 1111.437993][T22196] usb 2-1: USB disconnect, device number 31 [ 1111.526931][ T6578] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1111.754207][T27419] loop2: detected capacity change from 0 to 256 [ 1111.849552][T27419] FAT-fs (loop2): Directory bread(block 64) failed [ 1111.872639][T27419] FAT-fs (loop2): Directory bread(block 65) failed [ 1111.905097][T27419] FAT-fs (loop2): Directory bread(block 66) failed [ 1111.924297][T27419] FAT-fs (loop2): Directory bread(block 67) failed [ 1111.960444][T27419] FAT-fs (loop2): Directory bread(block 68) failed [ 1111.962675][T27425] netlink: 'syz.3.9655': attribute type 27 has an invalid length. [ 1111.977632][T27419] FAT-fs (loop2): Directory bread(block 69) failed [ 1111.992670][T27419] FAT-fs (loop2): Directory bread(block 70) failed [ 1112.016880][T27419] FAT-fs (loop2): Directory bread(block 71) failed [ 1112.042031][T27419] FAT-fs (loop2): Directory bread(block 72) failed [ 1112.072693][T27419] FAT-fs (loop2): Directory bread(block 73) failed [ 1112.504104][T27439] syz.2.9660 uses obsolete (PF_INET,SOCK_PACKET) [ 1112.713885][T27446] warning: `syz.1.9666' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1112.732847][T27447] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9665'. [ 1112.754334][T27447] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9665'. [ 1112.789929][T27447] vlan0: entered promiscuous mode [ 1112.987431][T27459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9672'. [ 1113.028900][T27455] loop0: detected capacity change from 0 to 4096 [ 1113.810716][T27491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9688'. [ 1113.820397][T27491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1113.878048][ T23] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 1114.104344][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1114.132796][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.159208][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 1114.170000][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.188914][ T23] usb 1-1: config 0 descriptor?? [ 1114.201748][ T23] xbox_remote_probe: endpoint_in message size==0? [ 1114.212951][T27506] xt_connbytes: Forcing CT accounting to be enabled [ 1114.433080][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 1114.446114][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 1114.455538][T27511] program syz.1.9697 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1114.470265][ T23] usb 1-1: USB disconnect, device number 38 [ 1114.672929][T27496] loop2: detected capacity change from 0 to 32768 [ 1114.690763][T27496] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.9690 (27496) [ 1114.761768][T27496] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1114.772918][T27496] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1114.781808][T27496] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1114.797503][T27496] BTRFS info (device loop2): max_inline at 0 [ 1114.814532][T27496] BTRFS info (device loop2): enabling disk space caching [ 1114.823708][T27496] BTRFS info (device loop2): turning off barriers [ 1114.861814][T27496] BTRFS info (device loop2): turning on flush-on-commit [ 1114.883050][T27496] BTRFS info (device loop2): doing ref verification [ 1114.889712][T27496] BTRFS info (device loop2): force clearing of disk cache [ 1114.913783][T27496] BTRFS info (device loop2): enabling ssd optimizations [ 1114.930913][T27496] BTRFS info (device loop2): max_inline at 4096 [ 1114.947197][T27496] BTRFS info (device loop2): disk space caching is enabled [ 1115.109203][T27496] BTRFS info (device loop2): auto enabling async discard [ 1115.152094][T27496] BTRFS info (device loop2): rebuilding free space tree [ 1115.232376][T27496] BTRFS info (device loop2): disabling free space tree [ 1115.268364][T27496] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1115.274093][T27553] loop3: detected capacity change from 0 to 64 [ 1115.278056][T27496] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1115.462768][T27557] netlink: 'syz.1.9711': attribute type 1 has an invalid length. [ 1115.503760][T27557] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9711'. [ 1115.513189][T27557] netlink: 'syz.1.9711': attribute type 1 has an invalid length. [ 1115.541901][T27559] netlink: 'syz.3.9713': attribute type 32 has an invalid length. [ 1115.760446][T27566] dvmrp0: entered allmulticast mode [ 1115.913690][ T6582] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1117.166082][T27584] loop0: detected capacity change from 0 to 32768 [ 1117.186893][T27612] loop1: detected capacity change from 0 to 4096 [ 1117.220367][T27584] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 1117.222481][T27612] EXT4-fs: Ignoring removed mblk_io_submit option [ 1117.279507][T27584] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1117.360901][T27612] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1117.472931][T27612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1117.650519][T27584] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid bg_blkno of 4278207136 [ 1117.700107][T27584] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1117.744958][T27584] OCFS2: File system is now read-only. [ 1117.765185][T27584] (syz.0.9725,27584,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 1117.824646][T27584] (syz.0.9725,27584,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 1117.837533][T27634] netlink: 'syz.2.9746': attribute type 10 has an invalid length. [ 1117.855427][T27584] (syz.0.9725,27584,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 1117.866178][T27584] (syz.0.9725,27584,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 1117.874764][T27584] (syz.0.9725,27584,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 1117.916176][T27584] (syz.0.9725,27584,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 1117.932046][T27584] (syz.0.9725,27584,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1117.940211][T27612] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1117.943435][T27584] (syz.0.9725,27584,1):ocfs2_symlink:1944 ERROR: status = -30 [ 1117.966539][T27584] (syz.0.9725,27584,1):ocfs2_symlink:2068 ERROR: status = -30 [ 1118.057272][ T6585] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.101857][ T6578] ocfs2: Unmounting device (7,0) on (node local) [ 1118.104787][T27628] loop3: detected capacity change from 0 to 32768 [ 1118.140161][T27628] [ 1118.140161][T27628] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1118.140161][T27628] [ 1118.206259][T27628] [ 1118.206259][T27628] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1118.206259][T27628] [ 1118.251924][T27628] [ 1118.251924][T27628] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1118.251924][T27628] [ 1118.306617][ T111] [ 1118.306617][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1118.306617][ T111] [ 1118.402649][ T48] [ 1118.402649][ T48] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1118.402649][ T48] [ 1118.430350][ T48] [ 1118.430350][ T48] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1118.430350][ T48] [ 1118.464220][ T112] [ 1118.464220][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1118.464220][ T112] [ 1118.495018][ T6580] [ 1118.495018][ T6580] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1118.495018][ T6580] [ 1118.512799][ T6580] [ 1118.512799][ T6580] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1118.512799][ T6580] [ 1118.532578][T27647] loop0: detected capacity change from 0 to 64 [ 1119.296597][T27677] netlink: 240 bytes leftover after parsing attributes in process `syz.2.9767'. [ 1119.502464][T27682] loop1: detected capacity change from 0 to 4096 [ 1120.274279][T27683] loop0: detected capacity change from 0 to 32768 [ 1120.305728][T27683] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.9770 (27683) [ 1120.393957][T27683] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1120.432688][T27683] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1120.441976][T27683] BTRFS info (device loop0): force zlib compression, level 3 [ 1120.482500][T27683] BTRFS info (device loop0): force clearing of disk cache [ 1120.504170][T27683] BTRFS info (device loop0): setting nodatasum [ 1120.529526][T27683] BTRFS info (device loop0): disabling tree log [ 1120.567651][T27683] BTRFS info (device loop0): enabling disk space caching [ 1120.589449][T27683] BTRFS info (device loop0): disk space caching is enabled [ 1120.592709][T27721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9789'. [ 1120.806482][T27683] BTRFS info (device loop0): auto enabling async discard [ 1121.068718][ T6578] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1121.194242][T27756] netlink: 'syz.1.9799': attribute type 10 has an invalid length. [ 1121.269736][T27758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9800'. [ 1121.287619][T17633] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1121.295341][T27756] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 1121.506125][ T28] audit: type=1326 audit(1757355683.106:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27763 comm="syz.0.9803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db2b8ebe9 code=0x7ffc0000 [ 1121.528394][ C0] vkms_vblank_simulate: vblank timer overrun [ 1121.541190][T17633] usb 4-1: Using ep0 maxpacket: 8 [ 1121.591428][T17633] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1121.601426][T17633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.619540][ T28] audit: type=1326 audit(1757355683.116:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27763 comm="syz.0.9803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db2b8ebe9 code=0x7ffc0000 [ 1121.631806][T17633] usb 4-1: Product: syz [ 1121.658680][ T28] audit: type=1326 audit(1757355683.116:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27763 comm="syz.0.9803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f7db2b8ebe9 code=0x7ffc0000 [ 1121.695359][T17633] usb 4-1: Manufacturer: syz [ 1121.700014][T17633] usb 4-1: SerialNumber: syz [ 1121.726160][ T28] audit: type=1326 audit(1757355683.116:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27763 comm="syz.0.9803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db2b8ebe9 code=0x7ffc0000 [ 1121.777375][ T28] audit: type=1326 audit(1757355683.116:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27763 comm="syz.0.9803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db2b8ebe9 code=0x7ffc0000 [ 1122.187652][T17633] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1122.205779][T17633] mxuport: probe of 4-1:254.0 failed with error -5 [ 1122.234642][T17633] usb 4-1: USB disconnect, device number 36 [ 1122.357086][T27789] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9813'. [ 1122.366821][T27787] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1122.491213][T27795] libceph: resolve '0' (ret=-3): failed [ 1122.600070][T27799] loop0: detected capacity change from 0 to 64 [ 1122.762021][ T5102] Bluetooth: hci3: unexpected cc 0x2039 length: 9 > 1 [ 1122.770752][ T5102] Bluetooth: hci3: unexpected event for opcode 0x2039 [ 1122.784971][ T5776] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1122.998481][ T5776] usb 3-1: Using ep0 maxpacket: 16 [ 1123.011117][ T5776] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1123.027559][ T5776] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1123.036397][ T5776] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1123.045098][ T5776] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1123.053600][ T5776] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1123.062785][ T5776] usb 3-1: config 0 has no interface number 0 [ 1123.069023][ T5776] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1123.105220][ T5776] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1123.120463][ T5776] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1123.141409][T27814] loop0: detected capacity change from 0 to 1024 [ 1123.141736][ T5776] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1123.200968][ T5776] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1123.220377][ T5776] usb 3-1: config 0 interface 125 has no altsetting 2 [ 1123.242776][ T5776] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1123.263746][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.282932][ T5776] usb 3-1: Product: syz [ 1123.298033][ T5776] usb 3-1: Manufacturer: syz [ 1123.308633][ T5776] usb 3-1: SerialNumber: syz [ 1123.333643][ T5776] usb 3-1: config 0 descriptor?? [ 1123.353180][ T5776] usb 3-1: selecting invalid altsetting 2 [ 1123.637667][T27827] XFS (nullb0): Invalid superblock magic number [ 1123.779421][ C0] usb 3-1: async_complete: urb error -71 [ 1123.785237][ C0] usb 3-1: async_complete: urb error -71 [ 1123.791014][ C0] usb 3-1: async_complete: urb error -71 [ 1123.821853][ T5776] get_1284_register: usb error -71 [ 1123.821867][ T23] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1123.827121][ T5776] uss720: probe of 3-1:0.125 failed with error -71 [ 1123.858945][ T5776] usb 3-1: USB disconnect, device number 29 [ 1124.046537][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 1124.058925][ T23] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 1124.095579][ T23] usb 4-1: config 2 has no interface number 0 [ 1124.102107][ T23] usb 4-1: config 2 interface 31 has no altsetting 0 [ 1124.122677][ T23] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1124.132004][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.153085][ T23] usb 4-1: Product: syz [ 1124.157453][ T23] usb 4-1: Manufacturer: syz [ 1124.162067][ T23] usb 4-1: SerialNumber: syz [ 1124.213432][T27845] netlink: 192 bytes leftover after parsing attributes in process `syz.0.9837'. [ 1124.257355][T27835] loop1: detected capacity change from 0 to 32768 [ 1124.275108][T27835] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.9833 (27835) [ 1124.314205][T27835] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1124.321860][T27806] Bluetooth: hci0: unexpected cc 0x2039 length: 9 > 1 [ 1124.333060][T27806] Bluetooth: hci0: unexpected event for opcode 0x2039 [ 1124.344207][T27835] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1124.369636][T27835] BTRFS info (device loop1): disabling free space tree [ 1124.376665][T27835] BTRFS info (device loop1): allowing degraded mounts [ 1124.383616][T27835] BTRFS info (device loop1): enabling disk space caching [ 1124.391506][T27835] BTRFS info (device loop1): force clearing of disk cache [ 1124.428808][T27835] BTRFS info (device loop1): max_inline at 0 [ 1124.456834][T27835] BTRFS info (device loop1): disk space caching is enabled [ 1124.584126][T27835] BTRFS info (device loop1): enabling ssd optimizations [ 1124.591683][T27835] BTRFS info (device loop1): auto enabling async discard [ 1124.617438][T27835] BTRFS info (device loop1): rebuilding free space tree [ 1124.646377][ T23] ch9200: probe of 4-1:2.31 failed with error -22 [ 1124.693103][T27835] BTRFS info (device loop1): disabling free space tree [ 1124.702971][ T23] usb 4-1: USB disconnect, device number 37 [ 1124.720342][T27835] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1124.776307][T27835] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1124.921534][T27869] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9842'. [ 1124.939005][T27869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9842'. [ 1124.948713][T27869] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9842'. [ 1124.963247][ T6585] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1125.241658][T27872] loop2: detected capacity change from 0 to 4096 [ 1125.285542][T27872] EXT4-fs: Ignoring removed mblk_io_submit option [ 1125.342275][T27872] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1125.381723][T27872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1125.751874][ T6582] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.866041][T27892] loop3: detected capacity change from 0 to 1024 [ 1125.873367][T27892] EXT4-fs: Ignoring removed nobh option [ 1125.880685][T27892] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1125.953590][T27892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1126.063858][ T6580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.439694][T27911] (null): rxe_set_mtu: Set mtu to 256 [ 1126.482487][T27911] vxcan1 speed is unknown, defaulting to 1000 [ 1126.520358][T27911] vxcan1 speed is unknown, defaulting to 1000 [ 1126.533022][T27911] vxcan1 speed is unknown, defaulting to 1000 [ 1126.797259][ T6445] vxcan1 speed is unknown, defaulting to 1000 [ 1126.808428][T27911] infiniband syz2: set active [ 1126.813889][T27911] infiniband syz2: added vxcan1 [ 1126.852161][T27906] loop0: detected capacity change from 0 to 32768 [ 1126.903754][T27911] RDS/IB: syz2: added [ 1126.910621][T27911] smc: adding ib device syz2 with port count 1 [ 1126.924589][T27911] smc: ib device syz2 port 1 has pnetid [ 1126.929813][T27906] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1126.935416][ T5776] vxcan1 speed is unknown, defaulting to 1000 [ 1126.963192][T27911] vxcan1 speed is unknown, defaulting to 1000 [ 1127.061619][T27806] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1127.070594][T27806] Bluetooth: hci3: Injecting HCI hardware error event [ 1127.081819][ T50] Bluetooth: hci3: hardware error 0x00 [ 1127.165089][T27923] loop3: detected capacity change from 0 to 4096 [ 1127.180642][T27923] EXT4-fs: Ignoring removed mblk_io_submit option [ 1127.192976][T27906] XFS (loop0): Ending clean mount [ 1127.214576][ T28] audit: type=1326 audit(1757355688.466:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27924 comm="syz.1.9870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeee98ebe9 code=0x7ffc0000 [ 1127.252613][T27923] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1127.274247][ T28] audit: type=1326 audit(1757355688.466:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27924 comm="syz.1.9870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeee98ebe9 code=0x7ffc0000 [ 1127.298863][ T28] audit: type=1326 audit(1757355688.503:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27924 comm="syz.1.9870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fdeee98ebe9 code=0x7ffc0000 [ 1127.309414][T27911] vxcan1 speed is unknown, defaulting to 1000 [ 1127.382618][T27923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1127.415400][ T28] audit: type=1326 audit(1757355688.503:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27924 comm="syz.1.9870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeee98ebe9 code=0x7ffc0000 [ 1127.530111][ T28] audit: type=1326 audit(1757355688.503:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27924 comm="syz.1.9870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeee98ebe9 code=0x7ffc0000 [ 1127.587091][ T6578] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1127.706686][ T6580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1127.930798][T27939] loop3: detected capacity change from 0 to 256 [ 1127.972875][T27939] FAT-fs (loop3): Directory bread(block 64) failed [ 1127.979566][T27939] FAT-fs (loop3): Directory bread(block 65) failed [ 1127.999888][T27939] FAT-fs (loop3): Directory bread(block 66) failed [ 1128.028718][T27939] FAT-fs (loop3): Directory bread(block 67) failed [ 1128.042636][T27939] FAT-fs (loop3): Directory bread(block 68) failed [ 1128.064497][T27939] FAT-fs (loop3): Directory bread(block 69) failed [ 1128.096116][T27939] FAT-fs (loop3): Directory bread(block 70) failed [ 1128.119834][T27939] FAT-fs (loop3): Directory bread(block 71) failed [ 1128.126881][T27939] FAT-fs (loop3): Directory bread(block 72) failed [ 1128.138321][T27939] FAT-fs (loop3): Directory bread(block 73) failed [ 1128.226812][ T5776] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1128.236746][T27911] vxcan1 speed is unknown, defaulting to 1000 [ 1128.427953][T27911] vxcan1 speed is unknown, defaulting to 1000 [ 1128.444485][ T5776] usb 2-1: config 0 has an invalid interface number: 40 but max is 0 [ 1128.452836][ T5776] usb 2-1: config 0 has no interface number 0 [ 1128.459055][ T5776] usb 2-1: New USB device found, idVendor=0403, idProduct=a951, bcdDevice=c0.f8 [ 1128.468267][ T5776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.484790][ T5776] usb 2-1: config 0 descriptor?? [ 1128.491637][ T5776] hub 2-1:0.40: bad descriptor, ignoring hub [ 1128.503100][ T5776] hub: probe of 2-1:0.40 failed with error -5 [ 1128.510336][ T5776] ftdi_sio 2-1:0.40: FTDI USB Serial Device converter detected [ 1128.520109][ T5776] ftdi_sio ttyUSB0: unknown device type: 0xc0f8 [ 1128.681801][T27806] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1128.690986][T27806] Bluetooth: hci0: Injecting HCI hardware error event [ 1128.701460][T27806] Bluetooth: hci0: hardware error 0x00 [ 1128.911350][ T5776] usb 2-1: USB disconnect, device number 32 [ 1128.922604][ T5776] ftdi_sio 2-1:0.40: device disconnected [ 1129.364853][T27969] netlink: 'syz.3.9883': attribute type 10 has an invalid length. [ 1129.370928][ T50] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1129.421611][T27969] team0: Device veth1_macvtap failed to register rx_handler [ 1129.471445][T27973] netlink: 'syz.1.9886': attribute type 1 has an invalid length. [ 1129.479507][T27973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9886'. [ 1129.619786][T27980] loop1: detected capacity change from 0 to 512 [ 1129.627045][T27980] EXT4-fs: Ignoring removed oldalloc option [ 1129.688912][T27984] loop2: detected capacity change from 0 to 256 [ 1129.715091][T27984] exfat: Deprecated parameter 'utf8' [ 1129.720458][T27984] exfat: Deprecated parameter 'utf8' [ 1129.753384][T27980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1129.775509][T27984] exfat: Deprecated parameter 'utf8' [ 1129.790813][T27980] ext4 filesystem being mounted at /2337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1129.835444][T27984] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 1129.979615][ T6585] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.267339][T28003] loop0: detected capacity change from 0 to 2048 [ 1130.347426][T28010] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1130.435085][T28012] netlink: 'syz.3.9902': attribute type 1 has an invalid length. [ 1130.472639][T28012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9902'. [ 1130.526376][T28010] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1130.572857][T28010] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1130.644423][T28010] Remounting filesystem read-only [ 1130.647873][T28018] loop1: detected capacity change from 0 to 512 [ 1130.707772][T28018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1130.757662][T28024] loop3: detected capacity change from 0 to 1024 [ 1130.765819][T28018] ext4 filesystem being mounted at /2341/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1130.798085][ T6578] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 1130.849432][ T6578] NILFS (loop0): discard dirty page: offset=0, ino=12 [ 1130.868907][ T6585] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.884014][T28024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1130.911857][T27806] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1130.913470][ T6578] NILFS (loop0): discard dirty block: blocknr=17, size=1024 [ 1130.933387][T28024] ext4 filesystem being mounted at /2276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1130.952238][ T6578] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1130.988986][ T6578] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1131.018297][T28024] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz.3.9908: directory missing '..' [ 1131.029868][ T6578] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1131.056376][T28030] x_tables: unsorted entry at hook 3 [ 1131.060863][ T6578] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 1131.085582][ T6578] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1131.119015][ T6580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1131.124474][ T6578] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1131.188572][ T6578] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 1131.195920][ T6578] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 1131.238473][ T6578] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 1131.255478][ T6578] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 1131.262835][ T6578] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1131.284432][ T6578] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1131.298049][ T6578] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1131.308224][ T6578] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 1131.340657][ T6578] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 1131.348003][ T6578] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1131.365950][T28041] loop1: detected capacity change from 0 to 512 [ 1131.386868][ T6578] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1131.418386][ T6578] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1131.438854][T28041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1131.463145][T28044] loop2: detected capacity change from 0 to 512 [ 1131.471591][ T6578] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 1131.478685][ T6578] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 1131.486006][ T6578] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 1131.493741][ T6578] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 1131.502211][ T6578] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1131.512589][ T6578] NILFS (loop0): discard dirty page: offset=131072, ino=3 [ 1131.519750][ T6578] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1131.525832][T28044] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1131.529210][ T6578] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1131.537962][T28041] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.9914: Unimplemented hash flags: 0x0001 [ 1131.546870][ T6578] NILFS (loop0): discard dirty block: blocknr=46, size=1024 [ 1131.566593][ T6578] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1131.616240][T28044] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1131.648280][T28041] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.9914: Corrupt directory, running e2fsck is recommended [ 1131.680787][T28044] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 1131.786691][T28044] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1131.825743][T28044] System zones: 0-2, 18-18, 34-35 [ 1131.838320][T28044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1131.864853][ T6585] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.095554][ T6582] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.912434][T28065] loop3: detected capacity change from 0 to 32768 [ 1132.949460][T28065] (syz.3.9925,28065,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1132.980719][T28065] (syz.3.9925,28065,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1133.052795][T28065] JBD2: Ignoring recovery information on journal [ 1133.185814][T28103] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.202182][T28065] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1133.340853][T28065] [ 1133.343230][T28065] ====================================================== [ 1133.350265][T28065] WARNING: possible circular locking dependency detected [ 1133.357310][T28065] syzkaller #0 Not tainted [ 1133.361741][T28065] ------------------------------------------------------ [ 1133.368773][T28065] syz.3.9925/28065 is trying to acquire lock: [ 1133.374850][T28065] ffff8880249b4608 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x67b/0xaf0 [ 1133.384284][T28065] [ 1133.384284][T28065] but task is already holding lock: [ 1133.391658][T28065] ffff88805bddbf60 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e9/0x270 [ 1133.402563][T28065] [ 1133.402563][T28065] which lock already depends on the new lock. [ 1133.402563][T28065] [ 1133.412977][T28065] [ 1133.412977][T28065] the existing dependency chain (in reverse order) is: [ 1133.422006][T28065] [ 1133.422006][T28065] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 1133.430896][T28065] down_write+0x97/0x1f0 [ 1133.435689][T28065] ocfs2_lock_global_qf+0x1e9/0x270 [ 1133.441434][T28065] ocfs2_acquire_dquot+0x2a1/0xaf0 [ 1133.447098][T28065] dqget+0x77c/0xeb0 [ 1133.451542][T28065] dquot_set_dqblk+0x2b/0xf90 [ 1133.456763][T28065] quota_setquota+0x4b0/0x530 [ 1133.461981][T28065] __se_sys_quotactl+0x27b/0x950 [ 1133.467462][T28065] do_syscall_64+0x55/0xb0 [ 1133.472420][T28065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1133.478858][T28065] [ 1133.478858][T28065] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 1133.489413][T28065] down_write+0x97/0x1f0 [ 1133.494205][T28065] ocfs2_lock_global_qf+0x1cb/0x270 [ 1133.499944][T28065] ocfs2_acquire_dquot+0x2a1/0xaf0 [ 1133.505569][T28065] dqget+0x77c/0xeb0 [ 1133.509987][T28065] dquot_set_dqblk+0x2b/0xf90 [ 1133.515175][T28065] quota_setquota+0x4b0/0x530 [ 1133.520362][T28065] __se_sys_quotactl+0x27b/0x950 [ 1133.525810][T28065] do_syscall_64+0x55/0xb0 [ 1133.530736][T28065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1133.537142][T28065] [ 1133.537142][T28065] -> #4 (&dquot->dq_lock){+.+.}-{3:3}: [ 1133.544778][T28065] __mutex_lock+0x129/0xcc0 [ 1133.549796][T28065] dqget+0x6fc/0xeb0 [ 1133.554208][T28065] dquot_transfer+0x2f9/0x6d0 [ 1133.559399][T28065] ext4_setattr+0x87d/0x1c90 [ 1133.564501][T28065] notify_change+0xb0d/0xe10 [ 1133.569603][T28065] chown_common+0x3f9/0x5a0 [ 1133.574614][T28065] do_fchownat+0x168/0x270 [ 1133.579537][T28065] __x64_sys_lchown+0x85/0x90 [ 1133.584720][T28065] do_syscall_64+0x55/0xb0 [ 1133.589646][T28065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1133.596058][T28065] [ 1133.596058][T28065] -> #3 (&ei->xattr_sem){++++}-{3:3}: [ 1133.603615][T28065] down_read+0x46/0x2e0 [ 1133.608290][T28065] ext4_setattr+0x86b/0x1c90 [ 1133.613395][T28065] notify_change+0xb0d/0xe10 [ 1133.618490][T28065] chown_common+0x3f9/0x5a0 [ 1133.623499][T28065] do_fchownat+0x168/0x270 [ 1133.628428][T28065] __x64_sys_chown+0x82/0x90 [ 1133.633531][T28065] do_syscall_64+0x55/0xb0 [ 1133.638455][T28065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1133.644869][T28065] [ 1133.644869][T28065] -> #2 (jbd2_handle){++++}-{0:0}: [ 1133.652157][T28065] start_this_handle+0x1e9d/0x20c0 [ 1133.657867][T28065] jbd2__journal_start+0x2bb/0x5b0 [ 1133.663494][T28065] jbd2_journal_start+0x2a/0x40 [ 1133.668857][T28065] ocfs2_start_trans+0x376/0x6c0 [ 1133.674334][T28065] ocfs2_modify_bh+0xe9/0x470 [ 1133.679538][T28065] ocfs2_local_read_info+0x13fd/0x1770 [ 1133.685525][T28065] dquot_load_quota_sb+0x757/0xb80 [ 1133.691154][T28065] dquot_load_quota_inode+0x2dc/0x5d0 [ 1133.697046][T28065] ocfs2_enable_quotas+0x1c7/0x440 [ 1133.702676][T28065] ocfs2_fill_super+0x3f6d/0x4d90 [ 1133.708211][T28065] mount_bdev+0x22b/0x2d0 [ 1133.713049][T28065] legacy_get_tree+0xea/0x180 [ 1133.718236][T28065] vfs_get_tree+0x8c/0x280 [ 1133.723161][T28065] do_new_mount+0x24b/0xa40 [ 1133.728178][T28065] __se_sys_mount+0x2da/0x3c0 [ 1133.733360][T28065] do_syscall_64+0x55/0xb0 [ 1133.738290][T28065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1133.744705][T28065] [ 1133.744705][T28065] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1133.753214][T28065] down_read+0x46/0x2e0 [ 1133.757884][T28065] ocfs2_start_trans+0x36a/0x6c0 [ 1133.763336][T28065] ocfs2_modify_bh+0xe9/0x470 [ 1133.768535][T28065] ocfs2_local_read_info+0x13fd/0x1770 [ 1133.774509][T28065] dquot_load_quota_sb+0x757/0xb80 [ 1133.780133][T28065] dquot_load_quota_inode+0x2dc/0x5d0 [ 1133.786012][T28065] ocfs2_enable_quotas+0x1c7/0x440 [ 1133.791631][T28065] ocfs2_fill_super+0x3f6d/0x4d90 [ 1133.797162][T28065] mount_bdev+0x22b/0x2d0 [ 1133.802041][T28065] legacy_get_tree+0xea/0x180 [ 1133.807232][T28065] vfs_get_tree+0x8c/0x280 [ 1133.812166][T28065] do_new_mount+0x24b/0xa40 [ 1133.817183][T28065] __se_sys_mount+0x2da/0x3c0 [ 1133.822367][T28065] do_syscall_64+0x55/0xb0 [ 1133.827298][T28065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1133.833706][T28065] [ 1133.833706][T28065] -> #0 (sb_internal#3){.+.+}-{0:0}: [ 1133.841178][T28065] __lock_acquire+0x2ddb/0x7c80 [ 1133.846544][T28065] lock_acquire+0x197/0x410 [ 1133.851556][T28065] ocfs2_start_trans+0x26b/0x6c0 [ 1133.857012][T28065] ocfs2_acquire_dquot+0x67b/0xaf0 [ 1133.862632][T28065] dqget+0x77c/0xeb0 [ 1133.867034][T28065] dquot_set_dqblk+0x2b/0xf90 [ 1133.872229][T28065] quota_setquota+0x4b0/0x530 [ 1133.877417][T28065] __se_sys_quotactl+0x27b/0x950 [ 1133.882869][T28065] do_syscall_64+0x55/0xb0 [ 1133.887795][T28065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1133.894204][T28065] [ 1133.894204][T28065] other info that might help us debug this: [ 1133.894204][T28065] [ 1133.904422][T28065] Chain exists of: [ 1133.904422][T28065] sb_internal#3 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key [ 1133.904422][T28065] [ 1133.921368][T28065] Possible unsafe locking scenario: [ 1133.921368][T28065] [ 1133.928808][T28065] CPU0 CPU1 [ 1133.934160][T28065] ---- ---- [ 1133.939512][T28065] lock(&ocfs2_quota_ip_alloc_sem_key); [ 1133.945136][T28065] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 1133.954934][T28065] lock(&ocfs2_quota_ip_alloc_sem_key); [ 1133.963075][T28065] rlock(sb_internal#3); [ 1133.967405][T28065] [ 1133.967405][T28065] *** DEADLOCK *** [ 1133.967405][T28065] [ 1133.975532][T28065] 4 locks held by syz.3.9925/28065: [ 1133.980718][T28065] #0: ffff8880249b40e0 (&type->s_umount_key#100){++++}-{3:3}, at: super_lock+0x167/0x360 [ 1133.990646][T28065] #1: ffff88805250a0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x294/0xaf0 [ 1134.000643][T28065] #2: ffff88805bddc2d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1cb/0x270 [ 1134.013605][T28065] #3: ffff88805bddbf60 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e9/0x270 [ 1134.025008][T28065] [ 1134.025008][T28065] stack backtrace: [ 1134.030889][T28065] CPU: 0 PID: 28065 Comm: syz.3.9925 Not tainted syzkaller #0 [ 1134.038338][T28065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1134.048384][T28065] Call Trace: [ 1134.051656][T28065] [ 1134.054579][T28065] dump_stack_lvl+0x16c/0x230 [ 1134.059254][T28065] ? load_image+0x3b0/0x3b0 [ 1134.063750][T28065] ? show_regs_print_info+0x20/0x20 [ 1134.068961][T28065] ? print_circular_bug+0x12b/0x1a0 [ 1134.074171][T28065] check_noncircular+0x2bd/0x3c0 [ 1134.079112][T28065] ? print_deadlock_bug+0x5d0/0x5d0 [ 1134.084302][T28065] ? lockdep_lock+0xe0/0x220 [ 1134.088886][T28065] ? _find_first_zero_bit+0xd3/0x100 [ 1134.094168][T28065] __lock_acquire+0x2ddb/0x7c80 [ 1134.099026][T28065] ? verify_lock_unused+0x140/0x140 [ 1134.104215][T28065] ? verify_lock_unused+0x140/0x140 [ 1134.109404][T28065] ? mark_lock+0x94/0x320 [ 1134.113725][T28065] ? verify_lock_unused+0x140/0x140 [ 1134.118914][T28065] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1134.124884][T28065] ? lock_chain_count+0x20/0x20 [ 1134.129723][T28065] lock_acquire+0x197/0x410 [ 1134.134220][T28065] ? ocfs2_acquire_dquot+0x67b/0xaf0 [ 1134.139507][T28065] ? __might_sleep+0xe0/0xe0 [ 1134.144091][T28065] ? do_raw_spin_lock+0x121/0x2c0 [ 1134.149108][T28065] ? read_lock_is_recursive+0x20/0x20 [ 1134.154481][T28065] ? __rwlock_init+0x150/0x150 [ 1134.159237][T28065] ? do_raw_spin_unlock+0x121/0x230 [ 1134.164428][T28065] ocfs2_start_trans+0x26b/0x6c0 [ 1134.169361][T28065] ? ocfs2_acquire_dquot+0x67b/0xaf0 [ 1134.174635][T28065] ? ocfs2_recovery_exit+0x50/0x50 [ 1134.179743][T28065] ? do_raw_spin_unlock+0x121/0x230 [ 1134.184930][T28065] ? _raw_spin_unlock+0x28/0x40 [ 1134.189772][T28065] ? ocfs2_qinfo_unlock+0x11e/0x140 [ 1134.194958][T28065] ocfs2_acquire_dquot+0x67b/0xaf0 [ 1134.200068][T28065] ? ocfs2_destroy_dquot+0x50/0x50 [ 1134.205168][T28065] ? do_raw_spin_unlock+0x121/0x230 [ 1134.210360][T28065] dqget+0x77c/0xeb0 [ 1134.214248][T28065] dquot_set_dqblk+0x2b/0xf90 [ 1134.218915][T28065] ? __might_fault+0xaa/0x120 [ 1134.223594][T28065] quota_setquota+0x4b0/0x530 [ 1134.228266][T28065] ? quota_getnextquota+0x490/0x490 [ 1134.233496][T28065] ? bpf_lsm_capable+0x9/0x10 [ 1134.238169][T28065] ? do_quotactl+0x72f/0x860 [ 1134.242755][T28065] __se_sys_quotactl+0x27b/0x950 [ 1134.247695][T28065] ? __x64_sys_quotactl+0xb0/0xb0 [ 1134.252727][T28065] ? lockdep_hardirqs_on+0x98/0x150 [ 1134.257920][T28065] do_syscall_64+0x55/0xb0 [ 1134.262415][T28065] ? clear_bhb_loop+0x40/0x90 [ 1134.267077][T28065] ? clear_bhb_loop+0x40/0x90 [ 1134.271742][T28065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1134.277629][T28065] RIP: 0033:0x7fdab3f8ebe9 [ 1134.282032][T28065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1134.301723][T28065] RSP: 002b:00007fdab4d6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 1134.310126][T28065] RAX: ffffffffffffffda RBX: 00007fdab41c5fa0 RCX: 00007fdab3f8ebe9 [ 1134.318091][T28065] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffff80000800 [ 1134.326052][T28065] RBP: 00007fdab4011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1134.334014][T28065] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 1134.341990][T28065] R13: 00007fdab41c6038 R14: 00007fdab41c5fa0 R15: 00007ffdb11ac3d8 [ 1134.349977][T28065] [ 1134.423910][ T6580] ocfs2: Unmounting device (7,3) on (node local)