last executing test programs: 9.077029838s ago: executing program 1 (id=6225): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000400)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@six_active_logs}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@nodiscard}, {@compress_cache}, {@fault_type={'fault_type', 0x3d, 0x4}}]}, 0x1, 0x5505, &(0x7f00000079c0)="$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") open(&(0x7f00000002c0)='./file0\x00', 0x14937e, 0x12) 6.696133706s ago: executing program 1 (id=6250): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x94) 4.478881427s ago: executing program 1 (id=6273): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, 0x1418, 0x1, 0x2, 0x3, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) 4.045648709s ago: executing program 1 (id=6279): r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090256000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.381414463s ago: executing program 3 (id=6287): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={[{}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp1250'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) 2.828950775s ago: executing program 3 (id=6291): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000040), 0x1, 0xbdd, &(0x7f0000000280)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, &(0x7f0000002780)={0x5, 0x1c, 0x1, 0x40000}) 2.16976315s ago: executing program 5 (id=6297): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10007}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x18}, @FRA_DST={0x8, 0x1, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) 2.169642499s ago: executing program 0 (id=6298): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000540)={0x1, 0x1, 0x100d, 0x1c, 0x71, &(0x7f00000000c0)}) 2.009749181s ago: executing program 2 (id=6299): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000380)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) 1.939733806s ago: executing program 3 (id=6300): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000180)='./file2\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="8cfb8bce6002746ae68e5d649d1536e95c052e93c4194b7a3c56bd2c280d3685cdc3f824719f02b03cd79b9877ca554d1089845d076a19197f81291bf3ce720a2af6539e92807b9ebb5dc636e56545d5f42bb10d2f7fe8514f606937313917924ab3d56797428efce9f8273bbcf6b37cf68c54c059036a24850cc312c453068415c11e9b81b6bf003a0659a2e34706870bb1a095f0fb36f8", @ANYRESDEC, @ANYRES32], 0x1, 0x210, &(0x7f0000000700)="$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") truncate(&(0x7f0000000180)='./file3\x00', 0x148452) 1.855181131s ago: executing program 4 (id=6301): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendto(r0, 0x0, 0x0, 0x6044801, 0x0, 0x0) 1.715457862s ago: executing program 0 (id=6302): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000800)=@upd={0xe8, 0x12, 0x811, 0x70bd26, 0x25dfdbfe, {{'cbc-aes-neonbs\x00'}, '\x00', '\x00', 0x0, 0x2400}, [{0x8}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.709557841s ago: executing program 5 (id=6303): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) 1.50393232s ago: executing program 2 (id=6304): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f015, 0x80000006}) 1.377241233s ago: executing program 3 (id=6305): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000100)={[{@nojoliet}, {@check_strict}, {@hide}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {}, {@check_relaxed}, {@check_relaxed}, {@nocompress}]}, 0x2, 0x553, &(0x7f0000000b00)="$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") mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b09b, 0x0) 1.361510058s ago: executing program 5 (id=6306): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x0, 0x1}}, 0x20) 1.343721997s ago: executing program 4 (id=6307): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r0, 0xb) 1.326496657s ago: executing program 0 (id=6308): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0xe00, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1.223532606s ago: executing program 2 (id=6309): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x2000408, 0x4}}) 999.870016ms ago: executing program 4 (id=6310): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000740)="170000000200010000ffbe8c5ee17688a2006c000301000a000002a2576e5ed9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000fc0607bdca67a622c45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c56835382e9d969ba5149e9e90539062a80e605007f71174aa964f3c63e5a1b47b63a6323ded241482cfe17c3778a658cfecb61406ae7298f", 0xc0) 999.630284ms ago: executing program 5 (id=6311): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_delroute={0x2c, 0x19, 0x1, 0x70bd2d, 0x25dfdbfc, {0x2, 0x80, 0x80, 0x84, 0xfd, 0x3, 0xff, 0x4, 0x2700}, [@RTA_NH_ID={0x8, 0x1e, 0x7}, @RTA_PRIORITY={0x8, 0x6, 0x40000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000850}, 0x4004800) 923.309712ms ago: executing program 2 (id=6312): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x5, 0x600}}, 0x20) 854.514442ms ago: executing program 3 (id=6313): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000001300)=ANY=[@ANYBLOB="10000000f1000000", @ANYRES8=r0], 0x0) 756.436309ms ago: executing program 0 (id=6314): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) 742.447465ms ago: executing program 1 (id=6315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c010380400000800800034000000002340002803000028008000180fffffffd09000200"], 0x1ec}}, 0x0) 718.081376ms ago: executing program 4 (id=6316): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x14, &(0x7f00000001c0)="020000000980ffff", 0x8) 682.653502ms ago: executing program 5 (id=6317): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, &(0x7f0000000280)) 500.08978ms ago: executing program 0 (id=6318): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b00000001a007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d525146add31b7bc77c26d8982be29d889d1e35355848794ca3f8b38aef1e114ab9fbebe9c6609e64b1e5a3b0c81c6f8144e74fe12780ca46c1a6c04ad73c9d44b605f9000000000000000000", 0x9e}, {&(0x7f00000001c0)="68cabf2dfb58fc0af787a8ffff0200258f00", 0x12}], 0x2}, 0x0) 496.49091ms ago: executing program 2 (id=6319): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x13, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0xff2f}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 431.807183ms ago: executing program 3 (id=6320): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4401}}}}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xbcca}]}, 0x50}}, 0x10) 375.673434ms ago: executing program 4 (id=6321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xd4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 366.939722ms ago: executing program 5 (id=6322): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x2c, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) 314.587555ms ago: executing program 1 (id=6323): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08800, &(0x7f0000000140)=ANY=[], 0x1, 0x67c, &(0x7f0000000580)="$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") lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=@known='user.incfs.size\x00', 0x0, 0xffffffffffffffe3) 163.962458ms ago: executing program 2 (id=6324): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) 141.219158ms ago: executing program 0 (id=6325): r0 = syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f00000015c0)='./file0\x00', 0x2000000, &(0x7f0000001400), 0x0, 0x559e, &(0x7f0000001600)="$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") ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000007bc0)={{}, 0x0, 0x18, @unused=[0x8001, 0x3, 0x162c0000], @subvolid=0x4}) 0s ago: executing program 4 (id=6326): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x321c213, &(0x7f0000000040)=ANY=[], 0x7, 0xf38, &(0x7f0000000340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1cc) kernel console output (not intermixed with test programs): ct, device number 42 [ 810.870223][T18267] loop0: detected capacity change from 0 to 32768 [ 810.898329][T18267] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5319 (18267) [ 810.939982][T18278] loop1: detected capacity change from 0 to 512 [ 810.998946][T18267] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 811.040739][T18278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.043214][T18267] BTRFS info (device loop0): using blake2b checksum algorithm [ 811.069110][T18269] loop5: detected capacity change from 0 to 32768 [ 811.069676][T18278] ext4 filesystem being mounted at /945/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 811.107339][T18281] loop2: detected capacity change from 0 to 512 [ 811.139773][T18269] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5321 (18269) [ 811.172485][ T5718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.215740][T18269] BTRFS info (device loop5): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 811.226474][T18269] BTRFS info (device loop5): using crc32c checksum algorithm [ 811.270473][T18281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.303416][T18267] BTRFS info (device loop0 state EC): setting nodatasum [ 811.361635][T18267] BTRFS info (device loop0 state EC): setting nodatacow [ 811.431661][T18267] BTRFS info (device loop0 state EC): disabling log replay at mount time [ 811.479978][T18269] BTRFS info (device loop5): enabling ssd optimizations [ 811.491422][T18267] BTRFS info (device loop0 state EC): enabling free space tree [ 811.509243][T18269] BTRFS info (device loop5): turning on async discard [ 811.524637][T18267] BTRFS info (device loop0 state EC): ignoring data csums [ 811.551196][T18269] BTRFS info (device loop5): enabling free space tree [ 811.655689][ T5719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.890185][ T5731] BTRFS info (device loop5): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 811.920698][ T5717] BTRFS info (device loop0 state EC): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 811.998807][T18318] loop1: detected capacity change from 0 to 164 [ 812.067200][T18319] loop2: detected capacity change from 0 to 512 [ 812.087425][T18318] rock: corrupted directory entry. extent=134217760 out of volume (nzones=41) [ 812.170811][T18274] loop4: detected capacity change from 0 to 32768 [ 812.211794][T18274] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5322 (18274) [ 812.228373][T18319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.323372][T18274] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 812.355685][T18274] BTRFS info (device loop4): using crc32c checksum algorithm [ 812.415035][T18274] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 812.546864][T18279] loop3: detected capacity change from 0 to 32768 [ 812.562205][ T5719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.625902][T18279] BTRFS: device fsid f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5325 (18279) [ 812.694196][T18338] loop1: detected capacity change from 0 to 128 [ 812.766746][T18279] BTRFS info (device loop3): first mount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 812.806601][T18274] BTRFS info (device loop4): rebuilding free space tree [ 812.828409][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 812.835243][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.847071][T18279] BTRFS info (device loop3): using crc32c checksum algorithm [ 813.082502][T18274] BTRFS info (device loop4): disabling free space tree [ 813.113731][T18274] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 813.136032][T18274] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 813.262473][T18274] BTRFS info (device loop4): enabling ssd optimizations [ 813.293095][T18279] BTRFS info (device loop3): enabling ssd optimizations [ 813.310411][T18274] BTRFS info (device loop4): turning on async discard [ 813.340052][T18279] BTRFS info (device loop3): turning on async discard [ 813.363258][T18274] BTRFS info (device loop4): enabling disk space caching [ 813.385478][T18279] BTRFS info (device loop3): enabling free space tree [ 813.408762][T18274] BTRFS info (device loop4): force clearing of disk cache [ 813.676741][ T5724] BTRFS info (device loop3): last unmount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 813.816341][ T5729] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 813.964026][T18363] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.261804][ T5731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.552800][T18339] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5329 (18339) [ 814.573532][ T802] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 814.668032][T18339] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 814.712907][T18339] BTRFS info (device loop0): using blake2b checksum algorithm [ 814.803652][T18361] BTRFS: device fsid 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5332 (18361) [ 814.819290][ T802] usb 5-1: Using ep0 maxpacket: 8 [ 814.914716][ T802] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.935410][ T802] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 814.941482][T18361] BTRFS info (device loop1): first mount of filesystem 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 [ 814.950333][ T802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.992539][T18361] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 815.012371][ T802] usb 5-1: Product: syz [ 815.035394][ T802] usb 5-1: Manufacturer: syz [ 815.057788][T18339] BTRFS info (device loop0): enabling ssd optimizations [ 815.068207][ T802] usb 5-1: SerialNumber: syz [ 815.102142][T18355] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5331 (18355) [ 815.120709][T18339] BTRFS info (device loop0): turning on async discard [ 815.143905][ T802] usb 5-1: config 0 descriptor?? [ 815.208923][T18339] BTRFS info (device loop0): enabling free space tree [ 815.228478][T18355] BTRFS info (device loop2): first mount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 815.269601][T18355] BTRFS info (device loop2): using blake2b checksum algorithm [ 815.434954][T18361] BTRFS info (device loop1): enabling ssd optimizations [ 815.479317][T18361] BTRFS info (device loop1): turning on async discard [ 815.535169][T18361] BTRFS info (device loop1): enabling free space tree [ 815.589898][T18355] BTRFS info (device loop2): enabling ssd optimizations [ 815.613781][ T5717] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 815.626304][T18355] BTRFS info (device loop2): turning on async discard [ 815.667108][T18355] BTRFS info (device loop2): enabling free space tree [ 815.684312][ T802] usb 5-1: USB disconnect, device number 29 [ 815.847363][ T5718] BTRFS info (device loop1): last unmount of filesystem 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 [ 816.017450][ T5719] BTRFS info (device loop2): last unmount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 816.178815][T18367] set_capacity_and_notify: 4 callbacks suppressed [ 816.178844][T18367] loop3: detected capacity change from 0 to 32768 [ 816.240617][T18371] loop5: detected capacity change from 0 to 32768 [ 816.262988][T18367] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5334 (18367) [ 816.399242][T18371] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5336 (18371) [ 816.484539][T18371] BTRFS info (device loop5): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 816.520749][T18371] BTRFS info (device loop5): using crc32c checksum algorithm [ 816.542098][T18367] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 816.613787][T18367] BTRFS info (device loop3): using sha256 checksum algorithm [ 816.693905][T18432] loop4: detected capacity change from 0 to 2048 [ 816.782448][T18371] BTRFS info (device loop5): enabling ssd optimizations [ 816.817412][T18371] BTRFS info (device loop5): turning on async discard [ 816.837086][T18432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 816.867531][T18371] BTRFS info (device loop5): enabling free space tree [ 817.019942][T18459] loop0: detected capacity change from 0 to 16 [ 817.077021][T18367] BTRFS info (device loop3): enabling ssd optimizations [ 817.097415][T18459] erofs (device loop0): mounted with root inode @ nid 36. [ 817.131653][T18367] BTRFS info (device loop3): turning on async discard [ 817.178052][T18367] BTRFS info (device loop3): enabling free space tree [ 817.231862][T18367] BTRFS info (device loop3): enabling auto defrag [ 817.266664][T18367] BTRFS info (device loop3): max_inline set to 4096 [ 817.289453][ T5729] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.397345][ T5731] BTRFS info (device loop5): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 817.512976][T18463] loop2: detected capacity change from 0 to 1024 [ 817.678805][ T5724] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 817.753484][T18463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 817.776808][T18466] loop4: detected capacity change from 0 to 512 [ 817.895853][T18466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 817.992224][ T5719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.050203][ T5729] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.572710][T18475] loop2: detected capacity change from 0 to 2048 [ 818.665164][T18475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 818.804436][T18421] loop1: detected capacity change from 0 to 32768 [ 818.885904][T18421] BTRFS: device fsid 59b5568a-a427-4554-b73a-27dcd238cc5a devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5338 (18421) [ 818.998184][ T5719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.013127][T18421] BTRFS info (device loop1): first mount of filesystem 59b5568a-a427-4554-b73a-27dcd238cc5a [ 819.059188][T18421] BTRFS info (device loop1): using crc32c checksum algorithm [ 819.250809][T18468] loop0: detected capacity change from 0 to 32768 [ 819.351104][T18468] BTRFS: device fsid cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5347 (18468) [ 819.396804][T18421] BTRFS info (device loop1): enabling ssd optimizations [ 819.450971][T18421] BTRFS info (device loop1): turning on async discard [ 819.487933][T18421] BTRFS info (device loop1): enabling free space tree [ 819.572225][T18468] BTRFS info (device loop0): first mount of filesystem cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 [ 819.626598][T18468] BTRFS info (device loop0): using crc32c checksum algorithm [ 819.736464][ T5718] BTRFS info (device loop1): last unmount of filesystem 59b5568a-a427-4554-b73a-27dcd238cc5a [ 819.895736][T18468] BTRFS info (device loop0): enabling ssd optimizations [ 819.944305][T18468] BTRFS info (device loop0): turning on async discard [ 819.981828][T18468] BTRFS info (device loop0): enabling free space tree [ 820.060287][T18477] loop5: detected capacity change from 0 to 32768 [ 820.114318][T18477] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5346 (18477) [ 820.233447][T18477] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 820.299598][T18476] BTRFS: device fsid 16bad5ef-498e-43ba-8a30-25ddcaa179c7 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5350 (18476) [ 820.313968][T18477] BTRFS info (device loop5): using xxhash64 checksum algorithm [ 820.376846][ T5717] BTRFS info (device loop0): last unmount of filesystem cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 [ 820.421346][T18476] BTRFS info (device loop4): first mount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 820.511888][T18479] JBD2: Ignoring recovery information on journal [ 820.555943][T18476] BTRFS info (device loop4): using sha256 checksum algorithm [ 820.690844][T18477] BTRFS info (device loop5): enabling ssd optimizations [ 820.776071][T18477] BTRFS info (device loop5): turning on async discard [ 820.860478][T18476] BTRFS info (device loop4): enabling ssd optimizations [ 820.883200][T18477] BTRFS info (device loop5): enabling free space tree [ 820.900076][T18479] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 820.915292][T18476] BTRFS info (device loop4): turning on async discard [ 820.943276][T18476] BTRFS info (device loop4): enabling free space tree [ 821.360040][T18497] BTRFS: device fsid 100ef7e5-a5de-41f0-884c-a25b1c06c78a devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5352 (18497) [ 821.400328][ T5731] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 821.436225][ T5729] BTRFS info (device loop4): last unmount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 821.486588][T18497] BTRFS info (device loop2): first mount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 821.497357][T18549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.538912][T18497] BTRFS info (device loop2): using blake2b checksum algorithm [ 821.549086][ T5724] ocfs2: Unmounting device (7,3) on (node local) [ 821.769578][ T5717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.849906][T18514] set_capacity_and_notify: 4 callbacks suppressed [ 821.849935][T18514] loop1: detected capacity change from 0 to 32768 [ 821.907091][T18514] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5353 (18514) [ 821.936183][T18497] BTRFS info (device loop2): enabling ssd optimizations [ 821.979939][T18497] BTRFS info (device loop2): turning on async discard [ 822.006779][T18497] BTRFS info (device loop2): enabling free space tree [ 822.006980][T18514] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 822.138716][T18514] BTRFS info (device loop1): using crc32c checksum algorithm [ 822.232571][T18567] loop0: detected capacity change from 0 to 512 [ 822.318078][ T5719] BTRFS info (device loop2): last unmount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 822.376590][T18567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 822.453901][T18514] BTRFS info (device loop1): enabling ssd optimizations [ 822.463207][T18567] ext4 filesystem being mounted at /891/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 822.497477][T18514] BTRFS info (device loop1): turning on async discard [ 822.538411][T18514] BTRFS info (device loop1): enabling free space tree [ 822.750129][ T5717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.964244][ T5718] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 823.921901][T18597] loop1: detected capacity change from 0 to 512 [ 824.013227][T18597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.216557][T18589] loop3: detected capacity change from 0 to 32768 [ 824.275859][T18589] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5355 (18589) [ 824.354844][ T5718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.473354][T18589] BTRFS info (device loop3): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 824.533532][T18589] BTRFS info (device loop3): using xxhash64 checksum algorithm [ 824.749063][T18613] loop1: detected capacity change from 0 to 512 [ 824.762873][T18589] BTRFS info (device loop3): enabling ssd optimizations [ 824.805102][T18613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 824.822026][T18589] BTRFS info (device loop3): turning on async discard [ 824.903010][T18589] BTRFS info (device loop3): enabling free space tree [ 824.946134][T18585] loop5: detected capacity change from 0 to 32768 [ 825.035435][T18585] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 825.098562][T18585] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 825.144469][ T5718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.397248][ T5724] BTRFS info (device loop3): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 825.632356][T18621] loop1: detected capacity change from 0 to 2048 [ 825.642261][T18585] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 4ms [ 825.708030][T18586] loop2: detected capacity change from 0 to 32768 [ 825.729586][T18621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 825.743975][ T5653] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 825.789403][T18621] ext4 filesystem being mounted at /954/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 825.812029][ T5653] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 825.837160][T18586] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 825.853575][T18586] CPU: 1 UID: 0 PID: 18586 Comm: syz.2.5359 Not tainted syzkaller #0 PREEMPT(full) [ 825.853628][T18586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 825.853653][T18586] Call Trace: [ 825.853666][T18586] [ 825.853682][T18586] dump_stack_lvl+0x100/0x190 [ 825.853732][T18586] sysfs_warn_dup.cold+0x1c/0x28 [ 825.853804][T18586] sysfs_create_dir_ns+0x24b/0x2b0 [ 825.853872][T18586] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 825.853936][T18586] ? find_held_lock+0x2b/0x80 [ 825.853995][T18586] ? kobject_add_internal+0x25f/0x930 [ 825.854041][T18586] ? kobject_add_internal+0x25f/0x930 [ 825.854088][T18586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 825.854137][T18586] ? do_raw_spin_unlock+0x145/0x1e0 [ 825.854199][T18586] kobject_add_internal+0x2c8/0x930 [ 825.854250][T18586] kobject_init_and_add+0x121/0x180 [ 825.854297][T18586] ? __pfx_kobject_init_and_add+0x10/0x10 [ 825.854347][T18586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 825.854396][T18586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 825.854442][T18586] ? lockdep_init_map_type+0x5c/0x250 [ 825.854493][T18586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 825.854541][T18586] ? lockdep_init_map_type+0x5c/0x250 [ 825.854599][T18586] gfs2_sys_fs_add+0x209/0x410 [ 825.854664][T18586] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 825.854725][T18586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 825.854779][T18586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 825.854835][T18586] ? alloc_workqueue_noprof+0xe1/0x130 [ 825.854890][T18586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 825.854954][T18586] gfs2_fill_super+0x143b/0x2cf0 [ 825.854999][T18586] ? __pfx_vsnprintf+0x10/0x10 [ 825.855058][T18586] ? __lock_acquire+0x4a5/0x2630 [ 825.855122][T18586] ? __pfx_gfs2_fill_super+0x10/0x10 [ 825.855165][T18586] ? __pfx_snprintf+0x10/0x10 [ 825.855228][T18586] ? find_held_lock+0x2b/0x80 [ 825.855289][T18586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 825.855338][T18586] ? set_blocksize+0x1cf/0x460 [ 825.855376][T18586] ? setup_bdev_super+0x337/0x730 [ 825.855437][T18586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 825.855488][T18586] ? sb_set_blocksize+0x1fe/0x290 [ 825.855538][T18586] ? get_tree_bdev_flags+0x38c/0x620 [ 825.855600][T18586] get_tree_bdev_flags+0x38c/0x620 [ 825.855661][T18586] ? __pfx_gfs2_fill_super+0x10/0x10 [ 825.855708][T18586] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 825.855774][T18586] ? rcu_is_watching+0x12/0xc0 [ 825.855841][T18586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 825.855890][T18586] ? apparmor_capable+0x1d7/0x4d0 [ 825.855953][T18586] ? __asan_memset+0x23/0x50 [ 825.856005][T18586] gfs2_get_tree+0x4e/0x280 [ 825.856051][T18586] vfs_get_tree+0x92/0x320 [ 825.856102][T18586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 825.856154][T18586] path_mount+0x7d0/0x23d0 [ 825.856212][T18586] ? __pfx_path_mount+0x10/0x10 [ 825.856259][T18586] ? lockdep_hardirqs_on+0x78/0x100 [ 825.856321][T18586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 825.856376][T18586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 825.856425][T18586] ? kmem_cache_free+0x127/0x6c0 [ 825.856489][T18586] ? __x64_sys_mount+0x293/0x310 [ 825.856537][T18586] __x64_sys_mount+0x293/0x310 [ 825.856589][T18586] ? __pfx___x64_sys_mount+0x10/0x10 [ 825.856643][T18586] ? srso_alias_return_thunk+0x5/0xfbef5 [ 825.856692][T18586] ? rcu_is_watching+0x12/0xc0 [ 825.856758][T18586] do_syscall_64+0x10b/0xf80 [ 825.856833][T18586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.856878][T18586] RIP: 0033:0x7fed1759e0ca [ 825.856909][T18586] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.856949][T18586] RSP: 002b:00007fed18448e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 825.856987][T18586] RAX: ffffffffffffffda RBX: 00007fed18448ee0 RCX: 00007fed1759e0ca [ 825.857015][T18586] RDX: 0000200000021180 RSI: 00002000000211c0 RDI: 00007fed18448ea0 [ 825.857045][T18586] RBP: 0000200000021180 R08: 00007fed18448ee0 R09: 0000000000000000 [ 825.857071][T18586] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000211c0 [ 825.857097][T18586] R13: 00007fed18448ea0 R14: 000000000002114d R15: 0000200000021200 [ 825.857146][T18586] [ 825.882733][T18593] loop4: detected capacity change from 0 to 32768 [ 825.907706][T18586] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 826.024150][ T5718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.086033][T18593] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 826.099785][T18586] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 826.349271][T18593] CPU: 0 UID: 0 PID: 18593 Comm: syz.4.5357 Not tainted syzkaller #0 PREEMPT(full) [ 826.349327][T18593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 826.349352][T18593] Call Trace: [ 826.349367][T18593] [ 826.349383][T18593] dump_stack_lvl+0x100/0x190 [ 826.349437][T18593] sysfs_warn_dup.cold+0x1c/0x28 [ 826.349501][T18593] sysfs_create_dir_ns+0x24b/0x2b0 [ 826.349581][T18593] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 826.349649][T18593] ? find_held_lock+0x2b/0x80 [ 826.349717][T18593] ? kobject_add_internal+0x25f/0x930 [ 826.349763][T18593] ? kobject_add_internal+0x25f/0x930 [ 826.349810][T18593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 826.349862][T18593] ? do_raw_spin_unlock+0x145/0x1e0 [ 826.349927][T18593] kobject_add_internal+0x2c8/0x930 [ 826.349984][T18593] kobject_init_and_add+0x121/0x180 [ 826.350036][T18593] ? __pfx_kobject_init_and_add+0x10/0x10 [ 826.350093][T18593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 826.350145][T18593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 826.350197][T18593] ? lockdep_init_map_type+0x5c/0x250 [ 826.350253][T18593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 826.350309][T18593] ? lockdep_init_map_type+0x5c/0x250 [ 826.350373][T18593] gfs2_sys_fs_add+0x209/0x410 [ 826.350439][T18593] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 826.350514][T18593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 826.350570][T18593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 826.350626][T18593] ? alloc_workqueue_noprof+0xe1/0x130 [ 826.350686][T18593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 826.350751][T18593] gfs2_fill_super+0x143b/0x2cf0 [ 826.350796][T18593] ? __pfx_vsnprintf+0x10/0x10 [ 826.350854][T18593] ? __lock_acquire+0x4a5/0x2630 [ 826.350921][T18593] ? __pfx_gfs2_fill_super+0x10/0x10 [ 826.350968][T18593] ? __pfx_snprintf+0x10/0x10 [ 826.351032][T18593] ? find_held_lock+0x2b/0x80 [ 826.351098][T18593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 826.351149][T18593] ? set_blocksize+0x1cf/0x460 [ 826.351188][T18593] ? setup_bdev_super+0x337/0x730 [ 826.351251][T18593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 826.351303][T18593] ? sb_set_blocksize+0x1fe/0x290 [ 826.351355][T18593] ? get_tree_bdev_flags+0x38c/0x620 [ 826.351419][T18593] get_tree_bdev_flags+0x38c/0x620 [ 826.351483][T18593] ? __pfx_gfs2_fill_super+0x10/0x10 [ 826.351539][T18593] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 826.351611][T18593] ? rcu_is_watching+0x12/0xc0 [ 826.351673][T18593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 826.351723][T18593] ? apparmor_capable+0x1d7/0x4d0 [ 826.351789][T18593] ? __asan_memset+0x23/0x50 [ 826.351844][T18593] gfs2_get_tree+0x4e/0x280 [ 826.351892][T18593] vfs_get_tree+0x92/0x320 [ 826.351946][T18593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 826.352001][T18593] path_mount+0x7d0/0x23d0 [ 826.352063][T18593] ? __pfx_path_mount+0x10/0x10 [ 826.352112][T18593] ? lockdep_hardirqs_on+0x78/0x100 [ 826.352177][T18593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 826.352233][T18593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 826.352282][T18593] ? kmem_cache_free+0x127/0x6c0 [ 826.352349][T18593] ? __x64_sys_mount+0x293/0x310 [ 826.352398][T18593] __x64_sys_mount+0x293/0x310 [ 826.352453][T18593] ? __pfx___x64_sys_mount+0x10/0x10 [ 826.352517][T18593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 826.352570][T18593] ? rcu_is_watching+0x12/0xc0 [ 826.352638][T18593] do_syscall_64+0x10b/0xf80 [ 826.352712][T18593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.352755][T18593] RIP: 0033:0x7f624499e0ca [ 826.352788][T18593] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.352830][T18593] RSP: 002b:00007f624586be58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 826.352869][T18593] RAX: ffffffffffffffda RBX: 00007f624586bee0 RCX: 00007f624499e0ca [ 826.352897][T18593] RDX: 0000200000037f40 RSI: 0000200000037f80 RDI: 00007f624586bea0 [ 826.352925][T18593] RBP: 0000200000037f40 R08: 00007f624586bee0 R09: 0000000000000000 [ 826.352952][T18593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000037f80 [ 826.352978][T18593] R13: 00007f624586bea0 R14: 0000000000037f0c R15: 0000200000037fc0 [ 826.353032][T18593] [ 826.782138][T18593] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 826.796450][T18593] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 827.033182][ T5653] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1142ms [ 827.264141][ T5653] gfs2: fsid=syz:syz.0: jid=0: Done [ 827.320412][T18585] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 827.340049][T18585] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 828.796016][T18632] loop4: detected capacity change from 0 to 32768 [ 828.809734][T18642] loop5: detected capacity change from 0 to 1024 [ 828.837113][T18632] BTRFS: device fsid 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5367 (18632) [ 828.929444][T18632] BTRFS info (device loop4): first mount of filesystem 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 [ 828.979119][T18632] BTRFS info (device loop4): using blake2b checksum algorithm [ 829.213378][T18632] BTRFS info (device loop4): enabling ssd optimizations [ 829.230034][T18632] BTRFS info (device loop4): turning on async discard [ 829.273038][T18632] BTRFS info (device loop4): enabling free space tree [ 829.405453][T18659] loop5: detected capacity change from 0 to 1024 [ 829.455584][T18640] loop2: detected capacity change from 0 to 32768 [ 829.483661][T18659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 829.511543][T18640] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5369 (18640) [ 829.643486][T18640] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 829.695312][ T5729] BTRFS info (device loop4): last unmount of filesystem 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 [ 829.706557][T18640] BTRFS info (device loop2): using sha256 checksum algorithm [ 829.797779][ T5731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.000429][T18640] BTRFS info (device loop2): enabling ssd optimizations [ 830.035653][T18640] BTRFS info (device loop2): turning on async discard [ 830.042734][T18640] BTRFS info (device loop2): enabling free space tree [ 830.317679][ T5719] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 830.897686][T18685] loop2: detected capacity change from 0 to 4096 [ 830.987841][T18685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 831.270979][T18690] loop1: detected capacity change from 0 to 512 [ 831.285137][T18691] loop3: detected capacity change from 0 to 2048 [ 831.354478][T18691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 831.370949][ T5719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.423347][T18690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 831.696296][T18696] loop0: detected capacity change from 0 to 128 [ 831.754615][T18680] loop4: detected capacity change from 0 to 32768 [ 831.772086][ T5724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.797728][ T5718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.834132][T18696] hpfs: Bad magic ... probably not HPFS [ 831.843373][T18680] BTRFS: device fsid 18898830-c59e-4026-919d-fe1055706c2c devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5373 (18680) [ 831.909882][T18699] loop2: detected capacity change from 0 to 732 [ 831.927685][T18680] BTRFS info (device loop4): first mount of filesystem 18898830-c59e-4026-919d-fe1055706c2c [ 831.995843][T18680] BTRFS info (device loop4): using xxhash64 checksum algorithm [ 832.204864][T18680] BTRFS info (device loop4): enabling ssd optimizations [ 832.220744][T18680] BTRFS info (device loop4): turning on async discard [ 832.273271][T18680] BTRFS info (device loop4): enabling free space tree [ 832.289436][T18719] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 832.555661][T18681] F2FS-fs (loop5): Image doesn't support compression [ 832.579032][T18681] F2FS-fs (loop5): build fault injection rate: 531 [ 832.608177][T18681] F2FS-fs (loop5): build fault injection type: 0x2 [ 832.677794][T18681] F2FS-fs (loop5): invalid crc value [ 832.733264][ T5729] BTRFS info (device loop4): last unmount of filesystem 18898830-c59e-4026-919d-fe1055706c2c [ 832.806750][T18681] F2FS-fs (loop5): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x5004/0xae90 [ 832.880122][T18681] F2FS-fs (loop5): Failed to initialize F2FS node manager (-12) [ 834.447682][T18744] set_capacity_and_notify: 7 callbacks suppressed [ 834.447711][T18744] loop5: detected capacity change from 0 to 256 [ 834.938424][T18746] loop5: detected capacity change from 0 to 128 [ 835.175900][T18740] loop4: detected capacity change from 0 to 32768 [ 835.229773][T18740] BTRFS: device fsid d09153a9-5497-4f31-8e52-d2d02bbdf7fc devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5390 (18740) [ 835.323287][T18740] BTRFS info (device loop4): first mount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc [ 835.364618][T18740] BTRFS info (device loop4): using blake2b checksum algorithm [ 835.649742][T18763] loop3: detected capacity change from 0 to 128 [ 835.653749][T18740] BTRFS info (device loop4): enabling ssd optimizations [ 835.667662][T18740] BTRFS info (device loop4): turning on async discard [ 835.693719][T18740] BTRFS info (device loop4): enabling free space tree [ 835.865229][T18757] loop5: detected capacity change from 0 to 8192 [ 835.952566][ T5729] BTRFS info (device loop4): last unmount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc [ 836.374272][T18772] loop5: detected capacity change from 0 to 128 [ 836.784947][T18774] loop4: detected capacity change from 0 to 128 [ 836.867418][T18776] loop5: detected capacity change from 0 to 128 [ 837.142505][T18778] loop2: detected capacity change from 0 to 256 [ 837.169540][T18780] loop0: detected capacity change from 0 to 256 [ 838.289844][T18791] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 838.388212][T18791] ntfs3(loop4): Failed to load $Secure (-22). [ 838.425177][T18791] ntfs3(loop4): Failed to initialize $Secure (-22). [ 839.052835][T18768] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 839.078886][T18768] dlm: no local IP address has been set [ 839.110728][T18768] dlm: cannot start dlm midcomms -107 [ 839.142924][T18768] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 839.608961][T18808] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 840.321596][T18811] set_capacity_and_notify: 9 callbacks suppressed [ 840.321624][T18811] loop4: detected capacity change from 0 to 8192 [ 840.324136][T18809] loop3: detected capacity change from 0 to 16384 [ 840.415604][T18812] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 840.473235][T18813] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 841.869530][T18819] loop0: detected capacity change from 0 to 512 [ 843.277062][T18823] loop0: detected capacity change from 0 to 32768 [ 843.552917][T18828] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 844.231823][T18821] loop2: detected capacity change from 0 to 65536 [ 846.132924][T18834] loop4: detected capacity change from 0 to 32768 [ 846.208976][T18834] JBD2: Ignoring recovery information on journal [ 846.360609][T18836] loop3: detected capacity change from 0 to 32768 [ 846.399362][T18834] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 846.443951][T18836] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5426 (18836) [ 846.558854][T18836] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 846.603717][T18836] BTRFS info (device loop3): using blake2b checksum algorithm [ 846.762305][ T5729] ocfs2: Unmounting device (7,4) on (node local) [ 846.889855][T18836] BTRFS info (device loop3): enabling ssd optimizations [ 846.929084][T18836] BTRFS info (device loop3): turning on async discard [ 846.967871][T18836] BTRFS info (device loop3): enabling free space tree [ 847.255179][ T5724] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 847.385694][T18832] loop2: detected capacity change from 0 to 65536 [ 847.422410][T18857] loop5: detected capacity change from 0 to 4096 [ 847.478441][T18857] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 847.525428][T18832] (syz.2.5437,18832,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 847.599599][T18832] (syz.2.5437,18832,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 847.910700][T18862] loop1: detected capacity change from 0 to 2048 [ 848.075891][T18861] loop3: detected capacity change from 0 to 4096 [ 848.693621][T18864] loop0: detected capacity change from 0 to 8192 [ 848.741451][T18864] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 849.628954][T18867] loop5: detected capacity change from 0 to 32768 [ 849.703903][T18867] (syz.5.5432,18867,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 849.719502][T18868] loop2: detected capacity change from 0 to 32768 [ 849.741734][T18867] (syz.5.5432,18867,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 849.806062][T18868] (syz.2.5433,18868,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 849.836377][T18868] (syz.2.5433,18868,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 850.181191][T18872] loop3: detected capacity change from 0 to 32768 [ 850.282752][T18872] (syz.3.5435,18872,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 850.357135][T18872] (syz.3.5435,18872,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 851.485469][T18870] (syz.1.5434,18870,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 851.554341][T18870] (syz.1.5434,18870,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 851.617119][T18880] set_capacity_and_notify: 3 callbacks suppressed [ 851.617146][T18880] loop2: detected capacity change from 0 to 32768 [ 851.714235][T18890] loop3: detected capacity change from 0 to 3 [ 851.723934][T18880] (syz.2.5439,18880,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 851.758252][T18880] (syz.2.5439,18880,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 851.771817][T18890] syz.3.5443: attempt to access beyond end of device [ 851.771817][T18890] loop3: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 851.855525][T18890] SQUASHFS error: Failed to read block 0x0: -5 [ 851.873853][T18890] unable to read squashfs_super_block [ 852.195732][T18874] loop0: detected capacity change from 0 to 65536 [ 852.259294][T18874] (syz.0.5436,18874,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 852.270228][T18897] loop3: detected capacity change from 0 to 128 [ 852.285093][T18897] Invalid source name [ 852.292039][T18897] UBIFS error (pid: 18897): cannot open "/dev/loop3", error -22 [ 852.365386][T18874] (syz.0.5436,18874,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 852.400964][T18900] loop3: detected capacity change from 0 to 128 [ 852.840943][T18903] loop0: detected capacity change from 0 to 128 [ 852.874514][T18904] loop3: detected capacity change from 0 to 128 [ 852.900289][T18903] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 852.934875][T18904] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 852.982407][T18903] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 853.007552][T18904] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 853.290545][T18888] loop4: detected capacity change from 0 to 32768 [ 853.394077][T18888] JBD2: Ignoring recovery information on journal [ 853.478425][T18888] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 853.478941][T18907] loop0: detected capacity change from 0 to 4096 [ 853.553032][T18909] loop3: detected capacity change from 0 to 256 [ 853.575064][T18888] JBD2: bad block at offset 32 [ 853.597399][T18909] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 853.640890][T18888] (syz.4.5442,18888,1):ocfs2_load_local_alloc:311 ERROR: Invalid local alloc inode, 75 [ 853.679849][T18888] (syz.4.5442,18888,1):ocfs2_load_local_alloc:356 ERROR: status = -22 [ 853.701738][T18909] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 853.730550][T18888] (syz.4.5442,18888,1):ocfs2_check_volume:2404 ERROR: status = -22 [ 853.761860][T18909] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 853.782611][T18888] (syz.4.5442,18888,1):ocfs2_check_volume:2432 ERROR: status = -22 [ 853.808788][T18909] UDF-fs: Scanning with blocksize 512 failed [ 853.826234][T18888] (syz.4.5442,18888,1):ocfs2_mount_volume:1764 ERROR: status = -22 [ 853.862978][T18909] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 853.888257][T18893] (syz.1.5444,18893,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 853.928081][T18909] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 853.951418][T18888] (syz.4.5442,18888,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 853.988778][T18893] (syz.1.5444,18893,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 854.276451][T18896] (syz.2.5445,18896,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 854.330837][T18896] (syz.2.5445,18896,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 854.403532][T18916] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 854.493162][T18916] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 854.568512][T18916] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 854.627804][T18916] UDF-fs: Scanning with blocksize 512 failed [ 854.678911][T18918] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 854.695360][T18916] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 854.719695][T18918] UDF-fs: Scanning with blocksize 512 failed [ 854.769747][T18918] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 854.781481][T18916] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 854.811452][T18918] UDF-fs: Scanning with blocksize 1024 failed [ 854.851977][T18918] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 854.906656][T18918] UDF-fs: Scanning with blocksize 2048 failed [ 854.945843][T18918] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 854.988712][T18922] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 855.005671][T18918] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 855.038143][T18922] UDF-fs: Scanning with blocksize 512 failed [ 855.061344][T18924] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 855.082050][T18922] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 855.103105][T18924] UDF-fs: Scanning with blocksize 512 failed [ 855.141071][T18922] UDF-fs: Scanning with blocksize 1024 failed [ 855.153901][T18924] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 855.184388][T18922] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 855.198480][T18924] UDF-fs: Scanning with blocksize 1024 failed [ 855.227090][T18922] UDF-fs: Scanning with blocksize 2048 failed [ 855.248776][T18924] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 855.272290][T18926] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 855.289128][T18924] UDF-fs: Scanning with blocksize 2048 failed [ 855.322569][T18922] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 855.326467][T18926] UDF-fs: Scanning with blocksize 512 failed [ 855.357002][T18924] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 855.406616][T18928] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 855.426617][T18926] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 855.427997][T18922] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 855.447792][T18924] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 855.466653][T18928] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 855.472119][T18926] UDF-fs: Scanning with blocksize 1024 failed [ 855.541322][T18926] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 855.593206][T18926] UDF-fs: Scanning with blocksize 2048 failed [ 855.636186][T18926] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 855.691515][T18926] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 855.915792][T18931] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 856.344216][T18935] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 857.006785][T18945] set_capacity_and_notify: 15 callbacks suppressed [ 857.006811][T18945] loop0: detected capacity change from 0 to 2048 [ 857.054038][T18951] loop4: detected capacity change from 0 to 128 [ 857.175075][T18949] loop3: detected capacity change from 0 to 2048 [ 857.535201][T18954] loop0: detected capacity change from 0 to 128 [ 857.604026][T18954] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 857.670995][T18954] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 857.734578][T18955] loop4: detected capacity change from 0 to 4096 [ 857.779784][T18955] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 857.859366][T18957] loop3: detected capacity change from 0 to 4096 [ 857.901462][T18957] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 857.975608][T18939] loop5: detected capacity change from 0 to 32768 [ 858.057075][T18939] (syz.5.5464,18939,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 858.076845][T18939] (syz.5.5464,18939,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 858.194760][T18960] loop0: detected capacity change from 0 to 2048 [ 858.609827][T18947] loop2: detected capacity change from 0 to 32768 [ 858.681576][T18966] loop4: detected capacity change from 0 to 256 [ 858.710183][T18947] JBD2: Ignoring recovery information on journal [ 858.731174][T18947] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 858.741271][T18947] JBD2: bad block at offset 32 [ 858.760948][T18947] (syz.2.5467,18947,0):ocfs2_load_local_alloc:311 ERROR: Invalid local alloc inode, 75 [ 858.825724][T18947] (syz.2.5467,18947,1):ocfs2_load_local_alloc:356 ERROR: status = -22 [ 858.849142][T18947] (syz.2.5467,18947,0):ocfs2_check_volume:2404 ERROR: status = -22 [ 858.893969][T18947] (syz.2.5467,18947,1):ocfs2_check_volume:2432 ERROR: status = -22 [ 858.928698][T18947] (syz.2.5467,18947,1):ocfs2_mount_volume:1764 ERROR: status = -22 [ 858.970046][T18964] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 859.051460][T18947] (syz.2.5467,18947,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 859.687645][T18980] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 859.768486][T18980] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 859.828698][T18980] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 859.881639][T18980] UDF-fs: Scanning with blocksize 512 failed [ 859.936520][T18980] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 860.028432][T18980] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 860.180402][T18988] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 860.294149][T18988] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 860.371268][T18988] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 860.423695][T18988] UDF-fs: Scanning with blocksize 512 failed [ 860.462005][T18988] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 860.533540][T18988] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 861.510430][T18986] JBD2: Ignoring recovery information on journal [ 861.734322][T18986] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 862.143605][ T5717] ocfs2: Unmounting device (7,0) on (node local) [ 862.517560][T18996] set_capacity_and_notify: 9 callbacks suppressed [ 862.517589][T18996] loop5: detected capacity change from 0 to 32768 [ 862.595060][T18996] XFS (loop5): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 862.778539][T18992] loop1: detected capacity change from 0 to 65536 [ 862.852983][T18996] XFS (loop5): Ending clean mount [ 863.006998][T18999] loop2: detected capacity change from 0 to 32768 [ 863.058925][ T5731] XFS (loop5): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 863.132445][T18999] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 863.391696][T18999] XFS (loop2): Ending clean mount [ 863.485647][T18994] loop3: detected capacity change from 0 to 65536 [ 863.543348][T18994] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel. [ 863.557720][T19020] loop1: detected capacity change from 0 to 8192 [ 863.659486][T19020] loop1: p1 p2 p3 [ 863.709415][ T5719] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 863.873589][ T4991] loop1: p1 p2 p3 [ 864.769058][ T6127] udevd[6127]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 864.779647][ T5970] udevd[5970]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 864.783957][ T5686] udevd[5686]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 864.890323][T19029] loop3: detected capacity change from 0 to 16384 [ 864.933554][T19029] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 864.962284][T19029] UDF-fs: Scanning with blocksize 512 failed [ 864.991098][T19029] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 865.021710][ T5686] udevd[5686]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 865.023675][ T6127] udevd[6127]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 865.050162][ T5970] udevd[5970]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 865.071731][T19029] UDF-fs: Scanning with blocksize 1024 failed [ 865.122855][T19029] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 865.167856][T19029] UDF-fs: Scanning with blocksize 2048 failed [ 865.205624][T19029] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 865.320741][T19022] loop4: detected capacity change from 0 to 32768 [ 865.398727][T19022] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 865.562024][T19045] loop3: detected capacity change from 0 to 2048 [ 865.638022][T19022] XFS (loop4): Ending clean mount [ 865.834961][ T5729] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 865.863214][T19047] loop3: detected capacity change from 0 to 4096 [ 865.926305][T19047] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 865.983105][T19047] UDF-fs: Scanning with blocksize 512 failed [ 866.042083][T19031] loop5: detected capacity change from 0 to 32768 [ 866.072094][T19047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 866.151373][T19031] XFS (loop5): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 866.405851][T19033] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 866.460421][T19031] XFS (loop5): Ending clean mount [ 866.687404][T19033] XFS (loop1): Ending clean mount [ 866.893222][ T5731] XFS (loop5): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 866.968207][ T5718] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 868.428812][T19079] set_capacity_and_notify: 2 callbacks suppressed [ 868.428841][T19079] loop2: detected capacity change from 0 to 512 [ 868.478844][T19079] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 868.504884][T19079] UDF-fs: Scanning with blocksize 512 failed [ 868.536508][T19079] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 868.560322][T19079] UDF-fs: Scanning with blocksize 1024 failed [ 868.588230][T19079] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 868.611807][T19079] UDF-fs: Scanning with blocksize 2048 failed [ 868.641312][T19079] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 868.678345][T19079] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 869.506132][T19073] loop3: detected capacity change from 0 to 65536 [ 869.799272][T19086] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 869.902283][T19088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 870.587311][T19092] loop3: detected capacity change from 0 to 8192 [ 870.950926][T19094] block nbd0: NBD_DISCONNECT [ 871.291454][T19098] netlink: 276 bytes leftover after parsing attributes in process `syz.0.5518'. [ 871.676564][T19104] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 871.922669][T19100] loop1: detected capacity change from 0 to 16384 [ 871.952880][T19100] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 871.992456][T19100] UDF-fs: Scanning with blocksize 512 failed [ 872.022581][T19100] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 872.051889][T19100] UDF-fs: Scanning with blocksize 1024 failed [ 872.097601][T19100] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 872.146366][T19100] UDF-fs: Scanning with blocksize 2048 failed [ 872.195996][T19100] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 872.247592][T19112] loop4: detected capacity change from 0 to 2048 [ 872.399402][T19112] loop4: p2 p3 p7 [ 872.646598][T19122] loop1: detected capacity change from 0 to 256 [ 872.696932][T19122] exfat: Deprecated parameter 'utf8' [ 872.767438][T19122] exfat: Deprecated parameter 'utf8' [ 872.910424][T19122] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 873.008109][T19128] bad cache= option: no%e [ 873.008109][T19128] [ 873.062981][T19128] CIFS: VFS: bad cache= option: no%e [ 873.080106][T19132] loop0: detected capacity change from 0 to 1024 [ 873.134634][T19132] EXT4-fs: inline encryption not supported [ 873.169977][T19122] exFAT-fs (loop1): error, in sector 160, dentry 12 should be unused, but 0x85 [ 873.211644][T19132] EXT4-fs (loop0): orphan cleanup on readonly fs [ 873.357313][T19132] EXT4-fs (loop0): 1 truncate cleaned up [ 873.409445][T19132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 873.628118][T19148] netlink: 'syz.5.5543': attribute type 10 has an invalid length. [ 873.666592][T19148] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5543'. [ 873.702705][T19148] dummy0: entered promiscuous mode [ 873.712515][ T6127] udevd[6127]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 873.720306][T19148] dummy0: entered allmulticast mode [ 873.745098][T19148] bridge0: port 3(dummy0) entered blocking state [ 873.784793][ T5618] udevd[5618]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 873.800685][ T5717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.801126][ T5617] udevd[5617]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 873.823777][T19148] bridge0: port 3(dummy0) entered disabled state [ 873.909959][T19148] bridge0: port 3(dummy0) entered blocking state [ 873.919095][T19148] bridge0: port 3(dummy0) entered forwarding state [ 874.156406][T19158] ip6t_srh: unknown srh invflags 7F00 [ 874.447870][T19169] netlink: 'syz.0.5553': attribute type 10 has an invalid length. [ 874.642672][T19169] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 874.680617][T19169] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 875.433429][T19211] loop2: detected capacity change from 0 to 256 [ 875.830204][T19219] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5579'. [ 875.877224][T19219] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5579'. [ 875.881746][T19222] loop5: detected capacity change from 0 to 512 [ 875.934852][T19222] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 876.689357][T19247] netlink: 'syz.5.5592': attribute type 12 has an invalid length. [ 877.057791][T19259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5597'. [ 877.281787][T19265] autofs4:pid:19265:validate_dev_ioctl: invalid path supplied for cmd(0xc0189374) [ 877.471627][T19226] loop3: detected capacity change from 0 to 32768 [ 877.543387][T19226] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 877.560616][T19276] netlink: 4975 bytes leftover after parsing attributes in process `syz.2.5605'. [ 877.608876][T19276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 877.641785][T19281] Cannot find del_set index 1 as target [ 877.717427][T19226] XFS (loop3): Ending clean mount [ 877.967527][ T5724] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 878.316675][T19304] binder: 19303:19304 ioctl c018620c 200000000100 returned -22 [ 878.483338][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 878.489773][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.632190][T19310] loop4: detected capacity change from 0 to 8 [ 878.735016][T19310] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 878.742330][T19314] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 879.474816][ T5023] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 879.674720][ T5023] usb 4-1: unable to get BOS descriptor or descriptor too short [ 879.709806][ T5023] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 879.743292][ T5023] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 879.787802][ T5023] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 879.811457][ T5023] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 879.829392][ T5023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.871950][ T5023] usb 4-1: Product: syz [ 879.892341][ T5023] usb 4-1: Manufacturer: syz [ 879.921358][ T5023] usb 4-1: SerialNumber: syz [ 880.014328][T19353] loop1: detected capacity change from 0 to 64 [ 880.248283][T19355] netlink: 'syz.5.5641': attribute type 4 has an invalid length. [ 880.432331][ T5023] usb 4-1: USB disconnect, device number 45 [ 880.653068][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 880.894249][T19296] loop2: detected capacity change from 0 to 65536 [ 880.950450][T19296] XFS (loop2): Mounting V5 Filesystem 96fa0d02-eac2-4cc4-980a-feab0601d24f [ 881.115517][T19296] XFS (loop2): Ending clean mount [ 881.203833][T19384] loop4: detected capacity change from 0 to 1024 [ 881.381498][ T5719] XFS (loop2): Unmounting Filesystem 96fa0d02-eac2-4cc4-980a-feab0601d24f [ 881.644426][T19397] netlink: 'syz.5.5658': attribute type 10 has an invalid length. [ 881.785739][T19397] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 881.881081][T19397] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 882.863809][T19428] loop1: detected capacity change from 0 to 1024 [ 882.870600][T19430] loop2: detected capacity change from 0 to 1024 [ 882.904200][T19428] EXT4-fs: inline encryption not supported [ 882.920171][T19434] netlink: 204476 bytes leftover after parsing attributes in process `syz.0.5673'. [ 882.965347][T19428] EXT4-fs (loop1): orphan cleanup on readonly fs [ 883.030533][T19428] EXT4-fs (loop1): 1 truncate cleaned up [ 883.049817][T19437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 883.121792][T19428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 883.203634][T19439] netlink: 'syz.4.5677': attribute type 10 has an invalid length. [ 883.302820][T19439] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 883.347555][T19439] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 883.414253][ T5718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.699624][T19416] loop5: detected capacity change from 0 to 32768 [ 883.742619][T19455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5685'. [ 883.784935][T19416] JBD2: Ignoring recovery information on journal [ 884.010813][T19416] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 884.146297][T19466] loop3: detected capacity change from 0 to 256 [ 884.195563][T19466] exfat: Deprecated parameter 'utf8' [ 884.226846][T19466] exfat: Deprecated parameter 'utf8' [ 884.276145][T19468] loop4: detected capacity change from 0 to 256 [ 884.326464][T19466] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 884.447302][T19468] FAT-fs (loop4): Directory bread(block 64) failed [ 884.507631][T19468] FAT-fs (loop4): Directory bread(block 65) failed [ 884.540838][T19466] exFAT-fs (loop3): error, in sector 160, dentry 12 should be unused, but 0x85 [ 884.542008][T19468] FAT-fs (loop4): Directory bread(block 66) failed [ 884.599679][T19468] FAT-fs (loop4): Directory bread(block 67) failed [ 884.622698][T19468] FAT-fs (loop4): Directory bread(block 68) failed [ 884.631342][T19468] FAT-fs (loop4): Directory bread(block 69) failed [ 884.643440][ T5731] ocfs2: Unmounting device (7,5) on (node local) [ 884.657272][T19468] FAT-fs (loop4): Directory bread(block 70) failed [ 884.693619][T19468] FAT-fs (loop4): Directory bread(block 71) failed [ 884.736236][T19468] FAT-fs (loop4): Directory bread(block 72) failed [ 884.780290][T19468] FAT-fs (loop4): Directory bread(block 73) failed [ 885.133086][T19480] SET target dimension over the limit! [ 885.407302][ T5653] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 885.600164][ T5653] usb 2-1: Using ep0 maxpacket: 16 [ 885.648114][ T5653] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 885.682365][ T5653] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 885.711180][ T5653] usb 2-1: Product: syz [ 885.724503][ T5653] usb 2-1: Manufacturer: syz [ 885.741271][ T5653] usb 2-1: SerialNumber: syz [ 885.756646][ T5653] usb 2-1: config 0 descriptor?? [ 885.895978][T19502] : entered promiscuous mode [ 886.007467][ T5653] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 886.135623][T19516] netlink: 'syz.2.5713': attribute type 10 has an invalid length. [ 886.205679][T19516] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 886.222745][ T5653] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 886.225337][T19516] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 886.256398][ T5653] peak_usb 2-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 886.550734][ T5653] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 886.605046][T19527] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5720'. [ 886.613510][ T5653] usb 2-1: USB disconnect, device number 33 [ 886.895503][T19534] loop3: detected capacity change from 0 to 64 [ 887.079093][T19542] loop0: detected capacity change from 0 to 64 [ 887.391221][T19552] netlink: 'syz.3.5732': attribute type 10 has an invalid length. [ 887.483042][T19552] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 887.516043][T19552] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 887.640634][T19562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5737'. [ 887.713709][T19562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5737'. [ 887.867316][T19571] ipt_REJECT: ECHOREPLY no longer supported. [ 887.875358][T19568] loop5: detected capacity change from 0 to 256 [ 887.952145][T19562] bond1: Removing last arp target with arp_interval on [ 887.963720][T19568] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 887.997909][T19573] netlink: 'syz.0.5741': attribute type 10 has an invalid length. [ 888.037131][T19562] bond1: entered allmulticast mode [ 888.050754][T19573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5741'. [ 888.087921][T19562] 8021q: adding VLAN 0 to HW filter on device bond1 [ 888.104156][T19573] dummy0: entered promiscuous mode [ 888.136569][T19573] dummy0: entered allmulticast mode [ 888.159813][T19573] bridge0: port 3(dummy0) entered blocking state [ 888.198115][T19573] bridge0: port 3(dummy0) entered disabled state [ 888.260923][T19573] bridge0: port 3(dummy0) entered blocking state [ 888.267552][T19573] bridge0: port 3(dummy0) entered forwarding state [ 888.621741][ T5653] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 888.716345][T19594] : entered promiscuous mode [ 888.838144][ T5653] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 888.866232][ T5653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.902083][T19600] loop0: detected capacity change from 0 to 1024 [ 888.912731][ T5653] usb 3-1: config 0 descriptor?? [ 888.942428][ T5858] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 888.943009][ T5023] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 889.069970][T19604] netlink: 'syz.1.5756': attribute type 4 has an invalid length. [ 889.115734][ T5858] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 889.124406][ T5858] usb 6-1: config 0 has no interface number 0 [ 889.125318][ T5023] usb 5-1: Using ep0 maxpacket: 16 [ 889.130805][ T5858] usb 6-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 889.159832][ T5653] ath6kl: Failed to submit usb control message: -71 [ 889.167197][ T5653] ath6kl: unable to send the bmi data to the device: -71 [ 889.176079][ T5858] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 889.197447][ T5653] ath6kl: Unable to send get target info: -71 [ 889.205583][ T5858] usb 6-1: config 0 interface 200 has no altsetting 0 [ 889.217352][ T5023] usb 5-1: config 5 has an invalid interface number: 168 but max is 0 [ 889.219941][ T5653] ath6kl: Failed to init ath6kl core: -71 [ 889.239361][ T5858] usb 6-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 889.261145][ T5653] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 889.268793][ T5023] usb 5-1: config 5 has no interface number 0 [ 889.273216][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.289617][T19608] netlink: 'syz.0.5758': attribute type 1 has an invalid length. [ 889.298116][ T5023] usb 5-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 889.301120][ T5858] usb 6-1: Product: syz [ 889.339693][ T5653] usb 3-1: USB disconnect, device number 43 [ 889.354280][ T5858] usb 6-1: Manufacturer: syz [ 889.357409][ T5023] usb 5-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 889.365499][ T5858] usb 6-1: SerialNumber: syz [ 889.386654][ T5858] usb 6-1: config 0 descriptor?? [ 889.435618][ T5023] usb 5-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0x23, changing to 0x3 [ 889.477699][ T5023] usb 5-1: config 5 interface 168 altsetting 7 endpoint 0x3 has invalid maxpacket 1280, setting to 1024 [ 889.534238][ T5023] usb 5-1: config 5 interface 168 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1024 [ 889.576797][ T5023] usb 5-1: config 5 interface 168 has no altsetting 0 [ 889.613141][ T5023] usb 5-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 889.654802][ T5023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.679494][ T5858] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.200/input/input58 [ 889.686579][ T5023] usb 5-1: Product: syz [ 889.725067][ T5023] usb 5-1: Manufacturer: syz [ 889.740066][ T5023] usb 5-1: SerialNumber: syz [ 889.761319][ T5858] usb 6-1: USB disconnect, device number 33 [ 889.771758][T19595] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 889.796967][T19595] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 889.873673][T19614] loop0: detected capacity change from 0 to 4096 [ 889.989886][T19619] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 890.002883][T19618] loop3: detected capacity change from 0 to 64 [ 890.081785][ C0] usb 5-1: NFC: Urb failure (status -71) [ 890.090738][ C0] usb 5-1: NFC: Urb failure (status -71) [ 890.109344][ T5023] usb 5-1: NFC: Unable to get FW version [ 890.126047][ T5023] pn533_usb 5-1:5.168: probe with driver pn533_usb failed with error -71 [ 890.209004][ T5023] usb 5-1: USB disconnect, device number 30 [ 890.864410][T19629] loop5: detected capacity change from 0 to 2048 [ 890.914759][T19629] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 890.969578][T19629] syz.5.5768: attempt to access beyond end of device [ 890.969578][T19629] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 890.973133][T19636] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 891.041175][T19640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5772'. [ 891.075158][T19632] loop1: detected capacity change from 0 to 2048 [ 891.090709][T19640] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5772'. [ 891.096429][T19629] syz.5.5768: attempt to access beyond end of device [ 891.096429][T19629] loop5: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 891.121335][T19638] loop3: detected capacity change from 0 to 2048 [ 891.125541][T19629] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=0) [ 891.142441][T19632] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 891.155938][T19640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 891.208691][T19641] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 891.389713][ T30] audit: type=1800 audit(2000000110.602:14): pid=19632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5770" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 891.799248][T19651] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5776'. [ 892.230785][T19659] nvme_fabrics: missing parameter 'transport=%s' [ 892.282008][T19659] nvme_fabrics: missing parameter 'nqn=%s' [ 892.458186][T19676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5789'. [ 892.488330][T19676] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5789'. [ 892.833377][T19684] loop5: detected capacity change from 0 to 2048 [ 892.929648][T19691] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 894.277410][ T5653] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 894.409937][T19742] loop0: detected capacity change from 0 to 256 [ 894.433177][T19742] exfat: Deprecated parameter 'namecase' [ 894.469299][ T5653] usb 4-1: Using ep0 maxpacket: 16 [ 894.482465][T19745] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5821'. [ 894.518730][T19742] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf3765126, utbl_chksum : 0xe619d30d) [ 894.522905][ T5653] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 894.589636][ T5653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.624700][ T5653] usb 4-1: Product: syz [ 894.640678][ T5653] usb 4-1: Manufacturer: syz [ 894.659680][ T5653] usb 4-1: SerialNumber: syz [ 894.681655][T19750] PM: Enabling pm_trace changes system date and time during resume. [ 894.681655][T19750] PM: Correct system time has to be restored manually after resume. [ 894.715589][ T5653] usb 4-1: config 0 descriptor?? [ 894.730699][ T5653] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 895.095057][T19757] loop0: detected capacity change from 0 to 4096 [ 895.184423][ T5653] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 895.201132][T19765] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 895.259112][ T5653] usb 4-1: USB disconnect, device number 46 [ 895.315143][T19757] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 895.431344][T19757] Remounting filesystem read-only [ 895.957112][T19786] loop5: detected capacity change from 0 to 1024 [ 896.099001][T19783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 896.201276][T19794] ieee802154 phy0 wpan0: encryption failed: -22 [ 896.912782][T19819] loop3: detected capacity change from 0 to 256 [ 897.023713][T19819] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 897.151449][T19826] loop5: detected capacity change from 0 to 64 [ 897.968763][T19854] loop2: detected capacity change from 0 to 1024 [ 898.068801][ T987] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 898.077926][T19854] hfsplus: catalog record size mismatch (type 1, got 62, expected 88) [ 898.137994][ T5023] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 898.260676][ T987] usb 1-1: Using ep0 maxpacket: 16 [ 898.287188][ T987] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 898.310215][ T987] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 898.327902][ T5023] usb 6-1: Using ep0 maxpacket: 32 [ 898.357104][ T5023] usb 6-1: unable to get BOS descriptor or descriptor too short [ 898.365845][ T987] usb 1-1: Product: syz [ 898.377555][ T987] usb 1-1: Manufacturer: syz [ 898.391321][ T5023] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 898.402980][ T987] usb 1-1: SerialNumber: syz [ 898.413221][ T5023] usb 6-1: config 7 has no interface number 0 [ 898.428303][ T987] usb 1-1: config 0 descriptor?? [ 898.437596][ T5023] usb 6-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 898.461638][ T5023] usb 6-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 898.503718][ T5023] usb 6-1: config 7 interface 187 has no altsetting 0 [ 898.543348][ T5023] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 898.578063][ T5023] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.628853][ T5023] usb 6-1: Product: syz [ 898.652027][ T5023] usb 6-1: Manufacturer: syz [ 898.666089][ T5023] usb 6-1: SerialNumber: syz [ 898.681966][ T987] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 898.781577][T19869] loop2: detected capacity change from 0 to 256 [ 898.890746][T19869] FAT-fs (loop2): Directory bread(block 64) failed [ 898.915156][ T987] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 898.928944][T19869] FAT-fs (loop2): Directory bread(block 65) failed [ 898.950053][ T987] peak_usb 1-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 898.963067][T19869] FAT-fs (loop2): Directory bread(block 66) failed [ 898.992075][T19869] FAT-fs (loop2): Directory bread(block 67) failed [ 899.024047][T19869] FAT-fs (loop2): Directory bread(block 68) failed [ 899.040604][ T5023] usb 6-1: Unknown endpoint type found, address 0x07 [ 899.051842][T19869] FAT-fs (loop2): Directory bread(block 69) failed [ 899.063127][ T5023] usb 6-1: Not enough endpoints found in device, aborting! [ 899.074067][T19869] FAT-fs (loop2): Directory bread(block 70) failed [ 899.109738][T19869] FAT-fs (loop2): Directory bread(block 71) failed [ 899.127499][T19869] FAT-fs (loop2): Directory bread(block 72) failed [ 899.155410][T19869] FAT-fs (loop2): Directory bread(block 73) failed [ 899.213968][ T987] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 899.276121][ T5653] usb 6-1: USB disconnect, device number 34 [ 899.280060][ T987] usb 1-1: USB disconnect, device number 45 [ 899.321335][T19877] loop3: detected capacity change from 0 to 512 [ 899.363288][T19877] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 899.413273][T19877] EXT4-fs (loop3): orphan cleanup on readonly fs [ 899.469454][T19877] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.5884: inode #15: comm syz.3.5884: iget: illegal inode # [ 899.548593][T19883] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5887'. [ 899.550952][T19877] loop3: lost filesystem error report for type 5 error -117 [ 899.596589][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 899.610551][ C0] EXT4-fs (loop3): initial error at time 2000000118: ext4_orphan_get:1397 [ 899.619140][ C0] EXT4-fs (loop3): last error at time 2000000118: ext4_orphan_get:1397 [ 899.646380][T19877] EXT4-fs (loop3): Remounting filesystem read-only [ 899.687081][T19877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 899.786774][T19877] process 'syz.3.5884' launched './file2' with NULL argv: empty string added [ 899.917327][T19889] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5890'. [ 899.955889][T19889] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5890'. [ 899.957103][T19892] loop0: detected capacity change from 0 to 16 [ 900.003205][T19892] erofs (device loop0): mounted with root inode @ nid 36. [ 900.036749][ T5724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.202278][T19892] erofs (device loop0): readahead error at folio 2 @ nid 89 [ 900.312508][T19892] erofs (device loop0): too much compressed data @ la 512 of nid 89 [ 900.351672][T19892] erofs (device loop0): readahead error at folio 1 @ nid 89 [ 900.405367][T19903] loop3: detected capacity change from 0 to 256 [ 900.426114][T19892] erofs (device loop0): bogus lookback distance 1 @ lcn 0 of nid 89 [ 900.475631][T19892] erofs (device loop0): readahead error at folio 0 @ nid 89 [ 900.532235][T19892] syz.0.5891: attempt to access beyond end of device [ 900.532235][T19892] loop0: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 900.592376][T19908] usb usb8: usbfs: process 19908 (syz.5.5898) did not claim interface 0 before use [ 900.691969][T19892] erofs (device loop0): bogus lookback distance 1 @ lcn 0 of nid 89 [ 900.740064][T19892] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 3584 [ 900.802989][T19892] erofs (device loop0): read error -117 @ 0 of nid 89 [ 900.852053][ T30] audit: type=1800 audit(2000000119.473:15): pid=19892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5891" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 901.421540][T19932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5910'. [ 901.834271][T19950] netlink: 'syz.1.5914': attribute type 10 has an invalid length. [ 901.925399][T19950] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 901.966607][T19950] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 902.597481][T19978] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.5933'. [ 903.035877][T19992] loop4: detected capacity change from 0 to 2048 [ 903.092939][T19995] loop5: detected capacity change from 0 to 512 [ 903.106993][T19992] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 903.133173][T19995] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 903.144417][T19995] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 903.184146][T19995] EXT4-fs (loop5): orphan cleanup on readonly fs [ 903.218328][ T30] audit: type=1800 audit(2000000121.681:16): pid=19992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5938" name="file1" dev="loop4" ino=1367 res=0 errno=0 [ 903.230381][T19995] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 903.265156][T19995] EXT4-fs warning (device loop5): ext4_enable_quotas:7265: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 903.280527][T19995] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 903.338440][T19995] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.5941: bg 0: block 40: padding at end of block bitmap is not set [ 903.372878][T19995] loop5: lost filesystem error report for type 5 error -117 [ 903.379073][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 903.392926][ C1] EXT4-fs (loop5): initial error at time 2000000121: ext4_validate_block_bitmap:440 [ 903.402440][ C1] EXT4-fs (loop5): last error at time 2000000121: ext4_validate_block_bitmap:440 [ 903.434694][T19995] EXT4-fs (loop5): Remounting filesystem read-only [ 903.490134][T20007] loop0: detected capacity change from 0 to 64 [ 903.500495][T19995] EXT4-fs (loop5): 1 truncate cleaned up [ 903.532699][T19995] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 903.619356][T20011] warning: `syz.4.5947' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 903.815720][ T5731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.440837][T20037] loop3: detected capacity change from 0 to 64 [ 904.461821][T20030] vti0: entered promiscuous mode [ 904.463279][T20034] loop4: detected capacity change from 0 to 1024 [ 904.495223][T20030] vti0: entered allmulticast mode [ 905.248904][T20054] loop4: detected capacity change from 0 to 4096 [ 905.343048][T20066] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 905.424257][T20054] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 905.480020][T20054] Remounting filesystem read-only [ 906.081392][T20086] loop0: detected capacity change from 0 to 256 [ 906.130335][T20083] loop2: detected capacity change from 0 to 2048 [ 906.141230][ T30] audit: type=1326 audit(2000000124.423:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20088 comm="syz.4.5986" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624499ce59 code=0x7ffc0000 [ 906.147939][T20086] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 906.197154][T20083] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 906.253633][ T30] audit: type=1326 audit(2000000124.423:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20088 comm="syz.4.5986" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624499ce59 code=0x7ffc0000 [ 906.298300][T20083] UDF-fs: unknown compression code (0) [ 906.321679][T20093] loop5: detected capacity change from 0 to 512 [ 906.346820][ T30] audit: type=1326 audit(2000000124.461:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20088 comm="syz.4.5986" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f624499ce59 code=0x7ffc0000 [ 906.351067][ T987] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 906.482186][T20093] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 906.486122][ T30] audit: type=1326 audit(2000000124.461:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20088 comm="syz.4.5986" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624499ce59 code=0x7ffc0000 [ 906.542300][ T30] audit: type=1326 audit(2000000124.461:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20088 comm="syz.4.5986" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624499ce59 code=0x7ffc0000 [ 906.597311][T20093] ext4 filesystem being mounted at /1003/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 906.644672][T20098] nbd: must specify a device to reconfigure [ 906.681514][ T987] usb 2-1: Using ep0 maxpacket: 8 [ 906.707572][T20093] fscrypt (loop5, inode 15): Error -61 getting encryption context [ 906.717482][ T987] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 906.752077][ T987] usb 2-1: config 0 has no interface number 0 [ 906.779520][ T987] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 906.846188][ T987] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 906.907614][ T987] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 906.949909][ T987] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 906.967919][ T5731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.000772][ T987] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 907.027516][ T987] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 907.041367][ T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.102205][ T987] usb 2-1: config 0 descriptor?? [ 907.185984][ T987] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 907.266313][T20110] bond1: option arp_validate: invalid value (2048) [ 907.273176][ T5023] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 907.325351][T20110] bond1 (unregistering): Released all slaves [ 907.348459][T20114] loop2: detected capacity change from 0 to 4096 [ 907.387232][ T5836] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 907.415215][T20087] ldusb 2-1:0.55: Couldn't submit interrupt_in_urb -90 [ 907.449159][ T5653] usb 2-1: USB disconnect, device number 34 [ 907.461555][ T5023] usb 4-1: Using ep0 maxpacket: 16 [ 907.474017][ T5023] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 907.483495][ T5023] usb 4-1: config 0 has no interface number 0 [ 907.496879][ T5653] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 907.507628][ T5023] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 907.548222][ T5023] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 907.586060][ T5836] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 907.611691][ T5023] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 907.625792][ T5836] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 907.644875][ T5023] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 907.667750][ T5836] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 907.684856][ T5023] usb 4-1: Product: syz [ 907.706962][ T5023] usb 4-1: Manufacturer: syz [ 907.713366][ T5836] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 907.725111][ T5023] usb 4-1: SerialNumber: syz [ 907.732162][ T5836] usb 1-1: config 1 has no interface number 0 [ 907.748157][ T5836] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 907.758663][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.800324][ T5023] usb 4-1: config 0 descriptor?? [ 907.828847][ T5023] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 907.839605][ T5836] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 907.865131][ T5023] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 907.902363][ T5023] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 907.926994][ T5023] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 907.969814][ T5023] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 908.016429][ T5023] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 908.062622][ T5023] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 908.080130][ T5836] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 908.093015][ T5836] snd_usb_pod 1-1:1.1: invalid control EP [ 908.103390][ T5023] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 908.123765][ T5836] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 908.132310][ T5836] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 908.148615][ T5023] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 908.176257][ T5836] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 908.197372][ T5023] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 908.255398][ T5023] usb 4-1: USB disconnect, device number 47 [ 908.282800][ T5023] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 908.295045][T20129] loop2: detected capacity change from 0 to 1024 [ 908.361196][T20129] EXT4-fs: Ignoring removed bh option [ 908.395652][ T5023] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 908.451635][T20129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 908.470243][ T5836] usb 1-1: USB disconnect, device number 46 [ 908.523747][ T5023] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 908.627889][ T5023] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 908.642034][T20129] EXT4-fs error (device loop2): ext4_get_first_dir_block:3548: inode #11: comm syz.2.6004: directory missing '.' [ 908.668963][ T5023] keyspan 4-1:0.107: device disconnected [ 908.714538][T20139] loop5: detected capacity change from 0 to 1024 [ 908.726878][T20129] EXT4-fs (loop2): Remounting filesystem read-only [ 908.741670][T20139] EXT4-fs: Ignoring removed orlov option [ 908.814978][T20139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 909.001473][ T5731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.021671][ T5719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.031454][T20149] xfrm0: entered promiscuous mode [ 909.041767][T20149] xfrm0: entered allmulticast mode [ 909.055754][T20147] loop4: detected capacity change from 0 to 16 [ 909.159496][T20147] erofs (device loop4): mounted with root inode @ nid 36. [ 909.229086][T20147] erofs (device loop4): readahead error at folio 2 @ nid 89 [ 909.269662][T20147] erofs (device loop4): too much compressed data @ la 512 of nid 89 [ 909.295297][T20147] erofs (device loop4): readahead error at folio 1 @ nid 89 [ 909.331728][T20147] erofs (device loop4): bogus lookback distance 1 @ lcn 0 of nid 89 [ 909.361641][T20147] erofs (device loop4): readahead error at folio 0 @ nid 89 [ 909.390637][T20147] syz.4.6012: attempt to access beyond end of device [ 909.390637][T20147] loop4: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 909.447622][T20147] erofs (device loop4): bogus lookback distance 1 @ lcn 0 of nid 89 [ 909.473253][T20147] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 3584 [ 909.486209][T20147] erofs (device loop4): read error -117 @ 0 of nid 89 [ 909.508026][ T30] audit: type=1800 audit(2000000127.558:22): pid=20147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6012" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 909.770206][ T5023] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 909.965396][ T5023] usb 4-1: Using ep0 maxpacket: 8 [ 909.998242][ T5023] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 910.034448][ T5023] usb 4-1: config 0 has no interface number 1 [ 910.054378][ T30] audit: type=1326 audit(2000000128.082:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20174 comm="syz.1.6023" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6914f9ce59 code=0x7ffc0000 [ 910.073362][T20177] set_capacity_and_notify: 1 callbacks suppressed [ 910.073391][T20177] loop1: detected capacity change from 0 to 8 [ 910.086812][ T5023] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 910.142552][ T5023] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 910.152485][T20177] squashfs image failed sanity check [ 910.176357][ T30] audit: type=1326 audit(2000000128.082:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20174 comm="syz.1.6023" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6914f9ce59 code=0x7ffc0000 [ 910.199173][ T5023] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 910.269160][ T5023] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 910.290242][ T30] audit: type=1326 audit(2000000128.082:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20174 comm="syz.1.6023" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6914f9ce59 code=0x7ffc0000 [ 910.321828][ T5023] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 910.382083][ T5023] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 910.435982][ T5023] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 910.473867][ T5023] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 910.538984][ T5023] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 910.565128][ T5023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.596020][ T5023] usb 4-1: Product: syz [ 910.618272][ T5023] usb 4-1: Manufacturer: syz [ 910.632995][ T30] audit: type=1326 audit(2000000128.082:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20174 comm="syz.1.6023" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6914f9ce59 code=0x7ffc0000 [ 910.638483][ T5023] usb 4-1: SerialNumber: syz [ 910.748155][ T30] audit: type=1326 audit(2000000128.082:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20174 comm="syz.1.6023" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6914f9ce59 code=0x7ffc0000 [ 910.749640][ T5023] usb 4-1: config 0 descriptor?? [ 910.868058][T20159] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 910.875531][ T987] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 910.899215][ T5023] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 910.974967][ T5023] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 911.041045][ T987] usb 2-1: Using ep0 maxpacket: 32 [ 911.058404][ T987] usb 2-1: unable to get BOS descriptor or descriptor too short [ 911.089684][ T987] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 911.139441][ T987] usb 2-1: config 7 has no interface number 0 [ 911.176012][ T987] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 911.244923][ T987] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 911.262912][ T5023] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 911.307089][ T987] usb 2-1: config 7 interface 187 has no altsetting 0 [ 911.330257][ T5023] usb 4-1: USB disconnect, device number 48 [ 911.336389][T20206] openvswitch: netlink: IPv4 tunnel dst address is zero [ 911.351399][T20199] bond1 (unregistering): Released all slaves [ 911.359074][ T987] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 911.395637][ T987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.433263][ T987] usb 2-1: Product: syz [ 911.453981][ T987] usb 2-1: Manufacturer: syz [ 911.483542][ T987] usb 2-1: SerialNumber: syz [ 911.566270][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 911.785284][ T987] usb 2-1: Unknown endpoint type found, address 0x07 [ 911.806046][ T987] usb 2-1: Not enough endpoints found in device, aborting! [ 912.081054][ T5023] usb 2-1: USB disconnect, device number 35 [ 912.207977][T20227] loop2: detected capacity change from 0 to 64 [ 912.450076][T20236] loop0: detected capacity change from 0 to 512 [ 912.474356][T20236] EXT4-fs: Ignoring removed orlov option [ 912.530448][T20236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 912.547979][T20236] ext4 filesystem being mounted at /1009/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 912.784056][T20236] EXT4-fs error (device loop0): ext4_get_verity_descriptor_location:337: inode #15: comm syz.0.6054: verity file corrupted; can't find descriptor [ 912.821326][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 912.821353][ T30] audit: type=1326 audit(2000000130.674:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20246 comm="syz.5.6058" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122c59ce59 code=0x7ffc0000 [ 912.877738][T20236] EXT4-fs (loop0): Remounting filesystem read-only [ 912.899928][T20236] fs-verity (loop0, inode 15): Error -117 getting verity descriptor size [ 913.011860][ T30] audit: type=1326 audit(2000000130.674:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20246 comm="syz.5.6058" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122c59ce59 code=0x7ffc0000 [ 913.107293][T20250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6059'. [ 913.156838][ T30] audit: type=1326 audit(2000000130.712:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20246 comm="syz.5.6058" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122c59ce59 code=0x7ffc0000 [ 913.279927][ T5717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.300256][ T30] audit: type=1326 audit(2000000130.712:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20246 comm="syz.5.6058" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122c59ce59 code=0x7ffc0000 [ 913.446969][ T30] audit: type=1326 audit(2000000130.712:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20246 comm="syz.5.6058" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f122c59ce59 code=0x7ffc0000 [ 913.603881][ T30] audit: type=1326 audit(2000000130.712:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20246 comm="syz.5.6058" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122c59ce59 code=0x7ffc0000 [ 913.708884][T20271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6065'. [ 913.724158][ T30] audit: type=1326 audit(2000000130.712:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20246 comm="syz.5.6058" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f122c59ce59 code=0x7ffc0000 [ 913.766488][T20271] netlink: 15 bytes leftover after parsing attributes in process `syz.0.6065'. [ 913.792432][ T30] audit: type=1326 audit(2000000130.712:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20246 comm="syz.5.6058" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f122c59ce59 code=0x7ffc0000 [ 913.988714][T20279] loop3: detected capacity change from 0 to 64 [ 914.052584][T20279] hfs: request for non-existent node 327680 in B*Tree [ 914.091416][T20279] hfs: request for non-existent node 327680 in B*Tree [ 914.140364][ T987] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 914.332358][ T987] usb 5-1: Using ep0 maxpacket: 32 [ 914.352648][ T987] usb 5-1: unable to get BOS descriptor or descriptor too short [ 914.393383][ T987] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 914.441845][ T987] usb 5-1: config 7 has no interface number 0 [ 914.469574][ T987] usb 5-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 914.509806][ T987] usb 5-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 914.524257][T20293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6081'. [ 914.568902][ T987] usb 5-1: config 7 interface 187 has no altsetting 0 [ 914.585289][ T987] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 914.616048][ T987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.617318][ T30] audit: type=1326 audit(2000000132.350:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20296 comm="syz.5.6083" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122c59ce59 code=0x7ffc0000 [ 914.648134][ T987] usb 5-1: Product: syz [ 914.659107][T20299] loop1: detected capacity change from 0 to 16 [ 914.668844][ T987] usb 5-1: Manufacturer: syz [ 914.682467][ T987] usb 5-1: SerialNumber: syz [ 914.711677][T20299] erofs (device loop1): mounted with root inode @ nid 36. [ 914.786076][ T30] audit: type=1326 audit(2000000132.350:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20296 comm="syz.5.6083" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122c59ce59 code=0x7ffc0000 [ 914.819382][T20299] erofs (device loop1): readahead error at folio 2 @ nid 89 [ 914.851033][T20299] erofs (device loop1): readahead error at folio 1 @ nid 89 [ 914.876847][T20299] erofs (device loop1): readahead error at folio 0 @ nid 89 [ 914.900365][T20299] erofs (device loop1): read error -117 @ 0 of nid 89 [ 915.024410][ T987] usb 5-1: Unknown endpoint type found, address 0x07 [ 915.044134][ T987] usb 5-1: Not enough endpoints found in device, aborting! [ 915.375962][ T5023] usb 5-1: USB disconnect, device number 31 [ 915.727211][T20327] loop0: detected capacity change from 0 to 2048 [ 915.788633][T20327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 915.912466][T20337] loop5: detected capacity change from 0 to 1024 [ 915.958274][T20337] hfsplus: invalid length 256 has been corrected to 255 [ 915.988874][T20337] hfsplus: invalid length 256 has been corrected to 255 [ 916.041212][T20337] hfsplus: invalid length 256 has been corrected to 255 [ 916.052454][ T5717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.156070][T20337] hfsplus: invalid length 256 has been corrected to 255 [ 916.246421][T20337] hfsplus: invalid length 256 has been corrected to 255 [ 916.371578][T20337] hfsplus: xattr search failed [ 916.421195][T20337] hfsplus: invalid length 256 has been corrected to 255 [ 916.448028][T20351] loop1: detected capacity change from 0 to 16 [ 916.480422][T20351] erofs (device loop1): mounted with root inode @ nid 36. [ 916.564382][ T12] hfsplus: invalid length 256 has been corrected to 255 [ 916.571882][T20351] erofs (device loop1): corrupted dir block 1 @ nid 36 [ 916.642889][T20359] netlink: 'syz.0.6122': attribute type 1 has an invalid length. [ 916.680105][T20359] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6122'. [ 916.762863][T20359] netlink: 658 bytes leftover after parsing attributes in process `syz.0.6122'. [ 916.830799][T20356] bond1: option lp_interval: invalid value (0) [ 916.852549][T20359] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6122'. [ 916.870291][T20356] bond1: option lp_interval: allowed values 1 - 2147483647 [ 916.902641][T20356] bond1 (unregistering): Released all slaves [ 917.082176][T20372] loop0: detected capacity change from 0 to 164 [ 917.275640][T20366] bond1: option arp_validate: invalid value (2048) [ 917.320374][T20366] bond1 (unregistering): Released all slaves [ 918.001836][T20391] loop0: detected capacity change from 0 to 1024 [ 918.027684][T20391] EXT4-fs: Ignoring removed bh option [ 918.064604][T20395] loop4: detected capacity change from 0 to 64 [ 918.111237][T20391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 918.298780][T20391] EXT4-fs error (device loop0): ext4_get_first_dir_block:3548: inode #11: comm syz.0.6128: directory missing '.' [ 918.331244][T20402] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6132'. [ 918.353334][T20391] EXT4-fs (loop0): Remounting filesystem read-only [ 918.364707][T20402] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6132'. [ 918.383493][T20383] loop2: detected capacity change from 0 to 32768 [ 918.426813][T20383] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6124 (20383) [ 918.473667][T20383] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 918.536639][T20383] BTRFS info (device loop2): using sha256 checksum algorithm [ 918.563881][ T5717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.890281][T20383] BTRFS info (device loop2): enabling ssd optimizations [ 918.921589][T20383] BTRFS info (device loop2): turning on async discard [ 918.961894][T20383] BTRFS info (device loop2): enabling free space tree [ 919.017031][T20432] Illegal XDP return value 158 on prog (id 387) dev N/A, expect packet loss! [ 919.225352][ T5719] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 919.743839][T20454] tmpfs: Bad value for 'mpol' [ 920.033313][T20460] loop2: detected capacity change from 0 to 512 [ 920.072108][T20460] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 920.127922][T20466] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6156'. [ 920.167139][T20466] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 920.188152][T20460] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #17: comm syz.2.6153: casefold flag without casefold feature [ 920.228353][T20460] loop2: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 920.230996][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 920.246774][ C0] EXT4-fs (loop2): initial error at time 2000000137: ext4_orphan_get:1397: inode 17 [ 920.254349][T20460] EXT4-fs (loop2): Remounting filesystem read-only [ 920.256298][ C0] EXT4-fs (loop2): last error at time 2000000137: ext4_orphan_get:1397: inode 17 [ 920.342408][T20460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 920.524303][ T5719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.689057][T20470] bond1: option lp_interval: invalid value (0) [ 920.741000][T20470] bond1: option lp_interval: allowed values 1 - 2147483647 [ 920.876716][T20470] bond1 (unregistering): Released all slaves [ 920.887958][T20481] netlink: 'syz.1.6163': attribute type 10 has an invalid length. [ 920.942967][T20481] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6163'. [ 921.114701][T20448] loop0: detected capacity change from 0 to 32768 [ 921.128682][ T5858] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 921.177017][T20448] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 921.248945][T20448] JBD2: Ignoring recovery information on journal [ 921.334097][ T5858] usb 3-1: Using ep0 maxpacket: 32 [ 921.389468][ T5858] usb 3-1: unable to get BOS descriptor or descriptor too short [ 921.432116][T20448] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 921.450340][ T5858] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 921.490265][ T5858] usb 3-1: config 7 has no interface number 0 [ 921.516736][ T5858] usb 3-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 921.553020][ T5858] usb 3-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 921.607491][ T5858] usb 3-1: config 7 interface 187 has no altsetting 0 [ 921.642543][ T5858] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 921.668639][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.682683][T20499] loop3: detected capacity change from 0 to 8 [ 921.698578][ T5858] usb 3-1: Product: syz [ 921.716356][ T5858] usb 3-1: Manufacturer: syz [ 921.737040][ T5858] usb 3-1: SerialNumber: syz [ 921.826440][T20499] SQUASHFS error: lzo decompression failed, data probably corrupt [ 921.891225][T20499] SQUASHFS error: Failed to read block 0x1dd: -5 [ 921.921008][ T5850] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 921.928984][T20503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6172'. [ 921.941301][T20499] SQUASHFS error: Unable to read metadata cache entry [1db] [ 921.971906][T20499] SQUASHFS error: Unable to read inode 0xa7 [ 921.984456][T20503] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6172'. [ 922.021646][ T5858] usb 3-1: Unknown endpoint type found, address 0x07 [ 922.038253][ T5858] usb 3-1: Not enough endpoints found in device, aborting! [ 922.093685][ T5717] ocfs2: Unmounting device (7,0) on (node local) [ 922.129955][ T5850] usb 2-1: Using ep0 maxpacket: 8 [ 922.153289][ T5850] usb 2-1: unable to get BOS descriptor or descriptor too short [ 922.177309][ T5850] usb 2-1: config 127 has an invalid interface number: 1 but max is 0 [ 922.220521][ T5850] usb 2-1: config 127 has no interface number 0 [ 922.232524][ T5850] usb 2-1: config 127 interface 1 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16 [ 922.270700][ T5850] usb 2-1: config 127 interface 1 has no altsetting 0 [ 922.296521][ T5850] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=df.89 [ 922.320960][ T5836] usb 3-1: USB disconnect, device number 44 [ 922.328823][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.366960][ T5850] usb 2-1: Product: syz [ 922.383094][ T5850] usb 2-1: Manufacturer: syz [ 922.387887][ T5850] usb 2-1: SerialNumber: syz [ 922.404064][T20497] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 922.490482][T20509] bond1 (unregistering): Released all slaves [ 922.659001][ T5850] redrat3 2-1:127.1: Couldn't find all endpoints [ 922.705230][ T5850] usb 2-1: USB disconnect, device number 36 [ 923.103359][T20524] QAT: Device 7 not found [ 923.454032][T20536] netlink: 'syz.4.6188': attribute type 13 has an invalid length. [ 923.574960][T20536] gretap0: refused to change device tx_queue_len [ 923.611608][T20536] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 924.094049][T20550] bond1 (unregistering): Released all slaves [ 924.156985][T20523] loop0: detected capacity change from 0 to 32768 [ 924.212476][T20523] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 924.264581][T20523] JBD2: Ignoring recovery information on journal [ 924.489661][T20523] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 924.698906][T20567] loop5: detected capacity change from 0 to 4096 [ 924.941335][T20567] NILFS error (device loop5): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=32, inode=6, rec_len=24, name_len=6 [ 925.049917][ T5717] ocfs2: Unmounting device (7,0) on (node local) [ 925.150526][ T5836] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 925.353511][ T5836] usb 5-1: config 2 has an invalid interface number: 97 but max is 0 [ 925.383329][ T5836] usb 5-1: config 2 has no interface number 0 [ 925.411405][ T5836] usb 5-1: config 2 interface 97 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 925.451410][ T5836] usb 5-1: config 2 interface 97 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 64 [ 925.483028][ T5836] usb 5-1: config 2 interface 97 has no altsetting 0 [ 925.515659][ T5836] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 925.545807][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.587164][ T5836] usb 5-1: Product: syz [ 925.598609][ T5836] usb 5-1: Manufacturer: syz [ 925.610104][ T5836] usb 5-1: SerialNumber: syz [ 925.643549][T20577] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 925.671072][T20577] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 925.877226][T20591] loop1: detected capacity change from 0 to 4096 [ 925.951590][ T5836] usb-storage 5-1:2.97: USB Mass Storage device detected [ 925.995145][ T5836] usb-storage 5-1:2.97: Quirks match for vid 04e6 pid 000b: 4 [ 926.027895][ T5836] scsi host1: usb-storage 5-1:2.97 [ 926.074244][ T5836] usb 5-1: USB disconnect, device number 32 [ 926.310778][T20606] bond2 (unregistering): Released all slaves [ 926.701798][T20613] bond1: entered promiscuous mode [ 926.746185][T20613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 926.980844][T20624] bond2: option lp_interval: invalid value (0) [ 927.001635][T20624] bond2: option lp_interval: allowed values 1 - 2147483647 [ 927.048192][T20624] bond2 (unregistering): Released all slaves [ 927.209356][ T5023] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 927.392414][ T5023] usb 4-1: Using ep0 maxpacket: 16 [ 927.427414][ T5023] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 927.449970][ T5023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.483735][ T5023] usb 4-1: Product: syz [ 927.494585][ T5023] usb 4-1: Manufacturer: syz [ 927.500871][ T5023] usb 4-1: SerialNumber: syz [ 927.517238][ T5023] usb 4-1: config 0 descriptor?? [ 927.526780][ T5023] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 927.604465][ T5933] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 927.718157][T20643] xt_addrtype: ipv6 does not support BROADCAST matching [ 927.794593][ T5933] usb 5-1: config index 0 descriptor too short (expected 86, got 68) [ 927.830367][ T5933] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 927.869213][ T5933] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 927.904680][ T5933] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 927.918081][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 927.927729][ T5933] usb 5-1: SerialNumber: syz [ 927.937502][T20620] loop1: detected capacity change from 0 to 40427 [ 927.958377][ T5933] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 927.969606][ T5023] usb 4-1: clie_3_5_startup: get interface number failed: -71 [ 927.985685][T20620] F2FS-fs (loop1): Image doesn't support compression [ 927.994985][ T5933] usb-storage 5-1:1.0: USB Mass Storage device detected [ 928.004010][ T5023] visor 4-1:0.0: probe with driver visor failed with error -71 [ 928.025345][T20620] F2FS-fs (loop1): build fault injection rate: 690 [ 928.044095][ T5023] usb 4-1: USB disconnect, device number 49 [ 928.059810][T20620] F2FS-fs (loop1): build fault injection type: 0x4 [ 928.067395][ T5933] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 928.090971][T20620] F2FS-fs (loop1): invalid crc value [ 928.176014][ T5933] scsi host1: usb-storage 5-1:1.0 [ 928.345386][T20661] loop5: detected capacity change from 0 to 16 [ 928.403604][T20620] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 928.436850][T20661] erofs (device loop5): mounted with root inode @ nid 36. [ 928.484483][T20620] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 928.613744][T20661] syz.5.6244: attempt to access beyond end of device [ 928.613744][T20661] loop5: rw=0, sector=0, nr_sectors = 1025 limit=16 [ 928.654440][T20661] erofs (device loop5): read error -5 @ 0 of nid 36 [ 928.860113][ T5718] syz-executor: attempt to access beyond end of device [ 928.860113][ T5718] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 928.939134][ T5718] CPU: 1 UID: 0 PID: 5718 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 928.939184][ T5718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 928.939209][ T5718] Call Trace: [ 928.939221][ T5718] [ 928.939235][ T5718] dump_stack_lvl+0x100/0x190 [ 928.939285][ T5718] f2fs_stop_checkpoint+0x600/0x9b0 [ 928.939350][ T5718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.939399][ T5718] ? errseq_set+0xe3/0x150 [ 928.939440][ T5718] ? errseq_set+0xe3/0x150 [ 928.939490][ T5718] f2fs_write_end_io+0xf59/0x1340 [ 928.939541][ T5718] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 928.939589][ T5718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.939648][ T5718] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 928.939688][ T5718] bio_endio+0x78f/0x8f0 [ 928.939748][ T5718] submit_bio_noacct+0x64c/0x2000 [ 928.939804][ T5718] f2fs_submit_write_bio+0x135/0x340 [ 928.939872][ T5718] __submit_merged_bio+0x331/0x780 [ 928.939920][ T5718] __submit_merged_write_cond+0x3fe/0x510 [ 928.939971][ T5718] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 928.940028][ T5718] ? __pfx___might_resched+0x10/0x10 [ 928.940083][ T5718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.940141][ T5718] f2fs_write_cache_pages+0x20e9/0x2630 [ 928.940216][ T5718] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 928.940266][ T5718] ? unwind_next_frame+0x3c8/0x2090 [ 928.940323][ T5718] ? exit_to_user_mode_loop+0x107/0x4f0 [ 928.940380][ T5718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.940428][ T5718] ? __kasan_check_byte+0x13/0x50 [ 928.940580][ T5718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.940632][ T5718] ? unwind_next_frame+0x3be/0x2090 [ 928.940687][ T5718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.940735][ T5718] ? rcu_is_watching+0x12/0xc0 [ 928.940793][ T5718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.940855][ T5718] ? bpf_ksym_find+0x124/0x1c0 [ 928.940970][ T5718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.941021][ T5718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.941069][ T5718] ? add_lock_to_list+0x99/0x110 [ 928.941107][ T5718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.941155][ T5718] ? rcu_is_watching+0x12/0xc0 [ 928.941220][ T5718] f2fs_write_data_pages+0x799/0x16d0 [ 928.941285][ T5718] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 928.941332][ T5718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.941390][ T5718] ? do_writepages+0x4b5/0x600 [ 928.941452][ T5718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.941505][ T5718] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 928.941567][ T5718] do_writepages+0x278/0x600 [ 928.941638][ T5718] ? __pfx_do_writepages+0x10/0x10 [ 928.941700][ T5718] ? do_raw_spin_unlock+0x145/0x1e0 [ 928.941757][ T5718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.941802][ T5718] ? _raw_spin_unlock+0x28/0x50 [ 928.941862][ T5718] filemap_writeback+0x22d/0x2e0 [ 928.941902][ T5718] ? __pfx_filemap_writeback+0x10/0x10 [ 928.941937][ T5718] ? check_noncircular+0x97/0x160 [ 928.942031][ T5718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.942078][ T5718] ? find_held_lock+0x2b/0x80 [ 928.942140][ T5718] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 928.942191][ T5718] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 928.942242][ T5718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.942301][ T5718] f2fs_sync_dirty_inodes+0x469/0x990 [ 928.942371][ T5718] block_operations+0x2a6/0xfc0 [ 928.942420][ T5718] ? __bfs+0x150/0x2a0 [ 928.942470][ T5718] ? __pfx_block_operations+0x10/0x10 [ 928.942570][ T5718] ? check_noncircular+0x97/0x160 [ 928.942662][ T5718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.942716][ T5718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.942762][ T5718] ? rcu_is_watching+0x12/0xc0 [ 928.942821][ T5718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.942875][ T5718] f2fs_write_checkpoint+0x582/0x5550 [ 928.942957][ T5718] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 928.943019][ T5718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.943066][ T5718] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 928.943145][ T5718] kill_f2fs_super+0x3f1/0x4a0 [ 928.943197][ T5718] ? __pfx_kill_f2fs_super+0x10/0x10 [ 928.943268][ T5718] ? lockdep_hardirqs_on+0x78/0x100 [ 928.943329][ T5718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.943378][ T5718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.943441][ T5718] deactivate_locked_super+0xc1/0x1b0 [ 928.943502][ T5718] deactivate_super+0xe7/0x110 [ 928.943569][ T5718] cleanup_mnt+0x21f/0x450 [ 928.943615][ T5718] task_work_run+0x150/0x240 [ 928.943667][ T5718] ? __pfx_task_work_run+0x10/0x10 [ 928.943720][ T5718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 928.943767][ T5718] ? rcu_is_watching+0x12/0xc0 [ 928.943832][ T5718] exit_to_user_mode_loop+0x107/0x4f0 [ 928.943882][ T5718] ? rcu_is_watching+0x12/0xc0 [ 928.943946][ T5718] do_syscall_64+0x706/0xf80 [ 928.944014][ T5718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.944054][ T5718] RIP: 0033:0x7f6914f9e097 [ 928.944085][ T5718] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 928.944123][ T5718] RSP: 002b:00007fff0a704148 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 928.944160][ T5718] RAX: 0000000000000000 RBX: 00007f69150321ca RCX: 00007f6914f9e097 [ 928.944186][ T5718] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0a704200 [ 928.944210][ T5718] RBP: 00007fff0a704200 R08: 00007fff0a705200 R09: 00000000ffffffff [ 928.944236][ T5718] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff0a705290 [ 928.944261][ T5718] R13: 00007f69150321ca R14: 00000000000dfbdc R15: 00007fff0a7052d0 [ 928.944312][ T5718] [ 929.553361][ T5718] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 930.441259][T20698] loop3: detected capacity change from 0 to 1024 [ 930.793276][ T5023] usb 5-1: USB disconnect, device number 33 [ 931.061970][T20715] loop5: detected capacity change from 0 to 256 [ 931.189031][T20715] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 931.262691][T20723] netlink: 'syz.1.6273': attribute type 1 has an invalid length. [ 931.819107][T20737] netlink: 'syz.4.6281': attribute type 16 has an invalid length. [ 931.844245][T20737] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6281'. [ 931.889606][ T5023] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 931.890507][T20737] veth0_macvtap: entered allmulticast mode [ 931.945739][T20740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6282'. [ 932.077464][ T5023] usb 2-1: config index 0 descriptor too short (expected 86, got 68) [ 932.108543][ T5023] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 932.159938][ T5023] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 932.175880][T20713] loop2: detected capacity change from 0 to 32768 [ 932.217458][ T5023] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 932.227386][T20713] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6269 (20713) [ 932.250563][T20745] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6285'. [ 932.257733][ T5023] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 932.290709][ T5023] usb 2-1: SerialNumber: syz [ 932.304909][T20713] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 932.344028][ T5023] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 932.364949][T20749] loop3: detected capacity change from 0 to 1024 [ 932.371630][T20713] BTRFS info (device loop2): using sha256 checksum algorithm [ 932.397009][ T5023] usb-storage 2-1:1.0: USB Mass Storage device detected [ 932.483171][ T5023] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 932.544565][ T5023] scsi host1: usb-storage 2-1:1.0 [ 932.586903][T20713] BTRFS info (device loop2): enabling ssd optimizations [ 932.615043][T20713] BTRFS info (device loop2): using spread ssd allocation scheme [ 932.629996][T20713] BTRFS info (device loop2): turning on async discard [ 932.647094][T20713] BTRFS info (device loop2): enabling free space tree [ 932.921651][ T5719] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 932.982654][T20777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 933.063018][T20780] loop5: detected capacity change from 0 to 164 [ 933.069984][T20775] loop3: detected capacity change from 0 to 4096 [ 933.196113][T20785] netlink: 'syz.2.6295': attribute type 13 has an invalid length. [ 933.232166][T20785] gretap0: refused to change device tx_queue_len [ 933.239356][T20785] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 933.290023][T20775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 933.466930][T20787] tmpfs: Bad value for 'mpol' [ 933.589651][ T5724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.408113][T20811] loop3: detected capacity change from 0 to 164 [ 934.914869][ T5933] usb 2-1: USB disconnect, device number 37 [ 934.957617][T20827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6315'. [ 935.326160][T20835] vxcan3: entered promiscuous mode [ 935.334479][T20839] openvswitch: netlink: Message has 4 unknown bytes. [ 935.349211][T20835] vxcan3: entered allmulticast mode [ 935.389304][T20841] loop1: detected capacity change from 0 to 1024 [ 935.508145][T20841] BUG: unable to handle page fault for address: ffffffff9f188cd0 [ 935.515918][T20841] #PF: supervisor read access in kernel mode [ 935.521911][T20841] #PF: error_code(0x0000) - not-present page [ 935.527908][T20841] PGD e599067 P4D e599067 PUD e59a063 PMD 0 [ 935.534152][T20841] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 935.539733][T20841] CPU: 0 UID: 0 PID: 20841 Comm: syz.1.6323 Not tainted syzkaller #0 PREEMPT(full) [ 935.549127][T20841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 935.559369][T20841] RIP: 0010:__lock_acquire+0x4be/0x2630 [ 935.564948][T20841] Code: 00 00 48 89 de 48 89 ef 89 4c 24 08 e8 eb ee ff ff 8b 4c 24 08 85 c0 0f 84 d8 fe ff ff 8b 05 49 37 36 19 85 c0 75 11 4d 63 ed <4c> 0f a3 2d 1a 8b 2d 14 0f 83 aa 0b 00 00 48 8b 95 80 0b 00 00 85 [ 935.584817][T20841] RSP: 0018:ffffc90004f6f6c8 EFLAGS: 00010046 [ 935.590906][T20841] RAX: 0000000000000000 RBX: ffff888020f78b90 RCX: 0000000000000000 [ 935.598886][T20841] RDX: 0000000000000000 RSI: ffff888020f78b90 RDI: ffff888020f78000 [ 935.606867][T20841] RBP: ffff888020f78000 R08: ffffffff96179dc8 R09: 000000000000000b [ 935.614845][T20841] R10: 0000000000000004 R11: 0000000000000001 R12: 0000000000000000 [ 935.622823][T20841] R13: 000000004835abb4 R14: 0000000000000000 R15: 0000000000000005 [ 935.630983][T20841] FS: 00007f6915dd06c0(0000) GS:ffff888124370000(0000) knlGS:0000000000000000 [ 935.639928][T20841] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 935.646610][T20841] CR2: ffffffff9f188cd0 CR3: 000000008ac2e000 CR4: 0000000000350ef0 [ 935.654596][T20841] Call Trace: [ 935.657881][T20841] [ 935.660906][T20841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 935.666577][T20841] ? look_up_lock_class+0x55/0x120 [ 935.671818][T20841] lock_acquire+0x1b1/0x370 [ 935.676345][T20841] ? ocfs2_inode_lock_full_nested+0x102/0x1d20 [ 935.682535][T20841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 935.688203][T20841] ? __lock_acquire+0x4a5/0x2630 [ 935.693166][T20841] _raw_spin_lock+0x2e/0x40 [ 935.697695][T20841] ? ocfs2_inode_lock_full_nested+0x102/0x1d20 [ 935.703874][T20841] ocfs2_inode_lock_full_nested+0x102/0x1d20 [ 935.709896][T20841] ? dput.part.0+0xce/0x570 [ 935.714609][T20841] ? __pfx_ocfs2_inode_lock_full_nested+0x10/0x10 [ 935.721221][T20841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 935.726880][T20841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 935.732538][T20841] ? find_held_lock+0x2b/0x80 [ 935.737248][T20841] ? ocfs2_inode_lock_tracker+0x209/0x6f0 [ 935.742993][T20841] ? ocfs2_inode_lock_tracker+0x209/0x6f0 [ 935.748734][T20841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 935.754443][T20841] ocfs2_inode_lock_tracker+0x224/0x6f0 [ 935.760029][T20841] ? __pfx_ocfs2_inode_lock_tracker+0x10/0x10 [ 935.766121][T20841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 935.771781][T20841] ? __lock_acquire+0x4a5/0x2630 [ 935.776917][T20841] ocfs2_permission+0xcf/0x1c0 [ 935.781712][T20841] ? __pfx_ocfs2_permission+0x10/0x10 [ 935.787117][T20841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 935.792771][T20841] ? find_held_lock+0x2b/0x80 [ 935.797590][T20841] ? rcu_read_unlock+0x17/0x60 [ 935.802389][T20841] ? rcu_read_unlock+0x17/0x60 [ 935.807278][T20841] ? __pfx_ocfs2_permission+0x10/0x10 [ 935.812682][T20841] inode_permission+0x3f1/0x620 [ 935.817673][T20841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 935.823329][T20841] xattr_permission+0x1a1/0x230 [ 935.828192][T20841] vfs_getxattr+0xa5/0x2a0 [ 935.832627][T20841] ? __pfx_vfs_getxattr+0x10/0x10 [ 935.837666][T20841] ? __kvmalloc_node_noprof+0x6af/0xa00 [ 935.843234][T20841] ? do_getxattr+0xbb/0x3c0 [ 935.847755][T20841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 935.853414][T20841] do_getxattr+0x164/0x3c0 [ 935.857846][T20841] filename_getxattr+0xee/0x1a0 [ 935.862805][T20841] ? __pfx_filename_getxattr+0x10/0x10 [ 935.868284][T20841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 935.873945][T20841] ? do_getname+0x191/0x390 [ 935.878479][T20841] path_getxattrat+0x20d/0x430 [ 935.883286][T20841] ? __pfx_path_getxattrat+0x10/0x10 [ 935.888588][T20841] ? kmem_cache_free+0x127/0x6c0 [ 935.893542][T20841] ? do_sys_openat2+0x1b4/0x1e0 [ 935.898434][T20841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 935.904112][T20841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 935.909767][T20841] ? rcu_is_watching+0x12/0xc0 [ 935.914612][T20841] do_syscall_64+0x10b/0xf80 [ 935.919243][T20841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.925158][T20841] RIP: 0033:0x7f6914f9ce59 [ 935.929585][T20841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.949300][T20841] RSP: 002b:00007f6915dd0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 935.957733][T20841] RAX: ffffffffffffffda RBX: 00007f6915215fa0 RCX: 00007f6914f9ce59 [ 935.965888][T20841] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000180 [ 935.973907][T20841] RBP: 00007f6915032d6f R08: 0000000000000000 R09: 0000000000000000 [ 935.981888][T20841] R10: ffffffffffffffe3 R11: 0000000000000246 R12: 0000000000000000 [ 935.989884][T20841] R13: 00007f6915216038 R14: 00007f6915215fa0 R15: 00007fff0a704ed8 [ 935.997971][T20841] [ 936.000988][T20841] Modules linked in: [ 936.004887][T20841] CR2: ffffffff9f188cd0 [ 936.009091][T20841] ---[ end trace 0000000000000000 ]--- [ 936.014549][T20841] RIP: 0010:__lock_acquire+0x4be/0x2630 [ 936.020125][T20841] Code: 00 00 48 89 de 48 89 ef 89 4c 24 08 e8 eb ee ff ff 8b 4c 24 08 85 c0 0f 84 d8 fe ff ff 8b 05 49 37 36 19 85 c0 75 11 4d 63 ed <4c> 0f a3 2d 1a 8b 2d 14 0f 83 aa 0b 00 00 48 8b 95 80 0b 00 00 85 [ 936.039758][T20841] RSP: 0018:ffffc90004f6f6c8 EFLAGS: 00010046 [ 936.045862][T20841] RAX: 0000000000000000 RBX: ffff888020f78b90 RCX: 0000000000000000 [ 936.053936][T20841] RDX: 0000000000000000 RSI: ffff888020f78b90 RDI: ffff888020f78000 [ 936.061921][T20841] RBP: ffff888020f78000 R08: ffffffff96179dc8 R09: 000000000000000b [ 936.070013][T20841] R10: 0000000000000004 R11: 0000000000000001 R12: 0000000000000000 [ 936.077995][T20841] R13: 000000004835abb4 R14: 0000000000000000 R15: 0000000000000005 [ 936.085971][T20841] FS: 00007f6915dd06c0(0000) GS:ffff888124370000(0000) knlGS:0000000000000000 [ 936.094911][T20841] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 936.101506][T20841] CR2: ffffffff9f188cd0 CR3: 000000008ac2e000 CR4: 0000000000350ef0 [ 936.109923][T20841] Kernel panic - not syncing: Fatal exception [ 936.116288][T20841] Kernel Offset: disabled [ 936.120607][T20841] Rebooting in 86400 seconds..