last executing test programs: 1.17325785s ago: executing program 2 (id=8240): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x8}) 1.111780084s ago: executing program 2 (id=8243): setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) 871.367075ms ago: executing program 3 (id=8247): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0xed00}, 0x92f5e}, 0x6d) 778.989021ms ago: executing program 4 (id=8250): unshare(0xc000400) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@ifindex, 0xffffffffffffffff, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) 645.480467ms ago: executing program 2 (id=8253): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @dev, [], [], 'batadv0\x00', 'wg1\x00'}, 0x0, 0xd0, 0x110, 0x0, {0x0, 0x4c00}, [@common=@inet=@dscp={{0x28}}]}, @common=@unspec=@ERROR={0x20, 'ERROR\x00', 0x0, "ea01dace53ca15d49302b6f9280e0081e08ab2cff0c119a466e514dcba71"}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 587.15421ms ago: executing program 3 (id=8255): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x6, 0xa, 0x5}) 585.74047ms ago: executing program 1 (id=8256): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x18, 0x3a, 0x709, 0x0, 0x0, {0x3}, [@typed={0x4}]}, 0x18}}, 0x0) 568.491711ms ago: executing program 2 (id=8257): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0xfffffffffffffd9d, 0x2, {{0x0, 0x0, 0x30000001}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88f7}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x14000004) 548.718322ms ago: executing program 0 (id=8258): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) 548.438482ms ago: executing program 4 (id=8259): r0 = io_uring_setup(0x46f2, &(0x7f00000004c0)={0x0, 0x500c, 0x40, 0x0, 0x2ee}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000240)=[@ioring_restriction_sqe_flags_required={0x3, 0x18}, @ioring_restriction_sqe_op={0x1, 0x10}], 0x2) 491.040465ms ago: executing program 3 (id=8260): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@private0, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x4e1f, 0x0, 0x4e24, 0x419f, 0xa, 0x30, 0x40, 0x5c}, {0x4, 0x2, 0x1, 0x7, 0x3, 0x8000000000000001, 0x0, 0x200000000000004}, {0x4, 0x26, 0x7, 0x4}, 0x9, 0x0, 0x3, 0x1, 0x3, 0x3}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x33}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x3505, 0x1, 0x0, 0x80, 0x7, 0x4, 0x7}}, 0xe8) 475.169756ms ago: executing program 0 (id=8261): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x1c0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0x7, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1, 0xfffffffd}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x10, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0xff}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) 431.012878ms ago: executing program 1 (id=8262): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01864c1, &(0x7f0000000100)) 430.855448ms ago: executing program 2 (id=8263): syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) execve(&(0x7f0000001040)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 422.226499ms ago: executing program 3 (id=8264): syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @gue={{0x1, 0x1, 0x2, 0x42, 0x0, @void}, "efc159f7"}}}}}}, 0x0) 379.08434ms ago: executing program 1 (id=8265): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0x24, 0x2, [{0x2}, {0x1}, {}, {0x1}]}]}, 0x3c}}, 0x0) 375.322201ms ago: executing program 0 (id=8266): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="02", 0x0}, 0x50) 331.742533ms ago: executing program 3 (id=8267): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$eJzs3V2IXFcBAOBzd3c2u2lrpjW1axrbpNW2/nTTbNb4EzQpCYKhKeJLofgS0rQGYwQrqKXQJE++2VJS8MkffOpLqSJYEAl98qVgA0XoUxX0oSFiwYcaTUayc87MnZOZzMxmd+7O7vfB3TPnnnPnnDt75879O+cEYMOaWPq7uDhXhHDujZcPvf/AP2avzdnfylFf+jtVitVCCEWMT2Xv995kM7zywfPHuoVFWFj6m+Lh8UutZW8JIZwOO8L5UA/bzl146a2Fx46cOXx259uv7ru4OmsPAAAbyzfO71u8869/vvv2y6/dcyBsas1Px+f1NGOmedx/IB74p+P/idAZL0pT2XSWbypOE7Od+Sa75CuXU8vyTfUofzorv9Yj36Zw4/InS/O6rTeMs7Qd10MxMR9C2NyKT0zMzzfPycPSef10MX/qxMmnn62oosCK+/e9IYQdpeng2c74Wpv2r4E6LHNqrIE6jOV0YHRlXW40Vb7OI5oaW6reAwE05fcLr3M6v7Jwc1rvNjVY+Zcenei+PKyAUW//Q5U/XXH5Qfm/PmOPw8pZr1tTWq/0Pbo1xvP7CPnzS6/8oXO5tvxOR+fc/H5EbcB69rqPMC73F3rVc3LE9ViuXvXPt4v16isxTJ/DVztS7+34/uT/03H5HwPdfZhf/zeZTGt7Ch3x2s28V6Pi/Q+wduXPzTXS/dEof64vT9/UJ32mT/psn/TNfdJv6ZMOG9lvf/DT8GLRvt6Vn9MPez08XWe7LYYfGbI++fXIYcvPn/sd1s2Wnz9PDGvZ748+cfyLTz15ofn8f9Ha/q/G7T2dbtTjd+t8zJCuF+bX1VvP/tc7y5noke+OrD63dcm/9HprZ75ia/t9Qmk/c1095jqX29Ir3/bOfPUs32ycZrL65scnm7Pl0vFH2q+mz2sqW99ath7TWT3SfuX2GOb1gOVI22N6/r/dHqD5/H/aPudCrXj6xMnjj8R42k7/NFnbdG3+7hHXG1g5vb7/6fdrLnS2/7m1Nb82Ud4vbGnPL5r7hdfj+3XOX2iVU5pf+lFLv3Pfnpxdyj9/7Hsnn1qF9YaN7NkfP/edoydPHv++F8t+8bW1UY1hXqTTlrVSHy+GfbFjtYuoeMcErLpdLzQPAh4+8d2jzxx/5vipPXv37llY2PulPYu7lo7rd5WP7stOV1BbYCW1f/SrrgkAAAAAAAAAAAAwqB8ePnThnTe/8G6z/X+7/V9q/5+e/E3t/3+Stf/P28mndvCpHeDtXdKX8mQdrE5n+Wpx+mhW39QNQPFCM7wzW+5jMWyN4xfb/6fi8n5dU33uyubXekSz7gSu6y9lOuuDJB8v8L4Yno3hrwJUqJjtPjuGN+jfuviwtK2n/ilKTXgb+gceH+n/lvdflNp/d+3XqUt7bcbLKFosVr2OQHf/3FD9f/+rveKV18XUe5oabXk/27jbRKPnUfqgI9gArIyqx//8e2iWm65/nvrj12euTSnbpUc795d5/6UwjL+80xlf6+NPrnb5+bh9oy6/6vUf9fifrfHv4v4v7fd67/+yEfPqyyv3Pz+/+G6p2LBt0PLz9U/9QG8drvzLsfy0Ng+Gwcpv/DIrP78hNKD/ZuVvHrD869Z/+/LK/18sP31sD90/aPnNGhcTnfWYzdYj3f/LrxsnV7L1T3173qD8bz7Xbf2XOVDj1Vg+bGTjMs7ssLLjiNZBe7/xf4f9/b/Z8X9blc12a/lzGJ+P8bQjTs855OOdDFv/9HxF+h24M3v/os/vm/F/x9uXY9jv+5DG/03bYz3+5JfiS59lite6fLbrdV8D4+q9DXX/b1TTxeZp0PKWn6m+/qYhpsbkMpZrPWdVcf0bjcbqXtDqo9LCqfzzr/ruc9XnKfdVXH4/+fi/+TF8Pv5vnp6P/5un5+P/5umz8T/0fo/0fPzffHvOx//N0+/K3jcfH3iuT/rHu6QXoZ2+rfvyrdP2u/u8//Y+6Z/ok76zlb6/I0dKv+eGy7fz9Xr/O/qk398n/ZN90j/VJ/2BPukPldLLY0Cn9E9nyxdZ+nqX9j+9Pj9g/crb5/n+w8aR7v/0+v5vbadPl7OMtpbAanjltd0Hn/zNt+rN9v/Tresh6T7egRivxXOjH8V4ft87lOLX0t6M8b9l6VVfbwLa8v4z8t//B/ukA+MrPefl+w0bUDHTfXYM+/Vb1es4n/HymRh+Noafi+HDMZyP4a4Y7o7hwojqx+o4+Prv9r1YtM/3t2Tpgz5PnrcH6ugnKoSwZ8D65NcHhn2ePe/Hb1g3W/4ym4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUZmLp7+LiXBHCuTdePvTEkRO7rs3Z38pRX/o7VYrVWsuF8EgMJ2P4i/jiygfPHyuHV2NYhIVQhKI1Pzx+qVXSLSGE02FHOB/qYdu5Cy+9tfDYkTOHz+58+9V9F1fvEwAAAID17/8BAAD//092Bzk=") open(&(0x7f00000003c0)='./file2\x00', 0x430dc882a8a7f17, 0xc) 331.255093ms ago: executing program 4 (id=8268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [{{0x254, 0x1, {{0x0, 0x5}, 0x3, 0x81, 0x7, 0x10db, 0x14, 'syz1\x00', "824dab73008179ad5724c1f4a8cab0eb97db26bb544a6635dece3d2d6251d82a", "a8d1e2009b2df2fedc25696753c2c128b0526fa53e71444b783189a9acb5e081", [{0x60, 0x7ff, {0x3}}, {0x3064, 0x0, {0x3, 0xffff7fff}}, {0xfffb, 0x0, {0x1, 0x8}}, {0xa9, 0x4, {0x1, 0x2}}, {0xd, 0x4, {0x3, 0x80000000}}, {0x2, 0x5, {0x3, 0xfffe00}}, {0x1, 0xfff8, {0x2, 0x1a}}, {0xc, 0x1, {0x3, 0x5}}, {0x7, 0x1, {0x1, 0x4fb}}, {0x1, 0x7, {0x3, 0x2d50}}, {0x57, 0x3, {0x0, 0x10001}}, {0x8, 0xf, {0x2, 0x7}}, {0xff2e, 0x4, {0x2, 0x7}}, {0x8, 0x8, {0x3, 0xb7c8}}, {0x4, 0x8, {0x2, 0x9}}, {0x1, 0x3, {0x2, 0x8000}}, {0x2, 0x5b8, {0x2, 0x3}}, {0x2, 0xc2, {0x1b63cb4f7da91a4d, 0xb}}, {0x6f5, 0x100}, {0x9, 0x0, {0x2, 0xfe}}, {0x8, 0x9, {0x0, 0x10}}, {0x9, 0x2, {0x3, 0xfffffffd}}, {0x400, 0x5, {0x1, 0xfff}}, {0x1, 0x7, {0x2, 0xffffffff}}, {0x8000, 0x0, {0x3, 0x11ba9192}}, {0x101, 0x2, {0x2}}, {0xf248, 0x9, {0x0, 0xc9e6}}, {0x8, 0x8, {0x3, 0xd243}}, {0x400, 0x9, {0x1, 0xf}}, {0x401, 0x6, {0x1, 0x1}}, {0xf21, 0xc4d, {0x3, 0x7}}, {0x2, 0x2, {0x0, 0x7}}, {0x4, 0x8, {0x1, 0x10000}}, {0xfeff, 0x2, {0x2, 0x7fffffff}}, {0x7, 0x7, {0x3, 0xe}}, {0x0, 0x7fff, {0x1, 0x1000}}, {0xfffc, 0x7a, {0x0, 0x6}}, {0x8, 0x40, {0x3, 0xe}}, {0xff1a, 0x2, {0x2, 0xff}}, {0x3, 0x1, {0x0, 0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) 293.035635ms ago: executing program 1 (id=8269): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f00000000c0)) 262.762027ms ago: executing program 2 (id=8270): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40808}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x0) 203.001579ms ago: executing program 4 (id=8271): r0 = syz_open_dev$video(&(0x7f0000000180), 0x3, 0x1) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0xc, @pix={0xb, 0x7f, 0x32315258, 0x7, 0xe, 0x8, 0x5, 0xa, 0x0, 0x2, 0x0, 0x3}}) 202.90989ms ago: executing program 0 (id=8272): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@empty, @empty}, 0xc) 199.65083ms ago: executing program 4 (id=8273): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip6_mr_cache\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x409f, 0x0) 182.475831ms ago: executing program 1 (id=8274): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) 94.189325ms ago: executing program 0 (id=8275): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000580)={0x3d, 0x2, 0x3, "ac84ec97dc7936edd43f6f46193b9701ffc550aadacd5da6cd2ce06e1c034265", 0x4c47504a}) 31.047998ms ago: executing program 4 (id=8276): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000000)=0x400) 30.917778ms ago: executing program 1 (id=8277): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, "0000d3"}, {0x10, 0x110, 0xa}], 0x28}, 0xfc40) 3.846709ms ago: executing program 0 (id=8278): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x4}) 0s ago: executing program 3 (id=8279): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000040), 0x3ffff8f, 0x68881) kernel console output (not intermixed with test programs): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 622.475719][ T25] audit: type=1326 audit(2000525956.958:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19305 comm="syz.1.6743" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7b164d799 code=0x0 [ 622.584023][T19278] BTRFS info (device loop0): enabling ssd optimizations [ 622.654868][T19318] set_capacity_and_notify: 6 callbacks suppressed [ 622.654882][T19318] loop1: detected capacity change from 0 to 512 [ 622.820510][ T6077] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 622.866176][ T6077] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 622.891443][ T6077] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.950597][T19318] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 622.961042][ T6077] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 623.247445][ T6077] usb 3-1: USB disconnect, device number 42 [ 623.268760][T19326] loop1: detected capacity change from 0 to 512 [ 623.298767][T19323] loop4: detected capacity change from 0 to 32768 [ 623.323745][T19326] EXT4-fs (loop1): Unsupported blocksize for fs-verity [ 623.394043][T19323] BTRFS: device fsid 59b5568a-a427-4554-b73a-27dcd238cc5a devid 1 transid 8 /dev/loop4 scanned by syz.4.6739 (19323) [ 623.506249][T19323] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 623.514980][T19323] BTRFS info (device loop4): using free space tree [ 623.543575][T19323] BTRFS info (device loop4): has skinny extents [ 623.584168][T19328] loop1: detected capacity change from 0 to 2048 [ 623.673570][T19328] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 623.702772][T19324] loop0: detected capacity change from 0 to 32768 [ 623.729825][T19316] loop3: detected capacity change from 0 to 32768 [ 623.774364][T19324] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.6746 (19324) [ 623.844390][T19324] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 623.922400][T19324] BTRFS info (device loop0): using free space tree [ 623.970354][T19324] BTRFS info (device loop0): has skinny extents [ 623.979683][T19323] BTRFS info (device loop4): enabling ssd optimizations [ 624.015193][T19350] loop2: detected capacity change from 0 to 4096 [ 624.156028][T19324] BTRFS info (device loop0): enabling ssd optimizations [ 624.233387][T19350] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 624.748353][T19342] loop1: detected capacity change from 0 to 32768 [ 624.786460][T19342] BTRFS: device fsid ed4422de-dbc1-4dc1-8d60-3583f36c24cc devid 1 transid 8 /dev/loop1 scanned by syz.1.6749 (19342) [ 624.906583][T19342] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 624.974682][T19342] BTRFS info (device loop1): using free space tree [ 624.996334][T19342] BTRFS info (device loop1): has skinny extents [ 625.207752][T19352] loop3: detected capacity change from 0 to 32768 [ 625.249061][T19352] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 625.268280][T19352] gfs2: fsid=.: Now mounting FS (format 0)... [ 625.292986][T19352] gfs2: fsid=.: can't read superblock: -22 [ 625.347720][T19377] loop4: detected capacity change from 0 to 32768 [ 625.391128][T19342] BTRFS info (device loop1): enabling ssd optimizations [ 625.430389][T19377] BTRFS: device fsid 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 devid 1 transid 8 /dev/loop4 scanned by syz.4.6752 (19377) [ 625.501637][T19377] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 625.567943][T19377] BTRFS info (device loop4): using free space tree [ 625.592336][T19379] BTRFS: device fsid d09153a9-5497-4f31-8e52-d2d02bbdf7fc devid 1 transid 8 /dev/loop2 scanned by syz.2.6754 (19379) [ 625.621233][T19377] BTRFS info (device loop4): has skinny extents [ 625.663211][T19379] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 625.738909][T19379] BTRFS info (device loop2): using free space tree [ 625.745433][T19379] BTRFS info (device loop2): has skinny extents [ 626.016404][T19381] BTRFS: device fsid 9399ba92-402c-46cb-a272-9c4c6c4f62f5 devid 1 transid 8 /dev/loop0 scanned by syz.0.6753 (19381) [ 626.121082][T19381] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 626.137658][T19377] BTRFS info (device loop4): enabling ssd optimizations [ 626.180464][T19402] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 626.189240][T19381] BTRFS info (device loop0): using free space tree [ 626.193907][T19402] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 626.203176][T19381] BTRFS info (device loop0): has skinny extents [ 626.272626][T19379] BTRFS info (device loop2): enabling ssd optimizations [ 626.285999][T19402] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 626.321432][ T4656] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 626.337538][ T4656] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 626.759201][ T4656] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 394ms [ 626.813286][ T4656] gfs2: fsid=syz:syz.0: jid=0: Done [ 626.838112][T19402] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 627.098339][T19439] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 627.112186][ T4177] BTRFS: device fsid d09153a9-5497-4f31-8e52-d2d02bbdf7fc devid 1 transid 9 /dev/loop2 scanned by udevd (4177) [ 627.138200][T19439] CPU: 0 PID: 19439 Comm: syz.1.6756 Not tainted syzkaller #0 [ 627.145678][T19439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 627.155737][T19439] Call Trace: [ 627.159019][T19439] [ 627.161955][T19439] dump_stack_lvl+0x188/0x250 [ 627.166644][T19439] ? show_regs_print_info+0x20/0x20 [ 627.171852][T19439] ? load_image+0x400/0x400 [ 627.176378][T19439] sysfs_create_dir_ns+0x26a/0x290 [ 627.181501][T19439] ? sysfs_warn_dup+0xa0/0xa0 [ 627.186191][T19439] ? do_raw_spin_unlock+0x11d/0x230 [ 627.191403][T19439] kobject_add_internal+0x6e0/0xd90 [ 627.196617][T19439] kobject_init_and_add+0x128/0x190 [ 627.201822][T19439] ? lockdep_softirqs_off+0x430/0x430 [ 627.207208][T19439] ? kobject_add+0x230/0x230 [ 627.211810][T19439] ? __init_swait_queue_head+0xa5/0x150 [ 627.217366][T19439] gfs2_sys_fs_add+0x24f/0x4b0 [ 627.222138][T19439] ? gfs2_recover_set+0x240/0x240 [ 627.227170][T19439] ? snprintf+0xe5/0x140 [ 627.231414][T19439] ? __free_pages+0x95/0x1a0 [ 627.236011][T19439] ? vscnprintf+0x80/0x80 [ 627.240391][T19439] gfs2_fill_super+0x120f/0x1f00 [ 627.245352][T19439] ? gfs2_reconfigure+0xd30/0xd30 [ 627.250404][T19439] ? sb_set_blocksize+0xa5/0xe0 [ 627.255270][T19439] get_tree_bdev+0x3f1/0x610 [ 627.259888][T19439] ? gfs2_reconfigure+0xd30/0xd30 [ 627.264922][T19439] gfs2_get_tree+0x4d/0x1e0 [ 627.269438][T19439] vfs_get_tree+0x88/0x270 [ 627.273864][T19439] do_new_mount+0x24a/0xa40 [ 627.278382][T19439] __se_sys_mount+0x2e3/0x3d0 [ 627.283077][T19439] ? __x64_sys_mount+0xc0/0xc0 [ 627.287855][T19439] ? lockdep_hardirqs_on+0x94/0x140 [ 627.293063][T19439] ? __x64_sys_mount+0x1c/0xc0 [ 627.297842][T19439] do_syscall_64+0x4c/0xa0 [ 627.302268][T19439] ? clear_bhb_loop+0x30/0x80 [ 627.306961][T19439] ? clear_bhb_loop+0x30/0x80 [ 627.311645][T19439] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 627.317553][T19439] RIP: 0033:0x7fe7b164ea0a [ 627.321970][T19439] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.341577][T19439] RSP: 002b:00007fe7af8a6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 627.349997][T19439] RAX: ffffffffffffffda RBX: 00007fe7af8a6ee0 RCX: 00007fe7b164ea0a [ 627.357972][T19439] RDX: 0000200000013400 RSI: 0000200000013440 RDI: 00007fe7af8a6ea0 [ 627.365949][T19439] RBP: 0000200000013400 R08: 00007fe7af8a6ee0 R09: 0000000000000000 [ 627.373938][T19439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000013440 [ 627.381909][T19439] R13: 00007fe7af8a6ea0 R14: 00000000000133e6 R15: 0000200000013480 [ 627.389904][T19439] [ 627.407388][T19381] BTRFS info (device loop0): enabling ssd optimizations [ 627.674715][ T4178] BTRFS: device fsid 9399ba92-402c-46cb-a272-9c4c6c4f62f5 devid 1 transid 9 /dev/loop0 scanned by udevd (4178) [ 628.125458][T19465] set_capacity_and_notify: 4 callbacks suppressed [ 628.125474][T19465] loop2: detected capacity change from 0 to 32768 [ 628.144593][T19439] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 628.188017][T19439] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 628.217046][T19465] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.6758 (19465) [ 628.376674][T19465] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 628.434956][T19465] BTRFS info (device loop2): using free space tree [ 628.441491][T19465] BTRFS info (device loop2): has skinny extents [ 628.792010][T19487] loop3: detected capacity change from 0 to 1024 [ 628.843293][T19465] BTRFS info (device loop2): enabling ssd optimizations [ 628.859088][T19493] loop1: detected capacity change from 0 to 1024 [ 628.977939][T19472] loop0: detected capacity change from 0 to 32768 [ 629.076460][T19497] loop3: detected capacity change from 0 to 8 [ 629.097345][T19472] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 scanned by syz.0.6759 (19472) [ 629.117871][T19497] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 629.237059][T19500] loop1: detected capacity change from 0 to 1024 [ 629.459441][T19472] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 629.512842][T19472] BTRFS info (device loop0): using free space tree [ 629.519381][T19472] BTRFS info (device loop0): has skinny extents [ 629.572870][T19504] loop3: detected capacity change from 0 to 1756 [ 629.879179][T19472] BTRFS info (device loop0): enabling ssd optimizations [ 629.888313][T19524] loop3: detected capacity change from 0 to 1768 [ 630.142552][T19467] loop4: detected capacity change from 0 to 131072 [ 630.189070][T19505] loop2: detected capacity change from 0 to 32768 [ 630.286119][T19505] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.6764 (19505) [ 630.325751][T19467] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 630.358711][T19505] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 630.431652][T19505] BTRFS info (device loop2): using free space tree [ 630.483234][T19505] BTRFS info (device loop2): has skinny extents [ 630.721790][T19508] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 630.816974][T19508] dlm: no local IP address has been set [ 630.822638][T19505] BTRFS info (device loop2): enabling ssd optimizations [ 630.827849][T19508] dlm: cannot start dlm midcomms -107 [ 630.856627][T19508] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 631.396991][T19529] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 8 /dev/loop3 scanned by syz.3.6769 (19529) [ 631.468607][T19529] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 631.532116][T19529] BTRFS info (device loop3): using free space tree [ 631.585935][T19529] BTRFS info (device loop3): has skinny extents [ 631.927450][T19529] BTRFS info (device loop3): enabling ssd optimizations [ 632.269723][T19561] BTRFS: device fsid 16bad5ef-498e-43ba-8a30-25ddcaa179c7 devid 1 transid 8 /dev/loop4 scanned by syz.4.6775 (19561) [ 632.377204][T19561] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 632.405207][T19563] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.6776 (19563) [ 632.427545][T19561] BTRFS info (device loop4): using free space tree [ 632.445215][T19561] BTRFS info (device loop4): has skinny extents [ 632.526143][T19563] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 632.581468][T19563] BTRFS info (device loop1): using free space tree [ 632.614003][T19563] BTRFS info (device loop1): has skinny extents [ 632.774669][T19561] BTRFS info (device loop4): enabling ssd optimizations [ 632.979382][T19563] BTRFS info (device loop1): enabling ssd optimizations [ 633.062829][ T5739] BTRFS: device fsid 16bad5ef-498e-43ba-8a30-25ddcaa179c7 devid 1 transid 9 /dev/loop4 scanned by udevd (5739) [ 633.301464][T19587] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 633.353543][T19587] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 633.466808][T19587] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 633.531765][ T4177] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 9 /dev/loop1 scanned by udevd (4177) [ 633.726125][ T4174] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 633.754685][ T4174] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 633.814290][T19633] set_capacity_and_notify: 7 callbacks suppressed [ 633.814304][T19633] loop4: detected capacity change from 0 to 2048 [ 633.969569][T19633] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 633.970018][ T4174] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 201ms [ 633.999304][T19633] ext4 filesystem being mounted at /1307/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.110407][ T4174] gfs2: fsid=syz:syz.0: jid=0: Done [ 634.115666][T19587] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 635.466083][T19646] loop2: detected capacity change from 0 to 128 [ 635.653666][T19648] loop2: detected capacity change from 0 to 128 [ 635.668869][T19644] loop0: detected capacity change from 0 to 32768 [ 635.749707][T19644] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 635.795141][T19644] CPU: 1 PID: 19644 Comm: syz.0.6783 Not tainted syzkaller #0 [ 635.802621][T19644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 635.812675][T19644] Call Trace: [ 635.815953][T19644] [ 635.818885][T19644] dump_stack_lvl+0x188/0x250 [ 635.823574][T19644] ? show_regs_print_info+0x20/0x20 [ 635.828785][T19644] ? load_image+0x400/0x400 [ 635.833308][T19644] sysfs_create_dir_ns+0x26a/0x290 [ 635.838429][T19644] ? sysfs_warn_dup+0xa0/0xa0 [ 635.843123][T19644] ? do_raw_spin_unlock+0x11d/0x230 [ 635.848329][T19644] kobject_add_internal+0x6e0/0xd90 [ 635.853548][T19644] kobject_init_and_add+0x128/0x190 [ 635.858758][T19644] ? lockdep_softirqs_off+0x430/0x430 [ 635.864150][T19644] ? kobject_add+0x230/0x230 [ 635.868755][T19644] ? __init_swait_queue_head+0xa5/0x150 [ 635.874315][T19644] gfs2_sys_fs_add+0x24f/0x4b0 [ 635.879086][T19644] ? gfs2_recover_set+0x240/0x240 [ 635.884115][T19644] ? snprintf+0xe5/0x140 [ 635.888358][T19644] ? __free_pages+0x95/0x1a0 [ 635.892959][T19644] ? vscnprintf+0x80/0x80 [ 635.897299][T19644] gfs2_fill_super+0x120f/0x1f00 [ 635.902257][T19644] ? gfs2_reconfigure+0xd30/0xd30 [ 635.907321][T19644] ? sb_set_blocksize+0xa5/0xe0 [ 635.912181][T19644] get_tree_bdev+0x3f1/0x610 [ 635.916781][T19644] ? gfs2_reconfigure+0xd30/0xd30 [ 635.921813][T19644] gfs2_get_tree+0x4d/0x1e0 [ 635.926327][T19644] vfs_get_tree+0x88/0x270 [ 635.930757][T19644] do_new_mount+0x24a/0xa40 [ 635.935276][T19644] __se_sys_mount+0x2e3/0x3d0 [ 635.939962][T19644] ? __x64_sys_mount+0xc0/0xc0 [ 635.944738][T19644] ? lockdep_hardirqs_on+0x94/0x140 [ 635.949948][T19644] ? __x64_sys_mount+0x1c/0xc0 [ 635.954722][T19644] do_syscall_64+0x4c/0xa0 [ 635.959144][T19644] ? clear_bhb_loop+0x30/0x80 [ 635.963821][T19644] ? clear_bhb_loop+0x30/0x80 [ 635.968506][T19644] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 635.974404][T19644] RIP: 0033:0x7f9eaebe3a0a [ 635.978828][T19644] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.998447][T19644] RSP: 002b:00007f9eace3be58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 636.006865][T19644] RAX: ffffffffffffffda RBX: 00007f9eace3bee0 RCX: 00007f9eaebe3a0a [ 636.014838][T19644] RDX: 0000200000013400 RSI: 0000200000013440 RDI: 00007f9eace3bea0 [ 636.022818][T19644] RBP: 0000200000013400 R08: 00007f9eace3bee0 R09: 0000000000000000 [ 636.030790][T19644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000013440 [ 636.038765][T19644] R13: 00007f9eace3bea0 R14: 00000000000133e0 R15: 0000200000013480 [ 636.046754][T19644] [ 636.065883][T19644] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 636.079394][T19644] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 636.234690][T19650] loop2: detected capacity change from 0 to 128 [ 636.492937][T19652] loop3: detected capacity change from 0 to 128 [ 636.528967][T19654] loop2: detected capacity change from 0 to 128 [ 636.752821][T19660] loop3: detected capacity change from 0 to 128 [ 636.799766][T19658] loop2: detected capacity change from 0 to 1024 [ 637.587972][T19662] loop3: detected capacity change from 0 to 32768 [ 637.633515][T19662] BTRFS: device fsid cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 devid 1 transid 8 /dev/loop3 scanned by syz.3.6792 (19662) [ 637.677087][T19662] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 637.711002][T19662] BTRFS info (device loop3): using free space tree [ 637.730103][T19662] BTRFS info (device loop3): has skinny extents [ 637.921960][T19662] BTRFS info (device loop3): enabling ssd optimizations [ 638.985528][T19667] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 639.022249][T19667] dlm: no local IP address has been set [ 639.040322][T19667] dlm: cannot start dlm midcomms -107 [ 639.049178][T19667] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 639.333245][T19697] set_capacity_and_notify: 3 callbacks suppressed [ 639.333261][T19697] loop1: detected capacity change from 0 to 4096 [ 639.508908][T19700] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 639.550181][T19695] loop3: detected capacity change from 0 to 32768 [ 639.943382][T19702] loop1: detected capacity change from 0 to 8192 [ 639.991097][T19704] loop3: detected capacity change from 0 to 8192 [ 640.062336][T19705] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 640.132022][T19706] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 640.381200][T19708] loop1: detected capacity change from 0 to 4096 [ 640.445305][T19708] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 640.727461][T19712] loop0: detected capacity change from 0 to 4096 [ 640.852262][T19712] ntfs: volume version 3.1. [ 641.344427][T19710] loop3: detected capacity change from 0 to 32768 [ 641.412321][T19710] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 641.443544][T19710] dlm: no local IP address has been set [ 641.459897][T19710] dlm: cannot start dlm midcomms -107 [ 641.475421][T19710] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 641.601232][T19718] loop2: detected capacity change from 0 to 4096 [ 641.621377][T19720] loop3: detected capacity change from 0 to 128 [ 641.634478][T19716] loop0: detected capacity change from 0 to 32768 [ 641.835362][T19718] ntfs: volume version 3.1. [ 641.899786][T19721] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 641.931311][T19714] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 641.974753][T19714] dlm: no local IP address has been set [ 641.984643][T19714] dlm: cannot start dlm midcomms -107 [ 642.042097][T19714] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 642.190204][T19723] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 642.978844][T19726] (syz.0.6811,19726,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 643.031136][T19726] (syz.0.6811,19726,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 643.101205][T19729] (syz.1.6812,19729,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 643.156720][T19729] (syz.1.6812,19729,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 643.288004][T19732] (syz.3.6813,19732,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 643.335738][T19732] (syz.3.6813,19732,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 643.909414][T19735] (syz.4.6814,19735,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 643.954347][T19735] (syz.4.6814,19735,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 644.021943][T19736] (syz.0.6815,19736,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 644.063998][T19736] (syz.0.6815,19736,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 644.095270][T19738] (syz.1.6816,19738,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 644.126698][T19738] (syz.1.6816,19738,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 645.625335][T19742] set_capacity_and_notify: 8 callbacks suppressed [ 645.625351][T19742] loop4: detected capacity change from 0 to 65536 [ 645.690063][T19744] loop0: detected capacity change from 0 to 65536 [ 645.702043][T19746] loop1: detected capacity change from 0 to 65536 [ 645.720577][T19742] (syz.4.6818,19742,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 645.741771][T19744] (syz.0.6819,19744,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 645.755719][T19742] (syz.4.6818,19742,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 645.765284][T19746] (syz.1.6820,19746,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 645.784536][T19744] (syz.0.6819,19744,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 645.799323][T19746] (syz.1.6820,19746,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 646.290292][T19752] loop2: detected capacity change from 0 to 128 [ 646.351053][T19752] qnx4: no qnx4 filesystem (no root dir). [ 646.586916][T19754] loop2: detected capacity change from 0 to 2048 [ 647.062197][T19756] loop1: detected capacity change from 0 to 16384 [ 647.119061][T19756] REISERFS warning (device loop1): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop1, block 16, size 4096) [ 647.250805][T19756] REISERFS warning (device loop1): sh-2021 reiserfs_fill_super: can not find reiserfs on loop1 [ 647.316824][T19750] loop0: detected capacity change from 0 to 32768 [ 647.368775][T19750] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 647.399659][T19750] dlm: no local IP address has been set [ 647.417182][T19750] dlm: cannot start dlm midcomms -107 [ 647.427687][T19750] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 647.707356][T19748] loop4: detected capacity change from 0 to 65536 [ 647.746340][T19748] (syz.4.6821,19748,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 647.797848][T19748] (syz.4.6821,19748,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 648.288002][T19767] loop4: detected capacity change from 0 to 16384 [ 648.351602][T19767] REISERFS warning (device loop4): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop4, block 16, size 4096) [ 648.386956][T19767] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4 [ 650.195287][T19763] loop1: detected capacity change from 0 to 131072 [ 650.253508][T19763] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 650.279793][T19763] REISERFS (device loop1): using ordered data mode [ 650.286736][T19763] reiserfs: using flush barriers [ 650.302449][T19763] REISERFS (device loop1): journal params: device loop1, size 15748, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 650.348364][T19763] REISERFS (device loop1): checking transaction log (loop1) [ 650.417199][T19761] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 650.445133][T19761] REISERFS (device loop3): using ordered data mode [ 650.451652][T19761] reiserfs: using flush barriers [ 650.510337][T19761] REISERFS (device loop3): journal params: device loop3, size 8192, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 650.535458][T19761] REISERFS (device loop3): checking transaction log (loop3) [ 650.654779][T19774] Can't find a SQUASHFS superblock on loop2 [ 650.905663][T19776] attempt to access beyond end of device [ 650.905663][T19776] loop2: rw=2048, want=8, limit=3 [ 650.958619][T19776] SQUASHFS error: Failed to read block 0x0: -5 [ 650.993261][T19776] unable to read squashfs_super_block [ 651.222666][T19778] set_capacity_and_notify: 2 callbacks suppressed [ 651.222682][T19778] loop2: detected capacity change from 0 to 1 [ 651.356517][T19778] attempt to access beyond end of device [ 651.356517][T19778] loop2: rw=2048, want=8, limit=1 [ 651.407452][T19778] SQUASHFS error: Failed to read block 0x0: -5 [ 651.413667][T19778] unable to read squashfs_super_block [ 651.602782][T19780] loop2: detected capacity change from 0 to 3 [ 651.667762][T19780] attempt to access beyond end of device [ 651.667762][T19780] loop2: rw=2048, want=8, limit=3 [ 651.707393][T19780] SQUASHFS error: Failed to read block 0x0: -5 [ 651.730558][T19780] unable to read squashfs_super_block [ 651.902908][T19782] loop0: detected capacity change from 0 to 512 [ 651.974818][T19784] loop2: detected capacity change from 0 to 2048 [ 652.076985][T19785] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 652.326101][T19788] loop0: detected capacity change from 0 to 2048 [ 652.439252][T19788] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 652.796180][T19793] loop4: detected capacity change from 0 to 256 [ 652.847940][T19793] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 652.897139][T19793] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 652.944615][T19793] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 652.974154][T19793] UDF-fs: Scanning with blocksize 512 failed [ 653.021573][T19793] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 653.071760][T19793] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 653.734043][T19761] REISERFS (device loop3): Using rupasov hash to sort names [ 653.748761][T19761] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 655.541380][T19797] loop3: detected capacity change from 0 to 256 [ 655.612714][T19797] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 655.626271][T19791] loop0: detected capacity change from 0 to 131072 [ 655.650079][T19797] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 655.671144][T19797] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 655.689811][T19797] UDF-fs: Scanning with blocksize 512 failed [ 655.701157][T19797] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 655.736734][T19791] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 655.747664][T19791] REISERFS (device loop0): using ordered data mode [ 655.754170][T19791] reiserfs: using flush barriers [ 655.770897][T19791] REISERFS (device loop0): journal params: device loop0, size 8192, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 655.795543][T19797] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 655.798863][T19791] REISERFS (device loop0): checking transaction log (loop0) [ 655.928008][T19800] loop3: detected capacity change from 0 to 4096 [ 656.028178][T19800] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 656.068244][T19800] UDF-fs: Scanning with blocksize 512 failed [ 656.109990][T19800] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 656.556411][T19763] REISERFS (device loop1): Using rupasov hash to sort names [ 656.588448][T19763] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 656.600240][T19806] loop2: detected capacity change from 0 to 512 [ 656.654137][T19804] loop3: detected capacity change from 0 to 8192 [ 656.693500][T19804] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 656.703705][T19806] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 656.741015][T19806] UDF-fs: Scanning with blocksize 512 failed [ 656.748059][T19806] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 656.763291][T19804] REISERFS (device loop3): using ordered data mode [ 656.769797][T19804] reiserfs: using flush barriers [ 656.784559][T19806] UDF-fs: Scanning with blocksize 1024 failed [ 656.813920][T19806] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 656.825977][T19804] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 656.856787][T19806] UDF-fs: Scanning with blocksize 2048 failed [ 656.891705][T19806] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 656.910925][T19804] REISERFS (device loop3): checking transaction log (loop3) [ 656.955951][T19809] loop4: detected capacity change from 0 to 128 [ 656.956081][T19806] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 657.145554][T19811] loop4: detected capacity change from 0 to 512 [ 657.223231][T19804] REISERFS (device loop3): Using tea hash to sort names [ 657.230462][T19804] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 657.269777][T19813] loop2: detected capacity change from 0 to 128 [ 657.290416][T19813] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 657.342732][T19813] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 657.571843][T19817] loop2: detected capacity change from 0 to 128 [ 657.638873][T19815] loop4: detected capacity change from 0 to 8192 [ 657.755189][T19815] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 657.778767][T19815] REISERFS (device loop4): using ordered data mode [ 657.785282][T19815] reiserfs: using flush barriers [ 657.914997][T19815] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 657.971406][T19815] REISERFS (device loop4): checking transaction log (loop4) [ 658.256281][T19815] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 658.307752][T19815] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 658.349757][T19815] REISERFS (device loop4): Remounting filesystem read-only [ 658.375544][T19815] REISERFS error (device loop4): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 658.420640][T19815] REISERFS warning (device loop4): reiserfs_fill_super: corrupt root inode, run fsck [ 658.620943][T19822] loop2: detected capacity change from 0 to 32768 [ 658.858621][T19822] XFS (loop2): Mounting V5 Filesystem [ 659.039477][T19822] XFS (loop2): Ending clean mount [ 659.182936][ T4206] XFS (loop2): Unmounting Filesystem [ 659.757093][T19791] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 659.799146][T19791] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 8211. Fsck? [ 659.831205][T19791] REISERFS (device loop0): Remounting filesystem read-only [ 659.838429][T19791] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 659.873981][T19791] REISERFS warning (device loop0): reiserfs_fill_super: corrupt root inode, run fsck [ 660.466886][T19836] loop2: detected capacity change from 0 to 32768 [ 660.535629][T19836] XFS (loop2): Mounting V5 Filesystem [ 660.694897][T19836] XFS (loop2): Ending clean mount [ 660.811095][ T4206] XFS (loop2): Unmounting Filesystem [ 661.510921][T19848] loop2: detected capacity change from 0 to 8192 [ 661.556113][T19848] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 661.573918][T19848] REISERFS (device loop2): using ordered data mode [ 661.584477][T19848] reiserfs: using flush barriers [ 661.608234][T19848] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 661.755894][T19848] REISERFS (device loop2): checking transaction log (loop2) [ 661.915325][T19848] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 661.959025][T19848] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 661.987673][T19834] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 661.997091][T19848] REISERFS (device loop2): Remounting filesystem read-only [ 662.004659][T19848] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 662.018830][T19848] REISERFS warning (device loop2): reiserfs_fill_super: corrupt root inode, run fsck [ 662.044676][T19834] REISERFS (device loop4): using ordered data mode [ 662.051195][T19834] reiserfs: using flush barriers [ 662.114018][T19834] REISERFS (device loop4): journal params: device loop4, size 8192, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 662.176538][T19834] REISERFS (device loop4): checking transaction log (loop4) [ 662.645300][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 662.651610][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 662.704546][T19846] set_capacity_and_notify: 1 callbacks suppressed [ 662.704561][T19846] loop0: detected capacity change from 0 to 65536 [ 662.943004][T19846] XFS (loop0): Mounting V5 Filesystem [ 663.049779][T19854] loop2: detected capacity change from 0 to 32768 [ 663.136890][T19846] XFS (loop0): Ending clean mount [ 663.193444][ T4201] XFS (loop0): Unmounting Filesystem [ 663.214245][T19851] loop3: detected capacity change from 0 to 65536 [ 663.314771][T19854] XFS (loop2): Mounting V5 Filesystem [ 663.386473][T19851] XFS (loop3): Mounting V5 Filesystem [ 663.446129][T19864] loop1: detected capacity change from 0 to 32768 [ 663.555603][T19864] XFS (loop1): Mounting V5 Filesystem [ 663.564933][T19854] XFS (loop2): Ending clean mount [ 663.624759][T19851] XFS (loop3): Ending clean mount [ 663.665101][ T4206] XFS (loop2): Unmounting Filesystem [ 663.671973][ T4204] XFS (loop3): Unmounting Filesystem [ 663.819196][T19864] XFS (loop1): Ending clean mount [ 663.915695][ T4208] XFS (loop1): Unmounting Filesystem [ 664.131101][T19890] loop0: detected capacity change from 0 to 128 [ 664.165425][T19890] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 664.223603][T19890] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 665.685838][T19834] REISERFS (device loop4): Using r5 hash to sort names [ 665.716576][T19834] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 665.721432][T19892] loop0: detected capacity change from 0 to 65536 [ 665.856189][T19898] loop3: detected capacity change from 0 to 65536 [ 665.947786][T19892] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel. [ 666.013128][T19898] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel. [ 667.933525][T19912] loop3: detected capacity change from 0 to 65536 [ 668.271564][T19915] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 669.088735][T19921] loop1: detected capacity change from 0 to 8192 [ 669.184224][T19921] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 669.206023][T19921] UDF-fs: Scanning with blocksize 512 failed [ 669.240338][T19921] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 669.265442][T19910] loop0: detected capacity change from 0 to 131072 [ 669.273886][T19921] UDF-fs: Scanning with blocksize 1024 failed [ 669.281294][T19921] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 669.299942][T19921] UDF-fs: Scanning with blocksize 2048 failed [ 669.339104][T19921] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 669.548044][T19910] XFS (loop0): Mounting V5 Filesystem [ 669.960441][T19939] loop1: detected capacity change from 0 to 2048 [ 670.040423][T19910] XFS (loop0): Ending clean mount [ 670.092328][ T4201] XFS (loop0): Unmounting Filesystem [ 670.403030][T19945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6882'. [ 671.090464][T19957] loop1: detected capacity change from 0 to 64 [ 671.220332][ T25] audit: type=1800 audit(2000526002.559:35): pid=19957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6888" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 671.582698][T19969] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 671.809605][T19982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6899'. [ 671.854440][T19982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6899'. [ 671.923876][T19986] ieee802154 phy0 wpan0: encryption failed: -22 [ 672.009294][T19990] netlink: 'syz.1.6903': attribute type 1 has an invalid length. [ 672.050642][T19990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6903'. [ 672.302630][T20002] ieee802154 phy0 wpan0: encryption failed: -22 [ 673.177537][T20004] loop0: detected capacity change from 0 to 32768 [ 673.356018][T20054] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 673.389452][T20058] loop4: detected capacity change from 0 to 8 [ 673.407427][T20054] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 673.490882][T20058] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 673.520333][T20060] loop3: detected capacity change from 0 to 2048 [ 673.601435][T20024] loop2: detected capacity change from 0 to 32768 [ 673.627428][ T4178] loop3: p1 p2 p3 [ 673.689964][T20060] loop3: p1 p2 p3 [ 673.748866][T20024] XFS (loop2): Mounting V5 Filesystem [ 673.757175][T20073] loop4: detected capacity change from 0 to 128 [ 674.006507][T20024] XFS (loop2): Ending clean mount [ 674.084653][ T4614] udevd[4614]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 674.086671][ T4484] udevd[4484]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 674.105058][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 674.133269][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 674.149884][ T4484] udevd[4484]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 674.169285][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 674.247920][ T4484] udevd[4484]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 674.265280][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 674.288219][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 674.311977][ T4206] XFS (loop2): Unmounting Filesystem [ 674.490951][T20103] overlayfs: conflicting options: userxattr,redirect_dir=off [ 674.632708][T20111] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6960'. [ 674.836945][T20124] loop0: detected capacity change from 0 to 1024 [ 674.901575][T20124] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 674.946466][T20124] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 674.983977][T20124] EXT4-fs error (device loop0): ext4_get_journal_inode:5185: inode #5: comm syz.0.6966: unexpected bad inode w/o EXT4_IGET_BAD [ 675.009827][T20124] EXT4-fs (loop0): no journal found [ 675.015471][T20124] EXT4-fs (loop0): can't get journal size [ 675.022709][T20124] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,noinit_itable,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 675.212180][T20146] overlayfs: missing 'lowerdir' [ 675.288915][T20152] loop0: detected capacity change from 0 to 64 [ 675.363723][ T25] audit: type=1800 audit(2000526006.432:36): pid=20152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6978" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 675.520443][T20170] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6986'. [ 675.624750][T20179] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.6991'. [ 675.726399][T20184] loop1: detected capacity change from 0 to 2048 [ 675.743925][T20191] loop3: detected capacity change from 0 to 64 [ 675.819197][ T25] audit: type=1800 audit(2000526006.862:37): pid=20191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6997" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 675.844524][T20184] Alternate GPT is invalid, using primary GPT. [ 675.894565][T20184] loop1: p2 p3 p7 [ 675.918335][T20204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7005'. [ 676.046519][T20212] loop0: detected capacity change from 0 to 1024 [ 676.066476][T20216] loop4: detected capacity change from 0 to 128 [ 676.095440][T20212] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 676.142921][T20216] attempt to access beyond end of device [ 676.142921][T20216] loop4: rw=0, want=25676, limit=128 [ 676.176920][T20222] netlink: 'syz.2.7013': attribute type 1 has an invalid length. [ 676.201383][T20212] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 2: comm syz.0.7007: lblock 2 mapped to illegal pblock 2 (length 1) [ 676.252861][T20216] Buffer I/O error on dev loop4, logical block 12837, async page read [ 676.318945][T20212] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 676.345260][T20216] attempt to access beyond end of device [ 676.345260][T20216] loop4: rw=0, want=25676, limit=128 [ 676.359117][T20212] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.7007: lblock 0 mapped to illegal pblock 48 (length 1) [ 676.363581][T20216] Buffer I/O error on dev loop4, logical block 12837, async page read [ 676.452694][T20212] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 676.458649][ T6805] udevd[6805]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 676.530611][T20212] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.7007: Failed to acquire dquot type 0 [ 676.654394][T20212] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 676.695140][T20212] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.7007: mark_inode_dirty error [ 676.776372][T20212] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 676.814355][T20212] EXT4-fs (loop0): 1 orphan inode deleted [ 676.839845][T20212] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,noblock_validity,delalloc,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 676.868811][ T4255] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 676.904319][ T4255] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 676.914920][ T4658] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 676.931313][ T4255] EXT4-fs error (device loop0): ext4_release_dquot:6270: comm kworker/u4:6: Failed to release dquot type 0 [ 677.036388][ T893] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 677.079413][ T893] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 677.094053][T20260] loop1: detected capacity change from 0 to 512 [ 677.128932][ T893] EXT4-fs error (device loop0): ext4_release_dquot:6270: comm kworker/u4:3: Failed to release dquot type 0 [ 677.159365][ T4201] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 677.220959][T20266] loop4: detected capacity change from 0 to 8 [ 677.234698][T20260] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 677.260152][ T4201] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 677.270336][T20260] ext4 filesystem being mounted at /1522/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 677.287553][ T4201] EXT4-fs error (device loop0): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 677.364028][ T4658] usb 4-1: unable to get BOS descriptor or descriptor too short [ 677.417513][ T4658] usb 4-1: not running at top speed; connect to a high speed hub [ 677.508759][ T4658] usb 4-1: config 17 has an invalid interface number: 8 but max is 1 [ 677.536010][ T4658] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 677.549942][ T4658] usb 4-1: config 17 has no interface number 0 [ 677.557627][ T4658] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 14129, setting to 64 [ 677.599354][ T4658] usb 4-1: config 17 interface 8 has no altsetting 0 [ 677.791657][ T4658] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 677.800755][ T4658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.833583][T20299] loop4: detected capacity change from 0 to 512 [ 677.840002][ T4658] usb 4-1: Product: syz [ 677.848728][ T4658] usb 4-1: Manufacturer: syz [ 677.853658][ T4658] usb 4-1: SerialNumber: syz [ 677.958732][T20299] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 678.007388][T20299] ext4 filesystem being mounted at /1368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.026669][ T13] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 678.190142][ T4658] usb 4-1: selecting invalid altsetting 0 [ 678.192252][T20322] loop0: detected capacity change from 0 to 1024 [ 678.229299][ T4658] usb 4-1: USB disconnect, device number 39 [ 678.411982][ T13] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 678.429075][ T13] usb 3-1: config 0 has no interface number 1 [ 678.443074][ T13] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 678.458910][ T13] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 678.564233][ T13] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 678.603982][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 678.611983][ T13] usb 3-1: SerialNumber: syz [ 678.642141][ T13] usb 3-1: config 0 descriptor?? [ 678.910566][T20352] overlayfs: workdir and upperdir must be separate subtrees [ 678.967745][ T13] usb 3-1: Found UVC 0.00 device (0002:0000) [ 679.003006][ T13] usb 3-1: No valid video chain found. [ 679.037435][ T13] usb 3-1: USB disconnect, device number 43 [ 679.161214][T20361] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 679.299440][T20361] EXT4-fs (loop4): 1 truncate cleaned up [ 679.330045][T20361] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,noinit_itable,noblock_validity,,errors=continue. Quota mode: writeback. [ 679.435458][T20361] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 679.602485][T20385] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 679.939402][T20408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7100'. [ 679.963478][T20403] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 680.127171][T20403] ext4 filesystem being mounted at /1350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 680.207223][T20425] syz.1.7109 (20425): /proc/20424/oom_adj is deprecated, please use /proc/20424/oom_score_adj instead. [ 680.314457][ T26] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 680.346827][ T4174] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 680.435276][T20431] netlink: 'syz.2.7112': attribute type 32 has an invalid length. [ 680.479092][T20433] netlink: 'syz.1.7113': attribute type 1 has an invalid length. [ 680.613858][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 680.800951][T20440] set_capacity_and_notify: 3 callbacks suppressed [ 680.800967][T20440] loop0: detected capacity change from 0 to 8192 [ 680.806380][ T4174] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 680.848671][ T4174] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 680.859918][ T26] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 680.896639][T20440] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 680.901786][ T26] usb 4-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 680.926637][T20440] REISERFS (device loop0): using ordered data mode [ 680.927932][ T4174] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 680.933142][T20440] reiserfs: using flush barriers [ 680.969176][T20440] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 681.052547][T20440] REISERFS (device loop0): checking transaction log (loop0) [ 681.065081][T20440] REISERFS (device loop0): Using r5 hash to sort names [ 681.071717][ T26] usb 4-1: Product: syz [ 681.072222][T20440] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 681.109466][ T26] usb 4-1: config 0 descriptor?? [ 681.122335][ T4174] usb 5-1: config 0 has no interface number 0 [ 681.123261][T20440] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 681.172050][ T4174] usb 5-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 12288, setting to 64 [ 681.226648][ T4174] usb 5-1: config 0 interface 104 has no altsetting 1 [ 681.434320][ T26] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input46 [ 681.464929][T20465] loop0: detected capacity change from 0 to 8 [ 681.485058][ T4174] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 681.501233][ T4174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.511628][ T4174] usb 5-1: Product: syz [ 681.531677][ T4174] usb 5-1: Manufacturer: syz [ 681.541759][ T4174] usb 5-1: SerialNumber: syz [ 681.562746][ T4174] usb 5-1: config 0 descriptor?? [ 681.641195][ T4174] asix: probe of 5-1:0.104 failed with error -22 [ 681.672659][ T4659] usb 4-1: USB disconnect, device number 40 [ 681.706305][T20470] netlink: 'syz.2.7131': attribute type 10 has an invalid length. [ 681.723277][T20470] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7131'. [ 681.735593][T20470] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 681.917918][T15655] usb 5-1: USB disconnect, device number 19 [ 682.163986][T20492] netlink: 'syz.0.7139': attribute type 13 has an invalid length. [ 682.195493][T20492] gretap0: refused to change device tx_queue_len [ 682.208486][T20492] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 682.392433][T20472] loop1: detected capacity change from 0 to 32768 [ 682.448114][T20508] usb usb8: usbfs: process 20508 (syz.2.7147) did not claim interface 32 before use [ 682.494351][T20472] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 682.546210][T20472] (syz.1.7133,20472,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 682.581298][T20472] (syz.1.7133,20472,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 682.590010][T20472] (syz.1.7133,20472,1):ocfs2_mknod:298 ERROR: status = -2 [ 682.632956][T20472] (syz.1.7133,20472,0):ocfs2_mknod:502 ERROR: status = -2 [ 682.640255][T20472] (syz.1.7133,20472,0):ocfs2_create:676 ERROR: status = -2 [ 682.673401][T20516] loop3: detected capacity change from 0 to 4096 [ 682.741813][T20516] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 682.761620][ T4208] ocfs2: Unmounting device (7,1) on (node local) [ 683.122070][T20547] device veth1 entered promiscuous mode [ 683.319634][T20555] loop4: detected capacity change from 0 to 4096 [ 683.382092][T20569] netlink: 'syz.0.7172': attribute type 1 has an invalid length. [ 683.435698][T20555] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 683.716016][T20593] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7184'. [ 684.006181][T20610] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 684.127277][T20589] loop3: detected capacity change from 0 to 32768 [ 684.185380][T20589] JBD2: Ignoring recovery information on journal [ 684.185601][ T4659] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 684.236500][T20589] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 684.266757][T20589] OCFS2: ERROR (device loop3): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 684.266865][T20589] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 684.292643][T20589] OCFS2: File system is now read-only. [ 684.298114][T20589] (syz.3.7181,20589,0):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 684.313026][T20589] (syz.3.7181,20589,1):ocfs2_mknod:334 ERROR: status = -117 [ 684.333738][T20589] (syz.3.7181,20589,1):ocfs2_mknod:502 ERROR: status = -117 [ 684.353240][T20589] (syz.3.7181,20589,0):ocfs2_mkdir:659 ERROR: status = -117 [ 684.442706][ T4204] ocfs2: Unmounting device (7,3) on (node local) [ 684.446540][T20630] loop1: detected capacity change from 0 to 1024 [ 684.466885][ T4659] usb 5-1: Using ep0 maxpacket: 32 [ 684.526621][T20630] hfsplus: invalid length 32517 has been corrected to 255 [ 684.632272][T20636] loop0: detected capacity change from 0 to 128 [ 684.710213][T20636] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,sysvgroups,,errors=continue. Quota mode: none. [ 684.725496][T20636] ext4 filesystem being mounted at /1386/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 684.765879][T20636] EXT4-fs error (device loop0): __ext4_new_inode:1076: comm syz.0.7206: reserved inode found cleared - inode=2 [ 684.793954][ T4659] usb 5-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=1a.51 [ 684.803052][ T4659] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.811236][ T4659] usb 5-1: Product: syz [ 684.815460][ T4659] usb 5-1: Manufacturer: syz [ 684.820050][ T4659] usb 5-1: SerialNumber: syz [ 684.820383][T20647] loop3: detected capacity change from 0 to 256 [ 684.826850][ T4659] usb 5-1: config 0 descriptor?? [ 684.870624][ T4659] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 684.963011][T20647] FAT-fs (loop3): Directory bread(block 64) failed [ 684.981104][T20647] FAT-fs (loop3): Directory bread(block 65) failed [ 685.001672][T20647] FAT-fs (loop3): Directory bread(block 66) failed [ 685.019222][T20659] xt_recent: hitcount (4294967295) is larger than allowed maximum (255) [ 685.027681][T20647] FAT-fs (loop3): Directory bread(block 67) failed [ 685.046348][T20647] FAT-fs (loop3): Directory bread(block 68) failed [ 685.063561][T20647] FAT-fs (loop3): Directory bread(block 69) failed [ 685.090223][T20647] FAT-fs (loop3): Directory bread(block 70) failed [ 685.099087][ T4659] gspca_sn9c2028: read1 error -71 [ 685.115162][T20647] FAT-fs (loop3): Directory bread(block 71) failed [ 685.125386][ T4659] gspca_sn9c2028: read1 error -71 [ 685.138515][T20647] FAT-fs (loop3): Directory bread(block 72) failed [ 685.146830][ T4659] gspca_sn9c2028: read1 error -71 [ 685.151933][ T4659] sn9c2028: probe of 5-1:0.0 failed with error -71 [ 685.169859][T20647] FAT-fs (loop3): Directory bread(block 73) failed [ 685.176595][ T4659] usb 5-1: USB disconnect, device number 20 [ 685.322821][T20674] netlink: 'syz.0.7222': attribute type 1 has an invalid length. [ 685.353204][T20674] netlink: 'syz.0.7222': attribute type 3 has an invalid length. [ 685.397040][T20674] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7222'. [ 685.595028][T20686] loop1: detected capacity change from 0 to 1024 [ 685.604820][T20689] netlink: 'syz.0.7229': attribute type 1 has an invalid length. [ 685.843718][T20704] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7237'. [ 685.887639][T20704] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 685.924270][T20712] netlink: 'syz.4.7240': attribute type 9 has an invalid length. [ 685.948418][T20712] netlink: 'syz.4.7240': attribute type 6 has an invalid length. [ 685.980774][T20715] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7241'. [ 686.030301][T20711] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 686.115393][T20711] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 686.162295][T20711] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 686.221032][T20711] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 686.243050][T20711] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 686.279122][T20711] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 686.304155][T20711] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 686.356521][T20711] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 686.370716][T20737] ipt_CLUSTERIP: Please specify destination IP [ 686.377862][ T4659] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 686.393474][T20711] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 686.444933][T20711] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 686.455934][T20740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7254'. [ 686.480201][T20711] ntfs: volume version 3.1. [ 686.723078][T20748] set_capacity_and_notify: 1 callbacks suppressed [ 686.723094][T20748] loop1: detected capacity change from 0 to 4096 [ 686.729095][ T4659] usb 5-1: not running at top speed; connect to a high speed hub [ 686.846622][ T4659] usb 5-1: config 11 has an invalid interface number: 95 but max is 0 [ 686.854843][ T4659] usb 5-1: config 11 has no interface number 0 [ 686.892201][ T4659] usb 5-1: config 11 interface 95 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 686.926497][T20760] loop3: detected capacity change from 0 to 256 [ 686.934229][ T4659] usb 5-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 686.958477][ T4659] usb 5-1: config 11 interface 95 has no altsetting 0 [ 687.049705][ T4659] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 687.069113][T20760] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 687.069621][ T4659] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 687.121913][ T4659] usb 5-1: Manufacturer: syz [ 687.178057][T20722] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 687.327670][ T4655] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 687.381745][T20782] loop3: detected capacity change from 0 to 64 [ 687.500223][ T4659] usbtouchscreen: probe of 5-1:11.95 failed with error -8 [ 687.540069][ T4659] usb 5-1: USB disconnect, device number 21 [ 687.594768][T20794] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 687.597692][ T4655] usb 2-1: Using ep0 maxpacket: 32 [ 687.622264][T20794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 687.635440][T20794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 687.737257][T20798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7281'. [ 687.765411][T20802] netlink: 'syz.3.7283': attribute type 1 has an invalid length. [ 687.765469][T20802] netlink: 'syz.3.7283': attribute type 3 has an invalid length. [ 687.765485][T20802] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7283'. [ 687.819454][ T4655] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 687.819484][ T4655] usb 2-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 687.819505][ T4655] usb 2-1: Product: syz [ 687.821311][ T4655] usb 2-1: config 0 descriptor?? [ 687.904143][T20804] loop3: detected capacity change from 0 to 4096 [ 687.988455][T20810] netlink: 'syz.2.7286': attribute type 3 has an invalid length. [ 688.019982][T20810] netlink: 'syz.2.7286': attribute type 1 has an invalid length. [ 688.098295][ T4655] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input48 [ 688.163107][T20818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7290'. [ 688.186409][T20818] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7290'. [ 688.359258][ T13] usb 2-1: USB disconnect, device number 31 [ 688.370230][ T26] Bluetooth: hci4: command 0x0405 tx timeout [ 688.489022][T20825] netlink: 'syz.4.7295': attribute type 1 has an invalid length. [ 688.524792][T20825] netlink: 'syz.4.7295': attribute type 3 has an invalid length. [ 688.541791][T20825] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7295'. [ 688.692394][T20840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7303'. [ 688.751906][T20840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7303'. [ 688.835983][T20846] loop2: detected capacity change from 0 to 1764 [ 688.938606][T20846] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 689.258612][T20862] loop0: detected capacity change from 0 to 4096 [ 689.366148][T20881] netlink: 'syz.1.7324': attribute type 7 has an invalid length. [ 689.385533][T20862] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 689.647357][ T4659] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 689.806791][T20866] loop4: detected capacity change from 0 to 32768 [ 689.846905][T20866] XFS: attr2 mount option is deprecated. [ 689.887265][T20907] loop3: detected capacity change from 0 to 512 [ 689.933859][T20866] XFS (loop4): Mounting V5 Filesystem [ 689.970481][T20907] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 690.042081][T20907] ext4 filesystem being mounted at /1423/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 690.055956][ T4659] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 690.088920][ T4659] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.089259][T20896] loop0: detected capacity change from 0 to 32768 [ 690.177700][ T4659] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 690.193317][T20896] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 690.240586][T20896] (syz.0.7329,20896,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 690.262673][ T4659] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.309142][T20866] XFS (loop4): Ending clean mount [ 690.322159][T20896] (syz.0.7329,20896,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 690.326236][T20866] XFS (loop4): Quotacheck needed: Please wait. [ 690.341924][T20896] (syz.0.7329,20896,1):ocfs2_mknod:298 ERROR: status = -2 [ 690.349161][T20896] (syz.0.7329,20896,1):ocfs2_mknod:502 ERROR: status = -2 [ 690.360190][ T4659] hub 3-1:4.0: USB hub found [ 690.371605][T20896] (syz.0.7329,20896,1):ocfs2_create:676 ERROR: status = -2 [ 690.400338][T20866] XFS (loop4): Quotacheck: Done. [ 690.536740][T20922] loop1: detected capacity change from 0 to 32768 [ 690.549447][ T4201] ocfs2: Unmounting device (7,0) on (node local) [ 690.561661][ T4197] XFS (loop4): Unmounting Filesystem [ 690.598876][ T4659] hub 3-1:4.0: 2 ports detected [ 690.603784][ T4659] usb 3-1: selecting invalid altsetting 1 [ 690.618054][ T4659] hub 3-1:4.0: Using single TT (err -22) [ 690.628225][T20926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7340'. [ 690.689031][T20922] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 690.823416][ T4659] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 690.830116][ T4659] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 690.860372][T20935] program syz.0.7343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 690.888571][ T4659] usb 3-1: USB disconnect, device number 44 [ 690.959597][ T4208] ocfs2: Unmounting device (7,1) on (node local) [ 691.035634][T20943] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 691.063233][T20943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 691.072590][T20943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 691.224087][T20947] hsr0: VLAN not yet supported [ 691.233108][T20945] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 691.268792][T20945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 691.330582][T15655] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 691.514181][ T9] hfsplus: b-tree write err: -5, ino 25 [ 691.521110][ T9] hfsplus: b-tree write err: -5, ino 4 [ 691.542632][ T9] hfsplus: b-tree write err: -5, ino 2 [ 691.545029][ T13] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 691.603948][T15655] usb 4-1: Using ep0 maxpacket: 8 [ 691.715272][T20969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7360'. [ 691.748234][T15655] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 691.767734][T15655] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.779024][T15655] usb 4-1: config 0 has no interface number 0 [ 691.962006][ T13] usb 1-1: config 5 has an invalid interface number: 182 but max is 0 [ 691.970306][ T13] usb 1-1: config 5 has no interface number 0 [ 691.984313][ T13] usb 1-1: config 5 interface 182 altsetting 1 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 691.995598][ T13] usb 1-1: config 5 interface 182 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 692.008192][ T13] usb 1-1: config 5 interface 182 has no altsetting 0 [ 692.010178][T15655] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 692.045848][T15655] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.060483][T15655] usb 4-1: Product: syz [ 692.065065][T15655] usb 4-1: Manufacturer: syz [ 692.069833][T15655] usb 4-1: SerialNumber: syz [ 692.079040][T15655] usb 4-1: config 0 descriptor?? [ 692.106200][ T4655] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 692.181287][ T13] usb 1-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=38.5e [ 692.191780][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.199780][ T13] usb 1-1: Product: syz [ 692.204572][ T13] usb 1-1: Manufacturer: syz [ 692.209172][ T13] usb 1-1: SerialNumber: syz [ 692.246168][ T4174] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 692.352263][T15655] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 692.358638][T15655] usb 4-1: No valid video chain found. [ 692.375338][ T4655] usb 3-1: Using ep0 maxpacket: 32 [ 692.501771][ T4174] usb 2-1: Using ep0 maxpacket: 16 [ 692.584986][ T5139] usb 4-1: USB disconnect, device number 41 [ 692.600011][ T13] radio-si470x 1-1:5.182: could not find interrupt in endpoint [ 692.607680][ T13] radio-si470x: probe of 1-1:5.182 failed with error -5 [ 692.614968][ T13] usbhid 1-1:5.182: couldn't find an input interrupt endpoint [ 692.622711][ T4655] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 692.633968][ T13] usb 1-1: USB disconnect, device number 47 [ 692.640913][ T4655] usb 3-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 692.648923][ T4655] usb 3-1: Product: syz [ 692.658239][ T4655] usb 3-1: config 0 descriptor?? [ 692.801179][ T4174] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 692.810238][ T4174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.818758][ T4174] usb 2-1: Product: syz [ 692.823005][ T4174] usb 2-1: Manufacturer: syz [ 692.827593][ T4174] usb 2-1: SerialNumber: syz [ 692.833825][ T4174] r8152-cfgselector 2-1: config 0 descriptor?? [ 692.941874][ T4655] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input49 [ 693.129641][T20995] set_capacity_and_notify: 3 callbacks suppressed [ 693.129656][T20995] loop0: detected capacity change from 0 to 4096 [ 693.170835][T15655] usb 3-1: USB disconnect, device number 45 [ 693.347497][ T4174] r8152-cfgselector 2-1: Unknown version 0x0000 [ 693.357645][ T4174] r8152-cfgselector 2-1: bad CDC descriptors [ 693.398569][ T4174] r8152-cfgselector 2-1: Unknown version 0x0000 [ 693.416774][ T4174] r8152-cfgselector 2-1: USB disconnect, device number 32 [ 693.519768][ T4655] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 693.934491][ T4655] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 693.958666][ T4655] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 693.996696][ T4655] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 694.003892][T21055] x_tables: duplicate underflow at hook 2 [ 694.026147][ T4655] usb 4-1: config 220 has no interface number 2 [ 694.033903][ T4655] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 694.048426][ T4655] usb 4-1: config 220 interface 0 has no altsetting 0 [ 694.055541][ T4655] usb 4-1: config 220 interface 76 has no altsetting 0 [ 694.086504][ T4655] usb 4-1: config 220 interface 1 has no altsetting 0 [ 694.117341][T21060] mmap: syz.4.7400 (21060): VmData 37466112 exceed data ulimit 2840. Update limits or use boot option ignore_rlimit_data. [ 694.309288][ T4655] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 694.319169][ T4655] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.327163][ T4655] usb 4-1: Product: syz [ 694.342873][T21074] loop4: detected capacity change from 0 to 1764 [ 694.351177][ T4655] usb 4-1: Manufacturer: syz [ 694.355901][ T4655] usb 4-1: SerialNumber: syz [ 694.731255][T21075] loop0: detected capacity change from 0 to 32768 [ 694.779113][ T4655] usb 4-1: selecting invalid altsetting 0 [ 694.794548][ T4655] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 694.804257][ T4655] usb 4-1: No valid video chain found. [ 694.865531][T21101] loop1: detected capacity change from 0 to 256 [ 694.887231][T21075] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 694.901783][ T5139] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 694.919089][ T4655] usb 4-1: selecting invalid altsetting 0 [ 694.924876][ T4655] usbtest: probe of 4-1:220.1 failed with error -22 [ 694.952004][ T4655] usb 4-1: USB disconnect, device number 42 [ 694.967503][T21101] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 695.076027][ T4201] ocfs2: Unmounting device (7,0) on (node local) [ 695.163693][ T5139] usb 5-1: Using ep0 maxpacket: 32 [ 695.292258][ T5139] usb 5-1: config 15 has an invalid interface number: 78 but max is 1 [ 695.312874][ T5139] usb 5-1: config 15 has an invalid interface number: 2 but max is 1 [ 695.353746][ T5139] usb 5-1: config 15 has no interface number 0 [ 695.380560][ T5139] usb 5-1: config 15 has no interface number 1 [ 695.397652][ T5139] usb 5-1: config 15 interface 78 has no altsetting 0 [ 695.429977][ T5139] usb 5-1: config 15 interface 2 has no altsetting 0 [ 695.522691][T21129] device vlan0 entered promiscuous mode [ 695.612986][ T5139] usb 5-1: New USB device found, idVendor=413c, idProduct=81cf, bcdDevice=d4.09 [ 695.637838][ T5139] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.661444][ T5139] usb 5-1: Product: syz [ 695.668796][ T5139] usb 5-1: Manufacturer: syz [ 695.674221][ T5139] usb 5-1: SerialNumber: syz [ 695.792077][T21145] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7442'. [ 695.823049][T21145] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7442'. [ 695.863296][T21145] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7442'. [ 695.896740][T21145] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7442'. [ 695.937435][T21145] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7442'. [ 695.970316][T21145] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7442'. [ 696.002568][T21145] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7442'. [ 696.031121][T21145] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7442'. [ 696.060368][T21145] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7442'. [ 696.073484][ T5139] usb 5-1: selecting invalid altsetting 0 [ 696.079221][ T5139] usb 5-1: Could not set interface, error -22 [ 696.104942][T21145] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7442'. [ 696.116473][ T5139] usb 5-1: USB disconnect, device number 22 [ 696.339482][T21143] loop1: detected capacity change from 0 to 32768 [ 696.343099][T21133] loop0: detected capacity change from 0 to 40427 [ 696.366580][T21159] loop3: detected capacity change from 0 to 4096 [ 696.379885][T21143] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.7441 (21143) [ 696.401785][T21143] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 696.425705][T21143] BTRFS info (device loop1): force clearing of disk cache [ 696.433246][T21133] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 696.447603][T21133] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 696.469700][T21143] BTRFS info (device loop1): metadata ratio 0 [ 696.481607][T21159] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 696.502008][T21143] BTRFS info (device loop1): enabling ssd optimizations [ 696.514872][T21133] F2FS-fs (loop0): invalid crc value [ 696.527175][T21143] BTRFS info (device loop1): using spread ssd allocation scheme [ 696.542616][T21133] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 696.564570][T21159] ntfs3: loop3: Failed to load $Extend. [ 696.592624][T21143] BTRFS info (device loop1): using free space tree [ 696.635710][T21143] BTRFS info (device loop1): has skinny extents [ 696.667679][T21133] F2FS-fs (loop0): Found nat_bits in checkpoint [ 696.864994][T21133] F2FS-fs (loop0): recover fsync data on readonly fs [ 696.892053][T21133] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30 [ 696.906241][T21133] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 696.935766][T21143] BTRFS info (device loop1): clearing free space tree [ 696.970476][T21143] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 696.980129][T21143] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 697.167361][T21143] BTRFS info (device loop1): creating free space tree [ 697.230106][T21143] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 697.242840][T21214] loop3: detected capacity change from 0 to 512 [ 697.245549][T21216] netlink: 'syz.0.7466': attribute type 2 has an invalid length. [ 697.262959][T21217] 9p: Unknown access argument Ø [ 697.276446][T21143] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 697.350650][T21214] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 697.359511][T21143] BTRFS error (device loop1): balance: mixed groups data and metadata options must be the same [ 697.438784][T21214] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.7464: bg 0: block 104: invalid block bitmap [ 697.473129][T21214] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 697.535299][T21214] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.7464: invalid indirect mapped block 1 (level 1) [ 697.562999][T21214] EXT4-fs (loop3): 1 truncate cleaned up [ 697.568743][T21214] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 698.114341][ T4654] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 698.120104][T21247] loop0: detected capacity change from 0 to 2048 [ 698.229251][T21247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 698.263638][T21261] ceph: No source [ 698.374900][T21259] loop3: detected capacity change from 0 to 4096 [ 698.410534][ T4654] usb 3-1: Using ep0 maxpacket: 8 [ 698.419324][T21259] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 698.528864][T21273] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 698.584866][ T4654] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 698.592904][ T4654] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 698.607509][ T4654] usb 3-1: config 6 has no interface number 0 [ 698.613640][ T4654] usb 3-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 698.820113][ T4654] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 698.833625][ T4654] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 698.872344][ T4654] usb 3-1: Product: syz [ 698.893043][ T4654] usb 3-1: Manufacturer: syz [ 698.908134][ T4654] usb 3-1: SerialNumber: syz [ 698.997461][ T4654] hso 3-1:6.2: Failed to find INT IN ep [ 699.108559][ T13] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 699.231959][ T4654] usb 3-1: USB disconnect, device number 46 [ 699.397301][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 699.405387][T21327] device vlan0 entered promiscuous mode [ 699.443657][T21329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.471087][T21329] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 699.508732][T21329] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 699.525661][ T13] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 699.533660][ T13] usb 1-1: config 0 has no interface number 0 [ 699.597175][ T13] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 699.627538][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.660321][ T13] usb 1-1: config 0 descriptor?? [ 699.678444][T21343] loop4: detected capacity change from 0 to 1024 [ 699.766515][T21345] loop3: detected capacity change from 0 to 4096 [ 699.819435][T21345] __ntfs_error: 11 callbacks suppressed [ 699.819450][T21345] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 699.921113][T21345] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 699.983099][T21345] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 699.992207][ T13] usb 1-1: USB disconnect, device number 48 [ 700.079458][T21364] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 700.092617][T21345] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 700.132823][T21345] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 700.205466][T21345] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 700.292597][T21345] ntfs: volume version 3.1. [ 700.304078][T21345] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 700.307419][T21371] loop4: detected capacity change from 0 to 1764 [ 700.352355][T21345] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 700.423217][T21345] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 700.461428][T21345] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 700.479979][T21371] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 701.230556][T21444] affs: No valid root block on device nbd0 [ 701.691091][T21473] __nla_validate_parse: 57 callbacks suppressed [ 701.691108][T21473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7573'. [ 701.731353][T21473] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7573'. [ 701.781488][T21473] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7573'. [ 701.820161][T21473] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7573'. [ 701.857927][T21476] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 701.891498][T21476] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 702.027085][T15655] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 702.375481][T21511] netlink: 'syz.2.7591': attribute type 1 has an invalid length. [ 702.391720][T21511] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7591'. [ 702.422828][T15655] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 702.432574][T15655] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 702.458649][T21482] loop4: detected capacity change from 0 to 32768 [ 702.463882][T15655] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 702.486634][T15655] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 702.496537][T15655] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 702.535596][T15655] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.544413][T21482] (syz.4.7580,21482,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 702.546390][T15655] usb 4-1: config 0 descriptor?? [ 702.573392][T21482] (syz.4.7580,21482,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 702.620432][T21482] JBD2: Ignoring recovery information on journal [ 702.682476][T21482] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 702.746356][T21506] loop1: detected capacity change from 0 to 32768 [ 702.794795][ T4197] ocfs2: Unmounting device (7,4) on (node local) [ 702.805872][T21506] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.7588 (21506) [ 702.839803][T15655] hdpvr 4-1:0.0: firmware version 0x0 dated [ 702.846115][T15655] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 702.854628][T21506] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 702.865733][T21506] BTRFS info (device loop1): using free space tree [ 702.901429][T21506] BTRFS info (device loop1): has skinny extents [ 703.020717][T21506] BTRFS info (device loop1): enabling ssd optimizations [ 703.076405][T15655] hdpvr 4-1:0.0: device init failed [ 703.081878][T15655] hdpvr: probe of 4-1:0.0 failed with error -12 [ 703.151225][T21539] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 703.183281][T15655] usb 4-1: USB disconnect, device number 43 [ 703.249104][ T5739] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (5739) [ 703.308945][T21544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7592'. [ 703.339757][T21544] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7592'. [ 703.345609][T21545] loop2: detected capacity change from 0 to 1024 [ 703.358853][T21544] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7592'. [ 703.443367][T21544] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7592'. [ 703.755166][T21565] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7606'. [ 703.789999][T21569] netlink: 'syz.4.7607': attribute type 11 has an invalid length. [ 703.902767][T21575] loop1: detected capacity change from 0 to 1024 [ 703.929667][T21580] loop0: detected capacity change from 0 to 16 [ 704.019303][T21580] erofs: (device loop0): mounted with root inode @ nid 36. [ 704.246633][T21605] netlink: 'syz.3.7626': attribute type 10 has an invalid length. [ 704.297931][T21609] netlink: 'syz.4.7628': attribute type 2 has an invalid length. [ 704.374443][T21605] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 704.464435][T21623] netlink: 'syz.1.7635': attribute type 1 has an invalid length. [ 704.504640][T21623] netlink: 'syz.1.7635': attribute type 2 has an invalid length. [ 704.572046][T21623] netlink: 'syz.1.7635': attribute type 1 has an invalid length. [ 705.168880][T21679] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 705.848921][T21670] loop1: detected capacity change from 0 to 32768 [ 705.902360][T21670] (syz.1.7659,21670,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 705.947094][T21670] (syz.1.7659,21670,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 706.055346][T21670] JBD2: Ignoring recovery information on journal [ 706.089002][T21740] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 706.253207][T21670] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 706.345114][T21744] loop2: detected capacity change from 0 to 4096 [ 706.423390][T21744] __ntfs_error: 7 callbacks suppressed [ 706.423413][T21744] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 706.530377][ T4208] ocfs2: Unmounting device (7,1) on (node local) [ 706.549465][T21744] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 706.683213][T21744] ntfs: volume version 3.1. [ 706.716437][T21744] ntfs: (device loop2): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 706.716509][T21744] ntfs: (device loop2): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 706.716526][T21744] ntfs: (device loop2): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 706.756197][T21744] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Found already allocated name in phase 2. Please run chkdsk and if that doesn't find any errors please report you saw this message to linux-ntfs-dev@lists.sourceforge.net. [ 706.756294][T21744] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 706.756330][T21744] ntfs: (device loop2): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 706.772275][T21765] loop0: detected capacity change from 0 to 1024 [ 707.199367][T11738] hfsplus: b-tree write err: -5, ino 25 [ 707.217664][T11738] hfsplus: b-tree write err: -5, ino 4 [ 707.233046][T11738] hfsplus: b-tree write err: -5, ino 2 [ 707.458194][T15655] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 707.555133][ T5139] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 707.690086][T21824] [U] .Ž§hòÛ0FƒwZ,ßúiŒqg«ƒÛÒV2ÆôsO¾½ [ 707.707800][T21824] [U] …¥` w*ÌÀBØBOLhUÇ [ 707.712320][T21824] [U] w$·nÓ|ÝÅ#‘±%o.z\ï̧mРûàw [ 707.728728][T21824] [U] ÁóàR{ê«¢þ S„ðì [ 707.739615][T21824] [U] [ 707.742328][T21824] [U] [ 707.745024][T21824] [U] [ 707.753767][T21824] [U] [ 707.756480][T21824] [U] [ 707.759170][T21824] [U] [ 707.761860][T21824] [U] [ 707.766202][T21824] [U] [ 707.768904][T21824] [U] [ 707.771599][T21824] [U] [ 707.774291][T21824] [U] [ 707.784481][T21824] [U] [ 707.787189][T21824] [U] [ 707.789882][T21824] [U] [ 707.792574][T21824] [U] [ 707.824938][T21824] [U] [ 707.827650][T21824] [U] [ 707.830338][T21824] [U] [ 707.833029][T21824] [U] [ 707.843163][T15655] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 707.858884][T15655] usb 4-1: config 0 has no interface number 0 [ 707.873732][T15655] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 707.888842][T21824] [U] [ 707.891555][T21824] [U] [ 707.894251][T21824] [U] [ 707.896038][T15655] usb 4-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 707.896940][T21824] [U] [ 707.915506][T21836] netlink: 'syz.1.7729': attribute type 2 has an invalid length. [ 707.917123][T21824] [U] [ 707.925905][T21824] [U] [ 707.928594][T21824] [U] [ 707.931280][T21824] [U] [ 707.933968][T21824] [U] [ 707.955224][ T5139] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 707.968081][ T5139] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 707.984759][ T5139] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 707.992982][T21824] [U] [ 707.996474][T21824] [U] [ 707.999158][ T5139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.999168][T21824] [U] [ 708.009794][T21824] [U] [ 708.019601][T21824] [U] [ 708.022311][T21824] [U] [ 708.025004][T21824] [U] [ 708.027694][T21824] [U] [ 708.031369][T21824] [U] [ 708.034073][T21824] [U] [ 708.036768][T21824] [U] [ 708.039460][T21824] [U] [ 708.043792][ T5139] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 708.051588][T21824] [U] [ 708.054300][T21824] [U] [ 708.056990][T21824] [U] [ 708.059678][T21824] [U] [ 708.071093][T21824] [U] [ 708.073794][T21824] [U] [ 708.076480][T21824] [U] [ 708.079171][T21824] [U] [ 708.101653][T15655] usb 4-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 708.116818][T21824] [U] [ 708.119527][T21824] [U] [ 708.121600][T15655] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.122211][T21824] [U] [ 708.130154][T15655] usb 4-1: Product: syz [ 708.132826][T21824] [U] [ 708.139653][T21824] [U] [ 708.142433][T21824] [U] [ 708.145121][T21824] [U] [ 708.147810][T21824] [U] [ 708.151002][T21824] [U] [ 708.153702][T21824] [U] [ 708.156390][T21824] [U] [ 708.159081][T21824] [U] [ 708.162293][T21824] [U] [ 708.164991][T21824] [U] [ 708.167571][T15655] usb 4-1: Manufacturer: syz [ 708.167674][T21824] [U] [ 708.172227][T15655] usb 4-1: SerialNumber: syz [ 708.174896][T21824] [U] [ 708.205091][T15655] usb 4-1: config 0 descriptor?? [ 708.206360][T21824] [U] [ 708.212729][T21824] [U] [ 708.215423][T21824] [U] [ 708.218118][T21824] [U] [ 708.226832][T21824] [U] [ 708.229544][T21824] [U] [ 708.232235][T21824] [U] [ 708.234930][T21824] [U] [ 708.238566][T21824] [U] [ 708.241272][T21824] [U] [ 708.243962][T21824] [U] [ 708.246648][T21824] [U] [ 708.250632][T21824] [U] [ 708.253332][T21824] [U] [ 708.256022][T21824] [U] [ 708.258713][T21824] [U] [ 708.260565][T15655] vmk80xx 4-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 708.275783][T21824] [U] [ 708.278485][T21824] [U] [ 708.281179][T21824] [U] [ 708.283869][T21824] [U] [ 708.284281][T15655] vmk80xx: probe of 4-1:0.255 failed with error -22 [ 708.292955][T21824] [U] [ 708.295805][T21824] [U] [ 708.298496][T21824] [U] [ 708.301192][T21824] [U] [ 708.335560][T21824] [U] [ 708.338264][T21824] [U] [ 708.340955][T21824] [U] [ 708.343642][T21824] [U] [ 708.358741][T21824] [U] [ 708.361450][T21824] [U] [ 708.364143][T21824] [U] [ 708.366835][T21824] [U] [ 708.382659][T21824] [U] [ 708.385365][T21824] [U] [ 708.388054][T21824] [U] [ 708.390741][T21824] [U] [ 708.400051][T21824] [U] [ 708.402759][T21824] [U] [ 708.405453][T21824] [U] [ 708.408148][T21824] [U] [ 708.417176][T21824] [U] [ 708.419882][T21824] [U] [ 708.422573][T21824] [U] [ 708.425262][T21824] [U] [ 708.434162][T21852] loop1: detected capacity change from 0 to 64 [ 708.440934][T21824] [U] [ 708.443635][T21824] [U] [ 708.446328][T21824] [U] [ 708.449016][T21824] [U] [ 708.454267][T21824] [U] [ 708.456971][T21824] [U] [ 708.459659][T21824] [U] [ 708.462349][T21824] [U] [ 708.465271][T21824] [U] [ 708.467970][T21824] [U] [ 708.470660][T21824] [U] [ 708.473354][T21824] [U] [ 708.476637][T21824] [U] [ 708.479344][T21824] [U] [ 708.482037][T21824] [U] [ 708.484730][T21824] [U] [ 708.489112][T21824] [U] [ 708.491816][T21824] [U] [ 708.494512][T21824] [U] [ 708.516778][ T4660] usb 4-1: USB disconnect, device number 44 [ 708.527455][ T5139] gspca_sn9c2028: read1 error -71 [ 708.541650][T21852] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 708.550271][ T5139] gspca_sn9c2028: read1 error -71 [ 708.555338][ T5139] sn9c2028: probe of 5-1:220.0 failed with error -71 [ 708.593014][ T5139] usb 5-1: USB disconnect, device number 23 [ 708.598023][T21844] loop0: detected capacity change from 0 to 32768 [ 708.631466][T21823] [U] [ 708.642483][T21844] (syz.0.7733,21844,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 708.666668][T21844] (syz.0.7733,21844,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 708.745672][T21844] JBD2: Ignoring recovery information on journal [ 708.746841][T21856] __nla_validate_parse: 3 callbacks suppressed [ 708.746853][T21856] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7738'. [ 708.801351][T21844] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 708.862506][T21861] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7740'. [ 708.987765][T21869] device veth1_vlan left promiscuous mode [ 709.096725][ T4201] ocfs2: Unmounting device (7,0) on (node local) [ 709.138645][T21875] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7749'. [ 709.396218][T21890] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 709.733637][T21921] loop0: detected capacity change from 0 to 512 [ 709.751601][T21919] ip6t_srh: unknown srh match flags 4000 [ 709.788484][T21921] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 709.788484][T21921] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 709.788484][T21921] [ 709.854430][T21929] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7773'. [ 709.914494][T21921] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouser_xattr,usrjquota=,,errors=continue. Quota mode: writeback. [ 709.934414][T21921] ext4 filesystem being mounted at /1517/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 710.077241][T15655] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 710.100971][T21945] netlink: 'syz.4.7780': attribute type 21 has an invalid length. [ 710.108968][T21945] netlink: 'syz.4.7780': attribute type 1 has an invalid length. [ 710.241240][T21955] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7784'. [ 710.261496][T21955] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7784'. [ 710.444654][T21971] loop4: detected capacity change from 0 to 1024 [ 710.458174][T21970] loop3: detected capacity change from 0 to 1024 [ 710.475577][ T4660] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 710.494808][T15655] usb 3-1: config 0 has an invalid interface number: 229 but max is 0 [ 710.515566][T21971] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 710.516556][T15655] usb 3-1: config 0 has no interface number 0 [ 710.529220][T21971] hfsplus: xattr searching failed [ 710.545429][T21971] attempt to access beyond end of device [ 710.545429][T21971] loop4: rw=0, want=917506, limit=1024 [ 710.559140][T15655] usb 3-1: config 0 interface 229 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 710.573870][T21971] Buffer I/O error on dev loop4, logical block 458752, async page read [ 710.574058][ T1428] hfsplus: b-tree write err: -5, ino 25 [ 710.582582][T21971] attempt to access beyond end of device [ 710.582582][T21971] loop4: rw=0, want=917506, limit=1024 [ 710.591445][ T1428] hfsplus: b-tree write err: -5, ino 4 [ 710.609836][ T1428] hfsplus: b-tree write err: -5, ino 2 [ 710.613947][T21971] Buffer I/O error on dev loop4, logical block 458752, async page read [ 710.664830][T21981] loop1: detected capacity change from 0 to 1024 [ 710.748996][T15655] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 710.781058][T15655] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.793659][ T4660] usb 1-1: Using ep0 maxpacket: 32 [ 710.818997][T15655] usb 3-1: Product: syz [ 710.842440][T15655] usb 3-1: Manufacturer: syz [ 710.855932][ T144] hfsplus: b-tree write err: -5, ino 25 [ 710.867245][T15655] usb 3-1: SerialNumber: syz [ 710.872155][ T144] hfsplus: b-tree write err: -5, ino 4 [ 710.882553][T15655] usb 3-1: config 0 descriptor?? [ 710.890847][ T144] hfsplus: b-tree write err: -5, ino 2 [ 710.890925][T21991] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7803'. [ 710.896371][ T144] hfsplus: b-tree write err: -5, ino 26 [ 710.921860][ T4660] usb 1-1: config 0 has an invalid descriptor of length 136, skipping remainder of the config [ 710.952198][T21993] loop3: detected capacity change from 0 to 512 [ 711.042725][T21993] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.7805: iget: bad extra_isize 90 (inode size 256) [ 711.092408][T21993] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.7805: error while reading EA inode 11 err=-117 [ 711.109659][T21993] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.7805: iget: bad extra_isize 90 (inode size 256) [ 711.126114][ T4660] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 711.163650][ T4660] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.180723][T21993] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.7805: error while reading EA inode 11 err=-117 [ 711.200223][T15655] usb 3-1: USB disconnect, device number 47 [ 711.206208][ T4660] usb 1-1: Product: syz [ 711.222535][ T4660] usb 1-1: Manufacturer: syz [ 711.223888][T22006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7811'. [ 711.227136][ T4660] usb 1-1: SerialNumber: syz [ 711.252226][T21993] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #18: comm syz.3.7805: iget: bad extra_isize 90 (inode size 256) [ 711.282028][ T4660] usb 1-1: config 0 descriptor?? [ 711.296828][T21993] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.7805: error while reading EA inode 18 err=-117 [ 711.321009][T21993] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #18: comm syz.3.7805: iget: bad extra_isize 90 (inode size 256) [ 711.350516][ T4660] cdc_ether 1-1:0.0: skipping garbage [ 711.356079][T21993] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.7805: error while reading EA inode 18 err=-117 [ 711.356864][ T4660] usb 1-1: bad CDC descriptors [ 711.380541][ T4660] usb 1-1: unsupported MDLM descriptors [ 711.390786][T21993] EXT4-fs (loop3): 1 orphan inode deleted [ 711.410439][T21993] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=ignore,jqfmt=vfsold,debug_want_extra_isize=0x000000000000005a,stripe=0x0000000000002000,max_dir_size_kb=0x0000000000000005,nodiscard,min_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 711.504001][T22020] 9pnet: Could not find request transport: 0xffffffffffffffff [ 711.733460][ T4174] usb 1-1: USB disconnect, device number 49 [ 711.849975][T22041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7827'. [ 712.201253][T22068] netlink: 'syz.1.7838': attribute type 21 has an invalid length. [ 712.234176][T22068] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7838'. [ 712.262760][T22068] netlink: 'syz.1.7838': attribute type 4 has an invalid length. [ 712.510879][T22091] netlink: 'syz.4.7850': attribute type 2 has an invalid length. [ 712.537189][T22091] netlink: 'syz.4.7850': attribute type 1 has an invalid length. [ 712.621527][ T4174] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 713.006604][ T4174] usb 3-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 713.006637][ T4174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.010631][ T4174] usb 3-1: config 0 descriptor?? [ 713.093949][ T4174] pwc: Creative Labs Webcam 5 detected. [ 713.096937][T22131] loop0: detected capacity change from 0 to 64 [ 713.156110][ T26] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 713.382203][T22149] ieee802154 phy0 wpan0: encryption failed: -22 [ 713.440046][T22153] loop4: detected capacity change from 0 to 164 [ 713.490206][T22158] loop1: detected capacity change from 0 to 512 [ 713.492364][T22160] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 59248 - 0 [ 713.505580][T22160] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 59248 - 0 [ 713.514660][T22160] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 59248 - 0 [ 713.523761][T22160] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 59248 - 0 [ 713.533134][T22160] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 46516 - 0 [ 713.542778][T22160] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 46516 - 0 [ 713.552428][T22160] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 46516 - 0 [ 713.562280][ T4174] pwc: send_video_command error -71 [ 713.568373][ T4174] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 713.594353][ T26] usb 4-1: unable to get BOS descriptor or descriptor too short [ 713.602266][ T4174] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 713.616430][T22160] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 46516 - 0 [ 713.628775][T22160] device geneve2 entered promiscuous mode [ 713.656177][ T4174] usb 3-1: USB disconnect, device number 48 [ 713.664244][T22158] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.7884: iget: bad extra_isize 90 (inode size 256) [ 713.681241][ T26] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 713.706592][T22158] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.7884: error while reading EA inode 11 err=-117 [ 713.724236][T22158] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.7884: iget: bad extra_isize 90 (inode size 256) [ 713.738369][T22158] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.7884: error while reading EA inode 11 err=-117 [ 713.751646][T22164] netlink: 'syz.4.7886': attribute type 3 has an invalid length. [ 713.783095][ T26] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 713.803118][T22158] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #18: comm syz.1.7884: iget: bad extra_isize 90 (inode size 256) [ 713.864836][T22158] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.7884: error while reading EA inode 18 err=-117 [ 713.884555][T22158] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #18: comm syz.1.7884: iget: bad extra_isize 90 (inode size 256) [ 713.918141][T22158] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.7884: error while reading EA inode 18 err=-117 [ 713.932672][T22158] EXT4-fs (loop1): 1 orphan inode deleted [ 713.939033][T22158] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,jqfmt=vfsold,debug_want_extra_isize=0x000000000000005a,stripe=0x0000000000002000,max_dir_size_kb=0x0000000000000005,nodiscard,min_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 713.990889][ T26] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 713.999986][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.072560][ T26] usb 4-1: Product: syz [ 714.076992][ T26] usb 4-1: Manufacturer: syz [ 714.081663][ T26] usb 4-1: SerialNumber: syz [ 714.182586][T22176] netlink: 'syz.4.7892': attribute type 2 has an invalid length. [ 714.477921][T22199] __nla_validate_parse: 2 callbacks suppressed [ 714.477937][T22199] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7903'. [ 714.695832][ T26] usb 4-1: Can't get UAC3 power state for id 10 [ 714.716141][T22212] loop2: detected capacity change from 0 to 164 [ 714.791970][ T26] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 714.801989][ T26] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 714.874288][ T26] usb 4-1: USB disconnect, device number 45 [ 715.226590][T22241] loop0: detected capacity change from 0 to 256 [ 715.323898][T22248] netlink: 'syz.4.7927': attribute type 3 has an invalid length. [ 716.137335][T22303] loop2: detected capacity change from 0 to 512 [ 716.261639][T22303] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.7954: iget: bad extra_isize 90 (inode size 256) [ 716.281408][T22260] loop4: detected capacity change from 0 to 32768 [ 716.338314][T22303] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.7954: error while reading EA inode 11 err=-117 [ 716.385724][T22260] (syz.4.7933,22260,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 716.417584][T22316] loop3: detected capacity change from 0 to 4096 [ 716.432111][T22303] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.7954: iget: bad extra_isize 90 (inode size 256) [ 716.448431][T22260] (syz.4.7933,22260,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 716.485927][T22303] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.7954: error while reading EA inode 11 err=-117 [ 716.520613][T22303] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #18: comm syz.2.7954: iget: bad extra_isize 90 (inode size 256) [ 716.545849][T22329] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 716.571865][T22260] JBD2: Ignoring recovery information on journal [ 716.629786][T22303] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.7954: error while reading EA inode 18 err=-117 [ 716.676048][T22303] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #18: comm syz.2.7954: iget: bad extra_isize 90 (inode size 256) [ 716.758917][T22260] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 716.801759][T22303] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.7954: error while reading EA inode 18 err=-117 [ 716.900944][T22349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 716.927376][T22351] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7976'. [ 716.941556][T22303] EXT4-fs (loop2): 1 orphan inode deleted [ 716.947320][T22303] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,jqfmt=vfsold,debug_want_extra_isize=0x000000000000005a,stripe=0x0000000000002000,max_dir_size_kb=0x0000000000000005,nodiscard,min_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 717.056028][ T4197] ocfs2: Unmounting device (7,4) on (node local) [ 717.095777][T22359] loop1: detected capacity change from 0 to 512 [ 717.272538][ T4194] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 717.539210][ T4194] usb 4-1: Using ep0 maxpacket: 32 [ 717.610426][T22385] loop0: detected capacity change from 0 to 512 [ 717.667782][ T4194] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.679618][T22395] netlink: 'syz.1.7998': attribute type 1 has an invalid length. [ 717.690097][ T4194] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.731143][T22385] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.7993: iget: bad extra_isize 90 (inode size 256) [ 717.756767][T22389] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 717.780403][T22389] System zones: 0-1, 3-36 [ 717.801682][T22389] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.7994: bad orphan inode 134217728 [ 717.826689][T22385] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.7993: error while reading EA inode 11 err=-117 [ 717.842962][T22389] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,debug,journal_dev=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 717.849370][ T4194] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 717.887755][T22385] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.7993: iget: bad extra_isize 90 (inode size 256) [ 717.905942][ T4194] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 717.928841][ T4194] usb 4-1: Product: syz [ 717.933012][ T4194] usb 4-1: Manufacturer: syz [ 717.967243][T22385] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.7993: error while reading EA inode 11 err=-117 [ 717.991464][T22389] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.7994: corrupted in-inode xattr [ 718.018303][T22385] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #18: comm syz.0.7993: iget: bad extra_isize 90 (inode size 256) [ 718.033308][ T4194] hub 4-1:4.0: USB hub found [ 718.054611][T22385] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.7993: error while reading EA inode 18 err=-117 [ 718.098326][T22385] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #18: comm syz.0.7993: iget: bad extra_isize 90 (inode size 256) [ 718.123532][T22385] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.7993: error while reading EA inode 18 err=-117 [ 718.123563][T22410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8005'. [ 718.139715][T22385] EXT4-fs (loop0): 1 orphan inode deleted [ 718.159257][T22385] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,jqfmt=vfsold,debug_want_extra_isize=0x000000000000005a,stripe=0x0000000000002000,max_dir_size_kb=0x0000000000000005,nodiscard,min_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 718.180762][T22410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.266249][ T4194] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 718.569895][T22420] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 718.582483][T22404] set_capacity_and_notify: 1 callbacks suppressed [ 718.582498][T22404] loop1: detected capacity change from 0 to 32768 [ 718.623086][T22427] loop2: detected capacity change from 0 to 512 [ 718.663597][ T4194] usb 4-1: USB disconnect, device number 46 [ 718.690011][T22404] XFS (loop1): Mounting V5 Filesystem [ 718.786299][T22427] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 718.818661][T22427] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 718.855716][T22427] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.8012: Failed to acquire dquot type 1 [ 718.870422][T22427] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 718.881220][T22427] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 718.891977][T22427] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.8012: Failed to acquire dquot type 1 [ 718.905749][T22427] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.8012: bg 0: block 248: padding at end of block bitmap is not set [ 718.933029][T22427] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 718.970315][T22427] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 718.973221][T22404] XFS (loop1): Ending clean mount [ 718.981727][T22427] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 718.996325][T22427] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.8012: Failed to acquire dquot type 1 [ 719.024181][T22427] EXT4-fs (loop2): 1 orphan inode deleted [ 719.030568][T22427] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 719.086528][T22427] ext4 filesystem being mounted at /1628/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.157818][T22427] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 719.203903][T22427] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 719.215627][ T4208] XFS (loop1): Unmounting Filesystem [ 719.282083][T22427] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.8012: Failed to acquire dquot type 1 [ 719.530609][T22479] loop2: detected capacity change from 0 to 512 [ 719.712606][T22491] loop4: detected capacity change from 0 to 16 [ 719.761756][T22495] netlink: 'syz.3.8042': attribute type 1 has an invalid length. [ 719.806939][T22491] erofs: (device loop4): mounted with root inode @ nid 36. [ 720.206109][T22520] loop2: detected capacity change from 0 to 1024 [ 720.269488][T22520] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 720.316215][T22520] System zones: 0-1, 3-36 [ 720.327995][T22520] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.8054: bad orphan inode 134217728 [ 720.410141][T22520] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,debug,journal_dev=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 720.463876][T22520] EXT4-fs error (device loop2): ext4_iget_extra_inode:4566: inode #15: comm syz.2.8054: corrupted in-inode xattr [ 720.735193][T22540] loop1: detected capacity change from 0 to 16 [ 720.826524][T22540] erofs: (device loop1): mounted with root inode @ nid 36. [ 720.877398][T22540] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 720.909652][ T146] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4868] [ 720.954530][T22540] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 720.975843][ T25] audit: type=1800 audit(2000526049.104:38): pid=22540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8064" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 720.977455][T22546] loop0: detected capacity change from 0 to 2048 [ 721.423697][T22528] loop4: detected capacity change from 0 to 32768 [ 721.455639][T22528] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 721.506534][T22528] BTRFS info (device loop4): using free space tree [ 721.546460][T22528] BTRFS info (device loop4): has skinny extents [ 721.944399][T22528] BTRFS info (device loop4): enabling ssd optimizations [ 722.168494][ T4654] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 722.295757][ T5739] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (5739) [ 722.445095][ T4654] usb 1-1: Using ep0 maxpacket: 32 [ 722.460132][T22651] netlink: 124 bytes leftover after parsing attributes in process `syz.3.8109'. [ 722.489245][T22651] netlink: 'syz.3.8109': attribute type 3 has an invalid length. [ 722.585339][ T4654] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.628179][ T4654] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 722.715664][T22663] netlink: 'syz.1.8114': attribute type 16 has an invalid length. [ 722.752590][T22663] netlink: 'syz.1.8114': attribute type 3 has an invalid length. [ 722.762008][T22663] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8114'. [ 722.821322][ T4654] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 722.835719][ T4654] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.854677][ T4654] usb 1-1: Product: syz [ 722.858845][ T4654] usb 1-1: Manufacturer: syz [ 722.878693][ T4654] usb 1-1: SerialNumber: syz [ 722.883120][T22669] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 722.888033][ T4654] usb 1-1: config 0 descriptor?? [ 723.023803][ T4174] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 723.042984][T22673] loop3: detected capacity change from 0 to 16 [ 723.103676][T22673] erofs: (device loop3): mounted with root inode @ nid 36. [ 723.134930][T22673] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 723.174563][ T146] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4868] [ 723.198506][T22653] loop2: detected capacity change from 0 to 32768 [ 723.210606][ T26] usb 1-1: USB disconnect, device number 50 [ 723.214900][T22673] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 723.258125][ T25] audit: type=1800 audit(2000526051.228:39): pid=22673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8118" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 723.429854][ T4174] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 723.469157][ T4174] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 24, changing to 4 [ 723.512337][ T4174] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 723.577914][T22653] XFS (loop2): Mounting V5 Filesystem [ 723.629669][T22702] SET target dimension over the limit! [ 723.674840][T22704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8130'. [ 723.678888][T22653] XFS (loop2): Ending clean mount [ 723.685050][T22704] netlink: 6 bytes leftover after parsing attributes in process `syz.1.8130'. [ 723.820680][ T4206] XFS (loop2): Unmounting Filesystem [ 723.825421][ T4174] usb 5-1: string descriptor 0 read error: -22 [ 723.855978][ T4174] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 723.882723][ T4174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.073476][T22727] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 724.104428][T22727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 724.221611][ T4174] snd-usb-audio: probe of 5-1:1.0 failed with error -2 [ 724.398201][T22736] delete_channel: no stack [ 724.455279][ T4194] usb 5-1: USB disconnect, device number 24 [ 724.877981][T22766] IPv6: sit1: Disabled Multicast RS [ 724.892697][T22769] netlink: 'syz.0.8162': attribute type 1 has an invalid length. [ 724.926971][T22769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8162'. [ 725.114926][T22735] loop1: detected capacity change from 0 to 32768 [ 725.186764][T22788] loop3: detected capacity change from 0 to 512 [ 725.257829][ T4194] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 725.308941][T22735] XFS (loop1): Mounting V5 Filesystem [ 725.346112][T22788] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 725.426545][T22735] XFS (loop1): Ending clean mount [ 725.447020][T22788] ext4 filesystem being mounted at /1563/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 725.525123][ T4194] usb 3-1: Using ep0 maxpacket: 16 [ 725.556910][T22799] loop4: detected capacity change from 0 to 32768 [ 725.627779][ T4208] XFS (loop1): Unmounting Filesystem [ 725.660661][ T4194] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 725.688487][T22799] XFS (loop4): Mounting V5 Filesystem [ 725.692146][ T4194] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.709885][ T4194] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 725.821600][T22799] XFS (loop4): Ending clean mount [ 725.890946][ T4194] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 725.905051][ T4194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.906781][T22823] netlink: 1020 bytes leftover after parsing attributes in process `syz.3.8178'. [ 725.933759][ T4194] usb 3-1: Product: syz [ 725.937999][ T4194] usb 3-1: Manufacturer: syz [ 725.955305][ T4194] usb 3-1: SerialNumber: syz [ 725.971660][ T4194] usb 3-1: config 0 descriptor?? [ 725.999917][ T4197] XFS (loop4): Unmounting Filesystem [ 726.006114][ T4659] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 726.170993][T22829] loop3: detected capacity change from 0 to 4096 [ 726.233856][T22829] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 726.444855][ T4659] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 726.474315][ T4659] usb 1-1: config 0 has no interface number 0 [ 726.495979][ T4659] usb 1-1: config 0 interface 41 has no altsetting 0 [ 726.529856][T22839] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 726.717500][ T4659] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 726.749032][ T4659] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.775829][ T4659] usb 1-1: Product: syz [ 726.780042][ T4659] usb 1-1: Manufacturer: syz [ 726.784636][ T4659] usb 1-1: SerialNumber: syz [ 726.807354][T22854] IPv6: Can't replace route, no match found [ 726.820417][ T4659] usb 1-1: config 0 descriptor?? [ 727.138091][T22844] loop3: detected capacity change from 0 to 32768 [ 727.156397][T22869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8199'. [ 727.297319][T22844] XFS (loop3): Mounting V5 Filesystem [ 727.342656][ T4659] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 727.359534][ T4659] CoreChips: probe of 1-1:0.41 failed with error -71 [ 727.376026][ T4659] usb 1-1: USB disconnect, device number 51 [ 727.387363][T22844] XFS (loop3): Ending clean mount [ 727.467430][ T4204] XFS (loop3): Unmounting Filesystem [ 728.194132][ T4659] usb 3-1: USB disconnect, device number 49 [ 728.328079][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 728.334405][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 728.399015][T22956] loop3: detected capacity change from 0 to 64 [ 728.455907][T22962] loop4: detected capacity change from 0 to 512 [ 728.523471][T22962] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 728.595276][T22970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8245'. [ 729.060336][T22999] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8257'. [ 729.151010][T23007] xt_connbytes: Forcing CT accounting to be enabled [ 729.298224][T23020] loop3: detected capacity change from 0 to 2048 [ 729.416580][T23031] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 729.452628][ T25] audit: type=1800 audit(2000526057.027:40): pid=23020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8267" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 729.495249][T23020] NILFS (loop3): error -2 truncating bmap (ino=16) [ 729.594752][T23031] ------------[ cut here ]------------ [ 729.600626][T23031] WARNING: CPU: 1 PID: 23031 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x5ac/0x6b0 [ 729.610189][T23031] Modules linked in: [ 729.614083][T23031] CPU: 1 PID: 23031 Comm: segctord Not tainted syzkaller #0 [ 729.621622][T23031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 729.631710][T23031] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 729.637700][T23031] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 73 5a 6a fe e8 7e b6 f1 fd e9 b8 fc ff ff e8 64 5a 6a fe <0f> 0b e9 16 fc ff ff e8 58 5a 6a fe e8 63 b6 f1 fd e9 74 fe ff ff [ 729.657360][T23031] RSP: 0018:ffffc90002dff390 EFLAGS: 00010293 [ 729.663457][T23031] RAX: ffffffff830ec6ac RBX: ffff8880798c11a0 RCX: ffff88805a1b0000 [ 729.671433][T23031] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 729.679469][T23031] RBP: 0000000000000003 R08: ffff88804d0b61d7 R09: 1ffff11009a16c3a [ 729.687466][T23031] R10: dffffc0000000000 R11: ffffed1009a16c3b R12: ffff88805a1b1788 [ 729.695483][T23031] R13: ffff88801b1dc9e0 R14: 00000000003f0002 R15: ffff888078314430 [ 729.703457][T23031] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 729.712434][T23031] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 729.719052][T23031] CR2: 000055558961ba28 CR3: 0000000065b9c000 CR4: 00000000003506e0 [ 729.727066][T23031] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 729.735036][T23031] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 729.743056][T23031] Call Trace: [ 729.746333][T23031] [ 729.749319][T23031] nilfs_dat_commit_update+0x24/0x40 [ 729.754610][T23031] nilfs_btree_commit_update_v+0x93/0x410 [ 729.760385][T23031] nilfs_btree_propagate+0x95a/0xcf0 [ 729.765683][T23031] nilfs_bmap_propagate+0x70/0x120 [ 729.770844][T23031] nilfs_segctor_apply_buffers+0x15d/0x320 [ 729.776660][T23031] ? nilfs_collect_file_data+0xc0/0xc0 [ 729.782171][T23031] nilfs_segctor_scan_file+0x7af/0x9d0 [ 729.787645][T23031] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 729.794826][T23031] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 729.800723][T23031] ? rcu_is_watching+0x11/0xa0 [ 729.805549][T23031] nilfs_segctor_do_construct+0x1c26/0x6ca0 [ 729.811509][T23031] ? verify_lock_unused+0x140/0x140 [ 729.816788][T23031] ? nilfs_transaction_unlock+0x220/0x220 [ 729.822523][T23031] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 729.828750][T23031] ? clear_nonspinnable+0x60/0x60 [ 729.833810][T23031] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 729.839274][T23031] ? __lock_acquire+0x7d10/0x7d10 [ 729.844350][T23031] ? __rwlock_init+0x140/0x140 [ 729.849122][T23031] ? do_raw_spin_unlock+0x11d/0x230 [ 729.854354][T23031] ? _raw_spin_unlock+0x24/0x40 [ 729.859254][T23031] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 729.862287][T23054] loop0: detected capacity change from 0 to 64 [ 729.864717][T23031] nilfs_segctor_construct+0x17b/0x690 [ 729.876361][T23031] nilfs_segctor_thread+0x523/0x1180 [ 729.881679][T23031] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 729.887627][T23031] ? nilfs_iput_work_func+0x70/0x70 [ 729.892828][T23031] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 729.898768][T23031] ? _raw_spin_unlock+0x40/0x40 [ 729.903619][T23031] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 729.909554][T23031] ? init_wait_entry+0xd0/0xd0 [ 729.914333][T23031] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 729.920275][T23031] ? __kthread_parkme+0x157/0x1b0 [ 729.925304][T23031] kthread+0x436/0x520 [ 729.929386][T23031] ? nilfs_iput_work_func+0x70/0x70 [ 729.934637][T23031] ? kthread_blkcg+0xd0/0xd0 [ 729.939232][T23031] ret_from_fork+0x1f/0x30 [ 729.943710][T23031] [ 729.946752][T23031] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 729.954026][T23031] CPU: 1 PID: 23031 Comm: segctord Not tainted syzkaller #0 [ 729.961309][T23031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 729.971360][T23031] Call Trace: [ 729.974632][T23031] [ 729.977562][T23031] dump_stack_lvl+0x188/0x250 [ 729.982248][T23031] ? show_regs_print_info+0x20/0x20 [ 729.987459][T23031] ? load_image+0x400/0x400 [ 729.991976][T23031] panic+0x2e5/0x810 [ 729.995881][T23031] ? bpf_jit_dump+0xd0/0xd0 [ 730.000392][T23031] ? ret_from_fork+0x1f/0x30 [ 730.004983][T23031] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 730.010356][T23031] __warn+0x248/0x2b0 [ 730.014346][T23031] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 730.019726][T23031] report_bug+0x1b7/0x2e0 [ 730.024069][T23031] handle_bug+0x3a/0x70 [ 730.028235][T23031] exc_invalid_op+0x16/0x40 [ 730.032738][T23031] asm_exc_invalid_op+0x16/0x20 [ 730.037588][T23031] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 730.043571][T23031] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 73 5a 6a fe e8 7e b6 f1 fd e9 b8 fc ff ff e8 64 5a 6a fe <0f> 0b e9 16 fc ff ff e8 58 5a 6a fe e8 63 b6 f1 fd e9 74 fe ff ff [ 730.063175][T23031] RSP: 0018:ffffc90002dff390 EFLAGS: 00010293 [ 730.069240][T23031] RAX: ffffffff830ec6ac RBX: ffff8880798c11a0 RCX: ffff88805a1b0000 [ 730.077212][T23031] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 730.085182][T23031] RBP: 0000000000000003 R08: ffff88804d0b61d7 R09: 1ffff11009a16c3a [ 730.093152][T23031] R10: dffffc0000000000 R11: ffffed1009a16c3b R12: ffff88805a1b1788 [ 730.101122][T23031] R13: ffff88801b1dc9e0 R14: 00000000003f0002 R15: ffff888078314430 [ 730.109097][T23031] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 730.114487][T23031] nilfs_dat_commit_update+0x24/0x40 [ 730.119775][T23031] nilfs_btree_commit_update_v+0x93/0x410 [ 730.125501][T23031] nilfs_btree_propagate+0x95a/0xcf0 [ 730.130798][T23031] nilfs_bmap_propagate+0x70/0x120 [ 730.135917][T23031] nilfs_segctor_apply_buffers+0x15d/0x320 [ 730.141735][T23031] ? nilfs_collect_file_data+0xc0/0xc0 [ 730.147197][T23031] nilfs_segctor_scan_file+0x7af/0x9d0 [ 730.152670][T23031] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 730.159807][T23031] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 730.165704][T23031] ? rcu_is_watching+0x11/0xa0 [ 730.170471][T23031] nilfs_segctor_do_construct+0x1c26/0x6ca0 [ 730.176409][T23031] ? verify_lock_unused+0x140/0x140 [ 730.181624][T23031] ? nilfs_transaction_unlock+0x220/0x220 [ 730.187345][T23031] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 730.193515][T23031] ? clear_nonspinnable+0x60/0x60 [ 730.198542][T23031] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 730.204007][T23031] ? __lock_acquire+0x7d10/0x7d10 [ 730.209040][T23031] ? __rwlock_init+0x140/0x140 [ 730.213817][T23031] ? do_raw_spin_unlock+0x11d/0x230 [ 730.219026][T23031] ? _raw_spin_unlock+0x24/0x40 [ 730.223876][T23031] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 730.229340][T23031] nilfs_segctor_construct+0x17b/0x690 [ 730.234811][T23031] nilfs_segctor_thread+0x523/0x1180 [ 730.240127][T23031] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 730.246020][T23031] ? nilfs_iput_work_func+0x70/0x70 [ 730.251221][T23031] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 730.257115][T23031] ? _raw_spin_unlock+0x40/0x40 [ 730.261965][T23031] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 730.267860][T23031] ? init_wait_entry+0xd0/0xd0 [ 730.272628][T23031] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 730.278528][T23031] ? __kthread_parkme+0x157/0x1b0 [ 730.283558][T23031] kthread+0x436/0x520 [ 730.287630][T23031] ? nilfs_iput_work_func+0x70/0x70 [ 730.292830][T23031] ? kthread_blkcg+0xd0/0xd0 [ 730.297421][T23031] ret_from_fork+0x1f/0x30 [ 730.301856][T23031] [ 730.305181][T23031] Kernel Offset: disabled [ 730.309806][T23031] Rebooting in 86400 seconds..