last executing test programs: 23.740323837s ago: executing program 1 (id=9176): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0x2}], 0x28}, 0x0) 23.604166041s ago: executing program 1 (id=9179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x486, 0x0, 0x1}]}) 23.376137628s ago: executing program 1 (id=9181): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000340)={0x1, 0xffffff79, 0x5}) 23.267490822s ago: executing program 1 (id=9184): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000480)={[{@utf8}, {}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x6c}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@umask={'umask', 0x3d, 0x10001}}]}, 0x1, 0x152b, &(0x7f0000001dc0)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) 22.892548564s ago: executing program 1 (id=9188): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x24, 0x0, &(0x7f0000000040)) 22.492525207s ago: executing program 1 (id=9192): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xcd, 0x0, 0x0) 22.009828232s ago: executing program 32 (id=9192): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xcd, 0x0, 0x0) 2.483044091s ago: executing program 4 (id=9400): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000300)={{0x5a, 0x2000000}, {0xffffffffffffff81, 0x80000001}, 0x3, 0x6}) 2.277180188s ago: executing program 4 (id=9401): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x17, 0x0, &(0x7f0000000a80)=0x4a) 2.041624445s ago: executing program 4 (id=9405): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000900)={0x3, @capture={0x1000, 0x1, {0x5, 0xc}, 0x87d, 0x2}}) 1.941389089s ago: executing program 2 (id=9407): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8008af26, &(0x7f0000000040)={0x1}) 1.88528157s ago: executing program 4 (id=9408): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'bridge_slave_1\x00', &(0x7f0000000200)=@ethtool_ts_info}) 1.712632876s ago: executing program 2 (id=9409): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x2, 0x8000}}) 1.682925197s ago: executing program 4 (id=9411): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x7, 0x800) ioctl$LOOP_CHANGE_FD(r0, 0x40081271, 0xffffffffffffffff) 1.538058851s ago: executing program 2 (id=9413): r0 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x6) fallocate(r0, 0x10, 0x5, 0x80000000200404) 1.500400213s ago: executing program 4 (id=9415): r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 1.374856727s ago: executing program 2 (id=9418): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) 1.175980173s ago: executing program 2 (id=9420): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random='@\x00'}) 1.092810716s ago: executing program 3 (id=9422): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4c, 0x0, &(0x7f0000000080)=0x21) 1.010172458s ago: executing program 2 (id=9424): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=0x0], 0x1, 0x5531, &(0x7f0000000480)="$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") open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) 875.954142ms ago: executing program 3 (id=9426): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 775.581886ms ago: executing program 0 (id=9427): r0 = socket$kcm(0xa, 0x1, 0x106) recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 580.047152ms ago: executing program 0 (id=9429): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d1, 0x1, 0xffffffffffffffff}) 469.688085ms ago: executing program 0 (id=9430): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 439.020196ms ago: executing program 3 (id=9431): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x20, 0xa, 0x100, "3258c5c0d651aa231b00280000000000000000000000ed00", 0x32435750}) 331.55483ms ago: executing program 3 (id=9432): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000f80), 0x80000, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 238.634152ms ago: executing program 3 (id=9433): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@loopback={0xffffffffffff0000}, 0x10200000, 0x0, 0x0, 0x3, 0x2, 0xffff}, 0x20) 237.911852ms ago: executing program 0 (id=9434): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 136.473406ms ago: executing program 0 (id=9435): prlimit64(0x0, 0x7, &(0x7f0000000000)={0x0, 0xc8f}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 129.61µs ago: executing program 3 (id=9436): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084522, &(0x7f0000001f40)=""/230) 0s ago: executing program 0 (id=9437): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='clear_refs\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0xe0586f4}}]}}) kernel console output (not intermixed with test programs): ut max is 0 [ 999.515213][ T6192] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 999.526403][ T6192] usb 3-1: config 2 has no interface number 0 [ 999.536956][ T6192] usb 3-1: config 2 interface 147 has no altsetting 0 [ 999.545810][ T6192] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=c8.8e [ 999.554931][ T6192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.562983][ T6192] usb 3-1: Product: syz [ 999.567193][ T6192] usb 3-1: Manufacturer: syz [ 999.571774][ T6192] usb 3-1: SerialNumber: syz [ 999.785126][ T6192] ims_pcu 3-1:2.147: Missing CDC union descriptor [ 999.794101][ T6192] ims_pcu: probe of 3-1:2.147 failed with error -22 [ 999.803738][ T6192] usb 3-1: USB disconnect, device number 68 [ 1000.102913][T24243] loop3: detected capacity change from 0 to 512 [ 1000.109109][T24241] loop0: detected capacity change from 0 to 512 [ 1000.121035][T24243] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1000.144561][T24243] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1000.164697][T24241] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.8412: corrupted in-inode xattr: invalid size in ea xattr [ 1000.180132][T24243] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.8413: corrupted xattr entries [ 1000.194698][T24243] EXT4-fs (loop3): Remounting filesystem read-only [ 1000.201799][T24243] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1000.215112][T24243] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -5) [ 1000.226304][T24243] EXT4-fs (loop3): 1 orphan inode deleted [ 1000.233586][T24243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1000.248375][T24241] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.8412: couldn't read orphan inode 15 (err -117) [ 1000.290483][T24241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1000.319311][ T6238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.452866][ T6241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.478575][T24250] loop2: detected capacity change from 0 to 512 [ 1000.520674][T24250] EXT4-fs (loop2): invalid first ino: 9 [ 1000.841886][T24266] loop2: detected capacity change from 0 to 64 [ 1000.892857][T24260] loop3: detected capacity change from 0 to 8192 [ 1000.919523][T24260] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1000.938340][T24266] hfs: unable to load iocharset "cP936" [ 1000.944117][T24266] hfs: unable to parse mount options [ 1000.946267][T24260] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1000.992280][ T28] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1001.002721][T24272] CIFS mount error: No usable UNC path provided in device string! [ 1001.002721][T24272] [ 1001.012873][T24272] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1001.015769][T24260] REISERFS (device loop3): using ordered data mode [ 1001.105865][T24260] reiserfs: using flush barriers [ 1001.121566][T24260] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1001.164343][T24260] REISERFS (device loop3): checking transaction log (loop3) [ 1001.177246][T24260] REISERFS warning: reiserfs-5085 is_leaf: item length seems wrong: *3.5*[1 2 0x1 IND], item_len 0, item_location 4004, free_space(entry_count) 12 [ 1001.185284][T24278] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1001.199784][T24260] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 1001.216606][T24260] REISERFS (device loop3): Remounting filesystem read-only [ 1001.223865][T24260] REISERFS error (device loop3): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 1001.237804][ T28] usb 2-1: Using ep0 maxpacket: 16 [ 1001.272188][ T28] usb 2-1: config 0 has an invalid interface number: 172 but max is 2 [ 1001.280951][ T28] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.291427][ T28] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 1001.300510][ T28] usb 2-1: config 0 has no interface number 1 [ 1001.307215][ T28] usb 2-1: config 0 interface 172 has no altsetting 0 [ 1001.336360][ T28] usb 2-1: New USB device found, idVendor=046d, idProduct=0921, bcdDevice=ab.34 [ 1001.355291][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.375482][ T28] usb 2-1: Product: syz [ 1001.379709][ T28] usb 2-1: Manufacturer: syz [ 1001.401735][ T28] usb 2-1: SerialNumber: syz [ 1001.409149][ T28] usb 2-1: config 0 descriptor?? [ 1001.527583][T17864] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1001.561284][T24284] loop3: detected capacity change from 0 to 512 [ 1001.587074][T24284] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1001.618326][T24284] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #17: comm syz.3.8431: inode has both inline data and extents flags [ 1001.656022][ T28] gspca_main: tv8532-2.14.0 probing 046d:0921 [ 1001.666904][T24284] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.8431: couldn't read orphan inode 17 (err -117) [ 1001.686717][T24284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1001.708375][ T28] usb 2-1: USB disconnect, device number 55 [ 1001.714501][T17864] usb 1-1: Using ep0 maxpacket: 8 [ 1001.736557][T17864] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.781818][T17864] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1001.794241][ T6238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.795559][T17864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.839976][ T6192] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1001.846483][T17864] usb 1-1: config 0 descriptor?? [ 1002.009149][T24293] loop3: detected capacity change from 0 to 4096 [ 1002.016776][ T6192] usb 3-1: Using ep0 maxpacket: 32 [ 1002.039461][ T6192] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1002.050595][T24293] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1002.052278][ T28] usb 1-1: USB disconnect, device number 72 [ 1002.065377][ T6192] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1002.078510][T24293] NILFS (loop3): mounting unchecked fs [ 1002.086833][T24293] NILFS (loop3): recovery required for readonly filesystem [ 1002.104748][ T6192] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 1002.119865][T24293] NILFS (loop3): write access will be enabled during recovery [ 1002.122204][ T6192] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1002.143711][ T6192] usb 3-1: Product: syz [ 1002.149912][ T6192] usb 3-1: SerialNumber: syz [ 1002.163824][ T6200] udevd[6200]: incorrect nilfs2 checksum on /dev/loop3 [ 1002.164229][ T6192] usb 3-1: config 0 descriptor?? [ 1002.176167][T24293] NILFS (loop3): recovery complete [ 1002.183662][T24293] NILFS (loop3): The specified checkpoint is not a snapshot (checkpoint number=1) [ 1002.482557][ T6192] usb 3-1: USB disconnect, device number 69 [ 1002.934775][T24319] loop1: detected capacity change from 0 to 4096 [ 1002.946925][T24315] loop0: detected capacity change from 0 to 8192 [ 1002.948719][T24319] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1002.978805][T24315] REISERFS warning (device loop0): super-6519 read_super_block: Unfinished reiserfsck --rebuild-tree run detected. Please run [ 1002.978805][T24315] reiserfsck --rebuild-tree and wait for a completion. If that fails [ 1002.978805][T24315] get newer reiserfsprogs package [ 1003.012713][T24319] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 1003.023380][T24315] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 1003.087901][T24319] ntfs: (device loop1): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 1003.100868][T24319] ntfs: (device loop1): ntfs_fill_super(): Not an NTFS volume. [ 1003.515139][T24340] futex_wake_op: syz.3.8457 tries to shift op by 32; fix this program [ 1003.660059][T24343] loop1: detected capacity change from 0 to 4096 [ 1003.670733][T24343] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1003.713445][ T6192] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1003.735317][T24343] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1003.757806][T24343] ntfs: (device loop1): ntfs_read_inode_mount(): ntfs_mapping_pairs_decompress() failed with error code -5. $MFT is corrupt. [ 1003.798631][T24343] ntfs: (device loop1): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 1003.822047][T24343] ntfs: (device loop1): ntfs_fill_super(): Failed to load essential metadata. [ 1003.838526][T24346] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 1003.861211][T24346] ntfs3: loop3: try to read out of volume at offset 0x103000 [ 1003.872390][T24346] ntfs3: loop3: Failed to load $Volume (-5). [ 1003.937051][ T6192] usb 1-1: Using ep0 maxpacket: 8 [ 1003.975505][ T6192] usb 1-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 1003.992899][ T6192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.000946][ T6192] usb 1-1: Product: syz [ 1004.010206][ T6192] usb 1-1: Manufacturer: syz [ 1004.017943][ T6192] usb 1-1: SerialNumber: syz [ 1004.032441][T24353] omfs: Invalid superblock (7b3184f9) [ 1004.082421][ T6200] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1004.115014][ T28] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1004.257526][ T6192] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1004.269582][ T6192] usb 1-1: MIDIStreaming interface descriptor not found [ 1004.318675][ T28] usb 3-1: Using ep0 maxpacket: 16 [ 1004.330249][ T28] usb 3-1: config 3 has an invalid interface number: 20 but max is 0 [ 1004.335264][ T6192] usb 1-1: USB disconnect, device number 73 [ 1004.347056][ T28] usb 3-1: config 3 has no interface number 0 [ 1004.359512][ T28] usb 3-1: config 3 interface 20 has no altsetting 0 [ 1004.380323][ T28] usb 3-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 1004.402514][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.415004][ T7532] udevd[7532]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1004.437733][ T28] usb 3-1: Product: syz [ 1004.442295][ T28] usb 3-1: Manufacturer: syz [ 1004.447124][ T6221] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1004.456839][ T28] usb 3-1: SerialNumber: syz [ 1004.612059][T24367] tmpfs: Unexpected value for 'inode32' [ 1004.661022][ T6221] usb 4-1: Using ep0 maxpacket: 16 [ 1004.675187][ T6221] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1004.700133][ T6221] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.719511][ T28] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.20/input/input63 [ 1004.734824][ T6221] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1004.745124][ T6221] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1004.760255][ T5125] bcm5974 3-1:3.20: could not read from device [ 1004.769997][ T28] usb 3-1: USB disconnect, device number 70 [ 1004.810552][ T5125] bcm5974 3-1:3.20: could not read from device [ 1004.817507][ T6221] usb 4-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 1004.840860][ T6221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.854021][ T6221] usb 4-1: Product: syz [ 1004.858847][ T6221] usb 4-1: Manufacturer: syz [ 1004.863765][ T6221] usb 4-1: SerialNumber: syz [ 1004.901840][ T6506] udevd[6506]: Error opening device "/dev/input/event4": No such file or directory [ 1004.913816][ T6506] udevd[6506]: Unable to EVIOCGABS device "/dev/input/event4" [ 1004.921895][ T6506] udevd[6506]: Unable to EVIOCGABS device "/dev/input/event4" [ 1004.931257][ T6506] udevd[6506]: Unable to EVIOCGABS device "/dev/input/event4" [ 1004.950168][ T6506] udevd[6506]: Unable to EVIOCGABS device "/dev/input/event4" [ 1004.960248][ T6506] udevd[6506]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 1004.979567][T24375] set_capacity_and_notify: 3 callbacks suppressed [ 1004.979582][T24375] loop1: detected capacity change from 0 to 64 [ 1005.005864][ T5140] udevd[5140]: worker [6506] terminated by signal 6 (Aborted) [ 1005.015998][ T5140] udevd[5140]: worker [6506] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.20/input/input63/event4' [ 1005.043818][T24373] loop0: detected capacity change from 0 to 4096 [ 1005.051512][T24373] ntfs: (device loop0): parse_options(): The case_sensitive option requires a boolean argument. [ 1005.132022][ T6221] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1005.146782][ T7532] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1005.156897][ T6221] usb 4-1: MIDIStreaming interface descriptor not found [ 1005.226408][ T6221] usb 4-1: USB disconnect, device number 70 [ 1005.368434][T12413] udevd[12413]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1005.456529][ T6307] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1005.652002][ T6307] usb 2-1: Using ep0 maxpacket: 8 [ 1005.662915][ T6307] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1005.681334][ T6307] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 167, changing to 11 [ 1005.700648][ T6307] usb 2-1: New USB device found, idVendor=0499, idProduct=100c, bcdDevice= 0.40 [ 1005.717020][ T6307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.735071][ T6307] usb 2-1: Product: syz [ 1005.739425][ T6307] usb 2-1: Manufacturer: syz [ 1005.744047][ T6307] usb 2-1: SerialNumber: syz [ 1005.923775][T24382] loop2: detected capacity change from 0 to 32768 [ 1005.929588][T24380] loop0: detected capacity change from 0 to 32768 [ 1005.938199][T24382] jfs_mount: Mount Failure: File System Dirty. [ 1005.974802][T24382] Mount JFS Failure: -22 [ 1005.995401][T24380] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1006.011593][T24382] jfs_mount failed w/return code = -22 [ 1006.012818][T24380] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1006.032193][ T6307] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1006.053034][T24380] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 1006.065035][T13303] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1006.071966][T13303] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1006.183562][ T6307] usb 2-1: USB disconnect, device number 56 [ 1006.230023][T13303] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 169ms [ 1006.287146][T13303] gfs2: fsid=syz:syz.0: jid=0: Done [ 1006.295207][T24380] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1006.556406][ T6221] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1006.636682][T24384] loop3: detected capacity change from 0 to 32768 [ 1006.642944][T24380] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1006.650794][T24384] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.8478 (24384) [ 1006.707024][T24384] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1006.746376][T24384] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1006.773630][T24384] BTRFS info (device loop3): using free space tree [ 1006.780439][ T6221] usb 3-1: Using ep0 maxpacket: 8 [ 1006.787001][ T6221] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1006.833442][ T6221] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 1006.845420][ T6241] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 1006.863211][ T6221] usb 3-1: config 0 has no interface number 0 [ 1006.877518][ T6221] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1006.887203][ T6241] CPU: 0 PID: 6241 Comm: syz-executor Not tainted syzkaller #0 [ 1006.896052][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1006.906137][ T6241] Call Trace: [ 1006.909436][ T6241] [ 1006.909973][ T6221] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1006.912362][ T6241] dump_stack_lvl+0x18c/0x250 [ 1006.926866][ T6241] ? show_regs_print_info+0x20/0x20 [ 1006.932099][ T6241] ? load_image+0x420/0x420 [ 1006.936626][ T6241] ? do_raw_spin_unlock+0x121/0x230 [ 1006.941837][ T6241] gfs2_assert_warn_i+0x193/0x2c0 [ 1006.946871][ T6241] gfs2_qd_dispose+0x4aa/0x5b0 [ 1006.951635][ T6241] gfs2_quota_cleanup+0x410/0x720 [ 1006.956660][ T6241] ? spin_lock_bucket+0x150/0x150 [ 1006.961688][ T6241] ? __might_sleep+0xe0/0xe0 [ 1006.966279][ T6241] ? down_write+0x16e/0x200 [ 1006.970870][ T6241] ? down_read_killable+0x340/0x340 [ 1006.976071][ T6241] ? gfs2_quota_sync+0x591/0x5a0 [ 1006.981016][ T6241] gfs2_make_fs_ro+0x2aa/0x320 [ 1006.985783][ T6241] ? gfs2_dinode_out+0xb10/0xb10 [ 1006.990717][ T6241] ? __lock_acquire+0x7d40/0x7d40 [ 1006.995738][ T6241] ? __rwlock_init+0x150/0x150 [ 1007.000500][ T6241] ? do_raw_spin_unlock+0x121/0x230 [ 1007.005701][ T6241] gfs2_put_super+0x224/0x930 [ 1007.010379][ T6241] ? gfs2_evict_inode+0x1350/0x1350 [ 1007.015576][ T6241] generic_shutdown_super+0x134/0x2b0 [ 1007.020960][ T6241] kill_block_super+0x44/0x90 [ 1007.025659][ T6241] deactivate_locked_super+0x97/0x100 [ 1007.031043][ T6241] cleanup_mnt+0x43b/0x4d0 [ 1007.035472][ T6241] task_work_run+0x1d4/0x260 [ 1007.040070][ T6241] ? task_work_cancel+0x220/0x220 [ 1007.045116][ T6241] ? exit_to_user_mode_loop+0x3b/0x110 [ 1007.050577][ T6241] exit_to_user_mode_loop+0xe6/0x110 [ 1007.055862][ T6241] exit_to_user_mode_prepare+0xee/0x180 [ 1007.061404][ T6241] syscall_exit_to_user_mode+0x1a/0x50 [ 1007.066863][ T6241] do_syscall_64+0x61/0xb0 [ 1007.071281][ T6241] ? clear_bhb_loop+0x40/0x90 [ 1007.075954][ T6241] ? clear_bhb_loop+0x40/0x90 [ 1007.080628][ T6241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1007.086521][ T6241] RIP: 0033:0x7efcc4b9e097 [ 1007.090931][ T6241] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1007.110534][ T6241] RSP: 002b:00007ffe0473fc58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1007.118944][ T6241] RAX: 0000000000000000 RBX: 00007efcc4c321ca RCX: 00007efcc4b9e097 [ 1007.126909][ T6241] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0473fd10 [ 1007.134874][ T6241] RBP: 00007ffe0473fd10 R08: 00007ffe04740d10 R09: 00000000ffffffff [ 1007.142841][ T6241] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe04740da0 [ 1007.150807][ T6241] R13: 00007efcc4c321ca R14: 00000000000f7555 R15: 00007ffe04740de0 [ 1007.158783][ T6241] [ 1007.162262][ T6221] usb 3-1: config 0 interface 88 has no altsetting 0 [ 1007.173033][ T6221] usb 3-1: string descriptor 0 read error: -22 [ 1007.179358][ T6221] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1007.196703][ T6221] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1007.237917][T24384] BTRFS info (device loop3): enabling ssd optimizations [ 1007.244922][T24384] BTRFS info (device loop3): auto enabling async discard [ 1007.245933][ T6221] usb 3-1: config 0 descriptor?? [ 1007.296197][ T6221] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input64 [ 1007.414362][ T6238] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1007.566426][ T788] usb 3-1: USB disconnect, device number 71 [ 1007.847014][T24397] loop1: detected capacity change from 0 to 32768 [ 1007.879786][T24397] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.8480 (24397) [ 1007.921894][T24397] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1007.941358][T24397] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1007.963069][T24397] BTRFS info (device loop1): using free space tree [ 1008.207178][T24397] BTRFS info (device loop1): enabling ssd optimizations [ 1008.234002][T24397] BTRFS info (device loop1): auto enabling async discard [ 1008.307962][ T6239] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1008.444854][T24411] loop3: detected capacity change from 0 to 32768 [ 1008.491808][T24411] BTRFS: device fsid 8f67342e-760a-4d9f-bdfe-dfdef307742f devid 1 transid 8 /dev/loop3 scanned by syz.3.8482 (24411) [ 1008.568805][T24411] BTRFS info (device loop3): first mount of filesystem 8f67342e-760a-4d9f-bdfe-dfdef307742f [ 1008.606628][T24411] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1008.615333][T24411] BTRFS info (device loop3): using free space tree [ 1008.781325][T24409] loop0: detected capacity change from 0 to 32768 [ 1008.890232][T24411] BTRFS info (device loop3): enabling ssd optimizations [ 1008.899998][T24409] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.8481 (24409) [ 1008.901585][T24411] BTRFS info (device loop3): auto enabling async discard [ 1009.054779][T24409] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1009.096482][T24409] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1009.118821][T24409] BTRFS info (device loop0): using free space tree [ 1009.144125][T24429] loop2: detected capacity change from 0 to 32768 [ 1009.171639][ T6238] BTRFS info (device loop3): last unmount of filesystem 8f67342e-760a-4d9f-bdfe-dfdef307742f [ 1009.189838][T24429] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.8483 (24429) [ 1009.303635][T24429] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1009.381689][T24429] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 1009.440954][T24429] BTRFS info (device loop2): using free space tree [ 1009.454338][T24409] BTRFS info (device loop0): enabling ssd optimizations [ 1009.461336][T24409] BTRFS info (device loop0): auto enabling async discard [ 1009.477390][T24431] loop1: detected capacity change from 0 to 32768 [ 1009.510490][T24431] BTRFS: device fsid e5ec6bdf-b4e4-4163-9622-8db3a33753bd devid 1 transid 8 /dev/loop1 scanned by syz.1.8484 (24431) [ 1009.541144][T24431] BTRFS info (device loop1): first mount of filesystem e5ec6bdf-b4e4-4163-9622-8db3a33753bd [ 1009.623468][T24431] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1009.640093][T24431] BTRFS info (device loop1): using free space tree [ 1009.777088][ T6241] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1009.800999][T24429] BTRFS info (device loop2): enabling ssd optimizations [ 1009.808012][T24429] BTRFS info (device loop2): auto enabling async discard [ 1010.116226][T24431] BTRFS info (device loop1): enabling ssd optimizations [ 1010.146169][T24431] BTRFS info (device loop1): auto enabling async discard [ 1010.163436][ T6247] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1010.238148][T24480] loop3: detected capacity change from 0 to 32768 [ 1010.302776][T24480] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.8485 (24480) [ 1010.324580][T24430] Process accounting resumed [ 1010.370109][T24480] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1010.390211][ T6239] BTRFS info (device loop1): last unmount of filesystem e5ec6bdf-b4e4-4163-9622-8db3a33753bd [ 1010.430613][T24480] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1010.475491][T24480] BTRFS info (device loop3): using free space tree [ 1010.510633][T12413] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop2 scanned by udevd (12413) [ 1010.670097][ T7532] BTRFS: device fsid e5ec6bdf-b4e4-4163-9622-8db3a33753bd devid 1 transid 9 /dev/loop1 scanned by udevd (7532) [ 1010.824346][T24480] BTRFS info (device loop3): enabling ssd optimizations [ 1010.866577][T24480] BTRFS info (device loop3): auto enabling async discard [ 1010.945842][ T6192] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1011.058224][ T6238] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1011.160166][ T6192] usb 2-1: Using ep0 maxpacket: 16 [ 1011.181556][ T6192] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.215786][ T6192] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1011.275237][ T6192] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1011.288186][ T6192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.346872][ T6192] usb 2-1: Product: syz [ 1011.351107][ T6192] usb 2-1: Manufacturer: syz [ 1011.355716][ T6192] usb 2-1: SerialNumber: syz [ 1011.562815][T24501] loop0: detected capacity change from 0 to 32768 [ 1011.600556][T24501] XFS (loop0): sunit and swidth options incompatible with the noalign option [ 1011.635435][ T788] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1011.676312][ T6192] usb 2-1: 0:2 : does not exist [ 1011.689722][ T6192] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1011.748291][ T6192] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1011.787494][ T6192] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1011.828723][ T6192] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 1011.839030][T24509] loop2: detected capacity change from 0 to 32768 [ 1011.850716][ T788] usb 4-1: Using ep0 maxpacket: 16 [ 1011.865669][ T788] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1011.901016][ T788] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1011.936010][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.950346][ T6192] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1011.987467][ T788] usb 4-1: Product: syz [ 1012.023865][ T788] usb 4-1: Manufacturer: syz [ 1012.029857][ T6192] usb 2-1: USB disconnect, device number 57 [ 1012.039246][ T788] usb 4-1: SerialNumber: syz [ 1012.160064][ T6200] udevd[6200]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1012.245312][T24531] loop0: detected capacity change from 0 to 16 [ 1012.291134][T24531] erofs: (device loop0): mounted with root inode @ nid 36. [ 1012.296006][ T788] usb 4-1: selecting invalid altsetting 1 [ 1012.396568][ T788] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1012.453499][ T788] usb 4-1: USB disconnect, device number 71 [ 1012.556377][T24533] loop2: detected capacity change from 0 to 16 [ 1012.584197][T13504] udevd[13504]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1012.627778][T24533] erofs: (device loop2): mounted with root inode @ nid 36. [ 1012.642858][T24535] loop0: detected capacity change from 0 to 2048 [ 1012.717493][T24537] loop1: detected capacity change from 0 to 2048 [ 1012.732947][T24535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1012.886010][ T6241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.899018][T24537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1012.900601][T24542] loop2: detected capacity change from 0 to 512 [ 1013.004294][T24545] loop0: detected capacity change from 0 to 16 [ 1013.048959][T24542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.068029][T24545] erofs: (device loop0): mounted with root inode @ nid 36. [ 1013.122833][ T6239] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.189034][T24548] loop3: detected capacity change from 0 to 512 [ 1013.282444][ T6247] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.381637][T24550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1013.403432][T24548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.431613][T24548] ext4 filesystem being mounted at /2052/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1013.532444][T24553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1013.546698][ T6239] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.579727][T24553] ext4 filesystem being mounted at /1927/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1013.648814][ T6238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.743916][ T6241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.887500][T24562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.919834][T24562] ext4 filesystem being mounted at /2053/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1013.934459][T24560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.988643][T24567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.169391][ T6238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.212344][ T6241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.224385][ T6239] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.463791][T24558] F2FS-fs (loop2): build fault injection attr: rate: 6, type: 0x7ffff [ 1014.478499][T24558] F2FS-fs (loop2): inline encryption not supported [ 1014.485098][T24558] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x77 [ 1014.511943][T24572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.519645][T24558] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x188/0x5d0 [ 1014.608424][T24558] F2FS-fs (loop2): invalid crc value [ 1014.645655][ T6241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.655387][T24558] F2FS-fs (loop2): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x4406/0x6dc0 [ 1014.683323][T24558] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12) [ 1014.703118][ T28] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1014.846473][T24570] BTRFS: device fsid 100ef7e5-a5de-41f0-884c-a25b1c06c78a devid 1 transid 8 /dev/loop3 scanned by syz.3.8505 (24570) [ 1014.887525][T24581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.908042][T24570] BTRFS info (device loop3): first mount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 1014.920954][T24570] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1014.930921][T24570] BTRFS info (device loop3): using free space tree [ 1014.938660][ T28] usb 2-1: Using ep0 maxpacket: 8 [ 1014.941271][T24585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.946208][ T28] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 112, changing to 7 [ 1015.043522][ T28] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1015.081527][ T6241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.100828][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.109058][ T28] usb 2-1: Product: syz [ 1015.114960][ T28] usb 2-1: Manufacturer: syz [ 1015.120010][ T28] usb 2-1: SerialNumber: syz [ 1015.164236][ T6247] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.309629][T24602] set_capacity_and_notify: 10 callbacks suppressed [ 1015.309646][T24602] loop0: detected capacity change from 0 to 512 [ 1015.311275][T24570] BTRFS info (device loop3): enabling ssd optimizations [ 1015.342176][T24570] BTRFS info (device loop3): auto enabling async discard [ 1015.351935][ T28] usb 2-1: selecting invalid altsetting 1 [ 1015.362472][ T28] usb 2-1: unit 1 not found! [ 1015.371566][ T28] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1015.401460][ T28] usb 2-1: selecting invalid altsetting 1 [ 1015.420695][T24606] loop2: detected capacity change from 0 to 1024 [ 1015.433655][T24602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1015.452273][ T28] usb 2-1: unit 1 not found! [ 1015.461533][ T6238] BTRFS info (device loop3): last unmount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 1015.493168][ T28] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 1015.509069][T24606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1015.545796][ T28] usb 2-1: selecting invalid altsetting 1 [ 1015.552772][ T28] usb 2-1: unit 1 not found! [ 1015.645484][ T28] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 1015.663865][ T7532] BTRFS: device fsid 100ef7e5-a5de-41f0-884c-a25b1c06c78a devid 1 transid 9 /dev/loop3 scanned by udevd (7532) [ 1015.670201][ T6241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.686086][ T6247] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.703915][ T28] usb 2-1: USB disconnect, device number 58 [ 1015.735681][T13504] udevd[13504]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1016.001276][T24615] loop2: detected capacity change from 0 to 1024 [ 1016.091878][T24615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1016.350402][T24620] loop3: detected capacity change from 0 to 2048 [ 1016.381456][ T6247] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.410356][T24620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1016.515129][T24616] loop0: detected capacity change from 0 to 32768 [ 1016.536232][T24616] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 scanned by syz.0.8514 (24616) [ 1016.596318][T24616] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 1016.649961][T24616] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 1016.662957][T24625] loop2: detected capacity change from 0 to 4096 [ 1016.686807][ T6238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.696897][T24616] BTRFS info (device loop0): using free space tree [ 1016.768798][T24625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1016.873067][T24616] BTRFS info (device loop0): enabling ssd optimizations [ 1016.881036][T24616] BTRFS info (device loop0): auto enabling async discard [ 1017.005114][ T6247] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.009177][ T6241] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 1017.061557][T24645] loop3: detected capacity change from 0 to 512 [ 1017.114095][T24645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1017.159347][T24622] loop1: detected capacity change from 0 to 32768 [ 1017.247478][T24622] BTRFS: device fsid 9c2593b3-5c40-4e29-8ff3-7b58260955bc devid 1 transid 8 /dev/loop1 scanned by syz.1.8516 (24622) [ 1017.277580][ T6238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.367559][T24622] BTRFS info (device loop1): first mount of filesystem 9c2593b3-5c40-4e29-8ff3-7b58260955bc [ 1017.431997][T24622] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1017.480994][T24622] BTRFS info (device loop1): using free space tree [ 1017.570999][T24656] loop3: detected capacity change from 0 to 1024 [ 1017.654599][T24656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1017.740915][T24622] BTRFS info (device loop1): enabling ssd optimizations [ 1017.747930][T24622] BTRFS info (device loop1): auto enabling async discard [ 1017.938576][ T6238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.971118][ T6239] BTRFS info (device loop1): last unmount of filesystem 9c2593b3-5c40-4e29-8ff3-7b58260955bc [ 1018.393505][T24650] loop0: detected capacity change from 0 to 32768 [ 1018.425974][T24650] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 8 /dev/loop0 scanned by syz.0.8520 (24650) [ 1018.481468][T24650] BTRFS info (device loop0): first mount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 1018.514469][T24652] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop2 scanned by syz.2.8522 (24652) [ 1018.546538][T24650] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 1018.588034][T24652] BTRFS info (device loop2): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 1018.598345][T24650] BTRFS info (device loop0): using free space tree [ 1018.635240][T24652] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1018.664557][T24652] BTRFS info (device loop2): using free space tree [ 1018.848225][T24652] BTRFS info (device loop2): enabling ssd optimizations [ 1018.855383][T24652] BTRFS info (device loop2): auto enabling async discard [ 1018.875306][T24650] BTRFS info (device loop0): enabling ssd optimizations [ 1018.892648][T24650] BTRFS info (device loop0): auto enabling async discard [ 1019.111344][ T6247] BTRFS info (device loop2): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 1019.151818][ T6241] BTRFS info (device loop0): last unmount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 1019.423179][ T6200] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 9 /dev/loop0 scanned by udevd (6200) [ 1019.970131][T24676] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1020.009715][T24676] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1020.151240][T24676] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1020.183760][ T6282] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1020.190590][ T6282] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1020.422319][ T6282] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 248ms [ 1020.473682][ T6282] gfs2: fsid=syz:syz.0: jid=0: Done [ 1020.483086][T24676] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1020.704700][T24715] set_capacity_and_notify: 2 callbacks suppressed [ 1020.704719][T24715] loop0: detected capacity change from 0 to 32768 [ 1020.726482][T24710] loop2: detected capacity change from 0 to 32768 [ 1020.751342][T24715] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 1020.758768][T24715] CPU: 1 PID: 24715 Comm: syz.0.8527 Not tainted syzkaller #0 [ 1020.764421][T24710] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 1020.766226][T24715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1020.766241][T24715] Call Trace: [ 1020.766250][T24715] [ 1020.766258][T24715] dump_stack_lvl+0x18c/0x250 [ 1020.794606][T24715] ? show_regs_print_info+0x20/0x20 [ 1020.799838][T24715] ? load_image+0x420/0x420 [ 1020.804374][T24715] sysfs_create_dir_ns+0x26e/0x2a0 [ 1020.809554][T24715] ? sysfs_warn_dup+0xa0/0xa0 [ 1020.814244][T24715] ? do_raw_spin_unlock+0x121/0x230 [ 1020.819470][T24715] kobject_add_internal+0x61c/0xcc0 [ 1020.824711][T24715] kobject_init_and_add+0x12c/0x1a0 [ 1020.829952][T24715] ? lockdep_softirqs_off+0x430/0x430 [ 1020.835352][T24715] ? kobject_add+0x240/0x240 [ 1020.839981][T24715] ? __init_swait_queue_head+0xa9/0x150 [ 1020.845552][T24715] gfs2_sys_fs_add+0x253/0x4b0 [ 1020.850325][T24715] ? gfs2_recover_set+0x250/0x250 [ 1020.855360][T24715] ? apply_workqueue_attrs+0x180/0x180 [ 1020.860841][T24715] gfs2_fill_super+0x12b6/0x1f30 [ 1020.865787][T24715] ? __might_sleep+0xe0/0xe0 [ 1020.870389][T24715] ? gfs2_reconfigure+0xb10/0xb10 [ 1020.875427][T24715] ? setup_bdev_super+0x56b/0x660 [ 1020.880451][T24715] get_tree_bdev+0x3f3/0x520 [ 1020.885039][T24715] ? end_current_label_crit_section+0x170/0x170 [ 1020.891284][T24715] ? gfs2_reconfigure+0xb10/0xb10 [ 1020.896312][T24715] ? setup_bdev_super+0x660/0x660 [ 1020.901348][T24715] gfs2_get_tree+0x51/0x1e0 [ 1020.905862][T24715] vfs_get_tree+0x8c/0x280 [ 1020.910290][T24715] do_new_mount+0x24b/0xa40 [ 1020.914799][T24715] __se_sys_mount+0x2e7/0x3d0 [ 1020.919489][T24715] ? __x64_sys_mount+0xc0/0xc0 [ 1020.924259][T24715] ? lockdep_hardirqs_on+0x98/0x150 [ 1020.929461][T24715] ? __x64_sys_mount+0x20/0xc0 [ 1020.934243][T24715] do_syscall_64+0x55/0xb0 [ 1020.938682][T24715] ? clear_bhb_loop+0x40/0x90 [ 1020.943372][T24715] ? clear_bhb_loop+0x40/0x90 [ 1020.948081][T24715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1020.954004][T24715] RIP: 0033:0x7efcc4b9e0ca [ 1020.958423][T24715] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.978046][T24715] RSP: 002b:00007efcc2df5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1020.986471][T24715] RAX: ffffffffffffffda RBX: 00007efcc2df5ee0 RCX: 00007efcc4b9e0ca [ 1020.994443][T24715] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007efcc2df5ea0 [ 1021.002419][T24715] RBP: 00002000000124c0 R08: 00007efcc2df5ee0 R09: 0000000000000000 [ 1021.010400][T24715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 1021.018369][T24715] R13: 00007efcc2df5ea0 R14: 00000000000124a6 R15: 0000200000012540 [ 1021.026354][T24715] [ 1021.033360][T24710] CPU: 0 PID: 24710 Comm: syz.2.8525 Not tainted syzkaller #0 [ 1021.040875][T24710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1021.050959][T24710] Call Trace: [ 1021.054258][T24710] [ 1021.057213][T24710] dump_stack_lvl+0x18c/0x250 [ 1021.061923][T24710] ? show_regs_print_info+0x20/0x20 [ 1021.067151][T24710] ? load_image+0x420/0x420 [ 1021.071695][T24710] sysfs_create_dir_ns+0x26e/0x2a0 [ 1021.076833][T24710] ? sysfs_warn_dup+0xa0/0xa0 [ 1021.080195][T24715] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 1021.081516][T24710] ? do_raw_spin_unlock+0x121/0x230 [ 1021.098619][T24715] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 1021.100575][T24710] kobject_add_internal+0x61c/0xcc0 [ 1021.112295][T24710] kobject_init_and_add+0x12c/0x1a0 [ 1021.117492][T24710] ? lockdep_softirqs_off+0x430/0x430 [ 1021.122891][T24710] ? kobject_add+0x240/0x240 [ 1021.127477][T24710] ? __init_swait_queue_head+0xa9/0x150 [ 1021.133014][T24710] gfs2_sys_fs_add+0x253/0x4b0 [ 1021.137774][T24710] ? gfs2_recover_set+0x250/0x250 [ 1021.142809][T24710] ? apply_workqueue_attrs+0x180/0x180 [ 1021.148316][T24710] gfs2_fill_super+0x12b6/0x1f30 [ 1021.153288][T24710] ? __might_sleep+0xe0/0xe0 [ 1021.157943][T24710] ? gfs2_reconfigure+0xb10/0xb10 [ 1021.163015][T24710] ? setup_bdev_super+0x56b/0x660 [ 1021.168070][T24710] get_tree_bdev+0x3f3/0x520 [ 1021.172691][T24710] ? end_current_label_crit_section+0x170/0x170 [ 1021.178968][T24710] ? gfs2_reconfigure+0xb10/0xb10 [ 1021.184027][T24710] ? setup_bdev_super+0x660/0x660 [ 1021.189089][T24710] gfs2_get_tree+0x51/0x1e0 [ 1021.193632][T24710] vfs_get_tree+0x8c/0x280 [ 1021.198073][T24710] do_new_mount+0x24b/0xa40 [ 1021.202593][T24710] __se_sys_mount+0x2e7/0x3d0 [ 1021.207271][T24710] ? __x64_sys_mount+0xc0/0xc0 [ 1021.212039][T24710] ? lockdep_hardirqs_on+0x98/0x150 [ 1021.217246][T24710] ? __x64_sys_mount+0x20/0xc0 [ 1021.222008][T24710] do_syscall_64+0x55/0xb0 [ 1021.226422][T24710] ? clear_bhb_loop+0x40/0x90 [ 1021.231094][T24710] ? clear_bhb_loop+0x40/0x90 [ 1021.235763][T24710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1021.241674][T24710] RIP: 0033:0x7fe3dd99e0ca [ 1021.246103][T24710] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1021.265710][T24710] RSP: 002b:00007fe3dbbf5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1021.274123][T24710] RAX: ffffffffffffffda RBX: 00007fe3dbbf5ee0 RCX: 00007fe3dd99e0ca [ 1021.282095][T24710] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007fe3dbbf5ea0 [ 1021.290069][T24710] RBP: 00002000000124c0 R08: 00007fe3dbbf5ee0 R09: 0000000000000000 [ 1021.298040][T24710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 1021.306009][T24710] R13: 00007fe3dbbf5ea0 R14: 0000000000012493 R15: 0000200000012540 [ 1021.313990][T24710] [ 1021.399687][T24710] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 1021.484652][T24710] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 1021.860598][T24726] loop3: detected capacity change from 0 to 512 [ 1021.939496][T24726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1022.124162][ T6238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.686260][T24724] loop2: detected capacity change from 0 to 32768 [ 1022.700437][T24724] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 1022.719919][T24724] dlm: no local IP address has been set [ 1022.725519][T24724] dlm: cannot start dlm midcomms -107 [ 1022.763078][T24724] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 1023.048516][T24734] loop2: detected capacity change from 0 to 2048 [ 1023.079395][T24734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1023.107454][T24734] ext4 filesystem being mounted at /2015/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1023.220938][ T6247] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.395325][T24739] loop2: detected capacity change from 0 to 512 [ 1023.468831][T24739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1023.711170][ T6247] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.534772][T24743] loop2: detected capacity change from 0 to 32768 [ 1024.572130][T24743] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 8 /dev/loop2 scanned by syz.2.8535 (24743) [ 1024.623379][T24743] BTRFS info (device loop2): first mount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 1024.654333][T24743] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1024.673873][T24743] BTRFS info (device loop2): using free space tree [ 1024.774467][T24743] BTRFS info (device loop2): enabling ssd optimizations [ 1024.800625][T24743] BTRFS info (device loop2): auto enabling async discard [ 1025.030830][ T6247] BTRFS info (device loop2): last unmount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 1025.333841][T24763] loop2: detected capacity change from 0 to 2364 [ 1025.997000][T24761] loop0: detected capacity change from 0 to 32768 [ 1026.007252][T24761] XFS: noikeep mount option is deprecated. [ 1026.017257][T24767] loop3: detected capacity change from 0 to 164 [ 1026.113575][T24761] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1026.326631][T24761] XFS (loop0): invalid iclog size (4096 bytes), using lsunit (32768 bytes) [ 1026.409091][T24761] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1026.458320][T24765] loop2: detected capacity change from 0 to 32768 [ 1026.468055][T24777] loop3: detected capacity change from 0 to 4096 [ 1026.519296][T24765] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 1026.528412][T24761] XFS (loop0): Starting recovery (logdev: internal) [ 1026.566804][T24765] dlm: no local IP address has been set [ 1026.572541][T24765] dlm: cannot start dlm midcomms -107 [ 1026.578002][T24765] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 1026.607158][T24777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1026.660448][T24761] XFS (loop0): Ending recovery (logdev: internal) [ 1026.705765][T24784] loop1: detected capacity change from 0 to 736 [ 1026.870198][ T6238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.977602][ T6241] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1027.049694][T24786] loop1: detected capacity change from 0 to 512 [ 1027.265174][T24786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1027.537269][ T6239] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.665131][T24783] loop2: detected capacity change from 0 to 32768 [ 1027.715364][T24783] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1027.733341][T24783] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1027.756399][T24795] loop1: detected capacity change from 0 to 256 [ 1027.812293][T24783] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1027.861383][ T28] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1027.890541][ T28] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1027.989183][T24788] loop3: detected capacity change from 0 to 32768 [ 1028.038716][T24788] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.8543 (24788) [ 1028.077934][ T28] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 201ms [ 1028.108093][ T28] gfs2: fsid=syz:syz.0: jid=0: Done [ 1028.116736][T24783] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1028.116952][T24788] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1028.146187][T24798] loop1: detected capacity change from 0 to 128 [ 1028.163770][T24788] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1028.183205][T24788] BTRFS info (device loop3): using free space tree [ 1028.239158][T24793] BTRFS: device fsid cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 devid 1 transid 8 /dev/loop0 scanned by syz.0.8545 (24793) [ 1028.306032][T24793] BTRFS info (device loop0): first mount of filesystem cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 [ 1028.339850][T24793] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1028.415971][T24793] BTRFS info (device loop0): using free space tree [ 1028.459511][T24788] BTRFS info (device loop3): enabling ssd optimizations [ 1028.475132][T24788] BTRFS info (device loop3): auto enabling async discard [ 1028.685818][T24793] BTRFS info (device loop0): enabling ssd optimizations [ 1028.700997][T24793] BTRFS info (device loop0): auto enabling async discard [ 1028.767628][ T6238] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1028.944568][ T6241] BTRFS info (device loop0): last unmount of filesystem cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 [ 1029.256576][ T6200] BTRFS: device fsid cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 devid 1 transid 9 /dev/loop0 scanned by udevd (6200) [ 1030.062226][T24857] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1031.017150][T24852] set_capacity_and_notify: 7 callbacks suppressed [ 1031.017166][T24852] loop0: detected capacity change from 0 to 32768 [ 1031.050570][T24852] BTRFS: device fsid 18898830-c59e-4026-919d-fe1055706c2c devid 1 transid 8 /dev/loop0 scanned by syz.0.8557 (24852) [ 1031.111199][T24852] BTRFS info (device loop0): first mount of filesystem 18898830-c59e-4026-919d-fe1055706c2c [ 1031.152513][T24852] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1031.199786][T24852] BTRFS info (device loop0): using free space tree [ 1031.339273][T24852] BTRFS info (device loop0): enabling ssd optimizations [ 1031.376645][T24852] BTRFS info (device loop0): auto enabling async discard [ 1031.610046][ T6241] BTRFS info (device loop0): last unmount of filesystem 18898830-c59e-4026-919d-fe1055706c2c [ 1031.679669][T24865] loop3: detected capacity change from 0 to 32768 [ 1031.948150][T24883] loop3: detected capacity change from 0 to 128 [ 1032.340704][T24885] loop0: detected capacity change from 0 to 4096 [ 1032.593574][T24889] loop1: detected capacity change from 0 to 4096 [ 1032.613535][T24889] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1033.087691][T24893] loop1: detected capacity change from 0 to 4096 [ 1033.909939][T24897] loop1: detected capacity change from 0 to 16384 [ 1033.968932][T24898] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1034.463357][T24902] loop2: detected capacity change from 0 to 4096 [ 1034.480706][T24902] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 1034.952396][T24904] loop2: detected capacity change from 0 to 8192 [ 1034.988230][T24904] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 1035.008759][T24904] ntfs: (device loop2): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 1035.041730][T24904] ntfs: (device loop2): ntfs_fill_super(): Not an NTFS volume. [ 1035.438034][T24906] loop2: detected capacity change from 0 to 8192 [ 1035.512746][T24907] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1035.767050][T24909] loop2: detected capacity change from 0 to 2048 [ 1035.890632][T24900] loop1: detected capacity change from 0 to 65536 [ 1036.248748][T24911] loop3: detected capacity change from 0 to 4096 [ 1036.297550][T24911] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1036.912609][T24913] loop2: detected capacity change from 0 to 32768 [ 1036.942315][T24913] (syz.2.8577,24913,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1036.981023][T24913] (syz.2.8577,24913,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1037.174065][T24917] loop0: detected capacity change from 0 to 32768 [ 1037.201916][T24917] (syz.0.8579,24917,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1037.257722][T24917] (syz.0.8579,24917,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1037.840110][T24915] loop1: detected capacity change from 0 to 65536 [ 1038.054718][T24924] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1038.299812][T24919] loop3: detected capacity change from 0 to 65536 [ 1038.479477][T24925] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1039.602857][T24929] loop1: detected capacity change from 0 to 32768 [ 1039.644631][T24929] (syz.1.8583,24929,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1039.662513][T24929] (syz.1.8583,24929,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1039.703235][T24929] Process accounting paused [ 1040.048834][T24927] loop3: detected capacity change from 0 to 65536 [ 1040.083272][T24927] (syz.3.8584,24927,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1040.115192][T24927] (syz.3.8584,24927,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1040.654231][T24931] loop1: detected capacity change from 0 to 32768 [ 1040.699533][T24931] (syz.1.8585,24931,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1040.754979][T24931] (syz.1.8585,24931,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1041.634195][T24939] loop0: detected capacity change from 0 to 2048 [ 1042.241526][T24935] loop2: detected capacity change from 0 to 65536 [ 1042.259546][T24935] (syz.2.8587,24935,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1042.289292][T24935] (syz.2.8587,24935,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1042.365035][T24937] loop1: detected capacity change from 0 to 65536 [ 1042.387639][T24937] (syz.1.8588,24937,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1042.403394][T24937] (syz.1.8588,24937,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1042.934733][T24945] loop1: detected capacity change from 0 to 8192 [ 1042.977195][T24945] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1043.040210][T24945] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1043.073872][T24945] REISERFS (device loop1): using ordered data mode [ 1043.112410][T24945] reiserfs: using flush barriers [ 1043.157675][T24945] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1043.243930][T24945] REISERFS (device loop1): checking transaction log (loop1) [ 1043.444545][T24945] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 1043.489683][T24945] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 1043.521269][T24945] REISERFS (device loop1): Remounting filesystem read-only [ 1043.549515][T24945] REISERFS error (device loop1): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 1043.590830][T24945] REISERFS warning (device loop1): reiserfs_fill_super: corrupt root inode, run fsck [ 1044.429682][T24952] loop3: detected capacity change from 0 to 4096 [ 1044.494961][T24952] ntfs: volume version 3.1. [ 1045.378865][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1045.392749][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1045.568404][T24956] loop0: detected capacity change from 0 to 16384 [ 1045.583466][T24956] REISERFS warning (device loop0): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop0, block 16, size 4096) [ 1045.625773][T24956] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 1047.470293][T24954] loop3: detected capacity change from 0 to 131072 [ 1047.512219][T24954] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1047.538644][T24954] REISERFS (device loop3): found reiserfs format "3.5" with standard journal [ 1047.578746][T24954] REISERFS (device loop3): using ordered data mode [ 1047.619118][T24954] reiserfs: using flush barriers [ 1047.644209][T24954] REISERFS warning (device loop3): journal-1256 journal_init: unable to get memory for journal structure [ 1047.687528][T24954] REISERFS warning (device loop3): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 1049.061217][T24963] loop1: detected capacity change from 0 to 65536 [ 1049.077986][T24963] (syz.1.8600,24963,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1049.111660][T24963] (syz.1.8600,24963,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1050.356015][T24972] loop2: detected capacity change from 0 to 8 [ 1050.643636][T24974] loop2: detected capacity change from 0 to 1 [ 1050.680662][T24974] syz.2.8605: attempt to access beyond end of device [ 1050.680662][T24974] loop2: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 1050.752149][T24974] SQUASHFS error: Failed to read block 0x0: -5 [ 1050.781613][T24974] unable to read squashfs_super_block [ 1051.076895][T24976] loop2: detected capacity change from 0 to 8 [ 1052.015564][T24980] loop3: detected capacity change from 0 to 2048 [ 1052.045790][T24980] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1052.271658][T24982] loop3: detected capacity change from 0 to 128 [ 1052.316630][T24982] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1052.364173][T24982] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1052.598799][T24984] loop3: detected capacity change from 0 to 256 [ 1052.661440][T24984] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1052.691033][T24984] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1052.713742][T24984] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1052.739181][T24984] UDF-fs: Scanning with blocksize 512 failed [ 1052.778641][T24984] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1052.815748][T24984] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1053.030604][T24986] loop3: detected capacity change from 0 to 256 [ 1053.075394][T24986] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1053.114952][T24986] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1053.167854][T24986] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1053.175557][T24986] UDF-fs: Scanning with blocksize 512 failed [ 1053.224208][T24986] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1053.255283][T24988] loop0: detected capacity change from 0 to 2048 [ 1053.265826][T24986] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1053.281337][T24988] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1053.282604][T24990] loop1: detected capacity change from 0 to 512 [ 1053.328391][T24990] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1053.348363][T24990] UDF-fs: Scanning with blocksize 512 failed [ 1053.385582][T24990] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1053.412214][T24990] UDF-fs: Scanning with blocksize 1024 failed [ 1053.458169][T24990] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1053.465616][T24990] UDF-fs: Scanning with blocksize 2048 failed [ 1053.523105][T24990] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1053.533552][T24992] loop3: detected capacity change from 0 to 512 [ 1053.573958][T24992] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1053.583355][T24990] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1053.594288][T24992] UDF-fs: Scanning with blocksize 512 failed [ 1053.660163][T24992] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1053.662179][T24994] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1053.695471][T24992] UDF-fs: Scanning with blocksize 1024 failed [ 1053.737239][T24992] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1053.755650][T24992] UDF-fs: Scanning with blocksize 2048 failed [ 1053.788735][T24992] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1053.829021][T24992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1053.858990][T24996] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1053.948877][T24998] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1053.950100][T24996] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1053.982780][T24998] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1055.096564][T25015] set_capacity_and_notify: 7 callbacks suppressed [ 1055.096580][T25015] loop1: detected capacity change from 0 to 128 [ 1055.356362][T25018] loop1: detected capacity change from 0 to 128 [ 1055.463084][T25021] loop2: detected capacity change from 0 to 128 [ 1055.740156][T25025] loop2: detected capacity change from 0 to 512 [ 1055.745363][T25023] loop1: detected capacity change from 0 to 2048 [ 1055.950915][T25027] loop1: detected capacity change from 0 to 128 [ 1056.032495][T25029] loop2: detected capacity change from 0 to 128 [ 1056.283623][T25032] loop1: detected capacity change from 0 to 2048 [ 1056.698611][T25036] loop1: detected capacity change from 0 to 8192 [ 1058.113546][T25040] loop3: detected capacity change from 0 to 32768 [ 1060.625946][T25048] loop1: detected capacity change from 0 to 2048 [ 1060.666829][T25048] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1061.517418][T25050] loop1: detected capacity change from 0 to 32768 [ 1062.022025][ T28] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 1062.214749][ T28] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1062.232911][ T28] usb 2-1: not running at top speed; connect to a high speed hub [ 1062.252381][ T28] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 1062.287247][ T28] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1062.302342][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.320874][ T28] usb 2-1: Product: syz [ 1062.325087][ T28] usb 2-1: Manufacturer: syz [ 1062.339420][ T28] usb 2-1: SerialNumber: syz [ 1062.564304][ T28] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1062.590897][ T28] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 1062.599197][ T28] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1062.628334][ T28] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 1062.647443][ T28] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1062.715680][ T28] usb 2-1: USB disconnect, device number 59 [ 1063.364433][T25056] loop3: detected capacity change from 0 to 65536 [ 1063.441515][T25056] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1063.526379][T25056] XFS (loop3): Ending clean mount [ 1063.640254][ T6238] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1066.551363][T25072] loop0: detected capacity change from 0 to 65536 [ 1066.643380][T25072] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel. [ 1067.806380][T25085] loop2: detected capacity change from 0 to 2048 [ 1068.345104][T25081] loop1: detected capacity change from 0 to 65536 [ 1068.402321][T25081] XFS (loop1): Deprecated V4 format (crc=0) not supported by kernel. [ 1068.538652][T25080] Process accounting resumed [ 1070.473339][T25083] loop3: detected capacity change from 0 to 131072 [ 1070.504658][T25083] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop3": -EINTR [ 1071.463919][ T6282] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1071.689663][ T6282] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1071.715982][ T6282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.724034][ T6282] usb 4-1: Product: syz [ 1071.753141][ T6282] usb 4-1: Manufacturer: syz [ 1071.757807][ T6282] usb 4-1: SerialNumber: syz [ 1071.790186][ T6282] usb 4-1: config 0 descriptor?? [ 1071.804976][ T6282] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1071.992775][ T6282] gspca_stk1135: reg_w 0x2 err -71 [ 1072.005744][ T6282] gspca_stk1135: serial bus timeout: status=0x00 [ 1072.012133][ T6282] gspca_stk1135: Sensor write failed [ 1072.042112][ T6282] gspca_stk1135: serial bus timeout: status=0x00 [ 1072.048513][ T6282] gspca_stk1135: Sensor write failed [ 1072.066899][ T6282] gspca_stk1135: serial bus timeout: status=0x00 [ 1072.084688][ T6282] gspca_stk1135: Sensor read failed [ 1072.111574][ T6282] gspca_stk1135: serial bus timeout: status=0x00 [ 1072.125993][ T6282] gspca_stk1135: Sensor read failed [ 1072.131272][ T6282] gspca_stk1135: Detected sensor type unknown (0x0) [ 1072.153603][ T6282] gspca_stk1135: serial bus timeout: status=0x00 [ 1072.161558][ T6282] gspca_stk1135: Sensor read failed [ 1072.176850][ T6282] gspca_stk1135: serial bus timeout: status=0x00 [ 1072.196467][ T6282] gspca_stk1135: Sensor read failed [ 1072.210497][ T6282] gspca_stk1135: serial bus timeout: status=0x00 [ 1072.216884][ T6282] gspca_stk1135: Sensor write failed [ 1072.247192][ T6282] gspca_stk1135: serial bus timeout: status=0x00 [ 1072.255078][ T6282] gspca_stk1135: Sensor write failed [ 1072.275495][ T6282] stk1135: probe of 4-1:0.0 failed with error -71 [ 1072.307006][ T6282] usb 4-1: USB disconnect, device number 72 [ 1072.345418][T25111] (null): rxe_set_mtu: Set mtu to 1024 [ 1072.800452][T25123] netlink: 'syz.2.8666': attribute type 10 has an invalid length. [ 1072.816071][T25111] infiniband syz1: set active [ 1072.824234][T25111] infiniband syz1: added bridge_slave_1 [ 1072.867373][T25123] team0: Device nlmon0 is of different type [ 1072.927676][T25111] RDS/IB: syz1: added [ 1072.948475][T25111] smc: adding ib device syz1 with port count 1 [ 1072.978887][T25111] smc: ib device syz1 port 1 has pnetid [ 1073.127622][T25096] loop0: detected capacity change from 0 to 131072 [ 1073.180262][T25096] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel. [ 1073.891094][T25156] ieee802154 phy0 wpan0: encryption failed: -22 [ 1073.939378][T25159] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8682'. [ 1074.067931][T25163] netlink: 'syz.0.8684': attribute type 21 has an invalid length. [ 1074.091139][T25163] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8684'. [ 1074.587106][T25181] overlayfs: conflicting options: metacopy=off,verity=on [ 1075.137436][T25194] loop2: detected capacity change from 0 to 128 [ 1075.161232][T25194] FAT-fs (loop2): Directory bread(block 162) failed [ 1075.170290][T25194] FAT-fs (loop2): Directory bread(block 163) failed [ 1075.187686][T25194] FAT-fs (loop2): Directory bread(block 164) failed [ 1075.211226][T25194] FAT-fs (loop2): Directory bread(block 165) failed [ 1075.237990][T25194] FAT-fs (loop2): Directory bread(block 166) failed [ 1075.257883][T25194] FAT-fs (loop2): Directory bread(block 167) failed [ 1075.264548][T25194] FAT-fs (loop2): Directory bread(block 168) failed [ 1075.291723][T25194] FAT-fs (loop2): Directory bread(block 169) failed [ 1075.304050][T25194] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1075.339515][T25194] FAT-fs (loop2): Directory bread(block 162) failed [ 1075.349876][T25194] FAT-fs (loop2): Directory bread(block 163) failed [ 1075.376315][T25194] syz.2.8697: attempt to access beyond end of device [ 1075.376315][T25194] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 1075.416009][T25194] syz.2.8697: attempt to access beyond end of device [ 1075.416009][T25194] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 1075.621625][T25201] Cannot find del_set index 0 as target [ 1076.051443][T25216] netlink: 252 bytes leftover after parsing attributes in process `syz.1.8708'. [ 1076.676246][T25212] loop2: detected capacity change from 0 to 32768 [ 1076.746183][T25212] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1076.925929][T25212] XFS (loop2): Ending clean mount [ 1077.136099][T25179] loop0: detected capacity change from 0 to 131072 [ 1077.143403][ T6247] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1077.321192][T25179] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 1077.357174][T25179] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop0": -EINTR [ 1077.357932][T25179] XFS (loop0): log mount failed [ 1077.395949][T25259] loop1: detected capacity change from 0 to 64 [ 1078.445353][ T6307] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1078.654285][ T6307] usb 2-1: Using ep0 maxpacket: 16 [ 1078.677486][ T6307] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1078.694225][ T6307] usb 2-1: config 0 has no interface number 0 [ 1078.709063][ T6307] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1078.724651][ T6307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.752387][ T6307] usb 2-1: Product: syz [ 1078.761103][ T6307] usb 2-1: Manufacturer: syz [ 1078.780493][ T6307] usb 2-1: SerialNumber: syz [ 1078.801097][ T6307] usb 2-1: config 0 descriptor?? [ 1078.826189][ T6307] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1079.195729][T17864] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1079.215285][ T6307] gspca_spca1528: reg_w err -71 [ 1079.234700][T25306] MTD: Couldn't look up './file0': -15 [ 1079.256237][ T6307] spca1528: probe of 2-1:0.1 failed with error -71 [ 1079.265244][ T6307] usb 2-1: USB disconnect, device number 60 [ 1079.388101][T17864] usb 3-1: Using ep0 maxpacket: 32 [ 1079.413603][T17864] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1079.426804][T17864] usb 3-1: config 0 has no interface number 0 [ 1079.445560][T25310] netlink: 'syz.3.8746': attribute type 10 has an invalid length. [ 1079.457582][T17864] usb 3-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1079.472565][T25310] team0: Device nlmon0 is of different type [ 1079.479240][T17864] usb 3-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1079.498495][T17864] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1079.513900][T17864] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1079.525372][T17864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.538476][T17864] usb 3-1: Product: syz [ 1079.542679][T17864] usb 3-1: Manufacturer: syz [ 1079.548846][T17864] usb 3-1: SerialNumber: syz [ 1079.559629][T17864] usb 3-1: config 0 descriptor?? [ 1079.599394][T17864] f81534 3-1:0.12: unsupported endpoint max packet size [ 1079.790256][T25320] x_tables: unsorted entry at hook 1 [ 1080.037562][T25332] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8757'. [ 1080.220091][T25340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8761'. [ 1080.432897][T25350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8766'. [ 1080.482827][T25352] Cannot find del_set index 2 as target [ 1080.565986][T25356] program syz.3.8769 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1080.662183][T25358] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 1080.676509][T25358] (unnamed net_device) (uninitialized): option use_carrier: invalid value (6) [ 1081.099461][T25378] netlink: 'syz.3.8781': attribute type 2 has an invalid length. [ 1081.339386][T25390] netlink: 188 bytes leftover after parsing attributes in process `syz.1.8786'. [ 1081.340741][T25388] loop0: detected capacity change from 0 to 2048 [ 1081.370900][T25392] sctp: [Deprecated]: syz.3.8787 (pid 25392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1081.370900][T25392] Use struct sctp_sack_info instead [ 1081.403407][T25388] loop0: p2 p3 < > p4 < p5 > [ 1081.408174][T25388] loop0: partition table partially beyond EOD, truncated [ 1081.424641][T25388] loop0: p3 start 4225 is beyond EOD, truncated [ 1081.460732][T25388] syz.0.8785: attempt to access beyond end of device [ 1081.460732][T25388] loop0p2: rw=4096, sector=128, nr_sectors = 8 limit=7 [ 1081.501770][T25388] gfs2: error 10 reading superblock [ 1081.742984][ T6282] usb 3-1: USB disconnect, device number 72 [ 1081.747814][T25402] loop0: detected capacity change from 0 to 1024 [ 1081.778251][T25402] EXT4-fs: inline encryption not supported [ 1081.841810][T25402] EXT4-fs: Ignoring removed bh option [ 1081.856462][T25402] EXT4-fs: inline encryption not supported [ 1081.895940][T25402] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1081.962509][T25402] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1081.991845][T25402] EXT4-fs error (device loop0): ext4_quota_enable:7144: comm syz.0.8791: inode #2304: comm syz.0.8791: iget: illegal inode # [ 1082.056590][T25402] EXT4-fs error (device loop0): ext4_quota_enable:7147: comm syz.0.8791: Bad quota inode: 2304, type: 2 [ 1082.126769][T25402] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 1082.173721][T25402] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 1082.202100][T25402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1082.254779][T25402] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 1082.279182][T25402] EXT4-fs error (device loop0): ext4_quota_enable:7144: comm syz.0.8791: inode #2304: comm syz.0.8791: iget: illegal inode # [ 1082.318458][T25402] EXT4-fs error (device loop0): ext4_quota_enable:7147: comm syz.0.8791: Bad quota inode: 2304, type: 2 [ 1082.338649][T25402] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 1082.445722][ T6241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.536740][ T6282] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1082.650006][T25437] loop2: detected capacity change from 0 to 256 [ 1082.662040][T25437] exfat: Deprecated parameter 'utf8' [ 1082.671559][T25437] exfat: Deprecated parameter 'utf8' [ 1082.723195][ T6282] usb 4-1: Using ep0 maxpacket: 16 [ 1082.734424][T25437] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 1082.736767][ T6282] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1082.784634][ T6282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.813766][ T6282] usb 4-1: Product: syz [ 1082.834466][ T6282] usb 4-1: Manufacturer: syz [ 1082.842695][T25437] exFAT-fs (loop2): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 1082.857863][ T6282] usb 4-1: SerialNumber: syz [ 1082.882649][ T6282] r8152-cfgselector 4-1: config 0 descriptor?? [ 1083.278919][ T6282] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1083.301122][ T6282] r8152-cfgselector 4-1: USB disconnect, device number 73 [ 1083.352126][T25461] trusted_key: encrypted_key: keyword 'load|ʓ.V' not recognized [ 1083.714457][T25473] loop2: detected capacity change from 0 to 1024 [ 1083.832669][T25473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1083.860848][T25483] netlink: 'syz.0.8830': attribute type 10 has an invalid length. [ 1083.890931][T25483] team0: Device nlmon0 is of different type [ 1083.946754][ T6247] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.033399][T25486] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1084.076778][T25486] bridge1: entered promiscuous mode [ 1084.094210][T25486] bridge1: entered allmulticast mode [ 1084.363658][ T6307] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1084.578188][ T6307] usb 1-1: Using ep0 maxpacket: 32 [ 1084.585256][ T6307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1084.609365][ T6307] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1084.619171][ T6307] usb 1-1: New USB device strings: Mfr=1, Product=229, SerialNumber=2 [ 1084.628384][ T6307] usb 1-1: Product: syz [ 1084.632573][ T6307] usb 1-1: Manufacturer: syz [ 1084.641038][ T6307] usb 1-1: SerialNumber: syz [ 1084.663994][ T6307] usb 1-1: config 0 descriptor?? [ 1084.698993][ T6307] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input65 [ 1084.724430][ T6307] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 1084.771176][ T6307] usbtouchscreen: probe of 1-1:0.0 failed with error -8 [ 1084.891754][ T6307] usb 1-1: USB disconnect, device number 74 [ 1085.153220][T25536] netlink: 'syz.3.8856': attribute type 4 has an invalid length. [ 1085.182696][T25538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8857'. [ 1085.195284][T25538] netlink: 19 bytes leftover after parsing attributes in process `syz.2.8857'. [ 1085.302421][T25542] warning: `syz.2.8859' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1085.361038][T25540] loop3: detected capacity change from 0 to 8192 [ 1085.395731][T25540] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1085.418142][T25540] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1085.429023][T25540] REISERFS (device loop3): using ordered data mode [ 1085.435852][T25540] reiserfs: using flush barriers [ 1085.443220][T25540] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1085.460257][T25540] REISERFS (device loop3): checking transaction log (loop3) [ 1085.766605][T25540] REISERFS (device loop3): Using tea hash to sort names [ 1085.795393][T25540] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 1085.845988][T25540] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1086.104510][T25566] loop0: detected capacity change from 0 to 8 [ 1086.148625][T25566] SQUASHFS error: Failed to read block 0x1ec: -5 [ 1086.181279][T25566] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 1086.209804][ T6282] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1086.397007][ T6282] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1086.412905][ T6282] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.450666][T25576] loop0: detected capacity change from 0 to 512 [ 1086.465130][ T6282] usb 3-1: config 220 has no interface number 2 [ 1086.480552][ T6282] usb 3-1: config 220 interface 1 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 56 [ 1086.507442][ T6282] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1086.535489][ T6282] usb 3-1: config 220 interface 1 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1086.557971][ T6200] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1086.588044][ T6282] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1086.614537][ T6282] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1086.631371][ T6282] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1086.651631][ T6282] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1086.671224][ T6282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.693525][ T6282] usb 3-1: Product: syz [ 1086.707107][ T6282] usb 3-1: Manufacturer: syz [ 1086.723862][ T6282] usb 3-1: SerialNumber: syz [ 1086.964439][ T6282] usb 3-1: selecting invalid altsetting 0 [ 1086.973712][ T6282] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1086.980116][ T6282] usb 3-1: No valid video chain found. [ 1087.036399][ T6282] usb 3-1: selecting invalid altsetting 0 [ 1087.065939][ T6282] usbtest: probe of 3-1:220.1 failed with error -22 [ 1087.086610][ T6282] usb 3-1: USB disconnect, device number 73 [ 1087.224681][T25602] loop3: detected capacity change from 0 to 64 [ 1087.519390][T25615] x_tables: unsorted entry at hook 3 [ 1088.093256][T25637] loop3: detected capacity change from 0 to 4096 [ 1088.132582][T25637] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1088.506817][T25655] No such timeout policy "syz0" [ 1089.313480][T25690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8931'. [ 1089.345250][T25693] loop0: detected capacity change from 0 to 64 [ 1089.538532][T25691] loop1: detected capacity change from 0 to 8192 [ 1089.577393][T25691] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1089.593766][T25691] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1089.604879][T25691] REISERFS (device loop1): using ordered data mode [ 1089.612532][T25691] reiserfs: using flush barriers [ 1089.622854][T25691] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1089.657544][T25691] REISERFS (device loop1): checking transaction log (loop1) [ 1089.715212][T25704] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 1089.866790][T25710] loop2: detected capacity change from 0 to 64 [ 1089.956188][T13504] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1089.979455][T25691] REISERFS (device loop1): Using tea hash to sort names [ 1089.998764][T25691] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 1090.068119][T25691] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1090.306576][ T27] audit: type=1326 audit(1781714039.233:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25720 comm="syz.3.8946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd79ce59 code=0x7ffc0000 [ 1090.356999][ T27] audit: type=1326 audit(1781714039.233:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25720 comm="syz.3.8946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd79ce59 code=0x7ffc0000 [ 1090.381041][ C1] vkms_vblank_simulate: vblank timer overrun [ 1090.387751][ T27] audit: type=1326 audit(1781714039.265:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25720 comm="syz.3.8946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fa0dd79ce59 code=0x7ffc0000 [ 1090.411764][ C1] vkms_vblank_simulate: vblank timer overrun [ 1090.418662][ T27] audit: type=1326 audit(1781714039.276:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25720 comm="syz.3.8946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd79ce59 code=0x7ffc0000 [ 1090.442657][ C1] vkms_vblank_simulate: vblank timer overrun [ 1090.448762][ T27] audit: type=1326 audit(1781714039.276:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25720 comm="syz.3.8946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd79ce59 code=0x7ffc0000 [ 1090.462993][T25721] bond1: entered allmulticast mode [ 1090.472777][ C1] vkms_vblank_simulate: vblank timer overrun [ 1090.794442][T25735] cgroup: none used incorrectly [ 1090.833665][T25737] loop0: detected capacity change from 0 to 256 [ 1091.223058][T25753] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8962'. [ 1091.239221][T25753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8962'. [ 1091.801741][T25779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8975'. [ 1091.839585][T25779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8975'. [ 1091.865516][T25779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1092.048643][T25793] loop2: detected capacity change from 0 to 8 [ 1092.368627][T25805] netlink: 'syz.1.8988': attribute type 3 has an invalid length. [ 1092.377815][T25807] overlay: Unknown parameter 'smackfstransmute' [ 1092.379459][T25805] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8988'. [ 1092.808579][T25825] netlink: 'syz.1.8998': attribute type 21 has an invalid length. [ 1092.816459][T25825] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8998'. [ 1092.840165][T25825] netlink: 'syz.1.8998': attribute type 4 has an invalid length. [ 1092.849620][T25825] netlink: 'syz.1.8998': attribute type 3 has an invalid length. [ 1092.860623][T25825] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8998'. [ 1093.000746][T25833] loop1: detected capacity change from 0 to 256 [ 1093.054504][T25833] FAT-fs (loop1): Directory bread(block 64) failed [ 1093.065847][T25833] FAT-fs (loop1): Directory bread(block 65) failed [ 1093.077827][T25833] FAT-fs (loop1): Directory bread(block 66) failed [ 1093.094593][T25833] FAT-fs (loop1): Directory bread(block 67) failed [ 1093.106449][T25833] FAT-fs (loop1): Directory bread(block 68) failed [ 1093.113077][T25833] FAT-fs (loop1): Directory bread(block 69) failed [ 1093.125046][T25833] FAT-fs (loop1): Directory bread(block 70) failed [ 1093.153403][T25833] FAT-fs (loop1): Directory bread(block 71) failed [ 1093.170310][T25833] FAT-fs (loop1): Directory bread(block 72) failed [ 1093.210218][T25833] FAT-fs (loop1): Directory bread(block 73) failed [ 1093.621890][T25853] loop0: detected capacity change from 0 to 256 [ 1093.654972][T25847] loop3: detected capacity change from 0 to 4096 [ 1093.672799][T25847] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1093.743328][T25853] FAT-fs (loop0): Directory bread(block 64) failed [ 1093.757534][T25853] FAT-fs (loop0): Directory bread(block 65) failed [ 1093.783280][T25857] loop2: detected capacity change from 0 to 1024 [ 1093.796143][T25853] FAT-fs (loop0): Directory bread(block 66) failed [ 1093.809435][T25853] FAT-fs (loop0): Directory bread(block 67) failed [ 1093.819825][T25853] FAT-fs (loop0): Directory bread(block 68) failed [ 1093.820445][T25847] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 1093.829100][T25853] FAT-fs (loop0): Directory bread(block 69) failed [ 1093.845207][T25847] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1093.852756][T25853] FAT-fs (loop0): Directory bread(block 70) failed [ 1093.865187][T25847] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1093.881426][T25847] ntfs: volume version 3.1. [ 1093.883889][T25853] FAT-fs (loop0): Directory bread(block 71) failed [ 1093.946652][T25853] FAT-fs (loop0): Directory bread(block 72) failed [ 1093.953244][T25853] FAT-fs (loop0): Directory bread(block 73) failed [ 1094.056302][T25847] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 1094.085759][ T6282] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 1094.163801][T25861] bond1: entered allmulticast mode [ 1094.316106][ T6246] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 1094.318170][ T6282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.390538][ T6282] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1094.463875][ T6282] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1094.487253][ T6282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.527280][ T6282] usb 2-1: config 0 descriptor?? [ 1094.547917][ T6282] qmi_wwan: probe of 2-1:0.0 failed with error -22 [ 1094.780674][ T28] usb 2-1: USB disconnect, device number 61 [ 1094.905215][T25888] loop2: detected capacity change from 0 to 136 [ 1094.919845][T25888] Attempt to read inode for relocated directory [ 1094.959884][T25888] syz.2.9031: attempt to access beyond end of device [ 1094.959884][T25888] loop2: rw=524288, sector=335544428, nr_sectors = 4 limit=136 [ 1095.009619][T25888] syz.2.9031: attempt to access beyond end of device [ 1095.009619][T25888] loop2: rw=0, sector=335544428, nr_sectors = 4 limit=136 [ 1095.071702][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 1095.071717][ T27] audit: type=1800 audit(1781714044.351:40): pid=25888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9031" name="file1" dev="loop2" ino=1487 res=0 errno=0 [ 1095.242852][T25901] netlink: 'syz.2.9035': attribute type 4 has an invalid length. [ 1095.252212][T25901] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.9035'. [ 1095.526047][T25911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9040'. [ 1095.821038][T25925] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9047'. [ 1095.834799][T25926] loop0: detected capacity change from 0 to 64 [ 1095.894697][T25921] loop1: detected capacity change from 0 to 4096 [ 1095.944327][T25921] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1096.107903][T25921] ntfs3: loop1: failed to convert "c46c" to cp862 [ 1096.412018][T25946] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1096.420020][T25946] IPv6: NLM_F_CREATE should be set when creating new route [ 1096.427416][T25946] IPv6: NLM_F_CREATE should be set when creating new route [ 1096.657399][ T6307] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1096.813846][T25965] SET target dimension over the limit! [ 1096.865456][ T6307] usb 2-1: Using ep0 maxpacket: 32 [ 1096.883989][ T6307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.914938][ T6307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1096.949231][ T6307] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1096.964099][ T6307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.985593][ T6307] usb 2-1: config 0 descriptor?? [ 1097.002476][ T6307] hub 2-1:0.0: USB hub found [ 1097.226804][ T6307] hub 2-1:0.0: 1 port detected [ 1097.251400][T25981] netlink: 'syz.3.9074': attribute type 10 has an invalid length. [ 1097.261838][T25981] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.9074'. [ 1097.274745][T25981] openvswitch: netlink: Flow key attr not present in new flow. [ 1097.419366][ T6307] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1097.436755][ T6307] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1097.469217][ T6307] usbhid 2-1:0.0: can't add hid device: -71 [ 1097.475275][ T6307] usbhid: probe of 2-1:0.0 failed with error -71 [ 1097.535337][ T6307] usb 2-1: USB disconnect, device number 62 [ 1097.561604][T17864] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1097.759945][T17864] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1097.776173][T17864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.797584][T17864] usb 1-1: Product: syz [ 1097.801815][T17864] usb 1-1: Manufacturer: syz [ 1097.811207][T17864] usb 1-1: SerialNumber: syz [ 1097.819064][T17864] usb 1-1: config 0 descriptor?? [ 1097.836478][T17864] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1097.997452][T25943] Process accounting paused [ 1098.227558][T17864] usb 1-1: USB disconnect, device number 75 [ 1098.496458][T26007] loop2: detected capacity change from 0 to 32768 [ 1098.549793][T26007] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1098.746659][ T6247] ocfs2: Unmounting device (7,2) on (node local) [ 1099.023378][T26042] loop3: detected capacity change from 0 to 64 [ 1099.287517][T26047] loop3: detected capacity change from 0 to 128 [ 1099.300005][T26047] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1099.311281][T26047] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1099.347843][T26047] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 1099.398705][ T6238] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1099.642642][ T27] audit: type=1326 audit(1781714049.254:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26057 comm="syz.2.9111" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3dd99ce59 code=0x7ffc0000 [ 1099.758577][ T27] audit: type=1326 audit(1781714049.254:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26057 comm="syz.2.9111" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3dd99ce59 code=0x7ffc0000 [ 1099.782660][ C0] vkms_vblank_simulate: vblank timer overrun [ 1099.801008][ T27] audit: type=1326 audit(1781714049.297:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26057 comm="syz.2.9111" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fe3dd99ce59 code=0x7ffc0000 [ 1099.873575][ T27] audit: type=1326 audit(1781714049.297:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26057 comm="syz.2.9111" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3dd99ce59 code=0x7ffc0000 [ 1099.935044][ T27] audit: type=1326 audit(1781714049.297:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26057 comm="syz.2.9111" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3dd99ce59 code=0x7ffc0000 [ 1100.355413][T26080] loop3: detected capacity change from 0 to 4096 [ 1100.363631][T26080] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1100.535696][T26094] ubi8: attaching mtd0 [ 1100.540353][T26094] ubi8 error: ubi_attach_mtd_dev: bad VID header (5) or data offsets (69) [ 1100.844843][T26105] loop3: detected capacity change from 0 to 64 [ 1100.904213][T26105] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1101.015116][T26112] loop2: detected capacity change from 0 to 128 [ 1101.033644][T26112] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 1101.225086][T26120] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9140'. [ 1101.263170][T26120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9140'. [ 1101.296314][T26120] netlink: 31 bytes leftover after parsing attributes in process `syz.3.9140'. [ 1101.319730][T26120] netlink: 'syz.3.9140': attribute type 2 has an invalid length. [ 1101.336577][T26120] netlink: 31 bytes leftover after parsing attributes in process `syz.3.9140'. [ 1101.486293][T26130] loop2: detected capacity change from 0 to 512 [ 1101.493603][T26130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1101.514826][T26132] netlink: 'syz.3.9147': attribute type 21 has an invalid length. [ 1101.552103][T26132] netlink: 'syz.3.9147': attribute type 1 has an invalid length. [ 1101.577701][T26130] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1101.606636][T26130] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1101.631154][T26130] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e018, mo2=0002] [ 1101.659018][T26130] System zones: 0-1, 15-15, 18-18, 34-34 [ 1101.709820][T26130] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1101.716325][T26130] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1101.793200][T26130] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1101.848816][T26130] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1101.851612][T26130] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.9146: bg 0: block 40: padding at end of block bitmap is not set [ 1101.851962][T26130] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1101.852250][T26130] EXT4-fs (loop2): 1 truncate cleaned up [ 1101.853564][T26130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1101.877441][T26130] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.9146: bad symlink. [ 1101.913983][T26129] loop1: detected capacity change from 0 to 32768 [ 1101.948862][T26129] jfs_strtoUCS: char2uni returned -22. [ 1102.009196][ T6247] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1102.009726][T26129] charset = cp949, char = 0xd4 [ 1102.644886][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1102.651344][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1102.710669][T26165] syz.1.9160: attempt to access beyond end of device [ 1102.710669][T26165] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1102.899285][T26170] netlink: 'syz.3.9165': attribute type 1 has an invalid length. [ 1103.221278][T26185] libceph: resolve 'c' (ret=-3): failed [ 1103.723631][T26204] netlink: 180 bytes leftover after parsing attributes in process `syz.3.9182'. [ 1103.852422][T26208] loop1: detected capacity change from 0 to 256 [ 1103.884508][T26208] exfat: Deprecated parameter 'utf8' [ 1103.915152][T26208] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 1103.929156][T26183] loop2: detected capacity change from 0 to 32768 [ 1104.003457][T26211] loop0: detected capacity change from 0 to 4096 [ 1104.030661][T26183] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1104.054005][T26211] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1104.241311][T26183] XFS (loop2): Ending clean mount [ 1104.415256][ T6247] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1104.683172][T26228] kAFS: unable to lookup cell ' [ 1104.683172][T26228] $)-.ײfYǝa2s [ 1104.683172][T26228] ' [ 1104.796653][ T1093] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.979901][ T1093] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.230490][ T1093] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.248975][T26234] loop0: detected capacity change from 0 to 4096 [ 1105.288519][T26234] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1105.599132][ T1093] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.793908][T26252] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1105.810178][T26252] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1105.820038][T26252] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1105.827972][T26252] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1105.848111][T26252] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1105.866716][T26252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1106.767822][ T788] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1106.915035][T26288] dlm: no locking on control device [ 1106.956906][ T788] usb 3-1: Using ep0 maxpacket: 32 [ 1106.967868][ T788] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.002904][ T788] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1107.045204][ T788] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1107.084031][ T788] usb 3-1: config 0 interface 0 has no altsetting 1 [ 1107.119438][ T788] usb 3-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 1107.133664][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.142182][T26293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9215'. [ 1107.152438][ T788] usb 3-1: Product: syz [ 1107.167219][ T788] usb 3-1: Manufacturer: syz [ 1107.173544][T26277] loop0: detected capacity change from 0 to 32768 [ 1107.177411][ T788] usb 3-1: SerialNumber: syz [ 1107.190970][ T788] usb 3-1: config 0 descriptor?? [ 1107.258033][T26277] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1107.571390][ T6241] ocfs2: Unmounting device (7,0) on (node local) [ 1107.654830][T17864] usb 3-1: USB disconnect, device number 74 [ 1107.786733][ T6246] Bluetooth: hci1: command tx timeout [ 1107.924958][T26248] chnl_net:caif_netlink_parms(): no params data found [ 1108.442019][T26326] sctp: [Deprecated]: syz.2.9225 (pid 26326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1108.442019][T26326] Use struct sctp_sack_info instead [ 1108.760552][T26248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.790181][T26248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.821312][T26248] bridge_slave_0: entered allmulticast mode [ 1108.828722][T26248] bridge_slave_0: entered promiscuous mode [ 1108.898858][T26348] tmpfs: Unknown parameter 'func' [ 1109.016853][T26248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.024051][T26248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.082694][T26248] bridge_slave_1: entered allmulticast mode [ 1109.089993][T26248] bridge_slave_1: entered promiscuous mode [ 1109.371804][T26248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.410900][T26248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1109.625235][T26248] team0: Port device team_slave_0 added [ 1109.708711][T26248] team0: Port device team_slave_1 added [ 1109.738750][ T6246] Bluetooth: hci1: command tx timeout [ 1109.822261][T26377] loop2: detected capacity change from 0 to 8192 [ 1110.032042][T26248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.088688][T26248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1110.152946][T26389] __vm_enough_memory: pid: 26389, comm: syz.2.9245, not enough memory for the allocation [ 1110.169655][T26248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.296127][ T1093] hsr_slave_0: left promiscuous mode [ 1110.319145][ T1093] hsr_slave_1: left promiscuous mode [ 1110.338489][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.358623][T26395] netlink: 'syz.3.9247': attribute type 3 has an invalid length. [ 1110.366614][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1110.393557][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.404126][T26395] netlink: 136 bytes leftover after parsing attributes in process `syz.3.9247'. [ 1110.423025][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.479189][ T1093] bridge_slave_1: left allmulticast mode [ 1110.496884][ T1093] bridge_slave_1: left promiscuous mode [ 1110.532448][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.560511][ T1093] bridge_slave_0: left allmulticast mode [ 1110.575403][ T1093] bridge_slave_0: left promiscuous mode [ 1110.581206][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.686194][ T27] audit: type=1400 audit(2000000009.184:46): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=26405 comm="syz.0.9252" [ 1110.874809][ T1093] veth1_macvtap: left promiscuous mode [ 1110.890317][ T1093] veth0_macvtap: left promiscuous mode [ 1110.907415][ T1093] veth1_vlan: left promiscuous mode [ 1110.921445][ T1093] veth0_vlan: left promiscuous mode [ 1111.175664][ T1093] infiniband syz1: set down [ 1111.238131][ T1093] bond1 (unregistering): Released all slaves [ 1111.292053][T26428] loop3: detected capacity change from 0 to 1024 [ 1111.341572][T26428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1111.367755][ T6307] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1111.377606][T26428] EXT4-fs error (device loop3): ext4_lookup:1858: comm syz.3.9260: inode #12: comm syz.3.9260: iget: illegal inode # [ 1111.428949][T26428] EXT4-fs (loop3): Remounting filesystem read-only [ 1111.474308][ T6238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.561083][ T6307] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 1111.585074][ T6307] usb 3-1: config 0 has no interface number 0 [ 1111.592589][ T6307] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1111.602664][ T6307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.614238][ T6307] usb 3-1: config 0 descriptor?? [ 1111.630910][ T6307] ums-realtek 3-1:0.3: USB Mass Storage device detected [ 1111.663219][ T6246] Bluetooth: hci1: command tx timeout [ 1111.854475][ T6192] usb 3-1: USB disconnect, device number 75 [ 1112.090137][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 1112.142956][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 1112.190846][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1112.243770][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1112.295597][ T49] smc: removing ib device syz1 [ 1112.720933][T26447] loop2: detected capacity change from 0 to 512 [ 1112.804301][T26447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1112.819911][T26447] ext4 filesystem being mounted at /2195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1112.902417][ T1093] bond0 (unregistering): Released all slaves [ 1112.934311][ T6247] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.032142][T26452] trusted_key: encrypted_key: insufficient parameters specified [ 1113.062165][T26248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.069170][T26248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.096231][T26248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.112361][T17864] infiniband syz1: ib_query_port failed (-19) [ 1113.112390][T26416] netlink: 'syz.0.9255': attribute type 2 has an invalid length. [ 1113.168111][T26454] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.9268'. [ 1113.516266][T26248] hsr_slave_0: entered promiscuous mode [ 1113.527170][T26248] hsr_slave_1: entered promiscuous mode [ 1113.570387][T26248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1113.579252][T26248] Cannot create hsr debugfs directory [ 1113.602977][ T6246] Bluetooth: hci1: command tx timeout [ 1113.709772][T26465] [U]  [ 1114.058912][T26472] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9277'. [ 1114.105812][T26474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1114.665532][ T6221] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1114.849830][T26502] loop0: detected capacity change from 0 to 24 [ 1114.887476][T26502] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1114.901693][ T6221] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1114.936247][T26502] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1114.937612][ T6221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.022121][ T6221] usb 4-1: config 0 descriptor?? [ 1115.273669][T26248] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1115.343917][T26510] loop0: detected capacity change from 0 to 764 [ 1115.376233][T26248] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1115.413509][ T6221] [drm:udl_init] *ERROR* Selecting channel failed [ 1115.441742][T26248] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1115.469824][ T6221] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 1115.521143][ T6221] [drm] Initialized udl on minor 2 [ 1115.537147][ T6221] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1115.555668][T26248] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1115.572831][ T6221] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1115.584198][ T6307] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1115.609080][ T6307] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1115.619980][ T6221] usb 4-1: USB disconnect, device number 74 [ 1115.648219][ T6307] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1115.935624][T26248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1116.014400][T26248] 8021q: adding VLAN 0 to HW filter on device team0 [ 1116.048005][T26244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.056833][T26244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1116.095770][T26244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.102989][T26244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1116.139235][ T6307] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1116.334075][ T6307] usb 1-1: Using ep0 maxpacket: 16 [ 1116.344484][ T6307] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 1116.364625][ T6307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.407788][ T6307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1116.455942][ T6307] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1116.488729][ T6307] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1116.510332][ T6307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.530423][ T6307] usb 1-1: config 0 descriptor?? [ 1116.572193][ T6307] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input66 [ 1116.616223][T26552] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9302'. [ 1116.652308][ T5125] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1116.677265][T26248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1116.715720][ T5125] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1116.779394][ T5125] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1116.800800][ T6307] usb 1-1: USB disconnect, device number 76 [ 1116.814164][T13504] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 1116.930137][ T788] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1117.116168][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 1117.131133][ T788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.151455][ T788] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1117.171121][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.180661][ T788] usb 4-1: Product: syz [ 1117.196278][ T788] usb 4-1: Manufacturer: syz [ 1117.227921][ T788] usb 4-1: SerialNumber: syz [ 1117.250411][ T788] usb 4-1: config 0 descriptor?? [ 1117.268936][ T788] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1117.324313][T26248] veth0_vlan: entered promiscuous mode [ 1117.355265][T26248] veth1_vlan: entered promiscuous mode [ 1117.463236][ T788] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 1117.473007][T26248] veth0_macvtap: entered promiscuous mode [ 1117.498471][ T788] quatech2: probe of 4-1:0.0 failed with error -8 [ 1117.514456][T26248] veth1_macvtap: entered promiscuous mode [ 1117.578694][T26248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.606036][T26248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.617155][T26248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.633524][T26248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.657315][T26248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1117.679744][T26583] xt_hashlimit: overflow, try lower: 3/0 [ 1117.700359][T26585] loop2: detected capacity change from 0 to 256 [ 1117.701109][ T6192] usb 4-1: USB disconnect, device number 75 [ 1117.717950][T26248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.737295][T26248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1117.776782][T26248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.804897][T26248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.820756][T26248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.841369][T26248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.861825][T26248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.872625][T26248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.885664][T26248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1117.912726][T26248] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.922752][T26248] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.942304][T26248] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.951499][T26248] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.167486][T26244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.194066][T26244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.280625][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.321409][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.823059][T26619] comedi: No check for data length of config insn id 6025 is implemented [ 1118.877851][T26619] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1118.933097][T26619] comedi: Assuming n=15 is correct [ 1119.460548][T26646] loop2: detected capacity change from 0 to 2048 [ 1119.513802][T26646] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1119.538583][T26649] loop4: detected capacity change from 0 to 512 [ 1119.637005][T26649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1119.673260][T26649] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1119.841347][T26248] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.859632][ T6307] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1119.879737][ T27] audit: type=1326 audit(2000000019.054:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26659 comm="syz.0.9338" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efcc4b9ce59 code=0x0 [ 1120.047548][T26665] loop0: detected capacity change from 0 to 256 [ 1120.074342][ T6307] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1120.114980][ T6307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.134122][ T6307] usb 4-1: Product: syz [ 1120.159617][ T6307] usb 4-1: Manufacturer: syz [ 1120.191784][ T6307] usb 4-1: SerialNumber: syz [ 1120.222300][ T6307] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1120.286617][ T28] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1120.341342][T26673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1120.455275][T26679] loop0: detected capacity change from 0 to 64 [ 1120.652896][T26686] loop2: detected capacity change from 0 to 64 [ 1120.792279][T13303] usb 4-1: USB disconnect, device number 76 [ 1120.976649][T26697] No such timeout policy "syz0" [ 1121.016779][T26699] loop2: detected capacity change from 0 to 164 [ 1121.081887][T26699] rock: directory entry would overflow storage [ 1121.095380][T26699] rock: sig=0x4f50, size=4, remaining=3 [ 1121.120223][T26699] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1121.305933][ T28] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1121.367142][ T28] ath9k_htc: Failed to initialize the device [ 1121.375429][T13303] usb 4-1: ath9k_htc: USB layer deinitialized [ 1122.065343][ T28] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1122.118776][ T27] audit: type=1326 audit(2000000021.458:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26742 comm="syz.3.9369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0dd79ce59 code=0x0 [ 1122.220495][T26748] netlink: 'syz.4.9370': attribute type 46 has an invalid length. [ 1122.233420][ T6221] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 1122.248187][T26748] netlink: 'syz.4.9370': attribute type 28 has an invalid length. [ 1122.261024][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 1122.275722][ T28] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1122.307932][ T28] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1122.315992][ T28] usb 3-1: Product: syz [ 1122.339617][ T28] usb 3-1: Manufacturer: syz [ 1122.354538][ T28] usb 3-1: SerialNumber: syz [ 1122.373356][ T28] usb 3-1: config 0 descriptor?? [ 1122.394051][ T28] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1122.423097][ T6221] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 1122.437971][ T6221] usb 1-1: config 8 has no interface number 0 [ 1122.465549][ T6221] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1122.484145][ T6221] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1122.518294][T26758] loop3: detected capacity change from 0 to 8 [ 1122.524750][ T6221] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1122.549420][ T6221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.558121][ T6221] usb 1-1: Product: syz [ 1122.585440][ T6221] usb 1-1: Manufacturer: syz [ 1122.605395][ T6221] usb 1-1: SerialNumber: syz [ 1122.730935][T26762] ./file0: Can't lookup blockdev [ 1122.768314][ T28] gspca_zc3xx: reg_r err -71 [ 1122.775846][ T28] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 1122.826157][ T28] usb 3-1: USB disconnect, device number 76 [ 1122.855078][ T6221] usb 1-1: USB disconnect, device number 77 [ 1123.671402][T26789] netlink: 'syz.2.9384': attribute type 21 has an invalid length. [ 1123.724468][T26789] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9384'. [ 1123.750330][T26791] loop4: detected capacity change from 0 to 256 [ 1123.763555][T26789] netlink: 'syz.2.9384': attribute type 5 has an invalid length. [ 1123.789623][T26789] netlink: 'syz.2.9384': attribute type 6 has an invalid length. [ 1123.821947][T26789] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9384'. [ 1124.321430][T26808] vlan0: entered promiscuous mode [ 1124.334189][T26782] loop0: detected capacity change from 0 to 32768 [ 1124.392556][T26782] JBD2: Ignoring recovery information on journal [ 1124.544247][T26782] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1124.915964][ T6241] ocfs2: Unmounting device (7,0) on (node local) [ 1125.151241][T26841] loop3: detected capacity change from 0 to 2048 [ 1125.205838][T26841] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1125.577869][T26857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9414'. [ 1125.736342][T26867] bond2: entered promiscuous mode [ 1125.742181][T26867] bond2: entered allmulticast mode [ 1125.748084][T26867] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1125.858228][ T788] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1126.027105][ T788] usb 5-1: Using ep0 maxpacket: 16 [ 1126.046037][ T788] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1126.065652][ T788] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1126.095196][ T788] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1126.121678][ T788] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1126.135361][ T788] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1126.165074][ T788] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1126.182973][ T788] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1126.202248][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.224264][ T788] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 1126.231385][T26887] netlink: 'syz.3.9426': attribute type 10 has an invalid length. [ 1126.239227][T26887] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9426'. [ 1126.423158][ T788] scsi host1: usb-storage 5-1:1.0 [ 1126.657790][T17864] usb 5-1: USB disconnect, device number 2 [ 1126.776639][T26883] loop2: detected capacity change from 0 to 40427 [ 1126.821551][T26883] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(30934016) [ 1126.834358][T26903] netlink: 'syz.0.9434': attribute type 5 has an invalid length. [ 1126.842375][T26883] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1126.916498][T26883] F2FS-fs (loop2): invalid crc value [ 1126.973281][T26883] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1127.110183][T26244] [ 1127.112556][T26244] ====================================================== [ 1127.116031][T26883] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1127.119651][T26244] WARNING: possible circular locking dependency detected [ 1127.119672][T26244] syzkaller #0 Not tainted [ 1127.119680][T26244] ------------------------------------------------------ [ 1127.119686][T26244] kworker/u4:2/26244 is trying to acquire lock: [ 1127.119696][T26244] ffff88814de10990 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x1aa/0x270 [ 1127.119771][T26244] [ 1127.119771][T26244] but task is already holding lock: [ 1127.119776][T26244] ffff88807e4a6c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 1127.119819][T26244] [ 1127.119819][T26244] which lock already depends on the new lock. [ 1127.119819][T26244] [ 1127.119825][T26244] [ 1127.119825][T26244] the existing dependency chain (in reverse order) is: [ 1127.119830][T26244] [ 1127.119830][T26244] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1127.119854][T26244] percpu_down_read+0x44/0x1a0 [ 1127.119874][T26244] ext4_writepages+0x1a4/0x350 [ 1127.119893][T26244] do_writepages+0x3b3/0x630 [ 1127.119921][T26244] __writeback_single_inode+0x153/0xec0 [ 1127.119943][T26244] writeback_single_inode+0x21f/0x760 [ 1127.119962][T26244] write_inode_now+0x183/0x210 [ 1127.119980][T26244] iput+0x5ae/0x920 [ 1127.119994][T26244] ext4_xattr_block_set+0x273f/0x32b0 [ 1127.120014][T26244] ext4_expand_extra_isize_ea+0x12c5/0x1e80 [ 1127.120033][T26244] __ext4_expand_extra_isize+0x306/0x400 [ 1127.128606][T26883] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1127.134045][T26244] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 1127.134094][T26244] ext4_evict_inode+0x7f3/0xea0 [ 1127.134111][T26244] evict+0x4ca/0x8d0 [ 1127.134126][T26244] ext4_orphan_cleanup+0xbec/0x1420 [ 1127.134141][T26244] ext4_fill_super+0x5eea/0x67b0 [ 1127.134157][T26244] get_tree_bdev+0x3f3/0x520 [ 1127.134171][T26244] vfs_get_tree+0x8c/0x280 [ 1127.134185][T26244] do_new_mount+0x24b/0xa40 [ 1127.134200][T26244] __se_sys_mount+0x2e7/0x3d0 [ 1127.134213][T26244] do_syscall_64+0x55/0xb0 [ 1127.134232][T26244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1127.134253][T26244] [ 1127.134253][T26244] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 1127.134280][T26244] down_read+0x46/0x2e0 [ 1127.134297][T26244] ext4_setattr+0x86b/0x1dc0 [ 1127.134316][T26244] notify_change+0xb0d/0xe10 [ 1127.134332][T26244] chown_common+0x413/0x5d0 [ 1127.134348][T26244] do_fchownat+0x14b/0x240 [ 1127.134364][T26244] __x64_sys_chown+0x82/0x90 [ 1127.134380][T26244] do_syscall_64+0x55/0xb0 [ 1127.134395][T26244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1127.134421][T26244] [ 1127.134421][T26244] -> #0 (jbd2_handle){++++}-{0:0}: [ 1127.134445][T26244] __lock_acquire+0x2df1/0x7d40 [ 1127.134463][T26244] lock_acquire+0x19e/0x420 [ 1127.134478][T26244] wait_transaction_locked+0x1c3/0x270 [ 1127.134495][T26244] start_this_handle+0x7e8/0x21c0 [ 1127.134509][T26244] jbd2__journal_start+0x2bb/0x5b0 [ 1127.134525][T26244] __ext4_journal_start_sb+0x203/0x560 [ 1127.134545][T26244] ext4_do_writepages+0xfb7/0x3990 [ 1127.134563][T26244] ext4_writepages+0x1dd/0x350 [ 1127.134582][T26244] do_writepages+0x3b3/0x630 [ 1127.134598][T26244] __writeback_single_inode+0x153/0xec0 [ 1127.134615][T26244] writeback_sb_inodes+0x7cd/0xf50 [ 1127.134633][T26244] __writeback_inodes_wb+0x111/0x240 [ 1127.134652][T26244] wb_writeback+0x47e/0xbf0 [ 1127.134669][T26244] wb_workfn+0xad7/0xe60 [ 1127.460519][T26244] process_scheduled_works+0xa5d/0x15d0 [ 1127.466641][T26244] worker_thread+0xa55/0xfc0 [ 1127.471743][T26244] kthread+0x2fa/0x390 [ 1127.476319][T26244] ret_from_fork+0x48/0x80 [ 1127.481275][T26244] ret_from_fork_asm+0x11/0x20 [ 1127.486585][T26244] [ 1127.486585][T26244] other info that might help us debug this: [ 1127.486585][T26244] [ 1127.496886][T26244] Chain exists of: [ 1127.496886][T26244] jbd2_handle --> &ei->xattr_sem --> &sbi->s_writepages_rwsem [ 1127.496886][T26244] [ 1127.510256][T26244] Possible unsafe locking scenario: [ 1127.510256][T26244] [ 1127.517703][T26244] CPU0 CPU1 [ 1127.523053][T26244] ---- ---- [ 1127.528405][T26244] rlock(&sbi->s_writepages_rwsem); [ 1127.533678][T26244] lock(&ei->xattr_sem); [ 1127.540544][T26244] lock(&sbi->s_writepages_rwsem); [ 1127.548249][T26244] lock(jbd2_handle); [ 1127.552307][T26244] [ 1127.552307][T26244] *** DEADLOCK *** [ 1127.552307][T26244] [ 1127.560533][T26244] 4 locks held by kworker/u4:2/26244: [ 1127.565887][T26244] #0: ffff88801e254d38 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1127.577102][T26244] #1: ffffc9000cd87d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1127.589525][T26244] #2: ffff88807e4a40e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 1127.600041][T26244] #3: ffff88807e4a6c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 1127.610473][T26244] [ 1127.610473][T26244] stack backtrace: [ 1127.616353][T26244] CPU: 1 PID: 26244 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 1127.623970][T26244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1127.634015][T26244] Workqueue: writeback wb_workfn (flush-8:0) [ 1127.639997][T26244] Call Trace: [ 1127.643265][T26244] [ 1127.646186][T26244] dump_stack_lvl+0x18c/0x250 [ 1127.650855][T26244] ? load_image+0x420/0x420 [ 1127.655346][T26244] ? show_regs_print_info+0x20/0x20 [ 1127.660536][T26244] ? print_circular_bug+0x12b/0x1a0 [ 1127.665728][T26244] check_noncircular+0x2fc/0x400 [ 1127.670661][T26244] ? print_deadlock_bug+0x5d0/0x5d0 [ 1127.675850][T26244] ? lockdep_lock+0xf5/0x230 [ 1127.680433][T26244] ? _find_first_zero_bit+0xd3/0x100 [ 1127.685745][T26244] __lock_acquire+0x2df1/0x7d40 [ 1127.690593][T26244] ? __lock_acquire+0x1347/0x7d40 [ 1127.695607][T26244] ? verify_lock_unused+0x140/0x140 [ 1127.700795][T26244] ? mark_lock+0x94/0x320 [ 1127.705122][T26244] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1127.711091][T26244] lock_acquire+0x19e/0x420 [ 1127.715584][T26244] ? wait_transaction_locked+0x1aa/0x270 [ 1127.721227][T26244] ? __lock_acquire+0x7d40/0x7d40 [ 1127.726237][T26244] ? ret_from_fork_asm+0x11/0x20 [ 1127.731169][T26244] ? read_lock_is_recursive+0x20/0x20 [ 1127.736528][T26244] ? prepare_to_wait_exclusive+0x82/0x220 [ 1127.742245][T26244] ? wait_transaction_locked+0x1aa/0x270 [ 1127.747866][T26244] wait_transaction_locked+0x1c3/0x270 [ 1127.753320][T26244] ? wait_transaction_locked+0x1aa/0x270 [ 1127.758945][T26244] ? stack_trace_snprint+0xf0/0xf0 [ 1127.764047][T26244] ? jbd2_journal_begin_ordered_truncate+0x150/0x150 [ 1127.770714][T26244] ? wake_bit_function+0x200/0x200 [ 1127.775822][T26244] ? kasan_set_track+0x5f/0x70 [ 1127.780582][T26244] start_this_handle+0x7e8/0x21c0 [ 1127.785597][T26244] ? writeback_sb_inodes+0x7cd/0xf50 [ 1127.790887][T26244] ? jbd2__journal_start+0x5b0/0x5b0 [ 1127.796174][T26244] ? __kasan_slab_alloc+0x6c/0x80 [ 1127.801189][T26244] ? slab_post_alloc_hook+0x8a/0x4b0 [ 1127.806468][T26244] ? rcu_is_watching+0x15/0xb0 [ 1127.811223][T26244] ? kmem_cache_alloc+0x149/0x2d0 [ 1127.816238][T26244] jbd2__journal_start+0x2bb/0x5b0 [ 1127.821341][T26244] __ext4_journal_start_sb+0x203/0x560 [ 1127.826801][T26244] ext4_do_writepages+0xfb7/0x3990 [ 1127.831917][T26244] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 1127.838764][T26244] ? rcu_read_lock_any_held+0xb4/0x140 [ 1127.844217][T26244] ? __lock_acquire+0x1347/0x7d40 [ 1127.849231][T26244] ext4_writepages+0x1dd/0x350 [ 1127.853988][T26244] ? ext4_read_folio+0x2f0/0x2f0 [ 1127.858918][T26244] ? reacquire_held_locks+0x30e/0x5b0 [ 1127.864277][T26244] ? writeback_sb_inodes+0x362/0xf50 [ 1127.869557][T26244] ? ext4_read_folio+0x2f0/0x2f0 [ 1127.874488][T26244] do_writepages+0x3b3/0x630 [ 1127.879081][T26244] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 1127.884800][T26244] ? writeback_sb_inodes+0x4b0/0xf50 [ 1127.890092][T26244] ? __lock_acquire+0x7d40/0x7d40 [ 1127.895111][T26244] ? do_raw_spin_lock+0x11f/0x2c0 [ 1127.900146][T26244] __writeback_single_inode+0x153/0xec0 [ 1127.905695][T26244] writeback_sb_inodes+0x7cd/0xf50 [ 1127.910816][T26244] ? queue_io+0x550/0x550 [ 1127.915149][T26244] ? __writeback_inodes_wb+0x240/0x240 [ 1127.920605][T26244] __writeback_inodes_wb+0x111/0x240 [ 1127.925890][T26244] wb_writeback+0x47e/0xbf0 [ 1127.930388][T26244] ? queue_io+0x3d1/0x550 [ 1127.934711][T26244] ? percpu_ref_tryget+0x250/0x250 [ 1127.939826][T26244] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1127.945803][T26244] ? process_scheduled_works+0x96f/0x15d0 [ 1127.951515][T26244] wb_workfn+0xad7/0xe60 [ 1127.955751][T26244] ? try_to_wake_up+0x70a/0x1190 [ 1127.960685][T26244] ? inode_wait_for_writeback+0x230/0x230 [ 1127.966401][T26244] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1127.972373][T26244] ? read_lock_is_recursive+0x20/0x20 [ 1127.977737][T26244] ? _raw_spin_unlock_irq+0x23/0x50 [ 1127.982929][T26244] ? process_scheduled_works+0x96f/0x15d0 [ 1127.988638][T26244] ? process_scheduled_works+0x96f/0x15d0 [ 1127.994349][T26244] process_scheduled_works+0xa5d/0x15d0 [ 1127.999894][T26244] ? worker_attach_to_pool+0x380/0x380 [ 1128.005347][T26244] ? assign_work+0x3d2/0x5d0 [ 1128.009932][T26244] worker_thread+0xa55/0xfc0 [ 1128.014518][T26244] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1128.020423][T26244] ? _raw_spin_unlock+0x40/0x40 [ 1128.025291][T26244] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1128.031199][T26244] kthread+0x2fa/0x390 [ 1128.035277][T26244] ? pr_cont_work+0x560/0x560 [ 1128.039953][T26244] ? kthread_blkcg+0xd0/0xd0 [ 1128.044534][T26244] ret_from_fork+0x48/0x80 [ 1128.048945][T26244] ? kthread_blkcg+0xd0/0xd0 [ 1128.053521][T26244] ret_from_fork_asm+0x11/0x20 [ 1128.058296][T26244] [ 1128.073104][T26883] syz.2.9424: attempt to access beyond end of device [ 1128.073104][T26883] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 1128.101917][T26914] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1128.126684][ T6221] kernel write not supported for file /4305/clear_refs (pid: 6221 comm: kworker/1:3)