last executing test programs: 4.084876086s ago: executing program 0 (id=6654): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000040001000003be8c5ee17688", 0x10) 3.954935871s ago: executing program 3 (id=6658): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)=@urb_type_interrupt={0x1, {0x7, 0x1}, 0x4, 0x22, 0x0, 0x0, 0x8008, 0x3, 0x0, 0x4, 0x4, 0x0}) 3.870906574s ago: executing program 1 (id=6659): r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setlease(r0, 0x400, 0x2) 3.809847655s ago: executing program 0 (id=6660): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000e40)={0x2, 0x3, 0x3, 0x9, 0x10, 0x0, 0x70bd28, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e22, 0x9, @private2, 0x8}}, @sadb_sa={0x2, 0x1, 0x0, 0x3, 0x1, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0xff, 0x80, 0x0, @in6={0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd25, 0x3505}]}, 0x80}}, 0x810) 3.775553484s ago: executing program 4 (id=6661): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) 3.712789552s ago: executing program 3 (id=6663): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x449, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x9}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x44}}, 0x0) 3.652462969s ago: executing program 1 (id=6664): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_ep_write(r0, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") 3.539788993s ago: executing program 0 (id=6665): r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="580000001800050401000000000000000a800000fe040002000000001400010020010db800000000000000000000000106001500070000001800160008000100010000000c000b00080001000b0000000800040001000000", 0x58) 3.368475636s ago: executing program 0 (id=6666): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f0000000000)={[{@compress_force}, {}, {@nodatasum}, {@nossd}, {}, {@noflushoncommit}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) 3.363964606s ago: executing program 3 (id=6667): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x25dfdbff, [@sadb_address={0x3, 0x5, 0xff, 0x0, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @in=@multicast1, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 3.239949228s ago: executing program 3 (id=6669): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001fe0b1f1079092702008c010203010902140001a9005006090427"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 3.228974624s ago: executing program 4 (id=6670): r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4090, 0xffa}], 0x1, 0xa, 0x203) 2.872815987s ago: executing program 4 (id=6672): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x248, @mcast1, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x238}, 0x4800) 2.528678948s ago: executing program 4 (id=6673): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x25, 0x1, 0x20, "b49e1b6225030000000010005a3cf99eecd400000500", 0x16f66bf97}) 2.108771408s ago: executing program 2 (id=6675): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read(r0, 0x0, 0xdce7) 2.048793606s ago: executing program 4 (id=6676): r0 = syz_ublk_setup_io_uring(0x2445, &(0x7f0000000080)={0x0, 0x594d, 0x2, 0x2, 0x2d2}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000240)={0x28, 0x0, 0x0, r0, 0x0, 0x0, 0x8, 0x3}, 0x1) 2.037217492s ago: executing program 2 (id=6677): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x4481, 0x609}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xff}]}, 0x40}}, 0x40014) 1.835269459s ago: executing program 1 (id=6678): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, 0x0) 1.714916559s ago: executing program 4 (id=6679): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f000000ac40)="$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") ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000003900)={0x0, 0x1010}) 1.424795288s ago: executing program 3 (id=6680): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54d, &(0x7f0000000780)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.375058537s ago: executing program 1 (id=6681): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x10}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000844}, 0x24) 1.345586696s ago: executing program 2 (id=6682): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000380)="6819", 0x2}, {0x0, 0x11}], 0x2}}, {{&(0x7f0000000080)={0x2, 0x4e26, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000540)="17349d03781faa032c8e742110fdadf10996fbc9115102495f1af15f54debe265b2c6a62d7a93a9bf3a4db35c49b936e8616cbede0c1d36bb58d731d08cc3b1fb1bbe71e8422148b8f12403b13f417966c2e6d23f0078467a8b4464377", 0x5d}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000340)="7317", 0x2}], 0x1}}], 0x3, 0x2000c044) 822.859302ms ago: executing program 0 (id=6683): r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x60040) read$FUSE(r0, &(0x7f0000001080)={0x2020}, 0x2020) 808.3915ms ago: executing program 2 (id=6684): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x7b26}, 0x8) 710.453268ms ago: executing program 1 (id=6685): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x44, 0x40, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x2fc, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="a831539e"]}]}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x27, 0x0, 0x0, @u64=0x2e}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r0}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 549.018074ms ago: executing program 3 (id=6686): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0xffe0}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007fffffff8d000000b8"], 0xd0}, 0x480c4) 351.216286ms ago: executing program 2 (id=6687): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) pread64(r0, 0x0, 0x0, 0x255) 262.777853ms ago: executing program 1 (id=6688): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000024c0)={[{@nls={'nls', 0x3d, 'koi8-u'}}, {@nobarrier}, {}, {@force}, {@uid}, {@uid}]}, 0x1, 0x5ee, &(0x7f00000027c0)="$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") symlink(&(0x7f00000003c0)='./file2/../file0\x00', &(0x7f0000000380)='./file0\x00') 23.152004ms ago: executing program 2 (id=6689): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) 0s ago: executing program 0 (id=6690): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): 4181][T19474] ? xlog_alloc_buffer+0x11f/0x200 [ 754.784218][T19474] xlog_alloc_buffer+0x160/0x200 [ 754.784250][T19474] ? xlog_alloc_buffer+0x11f/0x200 [ 754.784285][T19474] xlog_do_recovery_pass+0xb1f/0xce0 [ 754.784331][T19474] ? xfs_rw_bdev+0x277/0x2a0 [ 754.784364][T19474] ? __pfx_xlog_do_recovery_pass+0x10/0x10 [ 754.784411][T19474] ? xlog_seek_logrec_hdr+0x45f/0x4b0 [ 754.784461][T19474] xlog_verify_tail+0x1e4/0x3f0 [ 754.784508][T19474] xlog_verify_head+0x1ea/0x440 [ 754.784552][T19474] xlog_find_tail+0x5d6/0x880 [ 754.784597][T19474] xlog_recover+0x4b/0x3d0 [ 754.784633][T19474] xfs_log_mount+0x253/0x3e0 [ 754.784666][T19474] xfs_mountfs+0xedf/0x2380 [ 754.784713][T19474] ? __pfx_xfs_mountfs+0x10/0x10 [ 754.784752][T19474] ? xfs_setup_dax_always+0x20f/0x290 [ 754.784784][T19474] xfs_fs_fill_super+0x115a/0x15a0 [ 754.784827][T19474] get_tree_bdev_flags+0x430/0x4f0 [ 754.784853][T19474] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 754.784880][T19474] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 754.784917][T19474] vfs_get_tree+0x92/0x2a0 [ 754.784943][T19474] do_new_mount+0x319/0xdc0 [ 754.784982][T19474] ? __pfx_do_new_mount+0x10/0x10 [ 754.785019][T19474] ? ns_capable+0x84/0xe0 [ 754.785053][T19474] ? path_mount+0x647/0x1050 [ 754.785088][T19474] ? user_path_at+0xd4/0x160 [ 754.785128][T19474] __se_sys_mount+0x31d/0x420 [ 754.785169][T19474] ? __pfx___se_sys_mount+0x10/0x10 [ 754.785211][T19474] ? __x64_sys_mount+0x20/0xc0 [ 754.785245][T19474] do_syscall_64+0x166/0x520 [ 754.785276][T19474] ? trace_irq_disable+0x3b/0x140 [ 754.785299][T19474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.785325][T19474] ? clear_bhb_loop+0x70/0xc0 [ 754.785353][T19474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.785376][T19474] RIP: 0033:0x7ff5a659f3ca [ 754.785398][T19474] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.785419][T19474] RSP: 002b:00007ff5a7479e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 754.785446][T19474] RAX: ffffffffffffffda RBX: 00007ff5a7479ee0 RCX: 00007ff5a659f3ca [ 754.785464][T19474] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 00007ff5a7479ea0 [ 754.785482][T19474] RBP: 0000200000000300 R08: 00007ff5a7479ee0 R09: 0000000004000000 [ 754.785499][T19474] R10: 0000000004000000 R11: 0000000000000246 R12: 00002000000002c0 [ 754.785516][T19474] R13: 00007ff5a7479ea0 R14: 0000000000009817 R15: 0000200000000040 [ 754.785552][T19474] [ 754.960451][T19474] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 754.960476][T19474] XFS (loop2): Invalid block length (0xf809) for buffer [ 754.960532][T19474] XFS (loop2): failed to locate log tail [ 754.960548][T19474] XFS (loop2): log mount/recovery failed: error -12 [ 755.165301][T19474] XFS (loop2): log mount failed [ 755.279312][T19513] ICMPv6: NA: aa:aa:aa:aa:aa:bb advertised our address fe80::aa on syz_tun! [ 755.556156][ T5733] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 755.717689][ T5733] usb 4-1: not running at top speed; connect to a high speed hub [ 755.717759][ T5733] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 755.720760][ T5733] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 755.720927][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.788396][ T5733] gspca_main: spca501-2.14.0 probing 0000:0000 [ 755.941187][ T1572] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 756.014732][ T5733] gspca_spca501: reg write: error -71 [ 756.014779][ T5733] spca501 4-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 756.014985][ T5733] spca501 4-1:1.0: probe with driver spca501 failed with error -22 [ 756.060611][ T5733] uvcvideo 4-1:1.0: Found UVC 1.00 device (0000:0000) [ 756.060719][ T5733] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 756.087904][ T122] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 756.114694][ T1572] usb 1-1: unable to get BOS descriptor or descriptor too short [ 756.114766][ T1572] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 756.151218][ T1572] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 is Bulk; changing to Interrupt [ 756.151269][ T1572] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 756.151315][ T1572] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 756.194021][ T5733] usb 4-1: USB disconnect, device number 61 [ 756.206568][ T1572] usb 1-1: string descriptor 0 read error: -22 [ 756.206722][ T1572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.235423][T19529] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 756.235719][T19529] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 756.236052][T19529] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 756.275694][ T122] usb 5-1: unable to get BOS descriptor or descriptor too short [ 756.275774][ T122] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 756.280052][ T122] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 756.280128][ T122] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 756.280259][ T122] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 756.307203][ T122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 756.307289][ T122] usb 5-1: Product: syz [ 756.307341][ T122] usb 5-1: Manufacturer: syz [ 756.317143][T19535] loop2: detected capacity change from 0 to 32768 [ 756.354982][ T1572] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 756.362236][ T1572] usb 1-1: too many endpoints [ 756.386934][T19535] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 69: chain list count 1 [ 756.386983][T19535] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 756.387012][T19535] OCFS2: File system is now read-only. [ 756.387024][T19535] (syz.2.5796,19535,0):ocfs2_read_locked_inode:633 ERROR: status = -30 [ 756.387293][T19535] (syz.2.5796,19535,0):_ocfs2_get_system_file_inode:141 ERROR: status = -30 [ 756.387872][T19535] (syz.2.5796,19535,0):ocfs2_init_global_system_inodes:465 ERROR: status = -30 [ 756.387945][T19535] (syz.2.5796,19535,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 2, possibly corrupt fs? [ 756.388010][T19535] (syz.2.5796,19535,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30 [ 756.388077][T19535] (syz.2.5796,19535,0):ocfs2_initialize_super:2216 ERROR: status = -30 [ 756.388361][T19535] (syz.2.5796,19535,0):ocfs2_fill_super:1185 ERROR: status = -30 [ 756.494884][ T122] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 756.576608][ T1572] usb 1-1: USB disconnect, device number 55 [ 756.677837][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 756.710788][ T122] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 49: -71 (exp. 1). [ 756.714720][ T122] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 49: -71 (exp. 1). [ 756.720758][ T122] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 49: -71 (exp. 1). [ 756.721892][ T122] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 49: -71 (exp. 1). [ 756.742034][ T122] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 49: -71 (exp. 1). [ 756.753738][ T122] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 49: -71 (exp. 1). [ 756.761478][ T122] uvcvideo 5-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 49: -71 (exp. 1). [ 756.765625][ T122] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 49: -71 (exp. 1). [ 756.775136][ T122] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 49: -71 (exp. 1). [ 756.775771][ T122] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 756.838507][ T122] usb 5-1: USB disconnect, device number 40 [ 757.210721][T19552] loop3: detected capacity change from 0 to 8 [ 757.453139][T19562] loop2: detected capacity change from 0 to 1024 [ 757.463131][T19562] hfsplus: failed to load extents file [ 757.464832][ T122] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 757.578681][ T1572] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 757.621826][ T122] usb 1-1: Using ep0 maxpacket: 8 [ 757.627397][ T122] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 757.635134][ T122] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 757.635227][ T122] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.635289][ T122] usb 1-1: config 0 has no interface number 0 [ 757.635396][ T122] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 757.635460][ T122] usb 1-1: config 0 interface 122 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 757.652494][ T122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.652588][ T122] usb 1-1: Product: syz [ 757.652651][ T122] usb 1-1: Manufacturer: syz [ 757.652693][ T122] usb 1-1: SerialNumber: syz [ 757.674217][ T122] usb 1-1: config 0 descriptor?? [ 757.739190][ T1572] usb 4-1: Using ep0 maxpacket: 16 [ 757.745240][ T1572] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 757.756226][ T1572] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 757.766623][ T1572] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 757.784364][ T1572] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 757.784418][ T1572] usb 4-1: SerialNumber: syz [ 757.808281][ T1572] usb 4-1: 0:2 : does not exist [ 757.836370][ T5719] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 757.924470][ T122] usb 1-1: NFC: intf ffff888032230000 id ffffffff8f85c800 [ 757.959097][ T122] usb 1-1: USB disconnect, device number 56 [ 758.006991][ T5719] usb 5-1: Using ep0 maxpacket: 32 [ 758.013246][ T5719] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 758.024209][ T5719] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 758.034669][ T5719] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1023 [ 758.034708][ T5719] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 758.062023][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.070311][ T5719] usb 5-1: Product: syz [ 758.074913][ T5719] usb 5-1: Manufacturer: syz [ 758.079663][ T5719] usb 5-1: SerialNumber: syz [ 758.088939][T19565] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 758.116436][ T10] usb 4-1: USB disconnect, device number 62 [ 758.206572][ T2363] pvrusb2: request_firmware fatal error with code=-110 [ 758.214216][ T2363] pvrusb2: Failure uploading firmware1 [ 758.220053][ T2363] pvrusb2: Device initialization was not successful. [ 758.227346][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 758.237863][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 758.242070][ T5737] pvrusb2: Device being rendered inoperable [ 758.287141][T19577] loop2: detected capacity change from 0 to 128 [ 758.342179][ T5719] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 758.349503][ T5719] usb 5-1: MIDIStreaming interface descriptor not found [ 758.456516][ T5719] usb 5-1: USB disconnect, device number 41 [ 758.525363][ T5989] udevd[5989]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 758.584776][ T5737] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 758.752336][ T5737] usb 2-1: Using ep0 maxpacket: 16 [ 758.754394][ T5737] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 758.768904][ T5737] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.771221][ T5737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 758.771313][ T5737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 758.771386][ T5737] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 758.795894][ T5737] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 758.795987][ T5737] usb 2-1: Manufacturer: syz [ 758.850108][ T5737] usb 2-1: config 0 descriptor?? [ 758.885315][ T122] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 759.053425][ T122] usb 1-1: unable to get BOS descriptor or descriptor too short [ 759.053579][ T122] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 759.078623][ T122] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.078686][ T122] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 759.078933][ T122] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 759.097923][ T122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 759.097954][ T122] usb 1-1: Product: syz [ 759.097973][ T122] usb 1-1: Manufacturer: syz [ 759.137568][T19593] loop2: detected capacity change from 0 to 4096 [ 759.171035][ T122] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 759.303860][ T5737] rc_core: IR keymap rc-hauppauge not found [ 759.303938][ T5737] Registered IR keymap rc-empty [ 759.320128][ T5737] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.336399][T19593] ntfs3(loop2): ino=19, mi_enum_attr [ 759.347475][ T5737] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.350763][T19593] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 759.368031][ T5737] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 759.404935][ T5737] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input61 [ 759.430257][ T122] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 49: -71 (exp. 1). [ 759.434425][ T122] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 49: -71 (exp. 1). [ 759.435158][ T5737] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.440772][ T122] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 49: -71 (exp. 1). [ 759.459228][ T122] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 49: -71 (exp. 1). [ 759.459931][ T5737] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.460519][ T122] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 49: -71 (exp. 1). [ 759.482806][ T122] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 49: -71 (exp. 1). [ 759.488384][ T5737] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.489563][ T122] uvcvideo 1-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 49: -71 (exp. 1). [ 759.492862][ T122] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 49: -71 (exp. 1). [ 759.513692][ T5737] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.518924][ T122] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 49: -71 (exp. 1). [ 759.533127][ T5737] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.534292][ T122] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 759.545803][ T30] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 759.555539][ T5737] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.572695][ T5737] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.591040][ T5737] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.599155][ T122] usb 1-1: USB disconnect, device number 57 [ 759.612453][ T5737] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.636124][ T5737] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.668877][ T5737] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 759.668939][ T5737] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 759.719686][ T5737] usb 2-1: USB disconnect, device number 39 [ 759.727596][ T30] usb 5-1: unable to get BOS descriptor or descriptor too short [ 759.737194][ T30] usb 5-1: not running at top speed; connect to a high speed hub [ 759.737248][ T30] usb 5-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 759.757560][ T30] usb 5-1: config 1 interface 0 altsetting 126 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 759.757612][ T30] usb 5-1: config 1 interface 0 altsetting 126 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 759.757658][ T30] usb 5-1: config 1 interface 0 has no altsetting 0 [ 759.806243][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.814398][ T30] usb 5-1: Product: syz [ 759.819037][ T30] usb 5-1: Manufacturer: syz [ 759.823756][ T30] usb 5-1: SerialNumber: syz [ 759.833715][T19597] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 759.934720][T19594] loop3: detected capacity change from 0 to 32768 [ 759.999830][T19594] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 759.999876][T19594] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 760.034299][T19604] loop2: detected capacity change from 0 to 8 [ 760.073311][T19604] SQUASHFS error: zlib decompression failed, data probably corrupt [ 760.073365][T19604] SQUASHFS error: Failed to read block 0x9b: -5 [ 760.073424][T19604] SQUASHFS error: Unable to read metadata cache entry [99] [ 760.073445][T19604] SQUASHFS error: Unable to read inode 0x127 [ 760.196197][ T30] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input62 [ 760.213155][ T4969] bcm5974 5-1:1.0: could not read from device [ 760.220943][T19594] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 760.266821][ T4969] bcm5974 5-1:1.0: could not read from device [ 760.269500][ T5719] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 760.269552][ T5719] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 760.305773][T19608] loop0: detected capacity change from 0 to 4096 [ 760.306980][ T4969] bcm5974 5-1:1.0: could not read from device [ 760.327091][ T4969] bcm5974 5-1:1.0: could not read from device [ 760.335844][ T30] usb 5-1: USB disconnect, device number 42 [ 760.366421][T19608] ntfs3(loop0): try to read out of volume at offset 0x1ffc00 [ 760.366664][T19608] ntfs3(loop0): Failed to load $MFT. [ 760.440659][T19610] loop2: detected capacity change from 0 to 1764 [ 760.457316][T19610] isofs_fill_super: get root inode failed [ 760.812080][ T5719] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 506ms [ 760.812890][ T5719] gfs2: fsid=syz:syz.0: jid=0: Done [ 760.813025][T19594] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 760.833160][ T5737] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 760.972792][ T1572] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 760.992125][T19628] loop1: detected capacity change from 0 to 8 [ 761.006942][ T5737] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 761.017635][ T5737] usb 3-1: config 201 has an invalid interface number: 249 but max is 0 [ 761.017684][ T5737] usb 3-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 761.017711][ T5737] usb 3-1: config 201 has no interface number 0 [ 761.017753][ T5737] usb 3-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 761.017787][ T5737] usb 3-1: config 201 interface 249 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 761.017821][ T5737] usb 3-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 761.017854][ T5737] usb 3-1: config 201 interface 249 has no altsetting 0 [ 761.037385][T19628] SQUASHFS error: lzo decompression failed, data probably corrupt [ 761.037447][T19628] SQUASHFS error: Failed to read block 0x91: -5 [ 761.037462][T19628] SQUASHFS error: Unable to read metadata cache entry [8f] [ 761.037477][T19628] SQUASHFS error: Unable to read inode 0x11f [ 761.125169][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.125227][ T5737] usb 3-1: Product: syz [ 761.125260][ T5737] usb 3-1: Manufacturer: syz [ 761.125281][ T5737] usb 3-1: SerialNumber: syz [ 761.161297][ T1572] usb 1-1: unable to get BOS descriptor or descriptor too short [ 761.161375][ T1572] usb 1-1: New USB device found, idVendor=0baf, idProduct=00f1, bcdDevice=d4.68 [ 761.172157][ T1572] usb 1-1: config 9 has an invalid interface number: 97 but max is 0 [ 761.172235][ T1572] usb 1-1: config 9 has no interface number 0 [ 761.187316][ T1572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.187399][ T1572] usb 1-1: Product: syz [ 761.187453][ T1572] usb 1-1: Manufacturer: syz [ 761.187537][ T1572] usb 1-1: SerialNumber: syz [ 761.200894][ T5733] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 761.358223][ T5733] usb 5-1: Using ep0 maxpacket: 32 [ 761.364125][ T5733] usb 5-1: New USB device found, idVendor=2899, idProduct=012c, bcdDevice=fd.42 [ 761.379799][ T5733] usb 5-1: config 64 has an invalid interface number: 102 but max is 0 [ 761.379863][ T5733] usb 5-1: config 64 has no interface number 0 [ 761.379917][ T5733] usb 5-1: config 64 interface 102 has no altsetting 0 [ 761.411887][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.411933][ T5733] usb 5-1: Product: syz [ 761.411966][ T5733] usb 5-1: Manufacturer: syz [ 761.411986][ T5733] usb 5-1: SerialNumber: syz [ 761.465732][ T5737] ath6kl: Failed to submit usb control message: -71 [ 761.465832][ T5737] ath6kl: unable to send the bmi data to the device: -71 [ 761.465886][ T5737] ath6kl: Unable to send get target info: -71 [ 761.488855][ T5737] ath6kl: Failed to init ath6kl core: -71 [ 761.499197][ T5737] ath6kl_usb 3-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 761.518906][ T5737] usb 3-1: USB disconnect, device number 40 [ 761.554093][ T1572] usb 1-1: USB disconnect, device number 58 [ 761.674378][ T5733] rndis_host 5-1:64.102: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 761.687227][ T5733] gspca_main: spca500-2.14.0 probing 2899:012c [ 761.715715][ T5733] usb 5-1: USB disconnect, device number 43 [ 761.838971][ T122] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 761.998744][ T122] usb 2-1: Using ep0 maxpacket: 32 [ 762.001701][ T122] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 762.005498][ T122] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.014289][ T122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.014380][ T122] usb 2-1: Product: syz [ 762.014446][ T122] usb 2-1: Manufacturer: syz [ 762.014502][ T122] usb 2-1: SerialNumber: syz [ 762.050883][ T122] usb 2-1: config 0 descriptor?? [ 762.067380][ T122] usb 2-1: No union descriptors [ 762.077922][ T122] usb 2-1: unsupported MDLM descriptors [ 762.324555][ T122] usb 2-1: USB disconnect, device number 40 [ 762.525278][ T5733] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 762.670592][T19646] loop2: detected capacity change from 0 to 32768 [ 762.680809][T19646] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 77184bab-8ad8-4ac8-bc55-3427c2a8ff88 [ 762.680902][T19646] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5845 (19646) [ 762.693728][ T5733] usb 1-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 762.713159][ T5733] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 762.713187][ T5733] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 762.734345][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.734398][ T5733] usb 1-1: Product: syz [ 762.734415][ T5733] usb 1-1: Manufacturer: syz [ 762.734456][ T5733] usb 1-1: SerialNumber: syz [ 762.769331][ T30] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 762.828581][T19646] BTRFS info (device loop2 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 762.828647][T19646] BTRFS info (device loop2 state S): using blake2b checksum algorithm [ 762.886757][ T169] BTRFS warning (device loop2 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x3226f9dadc896f8f7b9a0be7c609110345c27f6019125c38f3283b3a68e897a5 found 0x2ed603e1c7020c26560d5b67cb583d18728f31e4c19fda36b9e72f3cdfabcbb2 level 0, ignored [ 762.914951][ T134] BTRFS warning (device loop2 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0xb929531db417ae5491593d99afe1510df15bdaa63fb6603d26a93ec9245f098d found 0xeacbcd5be2c117c4e534575e3c66b65cca333657eff65f920b882862d50ff9a1 level 0, ignored [ 762.917214][ T134] BTRFS warning (device loop2 state ES): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf8bb6bdef03b64ff3b11a2a87ba7a2aeacfdb41cc49a87adad5cc1644d216b29 level 0, ignored [ 762.917386][ T134] page: refcount:3 mapcount:0 mapping:ffff8880551da6e8 index:0x517 pfn:0x5306a [ 762.917447][ T134] memcg:ffff88801ca8c600 [ 762.917533][ T134] aops:btree_aops ino:1 [ 762.917617][ T134] flags: 0xfff00000004000(private|node=0|zone=1|lastcpupid=0x7ff) [ 762.917741][ T134] raw: 00fff00000004000 0000000000000000 dead000000000122 ffff8880551da6e8 [ 762.917802][ T134] raw: 0000000000000517 ffff888056221d80 00000003ffffffff ffff88801ca8c600 [ 762.917890][ T134] page dumped because: eb page dump [ 762.917932][ T134] page_owner tracks the page as allocated [ 762.917962][ T134] page last allocated via order 0, migratetype Movable, gfp_mask 0x8c48(GFP_NOFS|__GFP_MOVABLE|__GFP_NOFAIL), pid 19646, tgid 19643 (syz.2.5845), ts 762916164663 [ 762.918125][ T134] post_alloc_hook+0x1f9/0x250 [ 762.918215][ T134] get_page_from_freelist+0x2209/0x2280 [ 762.918334][ T134] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 762.918398][ T134] __alloc_pages_noprof+0x10/0x100 [ 762.918506][ T134] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 762.941461][ T134] btrfs_init_eb_prealloc+0x37d/0x7c0 [ 762.941505][ T134] alloc_extent_buffer+0x1782/0x29c0 [ 762.941539][ T134] read_tree_root_path+0x2de/0xb40 [ 762.943021][ T134] load_global_roots_objectid+0x441/0xbc0 [ 762.943054][ T134] init_tree_roots+0xd22/0x29b0 [ 762.943080][ T134] open_ctree+0x1de4/0x4190 [ 762.943105][ T134] btrfs_get_tree+0x1084/0x1980 [ 762.943126][ T134] vfs_get_tree+0x92/0x2a0 [ 762.943181][ T134] do_new_mount+0x319/0xdc0 [ 762.943211][ T134] __se_sys_mount+0x31d/0x420 [ 762.943241][ T134] do_syscall_64+0x166/0x520 [ 762.943270][ T134] page last free pid 19633 tgid 19632 ts 762876020397 stack trace: [ 762.943292][ T134] free_unref_folios+0xdc2/0x14e0 [ 762.943335][ T134] folios_put_refs+0x9e9/0xb30 [ 762.943380][ T134] free_pages_and_swap_cache+0x41e/0x490 [ 762.943412][ T134] tlb_flush_mmu+0x6d3/0xa30 [ 762.943432][ T134] __zap_vma_range+0x418d/0x4f80 [ 762.943455][ T134] unmap_vmas+0x390/0x550 [ 762.943498][ T134] exit_mmap+0x293/0x9f0 [ 762.943528][ T134] __mmput+0x118/0x420 [ 762.943551][ T134] exit_mm+0x221/0x2d0 [ 762.943570][ T134] do_exit+0x6cd/0x2360 [ 762.943589][ T134] do_group_exit+0x22d/0x2f0 [ 762.943609][ T134] get_signal+0x121b/0x12c0 [ 762.943657][ T134] arch_do_signal_or_restart+0xbb/0x860 [ 762.943687][ T134] exit_to_user_mode_loop+0x10e/0x770 [ 762.943707][ T134] do_syscall_64+0x328/0x520 [ 762.943732][ T134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.943814][ T134] BTRFS critical (device loop2 state ES): corrupt leaf: root=2 block=5337088 slot=0, invalid flag for leaf, WRITTEN not set [ 762.943847][ T134] BTRFS error (device loop2 state ES): read time tree block corruption detected on logical 5337088 mirror 1 [ 762.948920][T19646] BTRFS error (device loop2 state ES): failed to load root extent [ 763.045140][ T30] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 1.00 [ 763.102224][T19646] BTRFS error (device loop2 state ES): open_ctree failed: -EIO [ 763.122543][ T30] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 763.122577][ T30] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 763.185915][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.185946][ T30] usb 4-1: Product: syz [ 763.185963][ T30] usb 4-1: Manufacturer: syz [ 763.185981][ T30] usb 4-1: SerialNumber: syz [ 763.350779][ T5733] usb 1-1: unit 5 not found! [ 763.350844][ T5733] usb 1-1: unit 0 not found! [ 763.383902][ T30] ums_eneub6250 4-1:1.0: USB Mass Storage device detected [ 763.415396][ T30] scsi host1: usb-storage 4-1:1.0 [ 763.494360][ T5733] usb 1-1: USB disconnect, device number 59 [ 763.657903][ T30] ums_eneub6250 4-1:1.0: probe with driver ums_eneub6250 failed with error 3 [ 763.669746][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 763.669803][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 763.699869][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 763.779668][ T30] usb 4-1: USB disconnect, device number 63 [ 763.989463][ T8843] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 764.149988][ T8843] usb 5-1: Using ep0 maxpacket: 32 [ 764.164961][ T8843] usb 5-1: unable to get BOS descriptor or descriptor too short [ 764.165046][ T8843] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 764.177111][ T8843] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 764.177196][ T8843] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 764.177268][ T8843] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 764.177347][ T8843] usb 5-1: config 128 has no interface number 0 [ 764.177456][ T8843] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 764.177536][ T8843] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 764.177599][ T8843] usb 5-1: config 128 interface 127 has no altsetting 0 [ 764.251834][ T8843] usb 5-1: string descriptor 0 read error: -22 [ 764.252167][ T8843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.280368][T19696] loop1: detected capacity change from 0 to 164 [ 764.598796][ T8843] usb 5-1: USB disconnect, device number 44 [ 764.642511][ T5719] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 764.808379][ T5719] usb 1-1: unable to get BOS descriptor or descriptor too short [ 764.808449][ T5719] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 764.831348][ T5719] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 68, changing to 10 [ 764.848255][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.848297][ T5719] usb 1-1: Product: syz [ 764.848326][ T5719] usb 1-1: Manufacturer: syz [ 764.848344][ T5719] usb 1-1: SerialNumber: syz [ 764.943784][ T5733] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 765.104685][ T5733] usb 4-1: unable to get BOS descriptor or descriptor too short [ 765.104757][ T5733] usb 4-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=ea.e7 [ 765.106303][ T5733] usb 4-1: config 3 has an invalid interface number: 73 but max is 1 [ 765.106337][ T5733] usb 4-1: config 3 has no interface number 1 [ 765.106395][ T5733] usb 4-1: config 3 interface 73 altsetting 14 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 765.106429][ T5733] usb 4-1: config 3 interface 0 has no altsetting 0 [ 765.106462][ T5733] usb 4-1: config 3 interface 73 has no altsetting 0 [ 765.121691][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.121768][ T5733] usb 4-1: Product: syz [ 765.121817][ T5733] usb 4-1: Manufacturer: syz [ 765.121860][ T5733] usb 4-1: SerialNumber: syz [ 765.206707][ T5719] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 765.304721][ T5719] usb 1-1: USB disconnect, device number 60 [ 765.329007][ T8843] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 765.444365][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 765.473143][ T5733] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 765.473323][ T5733] dvb_usb_af9035 4-1:3.0: probe with driver dvb_usb_af9035 failed with error -22 [ 765.500231][ T8843] usb 3-1: Using ep0 maxpacket: 8 [ 765.503097][ T8843] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 765.515077][ T8843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 765.515133][ T8843] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 765.515179][ T8843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 765.551689][ T8843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.551758][ T8843] usb 3-1: Product: syz [ 765.552996][ T8843] usb 3-1: Manufacturer: syz [ 765.553052][ T8843] usb 3-1: SerialNumber: syz [ 765.595913][ T8843] usb 3-1: config 0 descriptor?? [ 765.642610][ T5733] usb 4-1: USB disconnect, device number 64 [ 765.667132][ T8843] radioshark2 3-1:0.0: Invalid radioSHARK2 device [ 765.667190][ T8843] radioshark2 3-1:0.0: probe with driver radioshark2 failed with error -22 [ 765.675126][ T8843] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 765.801639][T19733] loop4: detected capacity change from 0 to 512 [ 765.809281][T19733] journal_path: Lookup failure for './file1' [ 765.815580][T19733] EXT4-fs: error: could not find journal device path [ 765.883117][ T8843] usb 3-1: USB disconnect, device number 41 [ 766.208997][T19745] loop4: detected capacity change from 0 to 8 [ 766.218645][T19745] unable to read inode lookup table [ 766.257765][T19747] CIFS: VFS: UNC: path must begin with // or \\ [ 766.265568][T19747] Malformed UNC in devname [ 766.265568][T19747] [ 766.273340][T19747] CIFS: VFS: Malformed UNC in devname [ 766.284324][ T5733] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 766.446757][T19753] loop4: detected capacity change from 0 to 8 [ 766.453457][ T5733] usb 1-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 766.455254][ T5733] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 766.455420][ T5733] usb 1-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 766.464844][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.464923][ T5733] usb 1-1: Product: syz [ 766.464973][ T5733] usb 1-1: Manufacturer: syz [ 766.465017][ T5733] usb 1-1: SerialNumber: syz [ 766.475043][ T5719] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 766.524935][ T5733] usb-storage 1-1:1.0: USB Mass Storage device detected [ 766.539948][T19753] SQUASHFS error: xz decompression failed, data probably corrupt [ 766.549028][T19753] SQUASHFS error: Failed to read block 0x108: -5 [ 766.549077][T19753] SQUASHFS error: Unable to read metadata cache entry [106] [ 766.549098][T19753] SQUASHFS error: Unable to read inode 0x11f [ 766.579434][ T5733] scsi host1: usb-storage 1-1:1.0 [ 766.675735][ T5719] usb 4-1: Using ep0 maxpacket: 16 [ 766.681964][ T5719] usb 4-1: New USB device found, idVendor=0421, idProduct=81d4, bcdDevice=da.a1 [ 766.690989][T19751] loop1: detected capacity change from 0 to 4096 [ 766.701175][ T5719] usb 4-1: config 64 has an invalid interface number: 210 but max is 0 [ 766.710921][ T5719] usb 4-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 766.722207][ T5719] usb 4-1: config 64 has no interface number 0 [ 766.728566][ T5719] usb 4-1: config 64 interface 210 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 766.742002][ T5719] usb 4-1: config 64 interface 210 has no altsetting 0 [ 766.747762][T19751] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 766.764259][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.764303][ T5719] usb 4-1: Product: syz [ 766.764338][ T5719] usb 4-1: Manufacturer: syz [ 766.764360][ T5719] usb 4-1: SerialNumber: syz [ 766.842831][ T8843] usb 1-1: USB disconnect, device number 61 [ 766.902496][T19751] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 767.066857][T19766] loop2: detected capacity change from 0 to 64 [ 767.085535][ T5719] rndis_host 4-1:64.210: ACM capabilities 01, not really RNDIS? [ 767.101589][ T5719] usb 4-1: USB disconnect, device number 65 [ 767.140189][T19766] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 767.140275][T19766] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 767.182834][T19766] hfs: get root inode failed [ 767.270647][T19770] 9pnet_virtio: no channels available for device 127.0.0.1 [ 767.351023][T19774] Option 'dnserror' to dns_resolver key: bad/missing value [ 767.660561][ T5753] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 767.821728][ T5753] usb 2-1: Using ep0 maxpacket: 8 [ 767.829120][ T5753] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 767.842534][ T5753] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.842604][ T5753] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 767.842659][ T5753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 767.842694][ T5753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 767.842729][ T5753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 767.842760][ T5753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 767.842787][ T5753] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 767.928074][ T5753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.928382][ T5753] usb 2-1: Product: syz [ 767.928424][ T5753] usb 2-1: Manufacturer: syz [ 767.928446][ T5753] usb 2-1: SerialNumber: syz [ 767.956233][ T5753] usb 2-1: config 0 descriptor?? [ 767.965162][T19776] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 767.977445][ T5753] ati_remote 2-1:0.0: Initializing ati_remote hardware failed. [ 767.985571][ T5753] ati_remote 2-1:0.0: probe with driver ati_remote failed with error -5 [ 768.258500][ T8843] usb 2-1: USB disconnect, device number 41 [ 768.484359][ T5753] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 768.644986][ T5733] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 768.656529][ T5753] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 768.669398][ T5753] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.669446][ T5753] usb 5-1: Product: syz [ 768.669491][ T5753] usb 5-1: Manufacturer: syz [ 768.669513][ T5753] usb 5-1: SerialNumber: syz [ 768.689130][T19822] loop0: detected capacity change from 0 to 4096 [ 768.705050][T19822] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 768.716001][ T5753] usb 5-1: config 0 descriptor?? [ 768.724279][ T5753] ch341 5-1:0.0: ch341-uart converter detected [ 768.782728][T19822] ntfs3(loop0): Failed to load $Extend (-22). [ 768.782782][T19822] ntfs3(loop0): Failed to initialize $Extend. [ 768.806388][ T5733] usb 4-1: Using ep0 maxpacket: 16 [ 768.812719][ T5733] usb 4-1: unable to get BOS descriptor or descriptor too short [ 768.812801][ T5733] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=7d.6f [ 768.827364][ T5733] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 768.845660][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.846908][ T5733] usb 4-1: Product: syz [ 768.846947][ T5733] usb 4-1: Manufacturer: syz [ 768.847004][ T5733] usb 4-1: SerialNumber: syz [ 768.958408][ T5753] usb 5-1: failed to receive control message: -71 [ 768.958489][ T5753] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 768.975912][ T5753] usb 5-1: USB disconnect, device number 45 [ 768.984061][ T5753] ch341 5-1:0.0: device disconnected [ 769.096267][T19814] loop2: detected capacity change from 0 to 32768 [ 769.171452][T19814] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 769.187448][T19814] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 769.216617][ T5733] usb 4-1: USB disconnect, device number 66 [ 769.237855][T19814] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_check_internal_file_size, file = fs/gfs2/inode.h, line = 85 [ 769.237915][T19814] gfs2: fsid=syz:syz.s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 769.237967][T19814] gfs2: fsid=syz:syz.s: H: s:SH f:eEcH e:0 p:19814 [syz.2.5919] init_journal+0x1806/0x2390 [ 769.238019][T19814] gfs2: fsid=syz:syz.s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8389888 p:0 [ 769.238057][T19814] CPU: 0 UID: 0 PID: 19814 Comm: syz.2.5919 Not tainted syzkaller #0 PREEMPT(full) [ 769.238084][T19814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 769.238099][T19814] Call Trace: [ 769.238109][T19814] [ 769.238120][T19814] dump_stack_lvl+0xe8/0x150 [ 769.238158][T19814] gfs2_withdraw+0xc3/0x1b0 [ 769.238186][T19814] gfs2_jdesc_check+0x17d/0x2f0 [ 769.238222][T19814] check_journal_clean+0x192/0x370 [ 769.238251][T19814] ? __pfx_check_journal_clean+0x10/0x10 [ 769.238282][T19814] ? init_journal+0x1806/0x2390 [ 769.238317][T19814] ? do_raw_spin_unlock+0xf5/0x200 [ 769.238356][T19814] ? _raw_spin_unlock+0x28/0x50 [ 769.238383][T19814] ? gfs2_jdesc_find+0xab/0xc0 [ 769.238415][T19814] init_journal+0x1806/0x2390 [ 769.238454][T19814] ? init_inodes+0xdb/0x320 [ 769.238482][T19814] ? __asan_memcpy+0x40/0x70 [ 769.238504][T19814] ? __pfx_init_journal+0x10/0x10 [ 769.238529][T19814] ? vsnprintf+0xe42/0xef0 [ 769.238563][T19814] ? snprintf+0xe8/0x140 [ 769.238589][T19814] ? init_inodes+0xdb/0x320 [ 769.238626][T19814] ? __pfx_snprintf+0x10/0x10 [ 769.238651][T19814] ? gfs2_glock_nq_num+0x15f/0x1a0 [ 769.238684][T19814] init_inodes+0xdb/0x320 [ 769.238712][T19814] gfs2_fill_super+0x193f/0x20b0 [ 769.238750][T19814] ? __pfx_gfs2_fill_super+0x10/0x10 [ 769.238780][T19814] ? init_locking+0xb8/0x210 [ 769.238804][T19814] ? sb_set_blocksize+0x155/0x240 [ 769.238832][T19814] ? setup_bdev_super+0x586/0x680 [ 769.238858][T19814] get_tree_bdev_flags+0x430/0x4f0 [ 769.238882][T19814] ? __pfx_gfs2_fill_super+0x10/0x10 [ 769.238907][T19814] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 769.238942][T19814] gfs2_get_tree+0x51/0x1e0 [ 769.238970][T19814] vfs_get_tree+0x92/0x2a0 [ 769.239009][T19814] do_new_mount+0x319/0xdc0 [ 769.239050][T19814] ? __pfx_do_new_mount+0x10/0x10 [ 769.239088][T19814] ? ns_capable+0x84/0xe0 [ 769.239122][T19814] ? path_mount+0x647/0x1050 [ 769.239159][T19814] ? user_path_at+0xd4/0x160 [ 769.239198][T19814] __se_sys_mount+0x31d/0x420 [ 769.239237][T19814] ? __pfx___se_sys_mount+0x10/0x10 [ 769.239284][T19814] ? __x64_sys_mount+0x20/0xc0 [ 769.239322][T19814] do_syscall_64+0x166/0x520 [ 769.239366][T19814] ? trace_irq_disable+0x3b/0x140 [ 769.239389][T19814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.239414][T19814] ? clear_bhb_loop+0x70/0xc0 [ 769.239441][T19814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.239465][T19814] RIP: 0033:0x7ff5a659f3ca [ 769.239487][T19814] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.239509][T19814] RSP: 002b:00007ff5a7479e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 769.239535][T19814] RAX: ffffffffffffffda RBX: 00007ff5a7479ee0 RCX: 00007ff5a659f3ca [ 769.239552][T19814] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007ff5a7479ea0 [ 769.239569][T19814] RBP: 0000200000000400 R08: 00007ff5a7479ee0 R09: 0000000000200000 [ 769.239586][T19814] R10: 0000000000200000 R11: 0000000000000246 R12: 0000200000012500 [ 769.239610][T19814] R13: 00007ff5a7479ea0 R14: 00000000000125f1 R15: 0000200000000080 [ 769.239646][T19814] [ 769.373739][T19814] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 769.734060][T19833] loop1: detected capacity change from 0 to 16 [ 769.744910][T19833] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 769.753392][T19833] cramfs: bad root offset 4172 [ 769.784181][T19836] cgroup: No subsys list or none specified [ 770.004149][ T8843] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 770.164584][ T8843] usb 1-1: Using ep0 maxpacket: 8 [ 770.173502][ T8843] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 770.187990][ T8843] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 770.188039][ T8843] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.188087][ T8843] usb 1-1: config 0 has no interface number 0 [ 770.222920][ T8843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.222968][ T8843] usb 1-1: Product: syz [ 770.223014][ T8843] usb 1-1: Manufacturer: syz [ 770.223035][ T8843] usb 1-1: SerialNumber: syz [ 770.251872][ T8843] usb 1-1: config 0 descriptor?? [ 770.275295][ T8843] uvcvideo 1-1:0.31: probe with driver uvcvideo failed with error -22 [ 770.435934][T19852] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 770.445259][T19852] cramfs: wrong magic [ 770.487020][ T8843] usb 1-1: USB disconnect, device number 62 [ 770.530363][T19842] loop2: detected capacity change from 0 to 32768 [ 770.558744][T19842] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 770.619789][T19842] XFS (loop2): Ending clean mount [ 770.626318][ T5733] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 770.668209][T19842] XFS (loop2): Quotacheck needed: Please wait. [ 770.736907][ T169] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 [ 770.738177][ T169] XFS (loop2): Unmount and run xfs_repair [ 770.758005][ T169] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 770.758073][ T169] 00000000: 58 41 46 4c 00 00 00 00 c4 96 e0 5e 54 0d 4c 72 XAFL.......^T.Lr [ 770.758097][ T169] 00000010: b5 91 04 d7 9d 8b 4e eb 00 00 00 00 00 00 00 00 ......N......... [ 770.758119][ T169] 00000020: 4e 45 7d e8 ff ff ff ff 00 00 04 44 00 00 04 45 NE}........D...E [ 770.758140][ T169] 00000030: 00 00 04 46 00 00 04 47 b6 77 00 00 ff ff ff ff ...F...G.w...... [ 770.758161][ T169] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 770.758182][ T169] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 770.758203][ T169] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 770.758223][ T169] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 770.758245][ T169] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x22c/0x440" at daddr 0x3 len 1 error 74 [ 770.758515][ T169] loop2: lost filesystem error report for type 5 error -117 [ 770.858466][ T5733] usb 4-1: unable to get BOS descriptor or descriptor too short [ 770.874849][T19842] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 770.875058][T19842] loop2: lost filesystem error report for type 5 error -117 [ 770.895919][ T5733] usb 4-1: not running at top speed; connect to a high speed hub [ 770.895975][ T5733] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 770.921074][ T5733] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 770.921102][ T5733] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 770.921149][ T5733] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 770.966686][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.966735][ T5733] usb 4-1: Product: syz [ 770.966779][ T5733] usb 4-1: Manufacturer: syz [ 770.966815][ T5733] usb 4-1: SerialNumber: syz [ 771.056123][ T5617] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 771.062870][ T5617] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 771.245267][T19847] loop1: detected capacity change from 0 to 32768 [ 771.287017][ T5733] cdc_ncm 4-1:1.0: skipping garbage [ 771.287063][ T5733] cdc_ncm 4-1:1.0: invalid descriptor buffer length [ 771.287098][ T5733] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 771.287146][ T5733] cdc_ncm 4-1:1.0: bind() failure [ 771.340476][ T5733] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 771.340577][ T5733] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 771.366441][ T5733] usb 4-1: USB disconnect, device number 67 [ 771.371471][T19847] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 771.492417][ T8843] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 771.503430][T19847] XFS (loop1): invalid iclog size (4096 bytes), using lsunit (32768 bytes) [ 771.518547][T19847] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 771.560563][T19847] XFS (loop1): Starting recovery (logdev: internal) [ 771.655460][T19876] loop2: detected capacity change from 0 to 4096 [ 771.665588][ T8843] usb 5-1: not running at top speed; connect to a high speed hub [ 771.675757][ T8843] usb 5-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 771.680471][T19847] XFS (loop1): Ending recovery (logdev: internal) [ 771.693693][ T8843] usb 5-1: language id specifier not provided by device, defaulting to English [ 771.697412][T19847] XFS (loop1): Quotacheck needed: Please wait. [ 771.716932][T19876] EXT4-fs: Ignoring removed mblk_io_submit option [ 771.723626][ T8843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.723673][ T8843] usb 5-1: Product: î”ê•¢æ‡ì²½í“³ãŽ³è«¸ëš†ä™¸ [ 771.723709][ T8843] usb 5-1: SerialNumber: syz [ 771.757238][T19876] EXT4-fs (loop2): Test dummy encryption mode enabled [ 771.757292][T19876] EXT4-fs (loop2): bs(16384) > ps(4096) unsupported for encrypt [ 771.956933][T19847] XFS (loop1): Quotacheck: Done. [ 772.001077][T19883] loop2: detected capacity change from 0 to 65 [ 772.006631][T19883] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop2 [ 772.018101][ T8843] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 772.025267][ T8843] usb 5-1: MIDIStreaming interface descriptor not found [ 772.066990][T19884] loop0: detected capacity change from 0 to 128 [ 772.086887][T19884] FAT-fs (loop0): invalid media value (0x06) [ 772.086953][T19884] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 772.086993][T19884] FAT-fs (loop0): Can't find a valid FAT filesystem [ 772.165611][ T8843] usb 5-1: USB disconnect, device number 46 [ 772.189016][ T5615] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 772.263766][T19889] loop2: detected capacity change from 0 to 8 [ 772.287989][T19889] Filesystem uses "unknown" compression. This is not supported [ 772.363410][T19892] tmpfs: Bad value for 'mpol' [ 772.495315][T19897] loop0: detected capacity change from 0 to 64 [ 772.663177][ T6705] udevd[6705]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 773.102237][ T52] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 773.198990][T19893] loop3: detected capacity change from 0 to 32768 [ 773.218218][T19893] BTRFS: device fsid ed4422de-dbc1-4dc1-8d60-3583f36c24cc devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5950 (19893) [ 773.241559][T19895] loop2: detected capacity change from 0 to 32768 [ 773.249566][T19895] XFS (loop2): invalid logbufsize: 7 [not 16k,32k,64k,128k or 256k] [ 773.258022][T19893] BTRFS info (device loop3): first mount of filesystem ed4422de-dbc1-4dc1-8d60-3583f36c24cc [ 773.258071][T19893] BTRFS info (device loop3): using crc32c checksum algorithm [ 773.424985][T19893] BTRFS info (device loop3): enabling ssd optimizations [ 773.425052][T19893] BTRFS info (device loop3): turning on async discard [ 773.425091][T19893] BTRFS info (device loop3): enabling free space tree [ 773.501234][T19901] loop4: detected capacity change from 0 to 32768 [ 773.533355][T19901] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5955 (19901) [ 773.573486][ T5614] BTRFS info (device loop3): last unmount of filesystem ed4422de-dbc1-4dc1-8d60-3583f36c24cc [ 773.641067][T19901] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 773.641133][T19901] BTRFS info (device loop4): using crc32c checksum algorithm [ 773.803026][T19922] loop1: detected capacity change from 0 to 2048 [ 773.871241][T19922] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 773.909023][T19922] UDF-fs: error (device loop1): udf_read_inode: (ino 1376) failed !bh [ 773.909138][T19922] UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 773.946323][T19899] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5954 (19899) [ 773.962334][T19901] BTRFS info (device loop4): enabling ssd optimizations [ 773.962392][T19901] BTRFS info (device loop4): turning on async discard [ 773.962413][T19901] BTRFS info (device loop4): enabling free space tree [ 774.022030][T19899] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 774.022104][T19899] BTRFS info (device loop0): using sha256 checksum algorithm [ 774.213882][ T5618] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 774.230414][ T169] BTRFS warning (device loop0): checksum verify failed on logical 5312512 mirror 1 wanted 0xad3491f02143bbdffac915d60d465609ae738cf44bd4edc228323e06632ebcf6 found 0xad3491f02143bbdffac915d60d465609ae738cf44bd4edc228323e9c632ebcf6 level 0 [ 774.307823][T19899] BTRFS error (device loop0 state C): failed to load root csum [ 774.455098][T19899] BTRFS error (device loop0 state C): open_ctree failed: -EIO [ 774.490576][T19956] erofs (device loop2): mounted with root inode @ nid 36. [ 775.100841][T19971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.130052][T19979] affs: No valid root block on device loop2 [ 775.292119][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.706639][T19990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.808625][ T5753] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 775.893951][T19996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.986552][ T5753] usb 3-1: Using ep0 maxpacket: 16 [ 775.989429][ T5753] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 775.993805][ T5753] usb 3-1: config 4 has an invalid interface number: 9 but max is 0 [ 775.993905][ T5753] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 775.993968][ T5753] usb 3-1: config 4 has no interface number 0 [ 775.994070][ T5753] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 775.994139][ T5753] usb 3-1: config 4 interface 9 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 775.994216][ T5753] usb 3-1: config 4 interface 9 has no altsetting 0 [ 776.007145][ T5753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.007229][ T5753] usb 3-1: Product: syz [ 776.007272][ T5753] usb 3-1: Manufacturer: syz [ 776.007318][ T5753] usb 3-1: SerialNumber: syz [ 776.055377][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.109666][T19988] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 776.173409][T19985] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5971 (19985) [ 776.234440][ T5753] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 776.284097][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.345168][T19985] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 776.345234][T19985] BTRFS info (device loop3): using crc32c checksum algorithm [ 776.372995][ T5753] usb 3-1: USB disconnect, device number 42 [ 776.380961][ T169] usb 3-1: Failed to submit usb control message: -71 [ 776.381030][ T169] usb 3-1: unable to send the bmi data to the device: -71 [ 776.381056][ T169] usb 3-1: unable to get target info from device [ 776.381078][ T169] usb 3-1: could not get target info (-71) [ 776.381112][ T169] usb 3-1: could not probe fw (-71) [ 776.454188][T20005] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x0b1b2bd0) [ 776.454235][T20005] exFAT-fs (loop4): invalid boot region [ 776.454261][T20005] exFAT-fs (loop4): failed to recognize exfat type [ 776.626347][T19985] BTRFS info (device loop3): enabling ssd optimizations [ 776.626394][T19985] BTRFS info (device loop3): turning on async discard [ 776.626434][T19985] BTRFS info (device loop3): enabling free space tree [ 776.889048][ T5614] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 777.569918][T20007] set_capacity_and_notify: 8 callbacks suppressed [ 777.569980][T20007] loop1: detected capacity change from 0 to 32768 [ 777.593925][T20007] BTRFS: device fsid 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5976 (20007) [ 777.656531][T20007] BTRFS info (device loop1): first mount of filesystem 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 [ 777.656592][T20007] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 777.803395][T20007] BTRFS info (device loop1): enabling ssd optimizations [ 777.811377][T20007] BTRFS info (device loop1): turning on async discard [ 777.831064][T20007] BTRFS info (device loop1): enabling free space tree [ 778.027508][ T5615] BTRFS info (device loop1): last unmount of filesystem 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 [ 778.424395][T20032] loop3: detected capacity change from 0 to 32768 [ 778.440860][T20032] BTRFS: device fsid 9c2593b3-5c40-4e29-8ff3-7b58260955bc devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5982 (20032) [ 778.571257][T20032] BTRFS info (device loop3): first mount of filesystem 9c2593b3-5c40-4e29-8ff3-7b58260955bc [ 778.571323][T20032] BTRFS info (device loop3): using sha256 checksum algorithm [ 778.745753][T20032] BTRFS info (device loop3): enabling ssd optimizations [ 778.745833][T20032] BTRFS info (device loop3): turning on async discard [ 778.747050][T20032] BTRFS info (device loop3): enabling free space tree [ 778.962694][ T5614] BTRFS info (device loop3): last unmount of filesystem 9c2593b3-5c40-4e29-8ff3-7b58260955bc [ 779.253675][T20052] loop1: detected capacity change from 0 to 32768 [ 779.335145][T20052] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 779.335302][T20052] dlm: no local IP address has been set [ 779.335330][T20052] dlm: cannot start dlm midcomms -107 [ 779.335347][T20052] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 781.879914][T20077] loop4: detected capacity change from 0 to 32768 [ 781.905115][T20077] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 781.914699][T20077] dlm: no local IP address has been set [ 781.920778][T20077] dlm: cannot start dlm midcomms -107 [ 781.926925][T20077] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 783.576786][T20085] loop3: detected capacity change from 0 to 1024 [ 783.621860][T20085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.804768][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.240069][ T5733] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 784.412254][ T5733] usb 4-1: unable to get BOS descriptor or descriptor too short [ 784.420758][ T5733] usb 4-1: not running at top speed; connect to a high speed hub [ 784.420821][ T5733] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 784.441421][ T5733] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 784.441490][ T5733] usb 4-1: config 1 interface 0 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 784.441538][ T5733] usb 4-1: config 1 interface 0 has no altsetting 0 [ 784.477011][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.477057][ T5733] usb 4-1: Product: syz [ 784.477098][ T5733] usb 4-1: Manufacturer: syz [ 784.477120][ T5733] usb 4-1: SerialNumber: syz [ 784.756585][ T5733] cdc_ether 4-1:1.0: skipping garbage [ 784.765152][ T5733] cdc_ether 4-1:1.0: missing cdc header ether descriptor [ 784.788316][ T5733] usb 4-1: USB disconnect, device number 68 [ 785.190472][ T5737] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 785.353161][ T5737] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 785.365003][ T5737] usb 1-1: config 2 has an invalid interface number: 228 but max is 0 [ 785.365050][ T5737] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 785.365101][ T5737] usb 1-1: config 2 has no interface number 0 [ 785.365147][ T5737] usb 1-1: config 2 interface 228 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 785.365183][ T5737] usb 1-1: config 2 interface 228 has no altsetting 0 [ 785.418202][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.421678][ T5737] usb 1-1: Product: syz [ 785.421732][ T5737] usb 1-1: Manufacturer: syz [ 785.421756][ T5737] usb 1-1: SerialNumber: syz [ 785.595825][T20099] loop3: detected capacity change from 0 to 160 [ 785.714310][ T5737] ims_pcu 1-1:2.228: probe with driver ims_pcu failed with error -22 [ 785.731679][ T5737] usb 1-1: USB disconnect, device number 63 [ 786.211539][T20097] loop2: detected capacity change from 0 to 32768 [ 786.226441][T20097] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5996 (20097) [ 786.246444][T20097] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 786.246505][T20097] BTRFS info (device loop2): using sha256 checksum algorithm [ 786.355629][T20097] BTRFS info (device loop2): enabling ssd optimizations [ 786.355678][T20097] BTRFS info (device loop2): turning on async discard [ 786.355712][T20097] BTRFS info (device loop2): enabling free space tree [ 786.356127][T20115] loop4: detected capacity change from 0 to 512 [ 786.464831][T20115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.594494][ T5617] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 786.655941][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.673461][T20121] loop0: detected capacity change from 0 to 1024 [ 787.310786][T20101] loop3: detected capacity change from 0 to 32768 [ 787.376682][T20101] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 787.376785][T20101] dlm: no local IP address has been set [ 787.376843][T20101] dlm: cannot start dlm midcomms -107 [ 787.376886][T20101] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 787.515945][T20125] loop2: detected capacity change from 0 to 32768 [ 787.529483][T20125] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6001 (20125) [ 787.552031][T20125] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 787.562430][T20125] BTRFS info (device loop2): using sha256 checksum algorithm [ 787.703230][T20124] loop4: detected capacity change from 0 to 32768 [ 787.725421][T20124] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6002 (20124) [ 787.845990][T20125] BTRFS info (device loop2): enabling ssd optimizations [ 787.853712][T20125] BTRFS info (device loop2): turning on async discard [ 787.853740][T20125] BTRFS info (device loop2): enabling free space tree [ 787.883973][T20124] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 787.884044][T20124] BTRFS info (device loop4): using xxhash64 checksum algorithm [ 788.049683][T20124] BTRFS info (device loop4): enabling ssd optimizations [ 788.049758][T20124] BTRFS info (device loop4): turning on async discard [ 788.049778][T20124] BTRFS info (device loop4): enabling free space tree [ 788.124766][ T5617] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 788.298229][ T5618] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 788.358372][T20157] loop3: detected capacity change from 0 to 4096 [ 788.426528][T20127] loop0: detected capacity change from 0 to 32768 [ 788.462671][T20127] BTRFS: device fsid 100ef7e5-a5de-41f0-884c-a25b1c06c78a devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6003 (20127) [ 788.492824][T20127] BTRFS info (device loop0): first mount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 788.492883][T20127] BTRFS info (device loop0): using blake2b checksum algorithm [ 788.574712][T20157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 788.773915][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.794421][T20127] BTRFS info (device loop0): enabling ssd optimizations [ 788.794603][T20127] BTRFS info (device loop0): turning on async discard [ 788.794665][T20127] BTRFS info (device loop0): enabling free space tree [ 789.097319][ T5616] BTRFS info (device loop0): last unmount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 789.126187][T20184] set_capacity_and_notify: 1 callbacks suppressed [ 789.137339][T20184] loop3: detected capacity change from 0 to 512 [ 789.465156][T20190] loop4: detected capacity change from 0 to 512 [ 789.587253][T20190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 789.744733][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.784200][T20189] loop1: detected capacity change from 0 to 4096 [ 789.801086][T20189] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 790.083628][T20195] loop3: detected capacity change from 0 to 4096 [ 790.547327][T20200] loop0: detected capacity change from 0 to 8192 [ 790.666418][T20204] loop3: detected capacity change from 0 to 1024 [ 791.042336][T20206] loop0: detected capacity change from 0 to 2048 [ 791.140950][T20208] loop3: detected capacity change from 0 to 4096 [ 791.161400][T20208] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 791.646817][T20212] loop3: detected capacity change from 0 to 4096 [ 791.711326][T20213] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 791.843273][T20202] loop1: detected capacity change from 0 to 32768 [ 791.867465][T20202] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 791.881129][T20202] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 791.951822][T20202] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 791.973319][ T5733] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 791.973373][ T5733] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 792.166056][T20217] syz.3.6021: attempt to access beyond end of device [ 792.166056][T20217] loop3: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 792.181385][T20217] SQUASHFS error: Failed to read block 0x0: -5 [ 792.187737][T20217] unable to read squashfs_super_block [ 792.461797][ T5733] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 456ms [ 792.470732][T20219] syz.3.6022: attempt to access beyond end of device [ 792.470732][T20219] loop3: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 792.470802][T20219] SQUASHFS error: Failed to read block 0x0: -5 [ 792.470850][T20219] unable to read squashfs_super_block [ 792.489579][ T5733] gfs2: fsid=syz:syz.0: jid=0: Done [ 792.489753][T20202] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 792.965091][T20210] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 792.965136][T20210] CPU: 1 UID: 0 PID: 20210 Comm: syz.0.6019 Not tainted syzkaller #0 PREEMPT(full) [ 792.965164][T20210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 792.965179][T20210] Call Trace: [ 792.965189][T20210] [ 792.965199][T20210] dump_stack_lvl+0xe8/0x150 [ 792.965239][T20210] sysfs_create_dir_ns+0x271/0x2a0 [ 792.965279][T20210] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 792.965318][T20210] ? do_raw_spin_unlock+0xf5/0x200 [ 792.965355][T20210] kobject_add_internal+0x622/0xcd0 [ 792.965396][T20210] kobject_init_and_add+0x12b/0x1a0 [ 792.965436][T20210] ? __pfx_kobject_init_and_add+0x10/0x10 [ 792.965471][T20210] ? __raw_spin_lock_init+0x45/0x100 [ 792.965504][T20210] ? __init_swait_queue_head+0xa8/0x150 [ 792.965537][T20210] gfs2_sys_fs_add+0x257/0x480 [ 792.965567][T20210] ? is_dynamic_key+0x1aa/0x1c0 [ 792.965591][T20210] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 792.965632][T20210] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 792.965668][T20210] gfs2_fill_super+0x132d/0x20b0 [ 792.965706][T20210] ? __pfx_gfs2_fill_super+0x10/0x10 [ 792.965737][T20210] ? sb_set_blocksize+0x155/0x240 [ 792.965764][T20210] ? setup_bdev_super+0x586/0x680 [ 792.965790][T20210] get_tree_bdev_flags+0x430/0x4f0 [ 792.965814][T20210] ? __pfx_gfs2_fill_super+0x10/0x10 [ 792.965848][T20210] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 792.965882][T20210] gfs2_get_tree+0x51/0x1e0 [ 792.965910][T20210] vfs_get_tree+0x92/0x2a0 [ 792.965935][T20210] do_new_mount+0x319/0xdc0 [ 792.965972][T20210] ? __pfx_do_new_mount+0x10/0x10 [ 792.966006][T20210] ? ns_capable+0x84/0xe0 [ 792.966036][T20210] ? path_mount+0x647/0x1050 [ 792.966070][T20210] ? user_path_at+0xd4/0x160 [ 792.966130][T20210] __se_sys_mount+0x31d/0x420 [ 792.966169][T20210] ? __pfx___se_sys_mount+0x10/0x10 [ 792.966209][T20210] ? __x64_sys_mount+0x20/0xc0 [ 792.966243][T20210] do_syscall_64+0x166/0x520 [ 792.966273][T20210] ? trace_irq_disable+0x3b/0x140 [ 792.966296][T20210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.966320][T20210] ? clear_bhb_loop+0x70/0xc0 [ 792.966348][T20210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.966372][T20210] RIP: 0033:0x7fc33239f3ca [ 792.966394][T20210] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.966413][T20210] RSP: 002b:00007fc3331d8e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 792.966443][T20210] RAX: ffffffffffffffda RBX: 00007fc3331d8ee0 RCX: 00007fc33239f3ca [ 792.966460][T20210] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007fc3331d8ea0 [ 792.966478][T20210] RBP: 0000200000000400 R08: 00007fc3331d8ee0 R09: 0000000000210401 [ 792.966494][T20210] R10: 0000000000210401 R11: 0000000000000246 R12: 0000200000012500 [ 792.966510][T20210] R13: 00007fc3331d8ea0 R14: 00000000000125d8 R15: 0000200000000240 [ 792.966544][T20210] [ 793.091476][T20210] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 793.091543][T20210] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 793.754123][T20229] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 794.125861][T20231] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 794.146573][T20231] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 794.146629][T20231] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 794.146646][T20231] UDF-fs: Scanning with blocksize 512 failed [ 794.174827][T20231] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 794.185973][T20231] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 794.204884][T20233] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 794.579543][T20237] set_capacity_and_notify: 6 callbacks suppressed [ 794.579598][T20237] loop2: detected capacity change from 0 to 256 [ 794.598908][T20237] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 794.601742][T20237] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 794.601811][T20237] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 794.601872][T20237] UDF-fs: Scanning with blocksize 512 failed [ 794.643226][T20237] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 794.669756][T20237] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 794.815763][T20234] loop1: detected capacity change from 0 to 8192 [ 794.838920][T20234] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 795.039910][T20240] loop2: detected capacity change from 0 to 64 [ 795.218627][T20243] loop3: detected capacity change from 0 to 256 [ 795.253918][T20243] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 795.275756][T20243] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 795.275805][T20243] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 795.275822][T20243] UDF-fs: Scanning with blocksize 512 failed [ 795.314592][T20238] loop4: detected capacity change from 0 to 32768 [ 795.338973][T20243] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 795.357125][T20238] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 795.357165][T20238] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 795.390909][T20243] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 795.500365][T20238] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 795.514941][ T30] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 795.514985][ T30] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 795.781487][T20250] loop3: detected capacity change from 0 to 128 [ 796.032551][T20244] loop1: detected capacity change from 0 to 32768 [ 796.087549][T20244] (syz.1.6032,20244,1):ocfs2_check_set_options:1251 ERROR: Invalid heartbeat mount options [ 796.121514][T20244] (syz.1.6032,20244,1):ocfs2_fill_super:1185 ERROR: status = -22 [ 796.276363][ T30] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 711ms [ 796.297971][ T30] gfs2: fsid=syz:syz.0: jid=0: Done [ 796.304645][T20238] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 796.465084][T20257] loop1: detected capacity change from 0 to 2048 [ 797.064746][T20259] loop1: detected capacity change from 0 to 4096 [ 797.077686][T20259] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 797.153673][T20261] loop0: detected capacity change from 0 to 8 [ 797.727574][T20248] (syz.2.6033,20248,1):ocfs2_check_set_options:1251 ERROR: Invalid heartbeat mount options [ 797.762086][T20248] (syz.2.6033,20248,1):ocfs2_fill_super:1185 ERROR: status = -22 [ 798.443941][T20274] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 798.443987][T20274] UDF-fs: Scanning with blocksize 512 failed [ 798.505824][T20274] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 799.852726][T20282] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 799.954848][T20284] set_capacity_and_notify: 9 callbacks suppressed [ 799.959737][T20284] loop4: detected capacity change from 0 to 32768 [ 800.051926][T20284] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 800.061699][T20282] XFS (loop1): Ending clean mount [ 800.145910][T20284] XFS (loop4): Ending clean mount [ 800.228682][ T5615] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 800.300321][ T5618] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 800.555945][T20302] loop3: detected capacity change from 0 to 512 [ 800.602102][T20302] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 800.602151][T20302] UDF-fs: Scanning with blocksize 512 failed [ 800.619976][T20302] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 800.620023][T20302] UDF-fs: Scanning with blocksize 1024 failed [ 800.657595][T20302] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 800.657649][T20302] UDF-fs: Scanning with blocksize 2048 failed [ 800.684855][T20302] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 800.726241][T20302] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 801.184084][T20304] loop1: detected capacity change from 0 to 32768 [ 801.238563][T20304] loop1: p1 p9 p11 [ 802.062324][ T5903] udevd[5903]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory [ 802.074520][ T8269] udevd[8269]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 802.075386][ T5882] udevd[5882]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory [ 802.464156][T20318] loop0: detected capacity change from 0 to 256 [ 802.625618][T20308] loop3: detected capacity change from 0 to 65536 [ 802.670318][T20308] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel. [ 802.870736][T20331] loop0: detected capacity change from 0 to 128 [ 802.904339][T20331] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 802.921291][T20331] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 803.167394][T20335] CIFS: Witness protocol support is experimental [ 803.236061][T20335] CIFS: Attempting to mount //127.0.0.1/share [ 803.384461][T20335] CIFS: VFS: Error connecting to socket. Aborting operation. [ 803.385245][T20335] CIFS: VFS: cifs_mount failed w/return code = -111 [ 803.685077][T20341] loop2: detected capacity change from 0 to 256 [ 804.077377][T20347] comedi comedi1: adq12b: I/O base address or length out of range [ 804.549933][ T30] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 804.724353][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 804.728107][ T30] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 804.744145][ T30] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 804.744199][ T30] usb 3-1: config 0 has no interface number 0 [ 804.769400][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.769457][ T30] usb 3-1: Product: syz [ 804.769474][ T30] usb 3-1: Manufacturer: syz [ 804.769516][ T30] usb 3-1: SerialNumber: syz [ 804.798529][ T30] usb 3-1: config 0 descriptor?? [ 804.820079][ T30] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 805.091283][T20333] loop4: detected capacity change from 0 to 131072 [ 805.220376][T20333] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 805.265660][T20333] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 805.266662][ T30] gspca_spca1528: reg_w err -71 [ 805.291077][ T30] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 805.328819][ T30] usb 3-1: USB disconnect, device number 43 [ 806.113900][T20391] loop1: detected capacity change from 0 to 764 [ 806.155075][T20391] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 806.629860][T20375] loop3: detected capacity change from 0 to 65536 [ 806.675370][T20375] XFS (loop3): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 806.689824][ T5737] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 806.799437][T20375] XFS (loop3): Ending clean mount [ 806.852143][ T5737] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 806.865483][ T5737] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 806.865536][ T5737] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 999, setting to 64 [ 806.891059][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.904035][ T5737] usb 1-1: Product: syz [ 806.904096][ T5737] usb 1-1: Manufacturer: syz [ 806.904120][ T5737] usb 1-1: SerialNumber: syz [ 806.960843][ T5614] XFS (loop3): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 807.228367][ T5737] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 807.228495][ T5737] usb 1-1: MIDIStreaming interface descriptor not found [ 807.361228][ T5737] usb 1-1: USB disconnect, device number 64 [ 807.388248][T20422] trusted_key: encrypted_key: keylen parameter is missing [ 807.575044][ T5989] udevd[5989]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.051836][T20440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6110'. [ 808.386037][T20428] loop1: detected capacity change from 0 to 32768 [ 808.419640][T20428] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 808.472747][T20428] XFS (loop1): Ending clean mount [ 808.514578][T20463] loop0: detected capacity change from 0 to 256 [ 808.561810][ T5615] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 808.617380][T20463] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x9c8165b0, utbl_chksum : 0xe619d30d) [ 808.697521][T20468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6123'. [ 808.777682][T20463] exFAT-fs (loop0): error, data size is invalid(16781312) [ 808.806585][T20463] exFAT-fs (loop0): Filesystem has been set read-only [ 808.948570][T20478] x_tables: unsorted underflow at hook 3 [ 809.265061][T20489] loop3: detected capacity change from 0 to 1024 [ 809.832311][T20507] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 810.059837][T20518] loop1: detected capacity change from 0 to 8 [ 810.069669][T20518] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 810.095466][T20519] loop3: detected capacity change from 0 to 136 [ 810.117642][ T8269] udevd[8269]: incorrect cramfs checksum on /dev/loop1 [ 810.205529][ T5812] udevd[5812]: incorrect cramfs checksum on /dev/loop1 [ 810.484011][T20535] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 810.742369][T20546] loop1: detected capacity change from 0 to 256 [ 810.849740][T20549] comedi comedi1: Minor 2147483647 is invalid! [ 811.303236][T20568] netlink: 'syz.0.6169': attribute type 21 has an invalid length. [ 811.307856][T20566] loop2: detected capacity change from 0 to 512 [ 811.383251][T20566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.383512][T20566] ext4 filesystem being mounted at /1203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 811.455799][T20570] loop3: detected capacity change from 0 to 1024 [ 811.504310][T20570] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 811.534593][T20570] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #3: block 1: comm syz.3.6170: lblock 1 mapped to illegal pblock 1 (length 1) [ 811.534668][T20570] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 811.538080][T20570] Quota error (device loop3): write_blk: dquota write failed [ 811.538277][T20570] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 811.538438][T20570] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.6170: Failed to acquire dquot type 0 [ 811.538509][T20570] loop3: lost filesystem error report for type 5 error -117 [ 811.545255][T20570] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.6170: Freeing blocks not in datazone - block = 0, count = 4096 [ 811.545361][T20570] loop3: lost filesystem error report for type 5 error -117 [ 811.554371][T20570] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.6170: Invalid inode bitmap blk 0 in block_group 0 [ 811.554477][T20570] loop3: lost filesystem error report for type 5 error -117 [ 811.559031][ C1] EXT4-fs (loop3): error count since last fsck: 4 [ 811.559095][ C1] EXT4-fs (loop3): initial error at time 1788945799: ext4_map_blocks:832: inode 3: block 1 [ 811.559211][ C1] EXT4-fs (loop3): last error at time 1788945799: ext4_read_inode_bitmap:141 [ 811.560348][T20570] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 811.560403][T20570] loop3: lost filesystem error report for type 5 error -117 [ 811.577365][ T31] audit: type=1326 audit(1788945799.649:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20580 comm="syz.0.6174" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33239e159 code=0x7ffc0000 [ 811.577535][ T31] audit: type=1326 audit(1788945799.649:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20580 comm="syz.0.6174" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33239e159 code=0x7ffc0000 [ 811.578570][ T34] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 811.578669][ T34] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 811.660557][ T31] audit: type=1326 audit(1788945799.734:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20580 comm="syz.0.6174" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7fc33239e159 code=0x7ffc0000 [ 811.660717][ T31] audit: type=1326 audit(1788945799.734:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20580 comm="syz.0.6174" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33239e159 code=0x7ffc0000 [ 811.660839][ T31] audit: type=1326 audit(1788945799.734:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20580 comm="syz.0.6174" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33239e159 code=0x7ffc0000 [ 811.754139][ T34] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 811.754314][ T34] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 0 [ 811.754380][ T34] loop3: lost filesystem error report for type 5 error -117 [ 811.761962][T20570] EXT4-fs (loop3): 1 orphan inode deleted [ 811.839786][T20570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.894228][T20576] loop1: detected capacity change from 0 to 4096 [ 811.945760][T20583] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 812.011471][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.150138][T20585] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 812.165177][T20585] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 812.238905][T20576] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 812.250944][T20576] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12) [ 812.280420][T20576] Remounting filesystem read-only [ 812.285615][T20576] NILFS (loop1): error -5 truncating bmap (ino=12) [ 812.302567][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.326362][ T5614] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 18446744069414584321 in block_group 0 [ 812.326440][ T5614] loop3: lost filesystem error report for type 5 error -117 [ 812.385085][ T5615] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 812.589330][T20596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6179'. [ 812.700283][T20598] netlink: 'syz.0.6181': attribute type 21 has an invalid length. [ 812.709187][T20598] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6181'. [ 812.718719][T20598] netlink: 'syz.0.6181': attribute type 5 has an invalid length. [ 812.726811][T20598] netlink: 'syz.0.6181': attribute type 6 has an invalid length. [ 812.736442][T20598] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6181'. [ 812.881885][T20605] loop3: detected capacity change from 0 to 1024 [ 812.938188][T20605] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 812.975217][T20608] loop1: detected capacity change from 0 to 256 [ 813.325385][T20616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6190'. [ 813.351166][T20616] openvswitch: netlink: Message has 1 unknown bytes. [ 814.330193][T20649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6204'. [ 814.413778][T20651] loop1: detected capacity change from 0 to 256 [ 814.433679][T20651] exfat: Deprecated parameter 'utf8' [ 814.433805][T20651] exfat: Deprecated parameter 'namecase' [ 814.447989][T20651] exfat: Deprecated parameter 'namecase' [ 814.448043][T20651] exfat: Deprecated parameter 'utf8' [ 814.503372][T20651] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 814.567904][T20577] loop4: detected capacity change from 0 to 131072 [ 814.601649][T20577] XFS (loop4): Mounting V5 Filesystem 22c32dcc-57bc-4919-aeb7-102e166434d7 [ 814.620475][T20577] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop4": -EINTR [ 814.621002][T20577] XFS (loop4): log mount failed [ 814.721217][T20661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6209'. [ 815.692425][T20689] warning: `syz.1.6222' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 815.782723][T20695] overlayfs: conflicting options: userxattr,redirect_dir=on [ 816.865522][T20731] binder: 20728:20731 ioctl c0306201 2000000006c0 returned -14 [ 816.928399][ T31] audit: type=1326 audit(1788945804.649:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20732 comm="syz.3.6244" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b699e159 code=0x7ffc0000 [ 816.928486][ T31] audit: type=1326 audit(1788945804.649:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20732 comm="syz.3.6244" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b699e159 code=0x7ffc0000 [ 816.996628][ T31] audit: type=1326 audit(1788945804.714:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20732 comm="syz.3.6244" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fc0b699e159 code=0x7ffc0000 [ 816.996719][ T31] audit: type=1326 audit(1788945804.714:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20732 comm="syz.3.6244" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b699e159 code=0x7ffc0000 [ 816.996829][ T31] audit: type=1326 audit(1788945804.714:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20732 comm="syz.3.6244" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b699e159 code=0x7ffc0000 [ 817.103104][T20737] loop4: detected capacity change from 0 to 512 [ 817.262162][T20715] loop0: detected capacity change from 0 to 32768 [ 817.369107][T20715] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 817.449235][T20751] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 817.468370][T20715] XFS (loop0): Ending clean mount [ 817.589945][T20753] loop2: detected capacity change from 0 to 128 [ 817.617828][ T5616] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 817.618041][T20753] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 817.618111][T20753] hpfs: filesystem error: improperly stopped [ 817.618136][T20753] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 817.618160][T20753] hpfs: You really don't want any checks? You are crazy... [ 817.618176][T20753] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 817.618193][T20753] hpfs: code page support is disabled [ 817.627062][T20753] hpfs: hpfs_map_4sectors(): unaligned read [ 817.627289][T20753] hpfs: hpfs_map_4sectors(): unaligned read [ 817.627302][T20753] hpfs: filesystem error: unable to find root dir [ 817.898169][T20758] loop3: detected capacity change from 0 to 1024 [ 817.934637][T20758] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 817.954741][T20758] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0080] [ 817.954886][T20758] System zones: 0-1, 3-12 [ 817.992702][T20758] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #3: block 1: comm syz.3.6251: lblock 1 mapped to illegal pblock 1 (length 1) [ 818.007808][T20758] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 818.011760][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 818.011806][ C1] EXT4-fs (loop3): initial error at time 1788945805: ext4_map_blocks:832: inode 3: block 1 [ 818.011875][ C1] EXT4-fs (loop3): last error at time 1788945805: ext4_map_blocks:832: inode 3: block 1 [ 818.116628][T20758] Quota error (device loop3): write_blk: dquota write failed [ 818.116719][T20758] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 818.116922][T20758] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.6251: Failed to acquire dquot type 0 [ 818.117052][T20758] loop3: lost filesystem error report for type 5 error -117 [ 818.146645][T20758] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.6251: Freeing blocks not in datazone - block = 0, count = 4096 [ 818.146683][T20758] loop3: lost filesystem error report for type 5 error -117 [ 818.148499][T20758] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.6251: Invalid inode bitmap blk 0 in block_group 0 [ 818.148534][T20758] loop3: lost filesystem error report for type 5 error -117 [ 818.213554][ T134] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 818.213618][ T134] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 818.238564][ T134] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 818.238626][ T134] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 0 [ 818.238669][ T134] loop3: lost filesystem error report for type 5 error -117 [ 818.249532][T20758] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 818.249625][T20758] loop3: lost filesystem error report for type 5 error -117 [ 818.250727][T20758] EXT4-fs (loop3): 1 orphan inode deleted [ 818.303787][T20758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.437933][T20773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6254'. [ 818.562834][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.580273][ T5614] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 18446744069414584321 in block_group 0 [ 818.580332][ T5614] loop3: lost filesystem error report for type 5 error -117 [ 818.799212][ T31] audit: type=1326 audit(1788945806.406:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20787 comm="syz.0.6264" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33239e159 code=0x7ffc0000 [ 818.833294][ T31] audit: type=1326 audit(1788945806.406:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20787 comm="syz.0.6264" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33239e159 code=0x7ffc0000 [ 818.926421][T20790] openvswitch: netlink: Duplicate key (type 6). [ 819.144189][T20798] loop2: detected capacity change from 0 to 256 [ 819.159910][T20798] exfat: Deprecated parameter 'utf8' [ 819.165675][T20798] exfat: Deprecated parameter 'namecase' [ 819.165777][T20798] exfat: Deprecated parameter 'namecase' [ 819.165810][T20798] exfat: Deprecated parameter 'utf8' [ 819.259113][T20798] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 819.272192][T20805] netlink: 312 bytes leftover after parsing attributes in process `syz.0.6269'. [ 819.418481][T20810] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6270'. [ 819.531955][T20812] loop0: detected capacity change from 0 to 4096 [ 819.840253][T20820] Cannot find del_set index 0 as target [ 819.900735][T20823] PKCS8: Unsupported PKCS#8 version [ 819.990528][T20826] bond1: entered promiscuous mode [ 819.999788][T20826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 820.258547][T20836] ./file0: Can't lookup blockdev [ 820.716384][T20849] loop4: detected capacity change from 0 to 4096 [ 820.717488][T20849] EXT4-fs: Ignoring removed oldalloc option [ 820.717589][T20849] ext4: Bad value for 'mb_optimize_scan' [ 821.493253][T20884] program syz.1.6308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 821.891027][T20900] loop4: detected capacity change from 0 to 764 [ 821.908336][T20900] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 822.014294][T20906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6318'. [ 822.023476][T20906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 822.231357][T20915] netlink: 'syz.1.6319': attribute type 1 has an invalid length. [ 822.231400][T20915] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6319'. [ 822.550938][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 822.550985][ T31] audit: type=1326 audit(1788945809.910:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20929 comm="syz.4.6327" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b61f9e159 code=0x7ffc0000 [ 822.551042][ T31] audit: type=1326 audit(1788945809.910:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20929 comm="syz.4.6327" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b61f9e159 code=0x7ffc0000 [ 822.633167][ T31] audit: type=1326 audit(1788945809.985:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20929 comm="syz.4.6327" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b61f9e159 code=0x7ffc0000 [ 822.661278][ T31] audit: type=1326 audit(1788945809.985:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20929 comm="syz.4.6327" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b61f9e159 code=0x7ffc0000 [ 822.661357][ T31] audit: type=1326 audit(1788945810.003:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20929 comm="syz.4.6327" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f4b61f9e159 code=0x7ffc0000 [ 822.661409][ T31] audit: type=1326 audit(1788945810.003:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20929 comm="syz.4.6327" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b61f9e159 code=0x7ffc0000 [ 822.661458][ T31] audit: type=1326 audit(1788945810.003:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20929 comm="syz.4.6327" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b61f9e159 code=0x7ffc0000 [ 822.661508][ T31] audit: type=1326 audit(1788945810.013:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20929 comm="syz.4.6327" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4b61f9e159 code=0x7ffc0000 [ 822.661556][ T31] audit: type=1326 audit(1788945810.013:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20929 comm="syz.4.6327" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4b61f9e159 code=0x7ffc0000 [ 823.014307][T20934] comedi comedi1: Cannot bond this driver to itself! [ 823.252748][T20947] loop1: detected capacity change from 0 to 2048 [ 823.302168][T20953] loop2: detected capacity change from 0 to 512 [ 823.304259][T20947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 823.340459][T20953] EXT4-fs: Ignoring removed nobh option [ 823.362146][T20953] EXT4-fs error (device loop2): ext4_xattr_inode_iget:473: comm syz.2.6339: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 823.362204][T20953] loop2: lost filesystem error report for type 5 error -117 [ 823.377102][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 823.377132][ C1] EXT4-fs (loop2): initial error at time 1788945810: ext4_xattr_inode_iget:473 [ 823.377154][ C1] EXT4-fs (loop2): last error at time 1788945810: ext4_xattr_inode_iget:473 [ 823.419999][T20953] EXT4-fs (loop2): 1 orphan inode deleted [ 823.466291][T20953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.491980][T20947] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #12: comm syz.1.6346: corrupted in-inode xattr: invalid size in ea xattr [ 823.569998][T20958] loop3: detected capacity change from 0 to 8 [ 823.731036][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.736354][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 823.985689][T20969] netlink: 'syz.2.6344': attribute type 21 has an invalid length. [ 823.998588][T20969] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6344'. [ 823.998692][T20969] netlink: 'syz.2.6344': attribute type 5 has an invalid length. [ 823.998708][T20969] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6344'. [ 824.641623][T20994] loop3: detected capacity change from 0 to 1024 [ 824.662893][T20994] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 824.662952][T20994] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52238!=20869) [ 824.663054][T20994] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 824.701802][T20994] EXT4-fs (loop3): invalid journal inode [ 824.701960][T20994] EXT4-fs (loop3): can't get journal size [ 824.731167][T20994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 824.929774][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.292951][T21022] ecryptfs: Unknown parameter 'ecŒ|}«' [ 825.558424][T21035] openvswitch: netlink: IP tunnel dst address not specified [ 826.068098][T21054] loop2: detected capacity change from 0 to 8 [ 826.591394][T21072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6395'. [ 826.602323][T21034] loop4: detected capacity change from 0 to 32768 [ 826.641655][T21034] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 826.673998][T21034] XFS (loop4): Ending clean mount [ 826.855255][ T5618] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 826.963021][T21088] tmpfs: User quota block hardlimit too large. [ 827.705290][T21106] bond1: entered allmulticast mode [ 827.715273][T21106] 8021q: adding VLAN 0 to HW filter on device bond1 [ 827.730308][T21113] netlink: 'syz.2.6414': attribute type 21 has an invalid length. [ 827.730368][T21113] IPv6: NLM_F_CREATE should be specified when creating new route [ 827.731405][T21113] netlink: 'syz.2.6414': attribute type 1 has an invalid length. [ 828.380987][T21137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6425'. [ 828.883715][T21152] loop0: detected capacity change from 0 to 4096 [ 828.894449][T21152] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 828.904393][T21152] ntfs3(loop0): It is recommended to use chkdsk. [ 829.231218][T21152] ntfs3(loop0): ino=5, "/" indx_read_ra [ 829.325693][T21165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6439'. [ 829.422050][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 829.422138][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 829.616908][T21167] loop2: detected capacity change from 0 to 4096 [ 829.629913][T21167] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 829.800451][T21167] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 830.146223][T21185] faux_driver vgem: [drm] Unknown color mode 11173; guessing buffer size. [ 830.252237][ T31] audit: type=1326 audit(1788945817.105:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21190 comm="syz.1.6453" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210319e159 code=0x7ffc0000 [ 830.283820][ T31] audit: type=1326 audit(1788945817.133:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21190 comm="syz.1.6453" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210319e159 code=0x7ffc0000 [ 830.312045][ T31] audit: type=1326 audit(1788945817.161:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21190 comm="syz.1.6453" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210319e159 code=0x7ffc0000 [ 830.331009][ T31] audit: type=1326 audit(1788945817.161:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21190 comm="syz.1.6453" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210319e159 code=0x7ffc0000 [ 830.357799][ T31] audit: type=1326 audit(1788945817.190:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21190 comm="syz.1.6453" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f210319e159 code=0x7ffc0000 [ 830.357964][ T31] audit: type=1326 audit(1788945817.190:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21190 comm="syz.1.6453" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210319e159 code=0x7ffc0000 [ 830.358086][ T31] audit: type=1326 audit(1788945817.190:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21190 comm="syz.1.6453" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210319e159 code=0x7ffc0000 [ 830.383440][ T31] audit: type=1326 audit(1788945817.218:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21190 comm="syz.1.6453" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f210319e159 code=0x7ffc0000 [ 830.383605][ T31] audit: type=1326 audit(1788945817.218:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21190 comm="syz.1.6453" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f210319e159 code=0x7ffc0000 [ 830.709002][T21197] loop3: detected capacity change from 0 to 1764 [ 830.751237][T21197] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 831.191076][T21180] loop4: detected capacity change from 0 to 32768 [ 831.253565][T21180] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 831.351661][T21180] XFS (loop4): Ending clean mount [ 831.446710][T21222] loop0: detected capacity change from 0 to 64 [ 831.493313][T21222] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 831.684438][ T5618] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 831.882532][T21230] netlink: 'syz.1.6468': attribute type 3 has an invalid length. [ 831.883084][T21230] netlink: 'syz.1.6468': attribute type 3 has an invalid length. [ 832.081505][T21237] Driver unsupported XDP return value 0 on prog (id 495) dev N/A, expect packet loss! [ 832.099031][T21234] nvme nvme0: rdma_resolve_addr failed (-19). [ 832.401644][T21246] loop3: detected capacity change from 0 to 128 [ 832.832855][ T5753] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 832.996615][ T5753] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 833.025720][ T5753] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 833.025765][ T5753] usb 3-1: Product: syz [ 833.025797][ T5753] usb 3-1: Manufacturer: syz [ 833.025817][ T5753] usb 3-1: SerialNumber: syz [ 833.074387][ T5753] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 833.128148][T21276] openvswitch: netlink: IP tunnel dst address not specified [ 833.528176][ T5753] vp7045: USB control message 'in' went wrong. [ 833.528217][ T5753] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 833.547221][ T5753] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 833.569558][ T5753] usb 3-1: USB disconnect, device number 44 [ 833.692529][T21297] netlink: 'syz.4.6500': attribute type 1 has an invalid length. [ 833.692610][T21297] netlink: 'syz.4.6500': attribute type 1 has an invalid length. [ 833.799255][ T31] audit: type=1326 audit(1788945820.423:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21298 comm="syz.0.6501" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33239e159 code=0x7ffc0000 [ 833.852693][T21301] loop1: detected capacity change from 0 to 512 [ 833.903149][T21301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 833.903271][T21301] ext4 filesystem being mounted at /1308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 834.080989][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.351309][T21323] loop2: detected capacity change from 0 to 32768 [ 835.421808][T21323] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 835.527508][T21323] XFS (loop2): Ending clean mount [ 835.586874][T21323] XFS (loop2): Quotacheck needed: Please wait. [ 835.883712][T21323] XFS (loop2): Quotacheck: Done. [ 835.992188][ T5617] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 836.085022][T21369] gtp0: entered promiscuous mode [ 836.475786][T21375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 836.518729][T21350] loop0: detected capacity change from 0 to 32768 [ 836.576441][T21350] JBD2: Ignoring recovery information on journal [ 836.736041][T21350] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 836.988364][T21341] kexec: Could not allocate control_code_buffer [ 837.008416][ T5616] ocfs2: Unmounting device (7,0) on (node local) [ 837.051626][T21383] bond1: Removing last arp target with arp_interval on [ 837.302609][T21399] SET target dimension over the limit! [ 837.947415][T21423] loop2: detected capacity change from 0 to 256 [ 838.020815][T21395] loop1: detected capacity change from 0 to 32768 [ 838.160063][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 838.166385][ T31] audit: type=1800 audit(1788945824.488:64): pid=21395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6544" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 838.271742][T21430] vlan0: entered promiscuous mode [ 838.451412][T21438] loop4: detected capacity change from 0 to 128 [ 838.477176][T21438] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 838.508821][T21441] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6565'. [ 838.520497][T21438] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 838.613512][ T5753] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 838.784791][ T5753] usb 1-1: Using ep0 maxpacket: 32 [ 838.792449][ T5753] usb 1-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 838.807251][ T5753] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 838.807299][ T5753] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 838.829658][ T5753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.829699][ T5753] usb 1-1: Product: syz [ 838.829747][ T5753] usb 1-1: Manufacturer: syz [ 838.829766][ T5753] usb 1-1: SerialNumber: syz [ 838.930993][T21452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6570'. [ 838.949239][T21452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6570'. [ 838.996623][ T5719] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 839.063352][T21456] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 839.073250][T21454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6569'. [ 839.073351][T21454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6569'. [ 839.178955][ T5719] usb 4-1: Using ep0 maxpacket: 32 [ 839.186647][ T5719] usb 4-1: New USB device found, idVendor=1949, idProduct=cd89, bcdDevice=f1.db [ 839.204017][ T5719] usb 4-1: config 194 has an invalid interface number: 49 but max is 0 [ 839.204065][ T5719] usb 4-1: config 194 has no interface number 0 [ 839.204114][ T5719] usb 4-1: config 194 interface 49 has no altsetting 0 [ 839.238238][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.238289][ T5719] usb 4-1: Product: syz [ 839.238323][ T5719] usb 4-1: Manufacturer: syz [ 839.238344][ T5719] usb 4-1: SerialNumber: syz [ 839.324566][ T5753] usb 1-1: USB disconnect, device number 65 [ 839.534705][ T8269] udevd[8269]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 839.564192][ T5719] usb 4-1: USB disconnect, device number 69 [ 839.859959][T21473] loop2: detected capacity change from 0 to 8 [ 839.920586][T21473] cramfs: bad data blocksize 3959421443 [ 839.948918][T21473] cramfs: bad data blocksize 4294965915 [ 839.948972][T21473] cramfs: bad data blocksize 802397048 [ 839.977383][T21473] cramfs: bad data blocksize 4294742353 [ 840.104896][T21479] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6583'. [ 840.189532][T21473] cramfs: bad data blocksize 3367320904 [ 840.189598][T21473] cramfs: bad data blocksize 859179931 [ 840.189632][T21473] cramfs: bad data blocksize 3436389781 [ 840.189675][T21473] cramfs: bad data blocksize 4294365136 [ 840.189726][T21473] cramfs: bad data blocksize 4294967040 [ 840.189808][T21473] cramfs: bad data blocksize 3959421443 [ 840.195381][ T31] audit: type=1800 audit(1788945826.394:65): pid=21473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6578" name="file2" dev="loop2" ino=268 res=0 errno=0 [ 840.356652][T21485] loop2: detected capacity change from 0 to 256 [ 840.365785][T21487] loop3: detected capacity change from 0 to 512 [ 840.388388][T21485] exfat: Deprecated parameter 'utf8' [ 840.388566][T21485] exfat: Deprecated parameter 'namecase' [ 840.388719][T21485] exfat: Deprecated parameter 'namecase' [ 840.388883][T21485] exfat: Deprecated parameter 'utf8' [ 840.471934][T21492] AppArmor: change_hat: Invalid input 'ü' [ 840.512847][T21485] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 840.711636][T21501] loop4: detected capacity change from 0 to 256 [ 840.999323][T21511] openvswitch: netlink: Unknown key attributes 2 [ 841.434221][T21527] loop3: detected capacity change from 0 to 1024 [ 841.516303][T21527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.587048][T21540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 841.652907][T21527] EXT4-fs warning (device loop3): ext4_empty_dir:3106: inode #11: comm syz.3.6606: directory missing '..' [ 841.814107][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.823886][T21543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6612'. [ 842.002723][T21549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6614'. [ 842.113847][T21558] netlink: 'syz.2.6621': attribute type 1 has an invalid length. [ 842.123209][T21558] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.6621'. [ 843.132919][T21598] loop4: detected capacity change from 0 to 1024 [ 843.187891][T21598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 843.261550][T21598] EXT4-fs error (device loop4): ext4_get_first_dir_block:3562: inode #11: comm syz.4.6636: directory missing '..' [ 843.330357][T21598] EXT4-fs (loop4): Remounting filesystem read-only [ 843.479598][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.658035][T21650] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.698068][T21650] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.903561][ T5737] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 845.066815][ T5737] usb 2-1: Using ep0 maxpacket: 8 [ 845.070073][ T5737] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 845.077478][ T5737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 845.077578][ T5737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 845.077642][ T5737] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 845.077714][ T5737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 845.077784][ T5737] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 845.077916][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.108930][ T5737] usb 2-1: config 0 descriptor?? [ 845.118141][T21654] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 845.372323][ C0] Bluetooth: hci5: Unexpected continuation: 1 bytes [ 845.382368][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.386057][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.386240][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.386388][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.386537][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.386705][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.386855][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.387026][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.387170][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.387318][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.387494][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.387651][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.387798][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.387945][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.388099][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.388252][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.388410][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.388565][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.388721][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.388900][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.389048][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.389192][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.389439][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.389593][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.389742][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.389868][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.389926][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.389982][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.390041][T15041] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 845.502425][ T5733] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 845.638419][ T5737] usb 2-1: USB disconnect, device number 42 [ 845.646246][ T52] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 845.675209][ T5733] usb 4-1: Using ep0 maxpacket: 16 [ 845.682246][ T5733] usb 4-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=8c.00 [ 845.701481][ T5733] usb 4-1: config index 0 descriptor too short (expected 20, got 18) [ 845.701549][ T5733] usb 4-1: config 169 has an invalid interface number: 39 but max is 0 [ 845.701573][ T5733] usb 4-1: config 169 has no interface number 0 [ 845.739478][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.739536][ T5733] usb 4-1: Product: syz [ 845.739553][ T5733] usb 4-1: Manufacturer: syz [ 845.739570][ T5733] usb 4-1: SerialNumber: syz [ 845.802705][ T5733] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 845.802928][ T5733] command write [95] error -22 [ 846.038579][ T8843] usb 4-1: USB disconnect, device number 70 [ 846.568877][T21663] loop0: detected capacity change from 0 to 32768 [ 846.580295][T21663] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6666 (21663) [ 846.609548][T21663] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 846.609599][T21663] BTRFS info (device loop0): using xxhash64 checksum algorithm [ 846.860610][T21663] BTRFS info (device loop0): setting nodatasum [ 846.860670][T21663] BTRFS info (device loop0): allowing degraded mounts [ 846.860710][T21663] BTRFS info (device loop0): turning on async discard [ 846.860776][T21663] BTRFS info (device loop0): enabling free space tree [ 846.860840][T21663] BTRFS info (device loop0): force zlib compression, level 3 [ 847.017642][T21709] loop3: detected capacity change from 0 to 512 [ 847.030066][T21709] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 847.072984][T21709] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 847.091540][T21709] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.6680: bg 0: block 248: padding at end of block bitmap is not set [ 847.091608][T21709] loop3: lost filesystem error report for type 5 error -117 [ 847.097088][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 847.097162][ C0] EXT4-fs (loop3): last error at time 1788945832: ext4_validate_block_bitmap:445 [ 847.103528][T21709] Quota error (device loop3): write_blk: dquota write failed [ 847.103771][T21709] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 847.103895][T21709] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.6680: Failed to acquire dquot type 1 [ 847.103958][T21709] loop3: lost filesystem error report for type 5 error -28 [ 847.168983][T21709] EXT4-fs (loop3): 1 truncate cleaned up [ 847.198707][T21709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 847.294723][T21709] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 847.294819][T21709] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 131074 [ 847.294844][T21709] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.6680: Failed to acquire dquot type 1 [ 847.479269][ T5616] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 847.615090][T21718] sctp: [Deprecated]: syz.2.6684 (pid 21718) Use of struct sctp_assoc_value in delayed_ack socket option. [ 847.615090][T21718] Use struct sctp_sack_info instead [ 847.658702][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 847.732152][T21720] netlink: 'syz.1.6685': attribute type 2 has an invalid length. [ 848.097402][T21728] loop1: detected capacity change from 0 to 1024 [ 848.205810][T21728] [ 848.208263][T21728] ====================================================== [ 848.215331][T21728] WARNING: possible circular locking dependency detected [ 848.222415][T21728] syzkaller #0 Not tainted [ 848.226865][T21728] ------------------------------------------------------ [ 848.233919][T21728] syz.1.6688/21728 is trying to acquire lock: [ 848.240022][T21728] ffff88807d7c3940 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x391/0x1610 [ 848.250967][T21728] [ 848.250967][T21728] but task is already holding lock: [ 848.258377][T21728] ffff8880686d00f0 (&sbi->alloc_mutex){+.+.}-{4:4}, at: hfsplus_block_allocate+0xa9/0xd30 [ 848.268451][T21728] [ 848.268451][T21728] which lock already depends on the new lock. [ 848.268451][T21728] [ 848.278897][T21728] [ 848.278897][T21728] the existing dependency chain (in reverse order) is: [ 848.287948][T21728] [ 848.287948][T21728] -> #1 (&sbi->alloc_mutex){+.+.}-{4:4}: [ 848.295872][T21728] __mutex_lock+0x19c/0x15a0 [ 848.301038][T21728] hfsplus_block_allocate+0xa9/0xd30 [ 848.306894][T21728] hfsplus_file_extend+0xb77/0x1df0 [ 848.312669][T21728] hfsplus_bmap_reserve+0x170/0x590 [ 848.318435][T21728] hfsplus_create_cat+0x1ec/0x1240 [ 848.324123][T21728] hfsplus_fill_super+0x120c/0x1ab0 [ 848.329896][T21728] get_tree_bdev_flags+0x430/0x4f0 [ 848.335616][T21728] vfs_get_tree+0x92/0x2a0 [ 848.340643][T21728] do_new_mount+0x319/0xdc0 [ 848.345727][T21728] __se_sys_mount+0x31d/0x420 [ 848.350986][T21728] do_syscall_64+0x166/0x520 [ 848.356145][T21728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.362606][T21728] [ 848.362606][T21728] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}: [ 848.371733][T21728] __lock_acquire+0x15ff/0x2e50 [ 848.377151][T21728] lock_acquire+0x115/0x350 [ 848.382218][T21728] __mutex_lock+0x19c/0x15a0 [ 848.387384][T21728] hfsplus_get_block+0x391/0x1610 [ 848.392986][T21728] block_read_full_folio+0x2db/0x8d0 [ 848.398847][T21728] filemap_read_folio+0x12c/0x3a0 [ 848.404455][T21728] do_read_cache_folio+0x354/0x590 [ 848.410232][T21728] read_cache_page+0x5d/0x170 [ 848.415486][T21728] hfsplus_block_allocate+0xf7/0xd30 [ 848.421354][T21728] hfsplus_file_extend+0xb77/0x1df0 [ 848.427141][T21728] hfsplus_get_block+0x41f/0x1610 [ 848.432740][T21728] __block_write_begin_int+0x6c2/0x1900 [ 848.438859][T21728] cont_write_begin+0x71b/0xac0 [ 848.444289][T21728] hfsplus_write_begin+0x126/0x1e0 [ 848.449975][T21728] page_symlink+0x27a/0x440 [ 848.455054][T21728] hfsplus_symlink+0xd3/0x390 [ 848.460345][T21728] vfs_symlink+0x18b/0x330 [ 848.465362][T21728] filename_symlinkat+0x1cd/0x410 [ 848.470966][T21728] __se_sys_symlink+0x4d/0x2b0 [ 848.476309][T21728] do_syscall_64+0x166/0x520 [ 848.481473][T21728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.487931][T21728] [ 848.487931][T21728] other info that might help us debug this: [ 848.487931][T21728] [ 848.498197][T21728] Possible unsafe locking scenario: [ 848.498197][T21728] [ 848.505686][T21728] CPU0 CPU1 [ 848.511092][T21728] ---- ---- [ 848.516532][T21728] lock(&sbi->alloc_mutex); [ 848.521165][T21728] lock(&HFSPLUS_I(inode)->extents_lock); [ 848.529542][T21728] lock(&sbi->alloc_mutex); [ 848.536698][T21728] lock(&HFSPLUS_I(inode)->extents_lock); [ 848.542552][T21728] [ 848.542552][T21728] *** DEADLOCK *** [ 848.542552][T21728] [ 848.550731][T21728] locks held by syz.1.6688/21728: 5, last CPU#0: [ 848.557098][T21728] #0: ffff88803447a460 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 848.566408][T21728] #1: ffff88807d7c4758 (&type->i_mutex_dir_key#12/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 848.577197][T21728] #2: ffff8880686d0188 (&sbi->vh_mutex){+.+.}-{4:4}, at: hfsplus_symlink+0x81/0x390 [ 848.586770][T21728] #3: ffff88807d7c6b40 (&hip->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x21c/0x1df0 [ 848.597204][T21728] #4: ffff8880686d00f0 (&sbi->alloc_mutex){+.+.}-{4:4}, at: hfsplus_block_allocate+0xa9/0xd30 [ 848.607646][T21728] [ 848.607646][T21728] stack backtrace: [ 848.613594][T21728] CPU: 0 UID: 0 PID: 21728 Comm: syz.1.6688 Not tainted syzkaller #0 PREEMPT(full) [ 848.623017][T21728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 848.633121][T21728] Call Trace: [ 848.636440][T21728] [ 848.639412][T21728] dump_stack_lvl+0xe8/0x150 [ 848.644055][T21728] print_circular_bug+0x2e2/0x300 [ 848.649118][T21728] check_noncircular+0x12f/0x150 [ 848.654095][T21728] __lock_acquire+0x15ff/0x2e50 [ 848.658982][T21728] ? alloc_buffer_head+0x2a/0x280 [ 848.664042][T21728] ? __lock_acquire+0x6df/0x2e50 [ 848.669028][T21728] ? stack_depot_save_flags+0x33/0x7f0 [ 848.674522][T21728] lock_acquire+0x115/0x350 [ 848.679057][T21728] ? hfsplus_get_block+0x391/0x1610 [ 848.684296][T21728] __mutex_lock+0x19c/0x15a0 [ 848.688921][T21728] ? hfsplus_get_block+0x391/0x1610 [ 848.694152][T21728] ? check_path+0x21/0x40 [ 848.698504][T21728] ? check_noncircular+0xdb/0x150 [ 848.703551][T21728] ? hfsplus_get_block+0x391/0x1610 [ 848.708776][T21728] ? __pfx___mutex_lock+0x10/0x10 [ 848.713835][T21728] hfsplus_get_block+0x391/0x1610 [ 848.718890][T21728] ? __pfx_hfsplus_get_block+0x10/0x10 [ 848.724377][T21728] ? block_read_full_folio+0x610/0x8d0 [ 848.729868][T21728] block_read_full_folio+0x2db/0x8d0 [ 848.735188][T21728] ? __pfx_hfsplus_get_block+0x10/0x10 [ 848.740700][T21728] filemap_read_folio+0x12c/0x3a0 [ 848.745759][T21728] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 848.751335][T21728] ? __pfx_filemap_read_folio+0x10/0x10 [ 848.756918][T21728] do_read_cache_folio+0x354/0x590 [ 848.762061][T21728] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 848.767632][T21728] read_cache_page+0x5d/0x170 [ 848.772348][T21728] hfsplus_block_allocate+0xf7/0xd30 [ 848.777666][T21728] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 848.783845][T21728] ? arch_stack_walk+0xfb/0x150 [ 848.788722][T21728] hfsplus_file_extend+0xb77/0x1df0 [ 848.793953][T21728] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 848.799621][T21728] ? add_lock_to_list+0xc7/0x100 [ 848.804603][T21728] ? lockdep_unlock+0x5c/0xd0 [ 848.809306][T21728] ? __lock_acquire+0x14b9/0x2e50 [ 848.814366][T21728] hfsplus_get_block+0x41f/0x1610 [ 848.819432][T21728] ? __pfx_hfsplus_get_block+0x10/0x10 [ 848.824938][T21728] ? do_raw_spin_unlock+0xf5/0x200 [ 848.830086][T21728] ? _raw_spin_unlock+0x28/0x50 [ 848.834969][T21728] ? create_empty_buffers+0x460/0x520 [ 848.840380][T21728] __block_write_begin_int+0x6c2/0x1900 [ 848.845967][T21728] ? __pfx_hfsplus_get_block+0x10/0x10 [ 848.851457][T21728] ? __pfx___block_write_begin_int+0x10/0x10 [ 848.857463][T21728] cont_write_begin+0x71b/0xac0 [ 848.862350][T21728] ? __pfx_cont_write_begin+0x10/0x10 [ 848.867758][T21728] hfsplus_write_begin+0x126/0x1e0 [ 848.872902][T21728] ? __pfx_hfsplus_get_block+0x10/0x10 [ 848.878433][T21728] page_symlink+0x27a/0x440 [ 848.882967][T21728] ? __pfx_page_symlink+0x10/0x10 [ 848.888022][T21728] ? _raw_spin_unlock+0x41/0x50 [ 848.892987][T21728] hfsplus_symlink+0xd3/0x390 [ 848.897704][T21728] ? bpf_lsm_inode_symlink+0x9/0x20 [ 848.902937][T21728] vfs_symlink+0x18b/0x330 [ 848.907382][T21728] ? security_path_symlink+0xfd/0x360 [ 848.912798][T21728] filename_symlinkat+0x1cd/0x410 [ 848.917846][T21728] ? __might_fault+0xaf/0x130 [ 848.922557][T21728] ? __pfx_filename_symlinkat+0x10/0x10 [ 848.928149][T21728] ? do_getname+0x151/0x250 [ 848.932681][T21728] __se_sys_symlink+0x4d/0x2b0 [ 848.937469][T21728] do_syscall_64+0x166/0x520 [ 848.942130][T21728] ? trace_irq_disable+0x3b/0x140 [ 848.947189][T21728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.953304][T21728] ? clear_bhb_loop+0x70/0xc0 [ 848.958027][T21728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.963947][T21728] RIP: 0033:0x7f210319e159 [ 848.968381][T21728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.988009][T21728] RSP: 002b:00007f2103f8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 848.996456][T21728] RAX: ffffffffffffffda RBX: 00007f2103425fa0 RCX: 00007f210319e159 [ 849.004539][T21728] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 00002000000003c0 [ 849.012539][T21728] RBP: 00007f2103235024 R08: 0000000000000000 R09: 0000000000000000 [ 849.020531][T21728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.028523][T21728] R13: 00007f2103426038 R14: 00007f2103425fa0 R15: 00007fffccbf34a8 [ 849.036533][T21728] [ 849.082030][T21701] loop4: detected capacity change from 0 to 32768 [ 849.193837][T21701] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6679 (21701) [ 849.222887][T21701] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 849.222940][T21701] BTRFS info (device loop4): using sha256 checksum algorithm [ 849.373974][T21701] BTRFS info (device loop4): enabling ssd optimizations [ 849.381253][T21701] BTRFS info (device loop4): turning on async discard [ 849.388472][T21701] BTRFS info (device loop4): enabling free space tree [ 849.424605][ T5618] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d